last executing test programs: 1m25.29151543s ago: executing program 4 (id=328): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000040)={0x98f904, 0x4, @name="57e053ddf85358e0cc4be9c957eb8d4d746bb6db29cbb6becbffd5f094d4802c"}) read$FUSE(0xffffffffffffffff, &(0x7f0000001ac0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xff65) move_pages(r2, 0x4, &(0x7f0000000100)=[&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000c57000/0x2000)=nil], &(0x7f00000001c0)=[0x7, 0x2, 0xb], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4) sendmmsg$inet6(r3, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f00000002c0)=ANY=[@ANYRES8], 0x0) 1m25.095991986s ago: executing program 4 (id=329): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000200)={0x10000000}) socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty}, 0x1c) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card2/oss_mixer\x00', 0x4200, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$kcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) listen(r2, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f0000000240)="c4", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x5}, 0x1c) 1m24.485962694s ago: executing program 4 (id=333): syz_usb_connect(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0xd7, 0xb8, 0x19, 0x40, 0x110a, 0x1151, 0x1b1d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x7f, 0xa0, 0xf3, [{{0x9, 0x4, 0xa6, 0xb, 0x2, 0x9d, 0x3d, 0xa8, 0x4, [], [{{0x9, 0x5, 0x2, 0x2, 0x10, 0xb, 0x29, 0x4}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0xb, 0x7, 0x7}}]}}]}}]}}, 0x0) socketpair(0x2, 0x0, 0x124, 0x0) (async) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x20040010}, 0x4004005) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000700000000000000000a38000000060a010e0000000000000000020000000900020073797a32000000000900010073797a30000000000c000640"], 0x60}, 0x1, 0x0, 0x0, 0x20048880}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0) (async) lseek(0xffffffffffffffff, 0xfffffffffffffff7, 0x1) (async) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000000)=0x800, 0x4) (async) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000b, 0x11, r3, 0x2006000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r4 = socket$unix(0x1, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) syz_open_dev$vim2m(0x0, 0x8000000000000000, 0x2) ioctl$FICLONE(r4, 0x40049409, r4) (async) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x3003}, 0x4) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) (async) write$binfmt_aout(r3, 0x0, 0xffffffdb) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1m23.451971764s ago: executing program 4 (id=336): mkdir(&(0x7f0000000140)='./file1\x00', 0x1a0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x800000000003, 0x1, 0x2000200000a95e, 0x7, 0x5, 0x1, 0x48cd, 0x0, 0x800000e3}) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1812c1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$poke(0x1, r2, &(0x7f0000000040), 0x0) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000340)) fchown(r1, 0xee01, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000150a030000000000903630b9f85a2bab1900020073797a2d000000004f8d38e1515e23be05e62eb260"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4) 1m23.339722319s ago: executing program 4 (id=337): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$ITER_CREATE(0xb, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000340)={[0x5, 0x3c566418, 0x68a2, 0x6, 0x5, 0x1, 0x5, 0x5, 0x401, 0xffb, 0xe4c, 0xffffffffffffffff, 0x7, 0x0, 0x9, 0x8], 0x2000, 0x202000}) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, 0x0, 0x8000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, 0x0, 0x20000050) keyctl$dh_compute(0x17, &(0x7f0000000100), 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffb0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(r4, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x40002000, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x60e82, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x900, 0x12) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, 0x0, &(0x7f0000000040)) ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000080)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xee00}) 1m23.140997655s ago: executing program 4 (id=339): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d1000905070000000000000905899b"], 0x0) syz_usb_connect$cdc_ecm(0x6, 0xa2, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x90, 0x1, 0x1, 0x0, 0x80, 0x2, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x0, "c0eb9220"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0xfffffffc, 0x5, 0x9}, [@mdlm={0x15, 0x24, 0x12, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x8000, 0x5, 0x3}, @mdlm={0x15, 0x24, 0x12, 0xd}, @mdlm_detail={0x17, 0x24, 0x13, 0x6, "9d0af8a2167d396178bf136f115e64560021c8"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x6, 0x9, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0xff, 0x81, 0x7}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0xc, 0x1a, 0x6, 0x8, 0x6b}, 0xa3, &(0x7f0000000180)={0x5, 0xf, 0xa3, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0x5, 0xa}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x1, 0x6, 0x8}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x6, 0x1, 0x200}, @generic={0x83, 0x10, 0x5, "61e86e24e674be6beb9e54bc806110747ff7ff864a04df918214ad6ecc679ca1328879491d0940ab1a21f32f9b685472e4d12b7a63df5e6b26a0db37fbc5fe5df859a81e638d42e3540fb68fcc0b9cdc7ec3b57a3fbc79c35c5a9ce27020f1caae3faa982455287c7a453c32437774766a84a5fcf225b7856526022ca2058493"}, @ptm_cap={0x3}]}, 0x8, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x807}}, {0x7, &(0x7f00000002c0)=@string={0x7, 0x3, "e51274e0ee"}}, {0x6, &(0x7f0000000300)=@string={0x6, 0x3, "68abaec4"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x2809}}, {0x78, &(0x7f0000000400)=@string={0x78, 0x3, "4f8f81d2d50eb5b23d56db8a75b0b664179d6f717dda56163af30b331231879b709169a7df1d0bd4a5ad13d58a92c4be9b0efaa0bdc1d7fdfb5e300c541ed58fed1cf8901f6186d1659a8cff220ac09ff83552865827c22edaf3f560f8bb4f10c88b3b427f4bad49fe4a63635734dd16e179329e3449"}}]}) syz_usb_control_io$printer(r0, 0x0, 0x0) openat$mice(0xffffff9c, &(0x7f0000000040), 0x105040) 1m22.922266392s ago: executing program 32 (id=339): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d1000905070000000000000905899b"], 0x0) syz_usb_connect$cdc_ecm(0x6, 0xa2, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x90, 0x1, 0x1, 0x0, 0x80, 0x2, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x0, "c0eb9220"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0xfffffffc, 0x5, 0x9}, [@mdlm={0x15, 0x24, 0x12, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x8000, 0x5, 0x3}, @mdlm={0x15, 0x24, 0x12, 0xd}, @mdlm_detail={0x17, 0x24, 0x13, 0x6, "9d0af8a2167d396178bf136f115e64560021c8"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x6, 0x9, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0xff, 0x81, 0x7}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0xc, 0x1a, 0x6, 0x8, 0x6b}, 0xa3, &(0x7f0000000180)={0x5, 0xf, 0xa3, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0x5, 0xa}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x1, 0x6, 0x8}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x6, 0x1, 0x200}, @generic={0x83, 0x10, 0x5, "61e86e24e674be6beb9e54bc806110747ff7ff864a04df918214ad6ecc679ca1328879491d0940ab1a21f32f9b685472e4d12b7a63df5e6b26a0db37fbc5fe5df859a81e638d42e3540fb68fcc0b9cdc7ec3b57a3fbc79c35c5a9ce27020f1caae3faa982455287c7a453c32437774766a84a5fcf225b7856526022ca2058493"}, @ptm_cap={0x3}]}, 0x8, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x807}}, {0x7, &(0x7f00000002c0)=@string={0x7, 0x3, "e51274e0ee"}}, {0x6, &(0x7f0000000300)=@string={0x6, 0x3, "68abaec4"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x2809}}, {0x78, &(0x7f0000000400)=@string={0x78, 0x3, "4f8f81d2d50eb5b23d56db8a75b0b664179d6f717dda56163af30b331231879b709169a7df1d0bd4a5ad13d58a92c4be9b0efaa0bdc1d7fdfb5e300c541ed58fed1cf8901f6186d1659a8cff220ac09ff83552865827c22edaf3f560f8bb4f10c88b3b427f4bad49fe4a63635734dd16e179329e3449"}}]}) syz_usb_control_io$printer(r0, 0x0, 0x0) openat$mice(0xffffff9c, &(0x7f0000000040), 0x105040) 25.399865219s ago: executing program 1 (id=514): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={0x0}, &(0x7f0000000540)=0xc) syz_open_procfs(r0, &(0x7f0000000580)='net/l2cap\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) pipe(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0x200000, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x2, {0x6, 0x0, 0xffffffffffffffff, 0x200000000, 0x800, 0x0, {0x8, 0x1, 0x0, 0x0, 0x3, 0x7, 0xfffffffc, 0x4, 0x9, 0x1000, 0xfffffffd, r5, 0x0, 0xfcc00000, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x3, 0x0, 0xffff, 0x4000000000000, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x2000, 0x0, r5, 0x0, 0x440, 0x880000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = open(&(0x7f0000000000)='./file0/file0\x00', 0xa02, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_LEAVE_IBSS(r7, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000005baaf46771b405b524be61a34a5471beafe125bdb54693c3188c36040cc83b9be7229f2e514fcc69c9da41347ffb05aa3ccdf9e9e1571f549a45795285a8d325c4b2b785e68622bf7baa36c6aaca2c4fbba7a826c65d07e47730536b67799c0754b5a7f224ebf82065551754e9ff2aa1510aef2f2b2c564eaca26b9f950b7ae95931f8060363bade893a36d0b1647134d3fb8053bb88509494b0a0e9abc60dcd23877f8654", @ANYRES16, @ANYBLOB="02002dbd7000fedbdf252c000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004004}, 0x211d5f10f1484315) r8 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000000)={0xf0f071, 0x1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4006a04}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=@mpls_getnetconf={0x14, 0x52, 0x20, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$FS_IOC_GETVERSION(r6, 0x540a, 0x0) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000008, 0x80010, r9, 0x0) 23.203305547s ago: executing program 1 (id=521): r0 = socket$inet6(0xa, 0x3, 0x5) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = dup3(r1, r0, 0x0) sendmmsg$inet6(r2, &(0x7f0000001580)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0xfff, @mcast1, 0xe}, 0x1c, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0) 23.1270169s ago: executing program 1 (id=523): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={{0xb0}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}}, 0xb0}}, 0x0) 22.820085081s ago: executing program 1 (id=524): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x42000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0xa4) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x82, &(0x7f00000001c0)="020900000080efff", 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0xc0189436, &(0x7f0000000140)) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 20.995122791s ago: executing program 1 (id=526): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000c00)}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000070000000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') r4 = creat(&(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa) r5 = fanotify_init(0xf00, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x79, &(0x7f0000000580)="db5a294351393a996712e4cd8b4912af4b144ac7c5244aebeadd54a668414f0f39849df2d7c0c69b0abbfe726ecc8247f4d216f56c45252747f6b01fa7ecd99000d1846543689f29922c071cce04d0a32807d3d20d8cb38869ec3785619bf04fdf4ec780c377de9a5c008c6c1059fd549d69f64bfd35ac2214") fanotify_mark(r5, 0x105, 0x40009975, r4, 0x0) 20.628951924s ago: executing program 1 (id=530): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb058}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002b40), 0x82, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000280)='keyring\x00', &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000380)="899753ef44c633c882d97da46512f17f29fd2fee5555e55c1485b04e01c18c95c32b61e33d462d777c240f034ff90dc6b1f99a", 0x33, 0xfffffffffffffffd) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000040}, 0x20004811) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCFLSH(r4, 0x80047456, 0xffefff1f00000000) 20.093501495s ago: executing program 33 (id=530): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb058}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002b40), 0x82, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000280)='keyring\x00', &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000380)="899753ef44c633c882d97da46512f17f29fd2fee5555e55c1485b04e01c18c95c32b61e33d462d777c240f034ff90dc6b1f99a", 0x33, 0xfffffffffffffffd) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000040}, 0x20004811) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCFLSH(r4, 0x80047456, 0xffefff1f00000000) 10.561427423s ago: executing program 3 (id=558): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) close(r1) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) close(r0) 10.347519034s ago: executing program 5 (id=559): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000200)={0x2, 0x5, 0x3, 0x6, 0x4, 0xe, 0x81, 0xf, 0x80, 0xf9, 0xa, 0x7f, 0xf, 0x1}, 0xe) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000180)=@tcp}, 0x20) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000001000000000000090000000800010001000000050008000b0000000500080009000000050007"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0xc004) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x3ff, 0x3, 0x4}, 0x51, [0xd4, 0x6, 0x9, 0x8a4, 0x2, 0x2, 0x80000002, 0x80000001, 0x5, 0x1, 0x101, 0x3c6, 0x7, 0x6, 0xf70, 0x3, 0xe7, 0x7, 0x401, 0xbc5e, 0x0, 0x1, 0x8, 0xffff, 0xe, 0xe, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x6, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1ff4, 0x1, 0x1, 0x80000000, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x1, 0x1, 0x6, 0x2, 0x5, 0x9, 0x5, 0x9, 0x0, 0x3a20, 0x1000, 0x8, 0x1, 0x6, 0x7ff, 0xb8547353], [0x80000000, 0xffffffff, 0x4, 0x5, 0x80000000, 0x1, 0x553, 0x6, 0x2, 0xfffffffc, 0x8, 0xc, 0x36, 0xa, 0x6, 0x1, 0x9, 0x98, 0x8, 0xe56d, 0xa4, 0x4, 0x99d, 0x8, 0x5, 0xd, 0x400, 0x0, 0x6e38, 0x8000, 0xa, 0x2, 0x3, 0x0, 0x5, 0x7, 0x4, 0xd, 0x9, 0xfff, 0x4, 0x0, 0x40, 0x1, 0x8, 0x5, 0x9, 0x0, 0x34f1, 0x10, 0x4, 0x1b2c5a17, 0x0, 0x9, 0xc, 0x77c8cac8, 0xffffffff, 0x1004, 0x6, 0x6, 0xac, 0x2, 0x54, 0xcfb9], [0x6, 0xdb8, 0x9, 0x4, 0x2, 0x6, 0x5, 0x5, 0x3, 0x5, 0xfffffffd, 0xc8d3, 0x33, 0x9a45, 0x0, 0xee40000, 0x1, 0x1, 0x43, 0x69d, 0x8, 0xffff, 0x0, 0x0, 0x8, 0x2, 0x4, 0x20000800, 0x7, 0x9, 0x1, 0x0, 0x1, 0xfffffffe, 0x3, 0x0, 0x9, 0x8c0, 0x109, 0x2, 0xa, 0x7, 0x7, 0xfffffffa, 0x81, 0x8, 0xffffff20, 0x55f2, 0xdf46, 0xfffffffd, 0x7f, 0x9, 0x8000, 0x40, 0x3, 0x2, 0xa, 0x6, 0x2, 0xffffff00, 0xda15, 0x7f, 0x3, 0x10], [0x0, 0x897, 0x8, 0x246a, 0x6, 0x101, 0xfffff410, 0xd, 0x7ff, 0x606, 0x4, 0x9, 0x80000001, 0x2, 0xb, 0x2, 0x7, 0x1, 0x7, 0x2, 0x7ff, 0x3ff, 0x0, 0x2, 0x6, 0x100, 0x1, 0xec9b, 0x61c8, 0x6, 0x0, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0xe, 0x4000006, 0x7, 0x1, 0xd, 0x0, 0x4, 0x100009, 0x100, 0x3, 0x5, 0x1000, 0x5, 0x2, 0x15, 0x8000, 0x7, 0x85, 0x5, 0x7, 0xfffffffc, 0x4, 0x6, 0xeff]}, 0x45c) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 10.291977556s ago: executing program 3 (id=560): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=ANY=[@ANYBLOB="280000002d00090027bd7000000000000500000014000a000bffff00000000000000000000000001b05c2390816ebc0c1d9365a68ae00224c78922733d86f00b8ace91bd13cad799d0139ef4e63426afc092a0a6e515ee795a2aa7253223e42dc5f04ec492b5fc683eaa7fb16d679ed4d078a9cc5c91a463b394d89c940c21886eb5c23b4f5bedaa43f449dce8f9edde536a927e56468600526e2ca613593ccc50a6"], 0x28}, 0x1, 0x0, 0x0, 0x24004000}, 0x84) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[], 0x0) r2 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d2", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r10 = gettid() process_vm_writev(r10, &(0x7f0000000040)=[{&(0x7f0000000000)=""/45, 0x2d}], 0x1, &(0x7f0000000440), 0x0, 0x0) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = signalfd(r8, &(0x7f0000000240)={[0x3]}, 0xfffffeac) read(r12, &(0x7f0000000cc0)=""/384, 0x180) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1398, 0x0, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x23, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) 8.778668811s ago: executing program 5 (id=564): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000200)={0x2, 0x5, 0x3, 0x6, 0x4, 0xe, 0x81, 0xf, 0x80, 0xf9, 0xa, 0x7f, 0xf, 0x1}, 0xe) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000180)=@tcp}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x3ff, 0x3, 0x4}, 0x51, [0xd4, 0x6, 0x9, 0x8a4, 0x2, 0x2, 0x80000002, 0x80000001, 0x5, 0x1, 0x101, 0x3c6, 0x7, 0x6, 0xf70, 0x3, 0xe7, 0x7, 0x401, 0xbc5e, 0x0, 0x1, 0x8, 0xffff, 0xe, 0xe, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x6, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1ff4, 0x1, 0x1, 0x80000000, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x1, 0x1, 0x6, 0x2, 0x5, 0x9, 0x5, 0x9, 0x0, 0x3a20, 0x1000, 0x8, 0x1, 0x6, 0x7ff, 0xb8547353], [0x80000000, 0xffffffff, 0x4, 0x5, 0x80000000, 0x1, 0x553, 0x6, 0x2, 0xfffffffc, 0x8, 0xc, 0x36, 0xa, 0x6, 0x1, 0x9, 0x98, 0x8, 0xe56d, 0xa4, 0x4, 0x99d, 0x8, 0x5, 0xd, 0x400, 0x0, 0x6e38, 0x8000, 0xa, 0x2, 0x3, 0x0, 0x5, 0x7, 0x4, 0xd, 0x9, 0xfff, 0x4, 0x0, 0x40, 0x1, 0x8, 0x5, 0x9, 0x0, 0x34f1, 0x10, 0x4, 0x1b2c5a17, 0x0, 0x9, 0xc, 0x77c8cac8, 0xffffffff, 0x1004, 0x6, 0x6, 0xac, 0x2, 0x54, 0xcfb9], [0x6, 0xdb8, 0x9, 0x4, 0x2, 0x6, 0x5, 0x5, 0x3, 0x5, 0xfffffffd, 0xc8d3, 0x33, 0x9a45, 0x0, 0xee40000, 0x1, 0x1, 0x43, 0x69d, 0x8, 0xffff, 0x0, 0x0, 0x8, 0x2, 0x4, 0x20000800, 0x7, 0x9, 0x1, 0x0, 0x1, 0xfffffffe, 0x3, 0x0, 0x9, 0x8c0, 0x109, 0x2, 0xa, 0x7, 0x7, 0xfffffffa, 0x81, 0x8, 0xffffff20, 0x55f2, 0xdf46, 0xfffffffd, 0x7f, 0x9, 0x8000, 0x40, 0x3, 0x2, 0xa, 0x6, 0x2, 0xffffff00, 0xda15, 0x7f, 0x3, 0x10], [0x0, 0x897, 0x8, 0x246a, 0x6, 0x101, 0xfffff410, 0xd, 0x7ff, 0x606, 0x4, 0x9, 0x80000001, 0x2, 0xb, 0x2, 0x7, 0x1, 0x7, 0x2, 0x7ff, 0x3ff, 0x0, 0x2, 0x6, 0x100, 0x1, 0xec9b, 0x61c8, 0x6, 0x0, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0xe, 0x4000006, 0x7, 0x1, 0xd, 0x0, 0x4, 0x100009, 0x100, 0x3, 0x5, 0x1000, 0x5, 0x2, 0x15, 0x8000, 0x7, 0x85, 0x5, 0x7, 0xfffffffc, 0x4, 0x6, 0xeff]}, 0x45c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 8.622517248s ago: executing program 2 (id=565): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d1000905070000000000000905899b"], 0x0) syz_usb_connect$cdc_ecm(0x6, 0x9a, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x1, 0x1, 0x0, 0x80, 0x2, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x2, 0x6, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x0, "c0eb9220c8"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0xfffffffc, 0x5, 0x9}, [@mdlm={0x15, 0x24, 0x12, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x8000, 0x5, 0x3}, @mdlm={0x15, 0x24, 0x12, 0xd}, @mdlm_detail={0xe, 0x24, 0x13, 0x6, "9d0af8a2167d396178bf"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x6, 0x9, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0xff, 0x81, 0x7}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0xc, 0x1a, 0x6, 0x8, 0x6b}, 0xa3, &(0x7f0000000180)={0x5, 0xf, 0xa3, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0x5, 0xa}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x1, 0x6, 0x8}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x6, 0x1, 0x200}, @generic={0x83, 0x10, 0x5, "61e86e24e674be6beb9e54bc806110747ff7ff864a04df918214ad6ecc679ca1328879491d0940ab1a21f32f9b685472e4d12b7a63df5e6b26a0db37fbc5fe5df859a81e638d42e3540fb68fcc0b9cdc7ec3b57a3fbc79c35c5a9ce27020f1caae3faa982455287c7a453c32437774766a84a5fcf225b7856526022ca2058493"}, @ptm_cap={0x3}]}, 0x8, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x807}}, {0x7, &(0x7f00000002c0)=@string={0x7, 0x3, "e51274e0ee"}}, {0x6, &(0x7f0000000300)=@string={0x6, 0x3, "68abaec4"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x2809}}, {0x78, &(0x7f0000000400)=@string={0x78, 0x3, "4f8f81d2d50eb5b23d56db8a75b0b664179d6f717dda56163af30b331231879b709169a7df1d0bd4a5ad13d58a92c4be9b0efaa0bdc1d7fdfb5e300c541ed58fed1cf8901f6186d1659a8cff220ac09ff83552865827c22edaf3f560f8bb4f10c88b3b427f4bad49fe4a63635734dd16e179329e3449"}}]}) syz_usb_control_io$printer(r0, 0x0, 0x0) openat$mice(0xffffff9c, &(0x7f0000000040), 0x105040) 8.221880451s ago: executing program 3 (id=566): mknod$loop(&(0x7f00000003c0)='./file0\x00', 0x8, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdir(0x0, 0x184) rmdir(&(0x7f0000000280)='./control\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x24}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe(&(0x7f00000042c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r4, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[], 0x60}}, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000004200200029bd7000fcdbdf2500ce7e3167a2b1a2045697000000"], 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x4040880) getpid() sendfile(r6, r6, 0x0, 0x1) r7 = dup2(r0, r0) inotify_add_watch(r7, &(0x7f0000000000)='./file0\x00', 0xa0000080) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x40005, 0x3ffffffc, 0x10}) 7.710769489s ago: executing program 3 (id=567): syz_io_uring_complete(0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0x3) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000100)=0x400, 0x4) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) (fail_nth: 3) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 7.682338865s ago: executing program 5 (id=568): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002280fcc448160942aa474879902b5401f10b5d8c3dda148e445a6c09610000000000"], 0x0}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r6, 0x1, 0x1, 0x25dfdbfd, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4048080}, 0x40000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000300)={{0x8, 0x6}, {0x4, 0x7}, 0x6c4, 0x0, 0x9}) r7 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r7, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f00000000c0), 0xf00) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r8 = dup(0xffffffffffffffff) waitid(0x2, 0xffffffffffffffff, 0x0, 0x2, 0x0) write$FUSE_BMAP(r8, 0x0, 0x0) 6.677779354s ago: executing program 3 (id=570): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x28, 0x1, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d00000085"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x74df82a6, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3e}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff00000000"], 0x8) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000020000000000000000"], 0x10) sendmmsg$inet6(r4, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) 4.180491435s ago: executing program 2 (id=571): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="01000000050000000200000007"], 0x50) r1 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x400000000001, 0x180, 0x20ff, 0x6, 0x89, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], 0x0, 0xa2, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x83, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) 3.086701729s ago: executing program 3 (id=572): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d1000905070000000000000905899b"], 0x0) syz_usb_connect$cdc_ecm(0x6, 0x9a, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x1, 0x1, 0x0, 0x80, 0x2, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x2, 0x6, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x0, "c0eb9220c8"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0xfffffffc, 0x5, 0x9}, [@mdlm={0x15, 0x24, 0x12, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x8000, 0x5, 0x3}, @mdlm={0x15, 0x24, 0x12, 0xd}, @mdlm_detail={0xe, 0x24, 0x13, 0x6, "9d0af8a2167d396178bf"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x6, 0x9, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0xff, 0x81, 0x7}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0xc, 0x1a, 0x6, 0x8, 0x6b}, 0xa3, &(0x7f0000000180)={0x5, 0xf, 0xa3, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0x5, 0xa}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x1, 0x6, 0x8}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x6, 0x1, 0x200}, @generic={0x83, 0x10, 0x5, "61e86e24e674be6beb9e54bc806110747ff7ff864a04df918214ad6ecc679ca1328879491d0940ab1a21f32f9b685472e4d12b7a63df5e6b26a0db37fbc5fe5df859a81e638d42e3540fb68fcc0b9cdc7ec3b57a3fbc79c35c5a9ce27020f1caae3faa982455287c7a453c32437774766a84a5fcf225b7856526022ca2058493"}, @ptm_cap={0x3}]}, 0x8, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x807}}, {0x7, &(0x7f00000002c0)=@string={0x7, 0x3, "e51274e0ee"}}, {0x6, &(0x7f0000000300)=@string={0x6, 0x3, "68abaec4"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x2809}}, {0x78, &(0x7f0000000400)=@string={0x78, 0x3, "4f8f81d2d50eb5b23d56db8a75b0b664179d6f717dda56163af30b331231879b709169a7df1d0bd4a5ad13d58a92c4be9b0efaa0bdc1d7fdfb5e300c541ed58fed1cf8901f6186d1659a8cff220ac09ff83552865827c22edaf3f560f8bb4f10c88b3b427f4bad49fe4a63635734dd16e179329e3449"}}]}) syz_usb_control_io$printer(r0, 0x0, 0x0) openat$mice(0xffffff9c, &(0x7f0000000040), 0x105040) 3.008065316s ago: executing program 2 (id=573): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) rmdir(&(0x7f0000000000)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@acquire={0x174, 0x17, 0x1, 0x0, 0x0, {{@in6=@private0}, @in6=@remote, {@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {{@in6=@private2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}, @tmpl={0x44, 0x5, [{{@in=@loopback, 0x0, 0x3c}, 0x0, @in6=@mcast1}]}]}, 0x174}}, 0x0) 2.94080965s ago: executing program 0 (id=574): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000140)={0x1, 0x1, 0x1a, 0x12, 0x87, 0x0}) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 2.826665001s ago: executing program 2 (id=575): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000200)={0x2, 0x5, 0x3, 0x6, 0x4, 0xe, 0x81, 0xf, 0x80, 0xf9, 0xa, 0x7f, 0xf, 0x1}, 0xe) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000180)=@tcp}, 0x20) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000001000000000000090000000800010001000000050008000b0000000500080009000000050007"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0xc004) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x3ff, 0x3, 0x4}, 0x51, [0xd4, 0x6, 0x9, 0x8a4, 0x2, 0x2, 0x80000002, 0x80000001, 0x5, 0x1, 0x101, 0x3c6, 0x7, 0x6, 0xf70, 0x3, 0xe7, 0x7, 0x401, 0xbc5e, 0x0, 0x1, 0x8, 0xffff, 0xe, 0xe, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x6, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1ff4, 0x1, 0x1, 0x80000000, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x1, 0x1, 0x6, 0x2, 0x5, 0x9, 0x5, 0x9, 0x0, 0x3a20, 0x1000, 0x8, 0x1, 0x6, 0x7ff, 0xb8547353], [0x80000000, 0xffffffff, 0x4, 0x5, 0x80000000, 0x1, 0x553, 0x6, 0x2, 0xfffffffc, 0x8, 0xc, 0x36, 0xa, 0x6, 0x1, 0x9, 0x98, 0x8, 0xe56d, 0xa4, 0x4, 0x99d, 0x8, 0x5, 0xd, 0x400, 0x0, 0x6e38, 0x8000, 0xa, 0x2, 0x3, 0x0, 0x5, 0x7, 0x4, 0xd, 0x9, 0xfff, 0x4, 0x0, 0x40, 0x1, 0x8, 0x5, 0x9, 0x0, 0x34f1, 0x10, 0x4, 0x1b2c5a17, 0x0, 0x9, 0xc, 0x77c8cac8, 0xffffffff, 0x1004, 0x6, 0x6, 0xac, 0x2, 0x54, 0xcfb9], [0x6, 0xdb8, 0x9, 0x4, 0x2, 0x6, 0x5, 0x5, 0x3, 0x5, 0xfffffffd, 0xc8d3, 0x33, 0x9a45, 0x0, 0xee40000, 0x1, 0x1, 0x43, 0x69d, 0x8, 0xffff, 0x0, 0x0, 0x8, 0x2, 0x4, 0x20000800, 0x7, 0x9, 0x1, 0x0, 0x1, 0xfffffffe, 0x3, 0x0, 0x9, 0x8c0, 0x109, 0x2, 0xa, 0x7, 0x7, 0xfffffffa, 0x81, 0x8, 0xffffff20, 0x55f2, 0xdf46, 0xfffffffd, 0x7f, 0x9, 0x8000, 0x40, 0x3, 0x2, 0xa, 0x6, 0x2, 0xffffff00, 0xda15, 0x7f, 0x3, 0x10], [0x0, 0x897, 0x8, 0x246a, 0x6, 0x101, 0xfffff410, 0xd, 0x7ff, 0x606, 0x4, 0x9, 0x80000001, 0x2, 0xb, 0x2, 0x7, 0x1, 0x7, 0x2, 0x7ff, 0x3ff, 0x0, 0x2, 0x6, 0x100, 0x1, 0xec9b, 0x61c8, 0x6, 0x0, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0xe, 0x4000006, 0x7, 0x1, 0xd, 0x0, 0x4, 0x100009, 0x100, 0x3, 0x5, 0x1000, 0x5, 0x2, 0x15, 0x8000, 0x7, 0x85, 0x5, 0x7, 0xfffffffc, 0x4, 0x6, 0xeff]}, 0x45c) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) 2.659484977s ago: executing program 0 (id=576): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401) ioctl$USBDEVFS_BULK(r0, 0x5523, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x22f98153de81046b) socket$packet(0x11, 0x3, 0x300) fspick(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x6, 0x0, &(0x7f0000000600)) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet(r1, &(0x7f0000003700)=[{{&(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000480), 0x0, &(0x7f0000003800)=ANY=[@ANYRESDEC=r2], 0x18}}, {{&(0x7f0000000500)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001cc0)=[{&(0x7f0000000880)="62aa5037785a86ad8cd4628499e95159a3312eeb5ee7a7e6b7be4bec91b8dc87afc3698ebef563114a2531264b4a629ebf3124b72f3bf03bce969a9db01955fc58b0d97e5991e0404f5fb838aafde6ff1aa89afddfb81673d646a050a7a821842c96e13e8280bd6951341df249443665202d2f4298cd63f0dc795e55eb4dfa25155955f8f48e74b33f8d8509fa6252ddce74f2f074dab4532e12de98d364eb68d6120006c6a1517c2c6ffdfd1f1317b312df", 0xb2}, {&(0x7f0000000940)="5f8fdb7bef1ab6bc1d9aa80b0e6405508d810271850f1cead037f15f9d739f998e39b35b78f44dc95b3058eeeb987e5e74afb8c9273aa11c1478cceca7c83ba9be65a5ef9e8390bf6fb1a4deaad64faf1f7b54fa99d15124eb73ffe3f62f1cac294d7a48d0ad322ec4ccaf6d0525288f565f67666d3b58226163c3d350f82b39f5d9d8267465fbe45bac6a421f18f30082626deac16f8c16e44f045bd4af9fb2a52f7e0fed9a7e59ae003fe962bcfad2fb329609c7b880096633b3600c81b4a2c6089ea5e8db53feea05ad990ecd83963b40", 0xd2}, {&(0x7f0000000a40)="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", 0x1000}, {&(0x7f0000000580)="ff541706eeb0cb87bfd3c45ededf3723ef2ac301d09fdf4660a57c3f8f8635deab3b64a8b594f0f91ab1ed6ac1aabc7aac223fe4e92a73723c36fcd008852ddd4735bd0dc2f9c81b2df9ccc4bccaa5c808032714fdee744d817ff3fc489ad30817076b38b1c43003fbed0c9731c0095befd34bea2ffe026402545b5cf6c8ddab", 0x80}, {&(0x7f0000001a40)="c8f1fdac0dce9c72f4a63a0a0acbeeb6cb02f4ad360250b4824bd7292433dd2a20ae1adafe239fb200eeca98d7de90b0bb9a23f60c46a45c103d93d5703da9f3fc7e0fe3f9b26a9fe5aeecb2d7ff4c8c551d5f1153348eec442c43e84a31e66e6995452c2006f70baed59b428cd8a967249b7891748e6d97eacd943891238f670ddee99ee121be789b11532be62a84c0c3ac174363520268e027ccdcee2d0c5574e415d4f404cdc501d786a7d3a48a971dd3986ece40aca5f597", 0xba}, {&(0x7f0000001b00)="6b4838475206f43a3ee435527780ac689e48c8e33d7fd3b17fdcb0270dd3845c342573c079e174b99a73da7a2920288579f822deff2d2a4fea8ab9b2cdf0dc03e7c015049cec859717725129725654b1ed865c45ee8ffa9eaabb799b4a5931b32c73803fa028f25c6661dc57dda014c8f578c694f772ec9c3c0436dbce9c0e59e4c00865e0442d69a116112d54c30a1aee9491bf437e11ddd0984b60f109b1a85053dc66a63b117f6e7e2eaa112609f92aed9769d01b4a8511c9db3b14bb60b7039441c71732fd7f6758091e8362cce2ccc3312e1b88", 0xd6}, {&(0x7f0000000700)="f71e8e253f63020bb763a0d08fe05910577279c25c25965177e8f5a6c75877ce7c99662aab309480ab2cc72b0f82ca28bf034900bba1f1bc49d3edb0c1", 0x3d}, {&(0x7f0000001c00)="f9e7f53f4100abbcb64eb69309069384433a8e0645f77387f72643605827d55f16b26a005efed4c0dda1d873f0264501d7f57b5c896a882527a4fe2f105fc2ce134359afa0339ce6ab931e3fb6ab2897767f3566f02139b653887d2e147573db595e25f1b0a92bd061b178592876e889489b689cd8f8fd2d2fab3864e3a92fbdfd7307f5316e3220a95d82bcf08cdf7a428cf29bfc147d97061edf5b547213d022007a813a4b3cd6550e4583ab196e25c3caca05", 0xb4}], 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="11fffffffb00000000000000010000000400000000000000140000000000000000000000010000006d0200000000000020000000000000000000000007000000b208b03df0810aec0707f8ac1414aa001400000000000000000000000200000004000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="9d61c0585894c5c880fe8acad8f261d094306c49bf20e770b8a80a8b3366a2f8c6c2a9008327c654d16d555f7f541ecd34c1fa3721e71d9654e2d4485d0985456aa9f710a1d6bcd3d659e28d8db91bf5ad3eeb"], 0x88}}, {{&(0x7f0000001e80)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000002300)=[{&(0x7f0000001ec0)="9e8d09ea4c555f2914015fa3ce0fe7b6d387451a352224f340b1a58377607343fa685878dce0be42344824ea7ac0a20e27e65e4ae25cb87cef4b12b78e369bf3ded74bccaf40f1", 0x47}, {&(0x7f0000001f40)="074db0d875ac79de1a960341b59dea05b8704755725b9f986614067700511930201878e15a35f1bc0abd72c29d1d7f032e4edc52a3383dced62c8167b52bfdb3bb1060519316a7acc6c6a5d2431429b1998458f9284a163f2962243b9d7fafe7fb3d3ceb6941de2d33aa1b1987b252723a2fd1e14b90bbba38ac6d33e2931d4a8bae2f7caf0766e6be807a859d68d211d3b2ab1ba73b8a4236203cb24e8b1f2784f3ace726f5efcd48e3d91c1fa44b20b937d8ff968df9a5fcda07c58833", 0xbe}, {&(0x7f0000002000)="a3a6ec6e3ed6a5d2005dd34c856d745986782d269920d4e644eff500c5cbb3a1ccc9793868bf56f2c30101086341645883ac49d3e568d78691e6c9084c9b2e02bedf26ad1a2845c76d066594799575d37dc18c32d3d26b8ec4c2d3a26716432d2e58d19d0ec33b715f1233a7ab897d13c94835decd3de7ee79ef936bfba03cf4ba2e56952f2ad9caebaa186ed40a58082e243174949028e611037b275159ad5cb2f37ebdf2141cebbca26df0ed5a9af53a8160afd288908507b3a8d947629071bc3abdbe285c36924f0ebbcaef131c2b6ec317794ba7249266", 0xd9}, {&(0x7f0000002100)="7ee60ce4bb111af5d2aa8cb06d2a799a1d535fe30805e4a7d0c6cd0695a859407656226f5d8b4a2c2b87421124053742022e33f946fc3cd991a031880526ddb0b791c6a9a5", 0x45}, {&(0x7f0000002180)="0700117cba1f05f5f379971d39416ae8e36d4ba7322f13c2658fa87bf41801000000065a1785c3e7e6c6e318bcc7a58fcb159840000000181c00"/81, 0x51}, {&(0x7f0000002200)="4d3fd076dbf4ad688e8aea4406b49b31d1d6a80f5b47b3f483f1c949730676a6792b9c2fb59312a5b90699ddee72aabee953b9191257111da40765d95c8b7b30f234a2be091e7bb26d1bdb95a18e934df7c951c6594b91de4e0eddf6fcf6336313b7c4e7c7a3cf2c8cbf562d21f86deb37381b0b6e307f913db439650b11d4efd4a9c7f849054e9d1ff46f2686fdf97722ae300c93e99052403fd6dae8e6bfef7e57e8cb604cb9e228c3ac4440785fb2028ac3", 0xb3}], 0x6}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000002380)="5a56dc815a32b9cb35d96d23bf3041485ab00fd33de5176eb977ab98147d60a2b8e046df9c1c3b54ecfddfb9f7dde856562243f07a338de70feafc1cd47b91ceb24164db415c74b9e7ac9296ba88911ec734d4ef6ae0b44f4834b7404c3114d75ecfacdd3b2d179bdef5aa894971d3a99fe472b8cde3acdec016c52b668f6646396cb059006f80bdf6212f5685407675a5749d97fcda4225db4e47873144faa3faa9d3887c0c3d8a344c6696404c0da4a30d20d6c01e0e2b2598f120acfd51be", 0xc0}, {&(0x7f0000002440)="49de7fefb3606d641b8d3284bb712c7a27fd91914299b553e4fb891e80a341af1683002bcb87786e235b4d8cfefdff361e780ffe3a21d8de7c7828a5403df7eb640bc58af9d0422b8fad1f8a70b62d016831c85c3365532dcc07c73626f02b76dddad28e71af30cecd077208abcfe46789f1c0217397ef2c12b23dd9242fe8c375787f596b98c77cc3c67a2eac1ff06675585943c307e4e7cf2b1bbc4c3ecd2ad62dbc7a87aec08ffcc8f0536724976fee11ca91e1147612e3cbb35ab7", 0xbd}, {&(0x7f0000002500)="a5e8e1a5116d6891b944071b0e893fc7c7dfc4566784d93aeb1e2acf428b3debba4b491a139bb742f5efbfcfe4e7015d6eb94de3e69a8f931a8ac43dd7ee1713967c394aaa5bdb2c03c66504ea9b225d6808c8d2a9cc72c47639323aea94ceb7f557efc53400a3d3cf9669a4f91644d042647bc97c91e1c4ff02a95b6af4faf56a828cc6c221e97cada905e7", 0x8c}, {&(0x7f00000025c0)="ef584f42fea5043e73ab21ead3c4d5c13ed5570671242caf597b6a27bba54c76297055fd81be7d43195f2047b1df85b7ca27786f170a3ef73be6f5db008568706123277b0a1db01b90e03c1b3b8802fb72c0a71124799c7408a7ff6d6317fc4da168bc452b33ff5a58a47929930b486b770b0a4c1f7edff33009c0b40ab1da5ada06d876c9b4fc6a856535d5d6ce50ed1a0824547d3e13166ff474af4997775f2c559a0098634752f78f2704972db494df999cd0e9c1db4519dd8b5d6edcbb60d0e17928180ac0200692932cab3d564c7c5ed78985c8cafbc94ab6b0a8df5e3266b3d09a14a182482b0514910c9fa3e9cd4c4ea206fec9f777044c0f4dff7715d0b58991b8ec5b130929abfac31ce72ba7ced73ef55e13695a01dda6a545f050e93c67e9480bd98093540488a75fe6fb8dac7180c80936ec6674acac46afdebcd6433776aa38e31d74b40e9a1b3d7d54d46ce9b174da60dcab3effc68bf1b60364a38804448acdc9410f6e35935442732a7b3a4ab7da64cd285f1682d462efb0f468cb2cbfb76e0b06e3479ad93a9a9ecf538632e1627c782d4bdf6381f5bfb663726268178422fbe59b0f30fb8764a1365a1214874723d74fc07f7a6bbbc52383f0632eb2fd38ed29e591e61585c74805b9c21f3a867252da4b9aae3b357c1e135c222ef00aa104e7e77486f2331d4aecb1fdebadb058c53d1bc5e376f4a00058869a3288a08e5d1201c98ae73c168aac4defd33b13c88717cf8fafe45f3f4594b097aae7c2d1d8e0943317903a13a845412b2c1d49afad4f2abda981bea4b63ef1273bfd59eafaec691e07163ba9d32658d0fe39cb225fca1db9f597899b6cad24aee7577919d387cc29d38b61b3f4d9bca9fa28703a2645ab362adbe0ca6be37f78bc08351e7e2c48a7c7615a19bad76dd8e237feaea9f1fbbe482041aafbc1f7ce904f927d0c5869661bec84f131770b8387e1b4f92ba2e5097347f7d50509f2a03d4887a27b7bc9ea1385b3263d2f8e3d83ac91f068f7ea999b97efe0a24ede2f8cd436f1f8b70f20707d8c22972738b0a06c042011f85b97be1d699349a087b2964ef5025054651f5c102a897f99f45783f463e5a83a9e5f3767a29ce76c267608defc34cf1aaafc3aec3babbba36c391d72b2be9b229744dbf7ef6d7a5b16db40cea091dab363bbca4924a771038d932d39c75162ff38786b078e517a89afea88ea94df2c8875187d127fb5433b8563a4456ae373d46572cf197bb19c3140a5f10602f0cd7b4a33de8ac1dc5818540041c53f2284f3d8f5ed773f16effd0ee3821b1a1b225eff95da859d967f67aaa9436baf6e294a5830f10ca28756d4000fc812af7e3a3a111b9dc78a6bff81443d5818ad54cada924bbf7575641ba6fabbfd3a1a9df64b3e8472d5318db0f5d51011ee50af1e439773a2663c4386098aa0c8258f0006ac088b9346810bc9a4b39c3ade72cc5211d4df8b18d54d0d70fd2209812c500e8dcb8475bc2eeba2a02f46b08f514e0e1ab45938706959bf18c69a2a2714b6a583971d370e143a5a2b590289f02665cff6784631bfe92500f89ebf1bcec8246363c8c35fa81d18fdc87983269cb31cf6fb1724fcdc51c44af3d22f4b671743c307077c03092d24f7dd5c6dc23bb5b040f839f4b59d2e781a49408ffd9aaf3a0fed11e00b2920133c48cd0c1d4e3e7ae64018f52d64210a43a3169200bc8483f5f5742bbb53c09760127efa37384cd6c3e6713bf67d92f64e7ffa00468d362b8013825aad198f2f3b887eddf2fbe9c48ef10a86a4b47f2d4fa7c46660a36c5d0788a9b26026586eba918d11827c1ebaa2ebb67cd38b1b8714bc44f0e5c180ed471bfbe7653f3f137d9bad80cf9b719548f827671c649cd03a81cfbb1ae68049061e3b24d6c4930081f7c966072f4725af011a553aa1a15ddae1deef517ef377b93415d5575b4969bff54f22b37eb3705f01c3002a02440485243e816122d08236a0f8521138870d68b62defa2fd25b2655b4ce373f277a7800db99d3b62cd8f63a3b3043dd945a07ca7dd6dc9c4ec113a47667de79a7a9b9dec3355f7b22d6a035b589507ac196545c806bbd76ba0f8575b68434537045cc8a1b770003a291a510e1950c5b85aea0ea37f3bc585b0bb1e580870d1ec2f7f2c4a6c01f80c170c238e87e50c424bff95fa5007d1101195a860b99bbf02aeae42bba0552431fa59f5b40753445df61a0958f99d0992154bc8da67bb5ddaa35ab97756aabbea3868e0867d9a3c4df24cc60f91e0aa6b959e8c9e91dd8a1308190a0b97918b96304ed2b88dad9bbcac6b028e7d18cec34a45888e14a1ed2da956d9bc1858a3dfcfc2fd2b8538bc58ede7a5b46aee10b371df9deafa30c37a9247252f515816b6b4cb35fd7883f2872cd1d3d910428e61c89c85dceae5c327ff45981a66f93b91e94f75020bc62505b37863166f59f2abce24651b8055725871645918f75223efae64005fd76b4c725bfb3a250e7aabb5ea69128b02ceedf43175344e327cd675c0bfa92f381499f2006cc8fa5789503687fd4c3b83b5492e4c8ea2ac8c51c35693078b1c8c74ee7f9a0fc0c0b5d88e7008be3f67effed1d653449904593f2a40bd955e4a3414d4ec0adfe3375449a6a4afc75aeb0d224fbc7b42f48a75f28416c99d273650f104e281c3aa971d190eaa50d33a88346038b744c127477f63d94eb19261837579e12c4026f1873de7f3157417bb2492a19d59282768746f85d591fc78fed80ed0f5567b133eee9559885edb64cd4f53b22493e507b2b1c962c081d982d19bb242410d90be3ae73c1978ef014851390235c86a09389ca198d17bc32d05c45d6e928df966da1b8707994f49a114bf4c424b5ec31adb09f4c249dd78454e0dc68f40a83295ad1c12bcfc41c287fa070fac20ae138d9d58fb504f3b7da18a59a5d08b6163949256a96764bd644feb62f45fd1abf3dc62b07830b612b78b5acd59b7b5b62bc161e718401ec4dafbdcee66bb0501046c372a4f394d56bdb1d255e1d01a649abb103c4591470295ac71fde0d210f4b290c47e4bed414b0903468741db78bd2ed14d1920e488f5ee997a6cc83ed2548487f99e4831f9d22c7d559e39becfef90a6ef37fa5519f06a30891690b699e4fd6f851ed68021efb8acad1c5afdef6fd1ffe89530c997260bc76110e63d9f6fea63697b5240e0f947b2fe74d672bf8db651aeec0690a984eda2cbefbf8e310d1f418b096ddf1e4f0414d71137d035d38b94edb41a3650aaa515cb2af7ab5367a8782dc7830bf78d2a12fdfc12d6d125618cf1b4c75442fa0aa106a5dafa42e4d3c7edaa4efb8b536cc84f4b3a60ac4407ee1788bef2dc6bfd219ee5cf27a5aae8a0f6b01a9516948499a50b277a54f70170343181d98984ddbbfe0dd9961a49b1285ebcc896559d969c388e8955c1908fc1518533247bb154c742ad773fac4f11736b51735f0fc9b384f8c4a1dc13bf5e646a31f392d89e81f3d741ab5b0d8b6ad29a79acecd930ba0857bf6782ba7b65c11a1d3bf08fcb408ce63551ba35a6b392262f1493a3e6d79e28e5855f1eccb01155f0b93a34f56e5f6d2306781018b6deba235b8b653a8065a1a3fe90838788337f7a9fc6687d2b69e22764eaf5c9b992479e7e7cf7d28427e767dc39ec60f766b215049d83e78e736336ff479f3b2e9928934d99d005280f6664136c883c4aade374b2e74bd4f580879c8e85be705ee2f80b4a07cf54b14b2e657510d0d73f95bd086c16d6d91b7ea0b5b8472868859fc83081d11506256714a3de65f87ddd437e07242c54b9ec81ff2ded5b01b46df271c9b6ea37333dae949b652cf6d810735b83929224e9c58f735e80a6de172b958eba6a41e8964f5448b911c6c0a8477b0fdf0af3ef6fdd2b06389277766c0c293f660a7c3c98ce86132811c978647701ac47149d899280510bf12358b4a354aab09e22b20d6072c3fda7e2d568a0bfa516b579757cd06a0a7b3159987481f70d5155fbc1b5212ad9863c245359c6c8a128786815a20399e537cda47ca9d7c461e20555e497cb998de73aa8bfd4558ddd852f23f61dbea8f3ff25f2457aa77dd6b75054d13750e9cc92be6cc35949054b9712429bb2756a7c762611c97778506d5d411364a401eb187bb38b896c89f477549084c4cc1fa82c0cef9e2149cc45caeecd03af80c0813ccd398d9a9f08a3847a2fbc92553455db9464c30ad7de7906237519a826a9836a9b9ad8d49edf8760c60f93f4c5c5514d6122502b0f71d0a637d7765f91860b16ba908d5308062e5daf738a862e906011348a67bd1989d7e2531fa623663d167816acce37181207bedba330fb508e534a05a902f061d373591ec2a253a636d8c2c9e2b31313d942122b8d468a8df6ad100fd7f65af90d58eed13d0b0cfb79a2c2cabd2dc2495ae919529b408ada052a07b1edb2b9d88b344801e1bb89319e234997feb576cc02dafd505716bd4e63b9cbf4f7a8618c13dc4cea158e3a6d369c51e35260fe2a6fdf028262de964b32744e4f7bfa2ac59b221d0ba12a55caf42f0f91205b265e947a283fa0b44f83754108d85bbf4c0afdeb9b90c4378be707808341097594e21674370f908cef814228241f53e2013d237f509048e1a8faeb2c66f0408748a9edb44fae5b04cb197e080a43a7eb8f0875f89f27655dc1ba6c3ef5ac99b75d9629fc3266e5b1cb0c2bcc8ad69652ac4e44a7957846e418919fe29c041670c298a94e823929b692c28362defa5c5a2a8020038178350a82225c7dc13920a16ebf710e0436e5da959e7bcbadb4ee16e1669d0499b7754e4dea4dc927ae94c31b5997304afd7b5737599ca89f7bf0962af7c4102c534b18ccde783c3f07194a022854b504c5522b303e061bd41f88cf0ad5eed0c208d8477661e5c05b88f83ace805379a84c2e98471373e82e358465d5cedb6a31789471ec9f6c42d3c7451e1896104983add35fe9015183f6a952d2ec0c3283d17822f430f06d5aa4d7aadd4f8a329bd4e1150dadc8a31839558f61d115eeb8a31cb10b858b9abad544d1428b97abf972cfe3f7b3f60f48d25a70a38f3c0f3020a87f8ed87590956724af6bf18cd6a46ea40c3aaadde3ed44be54427f34694f865ab0894818ce9a1c6f88af6230af7eb2f502bc3912826db14ca0debaf797546224dc0841d2b5f3e15982252ef46d5ce03de8709fdc3e97ced1b18424efcdf14f0da0cefd6e315e71812e04aa0439d73bba99d5a5c28c894c17fd73440f80438642d05f26aae0c9e5924d4b1864bf07235e4962217b8ced72493bb1135ab49c7b8907b7cae537bd7f2debfa32d8a9d9bb888e51c050593736ca70a7aa2b725d33983c0dcd1f9ea367490a50fc5cec35063357b9406365bba91fd1d5a3eaad4fa6760b6ad8a1f7b2a95ab1b5bf658f17f743d1018efbcca39230031d4c8883468a37066fdeba769289dccf0486a5b0463fb0346f101a9db5b5bb07b0a8150c2734b786b535960a49de85469dec6de9b8fde25f7ba2c620d9dec45a17b7d7284fa51752c476a550771a4a03fe74e4f4cabb47d6a8156c9f3fca78ac2f73729c02d5262100013fbfda9be541741dcd3d4f2a79c4329081d11059cedc5985ca07bb4f71c41bf8013f4dc26cb96c33b51e85796c1c66fda2768d7ed4a82eb1b66959bf98ac974d6e44b49c060d560aaa8bff9af6e03f11668dd63870c315f1f7e8d52c06a15b30388c993f4f1573cfffe0772286c36c4bd43b72c2ef181426eb2dae3edf7b", 0x1000}], 0x4, &(0x7f0000003680)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x2d}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xcc84}}], 0x70}}], 0x4, 0x4048055) read(0xffffffffffffffff, &(0x7f0000000640)=""/125, 0x7d) r4 = fsopen(&(0x7f0000001d80)='nilfs2\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000002000a0002", @ANYRES64=r1], 0x28}}, 0x0) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r4}) 1.387114929s ago: executing program 2 (id=580): sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x10000005) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r0, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801f065000040690ad843f36d4d1adf30374eb8fa391a0ad8f03f1d0000000000000000"], &(0x7f0000000100)='GPL\x00', 0x4407, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0xc0002, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newspdinfo={0x1c, 0x24, 0x801, 0x70bd2c, 0x25dfdbfb, 0xc, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x40) 1.368412945s ago: executing program 0 (id=581): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1f, 0x12, r0, 0x0) 1.342072347s ago: executing program 6 (id=582): mknod$loop(&(0x7f00000003c0)='./file0\x00', 0x8, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) mkdir(0x0, 0x184) open(&(0x7f0000000380)='./control\x00', 0x563382, 0x113) rmdir(&(0x7f0000000280)='./control\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x24}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe(&(0x7f00000042c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r4, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[], 0x60}}, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000004200200029bd7000fcdbdf2500ce7e3167a2b1a2045697000000"], 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x4040880) getpid() sendfile(r6, r6, 0x0, 0x1) r7 = dup2(r0, r0) inotify_add_watch(r7, &(0x7f0000000000)='./file0\x00', 0xa0000080) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x40005, 0x3ffffffc, 0x10}) 1.313939157s ago: executing program 5 (id=583): mknod$loop(&(0x7f00000003c0)='./file0\x00', 0x8, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) mkdir(0x0, 0x184) open(&(0x7f0000000380)='./control\x00', 0x563382, 0x113) rmdir(&(0x7f0000000280)='./control\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x24}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe(&(0x7f00000042c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r4, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[], 0x60}}, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000004200200029bd7000fcdbdf2500ce7e3167a2b1a2045697000000"], 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x4040880) getpid() sendfile(r6, r6, 0x0, 0x1) r7 = dup2(r0, r0) inotify_add_watch(r7, &(0x7f0000000000)='./file0\x00', 0xa0000080) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x40005, 0x3ffffffc, 0x10}) 1.032981709s ago: executing program 0 (id=584): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r4, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x2}}}}, 0x30}}, 0x0) (fail_nth: 8) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) r5 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @multicast1}, 0x2, 0x1, 0x0, 0x1}}, 0x26) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, 0x0, 0x0}) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xd3, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f0000000240)=""/69, 0x45, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x20000041}, 0x4880) 398.853285ms ago: executing program 6 (id=585): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000140)={0x1, 0x1, 0x1a, 0x12, 0x87, 0x0}) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 166.761869ms ago: executing program 2 (id=586): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) mount$cgroup(0x0, 0x0, 0x0, 0x2008000, &(0x7f00000000c0)={[{@name={'name', 0x3d, '+$!&%]-[('}}]}) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x3, &(0x7f0000000200)=0x2) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYRES64=r1, @ANYRES8, @ANYRES8=0x0], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x4, 0x581082) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) r6 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) ioctl$TCFLSH(r5, 0x400455c8, 0x1000000000000002) (async) ioctl$TIOCSETD(r6, 0x5412, &(0x7f0000000140)=0xffbfffc0) (async) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000100)=0x12) (async) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000340)=0xff) (async) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180)) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000240)=0xfc) (async) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000001c0)) writev(r4, 0x0, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x14, &(0x7f00000003c0)=ANY=[@ANYRES16=r0, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000951a90c93356f1f5a455331b4449"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r6, 0xe4, 0x7}, 0x18) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 74.057534ms ago: executing program 6 (id=587): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ipv6_route\x00') preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/30, 0x1e}], 0x1, 0x10000000, 0x8) 57.701999ms ago: executing program 5 (id=588): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)) prlimit64(r0, 0x7, &(0x7f0000000000)={0x7fdd, 0xdf5f}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) r2 = dup2(r1, r1) preadv2(r2, &(0x7f0000000880)=[{&(0x7f0000000100)=""/199, 0xc7}], 0x1, 0x7, 0x3, 0x1) 0s ago: executing program 0 (id=589): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000200)={0x2, 0x5, 0x3, 0x6, 0x4, 0xe, 0x81, 0xf, 0x80, 0xf9, 0xa, 0x7f, 0xf, 0x1}, 0xe) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000180)=@tcp}, 0x20) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="01000001000000000000090000000800010001000000050008000b0000000500080009000000050007"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0xc004) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x3ff, 0x3, 0x4}, 0x51, [0xd4, 0x6, 0x9, 0x8a4, 0x2, 0x2, 0x80000002, 0x80000001, 0x5, 0x1, 0x101, 0x3c6, 0x7, 0x6, 0xf70, 0x3, 0xe7, 0x7, 0x401, 0xbc5e, 0x0, 0x1, 0x8, 0xffff, 0xe, 0xe, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x6, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1ff4, 0x1, 0x1, 0x80000000, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x1, 0x1, 0x6, 0x2, 0x5, 0x9, 0x5, 0x9, 0x0, 0x3a20, 0x1000, 0x8, 0x1, 0x6, 0x7ff, 0xb8547353], [0x80000000, 0xffffffff, 0x4, 0x5, 0x80000000, 0x1, 0x553, 0x6, 0x2, 0xfffffffc, 0x8, 0xc, 0x36, 0xa, 0x6, 0x1, 0x9, 0x98, 0x8, 0xe56d, 0xa4, 0x4, 0x99d, 0x8, 0x5, 0xd, 0x400, 0x0, 0x6e38, 0x8000, 0xa, 0x2, 0x3, 0x0, 0x5, 0x7, 0x4, 0xd, 0x9, 0xfff, 0x4, 0x0, 0x40, 0x1, 0x8, 0x5, 0x9, 0x0, 0x34f1, 0x10, 0x4, 0x1b2c5a17, 0x0, 0x9, 0xc, 0x77c8cac8, 0xffffffff, 0x1004, 0x6, 0x6, 0xac, 0x2, 0x54, 0xcfb9], [0x6, 0xdb8, 0x9, 0x4, 0x2, 0x6, 0x5, 0x5, 0x3, 0x5, 0xfffffffd, 0xc8d3, 0x33, 0x9a45, 0x0, 0xee40000, 0x1, 0x1, 0x43, 0x69d, 0x8, 0xffff, 0x0, 0x0, 0x8, 0x2, 0x4, 0x20000800, 0x7, 0x9, 0x1, 0x0, 0x1, 0xfffffffe, 0x3, 0x0, 0x9, 0x8c0, 0x109, 0x2, 0xa, 0x7, 0x7, 0xfffffffa, 0x81, 0x8, 0xffffff20, 0x55f2, 0xdf46, 0xfffffffd, 0x7f, 0x9, 0x8000, 0x40, 0x3, 0x2, 0xa, 0x6, 0x2, 0xffffff00, 0xda15, 0x7f, 0x3, 0x10], [0x0, 0x897, 0x8, 0x246a, 0x6, 0x101, 0xfffff410, 0xd, 0x7ff, 0x606, 0x4, 0x9, 0x80000001, 0x2, 0xb, 0x2, 0x7, 0x1, 0x7, 0x2, 0x7ff, 0x3ff, 0x0, 0x2, 0x6, 0x100, 0x1, 0xec9b, 0x61c8, 0x6, 0x0, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0xe, 0x4000006, 0x7, 0x1, 0xd, 0x0, 0x4, 0x100009, 0x100, 0x3, 0x5, 0x1000, 0x5, 0x2, 0x15, 0x8000, 0x7, 0x85, 0x5, 0x7, 0xfffffffc, 0x4, 0x6, 0xeff]}, 0x45c) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) kernel console output (not intermixed with test programs): an invalid descriptor of length 0, skipping remainder of the config [ 134.556975][ T3781] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 134.577679][ T3781] usb 1-1: device descriptor read/8, error -71 [ 134.685483][ T6585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.189'. [ 134.745571][ T6585] block device autoloading is deprecated and will be removed. [ 134.807420][ T6587] Bluetooth: hci5: Frame reassembly failed (-84) [ 134.858796][ T6585] ======================================================= [ 134.858796][ T6585] WARNING: The mand mount option has been deprecated and [ 134.858796][ T6585] and is ignored by this kernel. Remove the mand [ 134.858796][ T6585] option from the mount to silence this warning. [ 134.858796][ T6585] ======================================================= [ 134.893684][ C1] vkms_vblank_simulate: vblank timer overrun [ 135.124158][ T30] audit: type=1400 audit(1747266646.711:309): avc: denied { read append } for pid=6582 comm="syz.2.190" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 135.180647][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 135.192000][ T9] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 135.211845][ T9] usb 5-1: Manufacturer: syz [ 135.254625][ T9] usb 5-1: config 0 descriptor?? [ 135.301535][ T3781] usb usb1-port1: unable to enumerate USB device [ 135.315568][ T30] audit: type=1400 audit(1747266646.711:310): avc: denied { open } for pid=6582 comm="syz.2.190" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 135.339088][ C1] vkms_vblank_simulate: vblank timer overrun [ 135.345347][ T30] audit: type=1400 audit(1747266646.791:311): avc: denied { mount } for pid=6579 comm="syz.1.189" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 135.426971][ T30] audit: type=1400 audit(1747266646.791:312): avc: denied { remount } for pid=6579 comm="syz.1.189" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 135.462136][ T30] audit: type=1400 audit(1747266647.191:313): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 135.561255][ T30] audit: type=1400 audit(1747266647.401:314): avc: denied { read write } for pid=6589 comm="syz.1.191" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 135.587829][ T30] audit: type=1400 audit(1747266647.411:315): avc: denied { open } for pid=6589 comm="syz.1.191" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 135.613361][ T30] audit: type=1400 audit(1747266647.411:316): avc: denied { ioctl } for pid=6589 comm="syz.1.191" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x9408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 135.638846][ C1] vkms_vblank_simulate: vblank timer overrun [ 135.821433][ T6601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.192'. [ 135.830320][ T6601] netlink: 'syz.0.192': attribute type 5 has an invalid length. [ 135.837975][ T6601] netlink: 28 bytes leftover after parsing attributes in process `syz.0.192'. [ 136.063037][ T30] audit: type=1400 audit(1747266647.411:317): avc: denied { map } for pid=6589 comm="syz.1.191" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 136.115513][ T30] audit: type=1400 audit(1747266647.591:318): avc: denied { create } for pid=6588 comm="syz.0.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 136.169232][ T3781] usb 5-1: USB disconnect, device number 6 [ 136.188280][ T6601] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 136.197226][ T6601] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 136.205849][ T6601] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 136.214524][ T6601] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 136.223408][ T6601] geneve2: entered promiscuous mode [ 136.228678][ T6601] geneve2: entered allmulticast mode [ 136.674247][ T6620] syz.0.198: attempt to access beyond end of device [ 136.674247][ T6620] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 137.097300][ T5128] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 137.586602][ T6625] netlink: 12 bytes leftover after parsing attributes in process `syz.2.201'. [ 137.897006][ T3781] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 138.995827][ T6633] netlink: 'syz.0.203': attribute type 10 has an invalid length. [ 139.006993][ T3781] usb 4-1: device descriptor read/64, error -71 [ 139.297694][ T6635] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 139.430922][ T6641] xt_CT: You must specify a L4 protocol and not use inversions on it [ 139.447649][ T3781] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 139.455254][ T972] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 139.598275][ T972] usb 3-1: device descriptor read/64, error -71 [ 139.607909][ T3781] usb 4-1: device descriptor read/64, error -71 [ 139.767359][ T3781] usb usb4-port1: attempt power cycle [ 139.847677][ T972] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 139.975575][ T6653] openvswitch: netlink: Missing key (keys=40, expected=100) [ 140.139265][ T972] usb 3-1: device descriptor read/64, error -71 [ 140.969581][ T3781] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 141.045609][ T6658] overlayfs: missing 'lowerdir' [ 141.057408][ T972] usb usb3-port1: attempt power cycle [ 141.062924][ T3781] usb 4-1: device descriptor read/8, error -71 [ 141.113592][ T30] kauditd_printk_skb: 71 callbacks suppressed [ 141.113609][ T30] audit: type=1400 audit(1747266653.001:388): avc: denied { write } for pid=6659 comm="syz.3.213" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 141.371723][ T30] audit: type=1400 audit(1747266653.251:389): avc: denied { connect } for pid=6659 comm="syz.3.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 141.787006][ T972] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 141.806044][ T30] audit: type=1400 audit(1747266653.691:390): avc: denied { read write } for pid=6666 comm="syz.1.214" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 141.843937][ T972] usb 3-1: device descriptor read/8, error -71 [ 141.874390][ T30] audit: type=1400 audit(1747266653.691:391): avc: denied { open } for pid=6666 comm="syz.1.214" path="/52/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 142.086970][ T972] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 142.186624][ T5914] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 142.194487][ T30] audit: type=1400 audit(1747266654.081:392): avc: denied { execute_no_trans } for pid=6657 comm="syz.0.211" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 142.262828][ T30] audit: type=1400 audit(1747266654.121:393): avc: denied { ioctl } for pid=6673 comm="syz.2.216" path="socket:[11722]" dev="sockfs" ino=11722 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 142.328413][ T972] usb 3-1: device not accepting address 11, error -71 [ 142.335429][ T972] usb usb3-port1: unable to enumerate USB device [ 142.348614][ T5914] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 142.372580][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 142.384477][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 142.408742][ T5914] usb 2-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 142.418971][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.427450][ T5914] usb 2-1: Product: syz [ 142.432358][ T5914] usb 2-1: Manufacturer: syz [ 142.439060][ T5914] usb 2-1: SerialNumber: syz [ 142.467854][ T5875] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 142.498607][ T5914] usb 2-1: config 0 descriptor?? [ 142.627104][ T5875] usb 4-1: Using ep0 maxpacket: 16 [ 142.660726][ T5875] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 142.677042][ T5875] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 142.708306][ T5875] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 142.807522][ T5875] usb 4-1: config 0 interface 0 has no altsetting 0 [ 142.816507][ T5875] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 142.828614][ T5914] powermate: Expected payload of 3--6 bytes, found 0 bytes! [ 142.836836][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.845199][ T5875] usb 4-1: Product: syz [ 142.856572][ T5914] powermate 2-1:0.0: probe with driver powermate failed with error -5 [ 142.867043][ T5875] usb 4-1: Manufacturer: syz [ 142.871734][ T5875] usb 4-1: SerialNumber: syz [ 142.896406][ T5875] usb 4-1: config 0 descriptor?? [ 142.896794][ T5914] usb 2-1: USB disconnect, device number 4 [ 143.133046][ T5875] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input10 [ 143.158961][ T5172] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 143.227382][ T5172] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 143.251024][ T6674] Bluetooth: MGMT ver 1.23 [ 143.264835][ T30] audit: type=1400 audit(1747266655.151:394): avc: denied { setopt } for pid=6673 comm="syz.2.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 143.298546][ T5172] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 143.397027][ T30] audit: type=1400 audit(1747266655.201:395): avc: denied { override_creds } for pid=6677 comm="syz.4.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 143.416897][ C1] vkms_vblank_simulate: vblank timer overrun [ 143.432094][ T6672] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 143.460403][ T5835] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 143.491098][ T9] usb 4-1: USB disconnect, device number 10 [ 143.515652][ T5172] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 143.621591][ T30] audit: type=1400 audit(1747266655.471:396): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 144.211304][ T6695] syz.0.221: attempt to access beyond end of device [ 144.211304][ T6695] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 144.756992][ T5875] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 144.778357][ T6704] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 144.778862][ T30] audit: type=1804 audit(1747266656.661:397): pid=6704 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.225" name="/newroot/54/file0" dev="tmpfs" ino=307 res=1 errno=0 [ 144.788747][ T6704] ref_ctr increment failed for inode: 0x133 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88801b470a00 [ 144.828499][ T972] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 144.916999][ T5875] usb 5-1: device descriptor read/64, error -71 [ 145.031838][ T6712] fuse: Bad value for 'user_id' [ 145.036837][ T6712] fuse: Bad value for 'user_id' [ 145.051640][ T6712] overlayfs: overlapping lowerdir path [ 145.274740][ T972] usb 4-1: device descriptor read/64, error -71 [ 145.365614][ T6715] overlayfs: missing 'lowerdir' [ 145.406955][ T5875] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 145.526991][ T972] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 145.547006][ T5875] usb 5-1: device descriptor read/64, error -71 [ 145.736996][ T972] usb 4-1: device descriptor read/64, error -71 [ 145.750744][ T5875] usb usb5-port1: attempt power cycle [ 145.847160][ T6721] Cannot find add_set index 0 as target [ 146.227161][ T972] usb usb4-port1: attempt power cycle [ 146.529584][ T5875] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 146.597227][ T972] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 146.605874][ T5875] usb 5-1: device descriptor read/8, error -71 [ 146.638007][ T972] usb 4-1: device descriptor read/8, error -71 [ 146.876986][ T972] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 146.887008][ T5875] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 146.979683][ T5875] usb 5-1: device descriptor read/8, error -71 [ 146.986329][ T972] usb 4-1: device descriptor read/8, error -71 [ 147.107395][ T5875] usb usb5-port1: unable to enumerate USB device [ 147.115063][ T972] usb usb4-port1: unable to enumerate USB device [ 147.156428][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 147.156446][ T30] audit: type=1400 audit(1747266659.041:401): avc: denied { bind } for pid=6731 comm="syz.0.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 147.707032][ T6737] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=6737 comm=syz.4.235 [ 147.727228][ T30] audit: type=1400 audit(1747266659.591:402): avc: denied { ioctl } for pid=6736 comm="syz.4.235" path="socket:[11996]" dev="sockfs" ino=11996 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 147.778004][ T6739] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 147.850102][ T6739] SELinux: failed to load policy [ 147.871071][ T30] audit: type=1400 audit(1747266659.671:403): avc: denied { load_policy } for pid=6736 comm="syz.4.235" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 147.929293][ T6743] fuse: Unknown parameter '000000000000000000030x000000000000000400000000000000000000' [ 148.770789][ T6761] overlayfs: missing 'lowerdir' [ 148.807216][ T5875] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 149.110432][ T5875] usb 2-1: config 0 has an invalid interface number: 244 but max is 0 [ 149.124761][ T5875] usb 2-1: config 0 has no interface number 0 [ 149.143060][ T5875] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0700, bcdDevice= 0.05 [ 149.153639][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.184569][ T5875] usb 2-1: config 0 descriptor?? [ 149.268356][ T5875] option 2-1:0.244: GSM modem (1-port) converter detected [ 150.163192][ T30] audit: type=1400 audit(1747266661.661:404): avc: denied { map } for pid=6764 comm="syz.0.242" path="socket:[11018]" dev="sockfs" ino=11018 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 150.219840][ T30] audit: type=1400 audit(1747266661.661:405): avc: denied { read } for pid=6764 comm="syz.0.242" path="socket:[11018]" dev="sockfs" ino=11018 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 151.028430][ T5875] usb 2-1: USB disconnect, device number 5 [ 151.034862][ T5875] option 2-1:0.244: device disconnected [ 151.381847][ T972] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 151.917002][ T972] usb 4-1: device descriptor read/64, error -71 [ 152.100334][ T30] audit: type=1400 audit(1747266663.991:406): avc: denied { create } for pid=6785 comm="syz.4.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 152.157004][ T972] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 152.307087][ T972] usb 4-1: device descriptor read/64, error -71 [ 152.692753][ T30] audit: type=1400 audit(1747266664.531:407): avc: denied { kexec_image_load } for pid=6785 comm="syz.4.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 153.310706][ T972] usb usb4-port1: attempt power cycle [ 153.477429][ T5875] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 153.640161][ T5875] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 153.649039][ T5875] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 153.661400][ T5875] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 153.670864][ T972] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 153.865194][ T5875] usb 2-1: config 1 has no interface number 0 [ 153.879235][ T5875] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 153.894237][ T5875] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 153.911565][ T972] usb 4-1: device descriptor read/8, error -71 [ 153.918976][ T5875] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 153.930200][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.955427][ T5875] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 154.053283][ T30] audit: type=1400 audit(1747266665.941:408): avc: denied { bind } for pid=6802 comm="syz.4.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 154.157067][ T972] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 155.285244][ T972] usb 4-1: device not accepting address 18, error -71 [ 155.295288][ T972] usb usb4-port1: unable to enumerate USB device [ 155.369258][ T5875] snd_usb_pod 2-1:1.1: set_interface failed [ 155.400756][ T5875] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 155.400907][ T5875] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 155.414686][ T5875] usb 2-1: USB disconnect, device number 6 [ 155.726997][ T972] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 155.895542][ T30] audit: type=1400 audit(1747266667.781:409): avc: denied { append } for pid=6819 comm="syz.0.257" name="nbd0" dev="devtmpfs" ino=679 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 155.919532][ T972] usb 4-1: Using ep0 maxpacket: 32 [ 155.926601][ T972] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 155.935909][ T972] usb 4-1: config 0 has no interface number 0 [ 155.946262][ T972] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 156.008613][ T30] audit: type=1400 audit(1747266667.901:410): avc: denied { create } for pid=6819 comm="syz.0.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 156.550780][ T30] audit: type=1400 audit(1747266667.921:411): avc: denied { ioctl } for pid=6819 comm="syz.0.257" path="socket:[11113]" dev="sockfs" ino=11113 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 156.873574][ T30] audit: type=1400 audit(1747266668.591:412): avc: denied { write } for pid=6819 comm="syz.0.257" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 156.967211][ T24] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 157.131467][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 157.202777][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 157.282666][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 157.717021][ T972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.725073][ T972] usb 4-1: Product: syz [ 157.729283][ T972] usb 4-1: Manufacturer: syz [ 157.733896][ T972] usb 4-1: SerialNumber: syz [ 157.740034][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 157.763951][ T972] usb 4-1: config 0 descriptor?? [ 157.770034][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 157.770954][ T972] smsc95xx v2.0.0 [ 158.121044][ T5880] hid-generic 0000:0004:0009.0004: item fetching failed at offset 0/3 [ 158.163619][ T5880] hid-generic 0000:0004:0009.0004: probe with driver hid-generic failed with error -22 [ 158.176785][ T24] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 158.187470][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.196934][ T24] usb 1-1: Product: syz [ 158.201533][ T24] usb 1-1: Manufacturer: syz [ 158.206241][ T24] usb 1-1: SerialNumber: syz [ 158.214145][ T24] usb 1-1: config 0 descriptor?? [ 158.239417][ T24] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input11 [ 158.969309][ T972] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 158.985366][ T972] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 159.002467][ T5875] usb 1-1: USB disconnect, device number 9 [ 159.038024][ T972] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 159.051587][ T972] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 159.127778][ T972] usb 4-1: USB disconnect, device number 19 [ 159.567040][ T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 159.840191][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 159.851313][ T24] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 159.855874][ T6860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.269'. [ 159.880070][ T24] usb 5-1: can't read configurations, error -61 [ 160.018613][ T3781] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 160.097540][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 160.176499][ T6864] sp0: Synchronizing with TNC [ 160.248169][ T3781] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 160.263310][ T5880] IPVS: starting estimator thread 0... [ 160.287013][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 160.506647][ T3781] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 160.521681][ T24] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 160.533796][ T24] usb 5-1: can't read configurations, error -61 [ 160.541457][ T3781] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1280, setting to 64 [ 160.556392][ T24] usb usb5-port1: attempt power cycle [ 160.562050][ T3781] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 160.582855][ T3781] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.40 [ 160.592110][ T6865] IPVS: using max 42 ests per chain, 100800 per kthread [ 160.601614][ T3781] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 160.610103][ T3781] usb 1-1: SerialNumber: syz [ 160.626046][ T6855] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 160.633559][ T6855] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 160.642632][ T3781] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 160.927606][ T3781] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 160.946178][ T3781] usb 1-1: USB disconnect, device number 10 [ 160.961510][ T24] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 160.997370][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 161.005007][ T6867] syz.2.271: attempt to access beyond end of device [ 161.005007][ T6867] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 161.065840][ T24] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 161.178551][ T24] usb 5-1: can't read configurations, error -61 [ 161.747028][ T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 161.768541][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 161.780525][ T24] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 161.789256][ T24] usb 5-1: can't read configurations, error -61 [ 161.807200][ T24] usb usb5-port1: unable to enumerate USB device [ 161.807216][ T5876] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 161.998509][ T5876] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 162.042114][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 162.064412][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 162.074899][ T5876] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 162.090910][ T5876] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 162.101558][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.119172][ T5876] usb 3-1: config 0 descriptor?? [ 162.210428][ T6879] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 162.374108][ T30] audit: type=1400 audit(1747266674.231:413): avc: denied { map } for pid=6878 comm="syz.3.276" path="socket:[12306]" dev="sockfs" ino=12306 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 162.600363][ T30] audit: type=1400 audit(1747266674.461:414): avc: denied { connect } for pid=6890 comm="syz.4.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 162.687313][ T5876] usbhid 3-1:0.0: can't add hid device: -71 [ 162.694177][ T5876] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 162.706592][ T5876] usb 3-1: USB disconnect, device number 12 [ 162.807046][ T5861] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 162.967073][ T5861] usb 2-1: Using ep0 maxpacket: 8 [ 162.996155][ T5861] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 163.005228][ T5861] usb 2-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 163.016198][ T5861] usb 2-1: config 179 has no interface number 0 [ 163.022813][ T5861] usb 2-1: config 179 interface 65 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 163.044890][ T5861] usb 2-1: config 179 interface 65 has no altsetting 0 [ 163.052572][ T5861] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 163.063836][ T5861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.241687][ T30] audit: type=1326 audit(1747266675.131:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6903 comm="syz.2.284" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc1f318e969 code=0x0 [ 163.343771][ T30] audit: type=1400 audit(1747266675.231:416): avc: denied { append } for pid=6893 comm="syz.1.281" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 163.397089][ T3781] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 163.410911][ T30] audit: type=1400 audit(1747266675.301:417): avc: denied { ioctl } for pid=6893 comm="syz.1.281" path="socket:[12324]" dev="sockfs" ino=12324 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 163.435383][ C0] vkms_vblank_simulate: vblank timer overrun [ 163.489068][ T30] audit: type=1400 audit(1747266675.351:418): avc: denied { connect } for pid=6893 comm="syz.1.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 163.537844][ T30] audit: type=1400 audit(1747266675.361:419): avc: denied { sys_module } for pid=6893 comm="syz.1.281" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 163.576939][ T3781] usb 4-1: Using ep0 maxpacket: 32 [ 163.585319][ T3781] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 163.598001][ T3781] usb 4-1: config 0 has no interface number 0 [ 163.618585][ T3781] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 163.637004][ T3781] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.654738][ T3781] usb 4-1: Product: syz [ 163.659179][ T3781] usb 4-1: Manufacturer: syz [ 163.663915][ T3781] usb 4-1: SerialNumber: syz [ 163.681149][ T5876] usb 2-1: USB disconnect, device number 7 [ 163.689221][ T3781] usb 4-1: config 0 descriptor?? [ 163.702805][ T3781] smsc95xx v2.0.0 [ 163.710258][ T30] audit: type=1400 audit(1747266675.601:420): avc: denied { write } for pid=6914 comm="syz.0.285" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 163.735774][ T30] audit: type=1400 audit(1747266675.601:421): avc: denied { open } for pid=6914 comm="syz.0.285" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 163.763798][ T30] audit: type=1400 audit(1747266675.651:422): avc: denied { ioctl } for pid=6914 comm="syz.0.285" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x64c8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 163.997067][ T24] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 164.147123][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 164.159064][ T24] usb 1-1: config 2 has an invalid interface number: 51 but max is 0 [ 164.174183][ T24] usb 1-1: config 2 has no interface number 0 [ 164.221571][ T24] usb 1-1: config 2 interface 51 altsetting 160 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 164.564109][ T24] usb 1-1: config 2 interface 51 altsetting 160 has a duplicate endpoint with address 0x9, skipping [ 164.575132][ T24] usb 1-1: config 2 interface 51 altsetting 160 has a duplicate endpoint with address 0xC, skipping [ 164.586235][ T24] usb 1-1: config 2 interface 51 altsetting 160 has an invalid descriptor for endpoint zero, skipping [ 164.597350][ T24] usb 1-1: config 2 interface 51 has no altsetting 0 [ 164.646007][ T24] usb 1-1: New USB device found, idVendor=1199, idProduct=9056, bcdDevice=a3.f1 [ 164.668060][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.686417][ T24] usb 1-1: Product: syz [ 164.693812][ T24] usb 1-1: Manufacturer: syz [ 164.699315][ T24] usb 1-1: SerialNumber: syz [ 164.707509][ T6915] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 164.956494][ T24] usb 1-1: USB disconnect, device number 11 [ 164.978880][ T3781] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 165.231639][ T5817] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 165.236895][ T3781] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 165.273777][ T6937] netlink: 44 bytes leftover after parsing attributes in process `syz.4.293'. [ 165.290205][ T3781] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 165.351192][ T3781] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 165.371974][ T3781] usb 4-1: USB disconnect, device number 20 [ 165.716959][ T5875] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 165.918606][ T5875] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.106595][ T5875] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 166.133734][ T5875] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 166.163058][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 166.191649][ T5875] usb 5-1: SerialNumber: syz [ 167.092864][ T5875] usb 5-1: 0:2 : does not exist [ 167.098706][ T5875] usb 5-1: unit 5: unexpected type 0x09 [ 167.126169][ T5817] Bluetooth: hci0: unexpected event for opcode 0x1002 [ 167.140364][ T6965] FAULT_INJECTION: forcing a failure. [ 167.140364][ T6965] name failslab, interval 1, probability 0, space 0, times 0 [ 167.145190][ T5875] usb 5-1: USB disconnect, device number 15 [ 167.206191][ T6965] CPU: 1 UID: 0 PID: 6965 Comm: syz.3.301 Not tainted 6.15.0-rc6-syzkaller-00080-g1a80a098c606 #0 PREEMPT(full) [ 167.206216][ T6965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 167.206223][ T6965] Call Trace: [ 167.206227][ T6965] [ 167.206232][ T6965] dump_stack_lvl+0x16c/0x1f0 [ 167.206253][ T6965] should_fail_ex+0x512/0x640 [ 167.206270][ T6965] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 167.206288][ T6965] should_failslab+0xc2/0x120 [ 167.206302][ T6965] __kmalloc_cache_noprof+0x6a/0x3e0 [ 167.206319][ T6965] ? __pfx___mutex_trylock_common+0x10/0x10 [ 167.206337][ T6965] ? fuse_lookup_name+0x19f/0x780 [ 167.206359][ T6965] fuse_lookup_name+0x19f/0x780 [ 167.206374][ T6965] ? __mutex_lock+0x1ca/0xb90 [ 167.206391][ T6965] ? __pfx_fuse_lookup_name+0x10/0x10 [ 167.206405][ T6965] ? lockdep_unlock+0x64/0xe0 [ 167.206417][ T6965] ? fuse_lock_inode+0xd2/0x110 [ 167.206441][ T6965] ? find_held_lock+0x2b/0x80 [ 167.206457][ T6965] fuse_lookup+0x1af/0x420 [ 167.206472][ T6965] ? __pfx_fuse_lookup+0x10/0x10 [ 167.206494][ T6965] ? lockdep_init_map_type+0x5c/0x280 [ 167.206507][ T6965] __lookup_slow+0x251/0x460 [ 167.206522][ T6965] ? __pfx___lookup_slow+0x10/0x10 [ 167.206545][ T6965] ? lookup_fast+0x156/0x610 [ 167.206563][ T6965] walk_component+0x353/0x5b0 [ 167.206580][ T6965] link_path_walk.part.0.constprop.0+0x685/0xd60 [ 167.206603][ T6965] path_lookupat+0x91/0x780 [ 167.206622][ T6965] filename_lookup+0x224/0x5f0 [ 167.206640][ T6965] ? __pfx_filename_lookup+0x10/0x10 [ 167.206669][ T6965] ? getname_flags.part.0+0x1c5/0x550 [ 167.206686][ T6965] do_readlinkat+0xce/0x3a0 [ 167.206699][ T6965] ? fput+0x70/0xf0 [ 167.206710][ T6965] ? __pfx_do_readlinkat+0x10/0x10 [ 167.206722][ T6965] ? ksys_write+0x1b9/0x240 [ 167.206738][ T6965] ? __pfx_ksys_write+0x10/0x10 [ 167.206757][ T6965] __x64_sys_readlink+0x78/0xc0 [ 167.206771][ T6965] ? lockdep_hardirqs_on+0x7c/0x110 [ 167.206786][ T6965] do_syscall_64+0xcd/0x260 [ 167.206803][ T6965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.206815][ T6965] RIP: 0033:0x7fd45a58e969 [ 167.206825][ T6965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.206836][ T6965] RSP: 002b:00007fd45b34b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000059 [ 167.206852][ T6965] RAX: ffffffffffffffda RBX: 00007fd45a7b6080 RCX: 00007fd45a58e969 [ 167.206862][ T6965] RDX: 00000000000000a7 RSI: 00002000000004c0 RDI: 0000200000000240 [ 167.206872][ T6965] RBP: 00007fd45b34b090 R08: 0000000000000000 R09: 0000000000000000 [ 167.206882][ T6965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.206891][ T6965] R13: 0000000000000001 R14: 00007fd45a7b6080 R15: 00007ffc0e163768 [ 167.206907][ T6965] [ 168.569165][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 168.569178][ T30] audit: type=1400 audit(1747266680.451:426): avc: denied { bind } for pid=6989 comm="syz.2.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 169.169030][ T30] audit: type=1400 audit(1747266680.461:427): avc: denied { write } for pid=6989 comm="syz.2.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 169.189253][ T30] audit: type=1400 audit(1747266681.021:428): avc: denied { create } for pid=6987 comm="syz.1.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 169.189466][ T6995] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1836 sclass=netlink_route_socket pid=6995 comm=syz.2.309 [ 169.208710][ T30] audit: type=1400 audit(1747266681.021:429): avc: denied { module_request } for pid=6987 comm="syz.1.307" kmod="net-pf-10-proto-0-type-6" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 170.354884][ T7009] FAULT_INJECTION: forcing a failure. [ 170.354884][ T7009] name failslab, interval 1, probability 0, space 0, times 0 [ 170.393282][ T7009] CPU: 0 UID: 0 PID: 7009 Comm: syz.4.313 Not tainted 6.15.0-rc6-syzkaller-00080-g1a80a098c606 #0 PREEMPT(full) [ 170.393309][ T7009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 170.393320][ T7009] Call Trace: [ 170.393326][ T7009] [ 170.393332][ T7009] dump_stack_lvl+0x16c/0x1f0 [ 170.393361][ T7009] should_fail_ex+0x512/0x640 [ 170.393383][ T7009] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 170.393402][ T7009] should_failslab+0xc2/0x120 [ 170.393420][ T7009] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 170.393437][ T7009] ? security_file_alloc+0x34/0x2b0 [ 170.393466][ T7009] security_file_alloc+0x34/0x2b0 [ 170.393489][ T7009] init_file+0x93/0x4c0 [ 170.393510][ T7009] alloc_empty_file+0x73/0x1e0 [ 170.393532][ T7009] path_openat+0xe0/0x2d40 [ 170.393546][ T7009] ? __x64_sys_openat+0x174/0x210 [ 170.393566][ T7009] ? do_syscall_64+0xcd/0x260 [ 170.393587][ T7009] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.393613][ T7009] ? __pfx_path_openat+0x10/0x10 [ 170.393636][ T7009] do_filp_open+0x20b/0x470 [ 170.393653][ T7009] ? __pfx_do_filp_open+0x10/0x10 [ 170.393687][ T7009] ? alloc_fd+0x471/0x7d0 [ 170.393710][ T7009] do_sys_openat2+0x11b/0x1d0 [ 170.393728][ T7009] ? __pfx_do_sys_openat2+0x10/0x10 [ 170.393750][ T7009] ? __fget_files+0x20e/0x3c0 [ 170.393769][ T7009] __x64_sys_openat+0x174/0x210 [ 170.393789][ T7009] ? __pfx___x64_sys_openat+0x10/0x10 [ 170.393808][ T7009] ? ksys_write+0x1b9/0x240 [ 170.393832][ T7009] ? rcu_is_watching+0x12/0xc0 [ 170.393860][ T7009] do_syscall_64+0xcd/0x260 [ 170.393884][ T7009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.393900][ T7009] RIP: 0033:0x7fab1bb8e969 [ 170.393914][ T7009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.393930][ T7009] RSP: 002b:00007fab1c942038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 170.393948][ T7009] RAX: ffffffffffffffda RBX: 00007fab1bdb5fa0 RCX: 00007fab1bb8e969 [ 170.393960][ T7009] RDX: 0000000000007e00 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 170.393971][ T7009] RBP: 00007fab1c942090 R08: 0000000000000000 R09: 0000000000000000 [ 170.393981][ T7009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.393991][ T7009] R13: 0000000000000000 R14: 00007fab1bdb5fa0 R15: 00007ffe8d827ff8 [ 170.394029][ T7009] [ 170.624547][ C0] vkms_vblank_simulate: vblank timer overrun [ 171.948964][ T30] audit: type=1400 audit(1747266683.761:430): avc: denied { ioctl } for pid=7015 comm="syz.2.316" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 174.065395][ T7028] 9pnet_fd: Insufficient options for proto=fd [ 174.082892][ T30] audit: type=1400 audit(1747266683.771:431): avc: denied { set_context_mgr } for pid=7015 comm="syz.2.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 174.102951][ T30] audit: type=1400 audit(1747266683.801:432): avc: denied { map } for pid=7015 comm="syz.2.316" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 174.927053][ T5880] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 175.189350][ T5880] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 175.274499][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 175.326977][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 175.359592][ T5880] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 175.410046][ T5880] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 175.666934][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.723643][ T5880] usb 4-1: config 0 descriptor?? [ 175.777598][ T30] audit: type=1400 audit(1747266687.661:433): avc: denied { bind } for pid=7050 comm="syz.0.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 175.810343][ T30] audit: type=1400 audit(1747266687.691:434): avc: denied { append } for pid=7050 comm="syz.0.327" name="sg0" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 175.833815][ C0] vkms_vblank_simulate: vblank timer overrun [ 175.843720][ T30] audit: type=1400 audit(1747266687.691:435): avc: denied { open } for pid=7050 comm="syz.0.327" path="/dev/sg0" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 175.867475][ C0] vkms_vblank_simulate: vblank timer overrun [ 175.881834][ T30] audit: type=1400 audit(1747266687.701:436): avc: denied { ioctl } for pid=7050 comm="syz.0.327" path="/dev/sg0" dev="devtmpfs" ino=746 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 175.911726][ T30] audit: type=1400 audit(1747266687.731:437): avc: denied { listen } for pid=7050 comm="syz.0.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 175.930959][ C0] vkms_vblank_simulate: vblank timer overrun [ 175.987751][ T5914] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 176.001558][ T30] audit: type=1400 audit(1747266687.771:438): avc: denied { accept } for pid=7050 comm="syz.0.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 176.048781][ T30] audit: type=1400 audit(1747266687.871:439): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 176.133411][ T7058] netlink: 'syz.4.329': attribute type 10 has an invalid length. [ 176.169768][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 176.181958][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.199562][ T5880] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 176.223994][ T7058] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 176.247071][ T5914] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 176.259818][ T5880] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 176.272342][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.282927][ T30] audit: type=1400 audit(1747266688.161:440): avc: denied { execute } for pid=7064 comm="syz.2.332" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=12849 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 176.319375][ T5914] usb 2-1: config 0 descriptor?? [ 176.761372][ T7047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.325'. [ 176.837005][ T5875] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 176.846596][ T5914] usbhid 2-1:0.0: can't add hid device: -71 [ 176.853044][ T5914] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 176.863932][ T5914] usb 2-1: USB disconnect, device number 8 [ 176.990590][ T5875] usb 5-1: config 0 has an invalid interface number: 166 but max is 0 [ 176.999651][ T5875] usb 5-1: config 0 has no interface number 0 [ 177.006198][ T5875] usb 5-1: config 0 interface 166 altsetting 11 bulk endpoint 0x2 has invalid maxpacket 16 [ 177.021725][ T5875] usb 5-1: config 0 interface 166 has no altsetting 0 [ 177.053289][ T5875] usb 5-1: New USB device found, idVendor=110a, idProduct=1151, bcdDevice=1b.1d [ 177.062734][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.070893][ T5875] usb 5-1: Product: syz [ 177.075215][ T5875] usb 5-1: Manufacturer: syz [ 177.082329][ T5875] usb 5-1: SerialNumber: syz [ 177.097699][ T5875] usb 5-1: config 0 descriptor?? [ 177.103395][ T7072] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 177.262641][ T5914] usb 4-1: USB disconnect, device number 21 [ 177.353032][ T7078] FAULT_INJECTION: forcing a failure. [ 177.353032][ T7078] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.366245][ T7078] CPU: 1 UID: 0 PID: 7078 Comm: syz.2.334 Not tainted 6.15.0-rc6-syzkaller-00080-g1a80a098c606 #0 PREEMPT(full) [ 177.366271][ T7078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 177.366281][ T7078] Call Trace: [ 177.366287][ T7078] [ 177.366294][ T7078] dump_stack_lvl+0x16c/0x1f0 [ 177.366323][ T7078] should_fail_ex+0x512/0x640 [ 177.366350][ T7078] _copy_from_user+0x2e/0xd0 [ 177.366376][ T7078] copy_from_sockptr_offset+0x15c/0x1b0 [ 177.366401][ T7078] ? __pfx_copy_from_sockptr_offset+0x10/0x10 [ 177.366423][ T7078] ? xt_alloc_table_info+0x3e/0xa0 [ 177.366452][ T7078] do_ip6t_set_ctl+0x544/0xb00 [ 177.366475][ T7078] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 177.366502][ T7078] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 177.366527][ T7078] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 177.366565][ T7078] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 177.366590][ T7078] nf_setsockopt+0x8d/0xf0 [ 177.366613][ T7078] ipv6_setsockopt+0x135/0x170 [ 177.366637][ T7078] tcp_setsockopt+0xa7/0x100 [ 177.366655][ T7078] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 177.366679][ T7078] do_sock_setsockopt+0x224/0x470 [ 177.366702][ T7078] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 177.366738][ T7078] __sys_setsockopt+0x1a0/0x230 [ 177.366761][ T7078] __x64_sys_setsockopt+0xbd/0x160 [ 177.366778][ T7078] ? do_syscall_64+0x91/0x260 [ 177.366803][ T7078] ? lockdep_hardirqs_on+0x7c/0x110 [ 177.366826][ T7078] do_syscall_64+0xcd/0x260 [ 177.366854][ T7078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.366872][ T7078] RIP: 0033:0x7fc1f318e969 [ 177.366886][ T7078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.366901][ T7078] RSP: 002b:00007fc1f3f95038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 177.366917][ T7078] RAX: ffffffffffffffda RBX: 00007fc1f33b6160 RCX: 00007fc1f318e969 [ 177.366929][ T7078] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 177.366939][ T7078] RBP: 00007fc1f3f95090 R08: 0000000000000310 R09: 0000000000000000 [ 177.366948][ T7078] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.366964][ T7078] R13: 0000000000000000 R14: 00007fc1f33b6160 R15: 00007ffd6b674868 [ 177.366988][ T7078] [ 177.595750][ T5875] ti_usb_3410_5052 5-1:0.166: TI USB 3410 1 port adapter converter detected [ 177.611874][ T5875] ti_usb_3410_5052 5-1:0.166: missing endpoints [ 177.632081][ T5875] usb 5-1: USB disconnect, device number 16 [ 177.942602][ T3482] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.992116][ T5876] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 178.050509][ T3482] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.169776][ T3482] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.330991][ T5876] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 178.346921][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.361304][ T3482] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.368812][ T5876] usb 2-1: config 0 descriptor?? [ 178.801797][ T5876] cp210x 2-1:0.0: cp210x converter detected [ 178.900103][ T5128] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 178.909887][ T5128] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 178.918004][ T5128] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 178.927175][ T5128] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 178.935638][ T5128] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 178.992513][ T3482] bridge_slave_1: left allmulticast mode [ 179.016975][ T3482] bridge_slave_1: left promiscuous mode [ 179.023916][ T3482] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.243978][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 179.244016][ T30] audit: type=1400 audit(1747266691.111:447): avc: denied { create } for pid=7089 comm="syz.1.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 179.455180][ T3482] bridge_slave_0: left allmulticast mode [ 179.500143][ T30] audit: type=1400 audit(1747266691.171:448): avc: denied { watch_sb watch_reads } for pid=7089 comm="syz.1.338" path="/77" dev="tmpfs" ino=425 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 179.504170][ T3482] bridge_slave_0: left promiscuous mode [ 179.523723][ T30] audit: type=1400 audit(1747266691.251:449): avc: denied { create } for pid=7111 comm="syz.2.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 179.548890][ C0] vkms_vblank_simulate: vblank timer overrun [ 179.582688][ T3482] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.191779][ T30] audit: type=1400 audit(1747266691.751:450): avc: denied { setopt } for pid=7089 comm="syz.1.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 181.037649][ T5128] Bluetooth: hci1: command tx timeout [ 181.959977][ T5876] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 182.027116][ T5876] cp210x 2-1:0.0: querying part number failed [ 182.071447][ T5876] usb 2-1: cp210x converter now attached to ttyUSB0 [ 182.106167][ T7135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.350'. [ 182.107863][ T5876] usb 2-1: USB disconnect, device number 9 [ 182.158306][ T5876] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 182.185180][ T5876] cp210x 2-1:0.0: device disconnected [ 182.357266][ T30] audit: type=1400 audit(1747266694.231:451): avc: denied { connect } for pid=7140 comm="syz.0.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 182.537159][ T5876] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 182.627610][ T5875] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 182.782674][ T5876] usb 2-1: Using ep0 maxpacket: 8 [ 182.821075][ T5875] usb 1-1: device descriptor read/64, error -71 [ 182.886759][ T5876] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 182.960728][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.023305][ T5876] usb 2-1: Product: syz [ 183.056161][ T5876] usb 2-1: Manufacturer: syz [ 183.097182][ T5128] Bluetooth: hci1: command tx timeout [ 183.105506][ T5876] usb 2-1: SerialNumber: syz [ 183.141248][ T5875] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 183.198332][ T5876] usb 2-1: config 0 descriptor?? [ 183.443294][ T5875] usb 1-1: device descriptor read/64, error -71 [ 183.689248][ T3482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.718433][ T3482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.748492][ T5875] usb usb1-port1: attempt power cycle [ 183.840190][ T3482] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 184.033433][ T5876] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 184.085483][ T3482] bond0 (unregistering): Released all slaves [ 184.177237][ T5875] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 184.239990][ T5875] usb 1-1: device descriptor read/8, error -71 [ 184.567132][ T5875] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 184.675801][ T5875] usb 1-1: device descriptor read/8, error -71 [ 184.791415][ T5875] usb usb1-port1: unable to enumerate USB device [ 185.251203][ T5128] Bluetooth: hci1: command tx timeout [ 185.474113][ T3482] hsr_slave_0: left promiscuous mode [ 185.495567][ T3482] hsr_slave_1: left promiscuous mode [ 185.505483][ T3482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.529157][ T3482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.560182][ T3482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.614479][ T3482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.669834][ T5876] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 185.954654][ T3482] veth1_macvtap: left promiscuous mode [ 186.026800][ T3482] veth0_macvtap: left promiscuous mode [ 186.098318][ T3482] veth1_vlan: left promiscuous mode [ 186.170803][ T3482] veth0_vlan: left promiscuous mode [ 186.379236][ T5876] usb 2-1: USB disconnect, device number 10 [ 186.474892][ T7173] IPVS: set_ctl: invalid protocol: 210 172.20.20.170:0 [ 186.748193][ T5875] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 187.336936][ T5128] Bluetooth: hci1: command tx timeout [ 187.472782][ T7168] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 187.479815][ T5875] usb 4-1: Using ep0 maxpacket: 32 [ 187.532374][ T5875] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.544851][ T5875] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.561230][ T5875] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 187.570451][ T5875] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 187.585157][ T5875] usb 4-1: Product: syz [ 187.616468][ T5875] usb 4-1: Manufacturer: syz [ 187.710200][ T5875] hub 4-1:4.0: USB hub found [ 187.928338][ T5875] hub 4-1:4.0: config failed, hub has too many ports! (err -19) [ 188.525829][ T49] usb 4-1: USB disconnect, device number 22 [ 188.532418][ T7176] tmpfs: Unknown parameter 'usrquota_iB' [ 189.369840][ T3482] team0 (unregistering): Port device team_slave_1 removed [ 189.424449][ T3482] team0 (unregistering): Port device team_slave_0 removed [ 189.783270][ T7101] chnl_net:caif_netlink_parms(): no params data found [ 190.068593][ T7101] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.079372][ T7101] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.086788][ T7101] bridge_slave_0: entered allmulticast mode [ 190.095049][ T7101] bridge_slave_0: entered promiscuous mode [ 190.122156][ T7101] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.132359][ T7101] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.141044][ T7101] bridge_slave_1: entered allmulticast mode [ 190.151744][ T7101] bridge_slave_1: entered promiscuous mode [ 190.652264][ T5875] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 190.741951][ T7101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.781364][ T7101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.397565][ T5875] usb 1-1: Using ep0 maxpacket: 16 [ 191.403410][ T7101] team0: Port device team_slave_0 added [ 191.405726][ T5875] usb 1-1: config 8 has an invalid interface number: 39 but max is 0 [ 191.430372][ T7101] team0: Port device team_slave_1 added [ 191.599644][ T5875] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 191.610079][ T5875] usb 1-1: config 8 has no interface number 0 [ 191.616182][ T5875] usb 1-1: config 8 interface 39 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 191.703412][ T7226] netlink: 4 bytes leftover after parsing attributes in process `syz.2.374'. [ 191.761562][ T7226] netlink: 4 bytes leftover after parsing attributes in process `syz.2.374'. [ 191.783062][ T7226] netlink: 'syz.2.374': attribute type 3 has an invalid length. [ 191.958828][ T5875] usb 1-1: config 8 interface 39 has no altsetting 0 [ 191.967653][ T5875] usb 1-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 191.977811][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.985910][ T5875] usb 1-1: Product: syz [ 191.990162][ T5875] usb 1-1: Manufacturer: syz [ 191.994821][ T5875] usb 1-1: SerialNumber: syz [ 192.031629][ T7101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.038843][ T7101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.213747][ T30] audit: type=1400 audit(1747266704.011:452): avc: denied { write } for pid=7225 comm="syz.1.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 192.263715][ T7101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.519131][ T7207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.556244][ T7101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.572640][ T7207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.586934][ T7101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.675515][ T7101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.687062][ T7208] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 192.826313][ T7101] hsr_slave_0: entered promiscuous mode [ 192.837786][ T7101] hsr_slave_1: entered promiscuous mode [ 192.852557][ T7101] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.872489][ T5875] ipheth 1-1:8.39: Unable to find endpoints [ 192.896342][ T7101] Cannot create hsr debugfs directory [ 192.913689][ T5875] usb 1-1: USB disconnect, device number 16 [ 192.945976][ T30] audit: type=1400 audit(1747266704.831:453): avc: denied { watch watch_reads } for pid=7238 comm="syz.1.378" path="pipe:[14334]" dev="pipefs" ino=14334 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 193.002297][ T49] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 193.068984][ T7239] ceph: No mds server is up or the cluster is laggy [ 193.206985][ T49] usb 3-1: Using ep0 maxpacket: 16 [ 193.216770][ T49] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.287031][ T49] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 193.334598][ T49] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 193.394550][ T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.424497][ T49] usb 3-1: Product: syz [ 193.440504][ T49] usb 3-1: Manufacturer: syz [ 193.451435][ T49] usb 3-1: SerialNumber: syz [ 193.464258][ T49] usb 3-1: config 0 descriptor?? [ 193.513393][ T7101] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 193.527121][ T7101] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 193.538573][ T7101] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 193.550352][ T7101] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 193.681683][ T7101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.713400][ T30] audit: type=1400 audit(1747266705.591:454): avc: denied { create } for pid=7249 comm="syz.1.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 193.751681][ T7101] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.765960][ T6058] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.773175][ T6058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.819430][ T6058] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.826617][ T6058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.853958][ T7101] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 193.873117][ T7101] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 193.947252][ T5875] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 193.982460][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.988954][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.009622][ T30] audit: type=1804 audit(1747266705.901:455): pid=7261 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.383" name="/newroot/80/file0" dev="tmpfs" ino=432 res=1 errno=0 [ 194.010019][ T7261] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 194.047964][ T7261] ref_ctr increment failed for inode: 0x1b0 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88801f7e5000 [ 194.130607][ T5875] usb 2-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.149320][ T5875] usb 2-1: config 0 interface 0 has no altsetting 0 [ 194.158401][ T5875] usb 2-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 194.173052][ T7101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.180216][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.199143][ T5875] usb 2-1: config 0 descriptor?? [ 194.663409][ T5875] apple 0003:05AC:027A.0006: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.1-1/input0 [ 194.872250][ T30] audit: type=1400 audit(1747266706.761:456): avc: denied { bind } for pid=7249 comm="syz.1.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 194.886154][ T7276] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 194.926810][ T5880] usb 2-1: USB disconnect, device number 11 [ 194.966133][ T30] audit: type=1400 audit(1747266706.761:457): avc: denied { append } for pid=7275 comm="syz.0.385" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 194.997183][ T30] audit: type=1400 audit(1747266706.761:458): avc: denied { open } for pid=7275 comm="syz.0.385" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 195.005560][ T7101] veth0_vlan: entered promiscuous mode [ 195.021796][ T30] audit: type=1400 audit(1747266706.801:459): avc: denied { connect } for pid=7249 comm="syz.1.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 195.048723][ T30] audit: type=1400 audit(1747266706.801:460): avc: denied { write } for pid=7249 comm="syz.1.380" path="socket:[14459]" dev="sockfs" ino=14459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 195.073050][ T30] audit: type=1400 audit(1747266706.811:461): avc: denied { accept } for pid=7275 comm="syz.0.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 195.113018][ T7101] veth1_vlan: entered promiscuous mode [ 195.145191][ T7101] veth0_macvtap: entered promiscuous mode [ 195.176516][ T7101] veth1_macvtap: entered promiscuous mode [ 195.220429][ T7101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.231112][ T7101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.241401][ T7101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.253287][ T7101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.263464][ T7101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.273971][ T7101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.283885][ T7101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.294578][ T7101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.305334][ T7101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.316012][ T7101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.326786][ T7101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.336698][ T7101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.347372][ T7101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.358313][ T7101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.368824][ T7101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.378700][ T7101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.389342][ T7101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.402056][ T7101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.418326][ T7101] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.427559][ T7101] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.436357][ T7101] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.524498][ T7101] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.677455][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.685319][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.706688][ T9] usb 3-1: USB disconnect, device number 13 [ 195.713141][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.734158][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.909357][ T7299] lo speed is unknown, defaulting to 1000 [ 196.915669][ T7299] lo speed is unknown, defaulting to 1000 [ 196.927541][ T7299] lo speed is unknown, defaulting to 1000 [ 196.951752][ T7299] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 196.985230][ T7299] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 197.074384][ T7299] lo speed is unknown, defaulting to 1000 [ 197.083026][ T7299] lo speed is unknown, defaulting to 1000 [ 197.090595][ T7299] lo speed is unknown, defaulting to 1000 [ 197.099371][ T7299] lo speed is unknown, defaulting to 1000 [ 197.106473][ T7299] lo speed is unknown, defaulting to 1000 [ 197.474859][ T7311] binder: 7309:7311 unknown command 268435456 [ 197.481241][ T7311] binder: 7309:7311 ioctl c0306201 200000000780 returned -22 [ 198.798113][ T7327] Invalid ELF header type: 3 != 1 [ 198.808724][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 198.808760][ T30] audit: type=1400 audit(1747266710.691:465): avc: denied { module_load } for pid=7315 comm="syz.5.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 199.402053][ T5880] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 199.437095][ T30] audit: type=1400 audit(1747266710.691:466): avc: denied { getopt } for pid=7315 comm="syz.5.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 199.647073][ T5875] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 199.746973][ T5880] usb 3-1: Using ep0 maxpacket: 32 [ 199.777302][ T30] audit: type=1400 audit(1747266711.661:467): avc: denied { read write } for pid=7324 comm="syz.3.400" name="file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 199.826962][ T5875] usb 2-1: Using ep0 maxpacket: 16 [ 200.063569][ T5880] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 200.063570][ T30] audit: type=1400 audit(1747266711.661:468): avc: denied { open } for pid=7324 comm="syz.3.400" path="/85/file0/file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 200.063616][ T30] audit: type=1400 audit(1747266711.761:469): avc: denied { ioctl } for pid=7324 comm="syz.3.400" path="/85/file0/file0" dev="fuse" ino=5 ioctlcmd=0x540a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 200.072672][ T5880] usb 3-1: config 0 has no interface number 0 [ 200.113426][ T5875] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.207759][ T5880] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 200.225137][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.468533][ T5875] usb 2-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 200.484099][ T5875] usb 2-1: config 0 interface 0 has no altsetting 0 [ 200.492970][ T5880] usb 3-1: Product: syz [ 200.495014][ T5875] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 200.506339][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.518534][ T5875] usb 2-1: Product: syz [ 200.524785][ T5875] usb 2-1: Manufacturer: syz [ 200.530438][ T5875] usb 2-1: SerialNumber: syz [ 200.536326][ T5875] usb 2-1: config 0 descriptor?? [ 200.626927][ T5880] usb 3-1: Manufacturer: syz [ 200.787165][ T5880] usb 3-1: SerialNumber: syz [ 200.845741][ T5880] usb 3-1: config 0 descriptor?? [ 200.899821][ T5880] smsc95xx v2.0.0 [ 200.972173][ T24] usb 2-1: USB disconnect, device number 12 [ 201.110101][ T30] audit: type=1400 audit(1747266713.001:470): avc: denied { read write } for pid=7350 comm="syz.5.408" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 201.139112][ T49] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 201.146985][ T5914] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 201.297240][ T49] usb 4-1: Using ep0 maxpacket: 32 [ 201.306103][ T49] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 201.314996][ T49] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.325189][ T5914] usb 1-1: Using ep0 maxpacket: 16 [ 201.330373][ T49] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 201.339408][ T49] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 201.354908][ T5914] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 201.363051][ T5914] usb 1-1: config 0 has no interface number 0 [ 201.369299][ T5914] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 201.380287][ T49] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 201.389379][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.398430][ T49] usb 4-1: Product: syz [ 201.402659][ T49] usb 4-1: Manufacturer: syz [ 201.407511][ T49] usb 4-1: SerialNumber: syz [ 201.413086][ T5914] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 201.423488][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 201.431629][ T5861] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 201.432582][ T5914] usb 1-1: Product: syz [ 201.443763][ T5914] usb 1-1: SerialNumber: syz [ 201.450218][ T5914] usb 1-1: config 0 descriptor?? [ 201.457717][ T5914] cm109 1-1:0.8: invalid payload size 208, expected 4 [ 201.465601][ T5914] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input13 [ 201.540981][ T7355] netlink: 'syz.1.410': attribute type 1 has an invalid length. [ 201.564389][ T7355] bond1: entered promiscuous mode [ 201.570431][ T7355] 8021q: adding VLAN 0 to HW filter on device bond1 [ 201.587023][ T5861] usb 6-1: Using ep0 maxpacket: 8 [ 201.594030][ T5861] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 201.598062][ T7355] 8021q: adding VLAN 0 to HW filter on device bond1 [ 201.603343][ T5861] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 201.616831][ T7355] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 201.618178][ T5861] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 201.632407][ T7355] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 201.637576][ T5861] usb 6-1: config 250 has no interface number 0 [ 201.653065][ T5861] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 201.659042][ T49] cdc_ncm 4-1:1.0: skipping garbage [ 201.665153][ T5861] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 201.680428][ T5861] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 201.690725][ T5861] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 201.701118][ T5861] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 201.706999][ T5880] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 201.717408][ T7355] bond1: (slave ip6gre1): making interface the new active one [ 201.732060][ T5861] usb 6-1: config 250 interface 228 has no altsetting 0 [ 201.739272][ T49] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 201.746142][ T49] cdc_ncm 4-1:1.0: bind() failure [ 201.757099][ T5861] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 201.759076][ T7355] ip6gre1: entered promiscuous mode [ 201.766148][ T5861] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 201.766168][ T5861] usb 6-1: Product: syz [ 201.766180][ T5861] usb 6-1: SerialNumber: syz [ 201.772940][ T5861] hub 6-1:250.228: bad descriptor, ignoring hub [ 201.781689][ T7355] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 201.786572][ T5861] hub 6-1:250.228: probe with driver hub failed with error -5 [ 201.939738][ T5880] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 201.967367][ T5880] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 202.068046][ T7360] Bluetooth: MGMT ver 1.23 [ 202.532424][ T5875] usb 4-1: USB disconnect, device number 23 [ 202.553221][ T5861] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 2 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 202.931866][ T5880] usb 3-1: USB disconnect, device number 14 [ 202.949591][ T5861] usb 6-1: USB disconnect, device number 2 [ 202.969848][ T5861] usblp0: removed [ 203.161110][ T7367] Cannot find del_set index 65531 as target [ 203.672749][ C1] cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71 [ 203.680166][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 203.687454][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 203.694615][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 203.701777][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 203.708935][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 203.716064][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 203.723243][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 203.728892][ T5876] usb 1-1: USB disconnect, device number 17 [ 203.730183][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 203.766022][ T5876] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 204.167211][ T5128] Bluetooth: hci0: command 0x0c1a tx timeout [ 204.496943][ T5876] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 204.524466][ T7393] FAULT_INJECTION: forcing a failure. [ 204.524466][ T7393] name failslab, interval 1, probability 0, space 0, times 0 [ 204.542322][ T7393] CPU: 1 UID: 0 PID: 7393 Comm: syz.1.421 Not tainted 6.15.0-rc6-syzkaller-00080-g1a80a098c606 #0 PREEMPT(full) [ 204.542353][ T7393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 204.542363][ T7393] Call Trace: [ 204.542370][ T7393] [ 204.542376][ T7393] dump_stack_lvl+0x16c/0x1f0 [ 204.542406][ T7393] should_fail_ex+0x512/0x640 [ 204.542431][ T7393] ? __kmalloc_noprof+0xbf/0x510 [ 204.542450][ T7393] ? nft_trans_alloc_gfp+0x26/0x2e0 [ 204.542468][ T7393] should_failslab+0xc2/0x120 [ 204.542486][ T7393] __kmalloc_noprof+0xd2/0x510 [ 204.542501][ T7393] ? lockdep_init_map_type+0x5c/0x280 [ 204.542524][ T7393] nft_trans_alloc_gfp+0x26/0x2e0 [ 204.542541][ T7393] nf_tables_newtable+0x1387/0x1b40 [ 204.542565][ T7393] ? __pfx_nf_tables_newtable+0x10/0x10 [ 204.542584][ T7393] ? __nla_parse+0x40/0x60 [ 204.542597][ T7393] nfnetlink_rcv_batch+0x190b/0x2350 [ 204.542620][ T7393] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 204.542637][ T7393] ? find_held_lock+0x2b/0x80 [ 204.542667][ T7393] ? avc_has_perm_noaudit+0x149/0x3b0 [ 204.542694][ T7393] ? __nla_parse+0x40/0x60 [ 204.542706][ T7393] nfnetlink_rcv+0x3c1/0x430 [ 204.542721][ T7393] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 204.542739][ T7393] netlink_unicast+0x53d/0x7f0 [ 204.542756][ T7393] ? __pfx_netlink_unicast+0x10/0x10 [ 204.542773][ T7393] netlink_sendmsg+0x8d1/0xdd0 [ 204.542790][ T7393] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.542809][ T7393] ____sys_sendmsg+0xa98/0xc70 [ 204.542826][ T7393] ? copy_msghdr_from_user+0x10a/0x160 [ 204.542838][ T7393] ? __pfx_____sys_sendmsg+0x10/0x10 [ 204.542860][ T7393] ___sys_sendmsg+0x134/0x1d0 [ 204.542873][ T7393] ? __pfx____sys_sendmsg+0x10/0x10 [ 204.542904][ T7393] __sys_sendmsg+0x16d/0x220 [ 204.542917][ T7393] ? __pfx___sys_sendmsg+0x10/0x10 [ 204.542938][ T7393] do_syscall_64+0xcd/0x260 [ 204.542955][ T7393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.542967][ T7393] RIP: 0033:0x7fed78f8e969 [ 204.542977][ T7393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.542988][ T7393] RSP: 002b:00007fed79ea7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.543000][ T7393] RAX: ffffffffffffffda RBX: 00007fed791b5fa0 RCX: 00007fed78f8e969 [ 204.543007][ T7393] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 204.543014][ T7393] RBP: 00007fed79ea7090 R08: 0000000000000000 R09: 0000000000000000 [ 204.543020][ T7393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 204.543026][ T7393] R13: 0000000000000000 R14: 00007fed791b5fa0 R15: 00007ffc884e4528 [ 204.543040][ T7393] [ 205.008687][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.801203][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.811131][ T5876] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 205.824327][ T5876] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 205.833514][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.845243][ T5876] usb 1-1: config 0 descriptor?? [ 206.066975][ T3781] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 206.236959][ T3781] usb 4-1: Using ep0 maxpacket: 32 [ 206.244546][ T3781] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 206.257937][ T7407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.265997][ T5876] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 206.271904][ T3781] usb 4-1: config 0 has no interface number 0 [ 206.278819][ T5876] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 206.284964][ T7407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.305016][ T3781] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 206.318900][ T3781] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.330250][ T3781] usb 4-1: Product: syz [ 206.334491][ T3781] usb 4-1: Manufacturer: syz [ 206.339561][ T3781] usb 4-1: SerialNumber: syz [ 206.356304][ T3781] usb 4-1: config 0 descriptor?? [ 206.368246][ T3781] smsc95xx v2.0.0 [ 206.392715][ T5876] usb 1-1: USB disconnect, device number 18 [ 206.448114][ T30] audit: type=1400 audit(1747266718.331:471): avc: denied { read } for pid=7413 comm="syz.1.428" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 207.222112][ T3781] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 207.704036][ T3781] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 207.755198][ T7420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.429'. [ 207.764242][ T30] audit: type=1400 audit(1747266719.641:472): avc: denied { ioctl } for pid=7415 comm="syz.0.429" path="socket:[15285]" dev="sockfs" ino=15285 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 208.187055][ T3781] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 208.241992][ T3781] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 208.273966][ T30] audit: type=1400 audit(1747266719.701:473): avc: denied { setopt } for pid=7430 comm="syz.5.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 208.308943][ T3781] usb 4-1: USB disconnect, device number 24 [ 209.631172][ T30] audit: type=1400 audit(1747266721.511:474): avc: denied { create } for pid=7445 comm="syz.1.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 209.728679][ T30] audit: type=1400 audit(1747266721.521:475): avc: denied { create } for pid=7445 comm="syz.1.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 209.785350][ T30] audit: type=1400 audit(1747266721.541:476): avc: denied { write } for pid=7445 comm="syz.1.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 210.186694][ T30] audit: type=1400 audit(1747266721.551:477): avc: denied { create } for pid=7445 comm="syz.1.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 210.617907][ T30] audit: type=1400 audit(1747266722.511:478): avc: denied { create } for pid=7472 comm="syz.2.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 210.694392][ T30] audit: type=1400 audit(1747266722.571:479): avc: denied { write } for pid=7472 comm="syz.2.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 210.857031][ T3781] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 210.886990][ T5876] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 211.062150][ T3781] usb 6-1: config 0 has an invalid interface number: 175 but max is 0 [ 211.338579][ T3781] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.361163][ T3781] usb 6-1: config 0 has no interface number 0 [ 211.369176][ T3781] usb 6-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 211.380791][ T7478] lo speed is unknown, defaulting to 1000 [ 211.383942][ T3781] usb 6-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 211.397929][ T5876] usb 2-1: Using ep0 maxpacket: 16 [ 211.404427][ T5876] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 211.405726][ T3781] usb 6-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 211.414393][ T5876] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 211.437964][ T3781] usb 6-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 211.451665][ T5876] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 211.454405][ T3781] usb 6-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 211.465404][ T30] audit: type=1400 audit(1747266723.351:480): avc: denied { map } for pid=7481 comm="syz.3.448" path="/dev/net/tun" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 211.483999][ T3781] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.514239][ T5876] usb 2-1: config 0 interface 0 has no altsetting 0 [ 211.523681][ T5876] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 211.526967][ T3781] usb 6-1: Product: syz [ 211.537128][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.544724][ T3781] usb 6-1: Manufacturer: syz [ 211.552450][ T3781] usb 6-1: SerialNumber: syz [ 211.560071][ T5876] usb 2-1: Product: syz [ 211.561666][ T3781] usb 6-1: config 0 descriptor?? [ 211.564248][ T5876] usb 2-1: Manufacturer: syz [ 211.564265][ T5876] usb 2-1: SerialNumber: syz [ 211.584299][ T5876] usb 2-1: config 0 descriptor?? [ 211.597235][ T5880] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 211.606459][ T3781] symbolserial 6-1:0.175: symbol converter detected [ 211.620304][ T3781] usb 6-1: symbol converter now attached to ttyUSB0 [ 211.807614][ T5880] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 211.816615][ T5880] usb 3-1: config 0 has no interface number 0 [ 212.006018][ T5875] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 212.037021][ T5880] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 212.057951][ T5876] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input15 [ 212.093587][ T5172] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 212.112924][ T5880] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 212.133934][ T5172] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 212.140136][ T5880] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 212.153826][ T5172] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 212.156442][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.173108][ T5880] usb 3-1: Product: syz [ 212.177340][ T5880] usb 3-1: Manufacturer: syz [ 212.182366][ T5172] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 212.191775][ T5875] usb 4-1: Using ep0 maxpacket: 16 [ 212.191776][ T5880] usb 3-1: SerialNumber: syz [ 212.193732][ T5880] usb 3-1: config 0 descriptor?? [ 212.203017][ T5875] usb 4-1: config 252 has an invalid interface number: 165 but max is 0 [ 212.207426][ T7480] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 212.215479][ T5875] usb 4-1: config 252 has no interface number 0 [ 212.223783][ T5880] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 212.240328][ T5875] usb 4-1: New USB device found, idVendor=0b48, idProduct=300d, bcdDevice=d4.cd [ 212.250498][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.263043][ T5880] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB1 [ 212.265330][ T5875] dvb-usb: found a 'Technotrend TT-connect CT-3650' in cold state, will try to load a firmware [ 212.571966][ T7485] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 212.699718][ T5875] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 212.719040][ T7471] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 212.740643][ T5875] usb 4-1: USB disconnect, device number 25 [ 212.756748][ T5876] usb 2-1: USB disconnect, device number 13 [ 213.435693][ T3781] usb 6-1: USB disconnect, device number 3 [ 213.476100][ T3781] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 213.493430][ T3781] symbolserial 6-1:0.175: device disconnected [ 214.395524][ T5861] usb 3-1: USB disconnect, device number 15 [ 214.412616][ T5876] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 214.440656][ T5861] cyberjack ttyUSB1: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB1 [ 214.474098][ T5861] cyberjack 3-1:0.69: device disconnected [ 214.625125][ T5876] usb 2-1: Using ep0 maxpacket: 32 [ 214.641503][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.686943][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.858607][ T5876] usb 2-1: New USB device found, idVendor=0000, idProduct=6030, bcdDevice= 0.00 [ 214.916389][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.965852][ T5876] usb 2-1: config 0 descriptor?? [ 215.227076][ T5914] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 215.288687][ T7525] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 67108897, id = 0 [ 215.332409][ T7524] IPVS: stopping backup sync thread 7525 ... [ 215.405232][ T5914] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 215.466867][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.655546][ T5914] usb 3-1: config 0 descriptor?? [ 215.662403][ T5876] usbhid 2-1:0.0: can't add hid device: -71 [ 215.668731][ T5876] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 215.709028][ T5876] usb 2-1: USB disconnect, device number 14 [ 216.192340][ T7536] netlink: 80 bytes leftover after parsing attributes in process `syz.3.462'. [ 217.680057][ T30] audit: type=1326 audit(1747266728.081:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7530 comm="syz.3.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd45a58e969 code=0x7fc00000 [ 217.703310][ C1] vkms_vblank_simulate: vblank timer overrun [ 218.576495][ T30] audit: type=1400 audit(1747266728.091:482): avc: denied { getopt } for pid=7530 comm="syz.3.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 218.671818][ T5914] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 218.784978][ T5914] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 219.457640][ T5914] [drm:udl_init] *ERROR* Selecting channel failed [ 219.927060][ T30] audit: type=1326 audit(1747266731.541:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7530 comm="syz.3.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd45a58e969 code=0x7fc00000 [ 220.279973][ T5914] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 220.290404][ T5914] [drm] Initialized udl on minor 2 [ 220.302044][ T5914] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 220.315081][ T5914] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 220.324281][ T7347] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 220.359603][ T7347] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 220.525568][ T7557] syzkaller1: entered promiscuous mode [ 220.531493][ T7557] syzkaller1: entered allmulticast mode [ 220.689044][ T5914] usb 3-1: USB disconnect, device number 16 [ 221.477338][ T3781] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 221.841898][ T3781] usb 4-1: config 0 has an invalid interface number: 244 but max is 0 [ 221.860004][ T3781] usb 4-1: config 0 has no interface number 0 [ 221.866159][ T3781] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0700, bcdDevice= 0.05 [ 221.897923][ T3781] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.921538][ T3781] usb 4-1: config 0 descriptor?? [ 221.940624][ T3781] option 4-1:0.244: GSM modem (1-port) converter detected [ 221.970080][ T30] audit: type=1804 audit(2000000001.480:484): pid=7577 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.476" name="/newroot/90/file0" dev="tmpfs" ino=496 res=1 errno=0 [ 222.006548][ T7577] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 222.035975][ T7577] ref_ctr increment failed for inode: 0x1f0 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88807991e400 [ 222.172262][ T5875] usb 4-1: USB disconnect, device number 26 [ 222.183790][ T5875] option 4-1:0.244: device disconnected [ 224.761054][ T5861] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 225.399406][ T5861] usb 3-1: config 0 has an invalid interface number: 244 but max is 0 [ 225.426435][ T5861] usb 3-1: config 0 has no interface number 0 [ 225.434258][ T5861] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0700, bcdDevice= 0.05 [ 225.444984][ T5861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.718799][ T5861] usb 3-1: config 0 descriptor?? [ 225.736200][ T5861] option 3-1:0.244: GSM modem (1-port) converter detected [ 225.808275][ T7610] PM: Enabling pm_trace changes system date and time during resume. [ 225.808275][ T7610] PM: Correct system time has to be restored manually after resume. [ 225.935378][ T30] audit: type=1400 audit(2000000005.450:485): avc: denied { write } for pid=7612 comm="syz.0.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 226.779153][ T7615] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 226.786761][ T7615] UDF-fs: Scanning with blocksize 512 failed [ 226.794799][ T7615] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 226.802376][ T7615] UDF-fs: Scanning with blocksize 1024 failed [ 226.810118][ T7615] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 226.817747][ T7615] UDF-fs: Scanning with blocksize 2048 failed [ 226.825271][ T7615] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 226.832923][ T7615] UDF-fs: Scanning with blocksize 4096 failed [ 226.920591][ T30] audit: type=1400 audit(2000000005.470:486): avc: denied { nlmsg_write } for pid=7612 comm="syz.0.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 226.922150][ T9] usb 3-1: USB disconnect, device number 17 [ 227.092848][ T5876] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 227.296450][ T9] option 3-1:0.244: device disconnected [ 227.734615][ T7626] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 228.739586][ T5876] usb 4-1: Using ep0 maxpacket: 32 [ 228.823598][ T5876] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 228.837266][ T5876] usb 4-1: can't read configurations, error -71 [ 228.877102][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 229.065143][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 229.281100][ T9] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 229.518647][ T9] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 229.530201][ T9] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 229.589877][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 229.611551][ T7643] netlink: 'syz.5.496': attribute type 10 has an invalid length. [ 229.617972][ T9] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 229.636993][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.695033][ T9] usb 1-1: Product: syz [ 229.869448][ T7649] xt_CT: You must specify a L4 protocol and not use inversions on it [ 230.392661][ T9] usb 1-1: Manufacturer: syz [ 230.518883][ T30] audit: type=1400 audit(2000000009.760:487): avc: denied { write } for pid=7646 comm="syz.3.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 230.611120][ T5128] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 230.619568][ T9] usb 1-1: SerialNumber: syz [ 230.634756][ T9] usb 1-1: config 0 descriptor?? [ 231.160959][ T30] audit: type=1400 audit(2000000010.630:488): avc: denied { setopt } for pid=7662 comm="syz.3.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 231.719827][ T9] usb 1-1: Can not set alternate setting to 1, error: -71 [ 231.727239][ T9] synaptics_usb 1-1:0.0: probe with driver synaptics_usb failed with error -71 [ 231.744124][ T9] usb 1-1: USB disconnect, device number 19 [ 233.698307][ T7684] netlink: 16 bytes leftover after parsing attributes in process `syz.3.505'. [ 234.010463][ T7694] bridge_slave_0: left allmulticast mode [ 234.045699][ T7694] bridge_slave_0: left promiscuous mode [ 234.049739][ T30] audit: type=1400 audit(2000000013.560:489): avc: denied { create } for pid=7696 comm="syz.5.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 234.080260][ T7694] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.090917][ T30] audit: type=1400 audit(2000000013.590:490): avc: denied { nlmsg_read } for pid=7693 comm="syz.1.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 234.111314][ C0] vkms_vblank_simulate: vblank timer overrun [ 234.128628][ T7694] bridge_slave_1: left allmulticast mode [ 234.184489][ T7701] netlink: 12 bytes leftover after parsing attributes in process `syz.5.509'. [ 234.185126][ T7694] bridge_slave_1: left promiscuous mode [ 234.199924][ T7694] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.214968][ T7347] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 234.319947][ T7694] bond0: (slave bond_slave_0): Releasing backup interface [ 234.350705][ T7694] bond0: (slave bond_slave_1): Releasing backup interface [ 234.360934][ T30] audit: type=1400 audit(2000000013.880:491): avc: denied { accept } for pid=7703 comm="syz.2.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 234.408454][ T7347] usb 1-1: config 0 has an invalid interface number: 244 but max is 0 [ 234.533693][ T7694] team0: Port device team_slave_0 removed [ 234.647297][ T7347] usb 1-1: config 0 has no interface number 0 [ 234.653513][ T7347] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0700, bcdDevice= 0.05 [ 234.664133][ T7347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.689154][ T7694] team0: Port device team_slave_1 removed [ 234.760785][ T7694] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.783479][ T7694] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.254063][ T30] audit: type=1400 audit(2000000014.410:492): avc: denied { watch } for pid=7710 comm="syz.2.512" path="/96/bus/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="overlay" ino=535 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 235.298587][ C0] vkms_vblank_simulate: vblank timer overrun [ 235.310163][ T7714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.513'. [ 235.349232][ T7714] netlink: 12 bytes leftover after parsing attributes in process `syz.3.513'. [ 235.371490][ T7694] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.380319][ T7347] usb 1-1: config 0 descriptor?? [ 235.394905][ T7694] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.503177][ T7694] bond1: (slave ip6gre1): Releasing backup interface [ 235.516179][ T7694] ip6gre1: left promiscuous mode [ 235.665938][ T7714] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.675165][ T7714] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.675445][ T7347] option 1-1:0.244: GSM modem (1-port) converter detected [ 235.684068][ T7714] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.684148][ T7714] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.694230][ T7347] usb 1-1: USB disconnect, device number 20 [ 235.718455][ T7347] option 1-1:0.244: device disconnected [ 237.460356][ T7734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.516'. [ 240.079212][ T7762] ubi31: attaching mtd0 [ 240.484020][ T3535] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.550921][ T7771] netlink: 4 bytes leftover after parsing attributes in process `syz.5.529'. [ 240.579888][ T5914] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 240.643668][ T3535] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.779795][ T3535] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.822696][ T5914] usb 4-1: config 0 has an invalid interface number: 244 but max is 0 [ 240.848754][ T5914] usb 4-1: config 0 has no interface number 0 [ 240.862618][ T5914] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0700, bcdDevice= 0.05 [ 240.880517][ T3535] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.894740][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.937172][ T5914] usb 4-1: config 0 descriptor?? [ 240.960974][ T5914] option 4-1:0.244: GSM modem (1-port) converter detected [ 241.184538][ T3781] usb 4-1: USB disconnect, device number 29 [ 241.212941][ T3781] option 4-1:0.244: device disconnected [ 241.864734][ T5817] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 241.887199][ T5817] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 241.897146][ T5817] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 241.906813][ T5817] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 241.914521][ T5817] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 242.040435][ T7789] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 242.051915][ T7789] input: syz1 as /devices/virtual/input/input16 [ 242.256009][ T30] audit: type=1400 audit(2000000021.770:493): avc: denied { connect } for pid=7791 comm="syz.3.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 242.317699][ T30] audit: type=1400 audit(2000000021.840:494): avc: denied { setopt } for pid=7791 comm="syz.3.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 243.280885][ T3535] bond0 (unregistering): Released all slaves [ 243.824730][ T3535] bond1 (unregistering): Released all slaves [ 243.840652][ T7783] vlan2: entered allmulticast mode [ 243.845821][ T7783] bond0: entered allmulticast mode [ 243.851020][ T7783] bond_slave_0: entered allmulticast mode [ 243.856726][ T7783] bond_slave_1: entered allmulticast mode [ 243.863709][ T7783] bridge0: port 3(vlan2) entered blocking state [ 243.870101][ T7783] bridge0: port 3(vlan2) entered disabled state [ 243.880860][ T7783] vlan2: entered promiscuous mode [ 243.885929][ T7783] bond0: entered promiscuous mode [ 243.894556][ T7783] bond_slave_0: entered promiscuous mode [ 243.901414][ T7783] bond_slave_1: entered promiscuous mode [ 243.931932][ T7790] IPv6: NLM_F_REPLACE set, but no existing node found! [ 243.977193][ T5128] Bluetooth: hci4: command tx timeout [ 243.996973][ T3781] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 244.115509][ T7784] lo speed is unknown, defaulting to 1000 [ 244.160090][ T3781] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 244.171546][ T3781] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 244.181575][ T7807] netlink: 4 bytes leftover after parsing attributes in process `syz.5.543'. [ 244.184714][ T3781] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 244.209593][ T3781] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.231580][ T3781] usb 1-1: config 0 descriptor?? [ 244.244104][ T3781] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 244.257670][ T3535] hsr_slave_0: left promiscuous mode [ 244.273284][ T3535] hsr_slave_1: left promiscuous mode [ 244.324509][ T3535] veth1_macvtap: left promiscuous mode [ 244.339019][ T3535] veth0_macvtap: left promiscuous mode [ 244.344864][ T3535] veth1_vlan: left promiscuous mode [ 244.351549][ T3535] veth0_vlan: left promiscuous mode [ 245.808967][ T30] audit: type=1400 audit(2000000025.320:495): avc: denied { getopt } for pid=7801 comm="syz.0.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 245.859125][ T7824] netlink: 20 bytes leftover after parsing attributes in process `syz.0.541'. [ 246.580462][ T5128] Bluetooth: hci4: command tx timeout [ 246.597111][ T7824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.541'. [ 246.948165][ T5876] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 247.118465][ T5876] usb 6-1: config 0 has an invalid interface number: 244 but max is 0 [ 247.129254][ T5876] usb 6-1: config 0 has no interface number 0 [ 247.135428][ T5876] usb 6-1: New USB device found, idVendor=2c7c, idProduct=0700, bcdDevice= 0.05 [ 247.144849][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.165063][ T5876] usb 6-1: config 0 descriptor?? [ 247.179534][ T5876] option 6-1:0.244: GSM modem (1-port) converter detected [ 247.430446][ T7784] chnl_net:caif_netlink_parms(): no params data found [ 247.506847][ T5876] usb 6-1: USB disconnect, device number 4 [ 247.783752][ T5876] option 6-1:0.244: device disconnected [ 248.038640][ T7784] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.085989][ T7784] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.094506][ T7784] bridge_slave_0: entered allmulticast mode [ 248.102727][ T7784] bridge_slave_0: entered promiscuous mode [ 248.131180][ T3535] IPVS: stop unused estimator thread 0... [ 248.140368][ T7784] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.148295][ T7784] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.156185][ T7784] bridge_slave_1: entered allmulticast mode [ 248.175390][ T7784] bridge_slave_1: entered promiscuous mode [ 248.585211][ T7784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.617025][ T5128] Bluetooth: hci4: command tx timeout [ 248.665156][ T7784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.773387][ T7784] team0: Port device team_slave_0 added [ 248.810082][ T7784] team0: Port device team_slave_1 added [ 249.032681][ T7784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.057070][ T5875] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 249.058835][ T7784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.129858][ T3781] usb 1-1: USB disconnect, device number 21 [ 249.393256][ T7784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.498131][ T5875] usb 3-1: unable to get BOS descriptor or descriptor too short [ 249.508893][ T7784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.509917][ T5875] usb 3-1: not running at top speed; connect to a high speed hub [ 249.516014][ T7784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.717167][ T5875] usb 3-1: config 129 has an invalid interface number: 111 but max is 0 [ 249.729618][ T5875] usb 3-1: config 129 has no interface number 0 [ 249.796969][ T7784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.797009][ T5875] usb 3-1: config 129 interface 111 has no altsetting 0 [ 250.324720][ T5875] usb 3-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=f4.4a [ 250.362490][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.371325][ T5875] usb 3-1: Product: syz [ 250.375587][ T5875] usb 3-1: Manufacturer: syz [ 250.380242][ T5875] usb 3-1: SerialNumber: syz [ 250.534399][ T7784] hsr_slave_0: entered promiscuous mode [ 250.541337][ T7784] hsr_slave_1: entered promiscuous mode [ 250.548639][ T7784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.556216][ T7784] Cannot create hsr debugfs directory [ 250.664929][ T5875] usbsevseg 3-1:129.111: USB 7 Segment device now attached [ 250.674913][ T5875] usb 3-1: USB disconnect, device number 18 [ 250.683761][ T5875] usbsevseg 3-1:129.111: USB 7 Segment now disconnected [ 250.698839][ T5128] Bluetooth: hci4: command tx timeout [ 250.875979][ T7874] netlink: 'syz.3.560': attribute type 10 has an invalid length. [ 251.886919][ T5875] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 251.967789][ T7885] xt_CT: You must specify a L4 protocol and not use inversions on it [ 252.264469][ T7784] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 252.367462][ T5875] usb 1-1: Using ep0 maxpacket: 32 [ 252.442132][ T7784] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 252.454490][ T5875] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 252.465412][ T5875] usb 1-1: config 0 has no interface number 0 [ 252.480918][ T7784] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 252.490523][ T5875] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 252.542301][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.690036][ T7784] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 252.698302][ T3781] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 252.698422][ T5875] usb 1-1: Product: syz [ 252.791629][ T5875] usb 1-1: Manufacturer: syz [ 252.796280][ T5875] usb 1-1: SerialNumber: syz [ 252.810774][ T5875] usb 1-1: config 0 descriptor?? [ 252.824761][ T5875] smsc95xx v2.0.0 [ 252.860514][ T3781] usb 3-1: Using ep0 maxpacket: 16 [ 252.875167][ T3781] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 253.191341][ T7784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.207835][ T7784] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.235000][ T3781] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 253.247540][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.254625][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.292691][ T3781] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 253.318270][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.325411][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.335983][ T3781] usb 3-1: config 0 interface 0 has no altsetting 0 [ 253.345741][ T3781] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 253.372641][ T5875] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 253.372765][ T3781] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.393558][ T30] audit: type=1326 audit(2000000032.910:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7900 comm="syz.3.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd45a58e969 code=0x7ffc0000 [ 253.421292][ T3781] usb 3-1: Product: syz [ 253.425505][ T3781] usb 3-1: Manufacturer: syz [ 253.434919][ T3781] usb 3-1: SerialNumber: syz [ 253.441820][ T5875] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 253.445175][ T3781] usb 3-1: config 0 descriptor?? [ 253.465028][ T30] audit: type=1326 audit(2000000032.950:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7900 comm="syz.3.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd45a58e969 code=0x7ffc0000 [ 253.491005][ T30] audit: type=1326 audit(2000000032.950:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7900 comm="syz.3.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd45a58e969 code=0x7ffc0000 [ 253.534614][ T30] audit: type=1326 audit(2000000032.950:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7900 comm="syz.3.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd45a58e969 code=0x7ffc0000 [ 253.561975][ T30] audit: type=1326 audit(2000000032.950:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7900 comm="syz.3.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fd45a5907fc code=0x7ffc0000 [ 253.600679][ T30] audit: type=1326 audit(2000000032.950:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7900 comm="syz.3.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fd45a590734 code=0x7ffc0000 [ 253.625243][ T30] audit: type=1326 audit(2000000032.950:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7900 comm="syz.3.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fd45a590734 code=0x7ffc0000 [ 253.649105][ T30] audit: type=1326 audit(2000000032.950:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7900 comm="syz.3.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd45a58e969 code=0x7ffc0000 [ 253.673229][ T30] audit: type=1326 audit(2000000032.950:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7900 comm="syz.3.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd45a58e969 code=0x7ffc0000 [ 253.699224][ T30] audit: type=1326 audit(2000000032.960:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7900 comm="syz.3.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd45a58e969 code=0x7ffc0000 [ 253.716197][ T5875] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 253.736166][ T7905] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 253.749068][ T7905] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 253.758567][ T7905] FAULT_INJECTION: forcing a failure. [ 253.758567][ T7905] name failslab, interval 1, probability 0, space 0, times 0 [ 253.771546][ T7905] CPU: 0 UID: 0 PID: 7905 Comm: syz.3.567 Not tainted 6.15.0-rc6-syzkaller-00080-g1a80a098c606 #0 PREEMPT(full) [ 253.771571][ T7905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 253.771582][ T7905] Call Trace: [ 253.771587][ T7905] [ 253.771595][ T7905] dump_stack_lvl+0x16c/0x1f0 [ 253.771624][ T7905] should_fail_ex+0x512/0x640 [ 253.771647][ T7905] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 253.771668][ T7905] should_failslab+0xc2/0x120 [ 253.771687][ T7905] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 253.771704][ T7905] ? security_file_alloc+0x34/0x2b0 [ 253.771733][ T7905] security_file_alloc+0x34/0x2b0 [ 253.771755][ T7905] init_file+0x93/0x4c0 [ 253.771773][ T7905] alloc_empty_file+0x73/0x1e0 [ 253.771789][ T7905] dentry_open+0x46/0xd0 [ 253.771806][ T7905] ovl_path_open+0x198/0x1f0 [ 253.771827][ T7905] ovl_dir_read_merged+0x184/0x5d0 [ 253.771847][ T7905] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 253.771869][ T7905] ? __pfx_ovl_fill_merge+0x10/0x10 [ 253.771896][ T7905] ? kasan_save_track+0x14/0x30 [ 253.771911][ T7905] ovl_iterate+0x86c/0xe40 [ 253.771930][ T7905] ? __pfx_down_read_killable+0x10/0x10 [ 253.771947][ T7905] ? __pfx_ovl_iterate+0x10/0x10 [ 253.771965][ T7905] wrap_directory_iterator+0x9f/0xe0 [ 253.771989][ T7905] iterate_dir+0x293/0xb40 [ 253.772012][ T7905] __x64_sys_getdents+0x14d/0x2c0 [ 253.772034][ T7905] ? __pfx___x64_sys_getdents+0x10/0x10 [ 253.772054][ T7905] ? fput+0x70/0xf0 [ 253.772069][ T7905] ? __pfx_filldir+0x10/0x10 [ 253.772096][ T7905] do_syscall_64+0xcd/0x260 [ 253.772127][ T7905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.772142][ T7905] RIP: 0033:0x7fd45a58e969 [ 253.772155][ T7905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.772170][ T7905] RSP: 002b:00007fd45b34b038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 253.772185][ T7905] RAX: ffffffffffffffda RBX: 00007fd45a7b6080 RCX: 00007fd45a58e969 [ 253.772194][ T7905] RDX: 0000000020002078 RSI: 0000200000001fc0 RDI: 0000000000000006 [ 253.772203][ T7905] RBP: 00007fd45b34b090 R08: 0000000000000000 R09: 0000000000000000 [ 253.772212][ T7905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.772220][ T7905] R13: 0000000000000000 R14: 00007fd45a7b6080 R15: 00007ffc0e163768 [ 253.772239][ T7905] [ 253.782376][ T7784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.786204][ T5876] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 253.842093][ T3781] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input17 [ 253.845496][ T5875] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 253.860445][ T5172] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 253.865809][ T5875] usb 1-1: USB disconnect, device number 22 [ 254.055440][ T7893] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 254.070034][ T5172] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 254.104910][ T5172] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 254.121455][ T5172] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 254.143936][ T7784] veth0_vlan: entered promiscuous mode [ 254.155711][ T7784] veth1_vlan: entered promiscuous mode [ 254.173927][ T3781] usb 3-1: USB disconnect, device number 19 [ 254.194018][ T7784] veth0_macvtap: entered promiscuous mode [ 254.200845][ T5876] usb 6-1: Using ep0 maxpacket: 16 [ 254.210984][ T7784] veth1_macvtap: entered promiscuous mode [ 254.220937][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.243055][ T7784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.259553][ T7784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.286397][ T7784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.304869][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.315330][ T5876] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 254.316865][ T7784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.328268][ T5876] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 254.328293][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.357910][ T7784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.361291][ T5876] usb 6-1: config 0 descriptor?? [ 254.373589][ T7784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.383615][ T7784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.394230][ T7784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.406654][ T7784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.424260][ T7784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.435327][ T7784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.445900][ T7784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.486425][ T7784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.557701][ T7784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.636126][ T7784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.779417][ T7784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.461121][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.272578][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.786732][ T7784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.798874][ T7784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.809309][ T7784] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.818252][ T7784] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.827052][ T7784] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.835812][ T7784] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.139389][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.157800][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.211203][ T3434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.243087][ T3434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.422154][ T5861] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 258.661541][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 258.662487][ T30] audit: type=1400 audit(2000000038.180:532): avc: denied { append } for pid=7938 comm="syz.0.576" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 258.837178][ T5861] usb 4-1: Using ep0 maxpacket: 16 [ 258.844223][ T5861] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 258.907026][ T5861] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 259.117640][ T5876] usbhid 6-1:0.0: can't add hid device: -71 [ 259.123651][ T5876] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 259.167321][ T5876] usb 6-1: USB disconnect, device number 5 [ 259.173259][ T5861] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 259.200716][ T5861] usb 4-1: config 0 interface 0 has no altsetting 0 [ 259.408627][ T5861] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 259.524767][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.535451][ T5861] usb 4-1: Product: syz [ 259.544312][ T5861] usb 4-1: Manufacturer: syz [ 259.554474][ T5861] usb 4-1: SerialNumber: syz [ 259.566355][ T5861] usb 4-1: config 0 descriptor?? [ 259.753060][ T30] audit: type=1804 audit(2000000039.260:533): pid=7954 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.581" name="/newroot/111/file0" dev="tmpfs" ino=595 res=1 errno=0 [ 260.008439][ T5861] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input18 [ 260.079901][ T5172] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 260.665013][ T5172] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 260.689201][ T5172] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 260.708721][ T5172] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 260.730386][ T7932] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 260.747075][ T30] audit: type=1400 audit(2000000040.220:534): avc: denied { connect } for pid=7964 comm="syz.0.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 261.005289][ T9] usb 4-1: USB disconnect, device number 30 [ 261.082253][ T7977] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005f: 0000 [#1] SMP KASAN NOPTI [ 261.094352][ T7977] KASAN: null-ptr-deref in range [0x00000000000002f8-0x00000000000002ff] [ 261.103022][ T7977] CPU: 0 UID: 0 PID: 7977 Comm: syz.2.586 Not tainted 6.15.0-rc6-syzkaller-00080-g1a80a098c606 #0 PREEMPT(full) [ 261.114886][ T7977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 261.124919][ T7977] RIP: 0010:h5_recv+0x104/0x910 [ 261.129751][ T7977] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 71 d7 5c f9 48 8b 44 24 08 <80> 38 00 0f 85 ae 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00 [ 261.149346][ T7977] RSP: 0018:ffffc900038efc00 EFLAGS: 00010293 [ 261.155391][ T7977] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff885e6e8a [ 261.163361][ T7977] RDX: ffff88807bfec880 RSI: ffffffff885e6ecf RDI: 0000000000000005 [ 261.171323][ T7977] RBP: ffffc900038efd88 R08: 0000000000000005 R09: 0000000000000000 [ 261.179282][ T7977] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 261.187241][ T7977] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8c9157e0 [ 261.195202][ T7977] FS: 00007fc1f3f956c0(0000) GS:ffff8881249df000(0000) knlGS:0000000000000000 [ 261.204117][ T7977] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 261.210685][ T7977] CR2: 000020000001e000 CR3: 00000000567e3000 CR4: 00000000003526f0 [ 261.218641][ T7977] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 261.226612][ T7977] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 261.234587][ T7977] Call Trace: [ 261.237871][ T7977] [ 261.240791][ T7977] ? __pfx_h5_recv+0x10/0x10 [ 261.245374][ T7977] hci_uart_tty_receive+0x254/0x7e0 [ 261.250572][ T7977] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 261.256280][ T7977] tty_ioctl+0x580/0x1610 [ 261.260594][ T7977] ? __pfx_tty_ioctl+0x10/0x10 [ 261.265342][ T7977] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 261.272191][ T7977] ? hook_file_ioctl_common+0x145/0x410 [ 261.277726][ T7977] ? selinux_file_ioctl+0x180/0x270 [ 261.282914][ T7977] ? selinux_file_ioctl+0xb4/0x270 [ 261.288015][ T7977] ? __pfx_tty_ioctl+0x10/0x10 [ 261.292768][ T7977] __x64_sys_ioctl+0x193/0x200 [ 261.297519][ T7977] do_syscall_64+0xcd/0x260 [ 261.302017][ T7977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.307895][ T7977] RIP: 0033:0x7fc1f318e969 [ 261.312295][ T7977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.331887][ T7977] RSP: 002b:00007fc1f3f95038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 261.340282][ T7977] RAX: ffffffffffffffda RBX: 00007fc1f33b6160 RCX: 00007fc1f318e969 [ 261.348236][ T7977] RDX: 0000200000000340 RSI: 0000000000005412 RDI: 0000000000000007 [ 261.356208][ T7977] RBP: 00007fc1f3210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 261.364189][ T7977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.372156][ T7977] R13: 0000000000000000 R14: 00007fc1f33b6160 R15: 00007ffd6b674868 [ 261.380120][ T7977] [ 261.383139][ T7977] Modules linked in: [ 261.387603][ T7977] ---[ end trace 0000000000000000 ]--- [ 261.400541][ T7977] RIP: 0010:h5_recv+0x104/0x910 [ 261.406697][ T7977] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 71 d7 5c f9 48 8b 44 24 08 <80> 38 00 0f 85 ae 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00 [ 261.428629][ T7977] RSP: 0018:ffffc900038efc00 EFLAGS: 00010293 [ 261.435207][ T7977] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff885e6e8a [ 261.653231][ T7977] RDX: ffff88807bfec880 RSI: ffffffff885e6ecf RDI: 0000000000000005 [ 261.662215][ T7977] RBP: ffffc900038efd88 R08: 0000000000000005 R09: 0000000000000000 [ 261.670388][ T7977] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 261.678468][ T7977] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8c9157e0 [ 261.686605][ T7977] FS: 00007fc1f3f956c0(0000) GS:ffff888124adf000(0000) knlGS:0000000000000000 [ 261.706250][ T7977] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 261.725694][ T7977] CR2: 0000001b2ef08ff8 CR3: 00000000567e3000 CR4: 00000000003526f0 [ 261.734818][ T7977] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 261.744035][ T7977] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 261.752590][ T7977] Kernel panic - not syncing: Fatal exception [ 261.758907][ T7977] Kernel Offset: disabled [ 261.763213][ T7977] Rebooting in 86400 seconds..