last executing test programs: 28.433211932s ago: executing program 0 (id=518): socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x17, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x92a3, 0x4, 0x1, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000004, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1000, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0x9, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x6, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x1, 0x8, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x4, 0x8001, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x10002, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x3d9, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xb, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x4, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) syz_open_dev$usbfs(0x0, 0x75, 0x40082) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) clock_nanosleep(0x4ce498e3838ab451, 0x1, &(0x7f0000000a00), 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000003c0)={0x0, 0xc}, &(0x7f0000000880)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f00000008c0)={r4, 0xa6, "63bd3dfa8b36d0de54ae319fa5d6a0afe27964de7ac804fca3c5ce6cdececdcd5b6fab20f4a5bc5210b75422b710d78e27dc394fe9f9e2abd5eb826e4deff68d31074a453040e3b3994bf8df2dea9cc6a39df25ed04d3b8a35599b712f4dc6dfebb61a2ce229635147d5bb99ae0085452b91c379ec4911b618d0fd321c088f04fffd7a9e0e1dd29646bff7d8711a78232c49545202e43f141aab47e6ba8e3a4b8a3c2ec79ecc"}, &(0x7f0000000980)=0xae) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0) write$P9_RSTATu(r5, &(0x7f0000000080)={0x265, 0x2, 0xafd, {{0x54f, 0x124, 0x28, 0x1f00, {}, 0x0, 0x0, 0xc, 0x401, 0xffffffffffffff7d, '\nnodev{evo\x03\xd3\x8b\x92\x00'/27, 0x28, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18x\x99\xa9\x16c\x88\x14\xe5p\x81\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, '\b\x00', 0xac, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4@\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x009\x86Ac\x1dD\xf4\xa3\x9b\x11\x91\x93z(\x0e\x8d\x88\x9f\xc2 \xd1\x15\xac\x8e/\x18K\x9aau\x8d&w*\xb0\xf2\x04M\x8e\xf0&=\xdd\x97\xd3\xc4\'\xb3\xa52\xef\xab\x1d\x1c\xe3,\xa7\xc1\xfc#\x1a\xf4\x84\b\xe0+%P(\xb7\xc9\xbb\x859oM\x8a\xf0\xeb\x95\xfc\x0e\xcc\x99\xf7\x80\xe2'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0xfd85) 25.465839915s ago: executing program 2 (id=526): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0xe, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="0701000000f809000500feff"], &(0x7f0000000480)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) socket$inet6(0xa, 0x2, 0x0) r0 = memfd_secret(0x80000) socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38010, r2, 0x0) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x8001, 0x0) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000300)={[{0x0, 0x8000, 0xe0, 0x3, 0x0, 0xb, 0x4, 0x1, 0x0, 0x2, 0x3, 0x5, 0x7c}, {0x0, 0x0, 0xff, 0xff, 0x4, 0xfe, 0x81, 0x0, 0x20, 0x2, 0x0, 0x4}, {0x7, 0x0, 0x0, 0x11, 0x5, 0x9, 0xf8, 0x2, 0xfd, 0xfd, 0x0, 0x0, 0xe0ee}], 0x7}) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000140)={[{0x2, 0x8, 0xb7, 0x6, 0x8, 0x4, 0x0, 0x9, 0x9, 0x2, 0x1, 0x16, 0x2}, {0x400, 0xf712, 0x2, 0xfe, 0x10, 0x84, 0xc, 0x0, 0xff, 0x6, 0x3, 0x81, 0x3}, {0x9, 0xfffd, 0x83, 0x7, 0xff, 0x1, 0x40, 0x0, 0x6, 0x1, 0xff, 0x11, 0x800000000ed0}], 0x7}) read(r3, &(0x7f0000000040)=""/148, 0xffffff96) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r8, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) lseek(r7, 0xae9d, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') close(r0) 24.441496324s ago: executing program 3 (id=527): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2020) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4d0, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x530) 23.917821459s ago: executing program 2 (id=528): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000f40)=ANY=[@ANYRES16, @ANYRES32=r0, @ANYRES64=r0, @ANYBLOB="7591c0f0f05637045927b483094a005210569e232d1e71ffd00949", @ANYRES32, @ANYRES64=0x0, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x8, 0xaf, &(0x7f0000000140)=""/175, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) 23.709401056s ago: executing program 3 (id=530): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0xa}}, 0x20) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1}, 0x0) close(r8) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@mcast2, @in=@empty}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) dup3(r1, r2, 0x0) ioperm(0x284, 0x7f, 0xe3) process_mrelease(0xffffffffffffffff, 0x2) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001140)=[{{&(0x7f0000000040)={0xa, 0x4e25, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0x2, @private1={0xfc, 0x1, '\x00', 0x3}, 0x31}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="140000000000000042fb07f725392900000034000000010000000000000018"], 0x30}}], 0x2, 0x4004000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r10, @ANYBLOB="0a000600080211000001000006006600c78800001a0033"], 0x50}}, 0x0) mount$pvfs2(&(0x7f0000000140), &(0x7f0000000240)='./cgroup\x00', &(0x7f00000001c0), 0x4a, 0x0) 22.266765753s ago: executing program 2 (id=531): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0xa}}, 0x20) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1}, 0x0) close(r7) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@mcast2, @in=@empty}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) dup3(r0, r1, 0x0) ioperm(0x284, 0x7f, 0xe3) process_mrelease(0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r8, &(0x7f0000001140)=[{{&(0x7f0000000040)={0xa, 0x4e25, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0x2, @private1={0xfc, 0x1, '\x00', 0x3}, 0x31}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="140000000000000042fb07f725392900000034000000010000000000000018"], 0x30}}], 0x2, 0x4004000) 21.362709979s ago: executing program 0 (id=533): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) prlimit64(0x0, 0xc, &(0x7f00000000c0)={0x8, 0x40000000000008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x6, &(0x7f0000000200)=0x7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x40000000, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x22, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x1) getpeername$packet(r7, 0x0, 0x0) r8 = syz_open_dev$video(&(0x7f0000000440), 0x28, 0x4a000) ioctl$VIDIOC_S_SELECTION(r8, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x8000, 0x1000, 0x4, 0x6}}) r9 = openat$dir(0xffffffffffffff9c, 0x0, 0x8880, 0x0) lseek(r9, 0x100, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f071, 0x19}) 20.726829222s ago: executing program 3 (id=534): socket$kcm(0x10, 0x400000002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x8c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$dsp1(0xffffff9c, &(0x7f00000001c0), 0x30002, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fanotify_init(0x4c, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) shutdown(0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0xd4, 0x0) fspick(0xffffffffffffff9c, 0x0, 0x1) r3 = socket$nl_rdma(0x10, 0x3, 0x14) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0x4}, 0x1c) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) socket$nl_rdma(0x10, 0x3, 0x14) 20.706643184s ago: executing program 4 (id=535): syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a8008009040000010300000009055b2b36c6ce0ff102023e545c3783bdd800b6e6a2aafd6905b4d13ddd32d9fe8124df", @ANYRESDEC], 0x0) 20.597995531s ago: executing program 2 (id=536): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@fwd={0x2}]}, {0x0, [0x0, 0x2e, 0x60]}}, 0x0, 0x29, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) socket$tipc(0x1e, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44004}, 0x48000) syz_usb_connect(0x2, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e5736e404020051694bdc000000109022d00010000000009040000035883b2000905e2"], 0x0) 19.80538656s ago: executing program 1 (id=538): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0xe, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="0701000000f809000500feff"], &(0x7f0000000480)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x6) r0 = memfd_secret(0x80000) socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38010, r2, 0x0) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x8001, 0x0) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000300)={[{0x0, 0x8000, 0xe0, 0x3, 0x0, 0xb, 0x4, 0x1, 0x0, 0x2, 0x3, 0x5, 0x7c}, {0x0, 0x0, 0xff, 0xff, 0x4, 0xfe, 0x81, 0x0, 0x20, 0x2, 0x0, 0x4}, {0x7, 0x0, 0x0, 0x11, 0x5, 0x9, 0xf8, 0x2, 0xfd, 0xfd, 0x0, 0x0, 0xe0ee}], 0x7}) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000140)={[{0x2, 0x8, 0xb7, 0x6, 0x8, 0x4, 0x0, 0x9, 0x9, 0x2, 0x1, 0x16, 0x2}, {0x400, 0xf712, 0x2, 0xfe, 0x10, 0x84, 0xc, 0x0, 0xff, 0x6, 0x3, 0x81, 0x3}, {0x9, 0xfffd, 0x83, 0x7, 0xff, 0x1, 0x40, 0x0, 0x6, 0x1, 0xff, 0x11, 0x800000000ed0}], 0x7}) read(r3, &(0x7f0000000040)=""/148, 0xffffff96) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r8, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) lseek(r7, 0xae9d, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') close(r0) 19.684757672s ago: executing program 3 (id=539): prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x4) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x558}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 18.160282775s ago: executing program 1 (id=540): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2020) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4d0, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x530) 17.733352767s ago: executing program 3 (id=541): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000007500)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x6, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1400842d00000000000000000b0000000f00000700000000"], 0x18}}], 0x1, 0x68034) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) read(r0, &(0x7f0000000240)=""/104, 0x68) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x100000000, 0x0) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r4}, 0x10) msgrcv(0x0, 0x0, 0x0, 0x2, 0x1000) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r6 = syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) pidfd_getfd(r7, 0xffffffffffffffff, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='loginuid\x00') ioctl$I2C_TIMEOUT(r8, 0x702, 0x2830) unshare(0x62010c00) read$qrtrtun(r8, &(0x7f00000004c0)=""/57, 0x39) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x80440, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000001c09010400000000000000000500000704000200"], 0x18}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 17.537423503s ago: executing program 1 (id=542): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffb}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_register$IORING_REGISTER_NAPI(r3, 0x1b, &(0x7f0000000240)={0x2, 0xff}, 0x1) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x400454a4, 0xffffffffffffffff) sendmsg$inet(r0, 0x0, 0x20008051) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f00000000c0)='svcrdma_page_overrun_err\x00', 0xffffffffffffffff, 0x0, 0xfffffffff8e2ff75}, 0x18) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)) ioctl$UI_SET_FFBIT(r6, 0x4004556b, 0x17) msync(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) 17.536781669s ago: executing program 3 (id=543): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x4000, 0x0) mmap(&(0x7f00008c7000/0x3000)=nil, 0x3000, 0x0, 0x8031, r1, 0x8000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) fsopen(0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$can_j1939(0x1d, 0x2, 0x7) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000f60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1997e358660e994000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000056087d7200000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x0, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3966, 0x6, 0x8000, 0x0, r5, r6, 0xe, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r7, r3) r8 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x40400) ioctl$HIDIOCSREPORT(r8, 0x81044804, &(0x7f0000000400)={0x1, 0x1, 0x7}) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0a}}, 0x0, 0x0}, 0x0) 17.116302002s ago: executing program 0 (id=544): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_VDPA_SET_CONFIG(0xffffffffffffffff, 0x4008af74, &(0x7f0000000700)={0x5, 0x63, "b5fbc6c9b7c43db35b104339f7e37ac917f1b323967198e3580a4fc155f427ca22565fffa356a86dec0e32131511b354ae310ce860355db5d0dcf8bcf9fb47625c0044f91f8a1216a0e0724399a435776af9e06167cd647f308bd061ddcbbcc48d4b5d"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r4) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00'], 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x3d8, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) 16.498163861s ago: executing program 4 (id=545): r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0xffb) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000200)={0x1000000d}) sendmsg$key(r0, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000340)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="020300030000000000020009001800000000b7f0000000000005000600000000000a004e240000000400000000000000000000ffffbeff0600000000000000000002000100000000000000000d0000000005000500000000000a004e2f0000000520010000000000000000000000000001ffff000000000000"], 0x80}, 0x1, 0x7}, 0x0) 16.40541568s ago: executing program 4 (id=546): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0xa}}, 0x20) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1}, 0x0) close(r7) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@mcast2, @in=@empty}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) dup3(r0, r1, 0x0) ioperm(0x284, 0x7f, 0xe3) process_mrelease(0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r8, &(0x7f0000001140)=[{{&(0x7f0000000040)={0xa, 0x4e25, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0x2, @private1={0xfc, 0x1, '\x00', 0x3}, 0x31}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="140000000000000042fb07f725392900000034000000010000000000000018"], 0x30}}], 0x2, 0x4004000) 16.397637024s ago: executing program 1 (id=547): getrlimit(0x6, &(0x7f0000000000)) r0 = getpgrp(0xffffffffffffffff) prlimit64(r0, 0x6, &(0x7f0000000040)={0x6, 0x29}, &(0x7f0000000080)) move_pages(r0, 0x4, &(0x7f00000000c0)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f0000000100), &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x29, 0x7, 0x10, 0x8, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x10, 0x7, 0x4, 0x574}}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x3, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x1, [{0xf, 0x0, 0x10000}]}, @union={0xc, 0x6, 0x0, 0x5, 0x0, 0xb, [{0x4, 0x4, 0x8}, {0x7, 0x5, 0x480}, {0x0, 0x1, 0x1}, {0x1, 0x1, 0xcd8e641}, {0x0, 0x1, 0xfaca164}, {0xb, 0x2, 0x4}]}, @datasec={0xf, 0x3, 0x0, 0xf, 0x2, [{0x3, 0x1, 0x8d37}, {0x5, 0x2, 0x6}, {0x5, 0x40, 0x7fff}], '#_'}, @enum={0x7, 0x8, 0x0, 0x6, 0x4, [{0x8, 0x1}, {}, {0x1, 0x4}, {0x2, 0xbac0}, {0x3, 0x800}, {0x2, 0x80000001}, {0xa}, {0xc, 0xfffffffc}]}, @datasec={0x6, 0x1, 0x0, 0xf, 0x2, [{0x5, 0x8000, 0x15cf}], "4694"}]}, {0x0, [0x0]}}, &(0x7f00000004c0)=""/28, 0x11f, 0x1c, 0x1, 0x12eb, 0x10000, @value}, 0x28) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1a3e, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000600)={0xffffffffffffffff, 0xc4, 0x8}, 0xc) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x6}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000200)='GPL\x00', 0xf2, 0x60, &(0x7f0000000240)=""/96, 0x40f00, 0x2, '\x00', r1, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x5, 0xd, 0xaeb, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000780)=[r3, r4, r5, 0xffffffffffffffff, r6, 0x1], &(0x7f00000007c0)=[{0x1, 0x1, 0x0, 0x7}], 0x10, 0xa12e, @void, @value}, 0x94) io_setup(0x355, &(0x7f00000008c0)=0x0) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000a00), 0x10200, 0x0) r10 = eventfd(0x0) io_submit(r8, 0x4, &(0x7f0000000d80)=[&(0x7f0000000a40)={0x0, 0x0, 0x0, 0x6, 0x1, r2, &(0x7f0000000900)="2bea54f2106835470b2c75205d32d01e455d880b64819a4610995bc370aadf27dd63a8ef938e4ffdacb26bd6aed74c9c78c536a66bf9bc3271801249a43a30a963e13fa29fc3abe842c5cf8d532f6b93ef9fbbdaa3b2b20aaab6df2d4da70c7db75ff909c9f1f4493bfab9f70c5b205aa74f954e063aac0faec7834a2d930c0ca1eedc431b73b5343032eb46daf0cd941c208e3e683524946d8746b00ebd7a5be2c0f5e3ee87a5d0368ca41f69f33769e9822da55794f757e923993a4e13c9a3dcb9b06110e943ceffa26f34f808c66ba565e39682828cfd9464486227c03ce0f4d0a502bf5dff030e251b4598ab525197b00ca9f4734604", 0xf8, 0x3, 0x0, 0x2, r9}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x7, 0x4, 0xffffffffffffffff, &(0x7f0000000a80)="d857035a2fe8530de4345da88e661fd01f92b9ee6fd419b7de058daea5fc29e479c7b542daa72b1fab3815780de0934e19b044973bffec3ab70437c92bf5e79eb8e28b94ca777b0ff8ee8f6ef83bd0938955dfcc3f5dd5ccfe464542b92b2eae7aeeef88c0005381ef8100cde9e34bfe619f8dc86c4322cadb005253dae69cf46a330a98679752e309f5d18bcf2964df729e8467a22f953252a079f1060bea7daa8f1d48ac76d32ad6830d56e3cc6ccaac0969d42487eee60f1017bed4ce339379e845ad0100ff72c1791061", 0xcc, 0x2, 0x0, 0x2}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x2, 0x4, r6, &(0x7f0000000bc0)="1d5b8dc1ef50139b8f83fb0db8290ce22e7fc25ecf95e513ac4d4abfad1368384a7fcc44a233f89e16da433511efe71274abc5707d33437af9a727a3e87473b4421b27ca9d5ff3cb577af2945023b93a6c1614f3d42e95fa67b56d42139b9f8307700639ae3de9e50665147073497c43b82b944321aa5ba3809bedf6b540ccda6f78c1d92ad50a1c", 0x88, 0x3de8, 0x0, 0x3, r10}, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x7, 0x6, r4, &(0x7f0000000cc0)="e9f4ef1f68f57e5e5f4b1aa0f2c1505712565526469752072062e80b187dc40da85b719fee79a75f875079e1269de8cfe78e7729d27360b113678aebed346fad2572fbf9080fd587a02e1247947305786347eb1276bc539be611225d5f372dfd3c971d0fbcefabf942", 0x69, 0x8001}]) ioctl$FBIO_WAITFORVSYNC(r9, 0x40044620, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e40)={{r5}, &(0x7f0000000dc0), &(0x7f0000000e00)=r7}, 0x20) r11 = dup(r7) setsockopt$netlink_NETLINK_PKTINFO(r11, 0x10e, 0x3, &(0x7f0000000e80)=0x7, 0x4) r12 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r12, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000ec0)=""/194, 0xc2}, {&(0x7f0000000fc0)=""/209, 0xd1}], 0x2, &(0x7f0000001100)=""/101, 0x65}, 0x40) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r9, 0x10e, 0x8, &(0x7f00000011c0)=0x7475, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001200)) r13 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001240), 0x20000, 0x0) ioctl$VIDIOC_QUERYSTD(r13, 0x8008563f, &(0x7f0000001280)) syz_io_uring_setup(0x6eed, &(0x7f00000012c0)={0x0, 0xee54, 0x200, 0x2, 0x223}, &(0x7f0000001340), &(0x7f0000001380)=0x0) r15 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r14, &(0x7f0000001480)=@IORING_OP_READ=@pass_buffer={0x16, 0x20, 0x2000, @fd=r10, 0xfffffffffffffe00, &(0x7f00000013c0)=""/138, 0x8a, 0x3, 0x0, {0x0, r15}}) r16 = fcntl$getown(r10, 0x9) syz_open_procfs(r16, &(0x7f00000014c0)='net/icmp\x00') 15.603280268s ago: executing program 0 (id=548): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0x40, 0x13, 0x6, @multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="2001010000000034a40202a14b6ea5ab843421061dfc8c8883a81463e4346e30fa43f9f15407830e"], 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x6, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xf7, 0x1b1c, 0xc10, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0xe, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x2, 0x40, 0x1, {0x22, 0xacb}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x1, 0x3, 0xf}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x36, 0xa, 0x9}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0xf6, 0x7, 0x8, 0x10}, 0x8e, &(0x7f00000001c0)={0x5, 0xf, 0x8e, 0x5, [@generic={0x4d, 0x10, 0xb, "6c788c048eb5947609a095110910105804ae2d83eeb2c9bcb3ca31381e12dd2ba2c5be86e5ebef546dabdc69a4b6d8e4a8215c4d766533c9bcfba79c493a284650dee3b5e9d8644c12cc"}, @wireless={0xb, 0x10, 0x1, 0x4, 0xc0, 0x8, 0x8, 0x16, 0x5}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1f, 0x0, 0x2, [0xc030, 0xc000, 0xc0, 0x3fc0, 0xc000]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0xce, 0x5, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x5, 0x9, 0x16d}]}, 0x1, [{0x5e, &(0x7f0000000700)=ANY=[@ANYBLOB="5e032e18df25ec7b568950856a1448b3d90cd975144545625cec76c51fc6169cdf539802cbe55e31af54445b9c3435cad01e162c317d0dc16593e8e073b2167e82bb346743d2623a38e0b656cc99a8fd4c14fdbc40cc5a8a174321315f193cf0a42bf5ce2c"]}]}) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000140)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00042c00000007013051d119695b69424c68826628f8de3e4136c5fa5d3f3a94e782d690eecf016d8a3cf7e532cc2ff19a49931eefb232fb114139c999cc1b3f3ffdfae3588220485995aa0d7faa7caa66c734871b2da4cb9e84434f47c4ba93b25a23e36b753cfe6d172d86c7fa7347fa67a41b7a019a55dcfd7213e7f646b3e5eef115e5d5bfb7d0f67406c29c775d7a0577b5"], &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}, &(0x7f00000000c0)={0x0, 0x22, 0x2, {[@local=@item_012={0x1, 0x2, 0x4, 'E'}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfff8, 0x7, 0x1, {0x22, 0xb77}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000640)={0x0, 0xf, 0x4b, "f2243392b394fbe7c1929591cc47b7c30e641cd75362030d4943a557541291ff49dabab16af89065e6548a57b3a85bffe913d390f86c374a511fabb7521a1b0fd96186180162b561729f25"}, &(0x7f00000002c0)={0x0, 0xa, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x9e}, 0x0, &(0x7f0000000440)={0x20, 0x3, 0x1, 0x2}}) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x208000, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 15.574385718s ago: executing program 2 (id=549): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40008d1}, 0x10000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "db8f2d2b3b7596160c6981acf8805944823a7f"}) write$binfmt_aout(r1, &(0x7f0000000600)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) open$dir(0x0, 0xb0100, 0xe2) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="850000000700000054000000000000009500000000000000ef0285b73eae795b05ad261777db75186baf0b2792ad03f20472662181fe046096c5df696334e2d836395560230500ef286f21c974d520c247fd200851f90b2dd5e5f6b23909a23ee27007dae2a0fdf92809a931196df3be84781f7ecafaf33acf7e01a23999fdfb4b490f6cfe5edf2740576acb262e0de2b8e288a85dfe7c79e969b738dbc61171dfd8f5e33fbf1ee05bc5bdeb164dc2058455e3ba438c9109dd001ad93df3fc235bed50ffce5ea79cfc80f7d53ae51691362ba21394bd614ec41f636ec0e299e370f5631acfab5a6519a36f963679457241bc21ecdd1ee2b9b7ae315e5b515c71c39bf4b45f5e3f7cd3f6404fc93cf55149f0c3a7b87f86120153725784e98975e8617ffc7e8cc497f43789f5208fd84f2b34f7853d9c52848dd17c5796b3cdf2527d7929631cca05e27c28566d2c47699bc6c3f5f766c3cb8cd6a4a446936895dc5b44d224a0b3c2ca8087486aead1d034d98832ad677b28b10ed58f8de2d5ae49ba35be16888ea8da9bf33f91a6c5056af135b53e191b0dee15f0d8ab12abc04eedfeb65355400900000000000000b4717107bf564a2350564f5ef2bb8e9274d5d40af19b0afe0c774b562378fc3dbf8be42828b4cb3d6cf6930f5c4c71563e4eb0d341dc742b00802b498fef8490b52ad11085ce4a028c7af46774b391e2124fcd93ff05ff1ad0da384ff0801734c58aad0eba11e3e817c3b651bb99090189ee00012f89e6b5ca8e62a5f5ff0dc6ed83392fd551d0eedc496037c1de1b3df83509d2fa1023eb77b8a13de09e22a7f19088bcbd8f47ad5a964ab6bbb94784d31b397229ae3fb66ffe0e9913d32301c844e58f000096f5766dc1ca5e8cfee332a288090000008000000000cb88186bcd36a2ecce33a3048f6f97e14dac56e84aba0bdee2bcd21132632905c060b3aca1d4446f456e2088e7257d575e8465d7ed767e415a826d1458a32e904a1ffaf090c2884d4a56958ab143cdb95b6c39e04010b888bd95b09d50d7e6c5c084aa8cdc21890b000135d28f977ab43670412afe8361b60bf37058fdf9cdf22d8da0f2d1cc813cad61011e3060badbe396b3fb928c0500000000000000770e11c5043535696289b227c6b313e2852c52f9975cd124771bef02f431afe50e0000df13ec1a2ba3e4bc7285bae2b98955a30dcc99ae25a56898b95424c20dfe77c34000000073830d7deb2aea80972cf5a7ba0347a4a7b9ff7c1d17ce2dec87fe9922aa04cf47002515c36ac646da6783135f5de53354ea5e160d0703b3d6412e5f3ce9c4a43b9bc19edea4bf8f4f3f33b80242aaabec9a82841aaf132876d366a145ec4161e7c45c397a1aa7a1126f6bc9f55b33a00c542083c22308b7eb04e4c969084c65a15cdfdfc54b1bd9825922c55a2c08a7380b7540e5e2a584f3bc6c5497cae5d43da03cccf136a825e8bc9416c1e38f321970ecca2b481c919c87c2261b896f739ea9d4c4b86947b6ccb0b02c7000bb6572089490df75b1a2ee38c2777a6a4e1e9778a141021f07bdcb3d5e5aee5139daf619ae84a79fcf6b55ff211a58af84ffa9fb8511b3fe7413"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017"], 0x38}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) read$FUSE(r3, &(0x7f0000002840)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f0000000800)={0x2020}, 0x2020) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000fcdbdf256c00000008000300", @ANYRES32=r8], 0x2c}, 0x1, 0x0, 0x0, 0x40408c4}, 0xc000) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r6, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x7d}}}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x732}]}, 0x28}}, 0x24004004) 15.408481867s ago: executing program 4 (id=550): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0xe, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="0701000000f809000500feff"], &(0x7f0000000480)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x6) r0 = memfd_secret(0x80000) socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38010, r2, 0x0) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x8001, 0x0) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000300)={[{0x0, 0x8000, 0xe0, 0x3, 0x0, 0xb, 0x4, 0x1, 0x0, 0x2, 0x3, 0x5, 0x7c}, {0x0, 0x0, 0xff, 0xff, 0x4, 0xfe, 0x81, 0x0, 0x20, 0x2, 0x0, 0x4}, {0x7, 0x0, 0x0, 0x11, 0x5, 0x9, 0xf8, 0x2, 0xfd, 0xfd, 0x0, 0x0, 0xe0ee}], 0x7}) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000140)={[{0x2, 0x8, 0xb7, 0x6, 0x8, 0x4, 0x0, 0x9, 0x9, 0x2, 0x1, 0x16, 0x2}, {0x400, 0xf712, 0x2, 0xfe, 0x10, 0x84, 0xc, 0x0, 0xff, 0x6, 0x3, 0x81, 0x3}, {0x9, 0xfffd, 0x83, 0x7, 0xff, 0x1, 0x40, 0x0, 0x6, 0x1, 0xff, 0x11, 0x800000000ed0}], 0x7}) read(r3, &(0x7f0000000040)=""/148, 0xffffff96) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r8, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) lseek(r7, 0xae9d, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') close(r0) 15.22539872s ago: executing program 1 (id=551): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0xe, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="0701000000f809000500feff"], &(0x7f0000000480)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x6) r0 = memfd_secret(0x80000) socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38010, r2, 0x0) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000300)={[{0x0, 0x8000, 0xe0, 0x3, 0x0, 0xb, 0x4, 0x1, 0x0, 0x2, 0x3, 0x5, 0x7c}, {0x0, 0x0, 0xff, 0xff, 0x4, 0xfe, 0x81, 0x0, 0x20, 0x2, 0x0, 0x4}, {0x7, 0x0, 0x0, 0x11, 0x5, 0x9, 0xf8, 0x2, 0xfd, 0xfd, 0x0, 0x0, 0xe0ee}], 0x7}) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000140)={[{0x2, 0x8, 0xb7, 0x6, 0x8, 0x4, 0x0, 0x9, 0x9, 0x2, 0x1, 0x16, 0x2}, {0x400, 0xf712, 0x2, 0xfe, 0x10, 0x84, 0xc, 0x0, 0xff, 0x6, 0x3, 0x81, 0x3}, {0x9, 0xfffd, 0x83, 0x7, 0xff, 0x1, 0x40, 0x0, 0x6, 0x1, 0xff, 0x11, 0x800000000ed0}], 0x7}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r7, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) lseek(r6, 0xae9d, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') close(r0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) 13.832755793s ago: executing program 2 (id=552): r0 = io_uring_setup(0xf08, &(0x7f000000c480)={0x0, 0x8072, 0x400, 0x84, 0x6}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1000000ea8, 0x2) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'syztnl2\x00', 0x0}) syz_emit_ethernet(0x52, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004c00004400000000000690780a010102ac1414aa07070441b613a344140601e000000100000000e0000001ddf2c22c68e651fec59c6b2399c4e4af63000000000000", @ANYRESDEC=r4, @ANYRESHEX=r2, @ANYRESOCT=r3], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x13, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x3}) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f000000c500)=""/102400, 0x19000) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) acct(0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c0009040200000103000009040201"], 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000180), 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={'ip_vti0\x00', 0x0, 0xf888, 0x80, 0x1, 0x5, {{0x5, 0x4, 0x3, 0x1, 0x14, 0x67, 0x0, 0x46, 0x2f, 0x0, @private=0xa010101, @broadcast}}}}) 13.828334078s ago: executing program 4 (id=553): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0xa}}, 0x20) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1}, 0x0) close(r8) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@mcast2, @in=@empty}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) dup3(r1, r2, 0x0) process_mrelease(0xffffffffffffffff, 0x2) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r10, &(0x7f0000001140)=[{{&(0x7f0000000040)={0xa, 0x4e25, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0x2, @private1={0xfc, 0x1, '\x00', 0x3}, 0x31}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="140000000000000042fb07f725392900000034000000010000000000000018"], 0x30}}], 0x2, 0x4004000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r11, @ANYBLOB="0a000600080211000001000006006600c78800001a0033"], 0x50}}, 0x0) mount$pvfs2(&(0x7f0000000140), &(0x7f0000000240)='./cgroup\x00', &(0x7f00000001c0), 0x4a, 0x0) 9.45020422s ago: executing program 4 (id=554): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) prlimit64(0x0, 0xc, &(0x7f00000000c0)={0x8, 0x40000000000008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x6, &(0x7f0000000200)=0x7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x40000000, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x22, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x1) getpeername$packet(r7, 0x0, 0x0) r8 = syz_open_dev$video(&(0x7f0000000440), 0x28, 0x4a000) ioctl$VIDIOC_S_SELECTION(r8, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x8000, 0x1000, 0x4, 0x6}}) r9 = openat$dir(0xffffffffffffff9c, 0x0, 0x8880, 0x0) lseek(r9, 0x100, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f071, 0x19}) 9.143377233s ago: executing program 1 (id=555): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="020000000100000080000000", @ANYRESDEC=r1, @ANYBLOB="0000000000000000000000000000000000000000c608d3538cb7c33e9068f8968f9d66abf17d44081c3999d89dc5810977753ea8a4a88a1219e24672173732db6fea544d2cf9220250a987c33eabb4b4cd486951e56d901b628cdf6d3c474f36021b4ff2fcc7e6ca7643aac9a0e86744fe4c2211fe3ea04bfd8b0f61d9d69799d775b2b880a8ef47287498ae758e9d8abe48c17e6ac496c1d98b6caa694c4f4f3f08441e82c281b6d182966509696e4f2c58d839e0e3d0da373b18b354f0e01f8fbb7e33d5984c5b0b65945597dfb733eddd5769ca035af4da1b46e35b2d3347dcfcc47f987caf43e9471614e9361af3b137e24f3500dcf7334b8d45bf6a09aacff306000000000000004f59ee53a0a428ce8ffef15332e168244209f8e96faf1b98ecbfae3dbc1a43dc46e485ca45a5f78ca18d87f12600d6099594bae67f1b59dfa6e20084ba9a5400be7169f06d9b415d6d43611bf669d5a7afcc14830e816a2b4b6e69c123cf393a1851d26873695f4c9dd391d5f634a7307058dcb765b7db92ed9369dbc3423d76592b9a11a1597025aa91934e609574f7d461117f073c61d9d4849b837a46cf4b3e86ea318d58da17b774555e4bd89387b5969cff4b0fd635983e91d31baa7f5081f5d02453cc3752ed6fdaf33c3afbfb239c87e79e7a2ef15f16958a9c74b9519d28b177ea5fea53cf1a664a279844b965c4523bbbfa3ed0e05906e7615d242e1d", @ANYRES32=0x0, @ANYBLOB="c0c8fdaf2ef04dfc", @ANYBLOB='\x00'/28, @ANYRES64=r1, @ANYRESHEX=r0, @ANYRESHEX], 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) mmap$binder(&(0x7f0000bdf000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x2000000) r5 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) creat(&(0x7f0000000280)='./file0\x00', 0x82) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private2, 0x3ff}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x7, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000210000018200000", @ANYRES32=r3], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x3a, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xfffffffffffffe5a) syz_open_pts(r3, 0x400) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd3c0381ee1d3d60fca33f00087300fe8000000000000000000000000000aafe8000000000000000000000000000aa2f00"], 0x0) syz_open_dev$I2C(&(0x7f0000000240), 0x800000000, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) sync() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYRES16=r3], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xffffffd2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000040)={0xf0f016, 0x2}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r5, 0x0) 9.132907257s ago: executing program 0 (id=556): r0 = syz_usb_connect$hid(0x6, 0x36, &(0x7f00000005c0)=ANY=[@ANYRESDEC, @ANYBLOB="3fb962e3bdccd60753119462c37e36b9c680c4582b2c15944d9a44bd758a46667c3b789168f404598eb38da4575cd10f4f469a97b43d91b767da0c973b2cb0a87d69d079a0bd82b46e6d33651e4354ca9e105e6ac71483969621702bf992bc343366246510de8269adc1389e1378ed4b2b45191af20ca31c3160d88f3be17411c328657932a7721b23a52eea6a3b02cd2812fbd7caceabb449f80458d3eb1270", @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x0) openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) io_uring_enter(0xffffffffffffffff, 0x5ae7, 0xd869, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0xfffffffffffffcd1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r7, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2006c08020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e06018000020000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) 1.087678661s ago: executing program 0 (id=557): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x3, 0x200000, 0x0, 0x1, 0x5989}) r0 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0xb, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000000)={0xfffffffc, [[0x8000, 0x0, 0x0, 0x11, 0x6, 0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x0, 0x0, 0xc000, 0x5, 0x20008], [0x2, 0x5, 0x0, 0x0, 0xfffffffe, 0xfffffffe, 0x2, 0x80000000]], '\x00', [{}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x5f08, 0x6}, {}, {0x0, 0xfffffffd}, {}, {}, {0x4, 0xfffd}, {0x1, 0x2}, {0x0, 0x80}], '\x00', 0x4, 0x0, 0x0, 0x2}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_CMAP(r1, 0x4b71, 0x0) 0s ago: executing program 32 (id=543): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x4000, 0x0) mmap(&(0x7f00008c7000/0x3000)=nil, 0x3000, 0x0, 0x8031, r1, 0x8000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) fsopen(0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$can_j1939(0x1d, 0x2, 0x7) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000f60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1997e358660e994000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000056087d7200000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x0, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3966, 0x6, 0x8000, 0x0, r5, r6, 0xe, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r7, r3) r8 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x40400) ioctl$HIDIOCSREPORT(r8, 0x81044804, &(0x7f0000000400)={0x1, 0x1, 0x7}) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0a}}, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): [ 100.902006][ T10] usb 4-1: Manufacturer: syz [ 100.922320][ T10] usb 4-1: config 0 descriptor?? [ 100.937754][ T5903] cdc_wdm 3-1:1.0: skipping garbage [ 100.938553][ T10] em28xx 4-1:0.0: New device syz @ 12 Mbps (2040:1605, interface 0, class 0) [ 100.956836][ T10] em28xx 4-1:0.0: Device initialization failed. [ 100.963351][ T10] em28xx 4-1:0.0: Device must be connected to a high-speed USB 2.0 port. [ 101.006010][ T5903] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 101.069955][ T6299] pimreg: entered allmulticast mode [ 101.124462][ T10] usb 3-1: USB disconnect, device number 12 [ 101.156163][ T5871] usb 4-1: USB disconnect, device number 9 [ 101.683119][ T6310] autofs: Unknown parameter '0x0000000000000000' [ 101.769684][ T5903] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 101.950886][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.962262][ T5903] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 101.988415][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.007350][ T5903] usb 2-1: config 0 descriptor?? [ 102.119674][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 102.281380][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 102.290721][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 102.321930][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 102.335818][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.356370][ T10] usb 3-1: config 0 descriptor?? [ 102.369341][ T5871] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 102.388485][ T10] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input13 [ 102.421091][ T5903] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 102.434330][ T5903] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0006/input/input14 [ 102.464194][ T6324] team0 (unregistering): Port device team_slave_0 removed [ 102.475684][ T6324] team0 (unregistering): Port device team_slave_1 removed [ 102.550968][ T5871] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 102.559229][ T5871] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 102.570355][ T5873] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 102.578166][ T5871] usb 4-1: config 0 has no interface number 0 [ 102.589011][ T5871] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 102.609483][ T5871] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 102.614524][ T6329] syzkaller1: entered promiscuous mode [ 102.628016][ T6329] syzkaller1: entered allmulticast mode [ 102.628021][ T5871] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 102.628042][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.660508][ T5871] usb 4-1: config 0 descriptor?? [ 102.674726][ T5181] bcm5974 3-1:0.0: could not read from device [ 102.702442][ T10] bcm5974 3-1:0.0: could not read from device [ 102.743819][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.744721][ T5181] bcm5974 3-1:0.0: could not read from device [ 102.764882][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.777350][ T10] input: failed to attach handler mousedev to device input13, error: -5 [ 102.784201][ T5873] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 102.791821][ T5181] bcm5974 3-1:0.0: could not read from device [ 102.807993][ T10] usb 3-1: USB disconnect, device number 13 [ 102.832617][ T5873] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 102.862298][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.897062][ T5903] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 102.920314][ T5873] usb 5-1: config 0 descriptor?? [ 104.044648][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 104.051144][ T30] audit: type=1400 audit(1744522589.818:317): avc: granted { setsecparam } for pid=6351 comm="syz.0.117" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 104.483193][ T30] audit: type=1400 audit(1744522590.258:318): avc: denied { write } for pid=6334 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1707 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.552959][ T91] usb 2-1: USB disconnect, device number 9 [ 104.554881][ T30] audit: type=1400 audit(1744522590.258:319): avc: denied { add_name } for pid=6334 comm="dhcpcd-run-hook" name="resolv.conf.lapb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.637421][ T30] audit: type=1400 audit(1744522590.258:320): avc: denied { create } for pid=6334 comm="dhcpcd-run-hook" name="resolv.conf.lapb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 104.833732][ T30] audit: type=1400 audit(1744522590.258:321): avc: denied { write } for pid=6334 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb0.link" dev="tmpfs" ino=2381 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 104.862775][ T30] audit: type=1400 audit(1744522590.278:322): avc: denied { append } for pid=6334 comm="dhcpcd-run-hook" name="resolv.conf.lapb0.link" dev="tmpfs" ino=2381 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 104.911661][ T30] audit: type=1400 audit(1744522590.458:323): avc: denied { remove_name } for pid=6363 comm="rm" name="resolv.conf.lapb0.link" dev="tmpfs" ino=2381 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.947542][ T30] audit: type=1400 audit(1744522590.458:324): avc: denied { unlink } for pid=6363 comm="rm" name="resolv.conf.lapb0.link" dev="tmpfs" ino=2381 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 105.191038][ T5871] usb 4-1: USB disconnect, device number 10 [ 105.233599][ T91] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 105.290813][ T2150] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 105.391812][ T5873] usbhid 5-1:0.0: can't add hid device: -71 [ 105.411753][ T91] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.481513][ T2150] usb 3-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 105.502220][ T2150] usb 3-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 105.505408][ T5873] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 105.536127][ T2150] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.553556][ T2150] usb 3-1: config 0 descriptor?? [ 105.564093][ T6376] netlink: 48 bytes leftover after parsing attributes in process `syz.3.121'. [ 105.575653][ T91] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.595932][ T2150] usb 3-1: bad CDC descriptors [ 105.659696][ T5873] usb 5-1: USB disconnect, device number 5 [ 105.665663][ T91] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 105.775414][ T91] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 105.799634][ T91] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.816496][ T2150] usb 3-1: USB disconnect, device number 14 [ 105.849724][ T5915] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 105.960445][ T91] usb 2-1: config 0 descriptor?? [ 106.001284][ T5915] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.019689][ T5915] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 106.039753][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 106.060963][ T5915] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 106.065892][ T5873] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 106.120223][ T5915] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice=bd.94 [ 106.133651][ T5915] usb 4-1: New USB device strings: Mfr=192, Product=0, SerialNumber=0 [ 106.145004][ T5915] usb 4-1: Manufacturer: syz [ 106.162544][ T5915] usb 4-1: config 0 descriptor?? [ 106.183438][ T5915] em28xx 4-1:0.0: New device syz @ 12 Mbps (2040:1605, interface 0, class 0) [ 106.194320][ T5915] em28xx 4-1:0.0: Device initialization failed. [ 106.203157][ T5915] em28xx 4-1:0.0: Device must be connected to a high-speed USB 2.0 port. [ 106.439621][ T5873] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 106.490081][ T5873] usb 5-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 106.518479][ T5873] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 106.592649][ T5915] usb 4-1: USB disconnect, device number 11 [ 106.615350][ T5873] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 107.308523][ T5873] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 107.326120][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 107.360822][ T5873] usb 5-1: Product: syz [ 107.361037][ T6407] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.390719][ T5873] usb 5-1: Manufacturer: syz [ 107.407653][ T5873] cdc_wdm 5-1:1.0: skipping garbage [ 107.421981][ T5873] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 107.575109][ T30] audit: type=1400 audit(1744522593.298:325): avc: denied { create } for pid=6406 comm="syz.2.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 107.822251][ T5915] usb 5-1: USB disconnect, device number 6 [ 107.853663][ T30] audit: type=1400 audit(1744522593.598:326): avc: denied { read } for pid=6415 comm="syz.3.125" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 108.434246][ T91] usbhid 2-1:0.0: can't add hid device: -71 [ 108.443497][ T91] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 108.530288][ T91] usb 2-1: USB disconnect, device number 10 [ 109.614184][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 109.617316][ T30] audit: type=1400 audit(1744522595.388:330): avc: denied { create } for pid=6433 comm="syz.3.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 109.871790][ T5903] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 109.884922][ T6442] Zero length message leads to an empty skb [ 110.469364][ T5903] usb 5-1: Using ep0 maxpacket: 16 [ 110.503175][ T30] audit: type=1400 audit(1744522595.958:331): avc: denied { setopt } for pid=6438 comm="syz.0.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 110.801733][ T30] audit: type=1400 audit(1744522595.978:332): avc: denied { bind } for pid=6438 comm="syz.0.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 110.985258][ T5903] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 111.024421][ T30] audit: type=1400 audit(1744522595.988:333): avc: denied { name_bind } for pid=6438 comm="syz.0.133" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 111.047605][ T5903] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 111.047930][ T30] audit: type=1400 audit(1744522595.998:334): avc: denied { node_bind } for pid=6438 comm="syz.0.133" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 111.058406][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.179990][ T6453] autofs: Unknown parameter '0x0000000000000000' [ 111.182479][ T30] audit: type=1400 audit(1744522596.018:335): avc: denied { append } for pid=6438 comm="syz.0.133" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 111.370221][ T5903] usb 5-1: config 0 descriptor?? [ 111.394716][ T5903] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input16 [ 111.609419][ T5874] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 111.641291][ T2150] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 111.731288][ T5181] bcm5974 5-1:0.0: could not read from device [ 111.761920][ T5903] bcm5974 5-1:0.0: could not read from device [ 111.802891][ T5181] bcm5974 5-1:0.0: could not read from device [ 111.823226][ T2150] usb 4-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 111.840629][ T2150] usb 4-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 111.869769][ T2150] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.894241][ T5874] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 111.894364][ T2150] usb 4-1: config 0 descriptor?? [ 111.912362][ T5903] input: failed to attach handler mousedev to device input16, error: -5 [ 111.925824][ T5874] usb 2-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 111.940673][ T2150] usb 4-1: bad CDC descriptors [ 112.303275][ T2150] usb 4-1: USB disconnect, device number 12 [ 112.321799][ T30] audit: type=1400 audit(1744522597.888:336): avc: granted { setsecparam } for pid=6466 comm="syz.0.140" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 112.329586][ T5903] usb 5-1: USB disconnect, device number 7 [ 112.346589][ T5874] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 112.353079][ T5181] bcm5974 5-1:0.0: could not read from device [ 112.469461][ T5874] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 112.525443][ T5181] bcm5974 5-1:0.0: could not read from device [ 112.596128][ T5874] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 112.741363][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 112.762272][ T5874] usb 2-1: Product: syz [ 112.766451][ T5874] usb 2-1: Manufacturer: syz [ 112.788296][ T5874] cdc_wdm 2-1:1.0: skipping garbage [ 112.801550][ T5874] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 112.968508][ T30] audit: type=1400 audit(1744522598.738:337): avc: denied { accept } for pid=6473 comm="syz.4.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 113.003228][ T5874] usb 2-1: USB disconnect, device number 11 [ 113.306870][ T6480] process 'syz.3.143' launched './file0' with NULL argv: empty string added [ 113.400975][ T30] audit: type=1400 audit(1744522599.088:338): avc: denied { execute_no_trans } for pid=6478 comm="syz.3.143" path="/31/file0" dev="tmpfs" ino=191 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 113.486597][ T30] audit: type=1400 audit(1744522599.208:339): avc: denied { append } for pid=6482 comm="syz.2.144" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 113.499102][ T6486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.145'. [ 113.522039][ T6487] ubi31: attaching mtd0 [ 113.535660][ T6487] ubi31: scanning is finished [ 113.573182][ T6487] ubi31: empty MTD device detected [ 114.116591][ T6487] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 114.141800][ T6487] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 114.269565][ T6487] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 114.344649][ T6487] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 114.395161][ T6487] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 114.429448][ T6487] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 114.439534][ T6487] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1842652408 [ 114.472717][ T6487] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 114.503037][ T6508] ubi31: background thread "ubi_bgt31d" started, PID 6508 [ 114.631154][ T6518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.155'. [ 115.334421][ T6517] Process accounting resumed [ 115.382822][ T6528] FAULT_INJECTION: forcing a failure. [ 115.382822][ T6528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.464731][ T6528] CPU: 0 UID: 0 PID: 6528 Comm: syz.4.157 Not tainted 6.15.0-rc1-syzkaller-00308-gecd5d67ad602 #0 PREEMPT(full) [ 115.464754][ T6528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 115.464763][ T6528] Call Trace: [ 115.464768][ T6528] [ 115.464774][ T6528] dump_stack_lvl+0x16c/0x1f0 [ 115.464801][ T6528] should_fail_ex+0x512/0x640 [ 115.464821][ T6528] _copy_from_iter+0x2a4/0x15b0 [ 115.464843][ T6528] ? __alloc_skb+0x200/0x380 [ 115.464862][ T6528] ? __pfx__copy_from_iter+0x10/0x10 [ 115.464882][ T6528] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 115.464913][ T6528] netlink_sendmsg+0x829/0xdd0 [ 115.464939][ T6528] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.464969][ T6528] ____sys_sendmsg+0xa95/0xc70 [ 115.465001][ T6528] ? copy_msghdr_from_user+0x10a/0x160 [ 115.465020][ T6528] ? __pfx_____sys_sendmsg+0x10/0x10 [ 115.465054][ T6528] ___sys_sendmsg+0x134/0x1d0 [ 115.465075][ T6528] ? __pfx____sys_sendmsg+0x10/0x10 [ 115.465123][ T6528] __sys_sendmsg+0x16d/0x220 [ 115.465143][ T6528] ? __pfx___sys_sendmsg+0x10/0x10 [ 115.465170][ T6528] ? rcu_is_watching+0x12/0xc0 [ 115.465197][ T6528] do_syscall_64+0xcd/0x260 [ 115.465222][ T6528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.465239][ T6528] RIP: 0033:0x7f0c3a78d169 [ 115.465252][ T6528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.465267][ T6528] RSP: 002b:00007f0c3b551038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.465283][ T6528] RAX: ffffffffffffffda RBX: 00007f0c3a9a5fa0 RCX: 00007f0c3a78d169 [ 115.465293][ T6528] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 115.465302][ T6528] RBP: 00007f0c3b551090 R08: 0000000000000000 R09: 0000000000000000 [ 115.465312][ T6528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.465321][ T6528] R13: 0000000000000000 R14: 00007f0c3a9a5fa0 R15: 00007ffe4c786988 [ 115.465342][ T6528] [ 115.719433][ T5915] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 115.872138][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.883175][ T5915] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 115.892223][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.912265][ T5915] usb 3-1: config 0 descriptor?? [ 115.919769][ T2150] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 115.970818][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 116.091056][ T2150] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.109191][ T2150] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 116.143808][ T10] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 116.162805][ T2150] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.171690][ T10] usb 2-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 116.185963][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 116.185973][ T30] audit: type=1400 audit(1744522601.958:342): avc: denied { ioctl } for pid=6537 comm="syz.3.161" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64b5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 116.226223][ T2150] usb 5-1: config 0 descriptor?? [ 116.231240][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 116.249561][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 116.264651][ T2150] pwc: Askey VC010 type 2 USB webcam detected. [ 116.275102][ T10] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 116.304387][ T10] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 116.318033][ T10] usb 2-1: Product: syz [ 116.330848][ T10] usb 2-1: Manufacturer: syz [ 116.338038][ T5915] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 116.471706][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 116.957219][ T2150] pwc: recv_control_msg error -32 req 02 val 2b00 [ 116.965765][ T5915] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0007/input/input17 [ 116.979082][ T10] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 116.987970][ T2150] pwc: recv_control_msg error -32 req 02 val 2700 [ 117.008424][ T2150] pwc: recv_control_msg error -32 req 02 val 2c00 [ 117.016181][ T10] usb 2-1: USB disconnect, device number 12 [ 117.032101][ T2150] pwc: recv_control_msg error -32 req 04 val 1000 [ 117.159204][ T5915] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 117.217817][ T2150] pwc: recv_control_msg error -32 req 04 val 1300 [ 117.225755][ T2150] pwc: recv_control_msg error -32 req 04 val 1400 [ 117.252450][ T2150] pwc: recv_control_msg error -32 req 02 val 2000 [ 117.266663][ T2150] pwc: recv_control_msg error -32 req 02 val 2100 [ 117.487196][ T2150] pwc: recv_control_msg error -32 req 02 val 2500 [ 117.767017][ T30] audit: type=1400 audit(1744522603.538:343): avc: denied { write } for pid=6553 comm="syz.0.165" name="sg0" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 117.858435][ T30] audit: type=1400 audit(1744522603.538:344): avc: denied { open } for pid=6553 comm="syz.0.165" path="/dev/sg0" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 117.886500][ T2150] pwc: recv_control_msg error -71 req 02 val 2600 [ 117.899913][ T2150] pwc: recv_control_msg error -71 req 02 val 2900 [ 118.039302][ T5137] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 118.048264][ T5137] Bluetooth: hci1: Injecting HCI hardware error event [ 118.055649][ T5137] Bluetooth: hci1: hardware error 0x00 [ 118.069805][ T2150] pwc: recv_control_msg error -71 req 02 val 2800 [ 118.088505][ T2150] pwc: recv_control_msg error -71 req 04 val 1100 [ 118.099486][ T2150] pwc: recv_control_msg error -71 req 04 val 1200 [ 118.110899][ T2150] pwc: Registered as video103. [ 118.117349][ T2150] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input18 [ 118.144766][ T2150] usb 5-1: USB disconnect, device number 8 [ 118.381424][ T5915] usb 3-1: USB disconnect, device number 15 [ 119.248664][ T5831] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 119.727124][ T30] audit: type=1400 audit(1744522605.488:345): avc: denied { read write } for pid=6577 comm="syz.4.172" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 120.104038][ T5137] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 120.110653][ T5137] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 120.118953][ T5137] Bluetooth: hci2: Injecting HCI hardware error event [ 120.127738][ T5137] Bluetooth: hci2: hardware error 0x00 [ 120.182098][ T5915] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 120.189867][ T2150] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 120.421828][ T30] audit: type=1400 audit(1744522605.488:346): avc: denied { open } for pid=6577 comm="syz.4.172" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 120.445028][ C1] vkms_vblank_simulate: vblank timer overrun [ 120.449597][ T2150] usb 2-1: Using ep0 maxpacket: 16 [ 120.456287][ T5915] usb 5-1: Using ep0 maxpacket: 8 [ 120.484184][ T5915] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 120.495981][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.508460][ T2150] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 120.521333][ T5925] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 120.526122][ T30] audit: type=1400 audit(1744522605.488:347): avc: denied { ioctl } for pid=6577 comm="syz.4.172" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 120.537693][ T2150] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 120.564369][ T5915] usb 5-1: config 0 descriptor?? [ 120.577188][ T2150] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.583302][ T6591] netlink: 36 bytes leftover after parsing attributes in process `syz.3.175'. [ 120.607499][ T2150] usb 2-1: config 0 descriptor?? [ 120.638919][ T2150] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input19 [ 120.681355][ T5925] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 120.681377][ T5925] usb 3-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 120.681394][ T5925] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 120.681429][ T5925] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 120.683156][ T5925] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 120.683180][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 120.683197][ T5925] usb 3-1: Product: syz [ 120.683230][ T5925] usb 3-1: Manufacturer: syz [ 120.688474][ T5925] cdc_wdm 3-1:1.0: skipping garbage [ 120.688488][ T5925] cdc_wdm 3-1:1.0: skipping garbage [ 120.688506][ T5925] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 120.796461][ T5915] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 120.876236][ T5181] bcm5974 2-1:0.0: could not read from device [ 120.909568][ T2150] bcm5974 2-1:0.0: could not read from device [ 120.916959][ T5181] bcm5974 2-1:0.0: could not read from device [ 120.926274][ T5925] usb 3-1: USB disconnect, device number 16 [ 121.007428][ T2150] input: failed to attach handler mousedev to device input19, error: -5 [ 121.030204][ T5181] bcm5974 2-1:0.0: could not read from device [ 121.044953][ T2150] usb 2-1: USB disconnect, device number 13 [ 121.135538][ T30] audit: type=1400 audit(1744522606.908:348): avc: denied { create } for pid=6594 comm="syz.0.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 121.161952][ T30] audit: type=1400 audit(1744522606.938:349): avc: denied { connect } for pid=6594 comm="syz.0.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 121.377867][ T30] audit: type=1400 audit(1744522607.148:350): avc: denied { create } for pid=6597 comm="syz.3.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 121.558842][ T6581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.575786][ T6599] xt_CT: You must specify a L4 protocol and not use inversions on it [ 121.606453][ T6581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.611767][ T6599] netlink: 'syz.3.179': attribute type 10 has an invalid length. [ 121.753700][ T6601] netlink: 28 bytes leftover after parsing attributes in process `syz.4.172'. [ 121.812281][ T6605] fuse: Bad value for 'fd' [ 122.090602][ T2150] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 122.098437][ T5831] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 122.205763][ T5915] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 122.259693][ T5137] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 122.317112][ T6615] overlay: Unknown parameter 'permit_directio' [ 122.323625][ T30] audit: type=1400 audit(1744522608.078:351): avc: denied { mount } for pid=6609 comm="syz.1.183" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 122.680296][ T5915] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 122.691005][ T5915] asix 5-1:0.0: probe with driver asix failed with error -71 [ 122.754720][ T5915] usb 5-1: USB disconnect, device number 9 [ 122.925386][ T2150] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.941666][ T2150] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 122.963476][ T2150] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.982805][ T30] audit: type=1400 audit(1744522608.698:352): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 123.083709][ T2150] usb 3-1: config 0 descriptor?? [ 123.117632][ T6620] macvlan2: entered promiscuous mode [ 123.128848][ T6620] macvlan2: entered allmulticast mode [ 123.171990][ T6620] batadv0: entered promiscuous mode [ 123.180645][ T6620] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 123.190071][ T30] audit: type=1400 audit(1744522608.948:353): avc: denied { write } for pid=6626 comm="syz.0.188" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 123.214779][ T6620] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 123.562335][ T2150] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 123.601330][ T2150] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0008/input/input20 [ 123.754437][ T30] audit: type=1400 audit(1744522609.488:354): avc: granted { setsecparam } for pid=6637 comm="syz.4.191" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 123.773384][ C1] vkms_vblank_simulate: vblank timer overrun [ 123.859533][ T91] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 124.034873][ T2150] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 124.042576][ T91] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 124.068103][ T91] usb 4-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 124.099973][ T91] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 124.203032][ T91] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 124.258017][ T91] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 124.280148][ T91] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 124.288145][ T91] usb 4-1: Product: syz [ 124.299019][ T91] usb 4-1: Manufacturer: syz [ 124.338384][ T91] cdc_wdm 4-1:1.0: skipping garbage [ 124.537478][ T91] cdc_wdm 4-1:1.0: skipping garbage [ 124.547817][ T91] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 124.559677][ T2150] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 124.573882][ T91] usb 4-1: USB disconnect, device number 13 [ 124.707294][ T6646] fuse: Bad value for 'fd' [ 124.739449][ T2150] usb 5-1: Using ep0 maxpacket: 16 [ 124.754273][ T2150] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 124.772826][ T2150] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 124.796718][ T2150] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.859533][ T2150] usb 5-1: config 0 descriptor?? [ 124.874556][ T2150] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input21 [ 124.962723][ T30] audit: type=1400 audit(1744522610.728:355): avc: denied { create } for pid=6651 comm="syz.1.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 124.986441][ T30] audit: type=1400 audit(1744522610.758:356): avc: denied { write } for pid=6651 comm="syz.1.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 125.044894][ T30] audit: type=1400 audit(1744522610.818:357): avc: denied { write } for pid=6651 comm="syz.1.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 125.065453][ T30] audit: type=1400 audit(1744522610.818:358): avc: denied { nlmsg_read } for pid=6651 comm="syz.1.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 125.068618][ T6651] Process accounting resumed [ 125.156144][ T6654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.194'. [ 125.259862][ T5181] bcm5974 5-1:0.0: could not read from device [ 125.310311][ T5181] bcm5974 5-1:0.0: could not read from device [ 125.563477][ T2150] bcm5974 5-1:0.0: could not read from device [ 125.588617][ T2150] input: failed to attach handler mousedev to device input21, error: -5 [ 125.600594][ T5915] usb 3-1: USB disconnect, device number 17 [ 125.615850][ T2150] usb 5-1: USB disconnect, device number 10 [ 125.621535][ T5181] bcm5974 5-1:0.0: could not read from device [ 126.380139][ T6670] netlink: 48 bytes leftover after parsing attributes in process `syz.3.201'. [ 126.611099][ T30] audit: type=1400 audit(1744522612.288:359): avc: denied { bind } for pid=6656 comm="syz.1.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 126.631486][ T6680] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=6680 comm=syz.4.203 [ 126.729583][ T30] audit: type=1400 audit(1744522612.288:360): avc: denied { name_bind } for pid=6656 comm="syz.1.197" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 126.792021][ T2150] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 126.924435][ T30] audit: type=1400 audit(1744522612.288:361): avc: denied { node_bind } for pid=6656 comm="syz.1.197" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 126.959129][ T6684] fuse: Bad value for 'fd' [ 127.010556][ T30] audit: type=1400 audit(1744522612.298:362): avc: denied { listen } for pid=6656 comm="syz.1.197" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 127.051207][ T2150] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.057977][ T30] audit: type=1400 audit(1744522612.298:363): avc: denied { connect } for pid=6656 comm="syz.1.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 127.062259][ T2150] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 127.099550][ T2150] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 127.109488][ T2150] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 127.129991][ T2150] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice=bd.94 [ 127.139050][ T2150] usb 4-1: New USB device strings: Mfr=192, Product=0, SerialNumber=0 [ 127.147358][ T30] audit: type=1400 audit(1744522612.298:364): avc: denied { name_connect } for pid=6656 comm="syz.1.197" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 127.181506][ T2150] usb 4-1: Manufacturer: syz [ 127.217140][ T2150] usb 4-1: config 0 descriptor?? [ 127.264486][ T2150] em28xx 4-1:0.0: New device syz @ 12 Mbps (2040:1605, interface 0, class 0) [ 127.273718][ T2150] em28xx 4-1:0.0: Device initialization failed. [ 127.280035][ T2150] em28xx 4-1:0.0: Device must be connected to a high-speed USB 2.0 port. [ 127.385552][ T30] audit: type=1400 audit(1744522613.158:365): avc: denied { create } for pid=6689 comm="syz.2.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 127.595904][ T2150] usb 4-1: USB disconnect, device number 14 [ 127.959342][ T91] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 128.088428][ T6700] input: syz0 as /devices/virtual/input/input22 [ 128.110711][ T91] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 128.120634][ T91] usb 5-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 128.156684][ T91] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 128.180836][ T91] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 128.202101][ T91] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 128.212591][ T91] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 128.277712][ T91] usb 5-1: Product: syz [ 128.390741][ T30] audit: type=1400 audit(1744522614.148:366): avc: granted { setsecparam } for pid=6703 comm="syz.0.211" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 128.549334][ T2150] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 128.576770][ T91] usb 5-1: Manufacturer: syz [ 128.713428][ T2150] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.823509][ T2150] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 128.839387][ T2150] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.868152][ T2150] usb 2-1: config 0 descriptor?? [ 128.882992][ T91] cdc_wdm 5-1:1.0: skipping garbage [ 128.899777][ T91] cdc_wdm 5-1:1.0: skipping garbage [ 128.941069][ T91] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 128.969582][ T5137] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 128.978036][ T5137] Bluetooth: hci3: Injecting HCI hardware error event [ 128.985189][ T5925] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 128.993290][ T5137] Bluetooth: hci3: hardware error 0x00 [ 129.101921][ T91] usb 5-1: USB disconnect, device number 11 [ 129.200342][ T5925] usb 1-1: Using ep0 maxpacket: 16 [ 129.220981][ T5925] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 129.234750][ T5925] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 129.278105][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.290793][ T2150] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 129.309906][ T2150] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0009/input/input23 [ 129.329536][ T5925] usb 1-1: config 0 descriptor?? [ 129.341743][ T5925] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input24 [ 129.432306][ T2150] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 129.698209][ T5925] bcm5974 1-1:0.0: could not read from device [ 129.727009][ T5181] bcm5974 1-1:0.0: could not read from device [ 129.888051][ T5925] input: failed to attach handler mousedev to device input24, error: -5 [ 129.923097][ T5181] bcm5974 1-1:0.0: could not read from device [ 129.942121][ T5925] usb 1-1: USB disconnect, device number 4 [ 130.219575][ T30] audit: type=1400 audit(1744522615.968:367): avc: denied { create } for pid=6723 comm="syz.4.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 130.559704][ T30] audit: type=1400 audit(1744522616.338:368): avc: denied { search } for pid=5178 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.649463][ T5925] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 130.810928][ T5925] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 130.829381][ T5925] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 130.885987][ T5925] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 130.923139][ T5925] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 130.952227][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 130.962799][ T5925] usb 5-1: SerialNumber: syz [ 131.050434][ T5137] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 131.151535][ T80] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 131.639541][ T5137] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 131.647926][ T5137] Bluetooth: hci4: Injecting HCI hardware error event [ 131.702426][ T5137] Bluetooth: hci4: hardware error 0x00 [ 132.174740][ T5925] usbtest 5-1:1.0: Linux user mode ISO test driver [ 132.182184][ T5925] usbtest 5-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 132.187505][ T5874] IPVS: starting estimator thread 0... [ 132.194418][ T5925] usb 5-1: USB disconnect, device number 12 [ 132.228720][ T2150] usb 2-1: USB disconnect, device number 14 [ 132.319422][ T80] usb 1-1: Using ep0 maxpacket: 8 [ 132.328347][ T6739] IPVS: using max 41 ests per chain, 98400 per kthread [ 132.338903][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.345248][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.361196][ T80] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 132.371313][ T80] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 132.383057][ T80] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 132.393901][ T80] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.406390][ T80] usb 1-1: Product: syz [ 132.410982][ T80] usb 1-1: Manufacturer: syz [ 132.416642][ T80] usb 1-1: SerialNumber: syz [ 132.423836][ T80] usb 1-1: config 0 descriptor?? [ 132.649396][ T91] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 132.972547][ T91] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.983536][ T91] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.993454][ T91] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 133.008095][ T6751] netlink: 48 bytes leftover after parsing attributes in process `syz.4.223'. [ 133.033241][ T91] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 133.051913][ T91] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.085871][ T91] usb 3-1: config 0 descriptor?? [ 133.132350][ T2150] usb 1-1: USB disconnect, device number 5 [ 133.289553][ T5874] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 133.347430][ T6755] netlink: 80 bytes leftover after parsing attributes in process `syz.1.224'. [ 134.332542][ T5137] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 134.383809][ T30] audit: type=1400 audit(1744522620.158:369): avc: denied { create } for pid=6762 comm="syz.1.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 134.468642][ T30] audit: type=1400 audit(1744522620.238:370): avc: denied { write } for pid=6762 comm="syz.1.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 134.703273][ T5871] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 134.836077][ T6771] tmpfs: Unknown parameter '' [ 135.205643][ T6770] 9pnet_fd: Insufficient options for proto=fd [ 135.216153][ T5137] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 135.233189][ T5137] Bluetooth: hci0: Injecting HCI hardware error event [ 135.241516][ T5831] Bluetooth: hci0: hardware error 0x00 [ 135.357538][ T91] usbhid 3-1:0.0: can't add hid device: -71 [ 135.366827][ T91] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 135.388475][ T91] usb 3-1: USB disconnect, device number 18 [ 135.408827][ T5871] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 135.419337][ T5871] usb 1-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 135.483049][ T5871] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 135.492401][ T5871] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 135.507113][ T5871] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 135.516612][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 135.549368][ T5871] usb 1-1: Product: syz [ 135.553733][ T5871] usb 1-1: Manufacturer: syz [ 135.575082][ T5871] cdc_wdm 1-1:1.0: skipping garbage [ 135.584292][ T5871] cdc_wdm 1-1:1.0: skipping garbage [ 135.613555][ T5871] cdc_wdm 1-1:1.0: skipping garbage [ 135.618866][ T5871] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 135.782511][ T80] usb 1-1: USB disconnect, device number 6 [ 135.949823][ T91] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 136.119607][ T91] usb 4-1: Using ep0 maxpacket: 16 [ 136.129436][ T91] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 136.142624][ T91] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 136.156592][ T91] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.175949][ T91] usb 4-1: config 0 descriptor?? [ 136.196750][ T91] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input25 [ 136.199804][ T5871] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 136.369324][ T5874] usb 5-1: device descriptor read/64, error -71 [ 136.375732][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.398525][ T5871] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 136.421551][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.464726][ T5871] usb 2-1: config 0 descriptor?? [ 136.471174][ T5181] bcm5974 4-1:0.0: could not read from device [ 136.484057][ T91] bcm5974 4-1:0.0: could not read from device [ 136.523921][ T5181] bcm5974 4-1:0.0: could not read from device [ 136.539118][ T91] input: failed to attach handler mousedev to device input25, error: -5 [ 136.568958][ T5181] bcm5974 4-1:0.0: could not read from device [ 136.573042][ T91] usb 4-1: USB disconnect, device number 15 [ 136.611471][ T5181] bcm5974 4-1:0.0: could not read from device [ 136.619325][ T5874] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 136.887453][ T5871] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 136.900952][ T5874] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 136.905357][ T5871] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000A/input/input26 [ 136.911044][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.932579][ T5874] usb 5-1: config 0 descriptor?? [ 136.945476][ T5874] cp210x 5-1:0.0: cp210x converter detected [ 136.998932][ T6798] tmpfs: Unknown parameter '' [ 137.188872][ T6798] 9pnet_fd: Insufficient options for proto=fd [ 137.300207][ T5831] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 137.505953][ T5871] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 137.651652][ T6787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.233'. [ 137.681884][ T30] audit: type=1400 audit(1744522623.448:371): avc: denied { create } for pid=6801 comm="syz.3.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 137.791364][ T30] audit: type=1400 audit(1744522623.448:372): avc: denied { connect } for pid=6801 comm="syz.3.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 137.830032][ T5874] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 137.837707][ T5874] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 137.863000][ T30] audit: type=1400 audit(1744522623.608:373): avc: denied { read } for pid=6806 comm="syz.2.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 137.914982][ T5874] usb 5-1: cp210x converter now attached to ttyUSB0 [ 137.950783][ T5874] usb 5-1: USB disconnect, device number 14 [ 137.956737][ T30] audit: type=1400 audit(1744522623.708:374): avc: denied { watch watch_reads } for pid=6806 comm="syz.2.237" path="/41" dev="tmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 138.000525][ T5874] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 138.040551][ T5874] cp210x 5-1:0.0: device disconnected [ 138.071958][ T30] audit: type=1400 audit(1744522623.848:375): avc: denied { listen } for pid=6806 comm="syz.2.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 138.158600][ T30] audit: type=1400 audit(1744522623.868:376): avc: denied { connect } for pid=6806 comm="syz.2.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 138.278308][ T6814] IPv6: NLM_F_CREATE should be specified when creating new route [ 138.286264][ T5903] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 138.480632][ T5903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.024710][ T30] audit: type=1400 audit(1744522624.328:377): avc: denied { append } for pid=6813 comm="syz.0.239" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 139.048307][ T5903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.064329][ T5903] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 139.088890][ T5903] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 139.122916][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.197428][ T5903] usb 4-1: config 0 descriptor?? [ 139.215701][ T5874] usb 2-1: USB disconnect, device number 15 [ 139.265164][ T30] audit: type=1400 audit(1744522625.038:378): avc: denied { remount } for pid=6819 comm="syz.0.241" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 139.472531][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 139.472541][ T30] audit: type=1400 audit(1744522625.248:382): avc: denied { write } for pid=6825 comm="syz.4.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 140.261109][ T2150] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 140.337995][ T30] audit: type=1400 audit(1744522626.108:383): avc: denied { write } for pid=6837 comm="syz.1.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 140.338023][ T6839] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=14362 sclass=netlink_xfrm_socket pid=6839 comm=syz.1.246 [ 140.452397][ T2150] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 140.461259][ T2150] usb 1-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 140.465706][ T30] audit: type=1400 audit(1744522626.198:384): avc: denied { name_connect } for pid=6837 comm="syz.1.246" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 140.522071][ T2150] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 140.546526][ T2150] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 140.579103][ T2150] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 140.591295][ T2150] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 140.607264][ T2150] usb 1-1: Product: syz [ 140.620892][ T2150] usb 1-1: Manufacturer: syz [ 140.673458][ T2150] cdc_wdm 1-1:1.0: skipping garbage [ 140.681882][ T2150] cdc_wdm 1-1:1.0: skipping garbage [ 140.697479][ T2150] cdc_wdm 1-1:1.0: skipping garbage [ 140.710582][ T2150] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 140.835741][ T30] audit: type=1400 audit(1744522626.608:385): avc: denied { create } for pid=6844 comm="syz.1.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 140.871965][ T2150] usb 1-1: USB disconnect, device number 7 [ 140.924016][ T30] audit: type=1400 audit(1744522626.608:386): avc: denied { read } for pid=6844 comm="syz.1.248" path="socket:[10973]" dev="sockfs" ino=10973 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 140.947499][ C0] vkms_vblank_simulate: vblank timer overrun [ 141.329376][ T5903] usbhid 4-1:0.0: can't add hid device: -71 [ 141.335363][ T5903] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 141.402811][ T5903] usb 4-1: USB disconnect, device number 16 [ 141.569794][ T2150] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 141.760852][ T2150] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.849624][ T2150] usb 5-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 141.919438][ T5903] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 141.938184][ T2150] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.975347][ T2150] usb 5-1: config 0 descriptor?? [ 142.015831][ T2150] rndis_host 5-1:0.0: probe with driver rndis_host failed with error -22 [ 142.149548][ T5903] usb 4-1: Using ep0 maxpacket: 32 [ 142.160045][ T5903] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 142.168281][ T5903] usb 4-1: config 0 has no interface number 0 [ 142.179408][ T5903] usb 4-1: config 0 interface 184 has no altsetting 0 [ 142.321604][ T6868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.255'. [ 142.358822][ T6868] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.367577][ T6868] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.376395][ T6868] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.385092][ T6868] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.394106][ T6868] vxlan0: entered promiscuous mode [ 142.595574][ T2150] usb 5-1: USB disconnect, device number 15 [ 142.603242][ T30] audit: type=1400 audit(1744522628.378:387): avc: denied { setopt } for pid=6857 comm="syz.1.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 142.944274][ T6871] IPv6: NLM_F_CREATE should be specified when creating new route [ 142.963703][ T6871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.256'. [ 142.988763][ T5903] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 143.008047][ T6871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.256'. [ 143.021158][ T6873] fuse: Bad value for 'rootmode' [ 143.036136][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.269470][ T5903] usb 4-1: Product: syz [ 143.275150][ T5903] usb 4-1: Manufacturer: syz [ 143.275209][ T5903] usb 4-1: SerialNumber: syz [ 143.353001][ T5903] usb 4-1: config 0 descriptor?? [ 143.381807][ T5903] smsc75xx v1.0.0 [ 143.904537][ T6889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.914235][ T6889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.982807][ T5903] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 144.225244][ T2150] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 144.233370][ T30] audit: type=1400 audit(1744522629.828:388): avc: granted { setsecparam } for pid=6888 comm="syz.1.262" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 144.299302][ T5903] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 144.474091][ T2150] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.489750][ T30] audit: type=1400 audit(1744522630.218:389): avc: denied { mount } for pid=6892 comm="syz.4.263" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 144.549735][ T2150] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.623486][ T2150] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 144.641887][ T5903] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 144.673407][ T2150] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 144.694485][ T5903] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 144.709968][ T2150] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.759805][ T2150] usb 3-1: config 0 descriptor?? [ 145.099496][ T30] audit: type=1400 audit(1744522630.798:390): avc: denied { connect } for pid=6897 comm="syz.1.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 145.403045][ T5871] usb 4-1: USB disconnect, device number 17 [ 146.047257][ T30] audit: type=1400 audit(1744522630.798:391): avc: denied { ioctl } for pid=6897 comm="syz.1.265" path="socket:[11717]" dev="sockfs" ino=11717 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 146.078138][ T30] audit: type=1400 audit(1744522631.398:392): avc: denied { accept } for pid=6901 comm="syz.3.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 146.097347][ C0] vkms_vblank_simulate: vblank timer overrun [ 146.686290][ T30] audit: type=1400 audit(1744522632.458:393): avc: denied { setopt } for pid=6910 comm="syz.1.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 146.945275][ T30] audit: type=1400 audit(1744522632.708:394): avc: denied { map } for pid=6913 comm="syz.0.269" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 146.988756][ T30] audit: type=1400 audit(1744522632.708:395): avc: denied { execute } for pid=6913 comm="syz.0.269" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 147.008342][ T6914] netlink: 'syz.0.269': attribute type 3 has an invalid length. [ 147.024342][ T30] audit: type=1400 audit(1744522632.778:396): avc: denied { write } for pid=6913 comm="syz.0.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 147.852572][ T2150] usbhid 3-1:0.0: can't add hid device: -71 [ 147.882462][ T2150] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 148.041215][ T2150] usb 3-1: USB disconnect, device number 19 [ 148.089370][ T5925] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 148.263289][ T6929] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 148.277677][ T5925] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.315621][ T5925] usb 1-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 148.336374][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.544405][ T5925] usb 1-1: config 0 descriptor?? [ 148.568485][ T5925] rndis_host 1-1:0.0: probe with driver rndis_host failed with error -22 [ 148.829605][ T5925] usb 1-1: USB disconnect, device number 8 [ 148.932579][ T6943] xt_hashlimit: size too large, truncated to 1048576 [ 149.456765][ T30] audit: type=1400 audit(1744522635.228:397): avc: denied { read write } for pid=6947 comm="syz.4.277" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 149.504898][ T30] audit: type=1400 audit(1744522635.228:398): avc: denied { open } for pid=6947 comm="syz.4.277" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 149.762570][ T30] audit: type=1400 audit(1744522635.228:399): avc: denied { ioctl } for pid=6947 comm="syz.4.277" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 150.132787][ T30] audit: type=1326 audit(1744522635.418:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6947 comm="syz.4.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3a78d169 code=0x7ffc0000 [ 150.156390][ T30] audit: type=1326 audit(1744522635.418:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6947 comm="syz.4.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f0c3a78d169 code=0x7ffc0000 [ 150.185407][ T30] audit: type=1326 audit(1744522635.418:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6947 comm="syz.4.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3a78d169 code=0x7ffc0000 [ 150.233115][ T6961] Invalid ELF header magic: != ELF [ 150.248300][ T30] audit: type=1326 audit(1744522635.428:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6947 comm="syz.4.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f0c3a78d169 code=0x7ffc0000 [ 150.284159][ T30] audit: type=1326 audit(1744522635.428:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6947 comm="syz.4.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3a78d169 code=0x7ffc0000 [ 150.627307][ T30] audit: type=1326 audit(1744522635.428:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6947 comm="syz.4.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0c3a78d169 code=0x7ffc0000 [ 150.650849][ T30] audit: type=1326 audit(1744522635.428:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6947 comm="syz.4.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3a78d169 code=0x7ffc0000 [ 150.761022][ T80] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 151.078814][ T30] audit: type=1326 audit(1744522635.428:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6947 comm="syz.4.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f0c3a78d169 code=0x7ffc0000 [ 151.310723][ T80] usb 3-1: config 0 has an invalid interface number: 107 but max is 0 [ 151.636112][ T6980] FAULT_INJECTION: forcing a failure. [ 151.636112][ T6980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.649405][ T6980] CPU: 0 UID: 0 PID: 6980 Comm: syz.4.285 Not tainted 6.15.0-rc1-syzkaller-00308-gecd5d67ad602 #0 PREEMPT(full) [ 151.649427][ T6980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 151.649437][ T6980] Call Trace: [ 151.649442][ T6980] [ 151.649448][ T6980] dump_stack_lvl+0x16c/0x1f0 [ 151.649474][ T6980] should_fail_ex+0x512/0x640 [ 151.649495][ T6980] strncpy_from_user+0x3b/0x2e0 [ 151.649512][ T6980] getname_flags.part.0+0x8b/0x540 [ 151.649529][ T6980] getname_flags+0x93/0xf0 [ 151.649545][ T6980] do_sys_openat2+0xb8/0x1d0 [ 151.649558][ T6980] ? __pfx_do_sys_openat2+0x10/0x10 [ 151.649571][ T6980] ? __fget_files+0x20e/0x3c0 [ 151.649580][ T6980] ? sysvec_kvm_asyncpf_interrupt+0x40/0xc0 [ 151.649596][ T6980] __x64_sys_creat+0xcc/0x120 [ 151.649610][ T6980] ? __pfx___x64_sys_creat+0x10/0x10 [ 151.649622][ T6980] ? __pfx_ksys_write+0x10/0x10 [ 151.649633][ T6980] ? rcu_is_watching+0x12/0xc0 [ 151.649645][ T6980] ? do_syscall_64+0x91/0x260 [ 151.649660][ T6980] do_syscall_64+0xcd/0x260 [ 151.649675][ T6980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.649685][ T6980] RIP: 0033:0x7f0c3a78d169 [ 151.649694][ T6980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.649704][ T6980] RSP: 002b:00007f0c3b50f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 151.649714][ T6980] RAX: ffffffffffffffda RBX: 00007f0c3a9a6160 RCX: 00007f0c3a78d169 [ 151.649721][ T6980] RDX: 0000000000000000 RSI: 0000000000000072 RDI: 0000200000000280 [ 151.649727][ T6980] RBP: 00007f0c3b50f090 R08: 0000000000000000 R09: 0000000000000000 [ 151.649732][ T6980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.649738][ T6980] R13: 0000000000000001 R14: 00007f0c3a9a6160 R15: 00007ffe4c786988 [ 151.649750][ T6980] [ 152.070980][ T80] usb 3-1: config 0 has no interface number 0 [ 152.099321][ T80] usb 3-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 12336, setting to 64 [ 152.177421][ T80] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 152.200876][ T80] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 152.209169][ T80] usb 3-1: Product: syz [ 152.215269][ T80] usb 3-1: Manufacturer: syz [ 152.223079][ T80] usb 3-1: SerialNumber: syz [ 152.230155][ T80] usb 3-1: config 0 descriptor?? [ 152.240622][ T80] keyspan 3-1:0.107: Keyspan 4 port adapter converter detected [ 152.248591][ T80] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 81 [ 152.259477][ T80] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 1 [ 152.271772][ T80] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 152.283746][ T80] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 2 [ 152.360947][ T80] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 152.383229][ T80] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 4 [ 152.408095][ T80] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 152.429851][ T80] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 6 [ 152.566635][ T80] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 153.163671][ T6990] netlink: 'syz.0.288': attribute type 10 has an invalid length. [ 153.259935][ T6990] netlink: 20 bytes leftover after parsing attributes in process `syz.0.288'. [ 153.367791][ T6990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.400523][ T6990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.425290][ T6990] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 153.747094][ T7000] xt_hashlimit: size too large, truncated to 1048576 [ 154.143497][ T5871] usb 3-1: USB disconnect, device number 20 [ 154.463275][ T5871] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 154.575227][ T5871] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 154.627089][ T5871] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 154.771081][ T5871] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 154.792416][ T5871] keyspan 3-1:0.107: device disconnected [ 154.855024][ T7012] xt_hashlimit: size too large, truncated to 1048576 [ 155.339331][ T80] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 155.490047][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 155.490080][ T30] audit: type=1400 audit(1744522641.258:424): avc: denied { read } for pid=7011 comm="syz.2.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 155.823364][ T7013] orangefs_mount: mount request failed with -4 [ 156.029408][ T80] usb 1-1: Using ep0 maxpacket: 8 [ 156.036298][ T80] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 156.052368][ T80] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.068460][ T80] usb 1-1: config 0 descriptor?? [ 156.209395][ T91] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 156.401262][ T80] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 157.504981][ T91] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.515307][ T91] usb 2-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 157.529573][ T91] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.619639][ T30] audit: type=1400 audit(1744522643.358:425): avc: denied { ioctl } for pid=7029 comm="syz.4.299" path="socket:[11981]" dev="sockfs" ino=11981 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 157.647581][ T91] usb 2-1: config 0 descriptor?? [ 157.655419][ T91] rndis_host 2-1:0.0: probe with driver rndis_host failed with error -22 [ 157.715030][ T7006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.725452][ T7006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.881024][ T5925] usb 2-1: USB disconnect, device number 16 [ 157.934937][ T7041] team0 (unregistering): Port device team_slave_0 removed [ 157.947052][ T7041] team0 (unregistering): Port device team_slave_1 removed [ 157.973878][ T7044] syzkaller1: entered promiscuous mode [ 157.979821][ T7044] syzkaller1: entered allmulticast mode [ 158.145673][ T80] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 158.166963][ T80] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 158.177680][ T80] asix 1-1:0.0: probe with driver asix failed with error -71 [ 158.196652][ T80] usb 1-1: USB disconnect, device number 9 [ 158.480734][ T7053] xt_hashlimit: size too large, truncated to 1048576 [ 159.065266][ T30] audit: type=1400 audit(1744522644.828:426): avc: granted { setsecparam } for pid=7056 comm="syz.1.305" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 159.474890][ T7061] ipt_REJECT: TCP_RESET invalid for non-tcp [ 159.527383][ T7065] dummy0: entered promiscuous mode [ 159.553500][ T7065] macsec1: entered promiscuous mode [ 159.577888][ T7065] macsec1: entered allmulticast mode [ 159.619430][ T7065] dummy0: entered allmulticast mode [ 159.767539][ T7065] dummy0: left allmulticast mode [ 159.773966][ T7065] dummy0: left promiscuous mode [ 159.782610][ T7071] netlink: 68 bytes leftover after parsing attributes in process `syz.1.310'. [ 159.791496][ T7071] netlink: 24 bytes leftover after parsing attributes in process `syz.1.310'. [ 159.800374][ T7071] netlink: 24 bytes leftover after parsing attributes in process `syz.1.310'. [ 159.809215][ T7071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.310'. [ 161.818045][ T7090] overlayfs: missing 'lowerdir' [ 162.261229][ T7092] xt_hashlimit: size too large, truncated to 1048576 [ 162.621829][ T7091] lo speed is unknown, defaulting to 1000 [ 162.686357][ T7091] lo speed is unknown, defaulting to 1000 [ 162.693622][ T7091] lo speed is unknown, defaulting to 1000 [ 162.972394][ T7091] infiniband sz1: set active [ 162.977126][ T7091] infiniband sz1: added lo [ 163.033391][ T7091] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 163.035346][ T7091] infiniband sz1: Couldn't open port 1 [ 163.058222][ T7091] RDS/IB: sz1: added [ 163.062362][ T7091] smc: adding ib device sz1 with port count 1 [ 163.068529][ T7091] smc: ib device sz1 port 1 has pnetid [ 163.075537][ T7091] lo speed is unknown, defaulting to 1000 [ 163.156994][ T7091] lo speed is unknown, defaulting to 1000 [ 163.238487][ T7091] lo speed is unknown, defaulting to 1000 [ 163.319297][ T7091] lo speed is unknown, defaulting to 1000 [ 163.399029][ T7091] lo speed is unknown, defaulting to 1000 [ 163.544179][ T5903] lo speed is unknown, defaulting to 1000 [ 163.606441][ T5903] lo speed is unknown, defaulting to 1000 [ 163.651413][ T7097] netlink: 12 bytes leftover after parsing attributes in process `syz.2.317'. [ 163.671011][ T7098] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 163.699313][ T7097] netlink: 12 bytes leftover after parsing attributes in process `syz.2.317'. [ 163.889250][ T7105] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 164.050486][ T7109] Invalid logical block size (117440512) [ 164.829956][ T30] audit: type=1400 audit(1744522649.818:427): avc: denied { append } for pid=7102 comm="syz.3.318" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 164.965491][ T7112] FAULT_INJECTION: forcing a failure. [ 164.965491][ T7112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.988339][ T7112] CPU: 0 UID: 0 PID: 7112 Comm: syz.1.321 Not tainted 6.15.0-rc1-syzkaller-00308-gecd5d67ad602 #0 PREEMPT(full) [ 164.988362][ T7112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 164.988372][ T7112] Call Trace: [ 164.988378][ T7112] [ 164.988384][ T7112] dump_stack_lvl+0x16c/0x1f0 [ 164.988410][ T7112] should_fail_ex+0x512/0x640 [ 164.988432][ T7112] _copy_to_user+0x32/0xd0 [ 164.988453][ T7112] simple_read_from_buffer+0xcb/0x170 [ 164.988479][ T7112] proc_fail_nth_read+0x197/0x270 [ 164.988502][ T7112] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 164.988528][ T7112] ? rw_verify_area+0xcf/0x680 [ 164.988550][ T7112] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 164.988574][ T7112] vfs_read+0x1de/0xc70 [ 164.988602][ T7112] ? __pfx___mutex_lock+0x10/0x10 [ 164.988624][ T7112] ? __pfx_vfs_read+0x10/0x10 [ 164.988656][ T7112] ? __fget_files+0x20e/0x3c0 [ 164.988679][ T7112] ksys_read+0x12a/0x240 [ 164.988693][ T7112] ? __pfx_ksys_read+0x10/0x10 [ 164.988706][ T7112] ? rcu_is_watching+0x12/0xc0 [ 164.988734][ T7112] do_syscall_64+0xcd/0x260 [ 164.988758][ T7112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.988774][ T7112] RIP: 0033:0x7f5db0b8bb7c [ 164.988787][ T7112] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 164.988803][ T7112] RSP: 002b:00007f5dae9f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 164.988818][ T7112] RAX: ffffffffffffffda RBX: 00007f5db0da5fa0 RCX: 00007f5db0b8bb7c [ 164.988828][ T7112] RDX: 000000000000000f RSI: 00007f5dae9f60a0 RDI: 0000000000000006 [ 164.988838][ T7112] RBP: 00007f5dae9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 164.988847][ T7112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 164.988856][ T7112] R13: 0000000000000000 R14: 00007f5db0da5fa0 R15: 00007ffd0645e068 [ 164.988878][ T7112] [ 165.499445][ T91] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 165.885560][ T30] audit: type=1400 audit(1744522651.658:428): avc: denied { create } for pid=7125 comm="syz.0.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 166.079212][ T7129] netlink: 48 bytes leftover after parsing attributes in process `syz.1.325'. [ 166.204596][ T91] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.215000][ T91] usb 3-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 166.239046][ T91] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.264700][ T91] usb 3-1: config 0 descriptor?? [ 166.343719][ T91] rndis_host 3-1:0.0: probe with driver rndis_host failed with error -22 [ 167.209394][ T5903] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 167.217409][ T91] usb 3-1: USB disconnect, device number 21 [ 168.363525][ T7142] Illegal XDP return value 4294967294 on prog (id 48) dev N/A, expect packet loss! [ 168.409727][ T5874] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 168.699309][ T5874] usb 1-1: device descriptor read/64, error -71 [ 169.049602][ T5874] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 169.229319][ T30] audit: type=1400 audit(1744522654.998:429): avc: denied { accept } for pid=7158 comm="syz.4.336" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 169.413958][ T30] audit: type=1400 audit(1744522654.998:430): avc: denied { write } for pid=7158 comm="syz.4.336" laddr=::ffff:127.0.0.1 lport=20003 faddr=::ffff:127.0.0.1 fport=60514 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 169.540478][ T30] audit: type=1400 audit(1744522654.998:431): avc: denied { read } for pid=7158 comm="syz.4.336" laddr=127.0.0.1 lport=60514 faddr=127.0.0.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 169.577278][ T30] audit: type=1400 audit(1744522655.058:432): avc: denied { sqpoll } for pid=7158 comm="syz.4.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 170.049539][ T5874] usb usb1-port1: attempt power cycle [ 170.290435][ T7178] xt_hashlimit: size too large, truncated to 1048576 [ 171.054266][ T5874] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 171.136768][ T5874] usb 1-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=16.e3 [ 171.149059][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.254840][ T5874] usb 1-1: Product: syz [ 171.259014][ T5874] usb 1-1: Manufacturer: syz [ 171.265213][ T5874] usb 1-1: SerialNumber: syz [ 171.277767][ T5874] usb 1-1: config 0 descriptor?? [ 171.286956][ T7194] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 171.773783][ T5874] comedi comedi0: Wrong number of endpoints [ 171.780612][ T5874] dt9812 1-1:0.0: driver 'dt9812' failed to auto-configure device. [ 171.810250][ T7196] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 172.074496][ T30] audit: type=1400 audit(1744522657.848:433): avc: granted { setsecparam } for pid=7201 comm="syz.4.347" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 172.361912][ T7209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.346'. [ 172.416738][ T7174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.444076][ T7174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.749469][ T7198] orangefs_mount: mount request failed with -4 [ 174.680003][ T30] audit: type=1400 audit(1744522660.438:434): avc: denied { name_connect } for pid=7219 comm="syz.4.351" dest=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 174.758568][ T7227] xt_hashlimit: size too large, truncated to 1048576 [ 175.122805][ T5925] usb 1-1: USB disconnect, device number 12 [ 176.729431][ T91] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 176.800768][ T7245] netlink: 'syz.1.357': attribute type 4 has an invalid length. [ 176.917895][ T30] audit: type=1400 audit(1744522662.678:435): avc: granted { setsecparam } for pid=7249 comm="syz.2.359" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 177.001471][ T7253] netlink: 'syz.1.357': attribute type 4 has an invalid length. [ 177.039387][ T91] usb 5-1: Using ep0 maxpacket: 8 [ 177.159001][ T91] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 177.190023][ T7245] syz.1.357 (7245) used greatest stack depth: 21064 bytes left [ 177.201401][ T91] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 177.292338][ T91] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 177.335799][ T91] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 177.369317][ T91] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 177.433415][ T91] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 177.478451][ T91] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.522053][ T91] usb 5-1: config 0 descriptor?? [ 177.547362][ T7237] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 177.689374][ T5925] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 177.799364][ T7264] netlink: 'syz.0.363': attribute type 10 has an invalid length. [ 177.891966][ T7264] netlink: 40 bytes leftover after parsing attributes in process `syz.0.363'. [ 177.919691][ T7264] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 177.941942][ T5925] usb 2-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=16.e3 [ 177.951194][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.963177][ T7264] sd 0:0:1:0: device reset [ 177.963389][ T30] audit: type=1400 audit(1744522663.738:436): avc: denied { read } for pid=7263 comm="syz.0.363" name="sg0" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 177.967759][ T5925] usb 2-1: Product: syz [ 178.041244][ T5925] usb 2-1: Manufacturer: syz [ 178.079410][ T5925] usb 2-1: SerialNumber: syz [ 178.097635][ T5925] usb 2-1: config 0 descriptor?? [ 178.106726][ T5925] comedi comedi0: Wrong number of endpoints [ 178.112670][ T5925] dt9812 2-1:0.0: driver 'dt9812' failed to auto-configure device. [ 178.152458][ T7237] lo speed is unknown, defaulting to 1000 [ 178.174681][ T30] audit: type=1400 audit(1744522663.738:437): avc: denied { ioctl } for pid=7263 comm="syz.0.363" path="/dev/sg0" dev="devtmpfs" ino=744 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 178.356866][ T30] audit: type=1400 audit(1744522663.958:438): avc: denied { write } for pid=7267 comm="syz.0.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 178.639724][ T7259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.798586][ T7259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.903795][ T7273] xt_hashlimit: size too large, truncated to 1048576 [ 179.719478][ T5831] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 179.974617][ T5873] usb 5-1: USB disconnect, device number 16 [ 180.851459][ T7289] overlay: Unknown parameter 'permit_directio' [ 181.342560][ T5925] usb 2-1: USB disconnect, device number 18 [ 181.573731][ T30] audit: type=1400 audit(1744522667.338:439): avc: denied { nlmsg_write } for pid=7292 comm="syz.0.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 182.095153][ T7305] netlink: 'syz.1.370': attribute type 10 has an invalid length. [ 182.118663][ T7305] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 182.194782][ T7294] netdevsim netdevsim0 netdevsim0: Unsupported IPsec algorithm [ 182.329658][ T30] audit: type=1400 audit(1744522668.068:440): avc: denied { ioctl } for pid=7304 comm="syz.3.371" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 183.099801][ T30] audit: type=1400 audit(1744522668.488:441): avc: denied { ioctl } for pid=7310 comm="syz.4.373" path="socket:[13470]" dev="sockfs" ino=13470 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 183.196714][ T7309] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 183.528194][ T7322] overlay: Unknown parameter 'permit_directio' [ 183.949148][ T7328] netlink: 12 bytes leftover after parsing attributes in process `syz.4.377'. [ 183.960822][ T7328] netlink: 12 bytes leftover after parsing attributes in process `syz.4.377'. [ 184.029787][ T7329] xt_hashlimit: size too large, truncated to 1048576 [ 184.306206][ T7331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.375'. [ 184.769982][ T7332] orangefs_mount: mount request failed with -4 [ 185.447682][ T7346] xt_hashlimit: size too large, truncated to 1048576 [ 185.980427][ T7350] xt_hashlimit: size too large, truncated to 1048576 [ 186.485563][ T7345] orangefs_mount: mount request failed with -4 [ 186.681569][ T7351] orangefs_mount: mount request failed with -4 [ 187.561962][ T30] audit: type=1400 audit(1744522673.108:442): avc: denied { read } for pid=7359 comm="syz.0.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 187.977913][ T5915] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 188.447908][ T30] audit: type=1400 audit(1744522674.028:443): avc: denied { setopt } for pid=7367 comm="syz.0.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 188.475677][ T7371] fuse: Bad value for 'rootmode' [ 188.481326][ T5915] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.514900][ T5915] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 188.851052][ T5915] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 188.866174][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.884451][ T5915] usb 5-1: Product: syz [ 188.894534][ T5915] usb 5-1: Manufacturer: syz [ 188.904652][ T5915] usb 5-1: SerialNumber: syz [ 189.127519][ T7358] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 189.319439][ T5925] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 189.489456][ T5925] usb 2-1: Using ep0 maxpacket: 32 [ 189.501132][ T5925] usb 2-1: config 99 has an invalid interface number: 229 but max is 0 [ 189.509318][ T91] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 189.511450][ T5925] usb 2-1: config 99 has no interface number 0 [ 189.528561][ T5925] usb 2-1: config 99 interface 229 has no altsetting 0 [ 189.543196][ T5925] usb 2-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=95.77 [ 189.564391][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.579644][ T5925] usb 2-1: Product: syz [ 189.583877][ T5925] usb 2-1: Manufacturer: syz [ 189.588522][ T5925] usb 2-1: SerialNumber: syz [ 189.660788][ T91] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 189.686214][ T91] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.705163][ T91] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.726161][ T91] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 189.743163][ T7358] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 189.751167][ T91] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 189.762570][ T91] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 189.770704][ T91] usb 3-1: Manufacturer: syz [ 189.789996][ T91] usb 3-1: config 0 descriptor?? [ 189.873292][ T7385] mkiss: ax0: crc mode is auto. [ 189.953516][ T5915] cdc_mbim 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 189.962553][ T5915] cdc_mbim 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 189.976627][ T5925] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 189.999303][ T5915] cdc_mbim 5-1:1.0: setting rx_max = 2048 [ 190.005461][ T5925] gspca_sn9c2028: read1 error -71 [ 190.011929][ T5925] gspca_sn9c2028: read1 error -71 [ 190.017739][ T5925] gspca_sn9c2028: read1 error -71 [ 190.033759][ T5925] sn9c2028 2-1:99.229: probe with driver sn9c2028 failed with error -71 [ 190.093945][ T5925] usb 2-1: USB disconnect, device number 19 [ 190.162895][ T5915] cdc_mbim 5-1:1.0: setting tx_max = 184 [ 190.171745][ T5915] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 190.209585][ T5915] wwan wwan0: port wwan0mbim0 attached [ 190.215625][ T91] appleir 0003:05AC:8243.000B: unknown main item tag 0x0 [ 190.263384][ T91] appleir 0003:05AC:8243.000B: No inputs registered, leaving [ 190.286236][ T5915] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 42:42:42:42:42:42 [ 190.393115][ T5915] usb 5-1: USB disconnect, device number 17 [ 190.412235][ T5915] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 190.973657][ T91] appleir 0003:05AC:8243.000B: hiddev1,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 191.001136][ T5915] wwan wwan0: port wwan0mbim0 disconnected [ 192.451692][ T5873] usb 3-1: USB disconnect, device number 22 [ 194.053836][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.064075][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.804006][ T7425] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 194.823058][ T7425] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 194.889563][ T5915] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 195.041383][ T7445] netlink: 'syz.0.405': attribute type 11 has an invalid length. [ 195.078069][ T5915] usb 2-1: Using ep0 maxpacket: 16 [ 195.095652][ T5915] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 195.125944][ T5915] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 195.142270][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.174282][ T5915] usb 2-1: config 0 descriptor?? [ 195.234522][ T5915] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input27 [ 195.301340][ T7447] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 195.315461][ T7447] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.323930][ T7447] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.362946][ T7447] lo speed is unknown, defaulting to 1000 [ 195.485967][ T5181] bcm5974 2-1:0.0: could not read from device [ 195.511588][ T5181] bcm5974 2-1:0.0: could not read from device [ 196.407731][ T7465] xt_hashlimit: size too large, truncated to 1048576 [ 196.614155][ T7466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.409'. [ 196.816059][ T5915] bcm5974 2-1:0.0: could not read from device [ 196.864247][ T5915] input: failed to attach handler mousedev to device input27, error: -5 [ 196.908663][ T7466] orangefs_mount: mount request failed with -4 [ 196.931292][ T5181] bcm5974 2-1:0.0: could not read from device [ 196.948443][ T5915] usb 2-1: USB disconnect, device number 20 [ 197.044854][ T30] audit: type=1400 audit(1744522682.818:444): avc: denied { bind } for pid=7471 comm="syz.4.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 197.076593][ T5181] bcm5974 2-1:0.0: could not read from device [ 197.103332][ T7474] fuse: Bad value for 'rootmode' [ 197.122841][ T30] audit: type=1400 audit(1744522682.818:445): avc: denied { listen } for pid=7471 comm="syz.4.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 197.143825][ T30] audit: type=1400 audit(1744522682.818:446): avc: denied { read } for pid=7471 comm="syz.4.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 197.669308][ T91] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 198.113084][ T91] usb 3-1: Using ep0 maxpacket: 16 [ 198.177113][ T7493] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 198.492797][ T91] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 198.659219][ T91] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.801445][ T91] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 198.884153][ T91] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 198.931195][ T30] audit: type=1400 audit(1744522684.708:447): avc: denied { mount } for pid=7498 comm="syz.1.418" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 199.009281][ T91] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.017284][ T91] usb 3-1: Product: syz [ 199.027109][ T30] audit: type=1400 audit(1744522684.758:448): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 199.679394][ T91] usb 3-1: Manufacturer: syz [ 199.707609][ T91] usb 3-1: SerialNumber: syz [ 199.733817][ T7505] sctp: failed to load transform for md5: -2 [ 199.819285][ T30] audit: type=1400 audit(1744522684.788:449): avc: denied { name_bind } for pid=7503 comm="syz.3.420" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 199.958757][ T30] audit: type=1400 audit(1744522684.958:450): avc: denied { listen } for pid=7500 comm="syz.0.419" lport=50322 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 200.078898][ T30] audit: type=1400 audit(1744522685.018:451): avc: denied { accept } for pid=7500 comm="syz.0.419" lport=50322 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 200.207306][ T30] audit: type=1400 audit(1744522685.648:452): avc: denied { append } for pid=7510 comm="syz.3.422" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 200.426514][ T91] usb 3-1: 0:2 : does not exist [ 200.431872][ T5873] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 200.559217][ T7527] sctp: [Deprecated]: syz.3.424 (pid 7527) Use of int in maxseg socket option. [ 200.559217][ T7527] Use struct sctp_assoc_value instead [ 200.658930][ T30] audit: type=1400 audit(1744522686.348:453): avc: denied { map } for pid=7524 comm="syz.3.424" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 200.960943][ T5873] usb 2-1: Using ep0 maxpacket: 32 [ 200.984126][ T5873] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 201.008366][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.043948][ T5873] usb 2-1: Product: syz [ 201.057328][ T5873] usb 2-1: Manufacturer: syz [ 201.073845][ T5873] usb 2-1: SerialNumber: syz [ 201.106042][ T5873] usb 2-1: config 0 descriptor?? [ 201.138181][ T5873] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 201.260302][ T7533] fuse: Bad value for 'rootmode' [ 201.519466][ T80] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 201.739925][ T5873] gspca_stk1135: reg_w 0x2 err -110 [ 202.207412][ T91] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 202.215927][ T5873] gspca_stk1135: serial bus timeout: status=0x00 [ 202.231056][ T80] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 202.249192][ T5873] gspca_stk1135: Sensor write failed [ 202.264684][ T5873] gspca_stk1135: serial bus timeout: status=0x00 [ 202.271678][ T80] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.297827][ T5873] gspca_stk1135: Sensor write failed [ 202.304472][ T80] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.314622][ T5873] gspca_stk1135: serial bus timeout: status=0x00 [ 202.339323][ T5873] gspca_stk1135: Sensor read failed [ 202.361940][ T80] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 202.379586][ T5873] gspca_stk1135: serial bus timeout: status=0x00 [ 202.389829][ T91] usb 3-1: USB disconnect, device number 23 [ 202.401014][ T5873] gspca_stk1135: Sensor read failed [ 202.406218][ T5873] gspca_stk1135: Detected sensor type unknown (0x0) [ 202.435344][ T80] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 202.526276][ T5873] gspca_stk1135: serial bus timeout: status=0x00 [ 202.548996][ T80] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 202.691155][ T5873] gspca_stk1135: Sensor read failed [ 202.777477][ T80] usb 4-1: Manufacturer: syz [ 202.809291][ T5873] gspca_stk1135: serial bus timeout: status=0x00 [ 203.191802][ T80] usb 4-1: config 0 descriptor?? [ 203.204051][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 203.323874][ T5873] gspca_stk1135: Sensor read failed [ 203.329114][ T5873] gspca_stk1135: serial bus timeout: status=0x00 [ 203.349588][ T5873] gspca_stk1135: Sensor write failed [ 203.354953][ T5873] gspca_stk1135: serial bus timeout: status=0x00 [ 203.361790][ T5873] gspca_stk1135: Sensor write failed [ 203.367544][ T5873] stk1135 2-1:0.0: probe with driver stk1135 failed with error -110 [ 204.089190][ T80] appleir 0003:05AC:8243.000C: unknown main item tag 0x0 [ 204.196364][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 204.196382][ T30] audit: type=1400 audit(1744522689.888:455): avc: denied { execute } for pid=7566 comm="syz.0.434" path="/dev/dsp" dev="devtmpfs" ino=1285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 205.138852][ T80] appleir 0003:05AC:8243.000C: No inputs registered, leaving [ 205.526082][ T80] appleir 0003:05AC:8243.000C: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 206.005128][ T80] usb 2-1: USB disconnect, device number 21 [ 206.050670][ T2150] usb 4-1: USB disconnect, device number 18 [ 206.231891][ T7591] netlink: 4 bytes leftover after parsing attributes in process `syz.1.440'. [ 206.391799][ T7591] bridge_slave_1: left allmulticast mode [ 206.420605][ T7594] fuse: Bad value for 'rootmode' [ 206.533943][ T7591] bridge_slave_1: left promiscuous mode [ 206.770619][ T7591] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.916420][ T7591] bridge_slave_0: left allmulticast mode [ 206.956066][ T7591] bridge_slave_0: left promiscuous mode [ 206.961881][ T7591] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.716040][ T30] audit: type=1400 audit(1744522695.488:456): avc: denied { getopt } for pid=7615 comm="syz.2.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 209.836561][ T30] audit: type=1400 audit(1744522695.588:457): avc: denied { read } for pid=7615 comm="syz.2.446" dev="sockfs" ino=14290 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 209.972757][ T30] audit: type=1400 audit(1744522695.698:458): avc: denied { getopt } for pid=7620 comm="syz.4.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 210.033323][ T30] audit: type=1400 audit(1744522695.788:459): avc: denied { map } for pid=7621 comm="syz.3.448" path="socket:[15125]" dev="sockfs" ino=15125 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 210.556001][ T7637] fuse: Bad value for 'rootmode' [ 210.961835][ T5925] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 211.160573][ T5925] usb 5-1: Invalid ep0 maxpacket: 16 [ 211.405967][ T5925] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 211.622352][ T5925] usb 5-1: Invalid ep0 maxpacket: 16 [ 211.782262][ T5925] usb usb5-port1: attempt power cycle [ 212.599462][ T5925] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 212.776186][ T5925] usb 5-1: Invalid ep0 maxpacket: 16 [ 212.908088][ T7660] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 213.523791][ T5925] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 213.676462][ T30] audit: type=1400 audit(1744522699.448:460): avc: denied { accept } for pid=7662 comm="syz.3.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 213.751874][ T5925] usb 5-1: device descriptor read/8, error -71 [ 213.873407][ T5925] usb usb5-port1: unable to enumerate USB device [ 214.113353][ T7672] xt_hashlimit: size too large, truncated to 1048576 [ 214.639673][ T30] audit: type=1400 audit(1744522700.398:461): avc: denied { create } for pid=7679 comm="syz.4.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 214.749644][ T7682] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 215.009338][ T30] audit: type=1400 audit(1744522700.648:462): avc: denied { map } for pid=7676 comm="syz.3.464" path="/dev/bsg" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 215.210715][ T7689] fuse: Bad value for 'rootmode' [ 215.246472][ T30] audit: type=1400 audit(1744522701.018:463): avc: denied { create } for pid=7693 comm="syz.0.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 215.387429][ T30] audit: type=1400 audit(1744522701.048:464): avc: denied { connect } for pid=7693 comm="syz.0.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 215.406699][ C0] vkms_vblank_simulate: vblank timer overrun [ 215.988121][ T80] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 216.515255][ T80] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 216.546475][ T80] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.558671][ T80] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.568603][ T80] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 216.586857][ T80] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 217.289519][ T80] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 217.360832][ T7707] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 217.399124][ T80] usb 2-1: Manufacturer: syz [ 217.537470][ T80] usb 2-1: config 0 descriptor?? [ 217.542598][ T5903] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 217.688430][ T7715] netlink: 16 bytes leftover after parsing attributes in process `syz.0.476'. [ 217.697677][ T7715] netlink: 68 bytes leftover after parsing attributes in process `syz.0.476'. [ 217.706795][ T7715] netlink: 16 bytes leftover after parsing attributes in process `syz.0.476'. [ 217.715733][ T7715] netlink: 68 bytes leftover after parsing attributes in process `syz.0.476'. [ 217.919494][ T5903] usb 4-1: Using ep0 maxpacket: 8 [ 217.936576][ T5903] usb 4-1: config index 0 descriptor too short (expected 13226, got 36) [ 218.062201][ T80] appleir 0003:05AC:8243.000D: unknown main item tag 0x0 [ 218.811254][ T5903] usb 4-1: config 136 has too many interfaces: 185, using maximum allowed: 32 [ 218.824513][ T80] appleir 0003:05AC:8243.000D: No inputs registered, leaving [ 218.844079][ T5903] usb 4-1: config 136 has an invalid descriptor of length 0, skipping remainder of the config [ 218.862621][ T5903] usb 4-1: config 136 has 0 interfaces, different from the descriptor's value: 185 [ 218.874701][ T5903] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 218.886807][ T80] appleir 0003:05AC:8243.000D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 218.921115][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.310518][ T7734] xt_hashlimit: size too large, truncated to 1048576 [ 219.763736][ T5903] usb 4-1: string descriptor 0 read error: -71 [ 221.124941][ T5903] usb 4-1: USB disconnect, device number 19 [ 221.864066][ T2150] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 222.029366][ T30] audit: type=1400 audit(1744522707.788:465): avc: denied { setopt } for pid=7751 comm="syz.4.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 222.229344][ T2150] usb 1-1: Using ep0 maxpacket: 32 [ 222.250627][ T30] audit: type=1400 audit(1744522707.788:466): avc: denied { bind } for pid=7751 comm="syz.4.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 222.255050][ T2150] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 222.288060][ T2150] usb 1-1: config 0 has no interface number 0 [ 222.301056][ T2150] usb 1-1: config 0 interface 184 has no altsetting 0 [ 222.307909][ T30] audit: type=1400 audit(1744522707.788:467): avc: denied { write } for pid=7751 comm="syz.4.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 222.349785][ T2150] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 222.365215][ T2150] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.389276][ T2150] usb 1-1: Product: syz [ 222.393872][ T30] audit: type=1400 audit(1744522707.798:468): avc: denied { read } for pid=7751 comm="syz.4.483" path="socket:[16562]" dev="sockfs" ino=16562 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 222.401669][ T2150] usb 1-1: Manufacturer: syz [ 222.479381][ T2150] usb 1-1: SerialNumber: syz [ 222.520818][ T2150] usb 1-1: config 0 descriptor?? [ 222.548674][ T2150] smsc75xx v1.0.0 [ 222.941535][ T30] audit: type=1400 audit(1744522708.238:469): avc: denied { read } for pid=7753 comm="syz.4.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 222.968987][ T30] audit: type=1400 audit(1744522708.288:470): avc: denied { setopt } for pid=7753 comm="syz.4.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 223.169330][ T2150] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 223.277950][ T2150] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 223.293743][ T2150] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 223.304899][ T2150] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 223.377934][ T2150] usb 2-1: USB disconnect, device number 22 [ 224.574050][ T2150] usb 1-1: USB disconnect, device number 13 [ 224.899304][ T5925] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 225.130929][ T5925] usb 2-1: Using ep0 maxpacket: 32 [ 225.228033][ T5925] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 225.354640][ T5925] usb 2-1: config 0 has no interface number 0 [ 225.656599][ T5925] usb 2-1: config 0 interface 184 has no altsetting 0 [ 226.129088][ T5925] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 226.160036][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.190852][ T5925] usb 2-1: Product: syz [ 226.201193][ T5925] usb 2-1: Manufacturer: syz [ 226.214581][ T5925] usb 2-1: SerialNumber: syz [ 226.228357][ T5925] usb 2-1: config 0 descriptor?? [ 226.248392][ T5925] smsc75xx v1.0.0 [ 226.703171][ T7807] overlayfs: missing 'lowerdir' [ 226.719322][ T80] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 226.772094][ T7808] sz1: rxe_newlink: already configured on lo [ 227.396771][ T80] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.406939][ T80] usb 4-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 227.417269][ T80] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.439046][ T80] usb 4-1: config 0 descriptor?? [ 227.519457][ T80] rndis_host 4-1:0.0: probe with driver rndis_host failed with error -22 [ 227.925645][ T7818] xt_hashlimit: size too large, truncated to 1048576 [ 228.699473][ T7820] xt_hashlimit: size too large, truncated to 1048576 [ 229.289590][ T7815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.494'. [ 229.520934][ T7815] orangefs_mount: mount request failed with -4 [ 229.591234][ T7823] orangefs_mount: mount request failed with -4 [ 229.949922][ T2150] usb 4-1: USB disconnect, device number 20 [ 230.066740][ T7833] lo speed is unknown, defaulting to 1000 [ 230.197499][ T5925] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 230.269089][ T5925] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 230.299421][ T5863] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 230.317170][ T5925] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 230.588973][ T7845] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 230.759299][ T5863] usb 3-1: Using ep0 maxpacket: 32 [ 231.297635][ T5925] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 231.312993][ T5863] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 231.322770][ T5863] usb 3-1: config 0 has no interface number 0 [ 231.329774][ T5863] usb 3-1: config 0 interface 184 has no altsetting 0 [ 231.347203][ T5863] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 231.363724][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.431821][ T5863] usb 3-1: Product: syz [ 231.520112][ T7853] veth0_vlan: entered allmulticast mode [ 231.927839][ T5863] usb 3-1: Manufacturer: syz [ 231.932486][ T5863] usb 3-1: SerialNumber: syz [ 232.285823][ T5925] usb 2-1: USB disconnect, device number 23 [ 232.337315][ T30] audit: type=1400 audit(1744522718.108:471): avc: denied { mount } for pid=7850 comm="syz.3.501" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 232.359332][ T5863] usb 3-1: config 0 descriptor?? [ 232.368824][ T7854] veth0_vlan: left promiscuous mode [ 232.376105][ T7854] veth0_vlan: entered promiscuous mode [ 232.526917][ T5863] smsc75xx v1.0.0 [ 232.555836][ T30] audit: type=1400 audit(1744522718.328:472): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 233.009577][ T30] audit: type=1400 audit(1744522718.428:473): avc: denied { setcheckreqprot } for pid=7863 comm="syz.1.502" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 233.044100][ T5863] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 233.078335][ T5863] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 233.110357][ T5863] usb 3-1: USB disconnect, device number 24 [ 233.112089][ T7856] lo speed is unknown, defaulting to 1000 [ 234.254969][ T7888] overlayfs: missing 'lowerdir' [ 234.331148][ T7889] rdma_rxe: rxe_newlink: failed to add lo [ 234.872828][ T7894] xt_hashlimit: size too large, truncated to 1048576 [ 235.038746][ T7895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.507'. [ 235.467269][ T7895] orangefs_mount: mount request failed with -4 [ 235.854229][ T5903] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 235.991448][ T7911] tipc: Started in network mode [ 235.996474][ T7911] tipc: Node identity 7, cluster identity 4711 [ 236.002679][ T7911] tipc: Node number set to 7 [ 236.841861][ T5903] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.862824][ T5903] usb 3-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 236.872204][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.897309][ T7914] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 236.900190][ T5903] usb 3-1: config 0 descriptor?? [ 236.938317][ T5903] rndis_host 3-1:0.0: probe with driver rndis_host failed with error -22 [ 236.990060][ T7917] netlink: 48 bytes leftover after parsing attributes in process `syz.3.513'. [ 237.034254][ T7924] syzkaller1: entered promiscuous mode [ 237.049448][ T7924] syzkaller1: entered allmulticast mode [ 237.342532][ T5871] usb 3-1: USB disconnect, device number 25 [ 237.444704][ T7934] xt_hashlimit: size too large, truncated to 1048576 [ 237.980487][ T5903] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 238.490686][ T5903] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.518580][ T5903] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 238.539344][ T5903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 238.578778][ T5903] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 239.251583][ T7957] xt_hashlimit: size too large, truncated to 1048576 [ 239.491121][ T7958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.521'. [ 239.621472][ T5903] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice=bd.94 [ 239.652956][ T5903] usb 4-1: New USB device strings: Mfr=192, Product=0, SerialNumber=0 [ 239.669631][ T5871] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 239.687152][ T5903] usb 4-1: Manufacturer: syz [ 239.733546][ T5903] usb 4-1: config 0 descriptor?? [ 239.797760][ T30] audit: type=1400 audit(1744522725.528:474): avc: denied { bind } for pid=7961 comm="syz.4.522" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 239.825714][ T5903] em28xx 4-1:0.0: New device syz @ 12 Mbps (2040:1605, interface 0, class 0) [ 239.844819][ T7958] orangefs_mount: mount request failed with -4 [ 239.909331][ T5903] em28xx 4-1:0.0: Device initialization failed. [ 239.916814][ T5903] em28xx 4-1:0.0: Device must be connected to a high-speed USB 2.0 port. [ 239.929328][ T5871] usb 1-1: Using ep0 maxpacket: 32 [ 239.941198][ T5871] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 239.976369][ T5903] usb 4-1: USB disconnect, device number 21 [ 239.999269][ T5871] usb 1-1: config 0 has no interface number 0 [ 240.020295][ T5871] usb 1-1: config 0 interface 184 has no altsetting 0 [ 240.138439][ T5871] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 240.241623][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.257142][ T5925] hid (null): invalid report_size -167556350 [ 240.269266][ T30] audit: type=1400 audit(1744522726.028:475): avc: denied { read write } for pid=7969 comm="syz.3.525" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 240.295538][ T5871] usb 1-1: Product: syz [ 240.300211][ T5925] hid (null): unknown global tag 0xc [ 240.309364][ T5871] usb 1-1: Manufacturer: syz [ 240.316651][ T5925] hid (null): bogus close delimiter [ 240.327110][ T5871] usb 1-1: SerialNumber: syz [ 240.338392][ T5925] hid-generic 0002:0000:0565.000E: unknown main item tag 0x4 [ 240.351756][ T5871] usb 1-1: config 0 descriptor?? [ 240.363004][ T5871] smsc75xx v1.0.0 [ 240.366981][ T5925] hid-generic 0002:0000:0565.000E: invalid report_size -167556350 [ 240.398729][ T5925] hid-generic 0002:0000:0565.000E: item 0 4 1 7 parsing failed [ 240.426580][ T5925] hid-generic 0002:0000:0565.000E: probe with driver hid-generic failed with error -22 [ 240.680556][ T30] audit: type=1400 audit(1744522726.028:476): avc: denied { open } for pid=7969 comm="syz.3.525" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 240.912820][ T7977] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 243.589385][ T5871] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 243.604774][ T5871] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 243.616289][ T5871] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 243.629186][ T5871] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 243.749032][ T5871] usb 1-1: USB disconnect, device number 14 [ 243.830573][ T8001] xt_hashlimit: size too large, truncated to 1048576 [ 244.086990][ T8002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.530'. [ 244.265670][ T8004] vcan0: tx drop: invalid da for name 0x000000000000efff [ 244.393303][ T30] audit: type=1400 audit(1744522730.038:477): avc: denied { accept } for pid=7995 comm="syz.4.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 244.429077][ T8002] orangefs_mount: mount request failed with -4 [ 244.550289][ T8008] xt_hashlimit: size too large, truncated to 1048576 [ 245.427977][ T8020] overlayfs: missing 'lowerdir' [ 245.503597][ T8021] rdma_rxe: rxe_newlink: failed to add lo [ 245.924038][ T8019] netlink: 48 bytes leftover after parsing attributes in process `syz.2.536'. [ 246.089355][ T5863] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 246.325593][ T5873] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 247.031339][ T5873] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.049306][ T5873] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 247.076090][ T5863] usb 5-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x5B, changing to 0xB [ 247.101020][ T5863] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 50742, setting to 64 [ 247.166303][ T30] audit: type=1400 audit(1744522732.888:478): avc: denied { mount } for pid=8034 comm="syz.3.539" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 247.455706][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 247.465488][ T5873] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 247.493881][ T5873] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice=bd.94 [ 247.503999][ T5863] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 247.516582][ T5863] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 247.527372][ T5863] usb 5-1: Manufacturer: syz [ 247.532624][ T5863] usb 5-1: SerialNumber: syz [ 247.555285][ T5873] usb 3-1: New USB device strings: Mfr=192, Product=0, SerialNumber=0 [ 247.565925][ T5873] usb 3-1: Manufacturer: syz [ 247.586704][ T8023] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 247.596766][ T5873] usb 3-1: config 0 descriptor?? [ 247.616024][ T5873] em28xx 3-1:0.0: New device syz @ 12 Mbps (2040:1605, interface 0, class 0) [ 247.659413][ T5873] em28xx 3-1:0.0: Device initialization failed. [ 247.667513][ T5873] em28xx 3-1:0.0: Device must be connected to a high-speed USB 2.0 port. [ 248.100322][ T5863] usbhid 5-1:36.0: couldn't find an input interrupt endpoint [ 248.113580][ T5871] usb 3-1: USB disconnect, device number 26 [ 248.127793][ T30] audit: type=1400 audit(1744522733.898:479): avc: denied { read } for pid=8044 comm="syz.3.541" path="socket:[16342]" dev="sockfs" ino=16342 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 248.162168][ T5863] usb 5-1: USB disconnect, device number 22 [ 248.176731][ T8046] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 248.212104][ T8046] ptrace attach of ""[8047] was attempted by "./syz-executor exec"[8046] [ 249.359345][ T80] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 249.674313][ T8064] xt_hashlimit: size too large, truncated to 1048576 [ 250.214504][ T80] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 250.297603][ T30] audit: type=1400 audit(1744522736.068:480): avc: denied { read } for pid=8068 comm="syz.1.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 250.383129][ T80] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.394361][ T80] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.424658][ T80] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 250.461106][ T80] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 250.499305][ T80] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 250.517547][ T80] usb 4-1: Manufacturer: syz [ 250.555823][ T80] usb 4-1: config 0 descriptor?? [ 250.610433][ T8077] netlink: 16 bytes leftover after parsing attributes in process `syz.2.549'. [ 251.111762][ T5871] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 251.491341][ T5871] usb 1-1: Using ep0 maxpacket: 8 [ 251.511808][ T5871] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 251.892428][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.902072][ T80] appleir 0003:05AC:8243.000F: unknown main item tag 0x0 [ 252.010382][ T5871] usb 1-1: config 0 descriptor?? [ 252.393935][ T5871] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 253.814170][ T80] appleir 0003:05AC:8243.000F: No inputs registered, leaving [ 253.851076][ T8097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.820216][ T8097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.662382][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.678135][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.752886][ T80] appleir 0003:05AC:8243.000F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 255.791364][ T8101] xt_hashlimit: size too large, truncated to 1048576 [ 255.961988][ T8102] netlink: 4 bytes leftover after parsing attributes in process `syz.4.553'. [ 256.199248][ T8102] orangefs_mount: mount request failed with -4 [ 256.634932][ T5871] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 256.706546][ T5871] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 256.796237][ T5871] asix 1-1:0.0: probe with driver asix failed with error -71 [ 257.629329][ T5871] usb 1-1: USB disconnect, device number 15 [ 264.991956][ T30] audit: type=1400 audit(1744522747.048:481): avc: denied { map } for pid=8110 comm="syz.1.555" path="socket:[17324]" dev="sockfs" ino=17324 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 268.969230][ C1] sched: DL replenish lagged too much [ 283.135566][ T30] audit: type=1400 audit(1744522747.048:482): avc: denied { accept } for pid=8110 comm="syz.1.555" path="socket:[17324]" dev="sockfs" ino=17324 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 287.138283][ T5915] usb 4-1: USB disconnect, device number 22 [ 330.571303][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 330.588129][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 424.181231][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 453.052679][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 454.181503][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 456.508889][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 458.739157][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 458.746121][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5178/1:b..l P5489/1:b..l [ 458.755517][ C1] rcu: (detected by 1, t=10503 jiffies, g=20705, q=1838420 ncpus=2) [ 458.763576][ C1] task:dhcpcd state:R running task stack:26264 pid:5489 tgid:5489 ppid:1 task_flags:0x400140 flags:0x00000002 [ 458.777784][ C1] Call Trace: [ 458.781059][ C1] [ 458.783992][ C1] __schedule+0x116f/0x5de0 [ 458.788509][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 458.793712][ C1] ? __pfx___schedule+0x10/0x10 [ 458.798564][ C1] ? do_writev+0x295/0x330 [ 458.802987][ C1] ? __kernel_text_address+0xd/0x40 [ 458.808187][ C1] ? mark_held_locks+0x49/0x80 [ 458.812950][ C1] preempt_schedule_irq+0x51/0x90 [ 458.817974][ C1] irqentry_exit+0x36/0x90 [ 458.822389][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 458.828366][ C1] RIP: 0010:lock_acquire+0x62/0x350 [ 458.833558][ C1] Code: b2 0e 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 12 36 ee 0e 0f 82 74 02 00 00 8b 35 aa 65 ee 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 e9 b1 0e 12 0f 85 c7 02 00 00 48 83 c4 [ 458.853162][ C1] RSP: 0018:ffffc90003e0f370 EFLAGS: 00000206 [ 458.859224][ C1] RAX: 0000000000000046 RBX: ffffffff8e3c15c0 RCX: 000000007568e256 [ 458.867189][ C1] RDX: 0000000000000000 RSI: ffffffff8dbc9fb7 RDI: ffffffff8bf46340 [ 458.875155][ C1] RBP: 0000000000000002 R08: a0d9e9811d6e44ec R09: 0000000000000000 [ 458.883119][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 458.891082][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 458.899064][ C1] ? find_held_lock+0x2b/0x80 [ 458.903747][ C1] __page_table_check_zero+0x13d/0x5b0 [ 458.909210][ C1] ? __page_table_check_zero+0x12c/0x5b0 [ 458.914843][ C1] ? __pfx___page_table_check_zero+0x10/0x10 [ 458.920824][ C1] ? __reset_page_owner+0x137/0x1a0 [ 458.926019][ C1] __free_frozen_pages+0x704/0xff0 [ 458.931140][ C1] __put_partials+0x16d/0x1c0 [ 458.935824][ C1] qlist_free_all+0x4e/0x120 [ 458.940421][ C1] kasan_quarantine_reduce+0x195/0x1e0 [ 458.945879][ C1] __kasan_kmalloc+0x8a/0xb0 [ 458.950466][ C1] __kmalloc_node_track_caller_noprof+0x221/0x510 [ 458.956878][ C1] ? __alloc_skb+0x166/0x380 [ 458.961472][ C1] kmalloc_reserve+0xef/0x2c0 [ 458.966155][ C1] __alloc_skb+0x166/0x380 [ 458.970570][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 458.975502][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 458.980436][ C1] ? __pfx___might_resched+0x10/0x10 [ 458.985728][ C1] alloc_skb_with_frags+0xe0/0x860 [ 458.990848][ C1] ? find_held_lock+0x2b/0x80 [ 458.995530][ C1] sock_alloc_send_pskb+0x7fb/0x990 [ 459.000735][ C1] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 459.006454][ C1] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 459.012781][ C1] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 459.019460][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 459.025271][ C1] unix_dgram_sendmsg+0x463/0x1910 [ 459.030384][ C1] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 459.037151][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 459.042704][ C1] sock_write_iter+0x4fc/0x5b0 [ 459.047476][ C1] ? __pfx_sock_write_iter+0x10/0x10 [ 459.052778][ C1] ? __pfx_file_has_perm+0x10/0x10 [ 459.057890][ C1] do_iter_readv_writev+0x654/0x950 [ 459.063094][ C1] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 459.068818][ C1] ? selinux_file_permission+0x11f/0x580 [ 459.074456][ C1] ? bpf_lsm_file_permission+0x9/0x10 [ 459.079829][ C1] ? security_file_permission+0x71/0x210 [ 459.085464][ C1] ? rw_verify_area+0xcf/0x680 [ 459.090230][ C1] vfs_writev+0x353/0xdc0 [ 459.094562][ C1] ? __handle_mm_fault+0x4af/0x2a40 [ 459.099773][ C1] ? __pfx_vfs_writev+0x10/0x10 [ 459.104626][ C1] ? lock_vma_under_rcu+0x47d/0x970 [ 459.109832][ C1] ? cgroup_rstat_updated+0x2a/0xb20 [ 459.115127][ C1] ? __pfx___seccomp_filter+0x10/0x10 [ 459.120504][ C1] ? do_writev+0x295/0x330 [ 459.124919][ C1] do_writev+0x295/0x330 [ 459.129160][ C1] ? __pfx_do_writev+0x10/0x10 [ 459.133923][ C1] ? __secure_computing+0x28e/0x3b0 [ 459.139128][ C1] do_syscall_64+0xcd/0x260 [ 459.143635][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.149524][ C1] RIP: 0033:0x7fee73fefe03 [ 459.153932][ C1] RSP: 002b:00007ffda6ea16a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 459.162341][ C1] RAX: ffffffffffffffda RBX: 00007ffda6ea19e8 RCX: 00007fee73fefe03 [ 459.170309][ C1] RDX: 0000000000000005 RSI: 00007ffda6ea16c0 RDI: 000000000000000a [ 459.178275][ C1] RBP: 0000000000004801 R08: 000000000000000a R09: 00007ffda6ea1700 [ 459.186240][ C1] R10: 00007ffda6ea1708 R11: 0000000000000246 R12: 000055638b1d3460 [ 459.194206][ C1] R13: 000055636c11ef88 R14: 00000000ffffffff R15: 000055638b1dfea0 [ 459.202190][ C1] [ 459.205205][ C1] task:syslogd state:R running task stack:25160 pid:5178 tgid:5178 ppid:1 task_flags:0x400000 flags:0x00000002 [ 459.218686][ C1] Call Trace: [ 459.221957][ C1] [ 459.224885][ C1] __schedule+0x116f/0x5de0 [ 459.229403][ C1] ? __pfx___schedule+0x10/0x10 [ 459.234256][ C1] ? mark_held_locks+0x49/0x80 [ 459.239014][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 459.244215][ C1] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 459.250281][ C1] preempt_schedule_notrace+0x62/0xe0 [ 459.255653][ C1] preempt_schedule_notrace_thunk+0x16/0x30 [ 459.261549][ C1] rcu_is_watching+0x8e/0xc0 [ 459.266139][ C1] lock_acquire+0x2cd/0x350 [ 459.270640][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 459.275840][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 459.281995][ C1] unwind_next_frame+0xd1/0x20a0 [ 459.286930][ C1] ? unwind_next_frame+0xbd/0x20a0 [ 459.292040][ C1] ? __kasan_kmalloc+0x8a/0xb0 [ 459.296804][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 459.302960][ C1] arch_stack_walk+0x94/0x100 [ 459.307641][ C1] ? __kasan_kmalloc+0x8a/0xb0 [ 459.312403][ C1] stack_trace_save+0x8e/0xc0 [ 459.317077][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 459.322449][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 459.327385][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 459.332317][ C1] save_stack+0x160/0x1f0 [ 459.336641][ C1] ? __pfx_save_stack+0x10/0x10 [ 459.341485][ C1] ? __free_frozen_pages+0x69d/0xff0 [ 459.346771][ C1] ? __put_partials+0x16d/0x1c0 [ 459.351622][ C1] ? qlist_free_all+0x4e/0x120 [ 459.356389][ C1] ? kasan_quarantine_reduce+0x195/0x1e0 [ 459.362014][ C1] ? __kasan_kmalloc+0x8a/0xb0 [ 459.366780][ C1] ? page_ext_put+0x3e/0xd0 [ 459.371286][ C1] __reset_page_owner+0x84/0x1a0 [ 459.376221][ C1] __free_frozen_pages+0x69d/0xff0 [ 459.381341][ C1] __put_partials+0x16d/0x1c0 [ 459.386024][ C1] qlist_free_all+0x4e/0x120 [ 459.390617][ C1] ? tomoyo_encode2+0x100/0x3e0 [ 459.395478][ C1] kasan_quarantine_reduce+0x195/0x1e0 [ 459.400946][ C1] __kasan_kmalloc+0x8a/0xb0 [ 459.405534][ C1] __kmalloc_noprof+0x223/0x510 [ 459.410382][ C1] ? d_absolute_path+0x136/0x1a0 [ 459.415325][ C1] tomoyo_encode2+0x100/0x3e0 [ 459.420011][ C1] tomoyo_encode+0x29/0x50 [ 459.424428][ C1] tomoyo_realpath_from_path+0x18f/0x6e0 [ 459.430070][ C1] tomoyo_check_open_permission+0x2ab/0x3c0 [ 459.435961][ C1] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 459.442407][ C1] ? find_held_lock+0x2b/0x80 [ 459.447093][ C1] tomoyo_file_open+0x6b/0x90 [ 459.451765][ C1] security_file_open+0x84/0x1e0 [ 459.456702][ C1] do_dentry_open+0x596/0x1c10 [ 459.461470][ C1] vfs_open+0x82/0x3f0 [ 459.465540][ C1] path_openat+0x1e5e/0x2d40 [ 459.470137][ C1] ? __pfx_path_openat+0x10/0x10 [ 459.475078][ C1] do_filp_open+0x20b/0x470 [ 459.479586][ C1] ? __pfx_do_filp_open+0x10/0x10 [ 459.484631][ C1] ? alloc_fd+0x471/0x7d0 [ 459.488968][ C1] do_sys_openat2+0x11b/0x1d0 [ 459.493652][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 459.498852][ C1] ? __fput+0x68d/0xb70 [ 459.503017][ C1] __x64_sys_openat+0x174/0x210 [ 459.507867][ C1] ? __pfx___x64_sys_openat+0x10/0x10 [ 459.513236][ C1] ? __pfx_fput_close_sync+0x10/0x10 [ 459.518529][ C1] do_syscall_64+0xcd/0x260 [ 459.523037][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.528924][ C1] RIP: 0033:0x7fd695a179a4 [ 459.533332][ C1] RSP: 002b:00007fff5b8557d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 459.541742][ C1] RAX: ffffffffffffffda RBX: 0000555a0e5932c0 RCX: 00007fd695a179a4 [ 459.549707][ C1] RDX: 0000000000000d41 RSI: 00007fd695bb6443 RDI: 00000000ffffff9c [ 459.557672][ C1] RBP: 00007fd695bb6443 R08: 0000000000000001 R09: 0000000000000000 [ 459.565637][ C1] R10: 00000000000001b6 R11: 0000000000000246 R12: 0000000000000d41 [ 459.573605][ C1] R13: 0000000067fb4e44 R14: 0000000000000004 R15: 0000555a0e593410 [ 459.581586][ C1] [ 459.584614][ C1] rcu: rcu_preempt kthread starved for 6855 jiffies! g20705 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 459.595722][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 459.605684][ C1] rcu: RCU grace-period kthread stack dump: [ 459.611561][ C1] task:rcu_preempt state:R running task stack:27192 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 459.625047][ C1] Call Trace: [ 459.628318][ C1] [ 459.631251][ C1] __schedule+0x116f/0x5de0 [ 459.635770][ C1] ? __pfx___schedule+0x10/0x10 [ 459.640626][ C1] ? find_held_lock+0x2b/0x80 [ 459.645304][ C1] ? schedule+0x2d7/0x3a0 [ 459.649638][ C1] schedule+0xe7/0x3a0 [ 459.653704][ C1] schedule_timeout+0x123/0x290 [ 459.658550][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 459.663919][ C1] ? __pfx_process_timeout+0x10/0x10 [ 459.669205][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 459.675013][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 459.680479][ C1] rcu_gp_fqs_loop+0x1ea/0xb00 [ 459.685242][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 459.690535][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 459.695395][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 459.701213][ C1] rcu_gp_kthread+0x270/0x380 [ 459.705890][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 459.711083][ C1] ? rcu_is_watching+0x12/0xc0 [ 459.715848][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 459.721049][ C1] ? __kthread_parkme+0x19e/0x250 [ 459.726077][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 459.731269][ C1] kthread+0x3c2/0x780 [ 459.735335][ C1] ? __pfx_kthread+0x10/0x10 [ 459.739919][ C1] ? __pfx_kthread+0x10/0x10 [ 459.744505][ C1] ? __pfx_kthread+0x10/0x10 [ 459.749094][ C1] ? __pfx_kthread+0x10/0x10 [ 459.753679][ C1] ? rcu_is_watching+0x12/0xc0 [ 459.758441][ C1] ? __pfx_kthread+0x10/0x10 [ 459.763028][ C1] ret_from_fork+0x45/0x80 [ 459.767442][ C1] ? __pfx_kthread+0x10/0x10 [ 459.772035][ C1] ret_from_fork_asm+0x1a/0x30 [ 459.776819][ C1] [ 459.779833][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 459.786146][ C1] Sending NMI from CPU 1 to CPUs 0: [ 459.791345][ C0] NMI backtrace for cpu 0 [ 459.791356][ C0] CPU: 0 UID: 0 PID: 8119 Comm: kworker/u8:11 Not tainted 6.15.0-rc1-syzkaller-00308-gecd5d67ad602 #0 PREEMPT(full) [ 459.791374][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 459.791383][ C0] Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker [ 459.791407][ C0] RIP: 0010:__lock_acquire+0x17b/0x1ba0 [ 459.791422][ C0] Code: 20 48 8b 84 24 b0 00 00 00 48 89 43 08 41 8b 8e d4 0a 00 00 31 c0 65 8b 15 8a 0f 0f 12 85 c9 44 89 e9 44 8b ac 24 c8 00 00 00 <0f> 95 c0 85 d2 0f 95 c2 41 c1 e2 0f c1 e1 10 0f b6 d2 45 0f b7 d2 [ 459.791435][ C0] RSP: 0018:ffffc90000006b90 EFLAGS: 00000002 [ 459.791446][ C0] RAX: 0000000000000000 RBX: ffff888031f58c08 RCX: 0000000000000002 [ 459.791454][ C0] RDX: 0000000000000000 RSI: ffff888031f58be0 RDI: ffff888031f58c08 [ 459.791463][ C0] RBP: ffff888031f58af0 R08: 0000000000000000 R09: 0000000000000001 [ 459.791472][ C0] R10: 0000000000000000 R11: ffffffff8e3c15c0 R12: 0000000000000000 [ 459.791480][ C0] R13: 0000000000000000 R14: ffff888031f58000 R15: 0000000000000000 [ 459.791489][ C0] FS: 0000000000000000(0000) GS:ffff8881249b3000(0000) knlGS:0000000000000000 [ 459.791503][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 459.791512][ C0] CR2: 00007ff320c9c3d4 CR3: 000000004120c000 CR4: 00000000003526f0 [ 459.791521][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 459.791529][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 459.791537][ C0] Call Trace: [ 459.791541][ C0] [ 459.791548][ C0] ? lock_acquire+0x179/0x350 [ 459.791562][ C0] lock_acquire+0x179/0x350 [ 459.791573][ C0] ? unwind_next_frame+0xbd/0x20a0 [ 459.791591][ C0] ? unwind_next_frame+0x3f4/0x20a0 [ 459.791606][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 459.791624][ C0] unwind_next_frame+0xd1/0x20a0 [ 459.791639][ C0] ? unwind_next_frame+0xbd/0x20a0 [ 459.791654][ C0] ? process_backlog+0x442/0x15e0 [ 459.791669][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 459.791687][ C0] arch_stack_walk+0x94/0x100 [ 459.791706][ C0] ? process_backlog+0x442/0x15e0 [ 459.791720][ C0] stack_trace_save+0x8e/0xc0 [ 459.791742][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 459.791760][ C0] ? __lock_acquire+0x5ca/0x1ba0 [ 459.791772][ C0] kasan_save_stack+0x33/0x60 [ 459.791785][ C0] ? kasan_save_stack+0x33/0x60 [ 459.791796][ C0] ? kasan_save_track+0x14/0x30 [ 459.791807][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 459.791820][ C0] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 459.791833][ C0] ? dst_alloc+0x99/0x1a0 [ 459.791846][ C0] ? rt_dst_alloc+0x35/0x3a0 [ 459.791862][ C0] ? ip_route_output_key_hash_rcu+0x87a/0x28f0 [ 459.791875][ C0] ? ip_route_output_key_hash+0x137/0x2e0 [ 459.791888][ C0] ? ip_route_output_flow+0x27/0x150 [ 459.791901][ C0] ? ip_route_me_harder+0x565/0x12f0 [ 459.791917][ C0] ? synproxy_send_tcp.isra.0+0x2fa/0x630 [ 459.791933][ C0] ? synproxy_send_client_synack+0x6f6/0x8f0 [ 459.791949][ C0] ? nft_synproxy_do_eval+0xa63/0xd80 [ 459.791967][ C0] ? nft_do_chain+0x2e6/0x1920 [ 459.791983][ C0] ? nft_do_chain_inet+0x18a/0x340 [ 459.791999][ C0] ? nf_hook_slow+0xbb/0x200 [ 459.792011][ C0] ? nf_hook.constprop.0+0x422/0x750 [ 459.792024][ C0] ? ip_local_deliver+0x169/0x1f0 [ 459.792038][ C0] ? ip_rcv+0x2c3/0x5d0 [ 459.792051][ C0] ? __netif_receive_skb_one_core+0x197/0x1e0 [ 459.792064][ C0] ? __netif_receive_skb+0x1d/0x160 [ 459.792077][ C0] ? process_backlog+0x442/0x15e0 [ 459.792099][ C0] kasan_save_track+0x14/0x30 [ 459.792111][ C0] __kasan_slab_alloc+0x89/0x90 [ 459.792126][ C0] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 459.792139][ C0] ? dst_alloc+0x99/0x1a0 [ 459.792153][ C0] dst_alloc+0x99/0x1a0 [ 459.792167][ C0] rt_dst_alloc+0x35/0x3a0 [ 459.792183][ C0] ip_route_output_key_hash_rcu+0x87a/0x28f0 [ 459.792200][ C0] ip_route_output_key_hash+0x137/0x2e0 [ 459.792213][ C0] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 459.792228][ C0] ? lock_acquire+0x179/0x350 [ 459.792240][ C0] ? find_held_lock+0x2b/0x80 [ 459.792256][ C0] ip_route_output_flow+0x27/0x150 [ 459.792269][ C0] ip_route_me_harder+0x565/0x12f0 [ 459.792286][ C0] ? __pfx_ip_route_me_harder+0x10/0x10 [ 459.792300][ C0] ? rcu_is_watching+0x12/0xc0 [ 459.792317][ C0] ? trace_kmem_cache_alloc+0x28/0xc0 [ 459.792336][ C0] ? __pfx_cookie_hash+0x10/0x10 [ 459.792356][ C0] synproxy_send_tcp.isra.0+0x2fa/0x630 [ 459.792374][ C0] synproxy_send_client_synack+0x6f6/0x8f0 [ 459.792392][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 459.792408][ C0] ? nft_osf_reduce+0x2f8/0x3a0 [ 459.792426][ C0] nft_synproxy_do_eval+0xa63/0xd80 [ 459.792446][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 459.792468][ C0] ? __pfx_nft_synproxy_eval+0x10/0x10 [ 459.792486][ C0] nft_do_chain+0x2e6/0x1920 [ 459.792505][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 459.792522][ C0] ? mark_held_locks+0x49/0x80 [ 459.792536][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 459.792552][ C0] ? ipt_do_table+0xd48/0x1ac0 [ 459.792576][ C0] nft_do_chain_inet+0x18a/0x340 [ 459.792593][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 459.792609][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 459.792623][ C0] ? __pfx_ipt_do_table+0x10/0x10 [ 459.792642][ C0] ? nf_nat_ipv4_local_in+0x181/0x720 [ 459.792655][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 459.792671][ C0] nf_hook_slow+0xbb/0x200 [ 459.792685][ C0] nf_hook.constprop.0+0x422/0x750 [ 459.792699][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 459.792714][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 459.792728][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 459.792747][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 459.792765][ C0] ip_local_deliver+0x169/0x1f0 [ 459.792778][ C0] ? __pfx_ip_local_deliver+0x10/0x10 [ 459.792793][ C0] ip_rcv+0x2c3/0x5d0 [ 459.792806][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 459.792818][ C0] __netif_receive_skb_one_core+0x197/0x1e0 [ 459.792833][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 459.792848][ C0] ? lock_acquire+0x179/0x350 [ 459.792862][ C0] ? process_backlog+0x3f0/0x15e0 [ 459.792874][ C0] __netif_receive_skb+0x1d/0x160 [ 459.792891][ C0] process_backlog+0x442/0x15e0 [ 459.792907][ C0] __napi_poll.constprop.0+0xb7/0x550 [ 459.792922][ C0] net_rx_action+0xa97/0x1010 [ 459.792939][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 459.792953][ C0] ? mark_held_locks+0x49/0x80 [ 459.792964][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 459.792980][ C0] ? tmigr_handle_remote+0x132/0x380 [ 459.792998][ C0] ? run_timer_base+0x121/0x190 [ 459.793017][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 459.793036][ C0] handle_softirqs+0x216/0x8e0 [ 459.793054][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 459.793071][ C0] ? wg_index_hashtable_insert+0x108/0x9f0 [ 459.793086][ C0] do_softirq+0xb2/0xf0 [ 459.793101][ C0] [ 459.793105][ C0] [ 459.793110][ C0] __local_bh_enable_ip+0x100/0x120 [ 459.793126][ C0] ? wg_index_hashtable_insert+0x103/0x9f0 [ 459.793139][ C0] wg_index_hashtable_insert+0x108/0x9f0 [ 459.793153][ C0] ? read_tsc+0x9/0x20 [ 459.793171][ C0] ? ktime_get_real_ts64+0x21a/0x3f0 [ 459.793191][ C0] wg_noise_handshake_create_initiation+0x4a0/0x650 [ 459.793210][ C0] ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10 [ 459.793231][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 459.793246][ C0] ? ktime_get_coarse_with_offset+0x1f3/0x270 [ 459.793264][ C0] ? ktime_get_coarse_with_offset+0x176/0x270 [ 459.793282][ C0] wg_packet_send_handshake_initiation+0x19a/0x360 [ 459.793303][ C0] ? __pfx_wg_packet_send_handshake_initiation+0x10/0x10 [ 459.793323][ C0] ? __lock_acquire+0xaa4/0x1ba0 [ 459.793342][ C0] wg_packet_handshake_send_worker+0x1c/0x30 [ 459.793363][ C0] process_one_work+0x9cc/0x1b70 [ 459.793381][ C0] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 459.793395][ C0] ? __pfx_process_one_work+0x10/0x10 [ 459.793411][ C0] ? assign_work+0x1a0/0x250 [ 459.793425][ C0] worker_thread+0x6c8/0xf10 [ 459.793444][ C0] ? __pfx_worker_thread+0x10/0x10 [ 459.793458][ C0] kthread+0x3c2/0x780 [ 459.793471][ C0] ? __pfx_kthread+0x10/0x10 [ 459.793482][ C0] ? __pfx_kthread+0x10/0x10 [ 459.793494][ C0] ? __pfx_kthread+0x10/0x10 [ 459.793506][ C0] ? __pfx_kthread+0x10/0x10 [ 459.793519][ C0] ? rcu_is_watching+0x12/0xc0 [ 459.793534][ C0] ? __pfx_kthread+0x10/0x10 [ 459.793547][ C0] ret_from_fork+0x45/0x80 [ 459.793561][ C0] ? __pfx_kthread+0x10/0x10 [ 459.793573][ C0] ret_from_fork_asm+0x1a/0x30 [ 459.793597][ C0]