last executing test programs: 2m45.3700102s ago: executing program 0 (id=293): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_TUPLE_MASTER={0x4}, @CTA_TUPLE_MASTER={0x24, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'H.245\x00'}}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x8, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20004002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) socket$l2tp6(0xa, 0x2, 0x73) clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x6a, 0x55cd, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x2, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) fsopen(&(0x7f0000000240)='jfs\x00', 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008"], 0x58}}, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x6, 0x1000, 0x6, 0x86c}}) 2m44.207857422s ago: executing program 0 (id=296): socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x925, 0x8866, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8000, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0xff, 0x8}}}}}]}}]}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getpeername$unix(r2, &(0x7f0000000300), &(0x7f0000000000)=0x6e) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x20, 0x4, 0x44, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'macvtap0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) syz_emit_ethernet(0x76, &(0x7f00000000c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @link_local, @val={@val={0x88a8, 0x2, 0x0, 0x1}, {0x8100, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "07ad00", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x2, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e520b29952fe12e"}}}}}}}, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x400448ca, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0xffffffffffffffff) ioprio_set$pid(0x1, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) 2m40.666551064s ago: executing program 0 (id=309): syz_usb_connect(0x3, 0x231, &(0x7f0000000780)={{0x12, 0x1, 0x0, 0x30, 0x5d, 0x5b, 0x10, 0xc45, 0x6260, 0x13e9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x21f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x0, 0x9, 0xd6, 0x3d, 0xbf, 0x0, [], [{{0x9, 0x5, 0x9, 0x10, 0x48, 0x0, 0x3, 0x3, [@generic={0x6, 0x6, ';J~R'}]}}, {{0x9, 0x5, 0x0, 0x8, 0x200, 0x3, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x42, 0x5, 0x3}]}}, {{0x9, 0x5, 0xd, 0xc, 0x200, 0x21, 0x9c, 0x3}}, {{0x9, 0x5, 0x4, 0x8, 0x3ff, 0x0, 0x1, 0x5, [@generic={0x2, 0x23}]}}, {{0x9, 0x5, 0xd, 0x10, 0x400, 0xe, 0x68, 0x9, [@generic={0xb2, 0x22, "c6d6d5addf327118e50101e987db69301bb72f1764ff207ec22671858d605eecc0c3c603892c1d8da8ffac76189191abea5533e2a8c7fc78a3c44b57528eec65fb4d2309fc3b2a7b199969562afafdaf6e61c0248824481efb5a507da9edf8134330e0cfc8a414d332a0dfc34efe53c96a1a9c951c3235a7eb1320b73e72161610c5df7586bec0bfd4e6ba8729dddf73097776ab226347d1d4b431f3e8377f4562f8cf3b725fcf675aedf0c1d2c99d32"}, @generic={0x84, 0xa, "830b67badcaf592d1644117a39021dfaef9710421d74b432757553f22fe2b343888803aae283023c159c2b75b701ad3a9a8a720c2405c20c73046d00cf1fd090c7bdc9897fcf085fb379dab15b808c0ad4796a339d8030b3af5ca48ef7f3aca60a12158e04ed4104b1555d92cbb05a6491a3f96ee8118f87c0ed8b379bf6a75652d4"}]}}, {{0x9, 0x5, 0xc, 0x1, 0x448, 0x1a, 0x3, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x8b}]}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0x4, 0x6, 0x2, [@generic={0x4d, 0x4, "d60d420d4363aec68fb646f0993f7449de2993484fbcdc6c10c254bd8fa7ab115b8574d30e119f2f7c6abe5a8d1a98c687abb3ddb256b0f8a39dc21c551786c7b33b70c1df430cc2247828"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xf, 0x9}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x6, 0x6, 0xe2, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x8}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x6, 0x1, 0x49, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xd, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x63, 0x4}]}}]}}]}}]}}, 0x0) (async) r0 = syz_usb_connect(0x3, 0x231, &(0x7f0000000780)={{0x12, 0x1, 0x0, 0x30, 0x5d, 0x5b, 0x10, 0xc45, 0x6260, 0x13e9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x21f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x0, 0x9, 0xd6, 0x3d, 0xbf, 0x0, [], [{{0x9, 0x5, 0x9, 0x10, 0x48, 0x0, 0x3, 0x3, [@generic={0x6, 0x6, ';J~R'}]}}, {{0x9, 0x5, 0x0, 0x8, 0x200, 0x3, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x42, 0x5, 0x3}]}}, {{0x9, 0x5, 0xd, 0xc, 0x200, 0x21, 0x9c, 0x3}}, {{0x9, 0x5, 0x4, 0x8, 0x3ff, 0x0, 0x1, 0x5, [@generic={0x2, 0x23}]}}, {{0x9, 0x5, 0xd, 0x10, 0x400, 0xe, 0x68, 0x9, [@generic={0xb2, 0x22, "c6d6d5addf327118e50101e987db69301bb72f1764ff207ec22671858d605eecc0c3c603892c1d8da8ffac76189191abea5533e2a8c7fc78a3c44b57528eec65fb4d2309fc3b2a7b199969562afafdaf6e61c0248824481efb5a507da9edf8134330e0cfc8a414d332a0dfc34efe53c96a1a9c951c3235a7eb1320b73e72161610c5df7586bec0bfd4e6ba8729dddf73097776ab226347d1d4b431f3e8377f4562f8cf3b725fcf675aedf0c1d2c99d32"}, @generic={0x84, 0xa, "830b67badcaf592d1644117a39021dfaef9710421d74b432757553f22fe2b343888803aae283023c159c2b75b701ad3a9a8a720c2405c20c73046d00cf1fd090c7bdc9897fcf085fb379dab15b808c0ad4796a339d8030b3af5ca48ef7f3aca60a12158e04ed4104b1555d92cbb05a6491a3f96ee8118f87c0ed8b379bf6a75652d4"}]}}, {{0x9, 0x5, 0xc, 0x1, 0x448, 0x1a, 0x3, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x8b}]}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0x4, 0x6, 0x2, [@generic={0x4d, 0x4, "d60d420d4363aec68fb646f0993f7449de2993484fbcdc6c10c254bd8fa7ab115b8574d30e119f2f7c6abe5a8d1a98c687abb3ddb256b0f8a39dc21c551786c7b33b70c1df430cc2247828"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xf, 0x9}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x6, 0x6, 0xe2, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x8}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x6, 0x1, 0x49, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xd, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x63, 0x4}]}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000740)={0x1c, &(0x7f0000000600)={0x0, 0x15, 0x10, "4e476e4d40b24c1b9ffbfb148cca07d5"}, 0x0, 0x0}) r1 = socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sched_setscheduler(0x0, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r5, {0xb, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10001, 0x1, 0x3, 0x8, 0xffffffc0}, 0x4, 0x1, 0x8, 0x0, 0x3, 0x0, 0x16, 0x13, 0x3, 0xca, {0x0, 0x8, 0x3, 0x5, 0x84, 0x8}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newchain={0x24, 0x64, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x10, 0x1}, {0xe, 0x9}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x44851}, 0x20040054) socket$unix(0x1, 0x1, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) socket(0x400000000010, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') (async) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r9, &(0x7f00000027c0)={0x2020}, 0x2020) (async) read$FUSE(r9, &(0x7f00000027c0)={0x2020}, 0x2020) r10 = socket(0x2b, 0x1, 0x0) r11 = syz_io_uring_setup(0x110, &(0x7f0000001280)={0x0, 0x7484, 0x0, 0x0, 0x2c4}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r12, r13, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r10}) io_uring_enter(r11, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r11, 0x18, &(0x7f0000000000)={0xfeffffff, r10, 0x23, {0x3b4, 0x6d3}, 0x6}, 0x1) syz_usb_control_io$uac1(r0, &(0x7f0000002480)={0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="400ea8000000a808bf8d2439f7bcd430666105bf62c2d47d03c46ae46456b1018dae99e44bb8684298469b452690ca243102c9de0f92a0cf84c6eabadc2c36bb013f197bb35a4c49c0d24d432dfba7b8120644686baa780b0c4f7e9aced8bdf89b1adbae6c0eb5bdf83e9b3ea3b40fb7f39cf842b8dbdad07b1a38b000c7f456f781208edc2e17fe6bbbbeb1d093943ac357f2393e2ccab1bbb957b0441290084182672406f6d8dd2b609d404c90"], &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x448}}}, &(0x7f0000002740)={0x44, &(0x7f00000024c0)={0x40, 0x31, 0x8d, "28be1dd9afb3f30ee7b61012494d0fefcfa069ddc79c781162176855a84c659ce8fa1fe98c32825a0666701818e81d2b9974ff83a7ae1399634e81d85b0f61ebf0799f0fcdc42c72b63e866a1de809a5deaee390f65fce31cd2d336d667620ff31b5aa495492c2541086bc9171835c2abf12f16220deb7c7e5a04e52c302a999a3e57089b84932d93791ff8b5f"}, &(0x7f0000002580)={0x0, 0xa, 0x1, 0x7f}, &(0x7f00000025c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000002600)={0x20, 0x81, 0x3, "e00640"}, &(0x7f0000002640)={0x20, 0x82, 0x3, "dbd6be"}, &(0x7f0000002680)={0x20, 0x83, 0x3, "c0120e"}, &(0x7f00000026c0)={0x20, 0x84, 0x2, "ab8a"}, &(0x7f0000002700)={0x20, 0x85, 0x3, 'G!G'}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 2m38.452954644s ago: executing program 0 (id=321): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x2, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @null, @bcast, @bcast, @default, @bcast]}) 2m37.491259227s ago: executing program 0 (id=326): creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000200)=[{&(0x7f0000000340)="1f22", 0x2}], 0x1, 0x8, 0x7, 0x17) (fail_nth: 3) 2m37.122506139s ago: executing program 0 (id=328): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bf"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') write$cgroup_pid(r1, &(0x7f00000000c0)=0xffffffffffffffff, 0x3) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x8002, 0x0) r2 = syz_io_uring_setup(0x496, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8002, 0x18c}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3d, 0x2000, @fd_index=0x9, 0x8, 0x0, 0x0, 0x3, 0x1}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpid() r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r8, &(0x7f0000000040)=ANY=[], 0x6) listen(r5, 0x0) gettid() r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) writev(r9, 0x0, 0x0) close(0x3) 2m21.943486218s ago: executing program 32 (id=328): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bf"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') write$cgroup_pid(r1, &(0x7f00000000c0)=0xffffffffffffffff, 0x3) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x8002, 0x0) r2 = syz_io_uring_setup(0x496, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8002, 0x18c}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3d, 0x2000, @fd_index=0x9, 0x8, 0x0, 0x0, 0x3, 0x1}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpid() r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r8, &(0x7f0000000040)=ANY=[], 0x6) listen(r5, 0x0) gettid() r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) writev(r9, 0x0, 0x0) close(0x3) 9.788116369s ago: executing program 5 (id=897): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x2) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendto$inet6(r3, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000080), 0x4) 9.786717859s ago: executing program 4 (id=898): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x14) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0xe) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000034000)=""/102392, 0x18ff8) r3 = socket(0x10, 0x803, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r5, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1", 0xbd}, {&(0x7f00000002c0)="9c811ff500139d7d", 0x8}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000007c0)="353a35d6094e4ee7d764b6993f65136c5d6b84d9b1324a0b25e094700c9a66f9181738098f32e3e48859c3878d53a9752474da0d6af299d849d48f2fa2c8c807d7a1521da940585790ff1e6f9da83e32b751d1af9cfac640c1361f5ae8b99c187dafe9ea854120f6eaab11e7fdeb3f2152ebdbc21520ca01f64bb821576deef4ed6696cdddc1768b5b4fbd68a687cb6ba52ecf5cc6f8f05062f26de19d6aaaeb6cbca00e46685f77d2b3e8dd9d0d099e799cd5a76c67ab283f790366f7f744508edc9e48fa101b89215bd330c4e706c1f09d781a5a50aef5e424a7a88b3241a338ca7411cda28aa167b5628b79e8a7d588efb69636181b9c54f6d296386c95f8a08e27d5792dcb20fa3b5b4f60c71f310b31bb1ab4a825c2dc10fac150a17d92bb51849d9eea53c78d427d8d1036dc906084046fcae09499c220ef50c2c7c475f392bc288eb5efb8032d1ade92e88e50a05a95dd5c6cbbdfb086fa53bca14d40c8c3f7149b39b16b7c7370978389366174db5fbc99dbe958f8c1690cd695dfbe6c384162a412c8d3cfd7cf223f9df4c67b92514111891f53d4e19826797302e1a87e7a627c52740bb3bd311771a68d349c0a68ef6f2a765f8220323add67b2b6695ca41adcda387a4264bcd94c8578a9ccca3b55ebcda45369b56068cfeec34abc2cbd94b9b12d057fa9d4328d57073f40e5ae64443e4a10ed400575bbd1168a170a0134b9ad28735dbd9603a9e417cce864f2141a92f57e1fdfcff4776f94a794d6db8d3e9e0ecc783956c7ab15a8d5639d3df1ac9da6057af913a563bd55b657f37cbf4cae2919aea6ff8a7490b4c036361b8866cc062bbad019f43d02b0c38bd6309f2baa53924466203ab8d00daaac4c9da846e645d64c10e47c32e9824e79ade4eeee7cbf71b1bb48f760800b04334745ab553dea12a85f0671eb07a4cc67ceaffa8269e0b052f25136cfb8a6b9327a2d165c42933642d3171ad00ebf0be485f5ed319021600a94072f251c8905a2451eba3ba7db2ec5fb8613463a796610629719166259ffa3261e06f09b5a69798b88848da9028ff7ed8a", 0x2fb}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r5, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 8.714276076s ago: executing program 4 (id=900): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x14) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0xe) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000034000)=""/102392, 0x18ff8) socket(0x10, 0x803, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r4, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1", 0xbd}, {&(0x7f00000002c0)="9c811ff500139d7d", 0x8}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000007c0)="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", 0x2fb}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r4, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 7.707913098s ago: executing program 2 (id=903): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x302) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x302) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @dev}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @dev}) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) (async) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) (async) r6 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) timerfd_create(0x9, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') tkill(r5, 0xb) getgroups(0xfffffffffffffdb2, 0xfffffffffffffffe) (async) getgroups(0xfffffffffffffdb2, 0xfffffffffffffffe) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000065090100000000006600000006000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b7030000000000005600000040420f002c93000000000000b5060000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r8, 0x838, 0xb757, 0x26, &(0x7f0000000180)={[0xffffffffffffff04]}, 0x8) r9 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\/A\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) preadv2(r2, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/93, 0x5d}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000380)=""/167, 0xa7}, {&(0x7f0000000440)=""/166, 0xa6}, {&(0x7f0000000500)=""/109, 0x6d}], 0x5, 0x5, 0x2, 0x4) bind$netrom(r8, 0x0, 0x0) (async) bind$netrom(r8, 0x0, 0x0) 7.382073471s ago: executing program 2 (id=904): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) flistxattr(r2, &(0x7f0000000180), 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) unshare(0x400) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000180)={0x1, 0x81, 0x2, 0x2, 0x7, 0x80, 0x5, 0x6, 0x4, 0x6, 0x9, 0x4, 0x3, 0x9}, 0xe) syz_usb_control_io$hid(r4, 0x0, 0x0) ioctl$HIDIOCSUSAGES(r3, 0x501c4814, &(0x7f0000000a40)={{0x1, 0x301, 0xd4, 0x5, 0x7}, 0x38f, [0x9, 0x2, 0x5, 0x4, 0xdb2, 0x2, 0x7fffffff, 0x1000, 0xfffffff8, 0x0, 0x6, 0x9, 0x4, 0xfffffff9, 0x4, 0x80000000, 0x8, 0x7f, 0xa, 0x1, 0x3, 0x9, 0x7, 0xfffffff8, 0xff, 0xcc800000, 0x3, 0x0, 0xfffffd49, 0x8, 0x1ff, 0x1, 0x4, 0x5, 0x3ff, 0x81, 0x6, 0x6, 0x400, 0x9, 0x2, 0x0, 0xffff, 0xffff, 0x5, 0x2, 0xc, 0x101, 0x7, 0xa, 0x7fffffff, 0xdb5, 0x0, 0xfdb, 0x10000, 0x2, 0xffffff81, 0x401, 0x8, 0x7c, 0x8, 0x1, 0x8, 0x6, 0xfff, 0xff800000, 0x69a, 0x3ff, 0x1c4, 0x0, 0x1, 0x2, 0x40, 0x4, 0x261c74f7, 0x8001, 0x4, 0x9, 0xf, 0xf, 0x8001, 0x8000, 0x3, 0x3, 0x4, 0x2, 0x2, 0x5, 0x1, 0x9, 0x5, 0x28521a23, 0x256, 0x5, 0xc58, 0x9, 0xc000000, 0x5, 0x1, 0x6, 0x5da1, 0x0, 0x7ff, 0x1, 0x6, 0x0, 0x6, 0x400, 0x60, 0x65, 0x7ff, 0x7f, 0x10, 0x7, 0x1000, 0xb1, 0x81, 0x4, 0xffff, 0x1e, 0x3, 0x1, 0x10001, 0xfffffffd, 0x10, 0x3, 0x3, 0x1, 0x2, 0x9, 0x9, 0x3c, 0x9, 0xe49, 0x8, 0x0, 0x7, 0x51, 0x100, 0x3, 0x0, 0xfffffff7, 0x939, 0x0, 0x4, 0xf, 0x7, 0x80000001, 0x4, 0x2, 0x4, 0x2, 0x7, 0xfffffffd, 0xffff, 0x6, 0x0, 0x7c4d, 0x5, 0x5, 0x7, 0x5, 0x40, 0x80, 0x9, 0x6, 0x1, 0x5, 0xb03d, 0x400, 0x7e0, 0x10, 0x5, 0x9, 0x100, 0x1, 0x100, 0x10001, 0x7, 0x4, 0x9, 0x2, 0x2, 0x800, 0x9, 0x9, 0xff, 0xf, 0x10001, 0x71e, 0x8, 0xd, 0x4de8, 0x8, 0x2, 0x9, 0x0, 0x99, 0x9, 0x3, 0x4, 0x9, 0x6, 0xba, 0x10, 0x24ce, 0x1, 0x5, 0x5, 0xb9, 0x5, 0x5, 0x3, 0xff, 0x2, 0x0, 0xe20, 0x6e, 0xfff, 0x0, 0xfffffff3, 0x200, 0x6, 0x9, 0xfffffffd, 0x4, 0x9, 0x5, 0x3, 0x6, 0x5, 0x2, 0x6, 0xe63, 0x2, 0xd, 0xff, 0x2, 0x7a, 0x1, 0x4, 0x4, 0x3, 0x9, 0x10000, 0x2, 0x8, 0x6, 0x9, 0x400, 0x401, 0x8, 0x9, 0x80, 0x5, 0x7, 0x26ee, 0x7fffffff, 0x16, 0xffffffff, 0x6, 0x0, 0x400, 0x3, 0x0, 0x4, 0x1, 0xff, 0x7, 0xe5, 0x5, 0x3, 0xfffffffe, 0xac90, 0x3, 0xfffffffe, 0x5, 0x1, 0x7ff, 0x51, 0x1, 0x9, 0x1, 0x4, 0x6, 0xe993, 0x5, 0x1, 0x796c, 0x10001, 0x401, 0x6, 0xfffffffe, 0x5, 0x0, 0x7, 0x0, 0x6, 0x8, 0x9, 0x5, 0x7, 0x1eb, 0x4, 0x2, 0x5, 0xf, 0x8000, 0xfffffffb, 0x2, 0x80, 0x2, 0x0, 0x401, 0x234b, 0x66, 0xca34, 0x9, 0x0, 0x9, 0x5, 0x7, 0x40, 0x4, 0xc, 0xb7, 0x1000, 0x101, 0x8, 0x6c9f, 0x40, 0x9, 0x2, 0x9, 0xa, 0xffff7fff, 0x10, 0xfffffff9, 0x0, 0xdf0, 0x4, 0x9, 0x0, 0x9, 0xde80, 0x80000001, 0x8, 0x4, 0x8000, 0x6cc4, 0x3, 0x10e3, 0xbf0, 0x8, 0x2, 0x10, 0x8000, 0xd26, 0x7f, 0xad6, 0xffff, 0x8, 0xffff, 0xb, 0x191, 0x7, 0x7, 0xfffffff7, 0x6, 0x75f, 0xfffffff9, 0x6, 0x4, 0x6, 0x0, 0x4, 0x1000, 0x2, 0x417, 0x41, 0x74b, 0x80000001, 0x100, 0x6, 0xfffffff7, 0x2, 0x2, 0xb, 0xc, 0x200, 0x5, 0x2, 0x8, 0x4, 0x7fffffff, 0x6, 0x9, 0x90a, 0x100, 0x5, 0xf6, 0xd, 0x8, 0xffff, 0x4, 0x1, 0x7ff, 0x80000001, 0x8, 0x10001, 0x4, 0x100002, 0x2, 0x7, 0x0, 0x8, 0x0, 0xc5, 0x10, 0x3, 0x100, 0x5, 0x7, 0x9a1d, 0xcd, 0x3, 0x2, 0x4, 0x2, 0x0, 0x7f8, 0x8000, 0x80f3, 0x179, 0x2dbf, 0x0, 0x9, 0x7ff, 0x81, 0x0, 0x80000000, 0xa4, 0x2, 0xb, 0xea2b, 0x1dc1b872, 0x8, 0x200, 0x8, 0x2, 0x8e, 0x8, 0x3ff, 0x80000000, 0x8, 0xa, 0xf7, 0x200, 0x3, 0xa, 0x1ff800, 0x5, 0x7, 0xf, 0xfffffffc, 0x3000, 0x4, 0x7, 0xd8c, 0x3, 0x2, 0xffffffff, 0x847f, 0x40, 0xffff, 0x68, 0x2, 0x7, 0x3, 0x3, 0x4, 0x8, 0x1, 0xb, 0x7aae, 0x6, 0x866, 0x8001, 0x1, 0x3, 0x1c00000, 0xf, 0x0, 0x9, 0x5, 0x3, 0x6, 0x8, 0x6, 0x7, 0x4, 0x3, 0x2af, 0x7fff, 0x3, 0x4, 0x7fffffff, 0x7, 0x6, 0x7, 0x6, 0x8001, 0x2, 0x0, 0x9, 0x8, 0x8, 0x0, 0x2, 0x200, 0x1ff, 0x9, 0x7fff, 0x81, 0x9, 0xb21, 0x5, 0x9, 0x2ad, 0x5, 0x7, 0x1b4, 0x8, 0x8, 0x2, 0x7, 0x8000, 0x5, 0x7f, 0x2, 0x7ff, 0x800, 0x7fff, 0x5460, 0x2, 0xfffffff7, 0x7fffffff, 0x1, 0x8, 0x1ff, 0x0, 0x5, 0xdeef, 0x4, 0x80000000, 0x43f, 0x9, 0x2, 0x0, 0xa4, 0xcee6, 0x6, 0x8e, 0xed1, 0x5, 0x7, 0x5, 0x2, 0x7, 0x40, 0x5, 0xf7d7, 0x3882, 0x2, 0x0, 0xffff2cbe, 0x3, 0x7fff, 0xc9, 0x2, 0x966f, 0x0, 0xd, 0x1, 0x7, 0x5, 0x8001, 0x0, 0x3, 0x1, 0x2, 0x5, 0x4, 0x8, 0xf1b0, 0x7fffffff, 0x5, 0x3, 0x200, 0x8000, 0x8, 0x7fffffff, 0x0, 0x2, 0x5, 0x3, 0x7fff, 0x6, 0x0, 0xb71, 0x10, 0x7, 0xfffffffb, 0x93, 0x8, 0x886, 0x400, 0x10000, 0x8af, 0x0, 0x6, 0x6, 0x5, 0x6, 0x200, 0x9, 0x5, 0x100, 0xa, 0x9, 0x0, 0x0, 0x8, 0x5, 0x7, 0x0, 0x7, 0x3, 0xffffb856, 0x5, 0x58, 0xda5b, 0x1, 0x8, 0x2, 0x5, 0xb9ef, 0x8, 0x5d0, 0x8001, 0x9, 0xff, 0x10000, 0x1, 0xfffffff7, 0x9, 0x3, 0x0, 0x2, 0x9, 0x7, 0x4, 0x2, 0x2, 0x7fff, 0x3, 0x5, 0x0, 0xf, 0x8, 0x2, 0x7, 0x1, 0x7, 0x9, 0x72a2, 0xfffffffd, 0x8, 0xfffffffc, 0x1000, 0xfffffff0, 0x2, 0x2, 0x168, 0xa, 0x0, 0x8d46, 0x4c, 0x35963cee, 0x40008, 0xfffffbff, 0x200, 0x10001, 0x6, 0x5, 0xb, 0x757, 0x9, 0x6a, 0x0, 0x8, 0x8edc, 0x3, 0x8, 0x1000, 0x8, 0x1, 0x3, 0x7, 0x87, 0x5, 0x1, 0xf7, 0x7, 0x9, 0x6, 0x9, 0xfffffff9, 0x4, 0xb, 0x6, 0x2, 0x0, 0x9, 0x9, 0x4, 0x3, 0x4, 0x9, 0x0, 0x81, 0x7, 0x9, 0x81, 0x5, 0x3, 0xf, 0x8, 0x5, 0x8, 0xa8a, 0x4, 0x87ec, 0x8, 0x1, 0xd, 0x1, 0x7, 0x10, 0x0, 0x6, 0x0, 0x5, 0x10, 0x815, 0x7, 0x9e5, 0x81, 0x5, 0xb, 0xc0e, 0x1, 0xf9, 0x2c, 0x17, 0xa7f6, 0xfffffffb, 0x3, 0x1000, 0x8, 0x7fffffff, 0xd9e, 0x2, 0x20ef, 0x2e8, 0x6, 0x7fffffff, 0x5, 0x8, 0x3, 0xedc, 0xff, 0xffff, 0x2, 0x0, 0xffffff32, 0x9a30, 0xaee4, 0xff, 0xb13, 0x7ff, 0x8, 0xa, 0x9, 0x37f, 0xf1, 0xff, 0x9, 0x331, 0x1, 0x9, 0x401, 0xfffffff8, 0x962, 0x9, 0x9, 0x9, 0xfffffff2, 0x9, 0x7bc, 0x2, 0x5, 0xffffffff, 0x7, 0xe4cb, 0x9, 0x25, 0x2, 0x8, 0x7fff, 0x5, 0xe, 0x7f, 0x9, 0xfffffffe, 0x1, 0x0, 0x98c00000, 0x80, 0x60, 0x81, 0x1, 0x3, 0x80, 0x8, 0x32a7, 0x3, 0x3, 0x6, 0x3, 0x9ad, 0xf0, 0x5, 0x5, 0xdf, 0x5, 0x8ec5, 0x1, 0x3ff, 0x0, 0x5, 0x3, 0x93b, 0x1, 0x2de, 0x5, 0x40, 0x9, 0xfffff314, 0x5, 0xffff, 0x7, 0xfffffffc, 0x0, 0x4, 0x2, 0x7, 0xe, 0x4, 0x9, 0x9, 0xf7, 0x6, 0x5, 0x633, 0x7ff, 0x6, 0x7, 0x3, 0x2, 0xb, 0xd4e, 0x8, 0xdb, 0x10000, 0x401, 0x1fe, 0x3, 0xa, 0x9, 0x6, 0x7, 0x7, 0x9, 0x1, 0xb5d, 0x9, 0xd0f, 0x3ff, 0x80000000, 0xffff, 0x7, 0x5, 0x5, 0x3, 0x400, 0x0, 0x7fffffff, 0x7, 0x3, 0xf9, 0x0, 0x4, 0xffff, 0x1, 0x2, 0x6, 0x0, 0x4, 0x0, 0xe, 0x1, 0x8, 0xa70990c8, 0xd9, 0x6, 0x8000, 0x100, 0x1, 0xdaed, 0xfff, 0x0, 0x200, 0x9, 0x80000000, 0x5, 0x5, 0xcef, 0xfffffff1, 0x9, 0x4, 0x1, 0x1, 0xc, 0x7, 0x101, 0x3c12, 0xfff, 0x3, 0xfffffffa, 0x8, 0x7, 0x7ff, 0x1, 0x100, 0x3, 0x995, 0x3, 0xc, 0xb21e, 0x5, 0x6, 0x1, 0x8, 0x6a, 0x9, 0x71, 0x6, 0x5, 0xbf39, 0xfffffff8, 0x7, 0x6, 0xff, 0x7, 0xb, 0x4, 0xffffff81, 0x9, 0x9, 0x400, 0xb4, 0xa1a9, 0xfd, 0x3, 0x800, 0x80000001, 0x5, 0x7, 0x1, 0x6, 0x3, 0x4, 0x48b1, 0xfab4, 0x8, 0x8, 0x4, 0x40, 0x8, 0x9, 0x5, 0x2, 0x1, 0x3, 0x1, 0xfffffff4, 0x622, 0x3, 0x10001, 0x7, 0x246, 0xfffffffc, 0x1, 0x9, 0xa17f, 0x4, 0x6a09, 0x3, 0x5, 0x1, 0x8a4, 0x0, 0x9]}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="00160400000900c161ee93c473355f5e45aae0b939900c285772a109f4517c6532b7586332582143f11adf3d25c5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000a00)={0x0, 0xf, 0x4, "f1345115"}, 0x0, 0x0}) syz_usb_control_io$printer(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000005940)={0xa, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1005c, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fffffff, @value=r3}, 0x94) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000000c0)=0x40, 0x4) 7.327117017s ago: executing program 4 (id=905): connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000040), 0x526, 0x200102) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000080)={0x6, {{0xa, 0x4e21, 0x200, @mcast2, 0x10000}}}, 0x88) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) socket$inet(0x2, 0x1, 0x100) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newtaction={0x109c, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x1088, 0x1, [@m_ct={0x34, 0x2, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast2}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_police={0x0, 0x7, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x0, 0x4, 0x6}, @TCA_POLICE_RESULT={0x0, 0x5, 0x80000000}, @TCA_POLICE_RATE64={0x0, 0x8, 0x4}]]}, {0x0, 0x6, "5ada9d5a44dcbf278a604f9dbb77480505bf067f6a5d5b6c29ffaa7f28431f5c2cd36d476799057b05cefdf3d887150b1f28ea6fffbb26b745b54129697f994d1a551ef68598124b784243cc56549aea7e3a1e9d8eb5403b9b6b0422598e105315a91bb36a3abb04b6a88a"}, {}, {0x0, 0x8, {0x3, 0x3}}}}]}]}, 0x109c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000000000)='ocfs2\x00', 0x0) r6 = gettid() r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x7) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000300)=0x4f) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) tkill(r6, 0xb) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) 7.246419664s ago: executing program 5 (id=906): syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000001c0)}], 0x1) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYRES8], 0x57) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r1, @ANYRESHEX=r0, @ANYRES64=r3, @ANYRES16=0x0]) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000002c0)="ae", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) socket$nl_generic(0x10, 0x3, 0x10) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/254) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) 6.122647984s ago: executing program 4 (id=911): socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x925, 0x8866, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8000, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0xff, 0x8}}}}}]}}]}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getpeername$unix(r2, &(0x7f0000000300), &(0x7f0000000000)=0x6e) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x20, 0x4, 0x44, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'macvtap0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x400448ca, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0xffffffffffffffff) ioprio_set$pid(0x1, 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x1f00, 0x12) 5.873759993s ago: executing program 5 (id=913): socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c0016800800", @ANYRES64=r0], 0x38}}, 0x10) (fail_nth: 4) 5.562301829s ago: executing program 5 (id=914): socket$can_raw(0x1d, 0x3, 0x1) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0xa39, &(0x7f0000000380)={0x0, 0x67b8, 0x10100, 0x3, 0x379, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ppoll(&(0x7f0000000000)=[{r5, 0x8108}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000640)=0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x5}}}}]}]}, 0x48}}, 0x20048000) syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000380), 0x3, 0xbc01) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r6, 0x80dc5521, &(0x7f0000000180)=""/135) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r5, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket(0x10, 0x803, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffbfffff, {0x0, 0x0, 0x0, r13, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {}, {0x9, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x10}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x2}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xe8b, 0x93, 0x1, 0x3}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) 5.299310456s ago: executing program 3 (id=916): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) tkill(r0, 0x12) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1000000000000003, &(0x7f0000000800)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x107fe, @empty, 0x2}, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x22}, 0x7}, r5, 0xb}}, 0x7d) 4.734194197s ago: executing program 1 (id=917): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r1, 0x5403, 0x0) r2 = dup(r1) ioctl$TIOCSTI(r2, 0x5412, 0x0) ioctl$KDMKTONE(r2, 0x4b30, 0x400) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x143002, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000140)={0x14}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40000) syz_open_dev$media(&(0x7f0000000000), 0x3, 0x20080) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() ioperm(0x1, 0x9, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffc, 0x4, &(0x7f0000006680)) syz_usbip_server_init(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) 4.395706532s ago: executing program 3 (id=918): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0x5) 3.896165386s ago: executing program 2 (id=919): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3.876032143s ago: executing program 3 (id=920): r0 = syz_open_dev$vim2m(&(0x7f0000000700), 0x5, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) 3.806128721s ago: executing program 2 (id=921): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x14) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0xe) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000034000)=""/102392, 0x18ff8) socket(0x10, 0x803, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r4, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1", 0xbd}, {&(0x7f00000002c0)="9c811ff500139d7d", 0x8}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000007c0)="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", 0x2fb}], 0x1}}], 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 3.756328199s ago: executing program 3 (id=922): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0xefd, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x7b, 0x4) recvfrom$inet(r0, 0x0, 0x0, 0x2043, 0x0, 0x0) read$hiddev(0xffffffffffffffff, &(0x7f0000000100)=""/84, 0x54) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4}, 0x18) r5 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x0, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380), 0x0, 0x300, 0x0, 0x0, 0x0}) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r6 = msgget(0x0, 0x40) msgctl$MSG_INFO(r6, 0xc, &(0x7f00000000c0)=""/173) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x7fff, 0xfffffffffffffffc}) fcntl$lock(r7, 0x25, &(0x7f0000000040)={0x2, 0x2, 0x1, 0x7}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@fallback, 0x2b, 0x1, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x800, 0x0, 0x0, 0x0, 0x0, 0x0) 3.225500729s ago: executing program 3 (id=923): r0 = syz_usb_connect(0x0, 0x125, &(0x7f00000005c0)={{0x12, 0x1, 0x141, 0xce, 0x5e, 0x3f, 0x10, 0x547, 0x7303, 0xc6ae, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x113, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xad, 0x7, 0x2, 0x45, 0xa7, 0x90, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x7f, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10, [@generic={0x49, 0xf, "204d31da053c3128299f0c02df7dd89449417a6e7c1630487804cdf2ef1684374d80e683083702ec6bfa151a6d13dd081b65878a62f0dfefe9fe920c6eb24f7db8c829901c3f32"}, @generic={0xa6, 0x8339782ca6006571, "5da582721f1e892e9c24eb12d3c862e03d59dad984090b708ce5fbf9a7a2917e60926c2dbb22733ad0fb7f5afbb1b86132bd60dd0a43a78359e0f0e2b17489eeac3e78a3ff9ea71660f4b2a787f9205123beb732fef4538b8f5c6ae5fa8f397c18a267746ea970a4e8e494d3eb96fa06789607998b4b2d0635091f176a39ca5e7e42f389a6c3343c9d7abdf2bbb102a9b4dc0e4038c4a9793541fa11a11604b8e2324b7a"}]}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000001f40)={0x0, 0x5, 0x1, "9ef763a888f5f2c1ca18368ad67031445b2f035949d889a9ac4046d3732c0a9912d3b7d6641c909c307763762881530200000000000000b56e59cc72e853a4b5d11db13a9a232eb83c45422975379f9e8443135bbcab9c5f65c1533b346dbff583145d6a866482083248909ea42c5e6f1a55c3604de90744e960aeb6d951230ae260077523cb1b66c58868220734d4e1c5d17c8c5b1ae510975a460d477f66debe1cda2d961cecea0713"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9c, 0x32, 0x3f, 0x8, 0x4a5, 0x3003, 0x3ab2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x28, 0xf0, 0xf6}}]}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f0000002000)={0x2c, 0x0, &(0x7f0000000440)={0x0, 0x3, 0xade37a02103db119, @string={0x0, 0x3, "fc43659a46eccf650c6ba4c994e66919cafd7472149482f1a2afb50a2e0196c1b7e3e5f9db12c2c2b8106b2d78df8622c0f475e1f17eb20417ba7fe6d824f6d3f96d5f4d7d8ba176d4896ee063290430c540c636fbd38f1ea5d2cbfc6fcf1f48f2a7ff92dd06e8435bd6e8b2121549894eeb420388ed536c344c97aee6557cdcd55917dca902fca83aa47f92fe24aaad73815863"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x548, &(0x7f0000000ac0)={{0x12, 0x1, 0x100, 0xfe, 0xde, 0xc2, 0x20, 0x5c8, 0x403, 0x515e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x536, 0x2, 0x3, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2c, 0x3, 0x3, 0xe, 0x1, 0x0, 0x43, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x7, 0xa}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x3, 0x80, 0xc0, "ebb3ab358b6b0aceb0"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x8001, 0xa, 0x4, "02a6f0"}, @as_header={0x7, 0x24, 0x1, 0x4, 0x7, 0x1002}]}], [{{0x9, 0x5, 0x9, 0x0, 0x400, 0x34, 0x5, 0x4, [@generic={0xa6, 0x0, "c5cd29bc95d66ac39519e436f4ddf3748801a4fd3c17ecae59f166bd8691f0e2a5fe60b9c1463e90273ba5162b445fc1a7ff29277388b7285e6f451daadbbeae8a9eac15365d59688c2ed7862a7fec08d041bd5fe980d73f5e0b5b32990304f94aa805fb8d28aad9ef396891bbacb12ded0e881d9ce4bd642c83659156cc79d6525def30617eb6e84fdc93a64da650e14cb1b2f6ba4a96ad6e2195787021052ae1334925"}, @generic={0xb, 0x10, "cec2c3fe05118938b8"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x20, 0x0, 0x40, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x1c00}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0xc3}]}}, {{0x9, 0x5, 0x2, 0x1, 0x10, 0xb8, 0x0, 0x5, [@generic={0x66, 0xa, "d275102af3b94a263a6d73345bbc88a80593c251ac7957968b1818a555d8fe239d87812b4e896b76c75861fbb9c94d1073247c5c16245ba0d7e65f2effa21dc9d7f79c9e96828a108d8b298b8b7c1f53709c7315a0a9f212342ad92a5c57ddd0e85affe4"}]}}]}}, {{0x9, 0x4, 0x10, 0x46, 0x5, 0xff, 0x1, 0x3a, 0x0, [@hid_hid={0x9, 0x21, 0x6f, 0x5, 0x1, {0x22, 0xbe3}}, @generic={0x1d, 0x7, "76663ae39f7fc32057434aa6548daee01d5685b1720d6962d14c91"}], [{{0x9, 0x5, 0x5, 0x10, 0x200, 0x9, 0x40, 0x1, [@generic={0xf6, 0x6, "7f9964ceeb7ad8f9543bd989bdc50c53952ecec338d90aef1ffb536d47a3525b82958a048a8b6f7fec660eb695f1224021b2c15b658f40417a13b1faa5efa0bdce04d7696f7c620babc552838786f533a1a3c5804c64d860aa8071ae7ce68128878b2342ea5c1fe5e3112cb40f2bc71627034ea439f1a619acfac6636d004465f47f113e60f9419cd39a76bfe67c9048110d0f35169ad3ce61ef30a35b667e41879b3d91905a280c7516529b0e3f4d14cbfd88b9d8c8d4a7d155f3b251523ffe7f9c1800d987b67932eb8374699af7b4d1787a60848ca47a5148011d3adfbd1f698dcf8473c0fa2b06478fb0bd0a4d4e60cc4ff4"}]}}, {{0x9, 0x5, 0xc, 0x1, 0x10, 0x6, 0x3, 0x1, [@generic={0x5d, 0x1, "1ec3fe66906254c23c56ec04cb969c85fcd70f00a8340b828943b0bd5dcbd61cc1dcfeabe2a7065fb605dd9da2fb0ed48f87b14d2694d3bc993e76dac45f5e4f36769d38569c489f2204d5a29382baa92ea189bfdb2172c7da9ac3"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0xfc, 0x4, 0x80, [@generic={0x44, 0xb, "4e8aecfae7fad4e4321bd74dd0ba13a3f867464d25f87a49bc01bc5740aa39c412bca8b277ecdeabfc0af81661dc71ac3635dff903712cd9128051e11c4874109d77"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x8, 0x7, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x1}, @generic={0xc0, 0x5, "4ce3c0e20fe945a286fc56a33bda822e2fe2e456a9da09a950ea360a5a51480e92663ae14d3abbf43f934386da3ae6660f48ecbce5b09fa1dd4d2e4d9289e4b113ae1bd1a4bb382070febe0f3e924ad8282fcad912df5a0dac7699047156bb93b31ec0841348681519351d5972a4ed8feb5dcae1339e38958d6d4afff2d2f814162af371e73c87f8a9879ba7233fc103b19697c0397d5c6b284f78f0963a5f07d0c8f1cd97a7f72f3d2a43e364ed242132a18bc3a4a0edd6c4201f1aaf80"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x37f, 0x7, 0xda, 0x7, [@generic={0xfe, 0x30, "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"}]}}]}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x4c, 0x8, 0x0, 0xff, 0x4}, 0x5f, &(0x7f0000000180)={0x5, 0xf, 0x5f, 0x1, [@generic={0x5a, 0x10, 0x3, "346ff83b201699aa84bd79247b6c8d3903611dca9184e579cfb6acf0b2a65e294feb2b735df164d1c994649d1d500dd714390863c62c97e3cb4c45f958410e3a30fb714b807c3f354410f3829aa3d5b6e31c6f1ea6a46c"}]}, 0x2, [{0xb6, &(0x7f0000000200)=@string={0xb6, 0x3, "9b51ceb40bafcff658a6ee5d28dcdb3ccab89d75deb2ba36b8991cd53edb691ff52ea0f2515ab6284527e1ceb78fc9f5090262632ee497ac69de9b15571e8908e75a848833f75560c98ffa129fdd9988490f4469a7496dbf0aac6d095dcb87ec42a1555a75b886f58d9a346803ca5ccadb6da42df48f2330e8c1242eaf16020592ae4b5b0e201063b72280c36b9ad431b636d9538bec3878ace0352b93654e0c810ee0793282593e9d93435b850052833d90f24d"}}, {0x45, &(0x7f0000000300)=@string={0x45, 0x3, "c95db4a184173120e82ca6583f870d8102309cf9806ebc74e72148831c91dd93582aa24a78b360fa4706b9ea89a2c0ce7971931b35abe680c7275faa993fce1b80add4"}}]}) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000001e00)=ANY=[@ANYBLOB="00140400000031924e7cb83169d972775d68980ba450b25dd24458f402c5dd07fbb1f920f04f860bced22392643843193bbba6e6de39fba549db9e82d08568dbd5a716ebb696f4453a4c887450d342779cae23a6e239582984f9e485b2c5ba997aed1a3cabb0044355bd7b21843071660a40562311fc74e1645235dab286d0c5dfb1be3bf1ecf215481e78ec974118f81ddedaaa8154cbc67e5aa80123ae9b4947125b55fc82260e9dd34e67ec4808925fc39d5d894b8ded83b5255dea1dccb812a84283ba2be2d1b8d93d25b51cb65f59ec3981636e6330d73dba8388cf1692c03ea374ddd1d4075c438eb59b2d31970d2924393246558d875f8be8ff3169b12438c2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 3.058293637s ago: executing program 1 (id=924): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$pppoe(0x18, 0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000300)=0x0) sched_setattr(r3, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0xb48, 0x9, 0x8, 0xfffffffa, 0x5}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000280), 0x1}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x364, 0xa4, 0x27c, 0xfeffffff, 0x138, 0x0, 0x320, 0x320, 0xffffffff, 0x320, 0x320, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0xffffffff, 'geneve1\x00', 'geneve0\x00', {0xff}}, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x7ffffffe, {0x12, @dev={0xac, 0x14, 0x14, 0x3f}, @loopback, @port=0x4e24, @gre_key=0x6}}}}, {{@uncond, 0x0, 0x70, 0x94, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xa4}}, {{@uncond, 0x0, 0xc0, 0xf4, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0xd, 0x0, 0x1}}]}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0xd00, {0x0, @loopback, @local, @gre_key, @gre_key}}}}, {{@ip={@private, @local, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00', {}, {0xff}, 0x84, 0x2}, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @loopback, @icmp_id=0x67, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3c0) renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000880)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4) renameat2(0xffffffffffffffff, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x2) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) sendto$packet(r6, &(0x7f0000000b80)="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", 0x100, 0x8001, 0x0, 0x0) recvmsg(r6, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000440)=""/242, 0xf2}, {&(0x7f00000022c0)=""/144, 0x90}], 0x2}, 0x40) 3.052242632s ago: executing program 4 (id=925): socket$packet(0x11, 0x2, 0x300) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0xdf2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xc, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x9, 0x71, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000100)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x1a3c65) write$dsp(r3, &(0x7f00000004c0)='\x00', 0x1) ioctl$SNDRV_PCM_IOCTL_DELAY(r4, 0x80084121, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000000002000008f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0xc, 0x3, 0x94, 0x5}}]}}]}, 0x148}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='io.stat\x00', 0x26e1, 0x0) r7 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0xf, &(0x7f00000000c0), 0x4) sendmsg$inet(r7, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x31, &(0x7f0000000640)=r6, 0x4) setsockopt$sock_attach_bpf(r7, 0x1, 0x31, &(0x7f0000000000), 0x4) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x8, "da9c1642"}]}}, 0x0}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000100088fb"], 0x0) 2.784877222s ago: executing program 2 (id=926): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x14) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0xe) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000034000)=""/102392, 0x18ff8) r3 = socket(0x10, 0x803, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r5, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1", 0xbd}, {&(0x7f00000002c0)="9c811ff500139d7d", 0x8}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000007c0)="353a35d6094e4ee7d764b6993f65136c5d6b84d9b1324a0b25e094700c9a66f9181738098f32e3e48859c3878d53a9752474da0d6af299d849d48f2fa2c8c807d7a1521da940585790ff1e6f9da83e32b751d1af9cfac640c1361f5ae8b99c187dafe9ea854120f6eaab11e7fdeb3f2152ebdbc21520ca01f64bb821576deef4ed6696cdddc1768b5b4fbd68a687cb6ba52ecf5cc6f8f05062f26de19d6aaaeb6cbca00e46685f77d2b3e8dd9d0d099e799cd5a76c67ab283f790366f7f744508edc9e48fa101b89215bd330c4e706c1f09d781a5a50aef5e424a7a88b3241a338ca7411cda28aa167b5628b79e8a7d588efb69636181b9c54f6d296386c95f8a08e27d5792dcb20fa3b5b4f60c71f310b31bb1ab4a825c2dc10fac150a17d92bb51849d9eea53c78d427d8d1036dc906084046fcae09499c220ef50c2c7c475f392bc288eb5efb8032d1ade92e88e50a05a95dd5c6cbbdfb086fa53bca14d40c8c3f7149b39b16b7c7370978389366174db5fbc99dbe958f8c1690cd695dfbe6c384162a412c8d3cfd7cf223f9df4c67b92514111891f53d4e19826797302e1a87e7a627c52740bb3bd311771a68d349c0a68ef6f2a765f8220323add67b2b6695ca41adcda387a4264bcd94c8578a9ccca3b55ebcda45369b56068cfeec34abc2cbd94b9b12d057fa9d4328d57073f40e5ae64443e4a10ed400575bbd1168a170a0134b9ad28735dbd9603a9e417cce864f2141a92f57e1fdfcff4776f94a794d6db8d3e9e0ecc783956c7ab15a8d5639d3df1ac9da6057af913a563bd55b657f37cbf4cae2919aea6ff8a7490b4c036361b8866cc062bbad019f43d02b0c38bd6309f2baa53924466203ab8d00daaac4c9da846e645d64c10e47c32e9824e79ade4eeee7cbf71b1bb48f760800b04334745ab553dea12a85f0671eb07a4cc67ceaffa8269e0b052f25136cfb8a6b9327a2d165c42933642d3171ad00ebf0be485f5ed319021600a94072f251c8905a2451eba3ba7db2ec5fb8613463a796610629719166259ffa3261e06f09b5a69798b88848da9028ff7ed8a", 0x2fb}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r5, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 2.314162456s ago: executing program 5 (id=927): socket$igmp6(0xa, 0x3, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, &(0x7f0000000080)={0xed, 0x0, 0x3}) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x6}]}}]}, 0x3c}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f000040d000/0x4000)=nil, 0x4000, 0xd, 0x11, 0xffffffffffffffff, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0x9, 0x0, 0x1, "100056f200"}) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000180), 0x4000335, 0x12102, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x80000000e) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x200) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f0000000100)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r8, 0xc02464bb, &(0x7f0000000080)={0x3, r9, 0x1fa, 0x0, 0x4, 0x800008, 0x0, 0x4, 0x4040}) r10 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r10, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, 0x0) ioctl$EVIOCGMASK(r7, 0x80104592, &(0x7f0000000300)={0x0, 0x8, &(0x7f0000000200)="952bb3e006ae9a4c"}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafc0d8c560a8447608004000000000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 1.894752561s ago: executing program 1 (id=928): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2244, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x17ef, 0x60a3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x80, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000340)={0x20, 0x22, 0x12, {0x12, 0x24, "f7803425584c93bc6200c7528c9689ee"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0xe7) 1.838092404s ago: executing program 2 (id=929): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) flistxattr(r2, &(0x7f0000000180), 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) unshare(0x400) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000180)={0x1, 0x81, 0x2, 0x2, 0x7, 0x80, 0x5, 0x6, 0x4, 0x6, 0x9, 0x4, 0x3, 0x9}, 0xe) syz_usb_control_io$hid(r5, 0x0, 0x0) ioctl$HIDIOCSUSAGES(r4, 0x501c4814, &(0x7f0000000a40)={{0x1, 0x301, 0xd4, 0x5, 0x7}, 0x38f, [0x9, 0x2, 0x5, 0x4, 0xdb2, 0x2, 0x7fffffff, 0x1000, 0xfffffff8, 0x0, 0x6, 0x9, 0x4, 0xfffffff9, 0x4, 0x80000000, 0x8, 0x7f, 0xa, 0x1, 0x3, 0x9, 0x7, 0xfffffff8, 0xff, 0xcc800000, 0x3, 0x0, 0xfffffd49, 0x8, 0x1ff, 0x1, 0x4, 0x5, 0x3ff, 0x81, 0x6, 0x6, 0x400, 0x9, 0x2, 0x0, 0xffff, 0xffff, 0x5, 0x2, 0xc, 0x101, 0x7, 0xa, 0x7fffffff, 0xdb5, 0x0, 0xfdb, 0x10000, 0x2, 0xffffff81, 0x401, 0x8, 0x7c, 0x8, 0x1, 0x8, 0x6, 0xfff, 0xff800000, 0x69a, 0x3ff, 0x1c4, 0x0, 0x1, 0x2, 0x40, 0x4, 0x261c74f7, 0x8001, 0x4, 0x9, 0xf, 0xf, 0x8001, 0x8000, 0x3, 0x3, 0x4, 0x2, 0x2, 0x5, 0x1, 0x9, 0x5, 0x28521a23, 0x256, 0x5, 0xc58, 0x9, 0xc000000, 0x5, 0x1, 0x6, 0x5da1, 0x0, 0x7ff, 0x1, 0x6, 0x0, 0x6, 0x400, 0x60, 0x65, 0x7ff, 0x7f, 0x10, 0x7, 0x1000, 0xb1, 0x81, 0x4, 0xffff, 0x1e, 0x3, 0x1, 0x10001, 0xfffffffd, 0x10, 0x3, 0x3, 0x1, 0x2, 0x9, 0x9, 0x3c, 0x9, 0xe49, 0x8, 0x0, 0x7, 0x51, 0x100, 0x3, 0x0, 0xfffffff7, 0x939, 0x0, 0x4, 0xf, 0x7, 0x80000001, 0x4, 0x2, 0x4, 0x2, 0x7, 0xfffffffd, 0xffff, 0x6, 0x0, 0x7c4d, 0x5, 0x5, 0x7, 0x5, 0x40, 0x80, 0x9, 0x6, 0x1, 0x5, 0xb03d, 0x400, 0x7e0, 0x10, 0x5, 0x9, 0x100, 0x1, 0x100, 0x10001, 0x7, 0x4, 0x9, 0x2, 0x2, 0x800, 0x9, 0x9, 0xff, 0xf, 0x10001, 0x71e, 0x8, 0xd, 0x4de8, 0x8, 0x2, 0x9, 0x0, 0x99, 0x9, 0x3, 0x4, 0x9, 0x6, 0xba, 0x10, 0x24ce, 0x1, 0x5, 0x5, 0xb9, 0x5, 0x5, 0x3, 0xff, 0x2, 0x0, 0xe20, 0x6e, 0xfff, 0x0, 0xfffffff3, 0x200, 0x6, 0x9, 0xfffffffd, 0x4, 0x9, 0x5, 0x3, 0x6, 0x5, 0x2, 0x6, 0xe63, 0x2, 0xd, 0xff, 0x2, 0x7a, 0x1, 0x4, 0x4, 0x3, 0x9, 0x10000, 0x2, 0x8, 0x6, 0x9, 0x400, 0x401, 0x8, 0x9, 0x80, 0x5, 0x7, 0x26ee, 0x7fffffff, 0x16, 0xffffffff, 0x6, 0x0, 0x400, 0x3, 0x0, 0x4, 0x1, 0xff, 0x7, 0xe5, 0x5, 0x3, 0xfffffffe, 0xac90, 0x3, 0xfffffffe, 0x5, 0x1, 0x7ff, 0x51, 0x1, 0x9, 0x1, 0x4, 0x6, 0xe993, 0x5, 0x1, 0x796c, 0x10001, 0x401, 0x6, 0xfffffffe, 0x5, 0x0, 0x7, 0x0, 0x6, 0x8, 0x9, 0x5, 0x7, 0x1eb, 0x4, 0x2, 0x5, 0xf, 0x8000, 0xfffffffb, 0x2, 0x80, 0x2, 0x0, 0x401, 0x234b, 0x66, 0xca34, 0x9, 0x0, 0x9, 0x5, 0x7, 0x40, 0x4, 0xc, 0xb7, 0x1000, 0x101, 0x8, 0x6c9f, 0x40, 0x9, 0x2, 0x9, 0xa, 0xffff7fff, 0x10, 0xfffffff9, 0x0, 0xdf0, 0x4, 0x9, 0x0, 0x9, 0xde80, 0x80000001, 0x8, 0x4, 0x8000, 0x6cc4, 0x3, 0x10e3, 0xbf0, 0x8, 0x2, 0x10, 0x8000, 0xd26, 0x7f, 0xad6, 0xffff, 0x8, 0xffff, 0xb, 0x191, 0x7, 0x7, 0xfffffff7, 0x6, 0x75f, 0xfffffff9, 0x6, 0x4, 0x6, 0x0, 0x4, 0x1000, 0x2, 0x417, 0x41, 0x74b, 0x80000001, 0x100, 0x6, 0xfffffff7, 0x2, 0x2, 0xb, 0xc, 0x200, 0x5, 0x2, 0x8, 0x4, 0x7fffffff, 0x6, 0x9, 0x90a, 0x100, 0x5, 0xf6, 0xd, 0x8, 0xffff, 0x4, 0x1, 0x7ff, 0x80000001, 0x8, 0x10001, 0x4, 0x100002, 0x2, 0x7, 0x0, 0x8, 0x0, 0xc5, 0x10, 0x3, 0x100, 0x5, 0x7, 0x9a1d, 0xcd, 0x3, 0x2, 0x4, 0x2, 0x0, 0x7f8, 0x8000, 0x80f3, 0x179, 0x2dbf, 0x0, 0x9, 0x7ff, 0x81, 0x0, 0x80000000, 0xa4, 0x2, 0xb, 0xea2b, 0x1dc1b872, 0x8, 0x200, 0x8, 0x2, 0x8e, 0x8, 0x3ff, 0x80000000, 0x8, 0xa, 0xf7, 0x200, 0x3, 0xa, 0x1ff800, 0x5, 0x7, 0xf, 0xfffffffc, 0x3000, 0x4, 0x7, 0xd8c, 0x3, 0x2, 0xffffffff, 0x847f, 0x40, 0xffff, 0x68, 0x2, 0x7, 0x3, 0x3, 0x4, 0x8, 0x1, 0xb, 0x7aae, 0x6, 0x866, 0x8001, 0x1, 0x3, 0x1c00000, 0xf, 0x0, 0x9, 0x5, 0x3, 0x6, 0x8, 0x6, 0x7, 0x4, 0x3, 0x2af, 0x7fff, 0x3, 0x4, 0x7fffffff, 0x7, 0x6, 0x7, 0x6, 0x8001, 0x2, 0x0, 0x9, 0x8, 0x8, 0x0, 0x2, 0x200, 0x1ff, 0x9, 0x7fff, 0x81, 0x9, 0xb21, 0x5, 0x9, 0x2ad, 0x5, 0x7, 0x1b4, 0x8, 0x8, 0x2, 0x7, 0x8000, 0x5, 0x7f, 0x2, 0x7ff, 0x800, 0x7fff, 0x5460, 0x2, 0xfffffff7, 0x7fffffff, 0x1, 0x8, 0x1ff, 0x0, 0x5, 0xdeef, 0x4, 0x80000000, 0x43f, 0x9, 0x2, 0x0, 0xa4, 0xcee6, 0x6, 0x8e, 0xed1, 0x5, 0x7, 0x5, 0x2, 0x7, 0x40, 0x5, 0xf7d7, 0x3882, 0x2, 0x0, 0xffff2cbe, 0x3, 0x7fff, 0xc9, 0x2, 0x966f, 0x0, 0xd, 0x1, 0x7, 0x5, 0x8001, 0x0, 0x3, 0x1, 0x2, 0x5, 0x4, 0x8, 0xf1b0, 0x7fffffff, 0x5, 0x3, 0x200, 0x8000, 0x8, 0x7fffffff, 0x0, 0x2, 0x5, 0x3, 0x7fff, 0x6, 0x0, 0xb71, 0x10, 0x7, 0xfffffffb, 0x93, 0x8, 0x886, 0x400, 0x10000, 0x8af, 0x0, 0x6, 0x6, 0x5, 0x6, 0x200, 0x9, 0x5, 0x100, 0xa, 0x9, 0x0, 0x0, 0x8, 0x5, 0x7, 0x0, 0x7, 0x3, 0xffffb856, 0x5, 0x58, 0xda5b, 0x1, 0x8, 0x2, 0x5, 0xb9ef, 0x8, 0x5d0, 0x8001, 0x9, 0xff, 0x10000, 0x1, 0xfffffff7, 0x9, 0x3, 0x0, 0x2, 0x9, 0x7, 0x4, 0x2, 0x2, 0x7fff, 0x3, 0x5, 0x0, 0xf, 0x8, 0x2, 0x7, 0x1, 0x7, 0x9, 0x72a2, 0xfffffffd, 0x8, 0xfffffffc, 0x1000, 0xfffffff0, 0x2, 0x2, 0x168, 0xa, 0x0, 0x8d46, 0x4c, 0x35963cee, 0x40008, 0xfffffbff, 0x200, 0x10001, 0x6, 0x5, 0xb, 0x757, 0x9, 0x6a, 0x0, 0x8, 0x8edc, 0x3, 0x8, 0x1000, 0x8, 0x1, 0x3, 0x7, 0x87, 0x5, 0x1, 0xf7, 0x7, 0x9, 0x6, 0x9, 0xfffffff9, 0x4, 0xb, 0x6, 0x2, 0x0, 0x9, 0x9, 0x4, 0x3, 0x4, 0x9, 0x0, 0x81, 0x7, 0x9, 0x81, 0x5, 0x3, 0xf, 0x8, 0x5, 0x8, 0xa8a, 0x4, 0x87ec, 0x8, 0x1, 0xd, 0x1, 0x7, 0x10, 0x0, 0x6, 0x0, 0x5, 0x10, 0x815, 0x7, 0x9e5, 0x81, 0x5, 0xb, 0xc0e, 0x1, 0xf9, 0x2c, 0x17, 0xa7f6, 0xfffffffb, 0x3, 0x1000, 0x8, 0x7fffffff, 0xd9e, 0x2, 0x20ef, 0x2e8, 0x6, 0x7fffffff, 0x5, 0x8, 0x3, 0xedc, 0xff, 0xffff, 0x2, 0x0, 0xffffff32, 0x9a30, 0xaee4, 0xff, 0xb13, 0x7ff, 0x8, 0xa, 0x9, 0x37f, 0xf1, 0xff, 0x9, 0x331, 0x1, 0x9, 0x401, 0xfffffff8, 0x962, 0x9, 0x9, 0x9, 0xfffffff2, 0x9, 0x7bc, 0x2, 0x5, 0xffffffff, 0x7, 0xe4cb, 0x9, 0x25, 0x2, 0x8, 0x7fff, 0x5, 0xe, 0x7f, 0x9, 0xfffffffe, 0x1, 0x0, 0x98c00000, 0x80, 0x60, 0x81, 0x1, 0x3, 0x80, 0x8, 0x32a7, 0x3, 0x3, 0x6, 0x3, 0x9ad, 0xf0, 0x5, 0x5, 0xdf, 0x5, 0x8ec5, 0x1, 0x3ff, 0x0, 0x5, 0x3, 0x93b, 0x1, 0x2de, 0x5, 0x40, 0x9, 0xfffff314, 0x5, 0xffff, 0x7, 0xfffffffc, 0x0, 0x4, 0x2, 0x7, 0xe, 0x4, 0x9, 0x9, 0xf7, 0x6, 0x5, 0x633, 0x7ff, 0x6, 0x7, 0x3, 0x2, 0xb, 0xd4e, 0x8, 0xdb, 0x10000, 0x401, 0x1fe, 0x3, 0xa, 0x9, 0x6, 0x7, 0x7, 0x9, 0x1, 0xb5d, 0x9, 0xd0f, 0x3ff, 0x80000000, 0xffff, 0x7, 0x5, 0x5, 0x3, 0x400, 0x0, 0x7fffffff, 0x7, 0x3, 0xf9, 0x0, 0x4, 0xffff, 0x1, 0x2, 0x6, 0x0, 0x4, 0x0, 0xe, 0x1, 0x8, 0xa70990c8, 0xd9, 0x6, 0x8000, 0x100, 0x1, 0xdaed, 0xfff, 0x0, 0x200, 0x9, 0x80000000, 0x5, 0x5, 0xcef, 0xfffffff1, 0x9, 0x4, 0x1, 0x1, 0xc, 0x7, 0x101, 0x3c12, 0xfff, 0x3, 0xfffffffa, 0x8, 0x7, 0x7ff, 0x1, 0x100, 0x3, 0x995, 0x3, 0xc, 0xb21e, 0x5, 0x6, 0x1, 0x8, 0x6a, 0x9, 0x71, 0x6, 0x5, 0xbf39, 0xfffffff8, 0x7, 0x6, 0xff, 0x7, 0xb, 0x4, 0xffffff81, 0x9, 0x9, 0x400, 0xb4, 0xa1a9, 0xfd, 0x3, 0x800, 0x80000001, 0x5, 0x7, 0x1, 0x6, 0x3, 0x4, 0x48b1, 0xfab4, 0x8, 0x8, 0x4, 0x40, 0x8, 0x9, 0x5, 0x2, 0x1, 0x3, 0x1, 0xfffffff4, 0x622, 0x3, 0x10001, 0x7, 0x246, 0xfffffffc, 0x1, 0x9, 0xa17f, 0x4, 0x6a09, 0x3, 0x5, 0x1, 0x8a4, 0x0, 0x9]}) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="00160400000900c161ee93c473355f5e45aae0b939900c285772a109f4517c6532b7586332582143f11adf3d25c5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000a00)={0x0, 0xf, 0x4, "f1345115"}, 0x0, 0x0}) syz_usb_control_io$printer(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000005940)={0xa, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1005c, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fffffff, @value=r4}, 0x94) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000000c0)=0x40, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000280)=0x20, 0x4) bind$xdp(r2, &(0x7f00000001c0)={0x2c, 0x0, r3}, 0x2a) 1.298990671s ago: executing program 5 (id=930): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) flistxattr(r2, &(0x7f0000000180), 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) unshare(0x400) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000180)={0x1, 0x81, 0x2, 0x2, 0x7, 0x80, 0x5, 0x6, 0x4, 0x6, 0x9, 0x4, 0x3, 0x9}, 0xe) syz_usb_control_io$hid(r4, 0x0, 0x0) ioctl$HIDIOCSUSAGES(r3, 0x501c4814, &(0x7f0000000a40)={{0x1, 0x301, 0xd4, 0x5, 0x7}, 0x38f, [0x9, 0x2, 0x5, 0x4, 0xdb2, 0x2, 0x7fffffff, 0x1000, 0xfffffff8, 0x0, 0x6, 0x9, 0x4, 0xfffffff9, 0x4, 0x80000000, 0x8, 0x7f, 0xa, 0x1, 0x3, 0x9, 0x7, 0xfffffff8, 0xff, 0xcc800000, 0x3, 0x0, 0xfffffd49, 0x8, 0x1ff, 0x1, 0x4, 0x5, 0x3ff, 0x81, 0x6, 0x6, 0x400, 0x9, 0x2, 0x0, 0xffff, 0xffff, 0x5, 0x2, 0xc, 0x101, 0x7, 0xa, 0x7fffffff, 0xdb5, 0x0, 0xfdb, 0x10000, 0x2, 0xffffff81, 0x401, 0x8, 0x7c, 0x8, 0x1, 0x8, 0x6, 0xfff, 0xff800000, 0x69a, 0x3ff, 0x1c4, 0x0, 0x1, 0x2, 0x40, 0x4, 0x261c74f7, 0x8001, 0x4, 0x9, 0xf, 0xf, 0x8001, 0x8000, 0x3, 0x3, 0x4, 0x2, 0x2, 0x5, 0x1, 0x9, 0x5, 0x28521a23, 0x256, 0x5, 0xc58, 0x9, 0xc000000, 0x5, 0x1, 0x6, 0x5da1, 0x0, 0x7ff, 0x1, 0x6, 0x0, 0x6, 0x400, 0x60, 0x65, 0x7ff, 0x7f, 0x10, 0x7, 0x1000, 0xb1, 0x81, 0x4, 0xffff, 0x1e, 0x3, 0x1, 0x10001, 0xfffffffd, 0x10, 0x3, 0x3, 0x1, 0x2, 0x9, 0x9, 0x3c, 0x9, 0xe49, 0x8, 0x0, 0x7, 0x51, 0x100, 0x3, 0x0, 0xfffffff7, 0x939, 0x0, 0x4, 0xf, 0x7, 0x80000001, 0x4, 0x2, 0x4, 0x2, 0x7, 0xfffffffd, 0xffff, 0x6, 0x0, 0x7c4d, 0x5, 0x5, 0x7, 0x5, 0x40, 0x80, 0x9, 0x6, 0x1, 0x5, 0xb03d, 0x400, 0x7e0, 0x10, 0x5, 0x9, 0x100, 0x1, 0x100, 0x10001, 0x7, 0x4, 0x9, 0x2, 0x2, 0x800, 0x9, 0x9, 0xff, 0xf, 0x10001, 0x71e, 0x8, 0xd, 0x4de8, 0x8, 0x2, 0x9, 0x0, 0x99, 0x9, 0x3, 0x4, 0x9, 0x6, 0xba, 0x10, 0x24ce, 0x1, 0x5, 0x5, 0xb9, 0x5, 0x5, 0x3, 0xff, 0x2, 0x0, 0xe20, 0x6e, 0xfff, 0x0, 0xfffffff3, 0x200, 0x6, 0x9, 0xfffffffd, 0x4, 0x9, 0x5, 0x3, 0x6, 0x5, 0x2, 0x6, 0xe63, 0x2, 0xd, 0xff, 0x2, 0x7a, 0x1, 0x4, 0x4, 0x3, 0x9, 0x10000, 0x2, 0x8, 0x6, 0x9, 0x400, 0x401, 0x8, 0x9, 0x80, 0x5, 0x7, 0x26ee, 0x7fffffff, 0x16, 0xffffffff, 0x6, 0x0, 0x400, 0x3, 0x0, 0x4, 0x1, 0xff, 0x7, 0xe5, 0x5, 0x3, 0xfffffffe, 0xac90, 0x3, 0xfffffffe, 0x5, 0x1, 0x7ff, 0x51, 0x1, 0x9, 0x1, 0x4, 0x6, 0xe993, 0x5, 0x1, 0x796c, 0x10001, 0x401, 0x6, 0xfffffffe, 0x5, 0x0, 0x7, 0x0, 0x6, 0x8, 0x9, 0x5, 0x7, 0x1eb, 0x4, 0x2, 0x5, 0xf, 0x8000, 0xfffffffb, 0x2, 0x80, 0x2, 0x0, 0x401, 0x234b, 0x66, 0xca34, 0x9, 0x0, 0x9, 0x5, 0x7, 0x40, 0x4, 0xc, 0xb7, 0x1000, 0x101, 0x8, 0x6c9f, 0x40, 0x9, 0x2, 0x9, 0xa, 0xffff7fff, 0x10, 0xfffffff9, 0x0, 0xdf0, 0x4, 0x9, 0x0, 0x9, 0xde80, 0x80000001, 0x8, 0x4, 0x8000, 0x6cc4, 0x3, 0x10e3, 0xbf0, 0x8, 0x2, 0x10, 0x8000, 0xd26, 0x7f, 0xad6, 0xffff, 0x8, 0xffff, 0xb, 0x191, 0x7, 0x7, 0xfffffff7, 0x6, 0x75f, 0xfffffff9, 0x6, 0x4, 0x6, 0x0, 0x4, 0x1000, 0x2, 0x417, 0x41, 0x74b, 0x80000001, 0x100, 0x6, 0xfffffff7, 0x2, 0x2, 0xb, 0xc, 0x200, 0x5, 0x2, 0x8, 0x4, 0x7fffffff, 0x6, 0x9, 0x90a, 0x100, 0x5, 0xf6, 0xd, 0x8, 0xffff, 0x4, 0x1, 0x7ff, 0x80000001, 0x8, 0x10001, 0x4, 0x100002, 0x2, 0x7, 0x0, 0x8, 0x0, 0xc5, 0x10, 0x3, 0x100, 0x5, 0x7, 0x9a1d, 0xcd, 0x3, 0x2, 0x4, 0x2, 0x0, 0x7f8, 0x8000, 0x80f3, 0x179, 0x2dbf, 0x0, 0x9, 0x7ff, 0x81, 0x0, 0x80000000, 0xa4, 0x2, 0xb, 0xea2b, 0x1dc1b872, 0x8, 0x200, 0x8, 0x2, 0x8e, 0x8, 0x3ff, 0x80000000, 0x8, 0xa, 0xf7, 0x200, 0x3, 0xa, 0x1ff800, 0x5, 0x7, 0xf, 0xfffffffc, 0x3000, 0x4, 0x7, 0xd8c, 0x3, 0x2, 0xffffffff, 0x847f, 0x40, 0xffff, 0x68, 0x2, 0x7, 0x3, 0x3, 0x4, 0x8, 0x1, 0xb, 0x7aae, 0x6, 0x866, 0x8001, 0x1, 0x3, 0x1c00000, 0xf, 0x0, 0x9, 0x5, 0x3, 0x6, 0x8, 0x6, 0x7, 0x4, 0x3, 0x2af, 0x7fff, 0x3, 0x4, 0x7fffffff, 0x7, 0x6, 0x7, 0x6, 0x8001, 0x2, 0x0, 0x9, 0x8, 0x8, 0x0, 0x2, 0x200, 0x1ff, 0x9, 0x7fff, 0x81, 0x9, 0xb21, 0x5, 0x9, 0x2ad, 0x5, 0x7, 0x1b4, 0x8, 0x8, 0x2, 0x7, 0x8000, 0x5, 0x7f, 0x2, 0x7ff, 0x800, 0x7fff, 0x5460, 0x2, 0xfffffff7, 0x7fffffff, 0x1, 0x8, 0x1ff, 0x0, 0x5, 0xdeef, 0x4, 0x80000000, 0x43f, 0x9, 0x2, 0x0, 0xa4, 0xcee6, 0x6, 0x8e, 0xed1, 0x5, 0x7, 0x5, 0x2, 0x7, 0x40, 0x5, 0xf7d7, 0x3882, 0x2, 0x0, 0xffff2cbe, 0x3, 0x7fff, 0xc9, 0x2, 0x966f, 0x0, 0xd, 0x1, 0x7, 0x5, 0x8001, 0x0, 0x3, 0x1, 0x2, 0x5, 0x4, 0x8, 0xf1b0, 0x7fffffff, 0x5, 0x3, 0x200, 0x8000, 0x8, 0x7fffffff, 0x0, 0x2, 0x5, 0x3, 0x7fff, 0x6, 0x0, 0xb71, 0x10, 0x7, 0xfffffffb, 0x93, 0x8, 0x886, 0x400, 0x10000, 0x8af, 0x0, 0x6, 0x6, 0x5, 0x6, 0x200, 0x9, 0x5, 0x100, 0xa, 0x9, 0x0, 0x0, 0x8, 0x5, 0x7, 0x0, 0x7, 0x3, 0xffffb856, 0x5, 0x58, 0xda5b, 0x1, 0x8, 0x2, 0x5, 0xb9ef, 0x8, 0x5d0, 0x8001, 0x9, 0xff, 0x10000, 0x1, 0xfffffff7, 0x9, 0x3, 0x0, 0x2, 0x9, 0x7, 0x4, 0x2, 0x2, 0x7fff, 0x3, 0x5, 0x0, 0xf, 0x8, 0x2, 0x7, 0x1, 0x7, 0x9, 0x72a2, 0xfffffffd, 0x8, 0xfffffffc, 0x1000, 0xfffffff0, 0x2, 0x2, 0x168, 0xa, 0x0, 0x8d46, 0x4c, 0x35963cee, 0x40008, 0xfffffbff, 0x200, 0x10001, 0x6, 0x5, 0xb, 0x757, 0x9, 0x6a, 0x0, 0x8, 0x8edc, 0x3, 0x8, 0x1000, 0x8, 0x1, 0x3, 0x7, 0x87, 0x5, 0x1, 0xf7, 0x7, 0x9, 0x6, 0x9, 0xfffffff9, 0x4, 0xb, 0x6, 0x2, 0x0, 0x9, 0x9, 0x4, 0x3, 0x4, 0x9, 0x0, 0x81, 0x7, 0x9, 0x81, 0x5, 0x3, 0xf, 0x8, 0x5, 0x8, 0xa8a, 0x4, 0x87ec, 0x8, 0x1, 0xd, 0x1, 0x7, 0x10, 0x0, 0x6, 0x0, 0x5, 0x10, 0x815, 0x7, 0x9e5, 0x81, 0x5, 0xb, 0xc0e, 0x1, 0xf9, 0x2c, 0x17, 0xa7f6, 0xfffffffb, 0x3, 0x1000, 0x8, 0x7fffffff, 0xd9e, 0x2, 0x20ef, 0x2e8, 0x6, 0x7fffffff, 0x5, 0x8, 0x3, 0xedc, 0xff, 0xffff, 0x2, 0x0, 0xffffff32, 0x9a30, 0xaee4, 0xff, 0xb13, 0x7ff, 0x8, 0xa, 0x9, 0x37f, 0xf1, 0xff, 0x9, 0x331, 0x1, 0x9, 0x401, 0xfffffff8, 0x962, 0x9, 0x9, 0x9, 0xfffffff2, 0x9, 0x7bc, 0x2, 0x5, 0xffffffff, 0x7, 0xe4cb, 0x9, 0x25, 0x2, 0x8, 0x7fff, 0x5, 0xe, 0x7f, 0x9, 0xfffffffe, 0x1, 0x0, 0x98c00000, 0x80, 0x60, 0x81, 0x1, 0x3, 0x80, 0x8, 0x32a7, 0x3, 0x3, 0x6, 0x3, 0x9ad, 0xf0, 0x5, 0x5, 0xdf, 0x5, 0x8ec5, 0x1, 0x3ff, 0x0, 0x5, 0x3, 0x93b, 0x1, 0x2de, 0x5, 0x40, 0x9, 0xfffff314, 0x5, 0xffff, 0x7, 0xfffffffc, 0x0, 0x4, 0x2, 0x7, 0xe, 0x4, 0x9, 0x9, 0xf7, 0x6, 0x5, 0x633, 0x7ff, 0x6, 0x7, 0x3, 0x2, 0xb, 0xd4e, 0x8, 0xdb, 0x10000, 0x401, 0x1fe, 0x3, 0xa, 0x9, 0x6, 0x7, 0x7, 0x9, 0x1, 0xb5d, 0x9, 0xd0f, 0x3ff, 0x80000000, 0xffff, 0x7, 0x5, 0x5, 0x3, 0x400, 0x0, 0x7fffffff, 0x7, 0x3, 0xf9, 0x0, 0x4, 0xffff, 0x1, 0x2, 0x6, 0x0, 0x4, 0x0, 0xe, 0x1, 0x8, 0xa70990c8, 0xd9, 0x6, 0x8000, 0x100, 0x1, 0xdaed, 0xfff, 0x0, 0x200, 0x9, 0x80000000, 0x5, 0x5, 0xcef, 0xfffffff1, 0x9, 0x4, 0x1, 0x1, 0xc, 0x7, 0x101, 0x3c12, 0xfff, 0x3, 0xfffffffa, 0x8, 0x7, 0x7ff, 0x1, 0x100, 0x3, 0x995, 0x3, 0xc, 0xb21e, 0x5, 0x6, 0x1, 0x8, 0x6a, 0x9, 0x71, 0x6, 0x5, 0xbf39, 0xfffffff8, 0x7, 0x6, 0xff, 0x7, 0xb, 0x4, 0xffffff81, 0x9, 0x9, 0x400, 0xb4, 0xa1a9, 0xfd, 0x3, 0x800, 0x80000001, 0x5, 0x7, 0x1, 0x6, 0x3, 0x4, 0x48b1, 0xfab4, 0x8, 0x8, 0x4, 0x40, 0x8, 0x9, 0x5, 0x2, 0x1, 0x3, 0x1, 0xfffffff4, 0x622, 0x3, 0x10001, 0x7, 0x246, 0xfffffffc, 0x1, 0x9, 0xa17f, 0x4, 0x6a09, 0x3, 0x5, 0x1, 0x8a4, 0x0, 0x9]}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="00160400000900c161ee93c473355f5e45aae0b939900c285772a109f4517c6532b7586332582143f11adf3d25c5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000a00)={0x0, 0xf, 0x4, "f1345115"}, 0x0, 0x0}) syz_usb_control_io$printer(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000005940)={0xa, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1005c, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fffffff, @value=r3}, 0x94) 466.238495ms ago: executing program 4 (id=931): socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x925, 0x8866, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8000, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0xff, 0x8}}}}}]}}]}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getpeername$unix(r2, &(0x7f0000000300), &(0x7f0000000000)=0x6e) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x20, 0x4, 0x44, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'macvtap0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) syz_emit_ethernet(0x76, &(0x7f00000000c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @link_local, @val={@val={0x88a8, 0x2, 0x0, 0x1}, {0x8100, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "07ad00", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x2, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e520b29952fe12e"}}}}}}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448ca, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0xffffffffffffffff) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1f00, 0x12) 243.350383ms ago: executing program 1 (id=932): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) 216.979189ms ago: executing program 1 (id=933): r0 = syz_open_dev$vbi(&(0x7f0000000280), 0x0, 0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x8, 'wg1\x00', {'wg2\x00'}}) pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RAUTH(r1, 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x0, @initdev}}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f00000002c0)={0x0, 0x0, '\x00', @raw_data=[0x24c32ef3, 0x0, 0x100, 0x186, 0x1, 0xc0b8, 0xda7, 0x3, 0x6, 0x1, 0x0, 0x9, 0x5, 0xfffffffe, 0x5, 0x0, 0xc, 0x2, 0x7, 0x8000, 0x1000, 0xfffffff9, 0x3, 0x800009, 0x96d, 0x2, 0x9, 0x3, 0x2, 0x8, 0x5, 0x4]}) ioctl$TCSETAW(r1, 0x5407, &(0x7f00000000c0)={0x1, 0x70a, 0x7, 0x4, 0x3, "082015cba7d50405"}) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') openat$userio(0xffffff9c, &(0x7f0000000040), 0x401, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000200)={0x0}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r4, &(0x7f0000000100), 0xa, 0x700, 0x0) r5 = syz_io_uring_setup(0x1a7e, &(0x7f0000000200)={0x0, 0x8cd3e, 0x200, 0x4, 0x6, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f0000000380)=0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={&(0x7f00000003c0)="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", &(0x7f00000004c0)=""/21, &(0x7f0000000500)="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", &(0x7f0000000600)="ab01c97cf29cae168d44c70e959bd420f4170a6d9a1bf000243ce0d7cd0f3a551e325e4490113a09", 0x6, r1, 0x4}, 0x38) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x79a5, 0x2, 0x46, 0x0, 0x0) epoll_create1(0x0) close_range(r0, r0, 0x0) 182.882385ms ago: executing program 1 (id=934): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x14) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0xe) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000034000)=""/102392, 0x18ff8) socket(0x10, 0x803, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r4, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1", 0xbd}, {&(0x7f00000002c0)="9c811ff500139d7d", 0x8}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000007c0)="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", 0x2fb}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r4, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 0s ago: executing program 3 (id=935): socket$packet(0x11, 0x3, 0x300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x1b03, &(0x7f00000002c0)={0x0, 0x13ea, 0x80, 0x0, 0x189}, 0x0, &(0x7f0000000000)) socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2001, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000280)='2x', 0x2, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000380)='lp\x00', 0x3) shutdown(r4, 0x1) kernel console output (not intermixed with test programs): ile_pages+0x10/0x10 [ 139.931343][ T7789] ? fput+0x9b/0xd0 [ 139.931363][ T7789] ? ksys_write+0x1ac/0x250 [ 139.931380][ T7789] ? __pfx_ksys_write+0x10/0x10 [ 139.931398][ T7789] do_syscall_64+0xcd/0x4c0 [ 139.931424][ T7789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.931441][ T7789] RIP: 0033:0x7f121ab8ebe9 [ 139.931453][ T7789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.931469][ T7789] RSP: 002b:00007f121b9d2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 139.931486][ T7789] RAX: ffffffffffffffda RBX: 00007f121adb6180 RCX: 00007f121ab8ebe9 [ 139.931497][ T7789] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 00002000002ec000 [ 139.931507][ T7789] RBP: 00007f121b9d2090 R08: 0000000000002000 R09: 0000000000000000 [ 139.931517][ T7789] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 139.931526][ T7789] R13: 00007f121adb6218 R14: 00007f121adb6180 R15: 00007fff709049d8 [ 139.931543][ T7789] [ 141.212823][ T10] usb 3-1: USB disconnect, device number 8 [ 141.222785][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 141.236716][ T10] ftdi_sio 3-1:0.0: device disconnected [ 141.247743][ T7825] netlink: 16 bytes leftover after parsing attributes in process `syz.3.369'. [ 142.149357][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 142.149389][ T30] audit: type=1400 audit(1755805009.641:372): avc: denied { ioctl } for pid=7836 comm="syz.1.373" path="socket:[13857]" dev="sockfs" ino=13857 ioctlcmd=0xf501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 142.156087][ T7839] Invalid source name [ 142.588978][ T7862] netlink: 'syz.4.374': attribute type 1 has an invalid length. [ 142.596749][ T7862] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.028353][ T30] audit: type=1400 audit(1755805010.671:373): avc: denied { create } for pid=7865 comm="syz.1.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 143.049403][ T10] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 143.241294][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 3360, setting to 64 [ 143.252599][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 143.259211][ T10] usb 5-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 143.268667][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.278365][ T10] usb 5-1: config 0 descriptor?? [ 143.283713][ T7862] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 143.291824][ T10] usbhid 5-1:0.0: can't add hid device: -22 [ 143.297875][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 143.409537][ T30] audit: type=1400 audit(1755805011.011:374): avc: denied { ioctl } for pid=7867 comm="syz.3.377" path="socket:[14702]" dev="sockfs" ino=14702 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 143.719330][ T43] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 143.937087][ T43] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 143.980883][ T43] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 143.995656][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 144.007423][ T43] usb 3-1: SerialNumber: syz [ 144.049120][ T30] audit: type=1400 audit(1755805011.691:375): avc: denied { bind } for pid=7879 comm="syz.1.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 144.794003][ T43] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 145.341555][ T5872] usb 5-1: USB disconnect, device number 10 [ 145.496720][ T7878] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 145.867431][ T975] usb 3-1: USB disconnect, device number 9 [ 145.874153][ T975] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 146.607490][ T30] audit: type=1400 audit(1755805014.251:376): avc: denied { name_connect } for pid=7928 comm="syz.4.388" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 146.676908][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 146.685047][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 146.693756][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 146.700883][ T30] audit: type=1400 audit(1755805014.281:377): avc: denied { listen } for pid=7928 comm="syz.4.388" lport=43036 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 146.725841][ T30] audit: type=1400 audit(1755805014.291:378): avc: denied { setopt } for pid=7928 comm="syz.4.388" lport=43036 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 146.782790][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 146.790128][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 146.807187][ T30] audit: type=1400 audit(1755805014.451:379): avc: denied { mounton } for pid=7932 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 148.537848][ T7932] chnl_net:caif_netlink_parms(): no params data found [ 148.651386][ T30] audit: type=1400 audit(1755805016.301:380): avc: denied { map } for pid=7976 comm="syz.3.394" path="/dev/comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 148.747756][ T30] audit: type=1400 audit(1755805016.391:381): avc: denied { read } for pid=7983 comm="syz.4.396" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 148.801787][ T30] audit: type=1400 audit(1755805016.391:382): avc: denied { open } for pid=7983 comm="syz.4.396" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 148.829347][ T51] Bluetooth: hci5: command tx timeout [ 148.886743][ T7932] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.895381][ T7932] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.909773][ T7932] bridge_slave_0: entered allmulticast mode [ 149.006932][ T7932] bridge_slave_0: entered promiscuous mode [ 149.015953][ T7988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.396'. [ 149.029349][ T7932] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.054772][ T7932] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.071640][ T7932] bridge_slave_1: entered allmulticast mode [ 149.096223][ T7932] bridge_slave_1: entered promiscuous mode [ 149.211954][ T7932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.327842][ T7932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.358049][ T7932] team0: Port device team_slave_0 added [ 149.365172][ T7932] team0: Port device team_slave_1 added [ 149.409849][ T7932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.416861][ T7932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.444715][ T7932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.462517][ T7932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.469620][ T7932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.498025][ T7932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.572907][ T7932] hsr_slave_0: entered promiscuous mode [ 149.585855][ T7984] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 149.592787][ T7932] hsr_slave_1: entered promiscuous mode [ 149.605592][ T7932] debugfs: 'hsr0' already exists in 'hsr' [ 149.612419][ T7984] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 149.637876][ T7932] Cannot create hsr debugfs directory [ 149.645960][ T7984] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 149.673732][ T7984] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 149.711747][ T7984] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 149.725226][ T7984] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 149.755050][ T7984] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 149.793535][ T7984] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 149.855076][ T7984] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 149.892401][ T7984] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 149.922070][ T7932] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 149.933520][ T7984] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 149.950767][ T7932] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 149.974143][ T7932] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 150.031701][ T7932] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 150.093362][ T7997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.399'. [ 150.190290][ T8013] netlink: 16 bytes leftover after parsing attributes in process `syz.2.400'. [ 150.338221][ T7932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.383344][ T43] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 150.395496][ T7932] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.416979][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.424092][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.436926][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.444036][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.629361][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 150.637130][ T43] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 150.645633][ T43] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 150.663207][ T43] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 150.768370][ T43] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 150.782874][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 150.828854][ T43] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 150.839152][ T43] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 150.848087][ T43] usb 5-1: Product: syz [ 150.855293][ T43] usb 5-1: Manufacturer: syz [ 150.865466][ T43] usb 5-1: SerialNumber: syz [ 151.020734][ T43] usb 5-1: config 0 descriptor?? [ 151.032090][ T43] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 151.042588][ T43] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 151.070785][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 151.090710][ T7932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.512628][ T8011] netlink: 'syz.4.401': attribute type 10 has an invalid length. [ 151.529549][ T8011] macvlan0: entered promiscuous mode [ 151.534838][ T8011] macvlan0: entered allmulticast mode [ 151.621887][ C1] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 151.627928][ T5872] usb 5-1: USB disconnect, device number 11 [ 151.634909][ T5872] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 151.671534][ T7932] veth0_vlan: entered promiscuous mode [ 151.701535][ T7932] veth1_vlan: entered promiscuous mode [ 151.710553][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 151.785797][ T7932] veth0_macvtap: entered promiscuous mode [ 151.791621][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 151.858869][ T7932] veth1_macvtap: entered promiscuous mode [ 151.869993][ T51] Bluetooth: hci5: command 0x040f tx timeout [ 151.876074][ T8011] ldusb: No device or device unplugged -19 [ 151.890173][ T7932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.901953][ T7932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.912043][ T967] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.947950][ T967] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.006731][ T967] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.017075][ T967] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.063458][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.078943][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.100496][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.118366][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.145848][ T30] audit: type=1400 audit(1755805019.795:383): avc: denied { mounton } for pid=7932 comm="syz-executor" path="/root/syzkaller.uW0A3v/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 152.209333][ T30] audit: type=1400 audit(1755805019.825:384): avc: denied { mount } for pid=7932 comm="syz-executor" name="/" dev="gadgetfs" ino=8307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 152.239467][ T5872] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 152.679700][ T5872] usb 4-1: Using ep0 maxpacket: 16 [ 152.690249][ T5872] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1999, setting to 1024 [ 152.713852][ T5872] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 152.729219][ T5872] usb 4-1: New USB device found, idVendor=0306, idProduct=ff3f, bcdDevice= 0.40 [ 152.741713][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.754331][ T5872] usb 4-1: Product: syz [ 152.758514][ T5872] usb 4-1: Manufacturer: ఇ [ 152.771451][ T5872] usb 4-1: SerialNumber: syz [ 152.876778][ T8070] netlink: 16 bytes leftover after parsing attributes in process `syz.1.411'. [ 152.989645][ T8048] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 153.065165][ T8073] netlink: 16 bytes leftover after parsing attributes in process `syz.4.413'. [ 153.096040][ T30] audit: type=1400 audit(1755805020.745:385): avc: denied { sqpoll } for pid=8074 comm="syz.2.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 153.868001][ T8076] syz.2.414 invoked oom-killer: gfp_mask=0x442dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_NOWARN|__GFP_COMP), order=3, oom_score_adj=1000 [ 153.881959][ T8076] CPU: 1 UID: 0 PID: 8076 Comm: syz.2.414 Not tainted syzkaller #0 PREEMPT(full) [ 153.881985][ T8076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 153.881995][ T8076] Call Trace: [ 153.882001][ T8076] [ 153.882007][ T8076] dump_stack_lvl+0x16c/0x1f0 [ 153.882031][ T8076] dump_header+0x101/0x930 [ 153.882051][ T8076] oom_kill_process+0x272/0xa40 [ 153.882075][ T8076] out_of_memory+0x350/0x1700 [ 153.882096][ T8076] ? __pfx_out_of_memory+0x10/0x10 [ 153.882117][ T8076] mem_cgroup_out_of_memory+0x118/0x130 [ 153.882143][ T8076] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 153.882170][ T8076] ? do_raw_spin_unlock+0x172/0x230 [ 153.882192][ T8076] try_charge_memcg+0x72b/0xd50 [ 153.882213][ T8076] ? rcu_is_watching+0x12/0xc0 [ 153.882241][ T8076] ? __pfx_try_charge_memcg+0x10/0x10 [ 153.882258][ T8076] ? rcu_read_unlock+0x17/0x60 [ 153.882277][ T8076] ? rcu_is_watching+0x12/0xc0 [ 153.882299][ T8076] ? lock_release+0x201/0x2f0 [ 153.882327][ T8076] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 153.882354][ T8076] obj_cgroup_charge_pages+0x22/0x1f0 [ 153.882374][ T8076] __memcg_kmem_charge_page+0xc2/0x2e0 [ 153.882395][ T8076] __alloc_frozen_pages_noprof+0x325/0x23f0 [ 153.882415][ T8076] ? kasan_save_stack+0x42/0x60 [ 153.882432][ T8076] ? kasan_save_stack+0x33/0x60 [ 153.882449][ T8076] ? kasan_save_track+0x14/0x30 [ 153.882466][ T8076] ? __kasan_kmalloc+0xaa/0xb0 [ 153.882482][ T8076] ? __kvmalloc_node_noprof+0x27b/0x620 [ 153.882499][ T8076] ? io_create_region+0x68a/0xd40 [ 153.882520][ T8076] ? io_uring_setup+0x11a5/0x2120 [ 153.882537][ T8076] ? __x64_sys_io_uring_setup+0xc2/0x170 [ 153.882555][ T8076] ? do_syscall_64+0xcd/0x4c0 [ 153.882574][ T8076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.882595][ T8076] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 153.882621][ T8076] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 153.882642][ T8076] ? policy_nodemask+0xea/0x4e0 [ 153.882663][ T8076] alloc_pages_mpol+0x1fb/0x550 [ 153.882684][ T8076] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 153.882704][ T8076] ? trace_kmalloc+0x2b/0xd0 [ 153.882725][ T8076] ? __kvmalloc_node_noprof+0x298/0x620 [ 153.882741][ T8076] ? avc_has_perm_noaudit+0x149/0x3b0 [ 153.882761][ T8076] alloc_pages_noprof+0x131/0x390 [ 153.882782][ T8076] io_create_region+0x731/0xd40 [ 153.882804][ T8076] ? __pfx_io_create_region+0x10/0x10 [ 153.882825][ T8076] ? cap_capable+0xb3/0x250 [ 153.882847][ T8076] ? bpf_lsm_capable+0x9/0x10 [ 153.882872][ T8076] ? security_capable+0x7e/0x260 [ 153.882895][ T8076] io_uring_setup+0x11a5/0x2120 [ 153.882913][ T8076] ? __pfx_io_uring_setup+0x10/0x10 [ 153.882938][ T8076] ? __do_sys_rt_sigreturn+0x16b/0x230 [ 153.882962][ T8076] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 153.882985][ T8076] ? lock_release+0x201/0x2f0 [ 153.883012][ T8076] __x64_sys_io_uring_setup+0xc2/0x170 [ 153.883030][ T8076] do_syscall_64+0xcd/0x4c0 [ 153.883049][ T8076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.883067][ T8076] RIP: 0033:0x7f30f218ebe9 [ 153.883082][ T8076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.883100][ T8076] RSP: 002b:00007f30f3083fc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 153.883118][ T8076] RAX: ffffffffffffffda RBX: 00007f30f23b6090 RCX: 00007f30f218ebe9 [ 153.883130][ T8076] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000111 [ 153.883141][ T8076] RBP: 0000200000000340 R08: 0000000000000000 R09: 0000000000000000 [ 153.883152][ T8076] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 153.883163][ T8076] R13: 0000000000000000 R14: 0000000000000111 R15: 0000000000000000 [ 153.883180][ T8076] [ 153.883202][ T8076] memory: usage 307200kB, limit 307200kB, failcnt 1904 [ 154.251223][ T8076] memory+swap: usage 307376kB, limit 9007199254740988kB, failcnt 0 [ 154.259142][ T8076] kmem: usage 306380kB, limit 9007199254740988kB, failcnt 0 [ 154.266549][ T8076] Memory cgroup stats for /syz2: [ 154.266683][ T8076] cache 802816 [ 154.275111][ T8076] rss 4096 [ 154.278129][ T8076] rss_huge 0 [ 154.281349][ T8076] shmem 0 [ 154.284281][ T8076] mapped_file 802816 [ 154.288175][ T8076] dirty 802816 [ 154.291568][ T8076] writeback 0 [ 154.294845][ T8076] workingset_refault_anon 186 [ 154.299528][ T8076] workingset_refault_file 0 [ 154.304019][ T8076] swap 180224 [ 154.307301][ T8076] swapcached 32768 [ 154.311039][ T8076] pgpgin 108148 [ 154.314489][ T8076] pgpgout 107943 [ 154.318029][ T8076] pgfault 110568 [ 154.321619][ T8076] pgmajfault 145 [ 154.325159][ T8076] inactive_anon 0 [ 154.328782][ T8076] active_anon 4096 [ 154.332509][ T8076] inactive_file 802816 [ 154.336569][ T8076] active_file 0 [ 154.340029][ T8076] unevictable 0 [ 154.343478][ T8076] hierarchical_memory_limit 314572800 [ 154.348842][ T8076] hierarchical_memsw_limit 9223372036854771712 [ 154.355082][ T8076] total_cache 802816 [ 154.358987][ T8076] total_rss 4096 [ 154.362542][ T8076] total_rss_huge 0 [ 154.366253][ T8076] total_shmem 0 [ 154.369709][ T8076] total_mapped_file 802816 [ 154.374114][ T8076] total_dirty 802816 [ 154.378004][ T8076] total_writeback 0 [ 154.381859][ T8076] total_workingset_refault_anon 186 [ 154.387063][ T8076] total_workingset_refault_file 0 [ 154.392088][ T8076] total_swap 180224 [ 154.395889][ T8076] total_swapcached 32768 [ 154.400130][ T8076] total_pgpgin 108148 [ 154.404110][ T8076] total_pgpgout 107943 [ 154.408172][ T8076] total_pgfault 110568 [ 154.412271][ T8076] total_pgmajfault 145 [ 154.416337][ T8076] total_inactive_anon 0 [ 154.420491][ T8076] total_active_anon 4096 [ 154.424727][ T8076] total_inactive_file 802816 [ 154.429462][ T8076] total_active_file 0 [ 154.433437][ T8076] total_unevictable 0 [ 154.437407][ T8076] anon_cost 0 [ 154.440727][ T8076] file_cost 0 [ 154.444007][ T8076] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.414,pid=8074,uid=0 [ 154.458703][ T8076] Memory cgroup out of memory: Killed process 8074 (syz.2.414) total-vm:101960kB, anon-rss:944kB, file-rss:23080kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 154.530766][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 154.536767][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 154.542747][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 154.548707][ T51] Bluetooth: hci5: command 0x040f tx timeout [ 154.971937][ T5872] usbhid 4-1:1.0: can't add hid device: -71 [ 155.039335][ T5872] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 155.066391][ T5872] usb 4-1: USB disconnect, device number 4 [ 155.179273][ T30] audit: type=1400 audit(1755805022.825:386): avc: denied { getopt } for pid=8094 comm="syz.2.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 155.219192][ T30] audit: type=1400 audit(1755805022.845:387): avc: denied { bind } for pid=8094 comm="syz.2.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 155.718299][ T8119] binder: 8113:8119 ioctl c0306201 0 returned -14 [ 155.854624][ T8114] IPv6: sit1: Disabled Multicast RS [ 155.860748][ T8114] sit1: entered allmulticast mode [ 155.900542][ T30] audit: type=1400 audit(1755805023.536:388): avc: denied { write } for pid=8120 comm="syz.3.420" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 156.596983][ T5848] Bluetooth: hci5: command 0x040f tx timeout [ 156.597263][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 156.604284][ T5848] Bluetooth: hci1: command 0x0c1a tx timeout [ 156.695851][ T5872] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 156.931762][ T8156] netlink: 'syz.3.424': attribute type 10 has an invalid length. [ 156.944471][ T8156] team0: Port device wlan1 added [ 157.145876][ T5872] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 157.159376][ T5872] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 157.174515][ T5872] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 157.184057][ T30] audit: type=1400 audit(1755805024.546:389): avc: denied { connect } for pid=8148 comm="syz.3.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 157.195030][ T5872] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 157.229959][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.520098][ T8161] netlink: 148 bytes leftover after parsing attributes in process `syz.1.426'. [ 157.543225][ T30] audit: type=1400 audit(1755805024.566:390): avc: denied { listen } for pid=8150 comm="syz.4.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 157.647703][ T30] audit: type=1400 audit(1755805024.566:391): avc: denied { accept } for pid=8150 comm="syz.4.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 157.729801][ T5872] usb 3-1: Product: syz [ 157.754137][ T5872] usb 3-1: Manufacturer: syz [ 157.783340][ T5872] usb 3-1: SerialNumber: syz [ 158.598821][ T30] audit: type=1400 audit(1755805025.996:392): avc: denied { create } for pid=8167 comm="syz.4.427" name="#9" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 158.660400][ T5872] usb 3-1: config 0 descriptor?? [ 158.670247][ T8140] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 158.672302][ T5848] Bluetooth: hci5: command 0x040f tx timeout [ 158.679355][ T8140] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 158.731640][ T30] audit: type=1400 audit(1755805025.996:393): avc: denied { link } for pid=8167 comm="syz.4.427" name="#9" dev="tmpfs" ino=483 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 158.755635][ T30] audit: type=1400 audit(1755805025.996:394): avc: denied { rename } for pid=8167 comm="syz.4.427" name="#a" dev="tmpfs" ino=483 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 158.779583][ T8175] netlink: 'syz.5.428': attribute type 4 has an invalid length. [ 158.787289][ T8175] netlink: 17 bytes leftover after parsing attributes in process `syz.5.428'. [ 158.881106][ T5872] usb 3-1: ucan: probing device on interface #0 [ 158.913182][ T8161] syz.1.426 (8161): drop_caches: 2 [ 159.006782][ T8177] C: renamed from lo (while UP) [ 159.014330][ T8177] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 159.097851][ T8180] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4096 sclass=netlink_route_socket pid=8180 comm=syz.1.430 [ 159.189861][ T43] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 159.240664][ T8182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.249328][ T8182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.257509][ T8180] netlink: 2048 bytes leftover after parsing attributes in process `syz.1.430'. [ 159.430224][ T8180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.430'. [ 159.479367][ T43] usb 6-1: device descriptor read/64, error -71 [ 159.705168][ T8186] netlink: 16 bytes leftover after parsing attributes in process `syz.4.429'. [ 159.764758][ T5872] ucan 3-1:0.0 can0: registered device [ 159.780873][ T43] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 159.897918][ T5872] ucan 3-1:0.0 can0: firmware string: j [ 160.016148][ T43] usb 6-1: device descriptor read/64, error -71 [ 160.145581][ T43] usb usb6-port1: attempt power cycle [ 160.729710][ T5872] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 160.749402][ T43] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 160.758080][ T5848] Bluetooth: hci5: command 0x040f tx timeout [ 160.780923][ T43] usb 6-1: device descriptor read/8, error -71 [ 160.864507][ T8175] delete_channel: no stack [ 161.127767][ T5872] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 161.158729][ T5872] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 161.168374][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 161.182585][ T5872] usb 2-1: SerialNumber: syz [ 161.380241][ T30] audit: type=1400 audit(1755805029.026:395): avc: denied { read } for pid=8231 comm="syz.5.439" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 161.529476][ T30] audit: type=1400 audit(1755805029.026:396): avc: denied { open } for pid=8231 comm="syz.5.439" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 161.806392][ T5950] usb 3-1: USB disconnect, device number 10 [ 162.155614][ T8245] netlink: 'syz.4.441': attribute type 11 has an invalid length. [ 162.172173][ T8245] netlink: 20 bytes leftover after parsing attributes in process `syz.4.441'. [ 162.194405][ T5872] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 162.329286][ T8197] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 162.460261][ T5872] usb 2-1: USB disconnect, device number 7 [ 162.466633][ T5872] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 165.105045][ T8299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.450'. [ 165.339530][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 165.636055][ T8310] netlink: 16 bytes leftover after parsing attributes in process `syz.5.454'. [ 165.771610][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.810415][ T10] usb 2-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 165.828875][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.847499][ T10] usb 2-1: config 0 descriptor?? [ 165.939331][ T5872] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 166.476985][ T5872] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 166.728596][ T5872] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 166.797645][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 166.914571][ T5872] usb 4-1: SerialNumber: syz [ 167.574642][ T8362] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 167.652122][ T8362] kvm: pic: non byte read [ 167.668276][ T8362] kvm: pic: level sensitive irq not supported [ 167.668729][ T8362] kvm: pic: non byte read [ 167.695024][ T8362] kvm: pic: level sensitive irq not supported [ 167.695124][ T8362] kvm: pic: non byte read [ 167.709644][ T8362] kvm: pic: level sensitive irq not supported [ 167.709795][ T8362] kvm: pic: non byte read [ 167.721448][ T8362] kvm: pic: level sensitive irq not supported [ 167.721545][ T8362] kvm: pic: non byte read [ 167.752732][ T5872] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 168.132498][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 168.141756][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 168.210824][ T10] usb 2-1: USB disconnect, device number 8 [ 168.804665][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 168.818089][ T8313] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 168.842330][ T24] usb 4-1: USB disconnect, device number 5 [ 168.848489][ T24] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 168.959932][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 168.985838][ T10] usb 5-1: config 0 has an invalid interface number: 173 but max is 0 [ 169.002670][ T10] usb 5-1: config 0 has no interface number 0 [ 169.016452][ T10] usb 5-1: config 0 interface 173 has no altsetting 0 [ 169.027481][ T10] usb 5-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=c6.ae [ 169.049282][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.066627][ T10] usb 5-1: Product: syz [ 169.103202][ T10] usb 5-1: Manufacturer: syz [ 169.111357][ T10] usb 5-1: SerialNumber: syz [ 169.130467][ T10] usb 5-1: config 0 descriptor?? [ 169.144859][ T10] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 169.200249][ T8415] netlink: 16 bytes leftover after parsing attributes in process `syz.2.470'. [ 169.386627][ T8420] netlink: 'syz.1.465': attribute type 30 has an invalid length. [ 169.683775][ T8427] binder: 8426:8427 ioctl c0306201 200000000080 returned -14 [ 169.719985][ T8427] binder: BINDER_SET_CONTEXT_MGR already set [ 170.024154][ T8427] binder: 8426:8427 ioctl 4018620d 200000000040 returned -16 [ 170.257313][ T8437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.272240][ T8437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.303865][ T8437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.318686][ T8437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.352309][ T8437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.364477][ T8437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.375727][ T30] audit: type=1400 audit(1755805038.020:397): avc: denied { connect } for pid=8445 comm="syz.2.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 170.478981][ T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 170.639333][ T24] usb 4-1: device descriptor read/64, error -71 [ 171.149499][ T5922] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 171.159391][ T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 171.299326][ T24] usb 4-1: device descriptor read/64, error -71 [ 171.319278][ T5922] usb 6-1: Using ep0 maxpacket: 8 [ 171.327133][ T5922] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 171.340633][ T5922] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.410093][ T24] usb usb4-port1: attempt power cycle [ 171.461589][ T5922] usb 6-1: Product: syz [ 171.465769][ T5922] usb 6-1: Manufacturer: syz [ 171.471400][ T5950] usb 5-1: USB disconnect, device number 12 [ 171.493708][ T5922] usb 6-1: SerialNumber: syz [ 171.589926][ T5922] usb 6-1: config 0 descriptor?? [ 171.598716][ T5922] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 171.870085][ T24] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 171.901053][ T24] usb 4-1: device descriptor read/8, error -71 [ 172.339460][ T24] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 172.360866][ T24] usb 4-1: device descriptor read/8, error -71 [ 172.887019][ T8505] netlink: 16 bytes leftover after parsing attributes in process `syz.4.481'. [ 172.920065][ T24] usb usb4-port1: unable to enumerate USB device [ 173.082564][ T8504] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 173.172616][ T8504] kvm: pic: level sensitive irq not supported [ 173.172687][ T8504] kvm: pic: non byte read [ 173.204261][ T8504] kvm: pic: level sensitive irq not supported [ 173.204321][ T8504] kvm: pic: non byte read [ 173.216186][ T8504] kvm: pic: level sensitive irq not supported [ 173.216283][ T8504] kvm: pic: non byte read [ 173.227533][ T8504] kvm: pic: level sensitive irq not supported [ 173.227596][ T8504] kvm: pic: non byte read [ 173.238660][ T8504] kvm: pic: level sensitive irq not supported [ 173.238714][ T8504] kvm: pic: non byte read [ 173.250405][ T8504] kvm: pic: level sensitive irq not supported [ 173.250457][ T8504] kvm: pic: non byte read [ 174.245973][ T5922] gspca_sonixj: reg_w1 err -71 [ 174.389377][ T5922] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 174.408993][ T5922] usb 6-1: USB disconnect, device number 6 [ 176.579287][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 176.805861][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.816270][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 176.972762][ T10] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 176.988467][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 177.027601][ T10] usb 5-1: SerialNumber: syz [ 177.140356][ T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 177.294525][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.502368][ T24] usb 3-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 177.676964][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.733588][ T8605] netlink: 16 bytes leftover after parsing attributes in process `syz.3.499'. [ 178.109959][ T24] usb 3-1: config 0 descriptor?? [ 179.287927][ T10] usb 5-1: 0:2 : does not exist [ 179.301491][ T10] usb 5-1: unit 5: unexpected type 0x0c [ 179.334193][ T10] usb 5-1: USB disconnect, device number 13 [ 179.690523][ T8633] netlink: 16 bytes leftover after parsing attributes in process `syz.3.503'. [ 180.029362][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 180.045776][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 180.084271][ T24] usb 3-1: USB disconnect, device number 11 [ 180.899392][ T30] audit: type=1400 audit(1755805048.484:398): avc: denied { append } for pid=8640 comm="syz.2.506" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 181.358227][ T30] audit: type=1400 audit(1755805049.004:399): avc: denied { setopt } for pid=8647 comm="syz.3.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 181.534600][ T8659] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 181.542254][ T8659] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 181.548444][ T8659] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 181.556253][ T8659] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 182.504131][ T30] audit: type=1400 audit(1755805050.154:400): avc: denied { bind } for pid=8666 comm="syz.5.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 182.727726][ T8677] netlink: 16 bytes leftover after parsing attributes in process `syz.2.512'. [ 183.010840][ T30] audit: type=1400 audit(1755805050.584:401): avc: denied { map } for pid=8668 comm="syz.5.511" path="socket:[17563]" dev="sockfs" ino=17563 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 183.033997][ T30] audit: type=1400 audit(1755805050.594:402): avc: denied { read accept } for pid=8668 comm="syz.5.511" path="socket:[17563]" dev="sockfs" ino=17563 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 183.057778][ T30] audit: type=1400 audit(1755805050.604:403): avc: denied { setopt } for pid=8668 comm="syz.5.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 183.359293][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 183.389445][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 183.584051][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.595051][ T10] usb 5-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 183.669427][ T51] Bluetooth: hci5: command 0x040f tx timeout [ 183.675413][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 183.681556][ T5848] Bluetooth: hci3: command 0x0c1a tx timeout [ 183.705802][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.716084][ T10] usb 5-1: config 0 descriptor?? [ 184.878722][ T30] audit: type=1400 audit(1755805052.524:404): avc: denied { module_load } for pid=8697 comm="syz.1.517" path="/sys/kernel/notes" dev="sysfs" ino=1406 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 184.878787][ T8698] Invalid ELF header magic: != ELF [ 186.138280][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 186.209673][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 186.236374][ T10] usb 5-1: USB disconnect, device number 14 [ 186.362752][ T8722] netlink: 16 bytes leftover after parsing attributes in process `syz.2.524'. [ 186.501475][ T8729] netlink: 16 bytes leftover after parsing attributes in process `syz.3.522'. [ 186.699268][ T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 186.881419][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.894144][ T10] usb 5-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 186.919849][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.034289][ T10] usb 5-1: config 0 descriptor?? [ 187.084005][ T975] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 187.252640][ T975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.362553][ T975] usb 6-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 187.382820][ T975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.727355][ T975] usb 6-1: config 0 descriptor?? [ 188.868176][ T8775] netlink: 16 bytes leftover after parsing attributes in process `syz.1.532'. [ 189.153128][ T5950] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 189.335996][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 189.349420][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 189.365077][ T10] usb 5-1: USB disconnect, device number 15 [ 189.395667][ T5950] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 189.413339][ T5950] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 189.555973][ T5950] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 189.786180][ T5950] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 189.857689][ T975] usbhid 6-1:0.0: can't add hid device: -71 [ 189.936102][ T5950] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 190.032178][ T975] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 190.042512][ T975] usb 6-1: USB disconnect, device number 7 [ 190.065043][ T5950] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 190.093768][ T5950] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 190.115224][ T5950] usb 3-1: Product: syz [ 190.119491][ T5950] usb 3-1: Manufacturer: syz [ 190.131048][ T5950] cdc_wdm 3-1:1.0: skipping garbage [ 190.136321][ T5950] cdc_wdm 3-1:1.0: skipping garbage [ 190.145713][ T5950] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 190.161439][ T5950] cdc_wdm 3-1:1.0: Unknown control protocol [ 190.366328][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 190.372931][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 190.379225][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 190.385795][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 190.392079][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 190.398653][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 190.399933][ T975] usb 3-1: USB disconnect, device number 12 [ 190.404690][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 190.549290][ T43] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 190.699685][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 190.711666][ T43] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 190.720319][ T43] usb 2-1: config 0 has no interface number 0 [ 190.803588][ T43] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 190.815600][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.826004][ T43] usb 2-1: Product: syz [ 190.834277][ T43] usb 2-1: Manufacturer: syz [ 190.839011][ T43] usb 2-1: SerialNumber: syz [ 190.999909][ T43] usb 2-1: config 0 descriptor?? [ 191.030688][ T43] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 191.257094][ T8815] netlink: 16 bytes leftover after parsing attributes in process `syz.5.542'. [ 191.295471][ T43] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 191.312272][ T43] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 191.352320][ T30] audit: type=1400 audit(1755805059.004:405): avc: denied { write } for pid=8818 comm="syz.3.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 191.371405][ C1] vkms_vblank_simulate: vblank timer overrun [ 191.569999][ T30] audit: type=1400 audit(1755805059.154:406): avc: denied { append } for pid=8825 comm="syz.3.545" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 191.722413][ T8835] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 191.733754][ T8835] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 191.998736][ T30] audit: type=1400 audit(1755805059.354:407): avc: denied { mount } for pid=8828 comm="syz.2.546" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 192.020772][ C1] vkms_vblank_simulate: vblank timer overrun [ 192.089998][ T8836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.545'. [ 192.126892][ T8836] netlink: 24 bytes leftover after parsing attributes in process `syz.3.545'. [ 192.478195][ T30] audit: type=1400 audit(1755805060.124:408): avc: denied { unmount } for pid=5852 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 193.117048][ T8862] netlink: 16 bytes leftover after parsing attributes in process `syz.5.550'. [ 193.469918][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 193.477790][ T43] usb 2-1: USB disconnect, device number 9 [ 193.494246][ T43] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 193.538980][ T43] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 193.596228][ T43] quatech2 2-1:0.51: device disconnected [ 193.635868][ T8877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.551'. [ 193.636041][ T8879] FAULT_INJECTION: forcing a failure. [ 193.636041][ T8879] name failslab, interval 1, probability 0, space 0, times 0 [ 193.657373][ T8879] CPU: 1 UID: 0 PID: 8879 Comm: syz.3.552 Not tainted syzkaller #0 PREEMPT(full) [ 193.657389][ T8879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 193.657395][ T8879] Call Trace: [ 193.657399][ T8879] [ 193.657403][ T8879] dump_stack_lvl+0x16c/0x1f0 [ 193.657419][ T8879] should_fail_ex+0x512/0x640 [ 193.657434][ T8879] should_failslab+0xc2/0x120 [ 193.657447][ T8879] __kmalloc_cache_noprof+0x6a/0x3e0 [ 193.657464][ T8879] ? sel_netnode_find+0x206/0x380 [ 193.657479][ T8879] ? sel_netnode_sid+0x364/0xbe0 [ 193.657493][ T8879] sel_netnode_sid+0x364/0xbe0 [ 193.657507][ T8879] selinux_socket_bind+0x579/0xa40 [ 193.657522][ T8879] ? __pfx_selinux_socket_bind+0x10/0x10 [ 193.657537][ T8879] ? __pfx_tomoyo_socket_bind_permission+0x10/0x10 [ 193.657570][ T8879] ? __might_fault+0x13b/0x190 [ 193.657583][ T8879] security_socket_bind+0xc6/0x240 [ 193.657597][ T8879] __sys_bind+0x13e/0x260 [ 193.657613][ T8879] ? __pfx___sys_bind+0x10/0x10 [ 193.657627][ T8879] ? __fget_files+0x20e/0x3c0 [ 193.657642][ T8879] ? __pfx_ksys_write+0x10/0x10 [ 193.657655][ T8879] __x64_sys_bind+0x72/0xb0 [ 193.657669][ T8879] do_syscall_64+0xcd/0x4c0 [ 193.657682][ T8879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.657693][ T8879] RIP: 0033:0x7f239338ebe9 [ 193.657702][ T8879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.657712][ T8879] RSP: 002b:00007f2394289038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 193.657723][ T8879] RAX: ffffffffffffffda RBX: 00007f23935b5fa0 RCX: 00007f239338ebe9 [ 193.657730][ T8879] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000003 [ 193.657737][ T8879] RBP: 00007f2394289090 R08: 0000000000000000 R09: 0000000000000000 [ 193.657743][ T8879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.657750][ T8879] R13: 00007f23935b6038 R14: 00007f23935b5fa0 R15: 00007fffef628ea8 [ 193.657760][ T8879] [ 193.854129][ C1] vkms_vblank_simulate: vblank timer overrun [ 193.966044][ T30] audit: type=1400 audit(1755805061.614:409): avc: denied { create } for pid=8875 comm="syz.1.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 193.974919][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.991613][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.032874][ T30] audit: type=1400 audit(1755805061.614:410): avc: denied { ioctl } for pid=8875 comm="syz.1.551" path="socket:[17928]" dev="sockfs" ino=17928 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 194.195250][ T30] audit: type=1400 audit(1755805061.644:411): avc: denied { write } for pid=8875 comm="syz.1.551" path="socket:[17928]" dev="sockfs" ino=17928 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 194.472740][ T30] audit: type=1400 audit(1755805062.124:412): avc: denied { write } for pid=8900 comm="syz.4.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 194.526858][ T30] audit: type=1400 audit(1755805062.174:413): avc: denied { setopt } for pid=8905 comm="syz.4.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 194.769696][ T30] audit: type=1400 audit(1755805062.174:414): avc: denied { write } for pid=8905 comm="syz.4.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 194.921753][ T8914] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50688 sclass=netlink_route_socket pid=8914 comm=syz.2.561 [ 194.951405][ T8916] kAFS: unable to lookup cell 'syjqd' [ 194.997402][ T8919] netlink: 4 bytes leftover after parsing attributes in process `syz.5.563'. [ 195.008223][ T8919] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.035682][ T8919] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.457242][ T8932] netlink: zone id is out of range [ 195.462832][ T8932] netlink: zone id is out of range [ 195.468544][ T8932] netlink: zone id is out of range [ 195.473826][ T8932] netlink: zone id is out of range [ 195.491925][ T8932] netlink: zone id is out of range [ 195.627565][ T8932] netlink: zone id is out of range [ 195.634084][ T8932] netlink: zone id is out of range [ 195.675007][ T8932] netlink: zone id is out of range [ 195.693100][ T8932] netlink: zone id is out of range [ 195.724481][ T8932] netlink: zone id is out of range [ 196.824551][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 196.824562][ T30] audit: type=1400 audit(1755805064.474:420): avc: denied { unmount } for pid=7932 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 196.999403][ T43] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 197.010399][ T8966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.577'. [ 197.188248][ T8971] evm: overlay not supported [ 197.239326][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 197.248764][ T43] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 197.273226][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.331051][ T43] usb 5-1: Product: syz [ 197.347526][ T43] usb 5-1: Manufacturer: syz [ 197.358807][ T43] usb 5-1: SerialNumber: syz [ 197.377049][ T43] usb 5-1: config 0 descriptor?? [ 197.388093][ T43] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 198.323358][ T30] audit: type=1400 audit(1755805065.964:421): avc: denied { create } for pid=8992 comm="syz.1.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 199.562484][ T30] audit: type=1326 audit(1755805067.214:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9035 comm="syz.3.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239338ebe9 code=0x7ffc0000 [ 199.739303][ T30] audit: type=1326 audit(1755805067.244:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9035 comm="syz.3.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239338ebe9 code=0x7ffc0000 [ 199.762941][ T30] audit: type=1326 audit(1755805067.244:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9035 comm="syz.3.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f239338ebe9 code=0x7ffc0000 [ 199.786071][ C1] vkms_vblank_simulate: vblank timer overrun [ 199.795631][ T30] audit: type=1326 audit(1755805067.244:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9035 comm="syz.3.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239338ebe9 code=0x7ffc0000 [ 199.820190][ C1] vkms_vblank_simulate: vblank timer overrun [ 199.827500][ T30] audit: type=1326 audit(1755805067.244:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9035 comm="syz.3.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239338ebe9 code=0x7ffc0000 [ 199.889202][ T30] audit: type=1326 audit(1755805067.244:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9035 comm="syz.3.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f239338ebe9 code=0x7ffc0000 [ 199.999559][ T30] audit: type=1326 audit(1755805067.244:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9035 comm="syz.3.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239338ebe9 code=0x7ffc0000 [ 200.022880][ C1] vkms_vblank_simulate: vblank timer overrun [ 200.329358][ T43] gspca_sonixj: reg_w1 err -110 [ 200.363623][ T30] audit: type=1326 audit(1755805067.244:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9035 comm="syz.3.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239338ebe9 code=0x7ffc0000 [ 200.386861][ C1] vkms_vblank_simulate: vblank timer overrun [ 200.393222][ T43] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 200.424405][ T9055] netlink: 'syz.2.591': attribute type 12 has an invalid length. [ 200.446491][ T9058] netlink: 4 bytes leftover after parsing attributes in process `syz.5.590'. [ 201.427681][ T43] usb 5-1: USB disconnect, device number 16 [ 201.446325][ T9069] netlink: 68 bytes leftover after parsing attributes in process `syz.1.594'. [ 204.030849][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 204.030866][ T30] audit: type=1400 audit(1755805071.684:437): avc: denied { read } for pid=9116 comm="syz.5.601" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 204.070732][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.600'. [ 204.238544][ T30] audit: type=1400 audit(1755805071.684:438): avc: denied { open } for pid=9116 comm="syz.5.601" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 204.316521][ T9141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.602'. [ 204.432995][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 204.459276][ T43] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 204.544558][ T9150] netlink: 40 bytes leftover after parsing attributes in process `syz.1.607'. [ 204.620761][ T43] usb 6-1: unable to get BOS descriptor or descriptor too short [ 204.629369][ T43] usb 6-1: config 8 has an invalid descriptor of length 43, skipping remainder of the config [ 204.641196][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.652380][ T43] usb 6-1: config 8 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 204.670728][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.686434][ T30] audit: type=1400 audit(1755805072.314:439): avc: denied { setopt } for pid=9148 comm="syz.1.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 204.701801][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 204.819838][ T43] usb 6-1: config 8 interface 0 has no altsetting 0 [ 204.887611][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 204.928747][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.247365][ T30] audit: type=1400 audit(1755805072.799:440): avc: denied { nlmsg_write } for pid=9157 comm="syz.1.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 205.328167][ T9] usb 4-1: config 0 descriptor?? [ 206.037546][ T9180] net_ratelimit: 214 callbacks suppressed [ 206.037564][ T9180] openvswitch: netlink: Missing valid actions attribute. [ 206.247978][ T9180] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.281684][ T43] usb 6-1: New USB device found, idVendor=1efd, idProduct=0001, bcdDevice=6a.e5 [ 207.293707][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.431891][ T43] usb 6-1: Product: 忨妄褜唓抋陬쭵爳✐튉ꏺꯠ볬͖絯稵И湃ᭈ塀䝤捨埅裮烥㪓칠많컘䓋㨢╦ￄ체⒙텵ྼㅶ协䧋욚⒨⨭ꛇ뜦깦暅歼杁꾃훚๝뎌끊젱❒䅲퓹凘ᢇ좶金파焣䭙櫶⡸烴 [ 207.650890][ T43] usb 6-1: Manufacturer: ᐁ [ 208.107515][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 208.113575][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 208.139434][ T43] usb 6-1: can't set config #8, error -71 [ 208.173520][ T43] usb 6-1: USB disconnect, device number 8 [ 208.183752][ T9] usb 4-1: USB disconnect, device number 10 [ 208.491527][ T5950] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 208.519322][ T43] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 208.586022][ T30] audit: type=1326 audit(1755805076.229:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9220 comm="syz.3.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239338ebe9 code=0x7ffc0000 [ 208.625209][ T30] audit: type=1326 audit(1755805076.269:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9220 comm="syz.3.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239338ebe9 code=0x7ffc0000 [ 208.650716][ T30] audit: type=1326 audit(1755805076.269:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9220 comm="syz.3.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f239338ebe9 code=0x7ffc0000 [ 208.670255][ T5950] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 208.676557][ T30] audit: type=1326 audit(1755805076.269:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9220 comm="syz.3.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239338ebe9 code=0x7ffc0000 [ 208.714200][ T30] audit: type=1326 audit(1755805076.269:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9220 comm="syz.3.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239338ebe9 code=0x7ffc0000 [ 208.739352][ T43] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 208.758617][ T5950] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 208.758720][ T30] audit: type=1326 audit(1755805076.269:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9220 comm="syz.3.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f239338ebe9 code=0x7ffc0000 [ 208.790948][ T43] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 208.826829][ T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 208.834562][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 208.836270][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 208.869133][ T9234] netlink: 16 bytes leftover after parsing attributes in process `syz.2.627'. [ 208.958648][ T43] usb 6-1: SerialNumber: syz [ 208.979292][ T5950] usb 2-1: SerialNumber: syz [ 209.109380][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 209.116486][ T24] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 209.125228][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.136607][ T24] usb 5-1: config 0 has no interface number 0 [ 209.145412][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 209.156501][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.166745][ T24] usb 5-1: Product: syz [ 209.175661][ T24] usb 5-1: Manufacturer: syz [ 209.181257][ T24] usb 5-1: SerialNumber: syz [ 209.190560][ T24] usb 5-1: config 0 descriptor?? [ 209.202130][ T24] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 209.208694][ T24] usb 5-1: No valid video chain found. [ 209.407016][ T24] usb 5-1: USB disconnect, device number 17 [ 209.587295][ T43] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 209.599042][ T5950] cdc_ether 2-1:1.0 usb1: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 210.032445][ T9210] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 210.050444][ T5950] usb 6-1: USB disconnect, device number 9 [ 210.061031][ T5950] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 210.090839][ T9217] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 210.102639][ T975] usb 2-1: USB disconnect, device number 10 [ 210.109119][ T975] cdc_ether 2-1:1.0 usb1: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 210.928819][ T5850] Bluetooth: hci5: unexpected event for opcode 0x0c03 [ 211.182824][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 211.182849][ T30] audit: type=1400 audit(1755805078.821:453): avc: denied { read } for pid=9275 comm="syz.1.636" laddr=::1 lport=255 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 211.626441][ T9295] bridge1: entered promiscuous mode [ 211.638909][ T9295] bridge1: entered allmulticast mode [ 211.829573][ T975] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 212.228838][ T9307] netlink: 12 bytes leftover after parsing attributes in process `syz.5.642'. [ 212.339857][ T975] usb 4-1: Using ep0 maxpacket: 8 [ 212.371628][ T9312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.643'. [ 212.373823][ T975] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 212.476263][ T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.528203][ T975] usb 4-1: config 0 descriptor?? [ 212.980928][ T9330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.646'. [ 213.053651][ T1207] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 213.152753][ T975] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 213.360457][ T1207] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 213.376755][ T1207] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 213.386167][ T1207] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 213.395139][ T1207] usb 2-1: SerialNumber: syz [ 213.471648][ T9335] binder: 9334:9335 ioctl c0306201 200000000380 returned -22 [ 213.522115][ T30] audit: type=1400 audit(1755805081.172:454): avc: denied { unmount } for pid=7932 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 213.558179][ T975] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 213.578595][ T975] asix 4-1:0.0: probe with driver asix failed with error -71 [ 213.586931][ T30] audit: type=1400 audit(1755805081.202:455): avc: denied { getopt } for pid=9290 comm="syz.3.639" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 213.631635][ T975] usb 4-1: USB disconnect, device number 11 [ 214.089267][ T975] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 214.432769][ T1207] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 214.457194][ T9350] QAT: Invalid ioctl 21531 [ 214.526051][ T9354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9354 comm=syz.3.651 [ 214.577588][ T975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.597458][ T975] usb 5-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 214.630437][ T975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.653232][ T975] usb 5-1: config 0 descriptor?? [ 214.654773][ T9363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.757814][ T9369] netlink: 16 bytes leftover after parsing attributes in process `syz.2.654'. [ 215.004886][ T9375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.029610][ T9321] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 215.501295][ T24] usb 2-1: USB disconnect, device number 11 [ 215.507662][ T24] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 216.413171][ T9402] ip6erspan0: entered promiscuous mode [ 216.456345][ T9402] usb usb4: usbfs: process 9402 (syz.2.660) did not claim interface 0 before use [ 217.261169][ T975] usbhid 5-1:0.0: can't add hid device: -71 [ 217.267229][ T975] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 217.276287][ T975] usb 5-1: USB disconnect, device number 18 [ 217.283412][ T9415] netlink: 168 bytes leftover after parsing attributes in process `syz.2.663'. [ 217.366693][ T9421] loop6: detected capacity change from 0 to 2098 [ 217.379250][ T30] audit: type=1400 audit(1755805085.012:456): avc: denied { append } for pid=9420 comm="syz.4.664" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 218.990372][ T9456] netlink: 16 bytes leftover after parsing attributes in process `syz.3.671'. [ 219.509406][ T5901] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 219.803987][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.220329][ T5901] usb 3-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 220.243490][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.291783][ T5901] usb 3-1: config 0 descriptor?? [ 220.491394][ T9484] FAULT_INJECTION: forcing a failure. [ 220.491394][ T9484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.507514][ T9484] CPU: 1 UID: 0 PID: 9484 Comm: syz.4.677 Not tainted syzkaller #0 PREEMPT(full) [ 220.507540][ T9484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 220.507551][ T9484] Call Trace: [ 220.507557][ T9484] [ 220.507563][ T9484] dump_stack_lvl+0x16c/0x1f0 [ 220.507589][ T9484] should_fail_ex+0x512/0x640 [ 220.507611][ T9484] _copy_from_user+0x2e/0xd0 [ 220.507633][ T9484] copy_mount_options+0x76/0x190 [ 220.507659][ T9484] __x64_sys_mount+0x1ac/0x310 [ 220.507680][ T9484] ? __pfx___x64_sys_mount+0x10/0x10 [ 220.507706][ T9484] do_syscall_64+0xcd/0x4c0 [ 220.507724][ T9484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.507741][ T9484] RIP: 0033:0x7f9c47d8ebe9 [ 220.507754][ T9484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.507770][ T9484] RSP: 002b:00007f9c48cb5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 220.507787][ T9484] RAX: ffffffffffffffda RBX: 00007f9c47fb5fa0 RCX: 00007f9c47d8ebe9 [ 220.507797][ T9484] RDX: 0000200000000080 RSI: 0000200000000300 RDI: 0000000000000000 [ 220.507808][ T9484] RBP: 00007f9c48cb5090 R08: 0000200000000340 R09: 0000000000000000 [ 220.507818][ T9484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.507828][ T9484] R13: 00007f9c47fb6038 R14: 00007f9c47fb5fa0 R15: 00007ffea5d8f7c8 [ 220.507844][ T9484] [ 221.185821][ T9488] netlink: 16 bytes leftover after parsing attributes in process `syz.3.676'. [ 221.595558][ T9505] program syz.5.682 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 222.270364][ T5901] usbhid 3-1:0.0: can't add hid device: -71 [ 222.326333][ T5901] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 222.340349][ T5901] usb 3-1: USB disconnect, device number 13 [ 222.647614][ T9537] netlink: 16 bytes leftover after parsing attributes in process `syz.2.686'. [ 223.332208][ T9549] netlink: 16 bytes leftover after parsing attributes in process `syz.3.687'. [ 224.745190][ T5901] libceph: connect (1)[c::]:6789 error -101 [ 224.789474][ T5901] libceph: mon0 (1)[c::]:6789 connect error [ 225.065715][ T5901] libceph: connect (1)[c::]:6789 error -101 [ 225.091417][ T5901] libceph: mon0 (1)[c::]:6789 connect error [ 225.224074][ T9571] ceph: No mds server is up or the cluster is laggy [ 226.139486][ T5872] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 226.481469][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.675316][ T30] audit: type=1400 audit(1755805094.322:457): avc: denied { create } for pid=9596 comm="syz.2.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 226.699285][ T975] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 226.702801][ T5872] usb 5-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 226.963092][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.972657][ T5872] usb 5-1: config 0 descriptor?? [ 227.099314][ T975] usb 6-1: Using ep0 maxpacket: 16 [ 227.106133][ T975] usb 6-1: config 0 has an invalid interface number: 173 but max is 0 [ 227.123826][ T975] usb 6-1: config 0 has no interface number 0 [ 227.163723][ T975] usb 6-1: config 0 interface 173 has no altsetting 0 [ 227.191369][ T975] usb 6-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=c6.ae [ 227.210090][ T975] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.218285][ T975] usb 6-1: Product: syz [ 227.353737][ T975] usb 6-1: Manufacturer: syz [ 227.770975][ T975] usb 6-1: SerialNumber: syz [ 227.779503][ T975] usb 6-1: config 0 descriptor?? [ 227.791506][ T975] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 228.011570][ T30] audit: type=1400 audit(1755805095.642:458): avc: denied { create } for pid=9637 comm="syz.2.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 228.041510][ T30] audit: type=1400 audit(1755805095.682:459): avc: denied { setopt } for pid=9637 comm="syz.2.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 228.154942][ T30] audit: type=1400 audit(1755805095.802:460): avc: denied { accept } for pid=9637 comm="syz.2.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 228.177790][ T30] audit: type=1400 audit(1755805095.802:461): avc: denied { ioctl } for pid=9637 comm="syz.2.702" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 228.439310][ T9650] netlink: 16 bytes leftover after parsing attributes in process `syz.1.704'. [ 228.798086][ T9654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.807184][ T9654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.848196][ T9654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.856779][ T9654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.865661][ T9654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.874093][ T9654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.883117][ T5872] usbhid 5-1:0.0: can't add hid device: -71 [ 228.890056][ T5872] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 228.907405][ T5872] usb 5-1: USB disconnect, device number 19 [ 229.996651][ T5901] usb 6-1: USB disconnect, device number 10 [ 230.279275][ T975] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 230.548533][ T9682] IPv6: sit1: Disabled Multicast RS [ 230.555533][ T9682] sit1: entered allmulticast mode [ 230.636097][ T975] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 230.649446][ T975] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 230.659789][ T975] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 231.089325][ T975] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 231.104952][ T975] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 231.193156][ T975] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 231.212548][ T975] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 231.237096][ T975] usb 4-1: Product: syz [ 231.271969][ T975] usb 4-1: Manufacturer: syz [ 231.280872][ T975] cdc_wdm 4-1:1.0: skipping garbage [ 231.286078][ T975] cdc_wdm 4-1:1.0: skipping garbage [ 231.304530][ T975] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 231.304550][ T975] cdc_wdm 4-1:1.0: Unknown control protocol [ 231.380654][ T5850] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 231.486437][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 231.493058][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 231.499443][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 231.506027][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 231.512293][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 231.518863][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 231.525070][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 231.531633][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 231.537819][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 231.544387][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 231.550662][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 231.557227][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 231.569247][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 231.575837][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 231.589232][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 231.595820][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 231.607554][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 231.614136][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 231.624352][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 231.630926][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 231.944071][ T5901] usb 4-1: USB disconnect, device number 12 [ 232.075066][ T9725] netlink: 'syz.5.721': attribute type 4 has an invalid length. [ 232.092494][ T9725] netlink: 'syz.5.721': attribute type 4 has an invalid length. [ 233.885386][ T9751] tipc: Started in network mode [ 233.890329][ T9751] tipc: Node identity , cluster identity 4711 [ 233.917547][ T9751] tipc: Failed to obtain node identity [ 233.924488][ T9751] tipc: Enabling of bearer rejected, failed to enable media [ 233.934753][ T9751] syzkaller0: entered promiscuous mode [ 233.941394][ T9751] syzkaller0: entered allmulticast mode [ 234.291107][ T9751] syzkaller0: mtu less than device minimum [ 235.583732][ T9795] netlink: 16 bytes leftover after parsing attributes in process `syz.1.736'. [ 235.619331][ T975] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 235.791518][ T975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.874804][ T975] usb 6-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 235.916368][ T975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.938621][ T9809] netlink: 'syz.3.740': attribute type 10 has an invalid length. [ 235.990726][ T9809] team0: Port device wlan1 removed [ 236.059756][ T975] usb 6-1: config 0 descriptor?? [ 236.069248][ T30] audit: type=1400 audit(1755805103.698:462): avc: denied { shutdown } for pid=9805 comm="syz.4.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 236.095729][ T9809] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 236.273108][ T30] audit: type=1400 audit(1755805103.918:463): avc: denied { getopt } for pid=9814 comm="syz.3.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 236.812187][ T30] audit: type=1400 audit(1755805104.078:464): avc: denied { write } for pid=9814 comm="syz.3.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 236.936038][ T9831] netlink: 16 bytes leftover after parsing attributes in process `syz.1.742'. [ 238.405806][ T975] usbhid 6-1:0.0: can't add hid device: -71 [ 238.412374][ T975] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 238.440000][ T975] usb 6-1: USB disconnect, device number 11 [ 238.549270][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 238.583540][ T9866] netlink: 16 bytes leftover after parsing attributes in process `syz.1.748'. [ 238.831389][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.842390][ T10] usb 3-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 238.984111][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.052301][ T10] usb 3-1: config 0 descriptor?? [ 240.022199][ T9882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.753'. [ 240.034359][ T9882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.753'. [ 240.043356][ T9882] netlink: 'syz.1.753': attribute type 12 has an invalid length. [ 240.051878][ T9882] netlink: 'syz.1.753': attribute type 13 has an invalid length. [ 241.282862][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 241.288925][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 241.300346][ T10] usb 3-1: USB disconnect, device number 14 [ 241.642420][ T5872] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 241.859326][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 241.871629][ T5872] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 241.903552][ T5872] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 241.912775][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 241.923249][ T5872] usb 4-1: SerialNumber: syz [ 242.069420][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 242.098471][ T10] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 242.116427][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.297319][ T30] audit: type=1400 audit(1755805109.876:465): avc: denied { setopt } for pid=9922 comm="syz.4.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 242.316864][ T10] usb 3-1: config 0 has no interface number 0 [ 242.330977][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 242.340290][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.349392][ T10] usb 3-1: Product: syz [ 242.354463][ T10] usb 3-1: Manufacturer: syz [ 242.359051][ T10] usb 3-1: SerialNumber: syz [ 242.487529][ T10] usb 3-1: config 0 descriptor?? [ 242.505925][ T10] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 242.536186][ T5872] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 242.954158][ T9907] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 242.980236][ T9] usb 4-1: USB disconnect, device number 13 [ 242.986454][ T9] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 243.017228][ T10] usb 3-1: No valid video chain found. [ 243.060151][ T10] usb 3-1: USB disconnect, device number 15 [ 244.329573][ T30] audit: type=1326 audit(1755805111.976:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9953 comm="syz.5.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5d58ebe9 code=0x7fc00000 [ 244.736667][ T30] audit: type=1326 audit(1755805112.376:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9953 comm="syz.5.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fca5d58ebe9 code=0x7fc00000 [ 244.851509][ T9983] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=9983 comm=syz.2.770 [ 244.982937][ T30] audit: type=1400 audit(1755805112.630:468): avc: denied { append } for pid=9982 comm="syz.2.770" name="pfkey" dev="proc" ino=4026533453 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 245.108236][ T9992] tmpfs: Unknown parameter '' [ 245.569300][ T9] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 245.726984][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 245.865492][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.011700][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 246.047198][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 246.058393][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.074975][ T9] usb 3-1: Product: syz [ 246.079489][ T9] usb 3-1: Manufacturer: 䨬禗琂竀⹱嘖驃ῲꉝ心Ⴟ輲詻퇯荗뫽敠楈飦㥗눴㗲̪웁꘵ꎸ೺냌ᬭ᜗Ⓦ굳췉졅飘킇翛툄ꈯ曜能욖復ԓ㚔즱迮ࠀᗋࠈ뇈믫豜栘䱙鳑ሗഁ촿珋ي硦ଯ铋ꥶ스鑩﹄䝵ꦚᆶ೭븚을掠䧦榥瓨ٮ뉎ಛ鍧玣腭懩ẫ脙⊿흫犂늫犿渉࿝壌岉ᡅ࿇脇压啎鯙鰃ꃅ [ 246.114153][ T5888] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 246.123900][ T9] usb 3-1: SerialNumber: syz [ 246.271111][ T5888] usb 5-1: Using ep0 maxpacket: 8 [ 246.277732][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 246.294803][ T5888] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 246.304234][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.319147][ T5888] usb 5-1: config 0 descriptor?? [ 246.446803][ T30] audit: type=1400 audit(1755805114.090:469): avc: denied { create } for pid=9991 comm="syz.2.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 246.541017][ T9] usb 3-1: 0:2 : does not exist [ 246.570854][T10017] netlink: 16 bytes leftover after parsing attributes in process `syz.5.778'. [ 246.606022][ T9] usb 3-1: USB disconnect, device number 16 [ 246.640665][ T5888] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 246.769377][ T975] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 246.829802][ T5856] udevd[5856]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 246.868751][ T30] audit: type=1400 audit(1755805114.510:470): avc: denied { module_request } for pid=10003 comm="syz.4.776" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 246.980854][ T975] usb 2-1: Using ep0 maxpacket: 8 [ 246.991884][ T975] usb 2-1: config 162 has an invalid interface number: 84 but max is 2 [ 247.001088][ T975] usb 2-1: config 162 has an invalid interface number: 3 but max is 2 [ 247.025966][ T975] usb 2-1: config 162 has no interface number 0 [ 247.047126][ T975] usb 2-1: config 162 has no interface number 1 [ 247.054179][ T975] usb 2-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 247.056783][ T5872] usb 5-1: USB disconnect, device number 20 [ 247.069341][ T975] usb 2-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 247.092439][ T975] usb 2-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 247.256128][ T975] usb 2-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 247.295989][T10027] netlink: 20 bytes leftover after parsing attributes in process `syz.2.781'. [ 247.297913][ T975] usb 2-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 247.318719][ T975] usb 2-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 247.332864][ T975] usb 2-1: config 162 interface 84 has no altsetting 0 [ 247.340835][ T975] usb 2-1: config 162 interface 2 has no altsetting 0 [ 247.383953][T10030] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 247.456100][ T975] usb 2-1: config 162 interface 3 has no altsetting 0 [ 247.468251][ T30] audit: type=1400 audit(1755805115.110:471): avc: denied { mount } for pid=10029 comm="syz.3.782" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 247.495521][ T975] usb 2-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 247.659506][ T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.844969][ T975] usb 2-1: Product: syz [ 247.849433][ T975] usb 2-1: Manufacturer: syz [ 247.863030][ T975] usb 2-1: SerialNumber: syz [ 248.277058][ T5850] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 248.286161][ T975] usb 2-1: USB disconnect, device number 12 [ 250.138359][T10078] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 250.148332][T10079] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.575850][ T30] audit: type=1804 audit(1755805119.170:472): pid=10097 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.795" name="/newroot/171/bus/bus" dev="overlay" ino=952 res=1 errno=0 [ 251.597922][ C1] vkms_vblank_simulate: vblank timer overrun [ 252.388759][T10111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.798'. [ 253.294564][T10123] input: syz0 as /devices/virtual/input/input9 [ 253.327534][ T30] audit: type=1400 audit(1755805120.970:473): avc: denied { read } for pid=10122 comm="syz.1.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 253.369267][ T975] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 253.385232][ T30] audit: type=1400 audit(1755805121.030:474): avc: denied { write } for pid=10122 comm="syz.1.802" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 253.555112][ T975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.572458][ T30] audit: type=1400 audit(1755805121.160:475): avc: denied { map } for pid=10126 comm="syz.2.803" path="/dev/video4" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 253.595865][ T975] usb 4-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 253.609460][ T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.622063][ T975] usb 4-1: config 0 descriptor?? [ 254.447132][T10143] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 254.714269][T10135] IPv6: sit1: Disabled Multicast RS [ 254.720020][T10135] sit1: entered allmulticast mode [ 255.256701][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.263011][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.325922][T10171] netlink: 16 bytes leftover after parsing attributes in process `syz.5.810'. [ 256.014418][T10182] FAULT_INJECTION: forcing a failure. [ 256.014418][T10182] name failslab, interval 1, probability 0, space 0, times 0 [ 256.089930][T10182] CPU: 0 UID: 0 PID: 10182 Comm: syz.1.812 Not tainted syzkaller #0 PREEMPT(full) [ 256.089947][T10182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 256.089954][T10182] Call Trace: [ 256.089957][T10182] [ 256.089961][T10182] dump_stack_lvl+0x16c/0x1f0 [ 256.089977][T10182] should_fail_ex+0x512/0x640 [ 256.089991][T10182] should_failslab+0xc2/0x120 [ 256.090004][T10182] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 256.090016][T10182] ? getname_kernel+0x52/0x370 [ 256.090031][T10182] getname_kernel+0x52/0x370 [ 256.090046][T10182] kern_path+0x1d/0x50 [ 256.090057][T10182] bpf_uprobe_multi_link_attach+0x3f4/0x12d0 [ 256.090072][T10182] ? rcu_is_watching+0x12/0xc0 [ 256.090093][T10182] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 256.090107][T10182] ? __fget_files+0x20e/0x3c0 [ 256.090120][T10182] ? fput+0x9b/0xd0 [ 256.090134][T10182] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 256.090148][T10182] __sys_bpf+0x3f3c/0x4de0 [ 256.090162][T10182] ? lock_release+0x201/0x2f0 [ 256.090179][T10182] ? __pfx___sys_bpf+0x10/0x10 [ 256.090193][T10182] ? ksys_write+0x190/0x250 [ 256.090204][T10182] ? rcu_is_watching+0x12/0xc0 [ 256.090217][T10182] ? lock_release+0x201/0x2f0 [ 256.090234][T10182] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 256.090250][T10182] ? fput+0x9b/0xd0 [ 256.090263][T10182] ? ksys_write+0x1ac/0x250 [ 256.090277][T10182] ? __pfx_ksys_write+0x10/0x10 [ 256.090294][T10182] __x64_sys_bpf+0x78/0xc0 [ 256.090316][T10182] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 256.090333][T10182] do_syscall_64+0xcd/0x4c0 [ 256.090346][T10182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.090357][T10182] RIP: 0033:0x7f121ab8ebe9 [ 256.090365][T10182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.090376][T10182] RSP: 002b:00007f121ba14038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 256.090387][T10182] RAX: ffffffffffffffda RBX: 00007f121adb5fa0 RCX: 00007f121ab8ebe9 [ 256.090395][T10182] RDX: 0000000000000040 RSI: 00002000000005c0 RDI: 000000000000001c [ 256.090401][T10182] RBP: 00007f121ba14090 R08: 0000000000000000 R09: 0000000000000000 [ 256.090408][T10182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.090414][T10182] R13: 00007f121adb6038 R14: 00007f121adb5fa0 R15: 00007fff709049d8 [ 256.090424][T10182] [ 256.330314][ C0] vkms_vblank_simulate: vblank timer overrun [ 256.414474][ T975] usbhid 4-1:0.0: can't add hid device: -71 [ 256.420483][ T975] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 256.434782][ T975] usb 4-1: USB disconnect, device number 14 [ 256.470384][T10191] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 256.478677][T10191] vxcan1: entered allmulticast mode [ 256.638185][T10194] netlink: 16 bytes leftover after parsing attributes in process `syz.3.815'. [ 256.642545][T10195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.814'. [ 256.648618][ T30] audit: type=1400 audit(1755805124.292:476): avc: denied { search } for pid=10193 comm="syz.1.814" name="/" dev="configfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 256.745623][ T30] audit: type=1400 audit(1755805124.292:477): avc: denied { search } for pid=10193 comm="syz.1.814" name="/" dev="configfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 256.767606][ C0] vkms_vblank_simulate: vblank timer overrun [ 256.782632][ T30] audit: type=1400 audit(1755805124.292:478): avc: denied { read open } for pid=10193 comm="syz.1.814" path="/" dev="configfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 257.510935][ T30] audit: type=1400 audit(1755805124.522:479): avc: denied { bind } for pid=10204 comm="syz.4.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 257.533102][ T30] audit: type=1400 audit(1755805124.522:480): avc: denied { listen } for pid=10204 comm="syz.4.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 257.626518][ T30] audit: type=1400 audit(1755805125.272:481): avc: denied { read } for pid=10206 comm="syz.2.816" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 257.650681][ C0] vkms_vblank_simulate: vblank timer overrun [ 257.703150][ T30] audit: type=1400 audit(1755805125.272:482): avc: denied { open } for pid=10206 comm="syz.2.816" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 257.839232][ T5872] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 258.020045][ T5872] usb 4-1: Using ep0 maxpacket: 32 [ 258.032375][ T5872] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 258.049245][ T975] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 258.074287][ T5872] usb 4-1: config 0 has no interface number 0 [ 258.146849][ T5872] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 258.177945][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.194213][ T5872] usb 4-1: Product: syz [ 258.201258][ T5872] usb 4-1: Manufacturer: syz [ 258.221776][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.222413][ T5872] usb 4-1: SerialNumber: syz [ 258.233183][ T975] usb 3-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 258.255817][ T5872] usb 4-1: config 0 descriptor?? [ 258.266492][ T5872] smsc95xx v2.0.0 [ 258.305096][ T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.572030][ T975] usb 3-1: config 0 descriptor?? [ 259.202686][ T5872] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 259.216871][ T5872] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 259.737883][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 259.737900][ T30] audit: type=1400 audit(1755805127.302:484): avc: denied { bind } for pid=10214 comm="syz.3.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 260.495001][ T5872] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 260.515466][ T5872] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 260.540129][ T5872] usb 4-1: USB disconnect, device number 15 [ 260.769294][ T5901] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 260.863262][ T975] usbhid 3-1:0.0: can't add hid device: -71 [ 260.889347][ T975] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 260.904609][ T975] usb 3-1: USB disconnect, device number 17 [ 260.979433][ T30] audit: type=1400 audit(1755805128.602:485): avc: denied { read } for pid=10271 comm="syz.2.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 261.532764][ T5901] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 261.604670][T10275] mac80211_hwsim hwsim7 : renamed from wlan0 [ 261.611232][ T5901] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 261.611254][ T5901] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 261.611282][ T5901] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 261.611310][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 261.611330][ T5901] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 261.708852][ T5901] usb 5-1: string descriptor 0 read error: -22 [ 261.719278][ T5901] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 261.729262][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.749690][ T5901] usb 5-1: config 0 descriptor?? [ 261.756074][T10257] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 261.765036][ T5901] hub 5-1:0.0: bad descriptor, ignoring hub [ 261.774069][ T5901] hub 5-1:0.0: probe with driver hub failed with error -5 [ 261.880037][ T5901] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input10 [ 261.893955][ T30] audit: type=1400 audit(1755805129.542:486): avc: denied { read write } for pid=10280 comm="syz.2.835" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 261.938954][ T30] audit: type=1400 audit(1755805129.542:487): avc: denied { open } for pid=10280 comm="syz.2.835" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 262.036206][ T1207] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 262.138527][ T975] usb 5-1: USB disconnect, device number 21 [ 262.360458][ T1207] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.371544][ T1207] usb 6-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 262.384777][ T1207] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.416605][ T1207] usb 6-1: config 0 descriptor?? [ 262.622379][ T24] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 262.803609][ T24] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 263.061865][ T24] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 263.094617][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 263.332966][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 263.461525][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 263.524509][ T24] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 263.534562][ T24] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 263.587673][ T24] usb 2-1: Product: syz [ 263.594907][ T24] usb 2-1: Manufacturer: syz [ 263.691249][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 263.697721][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 263.715958][ T24] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 263.819031][ T24] cdc_wdm 2-1:1.0: Unknown control protocol [ 263.982490][ T24] usb 2-1: USB disconnect, device number 13 [ 264.725292][ T1207] usbhid 6-1:0.0: can't add hid device: -71 [ 264.737187][ T1207] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 264.904875][T10322] netlink: 300 bytes leftover after parsing attributes in process `syz.5.843'. [ 264.922815][ T1207] usb 6-1: USB disconnect, device number 12 [ 264.981018][T10327] 9pnet_fd: Insufficient options for proto=fd [ 265.023301][T10327] No control pipe specified [ 265.359408][T10331] netlink: 16 bytes leftover after parsing attributes in process `syz.3.846'. [ 265.580417][T10343] netlink: 4 bytes leftover after parsing attributes in process `syz.5.848'. [ 265.591476][T10343] bridge_slave_1: left allmulticast mode [ 265.598056][T10343] bridge_slave_1: left promiscuous mode [ 265.604908][T10343] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.634815][T10343] bridge_slave_0: left allmulticast mode [ 265.642758][T10343] bridge_slave_0: left promiscuous mode [ 265.653056][T10343] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.729238][ T5888] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 267.266689][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.279501][ T5888] usb 2-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 267.291237][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.300575][ T5888] usb 2-1: config 0 descriptor?? [ 267.379293][ T1207] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 267.599247][ T1207] usb 4-1: Using ep0 maxpacket: 16 [ 268.155415][ T1207] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 268.184716][ T1207] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.215411][ T1207] usb 4-1: config 0 has no interface number 0 [ 268.223440][ T1207] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 268.233300][ T1207] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.241997][ T1207] usb 4-1: Product: syz [ 268.246275][ T1207] usb 4-1: Manufacturer: syz [ 268.252083][ T1207] usb 4-1: SerialNumber: syz [ 268.264803][ T1207] usb 4-1: config 0 descriptor?? [ 268.273283][ T1207] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 268.282667][ T1207] usb 4-1: No valid video chain found. [ 268.419233][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 268.477053][ T1207] usb 4-1: USB disconnect, device number 16 [ 268.708895][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 268.722817][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 268.731957][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 268.740577][ T9] usb 3-1: SerialNumber: syz [ 268.810680][ T30] audit: type=1400 audit(1755805136.458:488): avc: denied { setopt } for pid=10377 comm="syz.5.857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 268.918092][ T30] audit: type=1400 audit(1755805136.548:489): avc: denied { create } for pid=10377 comm="syz.5.857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 269.314917][T10384] fuse: Bad value for 'user_id' [ 269.321711][T10384] fuse: Bad value for 'user_id' [ 269.356015][ T9] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 269.369249][ T1207] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 269.553154][ T5888] usbhid 2-1:0.0: can't add hid device: -71 [ 269.558263][ T1207] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 269.559193][ T5888] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 269.580851][ T1207] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 269.595699][ T1207] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 269.600364][ T5888] usb 2-1: USB disconnect, device number 14 [ 269.641038][ T1207] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 269.671473][ T1207] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 269.737659][ T1207] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 269.756415][ T1207] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 269.780507][ T1207] usb 5-1: Product: syz [ 269.784818][ T1207] usb 5-1: Manufacturer: syz [ 269.851863][ T1207] cdc_wdm 5-1:1.0: skipping garbage [ 269.863940][ T1207] cdc_wdm 5-1:1.0: skipping garbage [ 269.869572][T10371] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 269.891179][ T1207] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 269.960545][ T1207] cdc_wdm 5-1:1.0: Unknown control protocol [ 270.012403][ T1207] usb 3-1: USB disconnect, device number 18 [ 270.030800][ T1207] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 270.093326][ T43] usb 5-1: USB disconnect, device number 22 [ 270.692101][ T30] audit: type=1400 audit(1755805138.328:490): avc: denied { write } for pid=10423 comm="syz.2.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 270.789258][ T1207] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 270.922669][ T5888] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 270.958880][T10442] netlink: 16 bytes leftover after parsing attributes in process `syz.2.868'. [ 271.022235][ T1207] usb 4-1: Using ep0 maxpacket: 16 [ 271.153669][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.188621][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.209817][ T1207] usb 4-1: config 0 has an invalid interface number: 173 but max is 0 [ 271.356371][ T5888] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 271.385949][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.519410][ T5888] usb 2-1: config 0 descriptor?? [ 271.538985][ T1207] usb 4-1: config 0 has no interface number 0 [ 271.575088][ T1207] usb 4-1: config 0 interface 173 has no altsetting 0 [ 271.633178][ T1207] usb 4-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=c6.ae [ 271.646938][ T1207] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.655305][ T1207] usb 4-1: Product: syz [ 271.669680][ T1207] usb 4-1: Manufacturer: syz [ 271.679204][ T1207] usb 4-1: SerialNumber: syz [ 271.816084][ T1207] usb 4-1: config 0 descriptor?? [ 271.823923][ T1207] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 271.958048][T10421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.967266][T10421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.976256][ T5950] usb 2-1: USB disconnect, device number 15 [ 272.459227][ T1207] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 272.701120][ T1207] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 272.722174][ T30] audit: type=1400 audit(1755805140.368:491): avc: denied { map } for pid=10487 comm="syz.1.876" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 272.748071][ T1207] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 272.805572][ T1207] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 272.814518][ T1207] usb 3-1: SerialNumber: syz [ 272.818132][ T30] audit: type=1400 audit(1755805140.368:492): avc: denied { execute } for pid=10487 comm="syz.1.876" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 272.847588][T10490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.861354][T10490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.886363][T10490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.949245][ T24] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 272.978938][T10490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.054319][T10490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.063499][T10490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.130846][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 273.138737][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 273.155030][ T24] usb 2-1: config 6 has an invalid interface number: 150 but max is 1 [ 273.163348][ T24] usb 2-1: config 6 has 1 interface, different from the descriptor's value: 2 [ 273.173242][ T24] usb 2-1: config 6 has no interface number 0 [ 273.182966][ T24] usb 2-1: config 6 interface 150 has no altsetting 0 [ 273.194783][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice=87.08 [ 273.223521][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.268830][ T24] usb 2-1: Product: syz [ 273.273779][ T24] usb 2-1: Manufacturer: syz [ 273.278388][ T24] usb 2-1: SerialNumber: syz [ 273.492132][ T1207] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 273.585126][ T5888] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 273.790984][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.803316][ T5888] usb 5-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 273.813589][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.825407][ T5888] usb 5-1: config 0 descriptor?? [ 273.948839][T10463] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 273.976429][ T1207] usb 3-1: USB disconnect, device number 19 [ 273.991167][ T1207] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 274.132377][ T24] gspca_main: STV06xx-2.14.0 probing 046d:08f6 [ 274.138584][ T24] gspca_stv06xx: st6422 sensor detected [ 274.175854][ T5901] usb 4-1: USB disconnect, device number 17 [ 274.429672][ T24] STV06xx 2-1:6.150: probe with driver STV06xx failed with error -71 [ 274.552380][ T24] usb 2-1: unknown interface protocol 0x25, assuming v1 [ 274.581794][ T24] usb 2-1: cannot find UAC_HEADER [ 275.148669][ T24] snd-usb-audio 2-1:6.150: probe with driver snd-usb-audio failed with error -22 [ 275.167181][T10543] FAULT_INJECTION: forcing a failure. [ 275.167181][T10543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.188227][ T24] usb 2-1: USB disconnect, device number 16 [ 275.189597][T10543] CPU: 0 UID: 0 PID: 10543 Comm: syz.2.883 Not tainted syzkaller #0 PREEMPT(full) [ 275.189620][T10543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 275.189629][T10543] Call Trace: [ 275.189634][T10543] [ 275.189640][T10543] dump_stack_lvl+0x16c/0x1f0 [ 275.189660][T10543] should_fail_ex+0x512/0x640 [ 275.189679][T10543] _copy_from_user+0x2e/0xd0 [ 275.189699][T10543] move_addr_to_kernel+0x65/0x170 [ 275.189720][T10543] __sys_sendto+0x1be/0x520 [ 275.189743][T10543] ? __pfx___sys_sendto+0x10/0x10 [ 275.189772][T10543] ? ksys_write+0x1ac/0x250 [ 275.189788][T10543] ? __pfx_ksys_write+0x10/0x10 [ 275.189804][T10543] __x64_sys_sendto+0xe0/0x1c0 [ 275.189831][T10543] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 275.189850][T10543] do_syscall_64+0xcd/0x4c0 [ 275.189866][T10543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.189882][T10543] RIP: 0033:0x7f30f218ebe9 [ 275.189894][T10543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.189909][T10543] RSP: 002b:00007f30f30a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 275.189925][T10543] RAX: ffffffffffffffda RBX: 00007f30f23b5fa0 RCX: 00007f30f218ebe9 [ 275.189935][T10543] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 275.189944][T10543] RBP: 00007f30f30a5090 R08: 0000200000000280 R09: 0000000000000080 [ 275.189954][T10543] R10: 0000000020000041 R11: 0000000000000246 R12: 0000000000000001 [ 275.189963][T10543] R13: 00007f30f23b6038 R14: 00007f30f23b5fa0 R15: 00007ffc7b4ad438 [ 275.189978][T10543] [ 275.220179][ T5856] udevd[5856]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:6.150/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 276.190484][ T1207] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 276.356357][ T5888] usbhid 5-1:0.0: can't add hid device: -71 [ 276.371061][ T5888] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 276.387234][ T1207] usb 6-1: Using ep0 maxpacket: 8 [ 276.407189][ T1207] usb 6-1: unable to get BOS descriptor or descriptor too short [ 276.408651][ T5888] usb 5-1: USB disconnect, device number 23 [ 276.418193][ T1207] usb 6-1: config 9 has an invalid interface number: 78 but max is 0 [ 276.443878][ T1207] usb 6-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 276.482776][ T1207] usb 6-1: config 9 has no interface number 0 [ 276.498979][ T1207] usb 6-1: config 9 interface 78 has no altsetting 0 [ 276.526739][ T1207] usb 6-1: New USB device found, idVendor=07fa, idProduct=0846, bcdDevice=86.84 [ 276.536187][ T1207] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.574229][ T1207] usb 6-1: Product: syz [ 276.584367][ T1207] usb 6-1: Manufacturer: syz [ 276.599307][ T1207] usb 6-1: SerialNumber: syz [ 276.614113][ T1207] HFC-S_USB 6-1:9.78: probe with driver HFC-S_USB failed with error -5 [ 276.689368][ T5950] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 276.913226][ T10] usb 6-1: USB disconnect, device number 13 [ 277.079873][ T5950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.093119][ T5950] usb 4-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 277.136462][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.373070][ T5950] usb 4-1: config 0 descriptor?? [ 279.474642][ T5950] usbhid 4-1:0.0: can't add hid device: -71 [ 279.481338][ T5950] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 279.504616][ T5950] usb 4-1: USB disconnect, device number 18 [ 280.199272][ T5901] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 280.297428][T10667] sp0: Synchronizing with TNC [ 280.542438][ T5901] usb 3-1: Using ep0 maxpacket: 32 [ 280.562175][ T5901] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 280.575266][ T5901] usb 3-1: config 0 has no interface number 0 [ 280.603897][ T5901] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 280.634428][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.647705][ T5901] usb 3-1: Product: syz [ 280.679624][ T5901] usb 3-1: Manufacturer: syz [ 280.686092][ T5901] usb 3-1: SerialNumber: syz [ 280.735878][ T5901] usb 3-1: config 0 descriptor?? [ 280.746391][ T5901] smsc95xx v2.0.0 [ 281.166658][ T5901] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 281.243335][ T5901] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 281.472212][T10695] FAULT_INJECTION: forcing a failure. [ 281.472212][T10695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.496087][T10695] CPU: 1 UID: 0 PID: 10695 Comm: syz.5.913 Not tainted syzkaller #0 PREEMPT(full) [ 281.496111][T10695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 281.496121][T10695] Call Trace: [ 281.496126][T10695] [ 281.496132][T10695] dump_stack_lvl+0x16c/0x1f0 [ 281.496150][T10695] should_fail_ex+0x512/0x640 [ 281.496164][T10695] _copy_from_iter+0x29f/0x16f0 [ 281.496179][T10695] ? __alloc_skb+0x200/0x380 [ 281.496189][T10695] ? __pfx__copy_from_iter+0x10/0x10 [ 281.496203][T10695] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 281.496217][T10695] netlink_sendmsg+0x829/0xdd0 [ 281.496230][T10695] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.496244][T10695] ____sys_sendmsg+0xa95/0xc70 [ 281.496258][T10695] ? copy_msghdr_from_user+0x10a/0x160 [ 281.496269][T10695] ? __pfx_____sys_sendmsg+0x10/0x10 [ 281.496282][T10695] ? __pfx_kstrtouint+0x10/0x10 [ 281.496299][T10695] ? kstrtouint_from_user+0x13c/0x1d0 [ 281.496315][T10695] ___sys_sendmsg+0x134/0x1d0 [ 281.496332][T10695] ? __pfx____sys_sendmsg+0x10/0x10 [ 281.496346][T10695] ? rcu_is_watching+0x12/0xc0 [ 281.496365][T10695] __sys_sendmsg+0x16d/0x220 [ 281.496375][T10695] ? __pfx___sys_sendmsg+0x10/0x10 [ 281.496389][T10695] do_syscall_64+0xcd/0x4c0 [ 281.496401][T10695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.496413][T10695] RIP: 0033:0x7fca5d58ebe9 [ 281.496422][T10695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.496433][T10695] RSP: 002b:00007fca5e3f3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.496444][T10695] RAX: ffffffffffffffda RBX: 00007fca5d7b5fa0 RCX: 00007fca5d58ebe9 [ 281.496451][T10695] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 0000000000000006 [ 281.496458][T10695] RBP: 00007fca5e3f3090 R08: 0000000000000000 R09: 0000000000000000 [ 281.496464][T10695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.496471][T10695] R13: 00007fca5d7b6038 R14: 00007fca5d7b5fa0 R15: 00007fff707bfe88 [ 281.496481][T10695] [ 281.699458][ C1] vkms_vblank_simulate: vblank timer overrun [ 281.710193][ T43] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 281.881384][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.892308][ T43] usb 5-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 281.901385][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.910874][ T43] usb 5-1: config 0 descriptor?? [ 282.130997][ T5901] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 282.192135][ T5901] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -61 [ 282.369351][ T24] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 282.589216][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 282.610605][ T24] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 282.676703][ T24] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 282.684887][ T24] usb 6-1: Product: syz [ 282.689099][ T24] usb 6-1: Manufacturer: syz [ 282.693758][ T24] usb 6-1: SerialNumber: syz [ 282.835707][ T24] usb 6-1: config 0 descriptor?? [ 283.035371][T10718] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 283.041983][T10718] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 283.049466][T10718] vhci_hcd vhci_hcd.0: Device attached [ 283.229316][ T24] vhci_hcd: vhci_device speed not set [ 283.309370][ T24] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 283.402868][ T5950] usb 3-1: USB disconnect, device number 20 [ 283.504738][T10724] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 283.606975][T10719] vhci_hcd: connection reset by peer [ 283.613759][ T59] vhci_hcd: stop threads [ 283.623753][ T59] vhci_hcd: release socket [ 283.640540][ T59] vhci_hcd: disconnect device [ 284.285270][ T43] usbhid 5-1:0.0: can't add hid device: -71 [ 284.294011][ T43] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 284.305321][ T43] usb 5-1: USB disconnect, device number 24 [ 284.449228][ T1207] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 284.599565][ T1207] usb 4-1: Using ep0 maxpacket: 16 [ 284.639228][ T43] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 284.691056][ T1207] usb 4-1: config 0 has an invalid interface number: 173 but max is 0 [ 284.707478][ T1207] usb 4-1: config 0 has no interface number 0 [ 284.714860][ T1207] usb 4-1: config 0 interface 173 has no altsetting 0 [ 284.754901][ T1207] usb 4-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=c6.ae [ 284.796127][ T1207] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.829273][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 284.879284][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 284.895428][ T1207] usb 4-1: Product: syz [ 284.947067][ T43] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 284.965184][ T1207] usb 4-1: Manufacturer: syz [ 284.993445][ T5950] usb 6-1: USB disconnect, device number 14 [ 285.000096][ T1207] usb 4-1: SerialNumber: syz [ 285.029429][ T1207] usb 4-1: config 0 descriptor?? [ 285.116423][ T43] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 285.126923][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.138406][ T1207] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 285.174063][ T43] usb 5-1: config 0 descriptor?? [ 285.586783][ T43] playstation 0003:054C:0DF2.0001: report_id 1108778202 is invalid [ 285.594759][ T43] playstation 0003:054C:0DF2.0001: item 0 4 1 8 parsing failed [ 285.602627][ T43] playstation 0003:054C:0DF2.0001: Parse failed [ 285.608878][ T43] playstation 0003:054C:0DF2.0001: probe with driver playstation failed with error -22 [ 285.699477][ T1207] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 285.759276][T10752] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 285.859240][ T1207] usb 2-1: Using ep0 maxpacket: 32 [ 285.865652][ T1207] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.876776][ T1207] usb 2-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 285.885840][ T1207] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.894578][ T1207] usb 2-1: config 0 descriptor?? [ 285.919213][T10752] usb 3-1: Using ep0 maxpacket: 32 [ 285.925353][T10752] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 285.933509][T10752] usb 3-1: config 0 has no interface number 0 [ 285.941734][T10752] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 285.953401][T10752] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.961487][T10752] usb 3-1: Product: syz [ 285.965678][T10752] usb 3-1: Manufacturer: syz [ 285.970293][T10752] usb 3-1: SerialNumber: syz [ 285.986142][T10752] usb 3-1: config 0 descriptor?? [ 285.992755][T10752] smsc95xx v2.0.0 [ 286.156081][T10765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.164679][T10765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.175297][T10765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.184072][T10765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.195795][T10765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.204305][T10765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.279242][ T10] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 286.302099][ T5950] usb 5-1: USB disconnect, device number 25 [ 286.309685][ T1207] lenovo 0003:17EF:60A3.0002: unknown main item tag 0x1 [ 286.318040][ T1207] lenovo 0003:17EF:60A3.0002: hidraw0: USB HID v0.80 Device [HID 17ef:60a3] on usb-dummy_hcd.1-1/input0 [ 286.401752][T10752] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 286.412722][T10752] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 286.429274][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 286.435495][ T10] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 286.443836][ T10] usb 6-1: config 0 has no interface number 0 [ 286.451395][ T10] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 286.460458][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.468434][ T10] usb 6-1: Product: syz [ 286.472918][ T10] usb 6-1: Manufacturer: syz [ 286.477492][ T10] usb 6-1: SerialNumber: syz [ 286.482999][ T10] usb 6-1: config 0 descriptor?? [ 286.489523][ T10] smsc95xx v2.0.0 [ 286.525223][T10759] sp0: Synchronizing with TNC [ 286.535419][ T1207] usb 2-1: USB disconnect, device number 17 [ 286.891512][ T10] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 286.902346][ T10] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 287.089296][ T5950] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 287.239289][T10752] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 287.309853][ T5950] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.321474][ T43] usb 4-1: USB disconnect, device number 19 [ 287.510481][T10752] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -61 [ 287.555105][ T5950] usb 5-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 287.869711][ T31] INFO: task syz-executor:5845 blocked for more than 143 seconds. [ 287.873593][ T10] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 287.877678][ T31] Not tainted syzkaller #0 [ 287.892206][ T5950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.902055][ T10] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -61 [ 287.922324][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 287.928272][ T5950] usb 5-1: config 0 descriptor?? [ 288.023382][ T31] task:syz-executor state:D stack:23528 pid:5845 tgid:5845 ppid:1 task_flags:0x400140 flags:0x00004004 [ 288.038593][ T31] Call Trace: [ 288.042142][ T31] [ 288.051271][ T31] __schedule+0x1190/0x5de0 [ 288.075899][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 288.082992][ T31] ? __pfx___schedule+0x10/0x10 [ 288.087992][ T31] ? schedule+0x2d7/0x3a0 [ 288.095591][ T31] ? rcu_is_watching+0x12/0xc0 [ 288.100502][ T31] ? lock_release+0x201/0x2f0 [ 288.105301][ T31] schedule+0xe7/0x3a0 [ 288.110395][ T31] v9fs_evict_inode+0x26f/0x300 [ 288.115312][ T31] ? __pfx_v9fs_evict_inode+0x10/0x10 [ 288.120752][ T31] ? __pfx_var_wake_function+0x10/0x10 [ 288.126259][ T31] ? rcu_is_watching+0x12/0xc0 [ 288.132945][ T31] ? lock_release+0x201/0x2f0 [ 288.137668][ T31] ? __pfx_v9fs_evict_inode+0x10/0x10 [ 288.143087][ T31] evict+0x3e3/0x920 [ 288.147011][ T31] ? __pfx_evict+0x10/0x10 [ 288.152973][ T31] ? rcu_is_watching+0x12/0xc0 [ 288.157881][ T31] ? lock_release+0x201/0x2f0 [ 288.162983][ T31] iput+0x521/0x880 [ 288.166913][ T31] ? __pfx_v9fs_drop_inode+0x10/0x10 [ 288.173487][ T31] dentry_unlink_inode+0x29c/0x480 [ 288.178651][ T31] __dentry_kill+0x1d0/0x600 [ 288.183402][ T31] dput.part.0+0x4b1/0x9b0 [ 288.187910][ T31] shrink_dcache_for_umount+0x159/0x3e0 [ 288.196667][ T31] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 288.202779][ T31] generic_shutdown_super+0x6c/0x390 [ 288.208133][ T31] kill_anon_super+0x3a/0x60 [ 288.244760][ T31] v9fs_kill_super+0x3d/0xa0 [ 288.250867][ T31] deactivate_locked_super+0xc1/0x1a0 [ 288.256404][ T31] deactivate_super+0xde/0x100 [ 288.261559][ T31] cleanup_mnt+0x225/0x450 [ 288.266047][ T31] task_work_run+0x14d/0x240 [ 288.272314][ T31] ? __pfx_task_work_run+0x10/0x10 [ 288.277503][ T31] ? __pfx___x64_sys_umount+0x10/0x10 [ 288.283288][ T31] exit_to_user_mode_loop+0xeb/0x110 [ 288.310563][ T31] do_syscall_64+0x3f6/0x4c0 [ 288.315273][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.321533][ T31] RIP: 0033:0x7f14ea58ff17 [ 288.326021][ T31] RSP: 002b:00007fffd8243048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 288.335380][ T31] RAX: 0000000000000000 RBX: 00007f14ea611c05 RCX: 00007f14ea58ff17 [ 288.344129][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffd8243100 [ 288.354080][ T31] RBP: 00007fffd8243100 R08: 0000000000000000 R09: 0000000000000000 [ 288.495395][T10788] PM: Image not found (code -22) [ 288.677059][ T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffd8244190 [ 288.685182][ T31] R13: 00007f14ea611c05 R14: 000000000001fb61 R15: 00007fffd82441d0 [ 288.693247][ T31] [ 288.742001][ T31] INFO: lockdep is turned off. [ 288.749810][ T31] NMI backtrace for cpu 0 [ 288.749825][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 288.749846][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 288.749858][ T31] Call Trace: [ 288.749864][ T31] [ 288.749869][ T31] dump_stack_lvl+0x116/0x1f0 [ 288.749888][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 288.749904][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 288.749923][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 288.749940][ T31] watchdog+0xf0e/0x1260 [ 288.749954][ T31] ? __pfx_watchdog+0x10/0x10 [ 288.749965][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 288.749976][ T31] ? __kthread_parkme+0x19e/0x250 [ 288.749992][ T31] ? __pfx_watchdog+0x10/0x10 [ 288.750004][ T31] kthread+0x3c2/0x780 [ 288.750014][ T31] ? __pfx_kthread+0x10/0x10 [ 288.750029][ T31] ? rcu_is_watching+0x12/0xc0 [ 288.750049][ T31] ? __pfx_kthread+0x10/0x10 [ 288.750066][ T31] ret_from_fork+0x5d7/0x6f0 [ 288.750080][ T31] ? __pfx_kthread+0x10/0x10 [ 288.750096][ T31] ret_from_fork_asm+0x1a/0x30 [ 288.750118][ T31] [ 288.750150][ T31] Sending NMI from CPU 0 to CPUs 1: [ 288.865609][ C1] NMI backtrace for cpu 1 [ 288.865623][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 288.865637][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 288.865645][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 288.865664][ C1] Code: 5c 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 72 16 00 fb f4 4c 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 288.865676][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2 [ 288.865687][ C1] RAX: 0000000000f7846c RBX: 0000000000000001 RCX: ffffffff8b939c29 [ 288.865696][ C1] RDX: ffffed10170a6656 RSI: ffffffff8c162880 RDI: ffffffff81913321 [ 288.865704][ C1] RBP: ffffed1003c5d488 R08: 0000000000000000 R09: ffffed10170a6655 [ 288.865713][ C1] R10: ffff8880b85332ab R11: 0000000000000001 R12: 0000000000000001 [ 288.865722][ C1] R13: ffff88801e2ea440 R14: ffffffff90ab4090 R15: 0000000000000000 [ 288.865732][ C1] FS: 0000000000000000(0000) GS:ffff8881247bc000(0000) knlGS:0000000000000000 [ 288.865745][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 288.865753][ C1] CR2: 0000200000028000 CR3: 00000000355b0000 CR4: 00000000003526f0 [ 288.865762][ C1] Call Trace: [ 288.865767][ C1] [ 288.865771][ C1] default_idle+0x13/0x20 [ 288.865786][ C1] default_idle_call+0x6d/0xb0 [ 288.865800][ C1] do_idle+0x391/0x510 [ 288.865817][ C1] ? __pfx_do_idle+0x10/0x10 [ 288.865832][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 288.865847][ C1] cpu_startup_entry+0x4f/0x60 [ 288.865863][ C1] start_secondary+0x21d/0x2b0 [ 288.865881][ C1] ? __pfx_start_secondary+0x10/0x10 [ 288.865900][ C1] common_startup_64+0x13e/0x148 [ 288.865918][ C1] [ 288.867430][ T24] vhci_hcd: vhci_device speed not set [ 288.867591][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 288.867604][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 288.867626][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 288.867635][ T31] Call Trace: [ 288.867640][ T31] [ 288.867646][ T31] dump_stack_lvl+0x3d/0x1f0 [ 288.867670][ T31] vpanic+0x6e8/0x7a0 [ 288.867693][ T31] ? __pfx_vpanic+0x10/0x10 [ 288.867717][ T31] panic+0xca/0xd0 [ 288.867739][ T31] ? __pfx_panic+0x10/0x10 [ 288.867761][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 288.867784][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 288.867807][ T31] ? watchdog+0xd78/0x1260 [ 288.867825][ T31] ? watchdog+0xd6b/0x1260 [ 288.867841][ T31] watchdog+0xd89/0x1260 [ 288.867859][ T31] ? __pfx_watchdog+0x10/0x10 [ 288.867875][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 288.867891][ T31] ? __kthread_parkme+0x19e/0x250 [ 288.867914][ T31] ? __pfx_watchdog+0x10/0x10 [ 288.867931][ T31] kthread+0x3c2/0x780 [ 288.867946][ T31] ? __pfx_kthread+0x10/0x10 [ 288.867962][ T31] ? rcu_is_watching+0x12/0xc0 [ 288.867982][ T31] ? __pfx_kthread+0x10/0x10 [ 288.867996][ T31] ret_from_fork+0x5d7/0x6f0 [ 288.868011][ T31] ? __pfx_kthread+0x10/0x10 [ 288.868026][ T31] ret_from_fork_asm+0x1a/0x30 [ 288.868048][ T31] [ 289.173141][ T31] Kernel Offset: disabled [ 289.177437][ T31] Rebooting in 86400 seconds..