last executing test programs: 4m7.3871392s ago: executing program 2 (id=3): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffaaaaa8aaaabb86dd000186dd06100004aaaaaaaaaabbfc000000000000000000000000000001aaaaaaaaaabbfe8000"/62], 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r6 = memfd_create(&(0x7f0000000440)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xa6l\a\xb0\xf5\xa9^a\xf0h\x16\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xb4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\x00\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1UAA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97cy\xef\xbc\x1a\xbf\xc4\xdd\xe2\x9eBk\x1d\x8eg>\x87\x0e:\x9f\x88\xc0\x9ay\xffQ\xd6\xaf\xf5\xc1\xf3{\x91\xfc\x02t\'H \x97', 0x2) fcntl$addseals(r6, 0x409, 0x8) r7 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r7, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r7, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="02010089080000000000000000000000030005000000000002"], 0x40}}, 0x0) unshare(0x40020000) 4m4.03031629s ago: executing program 2 (id=15): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0}) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f00000000c0)=0x2, &(0x7f0000000100)=0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x1, "85"}, &(0x7f0000000180)=0x9) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000001c0)={r2, 0xff, 0x1, [0x5]}, &(0x7f0000000200)=0xa) (async) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in=@multicast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e23, 0x7, 0x4e24, 0x0, 0xa, 0x20, 0x80, 0xff, 0x0, 0xee01}, {0x4bd, 0xfff, 0x3, 0xb67, 0x4, 0x7, 0x47c4e462, 0xffffffffa9ce4f30}, {0x8, 0x50, 0x100, 0x8}, 0x7, 0x6e6bb1, 0x1, 0x0, 0xf553a0de0e1028a, 0x3}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d6, 0x32}, 0xa, @in6=@private2, 0x3500, 0x3, 0x2, 0x4, 0x80000000, 0x3, 0x8b6}}, 0xe8) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 4m1.802178549s ago: executing program 2 (id=18): mkdir(&(0x7f0000000280)='./file0\x00', 0x324) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') r0 = io_uring_setup(0x60f7, &(0x7f0000000a40)={0x0, 0x0, 0x80, 0x2, 0x3bd}) r1 = socket$rxrpc(0x21, 0x2, 0xa) close_range(r0, r1, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x324) (async) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) (async) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) chroot(&(0x7f0000000100)='./file0\x00') (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) (async) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') (async) io_uring_setup(0x60f7, &(0x7f0000000a40)={0x0, 0x0, 0x80, 0x2, 0x3bd}) (async) socket$rxrpc(0x21, 0x2, 0xa) (async) close_range(r0, r1, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) 4m1.52406791s ago: executing program 2 (id=20): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000000002010400000000000000000a0000000400bb100300fc0000000000000000000000000000201400040000000000000000000000fe"], 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) r0 = socket(0x10, 0x80002, 0x0) timer_create(0xfffffffffffffffd, 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000380)={0x301, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) clock_gettime(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000600), 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000ac0)={0x0, {}, 0x0, {}, 0x201, 0x4, 0xfffffffd, 0x10, "28f5da69a14f0000200000000070aa3aaf6ec3bd5bba00005f17bf01d7ecdd91b59ca8d54100000000001b00", "07a9310978042a8bfe1406584a128d7469166f4f07b84819e7df4af14e1df82d", [0xa, 0x3]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 3m59.894153255s ago: executing program 2 (id=26): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000006c055080a115014cb62010203010902120001fe0000000904"], 0x0) setreuid(0x0, 0xee00) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="44000000100000012509000000dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="320a0500130c0600140012800c0001006d616376746170000400028008002900ae7b060008002800a2650000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8ae257a062cc3564) r2 = socket$inet6(0xa, 0x2, 0x4) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000080)=0x9, 0x4) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x1, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f0000000480)={0x800000, 0x4, 0x2, 0x0, 0x800, 0x15a}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f0000000340)={0x800000, 0x0, 0x2, 0x0, 0x0, 0x55a}) syz_usb_control_io$printer(r0, 0x0, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r5) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) 3m59.52393156s ago: executing program 32 (id=26): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000006c055080a115014cb62010203010902120001fe0000000904"], 0x0) setreuid(0x0, 0xee00) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="44000000100000012509000000dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="320a0500130c0600140012800c0001006d616376746170000400028008002900ae7b060008002800a2650000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8ae257a062cc3564) r2 = socket$inet6(0xa, 0x2, 0x4) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000080)=0x9, 0x4) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x1, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f0000000480)={0x800000, 0x4, 0x2, 0x0, 0x800, 0x15a}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f0000000340)={0x800000, 0x0, 0x2, 0x0, 0x0, 0x55a}) syz_usb_control_io$printer(r0, 0x0, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r5) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) 17.106035014s ago: executing program 5 (id=692): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x1f, 0x10, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13.564907107s ago: executing program 5 (id=704): mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = inotify_init1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000580)={0x1a06, 0x0, '\x00', {0x0, @bt={0xffffffff, 0x4, 0x1, 0x0, 0x7, 0x7, 0x2, 0x6, 0x9, 0x5, 0xa, 0x3, 0xd, 0xa5e, 0x0, 0x14, {0x3, 0x1}, 0x5, 0x9}}}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4, 0x0, 0x8}, 0x18) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x20000510) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000480)={0x4e35, r2, 'id1\x00'}) fanotify_mark(0xffffffffffffffff, 0x1, 0x48000010, r5, &(0x7f0000000500)='./file1\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r6 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) ioctl$KDGKBTYPE(r6, 0x4b33, &(0x7f0000000140)) mknodat$loop(r6, &(0x7f00000002c0)='./file1\x00', 0x6000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') lstat(&(0x7f0000002340)='./file1\x00', &(0x7f0000002400)) syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000000)=ANY=[@ANYBLOB="12015001000000106b1d010140000102030109029a00030100e0000904000000010100000a24010000000201020c240200000000000e0000000524050000082404030f8bf8ae0c240701050000c80975f9070d24070101000005cf1f0000050924030000000001000904010000010200000904010101010200000905010900000100000725010001000009040200000102000009040201", @ANYRES16], 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000180)) 12.593900541s ago: executing program 3 (id=706): mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) ioperm(0x0, 0x2, 0x7e) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRESHEX=0x0, @ANYRES8=r0], 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x80000000}, {0x6, 0xfd, 0x0, 0x7ffffcb9}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x281}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) socket(0x1a, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000004140)=[{{&(0x7f0000000300)=@can, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000380)=""/177, 0xb1}, {&(0x7f0000000480)=""/134, 0x86}, {&(0x7f00000000c0)=""/17, 0x11}, {&(0x7f0000000540)=""/92, 0x5c}, {&(0x7f00000005c0)=""/4096, 0x1000}], 0x5, &(0x7f0000001640)=""/190, 0xbe}, 0x1be}, {{&(0x7f0000001700)=@l2, 0x80, &(0x7f0000002900)=[{&(0x7f0000001780)=""/196, 0xc4}, {&(0x7f0000000280)=""/28, 0x1c}, {&(0x7f0000004300)=""/70, 0x46}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/16, 0x10}], 0x5, &(0x7f0000002b00)=""/223, 0xdf}, 0xc7}, {{&(0x7f0000002a80)=@tipc=@name, 0x80, &(0x7f0000002c00), 0x0, &(0x7f0000002c40)=""/247, 0xf7}, 0x7fffffff}, {{&(0x7f0000002d40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000003280)=[{&(0x7f0000002dc0)=""/245, 0xf5}, {&(0x7f0000002f40)=""/226, 0xe2}, {&(0x7f0000003040)=""/152, 0x98}, {&(0x7f0000003100)=""/141, 0x8d}, {&(0x7f00000031c0)=""/132, 0x84}], 0x5, &(0x7f0000003300)=""/69, 0x45}, 0xe}, {{&(0x7f0000003380)=@l2tp={0x2, 0x0, @private}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000003940)=""/95, 0x5f}], 0x1, &(0x7f0000003500)=""/24, 0x18}, 0xfffffff7}, {{0x0, 0x0, &(0x7f0000003a80)=[{&(0x7f0000003540)=""/214, 0xd6}, {&(0x7f0000003640)=""/136, 0x88}, {&(0x7f0000003700)=""/123, 0x7b}, {&(0x7f0000003780)=""/201, 0xc9}, {&(0x7f0000003880)=""/145, 0x91}, {&(0x7f0000004380)=""/233, 0xe9}, {&(0x7f0000003a40)=""/37, 0x25}], 0x7, &(0x7f0000003b00)=""/100, 0x64}, 0x4}, {{&(0x7f0000003b80)=@tipc=@name, 0x80, &(0x7f0000004080), 0x0, &(0x7f0000004100)=""/52, 0x34}, 0x2}], 0x7, 0x7fb10727dda9, 0x0) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r0, 0xc) 11.793877644s ago: executing program 0 (id=707): syz_usb_connect(0x4, 0x3d, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002a91d21402577a8b046070102030109022b00010000000009045f00020103df000905050008000200e50905010208000100000725"], 0x0) 10.938080838s ago: executing program 0 (id=709): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000140)={0x0, 0x40, 0x4, {0x2, @raw_data="3d924b8271394fa4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae50511ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed33147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc3310200970349a3c1374ffec96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a7"}}) ioctl$SIOCSIFHWADDR(r1, 0x8937, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x7}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) 10.856287019s ago: executing program 1 (id=710): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_connect$cdc_ecm(0x5, 0x76, &(0x7f0000000640)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x1, 0x1, 0x95, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x3, 0x2, 0x6, 0x0, 0x2, {{0x6, 0x24, 0x6, 0x0, 0x0, "ce"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x2, 0x65e5, 0x4}, [@network_terminal={0x7, 0x24, 0xa, 0x5, 0x3, 0x2, 0x5}, @dmm={0x7, 0x24, 0x14, 0x6, 0x7ae}, @acm={0x4}, @obex={0x5, 0x24, 0x15, 0x17a}, @mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x2, 0xb}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x7, 0x1, 0x7}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x8, 0x0, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x4, 0xdc, 0x3}}}}}]}}]}}, &(0x7f0000000b00)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x250, 0x0, 0x8, 0x30, 0x8, 0x8}, 0x2b, &(0x7f0000000700)={0x5, 0xf, 0x2b, 0x3, [@wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x3, 0x8, 0x5, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "ab16a0d1a4836fb72b1d8f2d353f2e1b"}, @ext_cap={0x7, 0x10, 0x2, 0x36, 0x9, 0x8, 0x7ac4}]}, 0x8, [{0x2c, &(0x7f0000000740)=@string={0x2c, 0x3, "82297b7a5af8d5526cc3efa5a290e5aa08d061a27859dde018e7e5b4f8c95ebe7af82f0899339a61beae"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x280a}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x412}}, {0x9c, &(0x7f0000000800)=@string={0x9c, 0x3, "7b450a080d33fd5c6fcb3d39d4da5492997c3ed40369a3c3bf908a43a10471fb8be5980a1b73df650bd2a3151fa761900ab17dc2e0572e775c7a045f11005079c0c25e87e81d0103d776216fa6c94939b8f2582c88fc90bf1b02b629ed044ed42ed3e56e29021d0fe864af29debfcce9ca0d45c4ea9a482cb9c4fb3f3dc22deb600730bfddb472805e6f64e2a96914a69244cbb30a102408e12a"}}, {0xaf, &(0x7f00000008c0)=@string={0xaf, 0x3, "1c4825592b21b6bc14129e3e89ddeb1f379630b82c54a9458759ddf498e615b41481ae9464368537cc577f2b02ca33fb78aee48558755b092d9a298b1c582fab4d6a7a1f74318e1f80d66b0c19771e1c4b31d69508b0edc6147576411b66bc2d919dfbcd517609d34b6df0b7bd1856a6a0a8b5da3984b3006176a1584b07da8750039b2462bd261f8258429e4701aca2337361ec973b2413ee0717092260f308092522797877f2461c25a8e023"}}, {0xfa, &(0x7f0000000980)=@string={0xfa, 0x3, "7b13ccb70ef6c0d03a35ad8b8b2ddc3cb38a1fac7242146c4ce08b9eec72b4fee41d4309c2d80abc2cae244b295e6396c33c478465b48ffb5133eb7318f69f1b2e4147af31a9ab215f707d3d7336b4093c07475c8012e00f3663a46cc17ce80daecb2dd14c0f51f37238c97f691397dfa15389f31a65e3ec216c7afc6738132dfbd53607e5db7710cf82f6cf09e4bf56e3b7b544e8524322b08e7a0504454c1e0ffe8e2c5dacafad0caa3b3469af39aa0623af6bc0326eb91433f695e4a1e530353139374df1f733630591b8e11bed693ae5eabcad2f7bbb6f76aab7cbca2df29381cf6a8e87c1fbb2207f60e891562b3dbfab1233541c87"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0xf8f6}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x280a}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$cdc_ecm(0x1, 0xc4, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb2, 0x1, 0x1, 0x7, 0x80, 0xa1, [{{0x9, 0x4, 0x0, 0x5, 0x3, 0x2, 0x6, 0x0, 0x7, {{0x6, 0x24, 0x6, 0x0, 0x0, '['}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0xaab, 0x200, 0xd1ed, 0xc}, [@acm={0x4, 0x24, 0x2, 0x8}, @mdlm_detail={0x48, 0x24, 0x13, 0x9, "f4bb0bf7c43f6869495946253b75d362e357577d40db5cb8b9336f35223ab3b95111a7d06caac354055e12798493688664f923cb42d361ff1685de88bac131026d14693f"}, @ncm={0x6, 0x24, 0x1a, 0x1, 0x13}, @mdlm={0x15, 0x24, 0x12, 0x3}, @ncm={0x6, 0x24, 0x1a, 0x1, 0x28}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x7f, 0x5, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0xf0, 0x9, 0xb}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x0, 0x5, 0x7}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x2, 0xa, 0x2, 0x40, 0x23}, 0x38, &(0x7f0000000180)={0x5, 0xf, 0x38, 0x4, [@wireless={0xb, 0x10, 0x1, 0xe, 0x4, 0x5, 0x0, 0x2, 0xe}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x8, 0xfe, 0xff00}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x90, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "ca438c2b3e2182706b4942863f81107f"}]}, 0x1, [{0x3a, &(0x7f0000000300)=@string={0x3a, 0x3, "128ff56b8c7aa2ed6c7362050d786ebf2cbbecb35a366b58c32482dd2fadd6ad3cee4d08a787c18858c42d4c3473242caab3f2f6b5bdc528"}}]}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000400)={0x14, &(0x7f0000000380)={0x0, 0x6, 0x2b, {0x2b, 0x5, "fa872b7d24bd155b88594f0d92b18a49bb7cff9006daa612dbc430fb42a362e43dc4f67953aed4adf6"}}, &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000600)={0x1c, &(0x7f0000000440)={0x40, 0x18, 0xfd, "ec9ac45ad25b28da16365188b67ac726688b918d2a4063ad6349dc6300c689281eeb57a78d25f94d6e41714dbcc5cd36960c70d6154f38ad34e93bd96ba224d9790bdd12c32ffcfc1d7f6e54d11544cc35e5f6d1d5323f466c1ad0cab1546efc423235c7a2101c9e8b512eb9ad0611afe23d7f6ea5b1ee6eeb52f581c580e6491946afd3b38ce085a74bf508832e77e48fd0d0c84434d65da2959db9c7c98066fd279776ae3bc96a3ca81645b612cfd108302069a69e4767e07fee7d37e03996eaef36e80e067770318488869d4705e9f40e11539ebc044405145958078fe27714354ff929603a969cf6f5cc011951f66f5b430bb65900b0e89dbcc745"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x40}}) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @local=@item_4={0x3, 0x2, 0x0, "53743ff6"}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "00000400"}]}}, 0x0}, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0xa0000) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000100)=""/101) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) (async) syz_usb_connect$cdc_ecm(0x5, 0x76, &(0x7f0000000640)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x1, 0x1, 0x95, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x3, 0x2, 0x6, 0x0, 0x2, {{0x6, 0x24, 0x6, 0x0, 0x0, "ce"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x2, 0x65e5, 0x4}, [@network_terminal={0x7, 0x24, 0xa, 0x5, 0x3, 0x2, 0x5}, @dmm={0x7, 0x24, 0x14, 0x6, 0x7ae}, @acm={0x4}, @obex={0x5, 0x24, 0x15, 0x17a}, @mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x2, 0xb}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x7, 0x1, 0x7}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x8, 0x0, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x4, 0xdc, 0x3}}}}}]}}]}}, &(0x7f0000000b00)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x250, 0x0, 0x8, 0x30, 0x8, 0x8}, 0x2b, &(0x7f0000000700)={0x5, 0xf, 0x2b, 0x3, [@wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x3, 0x8, 0x5, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "ab16a0d1a4836fb72b1d8f2d353f2e1b"}, @ext_cap={0x7, 0x10, 0x2, 0x36, 0x9, 0x8, 0x7ac4}]}, 0x8, [{0x2c, &(0x7f0000000740)=@string={0x2c, 0x3, "82297b7a5af8d5526cc3efa5a290e5aa08d061a27859dde018e7e5b4f8c95ebe7af82f0899339a61beae"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x280a}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x412}}, {0x9c, &(0x7f0000000800)=@string={0x9c, 0x3, "7b450a080d33fd5c6fcb3d39d4da5492997c3ed40369a3c3bf908a43a10471fb8be5980a1b73df650bd2a3151fa761900ab17dc2e0572e775c7a045f11005079c0c25e87e81d0103d776216fa6c94939b8f2582c88fc90bf1b02b629ed044ed42ed3e56e29021d0fe864af29debfcce9ca0d45c4ea9a482cb9c4fb3f3dc22deb600730bfddb472805e6f64e2a96914a69244cbb30a102408e12a"}}, {0xaf, &(0x7f00000008c0)=@string={0xaf, 0x3, "1c4825592b21b6bc14129e3e89ddeb1f379630b82c54a9458759ddf498e615b41481ae9464368537cc577f2b02ca33fb78aee48558755b092d9a298b1c582fab4d6a7a1f74318e1f80d66b0c19771e1c4b31d69508b0edc6147576411b66bc2d919dfbcd517609d34b6df0b7bd1856a6a0a8b5da3984b3006176a1584b07da8750039b2462bd261f8258429e4701aca2337361ec973b2413ee0717092260f308092522797877f2461c25a8e023"}}, {0xfa, &(0x7f0000000980)=@string={0xfa, 0x3, "7b13ccb70ef6c0d03a35ad8b8b2ddc3cb38a1fac7242146c4ce08b9eec72b4fee41d4309c2d80abc2cae244b295e6396c33c478465b48ffb5133eb7318f69f1b2e4147af31a9ab215f707d3d7336b4093c07475c8012e00f3663a46cc17ce80daecb2dd14c0f51f37238c97f691397dfa15389f31a65e3ec216c7afc6738132dfbd53607e5db7710cf82f6cf09e4bf56e3b7b544e8524322b08e7a0504454c1e0ffe8e2c5dacafad0caa3b3469af39aa0623af6bc0326eb91433f695e4a1e530353139374df1f733630591b8e11bed693ae5eabcad2f7bbb6f76aab7cbca2df29381cf6a8e87c1fbb2207f60e891562b3dbfab1233541c87"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0xf8f6}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x280a}}]}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_connect$cdc_ecm(0x1, 0xc4, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb2, 0x1, 0x1, 0x7, 0x80, 0xa1, [{{0x9, 0x4, 0x0, 0x5, 0x3, 0x2, 0x6, 0x0, 0x7, {{0x6, 0x24, 0x6, 0x0, 0x0, '['}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0xaab, 0x200, 0xd1ed, 0xc}, [@acm={0x4, 0x24, 0x2, 0x8}, @mdlm_detail={0x48, 0x24, 0x13, 0x9, "f4bb0bf7c43f6869495946253b75d362e357577d40db5cb8b9336f35223ab3b95111a7d06caac354055e12798493688664f923cb42d361ff1685de88bac131026d14693f"}, @ncm={0x6, 0x24, 0x1a, 0x1, 0x13}, @mdlm={0x15, 0x24, 0x12, 0x3}, @ncm={0x6, 0x24, 0x1a, 0x1, 0x28}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x7f, 0x5, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0xf0, 0x9, 0xb}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x0, 0x5, 0x7}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x2, 0xa, 0x2, 0x40, 0x23}, 0x38, &(0x7f0000000180)={0x5, 0xf, 0x38, 0x4, [@wireless={0xb, 0x10, 0x1, 0xe, 0x4, 0x5, 0x0, 0x2, 0xe}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x8, 0xfe, 0xff00}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x90, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "ca438c2b3e2182706b4942863f81107f"}]}, 0x1, [{0x3a, &(0x7f0000000300)=@string={0x3a, 0x3, "128ff56b8c7aa2ed6c7362050d786ebf2cbbecb35a366b58c32482dd2fadd6ad3cee4d08a787c18858c42d4c3473242caab3f2f6b5bdc528"}}]}) (async) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000400)={0x14, &(0x7f0000000380)={0x0, 0x6, 0x2b, {0x2b, 0x5, "fa872b7d24bd155b88594f0d92b18a49bb7cff9006daa612dbc430fb42a362e43dc4f67953aed4adf6"}}, &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000600)={0x1c, &(0x7f0000000440)={0x40, 0x18, 0xfd, "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"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x40}}) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @local=@item_4={0x3, 0x2, 0x0, "53743ff6"}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "00000400"}]}}, 0x0}, 0x0) (async) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0xa0000) (async) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000100)=""/101) (async) 10.712097869s ago: executing program 0 (id=711): r0 = socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, 0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040800) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002"], 0x310) 10.341974321s ago: executing program 5 (id=712): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009c323f08a5040330b244010203010902120001000200000904"], 0x0) syz_usb_control_io(r0, &(0x7f0000002000)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003160000000403"], 0x0, 0x0, 0x0}, 0x0) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r1, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7f}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@rthdr_2292={{0x18, 0x29, 0x3e, {0x84, 0x0, 0x2, 0x1}}}], 0x18}, 0x24004800) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x54) (async) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_tcp_TLS_TX(r4, 0x11e, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '1X[Z;Iag', "2abec5da054aa16c5886601c9ff606fd9a798e095f7ef9ff690d2a53e87a6250", "10c6c302", "4902000000841d00"}, 0x38) (async) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r3, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001b40)=@newtaction={0x18, 0x30, 0xffff, 0x70bd21, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8805) syz_usb_control_io(r0, 0x0, 0x0) 9.692782631s ago: executing program 0 (id=713): r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000000)={0xa, 0x400000080}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = msgget(0x0, 0x40) msgctl$MSG_INFO(r2, 0xc, &(0x7f00000000c0)=""/173) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x56b, 0xfffffffffffffffc}) fcntl$lock(r3, 0x24, &(0x7f0000000040)={0x2, 0x2, 0x1, 0x7}) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000540)="ad52b6c58292ea54c7c1ef915db7f990c2004c7d155e3fa7f34a9c213d37e710", 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRESHEX=r2, @ANYRESOCT=r0, @ANYRES64=r1, @ANYRES32=r3], 0x20) unshare(0x20000400) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x6, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) lsm_set_self_attr(0x6a, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c2c718cd76ba81b6c9b0000002e40080027bd7000fedbdf2504000000f2a269157cbe01a6cc28f138c57596f033038c88ebec777a44c635f2d3e37e2df4bc3677388c6b0a0312240b0cb79d"], 0x3c}, 0x1, 0x0, 0x0, 0x408008c}, 0x84) readv(r5, 0x0, 0x0) gettid() madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) 7.845587202s ago: executing program 3 (id=715): syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x4, 0x0) clock_settime(0x0, &(0x7f0000000240)) mount$fuse(0x0, 0x0, 0x0, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xffffffff}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x40) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="3107000000040000380000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000"], 0x3c}, 0x1, 0x2}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd7000fbdbdf254c0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000f00a8007365636f6e646e616d65000008000300000000000f00a8007365636f6e646e616d650000e1734124953df00e95dcd297a8254d0ec0b5a5d3548039dc49608c421a813ceaeed584c6b663043df1d9f4ba245e697eda7c18e38402e87b2aa85a93ba66650f1293688fe470304bd729c6a90bff2e8a73b32e17f56cfdae148534b2928677a8"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/mem_sleep', 0x122102, 0x0) sendfile(r7, r7, 0x0, 0x6) 7.381819932s ago: executing program 1 (id=716): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xf4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x5, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x391, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x49, 0x51, 0xff, 0x10, 0x499, 0x1025, 0xa2d0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x37f, 0x1, 0xf1, 0xdf, 0x30, 0x3, [{{0x9, 0x4, 0x3d, 0xf5, 0x9, 0xa6, 0x22, 0x21, 0x3, [], [{{0x9, 0x5, 0x2, 0x0, 0x10, 0x0, 0x1f, 0xb}}, {{0x9, 0x5, 0xa, 0x8, 0x200, 0xc, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0x1}]}}, {{0x9, 0x5, 0x80, 0x4, 0x200, 0x43, 0xe5, 0x7}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0x7, 0xf, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x7a8}, @generic={0x7d, 0x5, "aced3a8779365524fedfddffbe45a4f5597571d3b1b565e7f0f493b013c1e3eee015452a2a64cd3357812fd15608f66174c53e3d11d1491d8c578a1f731f378c5027f4968641e3c8e4ec87d71f52e8a9152f7abad627e7833322fcd3ed90eb1c738555b8cfc24f465b3995d6354a9a0e2bfc937c8710adcb3d1c6c"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x9, 0x87, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc4, 0xeb}, @uac_iso={0x7, 0x25, 0x1, 0xc2, 0x5}]}}, {{0x9, 0x5, 0xa, 0x4, 0x8, 0xa, 0x8, 0x6}}, {{0x9, 0x5, 0x4, 0x8, 0x3ff, 0xd, 0x7f, 0x6, [@generic={0x5f, 0x11, "59e234c461771133893f9d54190e14c018e98213ba28d46c364843d998fc3f53ce8cc66a0c00f19194b4708e4f8b40fa658202b4e7005b6b1f76e5dc05c26ded8645e69b7b9c7434490f8f5ab5d44e7568662bcb48f7ef96326143e928"}]}}, {{0x9, 0x5, 0xc, 0x7, 0x400, 0xd, 0x5, 0x3, [@generic={0x79, 0xb, "7b5e5c39c30ceffde11d0a6572df30c364c220458efb13dc189dcd156ff2e63e0b86a6489eecf008013a9ed89d96bf37ca55110981e70e4cd93fddd6ebc44d9aad970fcad48ab7f3bdb1b0ab10a5b8c79a9629a299dea9ace79f9df354a502f69cff8faec61859e71b36b70293c01f0896fa7d1743f1e3"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x9}]}}, {{0x9, 0x5, 0x80, 0x2, 0x0, 0x85, 0x8, 0x2, [@generic={0xbf, 0x2, "70c503b74bdf8af1df9ecce292192cdeac2b4ba67591bdd251e0c6e927c02a407caedd56a3e8ec180ee1182dc3b14b5d78c6c27e21b3f0015befe09e2e88a6748f5d5193a7d3d137eb915da51b133d1c4d302a43f4d85f474d451b0e88eba66929dc4ea50bf5b31390d881d365dc9da50530fb4e7bed39d17bf1eaeaf1867b299d11d6078dbe2eb7d6e6f12583a091637b23f927f2c51a81ac83ea362f3affc51c783f64ca1e44daa75dbd489d96a366bcf6d080e8aa0163ce65b83b7d"}, @generic={0xe5, 0xb, "ddc8ab835adbb2298ea0d1d0cf96c62affee1ebd29d4f6654d325bf824252b47fefd66bd33efa95ef1087ac7d1ffe42957e50875c5931e5813129616a9654f3c5f5364cc4d3da54bb86ce885b908dc4f471fdec06c6437ee920bbe73619cdaf600d1b837d4e37bd0271c965ff393ba5c6655da9e53c8b4a85f267fa788551c34f602656ac11aabe725783da6f0a03abc24ed31c6bc512db36d68de487f86847576034b78b02bf871e47bcd6f602d4de90ed41a71e8744b9b9032669497c2c32209c3d3f94b5c234a0add43a4fb6e0fca9aae2b98f3f1579762d054c73e433fb5edd9f7"}]}}]}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x0, 0x1, 0x3, 0x7, 0x8, 0xc}, 0x5, &(0x7f00000004c0)={0x5, 0xf, 0x5}, 0x7, [{0xa3, &(0x7f0000000500)=@string={0xa3, 0x3, "94bb69350a87c3cf47676b66f9395f08a99b055dc7c74b0a4f29f7f8b3d3f16058e581f4eaf13d1e101110c24e16281a3bf7120897c1f5043bbe2c8c91fa23997be3616a51b031905a789bf96b1642b0d52e6150d03b30c43abe495f1e55620938ffee24cf1b85db2758de7e28bd3b56833939f84a64b50bec8f46a1aba65bd8ab6620fc52aa446374e802aaa8ec1a4716cdd0939fe347e04b150a9326fc153348"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x83c}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x4c0a}}, {0xda, &(0x7f0000000640)=@string={0xda, 0x3, "fde6eeab2d5616e377120b1ec2daea8aabf17f6da1f58f15e39cd199bcf5980c6ad57e1e84f18138181534273cb558daeb4d8b4a1a1e482a7eb6ca9f265db6627282d95b0c2c6082c63ba0343f27f73315a26b14e253a0812173e16ba25a5b8e285433c28a658eebff7a89551ef093f6024ad06ca1375d7df1363b00423f3c8887e184cd08e04336c0297e095ccb4414ec2bd33ca2c5fd31d8eb45ff3d3d1c7b3fd1622a4832c0951631ce935835473688631f33e36e8a6654606ff632ddce2d0c8e55ee29de625215215ff8ffcc16a378c8a10238acf0e7"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x21, &(0x7f0000000780)=@string={0x21, 0x3, "faa20b87f8343925d63a34ca8d76529ebe76a76d1cfde7ec80290fba6a7ad5"}}, {0x87, &(0x7f00000007c0)=@string={0x87, 0x3, "12378bb0c436c33ebf972465953382734ad9797875e0dd85d1b0232e265d42304b3ad0ce98560e234c79d3b4c69d0b76f6ae1b60acd867adc9be661afaaa476c323853d03c889ba952f2a4e96df3cef0828c890e9a7f9b4a423ef3e60f1051636b1bd09f795e94b1f2f0f8a8fa00cea444d8d971239e70ef3a192388a00fc0c05f34008316"}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xb, {[@main=@item_012={0x2, 0x0, 0xa, 'K2'}, @local=@item_4={0x3, 0x2, 0x2, "ada07e5a"}, @local=@item_012={0x1, 0x2, 0x2, "91"}, @local=@item_012={0x0, 0x2, 0x9}]}}, 0x0}, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000900), 0xa0082, 0x0) 6.616284471s ago: executing program 3 (id=717): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffdfc}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340), 0x81040, &(0x7f00000003c0)={[], [{@flag='silent'}, {@fsname={'fsname', 0x3d, 'seclabel'}}, {@audit}]}) r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_OPS_LEN={0x0, 0x3, 0x5}, @TCA_ACT_BPF_NAME={0x0, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0x0, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x0, 0x3, 0x9}, @TCA_ACT_BPF_FD={0x0, 0x5, r2}]}, {0x4}, {0xffffffffffffffae}, {0xc}}}]}]}, 0x64}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x0, 0x8000, 0x40024e}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r8 = eventfd2(0xff, 0x80001) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000) socket$kcm(0x29, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, &(0x7f0000000300)=r8, 0x1) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x0, 0x0, 0x0, 0x2}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0xc0, 0x0, 0x0, 0x4) io_uring_enter(r5, 0x627, 0x4c1, 0x43, 0x0, 0x0) 6.573880704s ago: executing program 5 (id=718): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x4e) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef", 0x6f}], 0x3, &(0x7f0000000440)=[@assoc={0x18, 0x117, 0x4, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$qrtr(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f00000002c0)=""/8, 0x8}, {&(0x7f0000000700)=""/195, 0xc3}], 0x2, 0x0, 0x0, 0x10000}, 0x38, 0x10020) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r3 = openat$smackfs_access(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/access\x00', 0x2, 0x0) read$smackfs_access(r3, &(0x7f00000000c0), 0x14) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) recvmmsg(r4, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=""/5, 0x5}], 0x1}, 0x8}], 0x1, 0x2, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000001c0)={r6, 0x1, 0x4, @multicast}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x0, &(0x7f000063c000/0x3000)=nil) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 6.129215772s ago: executing program 3 (id=720): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [], {0x14}}, 0x28}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0xcd, &(0x7f0000000040), 0x5}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) dup(0xffffffffffffffff) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_io_uring_setup(0x8d6, &(0x7f0000000240)={0x0, 0x2, 0x1000, 0x6, 0x279}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) io_uring_enter(r4, 0x47ba, 0x3e80, 0x400000000000000, 0x0, 0x0) 4.095444903s ago: executing program 4 (id=722): r0 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x0, 0x2, 0x2000000}) 3.907075s ago: executing program 5 (id=723): r0 = socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, 0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040800) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002"], 0x310) 3.499511279s ago: executing program 4 (id=724): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmsg$nl_route_sched(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x4c045}, 0x20000004) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) 2.882074086s ago: executing program 5 (id=725): mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) ioperm(0x0, 0x2, 0x7e) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRESHEX=0x0, @ANYRES8=r0], 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x80000000}, {0x6, 0xfd, 0x0, 0x7ffffcb9}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x281}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) socket(0x1a, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000004140)=[{{&(0x7f0000000300)=@can, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000380)=""/177, 0xb1}, {&(0x7f0000000480)=""/134, 0x86}, {&(0x7f00000000c0)=""/17, 0x11}, {&(0x7f0000000540)=""/92, 0x5c}, {&(0x7f00000005c0)=""/4096, 0x1000}], 0x5, &(0x7f0000001640)=""/190, 0xbe}, 0x1be}, {{&(0x7f0000001700)=@l2, 0x80, &(0x7f0000002900)=[{&(0x7f0000001780)=""/196, 0xc4}, {&(0x7f0000000280)=""/28, 0x1c}, {&(0x7f0000004300)=""/70, 0x46}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/16, 0x10}], 0x5, &(0x7f0000002b00)=""/223, 0xdf}, 0xc7}, {{&(0x7f0000002a80)=@tipc=@name, 0x80, &(0x7f0000002c00), 0x0, &(0x7f0000002c40)=""/247, 0xf7}, 0x7fffffff}, {{&(0x7f0000002d40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000003280)=[{&(0x7f0000002dc0)=""/245, 0xf5}, {&(0x7f0000002f40)=""/226, 0xe2}, {&(0x7f0000003040)=""/152, 0x98}, {&(0x7f0000003100)=""/141, 0x8d}, {&(0x7f00000031c0)=""/132, 0x84}], 0x5, &(0x7f0000003300)=""/69, 0x45}, 0xe}, {{&(0x7f0000003380)=@l2tp={0x2, 0x0, @private}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000003940)=""/95, 0x5f}], 0x1, &(0x7f0000003500)=""/24, 0x18}, 0xfffffff7}, {{0x0, 0x0, &(0x7f0000003a80)=[{&(0x7f0000003540)=""/214, 0xd6}, {&(0x7f0000003640)=""/136, 0x88}, {&(0x7f0000003700)=""/123, 0x7b}, {&(0x7f0000003780)=""/201, 0xc9}, {&(0x7f0000003880)=""/145, 0x91}, {&(0x7f0000004380)=""/233, 0xe9}, {&(0x7f0000003a40)=""/37, 0x25}], 0x7, &(0x7f0000003b00)=""/100, 0x64}, 0x4}, {{&(0x7f0000003b80)=@tipc=@name, 0x80, &(0x7f0000004080), 0x0, &(0x7f0000004100)=""/52, 0x34}, 0x2}], 0x7, 0x7fb10727dda9, 0x0) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r0, 0xc) 2.705946994s ago: executing program 4 (id=726): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000340)="18", 0x1}], 0x1}}], 0x1, 0x80) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x7, 0x10, 0x4, 0xdab}, &(0x7f00000000c0)=0x18) unshare(0x40000000) 2.705168827s ago: executing program 1 (id=727): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB, @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4c094) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001780)=@newtfilter={0x7fc, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x7cc, 0x2, [@TCA_CGROUP_POLICE={0x1c, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}]}, @TCA_CGROUP_ACT={0x554, 0x1, [@m_skbmod={0x60, 0xa, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}]}, {0x2c, 0x6, "9187791148829de807a1b5284528487b5dc5cd357679eaad93f64750cb8ab9f31b8b051b02a51086"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_vlan={0x108, 0x16, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3, 0x9, 0x2, 0x185f, 0xfffffffc}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xb17}]}, {0xb7, 0x6, "d6f09d659356020ab31c5b18d89ae3da37ca4673df6cfc02694f415aad1cf2ff8ee01473e49626d7f32dddf1c747d2b9b7d1c23a273813235564bdc6dbf1df0b1e34ec8d12cb54a248a2db8c534d1df3118dbe2740dbc8fc6405419bfa53cad1dcb0679b625178eda9c0f1627bcf311230e7cd0ecd51f4a67088ca41724a8f6460b7aef5825ea688a094ed5c2a83c7917098305c850b85c78d695883bde5a0b83839673ef815ebe9028fb42084c497c9055775"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x11c, 0x1c, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80, 0x10001, 0x6, 0x1, 0x4}, 0x80}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x1ff, 0xffffffffffffffff, 0x2, 0xd8}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x2289, 0x3, 0x1, 0x7}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1a25a214, 0x1, 0x20000000, 0x5, 0xc269}, 0x7fff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x4, 0x6, 0x5, 0x6}, 0x100}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3ff, 0x7, 0x20000003, 0x0, 0x7}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xb, 0x6d5f, 0x3, 0xffff, 0xd}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x3, 0xffffffffffffffff, 0xc, 0x400}, 0x1ff}}]}, {0x9, 0x6, "db1d99a56d"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mirred={0x168, 0x17, 0x0, 0x0, {{0xb}, {0x124, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1000, 0x4, 0x5, 0x0, 0x56}, 0x4, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x4, 0x0, 0xc9e2, 0x7ff}, 0x1, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x6, 0x4, 0xffffffc0, 0x6}, 0x4, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x3, 0x8, 0x7, 0x883}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x0, 0x5, 0x0, 0x6}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10001, 0x7, 0x7, 0x84, 0xb}, 0x2, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0xcb, 0x0, 0xfffffff5, 0x2}, 0x3, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffe, 0x4, 0x20000000, 0x80}, 0x1, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x68c7, 0x7, 0xfffffffe, 0x48}, 0x1}}]}, {0x1b, 0x6, "1d5c66fbe537d7c65c6d5878c1f263b74507fc4c363a3e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_csum={0x164, 0x16, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0xfffffffa, 0x2, 0x7, 0x1}, 0x59}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffffff, 0x9, 0x5, 0x3}, 0x2e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x22e, 0x1, 0x0, 0x2, 0x5}, 0x56}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x4, 0x7, 0x4, 0x2}, 0x59}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x4, 0x7, 0xfffffffc, 0xe11}, 0x6b}}]}, {0xab, 0x6, "07f467a1fb02ad0883fe73e16c9972deecfb3b70ddf9a059f384ffb1154d15bcc5ad0b28bf87d630611dca9d17f6aea397cffc5c0ee7c806aede1f5d68847e9cde10388901814c43298ac72878c7c5d7fee452f017300a0fbd474fbd42b6b1cd4b78bfefbda1f34f2861a9ee55c2de840f6010f26fe1335aefa84b99b502e29e9949057531c0361c71a3f60f905f7ecf3f20ebac96c9658f50aec8b0ea7c0e5f825bab706c18b0"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_CGROUP_ACT={0x1a0, 0x1, [@m_nat={0x54, 0xa, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x834, 0x4, 0x10000, 0x4}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x148, 0x3, 0x0, 0x0, {{0xb}, {0x7c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xe2}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0x8001, 0x0, 0x8e92, 0x7}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x6, 0x0, 0x7, 0x5, 0x6}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x800}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x1, 0x10000000, 0x58ac3452, 0x8000}}]}, {0xa2, 0x6, "88b36933be03864764576d39d91ff35fd30d3fcc62b76a98a89b4176b7ad12df9da499447d55f8ab2c290b5415688987c22b0122f216dde3f95c14735448e131f82acf6d031638576051c96fe8260cd0ecbba8ae1ca7ccbab95acafcf6e85d50127980de687687583b57d397a4617d0ca96faea5a15300f74dad6dae1a5e426be60c499d53be8b9fde6d056fc6a33dd9e1c7902048e94b4ba510c8079201"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_CGROUP_ACT={0xb4, 0x1, [@m_xt={0xb0, 0xc, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0x6e, 0x6, "ad0f6b82c4ebb8da318e2cbad3717df27b0c637c0f011b132d11d58c3a10889d2c61160a7f65ab0e0541d64a06c81c7a321563f764e6e7d81919a3614631acffa36976ad792876f689dfaa8e90d3065189a9c019c1e3c8c6387cf51475641e7f834636ba5ca24ed5685a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_CGROUP_EMATCHES={0x4}]}}]}, 0x7fc}, 0x1, 0x0, 0x0, 0xa1}, 0x404c0c0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0x1}}}, 0x24}}, 0x10) 2.607539142s ago: executing program 3 (id=728): r0 = io_uring_setup(0x192, &(0x7f0000000300)={0x0, 0x4178, 0x400, 0x8000002, 0x3d7}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) recvfrom(r2, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x34, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x34}, 0x1, 0x0, 0x0, 0x40840}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x30, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, 0x0, 0x8, 0x70bd30, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xa2, 0x99, {0x1, 0x10099}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4020}, 0x8040) close_range(r0, 0xffffffffffffffff, 0x0) 2.143573777s ago: executing program 3 (id=729): socket(0xa, 0x3, 0x3a) openat$adsp1(0xffffffffffffff9c, 0x0, 0x1a3840, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semtimedop(r1, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r1, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x80) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, 0x0, 0xc050) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x48, 0x0, &(0x7f00000002c0)=[@enter_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000001ac0)="d4"}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x400, @broadcast}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 2.111536576s ago: executing program 1 (id=730): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x7ff}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x9}]}}]}, 0x44}}, 0x4000010) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="7c0000002b000b0000000000000000000400000004000300620001"], 0x7c}}, 0xc00) r6 = syz_open_dev$tty1(0xc, 0x4, 0x3) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) chdir(&(0x7f00000003c0)='./bus\x00') io_uring_setup(0x6f94, &(0x7f0000001240)={0x0, 0xfffffffd, 0x0, 0x2}) socket$tipc(0x1e, 0x2, 0x0) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r9, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) 1.952343538s ago: executing program 0 (id=731): r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x1, 0xb51b, 0x654, 0xfffff04b, 0x0, 0x8}) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) (async) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000304000000000000000100000300", @ANYRES32=0x0, @ANYBLOB="000000004000000014001280090001007665746800000000", @ANYRES32=0x0, @ANYBLOB="0c001a"], 0x48}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@ipv4_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@RTA_FLOW={0x8, 0x4, 0x9}, @RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x2c}}, 0x8040) 1.705772924s ago: executing program 4 (id=732): openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x20, 0x1}, 0x50) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000006c0)={r1, 0x58, &(0x7f0000000100)}, 0x87) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000080}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xb) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000140)={r5, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000002c0)={r5, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f00000005c0)={r5, 0x1, 0x6, @broadcast}, 0x10) write$UHID_INPUT(r3, &(0x7f0000002080)={0xfc, {"a2336848149e516d4b5e071887f70e09d038e7ff7fc6e5539b0d500a8b089b3f383563030890e0879b0a71c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b3e31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9903f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928d28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f2730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b81305c038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849cd9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484539ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1f93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb8843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b2804563407308c58c89d9e99c81769177e6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463373b4b87c9050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e080000007ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e3933ed07c2b8081c128ad2706f48261ff07000000000000613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59500000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r6, 0xc008561c, &(0x7f0000000000)={0x980900, 0x7, @value=0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x60}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.523685923s ago: executing program 0 (id=733): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0x40086e81, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x43, 0x0, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f00000012c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001280)={&(0x7f0000001080)={0x1e0, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r8, 0x6, 0x1d, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000280)="f20f22454e0fc76d00410f01c9440f20c0350c000000440f22c0c4e291b7a70c00000066baa000ec410f01c9f2466d43d86b2b66baf80cb83162fa89ef66bafc0cb070ee", 0x44}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100003002abd70000000000000000000", @ANYRES32=r5, @ANYRES8=r2], 0x48}, 0x1, 0x2}, 0x20000080) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101", @ANYRESHEX=0x0, @ANYRES64=r3], 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x28801, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) close(r11) ioctl$KVM_CHECK_EXTENSION(r10, 0xae01, 0x1) syz_kvm_setup_syzos_vm$x86(r11, &(0x7f0000bff000/0x400000)=nil) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r11, 0x4020aed2, &(0x7f0000000040)={0x0, 0x399000, 0x8}) 1.052074205s ago: executing program 1 (id=734): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r2 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000080)={0x0, 0x2, 0x2000000}) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x90) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0xfffffffd, 0x4}, 0x8) 205.915915ms ago: executing program 4 (id=735): r0 = socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, 0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040800) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002"], 0x310) 108.966634ms ago: executing program 1 (id=736): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ftruncate(r4, 0x5) sendfile(r3, r4, 0x0, 0x7ffff000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000304000000000000000100000300", @ANYRES32=0x0, @ANYBLOB="000000004000000014001280090001007665746800000000", @ANYRES32=0x0, @ANYRES8=r5], 0x48}}, 0x0) 0s ago: executing program 4 (id=737): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) getsockopt$ax25_int(r0, 0x101, 0x1, 0x0, 0x0) r1 = fcntl$getown(r0, 0x9) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0xa, 0x240a02) r3 = socket$inet(0x2, 0x3, 0x8) r4 = socket$inet(0x2, 0x3, 0x6) r5 = dup3(r3, r4, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000400", @ANYRES16=r7, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r8, @ANYBLOB="0c009900f8ffffff01000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$inet_int(r5, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_EDITDEST(r9, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x0, 0x8001, 0x1}}, 0x44) ioctl$I2C_RETRIES(r2, 0x701, 0x4) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000108117980800000000000109022400010000000009040000020308000009210000010122290a09058103", @ANYRESOCT], 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0xfefffffa, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000060a0b040000000000000000020000001c0004801800018007000100637400000c00028008000240000000060900010073797a30000000000900020073797a32000000004c85b3871100010000000000000000000000000a"], 0x70}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r11, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r12, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r11, &(0x7f00000000c0), 0x10106, 0x2, 0x0) kernel console output (not intermixed with test programs): 294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6632 comm="syz.1.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f8d9bb8eb69 code=0x7ffc0000 [ 151.100184][ T6641] dvmrp0: entered allmulticast mode [ 151.392414][ T6645] xt_nat: multiple ranges no longer supported [ 152.855752][ T6673] loop2: detected capacity change from 0 to 7 [ 152.866002][ T6673] loop2: p1 [ 152.869335][ T6673] loop2: partition table partially beyond EOD, truncated [ 152.880332][ T6673] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 153.597237][ T5928] usb 4-1: 0:2 : does not exist [ 153.643089][ T5928] usb 4-1: USB disconnect, device number 4 [ 154.792160][ T6690] ceph: No mds server is up or the cluster is laggy [ 154.860039][ T43] libceph: connect (1)[c::]:6789 error -101 [ 154.922178][ T1224] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 155.072970][ T30] kauditd_printk_skb: 598 callbacks suppressed [ 155.072991][ T30] audit: type=1400 audit(1754255357.909:612): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=6683 comm="syz.0.199" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 155.114690][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 155.176202][ T6696] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 155.192607][ T6696] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.201851][ T6696] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.324484][ T30] audit: type=1400 audit(1754255357.939:613): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=6687 comm="syz.3.201" name="file0" dev="tmpfs" ino=218 [ 155.346853][ T1224] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 155.356076][ T1224] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.368065][ T1224] usb 1-1: config 0 descriptor?? [ 155.373172][ T30] audit: type=1400 audit(1754255357.939:614): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6687 comm="syz.3.201" name="36" dev="tmpfs" ino=213 [ 155.392124][ T30] audit: type=1400 audit(1754255357.939:615): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6687 comm="syz.3.201" name="36" dev="tmpfs" ino=213 [ 155.414937][ T1224] cp210x 1-1:0.0: cp210x converter detected [ 155.493224][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 155.500133][ C1] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 155.507905][ C1] audit: backlog limit exceeded [ 155.513799][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 155.520572][ C1] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 155.528247][ C1] audit: backlog limit exceeded [ 155.872643][ T1224] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 156.284566][ T1224] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -121 [ 156.302064][ T1224] cp210x 1-1:0.0: GPIO initialisation failed: -121 [ 156.324484][ T1224] usb 1-1: cp210x converter now attached to ttyUSB0 [ 156.397324][ T6709] hfsplus: unable to find HFS+ superblock [ 156.490034][ T1224] usb 1-1: USB disconnect, device number 5 [ 156.528947][ T1224] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 156.560359][ T1224] cp210x 1-1:0.0: device disconnected [ 156.672061][ T5929] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 157.724195][ T5929] usb 2-1: Using ep0 maxpacket: 8 [ 157.739931][ T5929] usb 2-1: config 251 has an invalid interface number: 243 but max is 0 [ 157.754538][ T5929] usb 2-1: config 251 has no interface number 0 [ 157.765086][ T5929] usb 2-1: config 251 interface 243 has no altsetting 0 [ 157.787348][ T5929] usb 2-1: New USB device found, idVendor=0ab4, idProduct=0014, bcdDevice=28.9a [ 157.812566][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.832474][ T5929] usb 2-1: Product: syz [ 157.836749][ T5929] usb 2-1: Manufacturer: syz [ 157.849871][ T5929] usb 2-1: SerialNumber: syz [ 158.089155][ T6748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.232999][ T6748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.616096][ T5929] esd_usb 2-1:251.243: sending version message failed [ 158.651507][ T5929] esd_usb 2-1:251.243: probe with driver esd_usb failed with error -22 [ 158.760365][ T5929] usb 2-1: USB disconnect, device number 5 [ 158.886251][ T6752] netlink: 32 bytes leftover after parsing attributes in process `syz.3.218'. [ 158.916334][ T6752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.218'. [ 158.998020][ T5928] libceph: connect (1)[c::]:6789 error -101 [ 159.013829][ T5928] libceph: mon0 (1)[c::]:6789 connect error [ 159.273605][ T6756] ceph: No mds server is up or the cluster is laggy [ 159.311222][ T5928] libceph: connect (1)[c::]:6789 error -101 [ 159.343856][ T5928] libceph: mon0 (1)[c::]:6789 connect error [ 159.974529][ T6775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.223'. [ 160.012194][ T6775] netlink: 24 bytes leftover after parsing attributes in process `syz.1.223'. [ 160.098069][ T30] kauditd_printk_skb: 2722 callbacks suppressed [ 160.098090][ T30] audit: type=1400 audit(1754255362.929:3275): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6777 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 160.214103][ T30] audit: type=1400 audit(1754255362.929:3276): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6777 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 160.347257][ T5849] audit: audit_backlog=65 > audit_backlog_limit=64 [ 160.373414][ T30] audit: type=1400 audit(1754255362.929:3277): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6777 comm="syz-executor" name="44" dev="tmpfs" ino=273 [ 160.402050][ T5849] audit: audit_lost=24 audit_rate_limit=0 audit_backlog_limit=64 [ 160.420085][ T5849] audit: backlog limit exceeded [ 160.425203][ T5849] audit: audit_backlog=65 > audit_backlog_limit=64 [ 160.431749][ T5849] audit: audit_lost=25 audit_rate_limit=0 audit_backlog_limit=64 [ 160.466764][ T5849] audit: backlog limit exceeded [ 160.483115][ T5849] audit: audit_backlog=65 > audit_backlog_limit=64 [ 160.680323][ T6784] overlayfs: failed to clone upperpath [ 166.100686][ T6076] audit_log_start: 701 callbacks suppressed [ 166.100705][ T6076] audit: audit_backlog=65 > audit_backlog_limit=64 [ 166.113980][ T30] audit: type=1400 audit(1754255368.769:3959): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5839 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 166.120598][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 166.135054][ T5849] audit: audit_backlog=65 > audit_backlog_limit=64 [ 166.139919][ C1] audit: audit_lost=33 audit_rate_limit=0 audit_backlog_limit=64 [ 166.154259][ C1] audit: backlog limit exceeded [ 166.159583][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 166.165871][ T5839] audit: audit_backlog=65 > audit_backlog_limit=64 [ 166.166142][ C1] audit: audit_lost=34 audit_rate_limit=0 audit_backlog_limit=64 [ 166.180406][ C1] audit: backlog limit exceeded [ 166.397346][ T6807] hfsplus: unable to find HFS+ superblock [ 166.415646][ T6808] netlink: 32 bytes leftover after parsing attributes in process `syz.1.232'. [ 166.455210][ T6808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.232'. [ 166.666960][ T6811] loop2: detected capacity change from 0 to 7 [ 166.701820][ T6811] loop2: p1 [ 166.705727][ T6811] loop2: partition table partially beyond EOD, truncated [ 166.713430][ T6811] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 167.391987][ T1224] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 167.563189][ T1224] usb 6-1: device descriptor read/64, error -71 [ 167.876964][ T1224] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 168.723661][ T1224] usb 6-1: device descriptor read/64, error -71 [ 168.832299][ T1224] usb usb6-port1: attempt power cycle [ 169.182279][ T1224] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 169.234185][ T1224] usb 6-1: device descriptor read/8, error -71 [ 169.242250][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 169.435655][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 169.471805][ T24] usb 2-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=10.ae [ 169.472022][ T1224] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 169.498054][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.517965][ T24] usb 2-1: Product: syz [ 169.526836][ T24] usb 2-1: Manufacturer: syz [ 169.535982][ T1224] usb 6-1: device descriptor read/8, error -71 [ 169.537213][ T24] usb 2-1: SerialNumber: syz [ 169.567764][ T24] usb 2-1: config 0 descriptor?? [ 169.622250][ T24] ums_eneub6250 2-1:0.0: USB Mass Storage device detected [ 169.695042][ T1224] usb usb6-port1: unable to enumerate USB device [ 170.682432][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 170.882451][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 170.896746][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.935518][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 170.993773][ T10] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 171.049426][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.504478][ T30] kauditd_printk_skb: 3511 callbacks suppressed [ 171.504497][ T30] audit: type=1400 audit(1754255374.339:6919): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26 comm="kdevtmpfs" name="/" dev="devtmpfs" ino=1 [ 171.530729][ T10] usb 1-1: config 0 descriptor?? [ 171.593734][ T30] audit: type=1400 audit(1754255374.339:6920): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26 comm="kdevtmpfs" name="bus" dev="devtmpfs" ino=718 [ 171.620958][ T30] audit: type=1400 audit(1754255374.339:6921): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26 comm="kdevtmpfs" name="usb" dev="devtmpfs" ino=719 [ 171.622803][ T6076] audit: audit_backlog=65 > audit_backlog_limit=64 [ 171.639765][ T30] audit: type=1400 audit(1754255374.339:6922): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26 comm="kdevtmpfs" name="001" dev="devtmpfs" ino=720 [ 171.679764][ T6076] audit: audit_lost=220 audit_rate_limit=0 audit_backlog_limit=64 [ 171.696500][ T6076] audit: backlog limit exceeded [ 171.708273][ T6076] audit: audit_backlog=65 > audit_backlog_limit=64 [ 171.708780][ T30] audit: type=1400 audit(1754255374.339:6923): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=26 comm="kdevtmpfs" name="001" dev="devtmpfs" ino=720 [ 171.719595][ T6076] audit: audit_lost=221 audit_rate_limit=0 audit_backlog_limit=64 [ 171.900988][ T24] usb 2-1: USB disconnect, device number 6 [ 172.095247][ T10] nintendo 0003:057E:2019.0001: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.0-1/input0 [ 172.587921][ T10] nintendo 0003:057E:2019.0001: Failed to get joycon info; ret=-71 [ 172.617245][ T10] nintendo 0003:057E:2019.0001: Failed to retrieve controller info; ret=-71 [ 172.649458][ T10] nintendo 0003:057E:2019.0001: Failed to initialize controller; ret=-71 [ 172.709412][ T10] nintendo 0003:057E:2019.0001: probe - fail = -71 [ 172.764222][ T10] nintendo 0003:057E:2019.0001: probe with driver nintendo failed with error -71 [ 172.836691][ T10] usb 1-1: USB disconnect, device number 6 [ 174.271992][ T5914] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 175.152359][ T6916] validate_nla: 37 callbacks suppressed [ 175.152381][ T6916] netlink: 'syz.3.262': attribute type 1 has an invalid length. [ 175.321087][ T5914] usb 6-1: device descriptor read/all, error -71 [ 176.532112][ T30] kauditd_printk_skb: 1192 callbacks suppressed [ 176.532136][ T30] audit: type=1326 audit(1754255379.179:8067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6915 comm="syz.3.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8478eb69 code=0x7ffc0000 [ 176.642329][ T6919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.262'. [ 176.651281][ T6919] openvswitch: netlink: Flow actions attr not present in new flow. [ 176.799014][ T5853] audit: audit_backlog=65 > audit_backlog_limit=64 [ 176.806745][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 176.813474][ C1] audit: audit_lost=238 audit_rate_limit=0 audit_backlog_limit=64 [ 176.821380][ C1] audit: backlog limit exceeded [ 176.827131][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 176.833728][ C1] audit: audit_lost=239 audit_rate_limit=0 audit_backlog_limit=64 [ 176.841595][ C1] audit: backlog limit exceeded [ 176.852122][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 176.858685][ C1] audit: audit_lost=240 audit_rate_limit=0 audit_backlog_limit=64 [ 178.162389][ T6940] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 178.665660][ T6928] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.674537][ T6928] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.683442][ T6928] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.692196][ T6928] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.877823][ T6942] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.886819][ T6942] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.963722][ T6947] overlayfs: overlapping lowerdir path [ 179.096547][ T6948] overlayfs: conflicting lowerdir path [ 179.658378][ T6942] bridge0: entered allmulticast mode [ 179.768545][ T6935] bridge_slave_1: left allmulticast mode [ 179.774589][ T6935] bridge_slave_1: left promiscuous mode [ 179.781390][ T6935] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.796163][ T6935] bridge_slave_0: left allmulticast mode [ 179.801852][ T6935] bridge_slave_0: left promiscuous mode [ 179.808235][ T6935] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.078240][ T6960] netlink: 32 bytes leftover after parsing attributes in process `syz.1.272'. [ 181.109291][ T6960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.272'. [ 181.542790][ T30] kauditd_printk_skb: 1758 callbacks suppressed [ 181.542811][ T30] audit: type=1400 audit(1754255384.379:9403): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5840 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 181.592143][ T30] audit: type=1400 audit(1754255384.379:9404): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5840 comm="syz-executor" name="51" dev="tmpfs" ino=309 [ 181.619806][ T30] audit: type=1400 audit(1754255384.379:9405): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5840 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 182.428867][ T30] audit: type=1400 audit(1754255384.379:9406): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5840 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 182.494356][ T5839] audit: audit_backlog=65 > audit_backlog_limit=64 [ 182.501006][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 182.501023][ C1] audit: audit_lost=382 audit_rate_limit=0 audit_backlog_limit=64 [ 182.501032][ C1] audit: backlog limit exceeded [ 182.516419][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 182.516433][ C1] audit: audit_lost=383 audit_rate_limit=0 audit_backlog_limit=64 [ 183.072063][ T6978] input: syz1 as /devices/virtual/input/input9 [ 183.101344][ T6983] dvmrp0: left allmulticast mode [ 183.432025][ T1215] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 183.595662][ T1215] usb 1-1: Using ep0 maxpacket: 8 [ 183.631988][ T1215] usb 1-1: config index 0 descriptor too short (expected 29970, got 18) [ 183.666355][ T1215] usb 1-1: config 0 has too many interfaces: 168, using maximum allowed: 32 [ 183.728020][ T1215] usb 1-1: config 0 has an invalid interface number: 187 but max is 167 [ 183.778863][ T1215] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 168 [ 183.845739][ T1215] usb 1-1: config 0 has no interface number 0 [ 183.884061][ T1215] usb 1-1: config 0 interface 187 altsetting 172 has 0 endpoint descriptors, different from the interface descriptor's value: 20 [ 183.992713][ T1215] usb 1-1: config 0 interface 187 has no altsetting 0 [ 184.022653][ T1215] usb 1-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a [ 184.055168][ T1215] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.085425][ T1215] usb 1-1: Product: syz [ 184.089656][ T1215] usb 1-1: Manufacturer: syz [ 184.135577][ T1215] usb 1-1: SerialNumber: syz [ 184.149543][ T1215] usb 1-1: config 0 descriptor?? [ 184.404226][ T6984] tipc: Started in network mode [ 184.409194][ T6984] tipc: Node identity ac14140f, cluster identity 4711 [ 184.433644][ T6984] tipc: New replicast peer: 255.255.255.255 [ 184.450971][ T6984] tipc: Enabled bearer , priority 10 [ 184.463150][ T5953] usb 1-1: USB disconnect, device number 7 [ 184.552345][ T1215] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 184.623019][ T7001] netlink: 32 bytes leftover after parsing attributes in process `syz.1.285'. [ 184.649778][ T7001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.285'. [ 184.712189][ T1215] usb 4-1: Using ep0 maxpacket: 8 [ 184.722426][ T1215] usb 4-1: config 7 has an invalid interface number: 80 but max is 0 [ 184.740902][ T1215] usb 4-1: config 7 has no interface number 0 [ 184.762209][ T1215] usb 4-1: config 7 interface 80 altsetting 1 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 184.792029][ T1215] usb 4-1: config 7 interface 80 altsetting 1 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 184.823115][ T1215] usb 4-1: config 7 interface 80 altsetting 1 has a duplicate endpoint with address 0xF, skipping [ 184.847874][ T1215] usb 4-1: config 7 interface 80 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 184.904688][ T1215] usb 4-1: config 7 interface 80 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 184.939631][ T1215] usb 4-1: config 7 interface 80 has no altsetting 0 [ 184.966142][ T1215] usb 4-1: New USB device found, idVendor=157e, idProduct=3204, bcdDevice= e.bb [ 184.981272][ T1215] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.001717][ T1215] usb 4-1: Product: syz [ 185.011825][ T1215] usb 4-1: Manufacturer: ᴅ蹮钫碽á咣ⷼ埃᩽㴀幣ã¨äµ¿æ¨¸ã¼´í—›å•¦ï®Šâº¡ê‘¿åŽ®ï¶´î›¬ìµ‚ﬓ潈댃뀄歺簈㕲가쾞ﭙ痛㕣æ²ë“ⷩ䃴ܡ鹤牔ãžé™Œî–†ì€•ì¸‡é²§ê†®æ”±é„ºã᫘ᅓ躚Ｊ뛂é—è«»ä‹íŽã£‰â‘ë°¨é³ãŠŠîŒ ã¶·ïŸµç‰‚äŒâ¬¯á’›ë¡Žç™Žï²µâ€¸è¤ïŸ›å–•å¬è–Šä¹¼êµë‹¼è⾛㻞앇》è‘寻 [ 185.103688][ T1215] usb 4-1: SerialNumber: syz [ 185.900000][ T5953] tipc: Node number set to 2886997007 [ 185.942153][ T1215] usb 4-1: USB disconnect, device number 5 [ 186.588015][ T5849] audit_log_start: 2218 callbacks suppressed [ 186.588033][ T5849] audit: audit_backlog=65 > audit_backlog_limit=64 [ 186.588070][ T5853] audit: audit_backlog=65 > audit_backlog_limit=64 [ 186.596957][ T30] audit: type=1400 audit(1754255389.359:11502): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=30 comm="kauditd" saddr=10.128.0.169 src=30008 daddr=10.128.0.126 dest=52354 netif=eth0 [ 186.601397][ T7024] audit: audit_backlog=65 > audit_backlog_limit=64 [ 186.636455][ T5849] audit: audit_lost=425 audit_rate_limit=0 audit_backlog_limit=64 [ 186.646556][ T5853] audit: audit_lost=426 audit_rate_limit=0 audit_backlog_limit=64 [ 186.646606][ T30] audit: type=1400 audit(1754255389.359:11503): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=30 comm="kauditd" saddr=10.128.0.169 src=30008 daddr=10.128.0.126 dest=52354 netif=eth0 [ 186.689030][ T7025] audit: audit_backlog=65 > audit_backlog_limit=64 [ 186.696024][ T7025] audit: audit_lost=427 audit_rate_limit=0 audit_backlog_limit=64 [ 186.711995][ T7025] audit: backlog limit exceeded [ 188.626510][ T7043] tipc: Enabling of bearer rejected, failed to enable media [ 190.017812][ T43] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 190.342108][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 190.389549][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.490222][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 190.540427][ T43] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 190.592330][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.621030][ T43] usb 4-1: config 0 descriptor?? [ 191.255290][ T43] shield 0003:0955:7214.0002: item fetching failed at offset 0/1 [ 191.403754][ T7077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.422521][ T7077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.620592][ T30] kauditd_printk_skb: 2092 callbacks suppressed [ 191.620612][ T30] audit: type=1400 audit(1754255394.449:13280): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7078 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 191.637037][ T43] shield 0003:0955:7214.0002: Parse failed [ 191.653508][ T43] shield 0003:0955:7214.0002: probe with driver shield failed with error -22 [ 191.682002][ T30] audit: type=1400 audit(1754255394.489:13281): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7078 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 191.702419][ T30] audit: type=1400 audit(1754255394.499:13282): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7078 comm="syz-executor" name="68" dev="tmpfs" ino=388 [ 192.092812][ T6076] audit: audit_backlog=65 > audit_backlog_limit=64 [ 192.155869][ T6076] audit: audit_lost=533 audit_rate_limit=0 audit_backlog_limit=64 [ 192.244912][ T7080] audit: audit_backlog=65 > audit_backlog_limit=64 [ 192.312770][ T6076] audit: backlog limit exceeded [ 192.390971][ T7080] audit: audit_lost=534 audit_rate_limit=0 audit_backlog_limit=64 [ 192.415754][ T6076] audit: audit_backlog=65 > audit_backlog_limit=64 [ 192.538686][ T6076] audit: audit_lost=535 audit_rate_limit=0 audit_backlog_limit=64 [ 192.698728][ T43] usb 4-1: USB disconnect, device number 6 [ 194.528084][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.565824][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.834130][ T7139] io-wq is not configured for unbound workers [ 195.875035][ T7139] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 196.089870][ T7139] 8021q: adding VLAN 0 to HW filter on device bond1 [ 196.714749][ T30] kauditd_printk_skb: 2152 callbacks suppressed [ 196.714770][ T30] audit: type=1400 audit(1754255399.549:15202): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30008 daddr=10.128.0.126 dest=52354 netif=eth0 [ 197.366307][ T7153] audit: audit_backlog=65 > audit_backlog_limit=64 [ 197.372961][ T7153] audit: audit_lost=613 audit_rate_limit=0 audit_backlog_limit=64 [ 197.373744][ T7151] audit: audit_backlog=65 > audit_backlog_limit=64 [ 197.380875][ T7153] audit: backlog limit exceeded [ 197.382525][ T7153] audit: audit_backlog=65 > audit_backlog_limit=64 [ 197.424245][ T7153] audit: audit_lost=614 audit_rate_limit=0 audit_backlog_limit=64 [ 197.439357][ T7151] audit: audit_lost=615 audit_rate_limit=0 audit_backlog_limit=64 [ 197.453900][ T30] audit: type=1400 audit(1754255400.159:15203): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=5853 comm="syz-executor" opid=7110 ocomm="syz.3.314" [ 197.502313][ T7151] audit: backlog limit exceeded [ 198.418009][ T7166] Context (ID=0x0) not attached to queue pair (handle=0x2:0xfffff832) [ 199.178553][ T7180] trusted_key: syz.1.331 sent an empty control message without MSG_MORE. [ 200.312221][ T1215] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 200.476746][ T1215] usb 6-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 200.517600][ T1215] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 200.567297][ T1215] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 200.610657][ T1215] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 200.668773][ T1215] usb 6-1: SerialNumber: syz [ 200.965274][ T1215] usb 6-1: 0:2 : does not exist [ 201.090750][ T7212] sctp: [Deprecated]: syz.1.338 (pid 7212) Use of struct sctp_assoc_value in delayed_ack socket option. [ 201.090750][ T7212] Use struct sctp_sack_info instead [ 201.449636][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 201.532174][ T1215] usb 6-1: USB disconnect, device number 14 [ 201.656782][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 201.708766][ T10] usb 1-1: config 8 has an invalid interface number: 203 but max is 0 [ 201.727931][ T10] usb 1-1: config 8 has no interface number 0 [ 201.736239][ T30] kauditd_printk_skb: 2839 callbacks suppressed [ 201.736289][ T30] audit: type=1400 audit(1754255404.569:17832): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=7214 comm="syz.1.340" opid=7214 ocomm="syz.1.340" [ 201.753819][ T10] usb 1-1: config 8 interface 203 altsetting 1 has an endpoint descriptor with address 0x93, changing to 0x83 [ 201.906771][ T7220] netlink: 128 bytes leftover after parsing attributes in process `syz.1.340'. [ 202.140086][ T10] usb 1-1: config 8 interface 203 altsetting 1 bulk endpoint 0x83 has invalid maxpacket 1024 [ 202.229738][ T30] audit: type=1400 audit(1754255404.569:17833): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=7214 comm="syz.1.340" opid=7214 ocomm="syz.1.340" [ 202.283346][ T5849] audit: audit_backlog=65 > audit_backlog_limit=64 [ 202.295786][ T10] usb 1-1: config 8 interface 203 altsetting 1 endpoint 0x88 has invalid maxpacket 47040, setting to 1024 [ 202.328115][ T6076] audit: audit_backlog=65 > audit_backlog_limit=64 [ 202.359973][ T7220] audit: audit_backlog=65 > audit_backlog_limit=64 [ 202.368368][ T7220] audit: audit_lost=686 audit_rate_limit=0 audit_backlog_limit=64 [ 202.370253][ T30] audit: type=1400 audit(1754255404.569:17834): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7214 comm="syz.1.340" name="newroot" dev="tmpfs" ino=2 [ 202.381968][ T6076] audit: audit_lost=687 audit_rate_limit=0 audit_backlog_limit=64 [ 202.396688][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 202.403787][ T5849] audit: audit_lost=688 audit_rate_limit=0 audit_backlog_limit=64 [ 202.432365][ T10] usb 1-1: config 8 interface 203 altsetting 1 bulk endpoint 0x88 has invalid maxpacket 1024 [ 202.490567][ T1224] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 202.552096][ T10] usb 1-1: config 8 interface 203 has no altsetting 0 [ 202.587812][ T10] usb 1-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a [ 202.597563][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.618636][ T10] usb 1-1: Product: syz [ 202.626428][ T10] usb 1-1: Manufacturer: syz [ 202.631202][ T10] usb 1-1: SerialNumber: syz [ 202.660583][ T7207] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 202.672719][ T7207] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 202.732162][ T1224] usb 2-1: Using ep0 maxpacket: 32 [ 202.951091][ T1224] usb 2-1: config 14 has an invalid interface number: 137 but max is 3 [ 202.964732][ T1224] usb 2-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 202.992137][ T1224] usb 2-1: config 14 has 2 interfaces, different from the descriptor's value: 4 [ 203.010427][ T1224] usb 2-1: config 14 has no interface number 1 [ 203.049614][ T1224] usb 2-1: config 14 interface 0 altsetting 8 endpoint 0x6 has invalid wMaxPacketSize 0 [ 203.082117][ T1224] usb 2-1: config 14 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 203.118625][ T1224] usb 2-1: config 14 interface 137 has no altsetting 0 [ 203.152392][ T1224] usb 2-1: config 14 interface 0 has no altsetting 0 [ 203.167949][ T10] port100 1-1:8.203: NFC: Could not find bulk-in or bulk-out endpoint [ 203.191600][ T1224] usb 2-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=2a.8a [ 203.228223][ T1224] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.237149][ T10] usb 1-1: USB disconnect, device number 8 [ 203.252012][ T1224] usb 2-1: Product: syz [ 203.256241][ T1224] usb 2-1: Manufacturer: syz [ 203.277973][ T1224] usb 2-1: SerialNumber: syz [ 203.531695][ T1224] ati_remote2 2-1:14.0: ati_remote2_probe(): need 2 interfaces, found 2 [ 203.557066][ T1224] usb 2-1: USB disconnect, device number 7 [ 203.744440][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 203.792002][ T5901] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 203.997544][ T5901] usb 4-1: Using ep0 maxpacket: 8 [ 204.534112][ T7245] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 204.614173][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 204.662176][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 204.684472][ T5901] usb 4-1: unable to get BOS descriptor or descriptor too short [ 204.700238][ T10] usb 1-1: config 0 has no interface number 0 [ 204.707681][ T5901] usb 4-1: config 10 has an invalid interface number: 130 but max is 0 [ 204.717938][ T5901] usb 4-1: config 10 has no interface number 0 [ 204.720485][ T10] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 204.724424][ T5901] usb 4-1: config 10 interface 130 has no altsetting 0 [ 204.744929][ T5901] usb 4-1: New USB device found, idVendor=413c, idProduct=81e0, bcdDevice=53.5c [ 204.751389][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.761929][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.770559][ T5901] usb 4-1: Product: é…閊츜頴๧뺭㱴ã–۶ᳲç¿á›ç¡ç«ªæ¿”뇜ෘ㨸暈ê³æŒì›•å´“뚰￙갷㧧è€ã˜‰â´Žã£ºêµ¶æ“¸â»¬ç²šëŸå°­î‹¦íŸ—﷽澠狟襜㺊à©ì¸©î‚¸è‰éª§æ”­Æšì”劖౩麫骛扻꤉뭚⯑ꟺ엧ƺ᛼è¢ï¨ã¦ï‡ê¤ë—µë—ˆê£½æŠè–²ë¢´ë©§å´†î¨¤ã«“ங戂쥮高﫽有ￒ묄 [ 204.803967][ T5901] usb 4-1: Manufacturer: С [ 204.808765][ T5901] usb 4-1: SerialNumber: â™î¡§é§’︷벆åµé·ªï“쌶雄ë‹ìƒªã‡‘뀈汵繬ᖕ浕왱ç£äº©æ¢—殯膚댰躙⦇隷䗭⨮죹ᒗ㴹ẓ己ﴪáºì”¤äŒšá™Ÿâ­¥ê‡£ï½•èª­ä£¶åº¤í†ãŠ [ 204.818972][ T10] usb 1-1: Product: syz [ 204.840944][ T10] usb 1-1: Manufacturer: syz [ 204.863774][ T10] usb 1-1: SerialNumber: syz [ 204.914122][ T10] usb 1-1: config 0 descriptor?? [ 204.945072][ T10] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 205.850037][ T10] gspca_spca1528: reg_w err -110 [ 206.152263][ T10] spca1528 1-1:0.1: probe with driver spca1528 failed with error -110 [ 207.448934][ T30] kauditd_printk_skb: 1459 callbacks suppressed [ 207.448956][ T30] audit: type=1400 audit(1754255409.819:19070): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5849 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 207.544277][ T5853] audit: audit_backlog=65 > audit_backlog_limit=64 [ 207.551062][ T5853] audit: audit_lost=763 audit_rate_limit=0 audit_backlog_limit=64 [ 207.562052][ T5840] audit: audit_backlog=65 > audit_backlog_limit=64 [ 207.569095][ T5840] audit: audit_lost=764 audit_rate_limit=0 audit_backlog_limit=64 [ 207.624513][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 207.631121][ C1] audit: audit_lost=765 audit_rate_limit=0 audit_backlog_limit=64 [ 207.639639][ C1] audit: backlog limit exceeded [ 207.645246][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 207.652006][ C1] audit: audit_lost=766 audit_rate_limit=0 audit_backlog_limit=64 [ 208.152841][ T5901] usb 4-1: USB disconnect, device number 7 [ 208.282160][ T5928] usb 1-1: USB disconnect, device number 9 [ 209.544671][ T7268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.350'. [ 211.175512][ T7305] ceph: No mds server is up or the cluster is laggy [ 211.463332][ T5953] libceph: connect (1)[c::]:6789 error -22 [ 211.469592][ T5953] libceph: mon0 (1)[c::]:6789 connect error [ 212.272596][ T5901] libceph: connect (1)[c::]:6789 error -22 [ 212.289074][ T5901] libceph: mon0 (1)[c::]:6789 connect error [ 212.471186][ T5853] audit_log_start: 1903 callbacks suppressed [ 212.471205][ T5853] audit: audit_backlog=65 > audit_backlog_limit=64 [ 212.484844][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 212.491399][ C1] audit: audit_lost=964 audit_rate_limit=0 audit_backlog_limit=64 [ 212.496330][ T30] audit: type=1400 audit(1754255415.299:20380): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5853 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 212.499399][ C1] audit: backlog limit exceeded [ 212.525259][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 212.532137][ C1] audit: audit_lost=965 audit_rate_limit=0 audit_backlog_limit=64 [ 212.540068][ C1] audit: backlog limit exceeded [ 212.544969][ T30] audit: type=1400 audit(1754255415.299:20381): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5853 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 212.545691][ T5839] audit: audit_backlog=65 > audit_backlog_limit=64 [ 213.275734][ T5928] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 213.645931][ T5928] usb 2-1: device descriptor read/64, error -71 [ 213.952183][ T5928] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 213.999833][ T7337] netlink: 4 bytes leftover after parsing attributes in process `syz.5.371'. [ 214.011740][ T7340] netlink: 36 bytes leftover after parsing attributes in process `syz.3.370'. [ 214.102239][ T5928] usb 2-1: device descriptor read/64, error -71 [ 214.254438][ T5928] usb usb2-port1: attempt power cycle [ 214.292051][ T5914] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 214.722011][ T5914] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.734218][ T5914] usb 6-1: config 0 interface 0 has no altsetting 0 [ 214.745373][ T5914] usb 6-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 214.755481][ T5928] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 214.769197][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.782846][ T5928] usb 2-1: device descriptor read/8, error -71 [ 214.791985][ T5914] usb 6-1: Product: syz [ 214.799434][ T5914] usb 6-1: Manufacturer: syz [ 214.809577][ T5914] usb 6-1: SerialNumber: syz [ 214.846210][ T5914] usb 6-1: config 0 descriptor?? [ 215.054538][ T5928] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 215.094977][ T7337] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 215.101960][ T7337] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 215.150409][ T7337] vhci_hcd vhci_hcd.0: Device attached [ 215.157905][ T5928] usb 2-1: device descriptor read/8, error -71 [ 215.282666][ T5928] usb usb2-port1: unable to enumerate USB device [ 215.343719][ T1224] vhci_hcd: vhci_device speed not set [ 215.404449][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.464723][ T1224] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 216.113441][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.411440][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.564414][ T7351] vhci_hcd: connection reset by peer [ 216.572983][ T5914] hub 6-1:0.0: bad descriptor, ignoring hub [ 216.587236][ T5914] hub 6-1:0.0: probe with driver hub failed with error -5 [ 216.605475][ T13] vhci_hcd: stop threads [ 216.606560][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.610508][ T13] vhci_hcd: release socket [ 216.655748][ T5914] usb 6-1: USB disconnect, device number 15 [ 216.679559][ T13] vhci_hcd: disconnect device [ 216.972117][ T1215] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 217.042247][ T12] bridge_slave_1: left allmulticast mode [ 217.066486][ T12] bridge_slave_1: left promiscuous mode [ 217.082495][ T5852] Bluetooth: hci4: command 0x0406 tx timeout [ 217.092449][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.104224][ T5848] Bluetooth: hci3: command 0x0406 tx timeout [ 217.110637][ T5854] Bluetooth: hci1: command 0x0406 tx timeout [ 217.110655][ T5847] Bluetooth: hci0: command 0x0406 tx timeout [ 217.138584][ T12] bridge_slave_0: left allmulticast mode [ 217.145668][ T12] bridge_slave_0: left promiscuous mode [ 217.151535][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.834021][ T30] kauditd_printk_skb: 2613 callbacks suppressed [ 217.834042][ T30] audit: type=1400 audit(1754255420.669:22520): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=5828 comm="syz-executor" saddr=10.128.0.169 src=30008 daddr=10.128.0.126 dest=52354 netif=eth0 [ 217.904356][ T5839] audit: audit_backlog=65 > audit_backlog_limit=64 [ 217.910946][ T5839] audit: audit_lost=1125 audit_rate_limit=0 audit_backlog_limit=64 [ 217.936821][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 217.938760][ T7370] audit: audit_backlog=65 > audit_backlog_limit=64 [ 217.943525][ C1] audit: audit_lost=1126 audit_rate_limit=0 audit_backlog_limit=64 [ 217.958039][ C1] audit: backlog limit exceeded [ 217.963291][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 217.964811][ T7370] audit: audit_lost=1127 audit_rate_limit=0 audit_backlog_limit=64 [ 217.970019][ C1] audit: audit_lost=1128 audit_rate_limit=0 audit_backlog_limit=64 [ 217.987307][ T1215] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 217.998263][ T1215] usb 4-1: config 0 has no interface number 0 [ 218.042194][ T1215] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.091437][ T1215] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.133586][ T1215] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 218.168894][ T1215] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.222134][ T1215] usb 4-1: config 0 descriptor?? [ 218.862610][ T1215] uclogic 0003:256C:006D.0003: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.3-1/input1 [ 219.057625][ T5928] usb 4-1: USB disconnect, device number 8 [ 219.384973][ T7401] ceph: No mds server is up or the cluster is laggy [ 219.395530][ T5929] libceph: connect (1)[c::]:6789 error -101 [ 219.407769][ T5929] libceph: mon0 (1)[c::]:6789 connect error [ 219.883941][ T5929] libceph: connect (1)[c::]:6789 error -101 [ 219.899647][ T5929] libceph: mon0 (1)[c::]:6789 connect error [ 220.916236][ T1224] vhci_hcd: vhci_device speed not set [ 221.678792][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.716938][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.107373][ T12] bond0 (unregistering): Released all slaves [ 222.844405][ T30] kauditd_printk_skb: 3114 callbacks suppressed [ 222.844425][ T30] audit: type=1400 audit(1754255425.679:24861): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7423 comm="syz.1.388" name="newroot" dev="tmpfs" ino=2 [ 222.894652][ T7430] netlink: 16 bytes leftover after parsing attributes in process `syz.0.390'. [ 223.285025][ T30] audit: type=1400 audit(1754255425.689:24862): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7423 comm="syz.1.388" name="/" dev="devtmpfs" ino=1 [ 223.301762][ T7435] audit: audit_backlog=65 > audit_backlog_limit=64 [ 223.313745][ T7437] audit: audit_backlog=65 > audit_backlog_limit=64 [ 223.320380][ T7437] audit: audit_lost=1386 audit_rate_limit=0 audit_backlog_limit=64 [ 223.328500][ T7437] audit: backlog limit exceeded [ 223.333423][ T7437] audit: audit_backlog=65 > audit_backlog_limit=64 [ 223.339964][ T7437] audit: audit_lost=1387 audit_rate_limit=0 audit_backlog_limit=64 [ 223.347957][ T7437] audit: backlog limit exceeded [ 223.352883][ T7437] audit: audit_backlog=65 > audit_backlog_limit=64 [ 223.373428][ T7432] binder: 7423:7432 ioctl 40046205 0 returned -22 [ 224.140289][ T7444] netlink: 68 bytes leftover after parsing attributes in process `syz.4.394'. [ 224.386543][ T7450] netlink: 48 bytes leftover after parsing attributes in process `syz.0.395'. [ 224.483069][ T12] hsr_slave_0: left promiscuous mode [ 224.502642][ T12] hsr_slave_1: left promiscuous mode [ 224.509746][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.525460][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.575498][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.595799][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.661697][ T12] veth1_macvtap: left promiscuous mode [ 224.700209][ T12] veth0_macvtap: left promiscuous mode [ 224.736048][ T12] veth1_vlan: left promiscuous mode [ 224.780854][ T12] veth0_vlan: left promiscuous mode [ 226.640966][ T7471] kAFS: unparsable volume name [ 226.952221][ T1224] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 227.267542][ T1224] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.310723][ T1224] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 227.327780][ T1224] usb 6-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 227.393991][ T1224] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.426705][ T1224] usb 6-1: config 0 descriptor?? [ 227.611608][ T12] team0 (unregistering): Port device team_slave_1 removed [ 227.872210][ T30] kauditd_printk_skb: 1422 callbacks suppressed [ 227.872230][ T30] audit: type=1400 audit(1754255430.699:26155): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5839 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 227.900665][ T5839] audit: audit_backlog=65 > audit_backlog_limit=64 [ 227.926372][ T5839] audit: audit_lost=1432 audit_rate_limit=0 audit_backlog_limit=64 [ 227.934665][ T30] audit: type=1400 audit(1754255430.699:26156): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5839 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 227.934878][ T30] audit: type=1400 audit(1754255430.699:26157): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5839 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 227.935111][ T30] audit: type=1400 audit(1754255430.699:26158): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5839 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 228.000081][ T5839] audit: backlog limit exceeded [ 228.004391][ T30] audit: type=1400 audit(1754255430.699:26159): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=5839 comm="syz-executor" name="87" dev="tmpfs" ino=490 [ 228.026525][ T12] team0 (unregistering): Port device team_slave_0 removed [ 228.057665][ T5853] audit: audit_backlog=65 > audit_backlog_limit=64 [ 228.067478][ T5853] audit: audit_lost=1433 audit_rate_limit=0 audit_backlog_limit=64 [ 228.307129][ T7490] loop2: detected capacity change from 0 to 7 [ 228.361074][ T7490] loop2: p1 [ 228.384342][ T7490] loop2: partition table partially beyond EOD, truncated [ 228.427115][ T7490] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 229.329729][ T7497] veth2: entered allmulticast mode [ 231.176238][ T7510] netlink: 'syz.3.409': attribute type 4 has an invalid length. [ 231.840506][ T1224] Bluetooth: Can't get state to change to load ram patch err [ 231.878715][ T1224] Bluetooth: Loading patch file failed [ 231.916773][ T1224] ath3k 6-1:0.0: probe with driver ath3k failed with error -71 [ 231.935070][ T1224] usb 6-1: USB disconnect, device number 16 [ 233.113086][ T30] kauditd_printk_skb: 1104 callbacks suppressed [ 233.113106][ T30] audit: type=1400 audit(1754255435.939:27050): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5840 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 233.376268][ T5849] audit: audit_backlog=65 > audit_backlog_limit=64 [ 233.392020][ T5849] audit: audit_lost=1505 audit_rate_limit=0 audit_backlog_limit=64 [ 233.393311][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 233.399973][ T5849] audit: backlog limit exceeded [ 233.400004][ T5849] audit: audit_backlog=65 > audit_backlog_limit=64 [ 233.406555][ C1] audit: audit_lost=1506 audit_rate_limit=0 audit_backlog_limit=64 [ 233.406573][ C1] audit: backlog limit exceeded [ 233.407316][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 233.416164][ T30] audit: type=1400 audit(1754255435.939:27051): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5840 comm="syz-executor" name="/" dev="sysfs" ino=1 [ 233.485314][ T7510] syz.3.409 (7510) used greatest stack depth: 19168 bytes left [ 234.142403][ T5953] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 234.542283][ T5953] usb 4-1: Using ep0 maxpacket: 8 [ 234.550908][ T5953] usb 4-1: config 0 has an invalid interface number: 148 but max is 0 [ 234.580288][ T5953] usb 4-1: config 0 has no interface number 0 [ 234.655895][ T5953] usb 4-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36 [ 234.670203][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.746300][ T5953] usb 4-1: Product: syz [ 234.750708][ T5953] usb 4-1: Manufacturer: syz [ 234.755747][ T5953] usb 4-1: SerialNumber: syz [ 234.782413][ T5953] usb 4-1: config 0 descriptor?? [ 234.817787][ T5953] kobil_sct 4-1:0.148: KOBIL USB smart card terminal converter detected [ 234.852788][ T5953] usb 4-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 235.020516][ T7534] netlink: 'syz.5.416': attribute type 10 has an invalid length. [ 235.048867][ T7534] netlink: 40 bytes leftover after parsing attributes in process `syz.5.416'. [ 235.110553][ T7541] netlink: 'syz.4.419': attribute type 1 has an invalid length. [ 235.122279][ T7534] bond0: entered promiscuous mode [ 235.132165][ T7534] bond_slave_0: entered promiscuous mode [ 235.146471][ T7534] bond_slave_1: entered promiscuous mode [ 235.197704][ T7534] bond0: entered allmulticast mode [ 235.205498][ T7534] bond_slave_0: entered allmulticast mode [ 235.217865][ T7534] bond_slave_1: entered allmulticast mode [ 235.225952][ T7534] bridge0: port 3(bond0) entered blocking state [ 235.236619][ T7534] bridge0: port 3(bond0) entered disabled state [ 235.260255][ T7534] bridge0: port 3(bond0) entered blocking state [ 235.266779][ T7534] bridge0: port 3(bond0) entered forwarding state [ 235.377970][ T7541] 8021q: adding VLAN 0 to HW filter on device bond1 [ 235.632129][ T1224] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 235.687898][ T7545] bond1: (slave veth3): Enslaving as an active interface with a down link [ 235.768777][ T7547] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 235.790081][ T7547] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 235.847565][ T1224] usb 1-1: Using ep0 maxpacket: 8 [ 235.859917][ T1224] usb 1-1: config 11 has an invalid interface number: 95 but max is 0 [ 235.877781][ T1224] usb 1-1: config 11 has no interface number 0 [ 235.890863][ T1224] usb 1-1: config 11 interface 95 has no altsetting 0 [ 235.972836][ T1224] usb 1-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 235.988487][ T1224] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.015728][ T1224] usb 1-1: Product: syz [ 236.030721][ T1224] usb 1-1: Manufacturer: syz [ 236.038120][ T1224] usb 1-1: SerialNumber: syz [ 236.261936][ T24] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 236.289134][ T1224] usb 1-1: USB disconnect, device number 10 [ 236.422288][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 236.436479][ T24] usb 6-1: config 8 has an invalid interface number: 206 but max is 0 [ 236.445059][ T24] usb 6-1: config 8 has no interface number 0 [ 236.455885][ T24] usb 6-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 236.491934][ T24] usb 6-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 236.541919][ T24] usb 6-1: config 8 interface 206 altsetting 1 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 236.687579][ T5929] usb 4-1: USB disconnect, device number 9 [ 236.712182][ T24] usb 6-1: config 8 interface 206 altsetting 1 bulk endpoint 0xC has invalid maxpacket 1024 [ 236.727235][ T5929] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 236.737532][ T5929] kobil_sct 4-1:0.148: device disconnected [ 236.743913][ T24] usb 6-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 236.759562][ T24] usb 6-1: config 8 interface 206 has no altsetting 0 [ 236.782538][ T24] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 236.803851][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.822165][ T24] usb 6-1: Product: syz [ 236.828670][ T24] usb 6-1: Manufacturer: syz [ 236.833465][ T24] usb 6-1: SerialNumber: syz [ 236.844032][ T7557] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 236.897530][ T7561] 9pnet_fd: Insufficient options for proto=fd [ 237.264016][ T24] garmin_gps 6-1:8.206: Garmin GPS usb/tty converter detected [ 237.280315][ T24] usb 6-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 237.292443][ T24] usb 6-1: USB disconnect, device number 17 [ 237.304894][ T24] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 237.562265][ T5158] Bluetooth: hci2: command 0x0406 tx timeout [ 237.772264][ T1224] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 238.074306][ T24] garmin_gps 6-1:8.206: device disconnected [ 238.082805][ T1224] usb 1-1: Using ep0 maxpacket: 8 [ 238.103760][ T1224] usb 1-1: config 0 has an invalid interface number: 148 but max is 0 [ 238.122286][ T30] kauditd_printk_skb: 2347 callbacks suppressed [ 238.122307][ T30] audit: type=1400 audit(1754255440.949:28714): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5839 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 238.153948][ T1224] usb 1-1: config 0 has no interface number 0 [ 238.191780][ T7573] audit: audit_backlog=65 > audit_backlog_limit=64 [ 238.193053][ T7569] audit: audit_backlog=65 > audit_backlog_limit=64 [ 238.198845][ T7573] audit: audit_lost=1736 audit_rate_limit=0 audit_backlog_limit=64 [ 238.205386][ T7569] audit: audit_lost=1737 audit_rate_limit=0 audit_backlog_limit=64 [ 238.213799][ T7573] audit: backlog limit exceeded [ 238.221375][ T7569] audit: backlog limit exceeded [ 238.226658][ T7573] audit: audit_backlog=65 > audit_backlog_limit=64 [ 238.231537][ T7569] audit: audit_backlog=65 > audit_backlog_limit=64 [ 238.238008][ T7573] audit: audit_lost=1738 audit_rate_limit=0 audit_backlog_limit=64 [ 238.248217][ T1224] usb 1-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36 [ 238.272044][ T1224] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.280286][ T1224] usb 1-1: Product: syz [ 238.285297][ T1224] usb 1-1: Manufacturer: syz [ 238.289977][ T1224] usb 1-1: SerialNumber: syz [ 238.313233][ T1224] usb 1-1: config 0 descriptor?? [ 238.326215][ T1224] kobil_sct 1-1:0.148: KOBIL USB smart card terminal converter detected [ 238.361156][ T1224] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 239.045665][ T7575] tty tty31: ldisc open failed (-12), clearing slot 30 [ 240.152592][ T1224] usb 1-1: USB disconnect, device number 11 [ 240.178792][ T1224] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 240.217463][ T1224] kobil_sct 1-1:0.148: device disconnected [ 240.268685][ T7584] overlay: ./file0 is not a directory [ 241.863837][ T7615] netlink: 72 bytes leftover after parsing attributes in process `syz.4.438'. [ 241.914383][ T1224] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 242.078274][ T7618] IPVS: set_ctl: invalid protocol: 22 0.0.0.0:20001 [ 242.126887][ T1224] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 242.179012][ T1224] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.238194][ T1224] usb 4-1: Product: syz [ 242.254992][ T1224] usb 4-1: Manufacturer: syz [ 242.276127][ T1224] usb 4-1: SerialNumber: syz [ 242.343916][ T1224] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 242.470587][ T10] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 242.974591][ T1224] usb 4-1: USB disconnect, device number 10 [ 243.190974][ T30] kauditd_printk_skb: 2476 callbacks suppressed [ 243.190994][ T30] audit: type=1400 audit(1754255446.019:31089): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7624 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 243.260745][ T30] audit: type=1400 audit(1754255446.019:31090): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7624 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 243.303377][ T30] audit: type=1400 audit(1754255446.019:31091): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7624 comm="syz-executor" name="113" dev="tmpfs" ino=610 [ 243.344451][ T6076] audit: audit_backlog=65 > audit_backlog_limit=64 [ 243.363563][ T5849] audit: audit_backlog=65 > audit_backlog_limit=64 [ 243.370159][ T5849] audit: audit_lost=1773 audit_rate_limit=0 audit_backlog_limit=64 [ 243.377095][ T6076] audit: audit_lost=1774 audit_rate_limit=0 audit_backlog_limit=64 [ 243.379039][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 243.392749][ C1] audit: audit_lost=1775 audit_rate_limit=0 audit_backlog_limit=64 [ 243.400766][ C1] audit: backlog limit exceeded [ 243.566862][ T10] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 243.596782][ T10] ath9k_htc: Failed to initialize the device [ 243.630556][ T1224] usb 4-1: ath9k_htc: USB layer deinitialized [ 246.852162][ T7675] netlink: 36 bytes leftover after parsing attributes in process `syz.4.453'. [ 248.313974][ T30] kauditd_printk_skb: 2436 callbacks suppressed [ 248.313993][ T30] audit: type=1400 audit(1754255451.149:33133): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5839 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 248.352282][ T30] audit: type=1400 audit(1754255451.149:33134): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=5840 comm="syz-executor" saddr=10.128.0.169 src=30008 daddr=10.128.0.126 dest=52354 netif=eth0 [ 248.380243][ T5839] audit: audit_backlog=65 > audit_backlog_limit=64 [ 248.393244][ T7691] audit: audit_backlog=65 > audit_backlog_limit=64 [ 248.401260][ T7691] audit: audit_lost=1907 audit_rate_limit=0 audit_backlog_limit=64 [ 248.409377][ T7691] audit: backlog limit exceeded [ 248.416477][ T7691] audit: audit_backlog=65 > audit_backlog_limit=64 [ 248.423155][ T7691] audit: audit_lost=1908 audit_rate_limit=0 audit_backlog_limit=64 [ 248.435358][ T7691] audit: backlog limit exceeded [ 248.440375][ T7691] audit: audit_backlog=65 > audit_backlog_limit=64 [ 249.282320][ T24] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 249.404454][ T7702] binder: 7700:7702 ioctl 40046205 0 returned -22 [ 249.456660][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 249.510151][ T24] usb 1-1: not running at top speed; connect to a high speed hub [ 249.548579][ T24] usb 1-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 249.586998][ T24] usb 1-1: New USB device found, idVendor=0374, idProduct=c120, bcdDevice= 2.18 [ 249.611619][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.637814][ T24] usb 1-1: Product: syz [ 249.649332][ T24] usb 1-1: Manufacturer: syz [ 249.654531][ T7704] overlay: Unknown parameter 'fsuuid' [ 249.659430][ T24] usb 1-1: SerialNumber: syz [ 249.921781][ T24] usb 1-1: USB disconnect, device number 12 [ 253.474191][ T30] kauditd_printk_skb: 2057 callbacks suppressed [ 253.474213][ T30] audit: type=1400 audit(1754255456.009:34753): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=7735 comm="syz-executor" name="105" dev="tmpfs" ino=589 [ 253.660628][ T6076] audit: audit_backlog=65 > audit_backlog_limit=64 [ 253.673388][ T5840] audit: audit_backlog=65 > audit_backlog_limit=64 [ 253.679962][ T5840] audit: audit_lost=2056 audit_rate_limit=0 audit_backlog_limit=64 [ 253.687961][ T5840] audit: backlog limit exceeded [ 253.692987][ T5840] audit: audit_backlog=65 > audit_backlog_limit=64 [ 253.699519][ T5840] audit: audit_lost=2057 audit_rate_limit=0 audit_backlog_limit=64 [ 253.712531][ T7737] audit: audit_backlog=65 > audit_backlog_limit=64 [ 253.719192][ T7737] audit: audit_lost=2058 audit_rate_limit=0 audit_backlog_limit=64 [ 253.729489][ T6076] audit: audit_lost=2059 audit_rate_limit=0 audit_backlog_limit=64 [ 253.879455][ T7739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.472'. [ 254.259313][ T7747] overlay: Unknown parameter 'pcr' [ 255.001948][ T24] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 255.304446][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 255.311235][ T24] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 255.343080][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.375565][ T24] usb 1-1: config 0 descriptor?? [ 255.824633][ T7744] netlink: 'syz.0.474': attribute type 2 has an invalid length. [ 255.861822][ T24] hid (null): nested delimiters [ 255.885006][ T24] hid (null): unknown global tag 0xd [ 255.901993][ T24] hid (null): invalid report_size 270815500 [ 255.916272][ T24] hid (null): unknown global tag 0xd [ 255.932008][ T24] hid (null): invalid report_size 2080752192 [ 255.939120][ T24] hid (null): unknown global tag 0xd [ 255.955121][ T24] hid (null): unknown global tag 0xd [ 255.971438][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.972286][ T24] hid (null): bogus close delimiter [ 255.984064][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.050536][ T24] hid (null): unknown global tag 0xc [ 256.120439][ T24] usb 1-1: USB disconnect, device number 13 [ 258.483397][ T30] kauditd_printk_skb: 1519 callbacks suppressed [ 258.483416][ T30] audit: type=1400 audit(1754255461.319:36114): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=7784 comm="syz-executor" name="124" dev="tmpfs" ino=667 [ 258.572422][ T30] audit: type=1400 audit(1754255461.319:36115): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7784 comm="syz-executor" name="124" dev="tmpfs" ino=667 [ 258.596033][ T30] audit: type=1400 audit(1754255461.319:36116): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7784 comm="syz-executor" name="124" dev="tmpfs" ino=667 [ 258.725633][ T7788] overlayfs: failed to resolve './file1': -2 [ 258.783588][ T30] audit: type=1400 audit(1754255461.319:36117): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=7784 comm="syz-executor" name="124" dev="tmpfs" ino=667 [ 258.806464][ T30] audit: type=1400 audit(1754255461.319:36118): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7784 comm="syz-executor" name="124" dev="tmpfs" ino=667 [ 258.862547][ T30] audit: type=1400 audit(1754255461.319:36119): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7784 comm="syz-executor" name="124" dev="tmpfs" ino=667 [ 258.890874][ T7772] delete_channel: no stack [ 258.897199][ T5853] audit: audit_backlog=65 > audit_backlog_limit=64 [ 258.902018][ T30] audit: type=1400 audit(1754255461.319:36120): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=7784 comm="syz-executor" name="124" dev="tmpfs" ino=667 [ 258.936202][ T5853] audit: audit_lost=2112 audit_rate_limit=0 audit_backlog_limit=64 [ 258.967583][ T5839] audit: audit_backlog=65 > audit_backlog_limit=64 [ 259.332040][ T1224] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 259.689547][ T7796] ptrace attach of "./syz-executor exec"[7797] was attempted by "./syz-executor exec"[7796] [ 259.728521][ T7796] @: renamed from vlan0 (while UP) [ 260.182608][ T1224] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.275373][ T1224] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.324207][ T7794] kAFS: unparsable volume name [ 260.329277][ T1224] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 260.360002][ T1224] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.412676][ T1224] usb 4-1: config 0 descriptor?? [ 260.835692][ T7808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.487'. [ 260.855384][ T1224] hkems 0003:2006:0118.0005: unbalanced delimiter at end of report description [ 260.892769][ T1224] hkems 0003:2006:0118.0005: parse failed [ 260.911733][ T1224] hkems 0003:2006:0118.0005: probe with driver hkems failed with error -22 [ 261.108431][ T7792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.120635][ T7792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.393952][ T1224] usb 4-1: USB disconnect, device number 11 [ 261.960532][ T5953] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 262.145856][ T5953] usb 1-1: Using ep0 maxpacket: 16 [ 262.178649][ T5953] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 262.197782][ T5953] usb 1-1: can't read configurations, error -61 [ 262.342196][ T5929] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 262.365884][ T5953] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 262.562362][ T5929] usb 4-1: device descriptor read/64, error -71 [ 262.650925][ T5953] usb 1-1: Using ep0 maxpacket: 16 [ 262.864884][ T5953] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 262.897379][ T5953] usb 1-1: can't read configurations, error -61 [ 262.904022][ T5929] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 262.928811][ T5953] usb usb1-port1: attempt power cycle [ 263.073000][ T5929] usb 4-1: device descriptor read/64, error -71 [ 263.184001][ T5929] usb usb4-port1: attempt power cycle [ 263.281966][ T5953] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 263.366503][ T5953] usb 1-1: Using ep0 maxpacket: 16 [ 263.496786][ T30] kauditd_printk_skb: 2179 callbacks suppressed [ 263.496916][ T30] audit: type=1400 audit(1754255466.329:38117): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=7820 comm="syz.0.492" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 263.541082][ T5929] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 263.541363][ T30] audit: type=1400 audit(1754255466.359:38118): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=7820 comm="syz.0.492" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 263.602036][ T7833] program syz.5.496 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 263.602700][ T5929] usb 4-1: device descriptor read/8, error -71 [ 263.653768][ T5953] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 263.721771][ T5953] usb 1-1: can't read configurations, error -61 [ 263.905928][ T5839] audit: audit_backlog=65 > audit_backlog_limit=64 [ 263.918594][ T6076] audit: audit_backlog=65 > audit_backlog_limit=64 [ 263.919236][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 263.931927][ C1] audit: audit_lost=2174 audit_rate_limit=0 audit_backlog_limit=64 [ 263.934780][ T5839] audit: audit_lost=2175 audit_rate_limit=0 audit_backlog_limit=64 [ 263.939844][ C1] audit: backlog limit exceeded [ 263.940510][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 263.958320][ T6076] audit: audit_lost=2176 audit_rate_limit=0 audit_backlog_limit=64 [ 263.967818][ T5953] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 263.985107][ T5953] usb 1-1: Using ep0 maxpacket: 16 [ 264.000404][ T5953] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 264.011585][ T5953] usb 1-1: can't read configurations, error -61 [ 264.021495][ T5953] usb usb1-port1: unable to enumerate USB device [ 264.028358][ T5929] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 264.057133][ T5929] usb 4-1: device descriptor read/8, error -71 [ 264.180561][ T5929] usb usb4-port1: unable to enumerate USB device [ 264.823397][ T7848] netlink: 'syz.1.500': attribute type 1 has an invalid length. [ 264.831164][ T7848] netlink: 40 bytes leftover after parsing attributes in process `syz.1.500'. [ 265.792359][ T7858] cgroup: noprefix used incorrectly [ 265.820584][ T7849] kAFS: unparsable volume name [ 266.503702][ T7866] hfsplus: unable to find HFS+ superblock [ 267.830866][ T7869] netlink: 104 bytes leftover after parsing attributes in process `syz.1.507'. [ 268.061995][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 268.422072][ T5929] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 268.792398][ T30] kauditd_printk_skb: 1769 callbacks suppressed [ 268.792420][ T30] audit: type=1400 audit(1754255471.629:39821): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=7865 comm="syz.3.506" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 268.818268][ C1] vkms_vblank_simulate: vblank timer overrun [ 268.844527][ T5839] audit: audit_backlog=65 > audit_backlog_limit=64 [ 268.851067][ T5839] audit: audit_lost=2199 audit_rate_limit=0 audit_backlog_limit=64 [ 268.862376][ T7880] audit: audit_backlog=65 > audit_backlog_limit=64 [ 268.868926][ T7880] audit: audit_lost=2200 audit_rate_limit=0 audit_backlog_limit=64 [ 268.873416][ T7871] audit: audit_backlog=65 > audit_backlog_limit=64 [ 268.878353][ T7879] audit: audit_backlog=65 > audit_backlog_limit=64 [ 268.884779][ T7871] audit: audit_lost=2201 audit_rate_limit=0 audit_backlog_limit=64 [ 268.884803][ T7871] audit: backlog limit exceeded [ 268.904755][ T7879] audit: audit_lost=2202 audit_rate_limit=0 audit_backlog_limit=64 [ 268.991654][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 269.008814][ T10] usb 4-1: config 0 has an invalid interface number: 148 but max is 0 [ 269.020870][ T10] usb 4-1: config 0 has no interface number 0 [ 269.038613][ T10] usb 4-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36 [ 269.063263][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.071341][ T10] usb 4-1: Product: syz [ 269.081508][ T10] usb 4-1: Manufacturer: syz [ 269.088357][ T10] usb 4-1: SerialNumber: syz [ 269.139879][ T10] usb 4-1: config 0 descriptor?? [ 269.314092][ T5929] usb 1-1: Using ep0 maxpacket: 8 [ 269.336410][ T5929] usb 1-1: config 0 has an invalid interface number: 148 but max is 0 [ 269.575842][ T10] kobil_sct 4-1:0.148: KOBIL USB smart card terminal converter detected [ 269.588115][ T10] usb 4-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 269.759022][ T5929] usb 1-1: config 0 has no interface number 0 [ 269.782255][ T5953] usb 4-1: USB disconnect, device number 16 [ 269.792510][ T5929] usb 1-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36 [ 269.808612][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.818649][ T5953] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 269.833312][ T5929] usb 1-1: Product: syz [ 269.860826][ T5953] kobil_sct 4-1:0.148: device disconnected [ 269.866827][ T5929] usb 1-1: Manufacturer: syz [ 269.871571][ T5929] usb 1-1: SerialNumber: syz [ 270.041531][ T5929] usb 1-1: config 0 descriptor?? [ 270.054841][ T5929] kobil_sct 1-1:0.148: KOBIL USB smart card terminal converter detected [ 270.069767][ T5929] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 270.352249][ T1224] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 270.382214][ T5953] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 270.511956][ T1224] usb 2-1: Using ep0 maxpacket: 16 [ 270.523703][ T1224] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 270.533307][ T1224] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.543751][ T1224] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 270.555113][ T5953] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 270.556791][ T1224] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 270.569716][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.587894][ T5953] usb 4-1: Product: syz [ 270.593106][ T1224] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.593505][ T5953] usb 4-1: Manufacturer: syz [ 270.608895][ T1224] usb 2-1: Product: syz [ 270.612392][ T5953] usb 4-1: SerialNumber: syz [ 270.617002][ T1224] usb 2-1: Manufacturer: syz [ 270.632000][ T1224] usb 2-1: SerialNumber: syz [ 270.639553][ T5953] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 270.681253][ T43] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 270.862069][ T7905] overlayfs: failed to clone upperpath [ 270.946336][ C1] usb 4-1: ath9k_htc: invalid pkt_len (b408) [ 270.959414][ T1224] usb 2-1: 0:2 : does not exist [ 271.008643][ T1224] usb 2-1: USB disconnect, device number 12 [ 271.261302][ T5953] usb 4-1: USB disconnect, device number 17 [ 271.408413][ T1224] usb 1-1: USB disconnect, device number 18 [ 271.424401][ T7909] netlink: 36 bytes leftover after parsing attributes in process `syz.5.518'. [ 271.427569][ T1224] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 271.446219][ T1224] kobil_sct 1-1:0.148: device disconnected [ 271.494370][ T7912] PM: Enabling pm_trace changes system date and time during resume. [ 271.494370][ T7912] PM: Correct system time has to be restored manually after resume. [ 271.742138][ T43] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 271.758607][ T43] ath9k_htc: Failed to initialize the device [ 271.792022][ T5953] usb 4-1: ath9k_htc: USB layer deinitialized [ 272.042637][ T1224] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 272.082246][ T10] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 272.412001][ T1224] usb 2-1: Using ep0 maxpacket: 8 [ 272.426693][ T1224] usb 2-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 45, changing to 9 [ 272.486020][ T1224] usb 2-1: config 1 interface 0 has no altsetting 0 [ 272.523517][ T1224] usb 2-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 272.548630][ T1224] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.581803][ T1224] usb 2-1: Product: syz [ 272.601086][ T1224] usb 2-1: Manufacturer: syz [ 272.611255][ T1224] usb 2-1: SerialNumber: syz [ 272.665343][ T7933] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.721096][ T5929] IPVS: starting estimator thread 0... [ 272.812131][ T7934] IPVS: using max 26 ests per chain, 62400 per kthread [ 273.013384][ T7914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.051618][ T7914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.207397][ T7914] 9pnet_fd: Insufficient options for proto=fd [ 273.249276][ T7923] kAFS: unparsable volume name [ 273.279310][ T7941] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 273.386431][ T7941] overlayfs: failed to set xattr on upper [ 273.412571][ T7941] overlayfs: ...falling back to redirect_dir=nofollow. [ 273.436393][ T7941] overlayfs: ...falling back to uuid=null. [ 273.900362][ T7946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.529'. [ 273.921929][ T30] kauditd_printk_skb: 2909 callbacks suppressed [ 273.921948][ T30] audit: type=1400 audit(1754255476.719:42656): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7943 comm="syz.3.529" name="97" dev="tmpfs" ino=532 [ 273.989040][ T7948] bridge_slave_0: left allmulticast mode [ 274.366575][ T30] audit: type=1400 audit(1754255476.719:42657): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7943 comm="syz.3.529" name="97" dev="tmpfs" ino=532 [ 274.386053][ T30] audit: type=1400 audit(1754255476.719:42658): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=7943 comm="syz.3.529" name="97" dev="tmpfs" ino=532 [ 274.405214][ T30] audit: type=1400 audit(1754255476.719:42659): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=7943 comm="syz.3.529" path="/97/file0" dev="tmpfs" ino=537 [ 274.549547][ T5853] audit: audit_backlog=65 > audit_backlog_limit=64 [ 274.552697][ T30] audit: type=1400 audit(1754255476.719:42660): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7943 comm="syz.3.529" name="97" dev="tmpfs" ino=532 [ 274.557289][ T5840] audit: audit_backlog=65 > audit_backlog_limit=64 [ 274.578814][ T30] audit: type=1400 audit(1754255476.719:42661): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7943 comm="syz.3.529" name="97" dev="tmpfs" ino=532 [ 274.583596][ T7948] bridge_slave_0: left promiscuous mode [ 274.601028][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 274.612792][ C1] audit: audit_lost=2227 audit_rate_limit=0 audit_backlog_limit=64 [ 274.677366][ T7948] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.770253][ T7948] bridge_slave_1: left allmulticast mode [ 274.781425][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 274.804989][ T7950] netlink: 'syz.4.528': attribute type 10 has an invalid length. [ 274.881495][ T7952] netlink: 20 bytes leftover after parsing attributes in process `syz.3.530'. [ 274.892740][ T7948] bridge_slave_1: left promiscuous mode [ 274.908649][ T10] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 274.918795][ T7948] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.949964][ T10] usb 1-1: can't read configurations, error -71 [ 274.974995][ T7948] bond0: (slave bond_slave_0): Releasing backup interface [ 275.011051][ T7948] bond0: (slave bond_slave_1): Releasing backup interface [ 275.058596][ T7955] netlink: 20 bytes leftover after parsing attributes in process `syz.0.531'. [ 275.086498][ T7948] team0: Port device team_slave_0 removed [ 275.104755][ T7948] team0: Port device team_slave_1 removed [ 275.111631][ T7948] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.122602][ T7948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.139956][ T7948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.152064][ T7948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.229630][ T7948] bond1: (slave veth3): Releasing active interface [ 275.317187][ T7950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.328505][ T1224] usbhid 2-1:1.0: can't add hid device: -71 [ 275.355733][ T1224] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 275.399749][ T7950] team0: Port device bond0 added [ 275.402003][ T1224] usb 2-1: USB disconnect, device number 13 [ 275.562751][ T7962] netlink: 36 bytes leftover after parsing attributes in process `syz.1.532'. [ 275.723890][ T7964] PM: Enabling pm_trace changes system date and time during resume. [ 275.723890][ T7964] PM: Correct system time has to be restored manually after resume. [ 276.496561][ T7975] fuse: Bad value for 'fd' [ 277.812126][ T5914] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 278.432090][ T5914] usb 2-1: Using ep0 maxpacket: 8 [ 278.471930][ T5914] usb 2-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 278.937683][ T30] kauditd_printk_skb: 2349 callbacks suppressed [ 278.957975][ T30] audit: type=1400 audit(1754255481.529:44889): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=5828 comm="syz-executor" saddr=10.128.0.169 src=30008 daddr=10.128.0.126 dest=52354 netif=eth0 [ 279.012003][ T5914] usb 2-1: config 0 has an invalid interface number: 150 but max is 64 [ 279.082727][ T5914] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.098686][ T5914] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 65 [ 279.099379][ T6076] audit: audit_backlog=65 > audit_backlog_limit=64 [ 279.116297][ T8011] audit: audit_backlog=65 > audit_backlog_limit=64 [ 279.121018][ T30] audit: type=1400 audit(1754255481.529:44890): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=5828 comm="syz-executor" saddr=10.128.0.169 src=30008 daddr=10.128.0.126 dest=52354 netif=eth0 [ 279.158866][ T5914] usb 2-1: config 0 has no interface number 0 [ 279.165431][ T8011] audit: audit_lost=2269 audit_rate_limit=0 audit_backlog_limit=64 [ 279.169633][ T5914] usb 2-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 279.190835][ T6076] audit: audit_lost=2270 audit_rate_limit=0 audit_backlog_limit=64 [ 279.198973][ T8011] audit: backlog limit exceeded [ 279.199025][ T30] audit: type=1400 audit(1754255481.529:44891): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=7999 comm="syz.3.543" saddr=10.128.0.169 src=30008 daddr=10.128.0.126 dest=52354 netif=eth0 [ 279.235679][ T6076] audit: backlog limit exceeded [ 279.235810][ T8011] audit: audit_backlog=65 > audit_backlog_limit=64 [ 279.241953][ T5914] usb 2-1: config 0 interface 150 has no altsetting 0 [ 279.285605][ T5914] usb 2-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 279.307319][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.319104][ T8009] kAFS: unparsable volume name [ 279.336241][ T5914] usb 2-1: config 0 descriptor?? [ 279.460646][ T8012] netlink: 36 bytes leftover after parsing attributes in process `syz.0.545'. [ 279.513309][ T8021] PM: Enabling pm_trace changes system date and time during resume. [ 279.513309][ T8021] PM: Correct system time has to be restored manually after resume. [ 279.832520][ T5914] usb 2-1: USB disconnect, device number 14 [ 281.064912][ T8037] netlink: 32 bytes leftover after parsing attributes in process `syz.0.549'. [ 282.151996][ T24] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 282.332040][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 282.348498][ T24] usb 2-1: config 0 has an invalid interface number: 148 but max is 0 [ 282.537325][ T24] usb 2-1: config 0 has no interface number 0 [ 282.564820][ T8046] binder: 8039:8046 ioctl 40046205 0 returned -22 [ 282.578138][ T24] usb 2-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36 [ 282.844662][ T8051] netlink: 40 bytes leftover after parsing attributes in process `syz.4.553'. [ 283.585226][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.614121][ T24] usb 2-1: Product: syz [ 283.641106][ T24] usb 2-1: Manufacturer: syz [ 283.663691][ T24] usb 2-1: SerialNumber: syz [ 283.704172][ T24] usb 2-1: config 0 descriptor?? [ 283.715112][ T24] kobil_sct 2-1:0.148: KOBIL USB smart card terminal converter detected [ 283.768260][ T24] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 283.943557][ T30] kauditd_printk_skb: 2592 callbacks suppressed [ 283.943573][ T30] audit: type=1400 audit(1754255486.769:46771): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5840 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 283.998453][ T6076] audit: audit_backlog=65 > audit_backlog_limit=64 [ 284.037682][ T6076] audit: audit_lost=2509 audit_rate_limit=0 audit_backlog_limit=64 [ 284.039964][ T30] audit: type=1400 audit(1754255486.769:46772): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5840 comm="syz-executor" name="/" dev="sysfs" ino=1 [ 284.046867][ T8056] audit: audit_backlog=65 > audit_backlog_limit=64 [ 284.102837][ T30] audit: type=1400 audit(1754255486.769:46773): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5840 comm="syz-executor" name="fs" dev="sysfs" ino=2 [ 284.121808][ T6076] audit: backlog limit exceeded [ 284.122054][ T6076] audit: audit_backlog=65 > audit_backlog_limit=64 [ 284.122072][ T6076] audit: audit_lost=2510 audit_rate_limit=0 audit_backlog_limit=64 [ 284.122088][ T6076] audit: backlog limit exceeded [ 284.234900][ T8059] netlink: 32 bytes leftover after parsing attributes in process `syz.5.557'. [ 285.038946][ T10] usb 2-1: USB disconnect, device number 15 [ 285.067978][ T10] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 285.117622][ T10] kobil_sct 2-1:0.148: device disconnected [ 286.042769][ T8079] netlink: 36 bytes leftover after parsing attributes in process `syz.4.559'. [ 286.294389][ T8082] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 286.803566][ T8090] overlayfs: overlapping lowerdir path [ 287.341147][ T8093] orangefs_mount: mount request failed with -4 [ 288.095387][ T8114] openvswitch: netlink: IP tunnel TTL not specified. [ 289.006576][ T30] kauditd_printk_skb: 2659 callbacks suppressed [ 289.006596][ T30] audit: type=1400 audit(1754255491.809:48681): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8117 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 289.062633][ T5849] audit: audit_backlog=65 > audit_backlog_limit=64 [ 289.067193][ T8120] audit: audit_backlog=65 > audit_backlog_limit=64 [ 289.069340][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 289.082370][ C1] audit: audit_lost=2762 audit_rate_limit=0 audit_backlog_limit=64 [ 289.090293][ C1] audit: backlog limit exceeded [ 289.096263][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 289.102990][ C1] audit: audit_lost=2763 audit_rate_limit=0 audit_backlog_limit=64 [ 289.111026][ C1] audit: backlog limit exceeded [ 289.156306][ T5849] audit: audit_lost=2764 audit_rate_limit=0 audit_backlog_limit=64 [ 290.672032][ T5953] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 290.843576][ T5953] usb 6-1: Using ep0 maxpacket: 8 [ 291.027734][ T5953] usb 6-1: config 0 has an invalid interface number: 148 but max is 0 [ 291.082545][ T5953] usb 6-1: config 0 has no interface number 0 [ 291.409464][ T5953] usb 6-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36 [ 291.439365][ T5953] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.523729][ T5953] usb 6-1: Product: syz [ 291.527984][ T5953] usb 6-1: Manufacturer: syz [ 291.539667][ T5953] usb 6-1: SerialNumber: syz [ 291.556729][ T5953] usb 6-1: config 0 descriptor?? [ 291.574019][ T5953] kobil_sct 6-1:0.148: KOBIL USB smart card terminal converter detected [ 291.606599][ T5953] usb 6-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 291.834932][ T8141] netlink: 68 bytes leftover after parsing attributes in process `syz.1.575'. [ 292.979755][ T8150] input: syz1 as /devices/virtual/input/input14 [ 293.056328][ T8150] netlink: 16 bytes leftover after parsing attributes in process `syz.3.578'. [ 293.081979][ T10] usb 6-1: USB disconnect, device number 18 [ 293.098831][ T10] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 293.121665][ T10] kobil_sct 6-1:0.148: device disconnected [ 294.255102][ T8162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.323746][ T30] kauditd_printk_skb: 1870 callbacks suppressed [ 294.323804][ T30] audit: type=1400 audit(1754255496.549:50336): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=8162 comm="syz.0.582" opid=8162 ocomm="syz.0.582" [ 294.447570][ T8168] hfsplus: unable to find HFS+ superblock [ 294.498132][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 294.505035][ C1] audit: audit_lost=2837 audit_rate_limit=0 audit_backlog_limit=64 [ 294.505165][ T30] audit: type=1400 audit(1754255496.569:50337): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5849 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 294.513018][ C1] audit: backlog limit exceeded [ 294.515805][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 294.532709][ T30] audit: type=1400 audit(1754255496.579:50338): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5849 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 294.537288][ C1] audit: audit_lost=2838 audit_rate_limit=0 audit_backlog_limit=64 [ 294.543928][ T30] audit: type=1400 audit(1754255496.579:50339): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5849 comm="syz-executor" name="147" dev="tmpfs" ino=797 [ 294.562946][ C1] audit: backlog limit exceeded [ 295.976133][ T8184] unknown channel width for channel at 909000KHz? [ 295.983245][ T8184] unknown channel width for channel at 909000KHz? [ 296.034965][ T8184] unknown channel width for channel at 909000KHz? [ 296.782238][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 297.042301][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 297.171507][ T10] usb 4-1: config 0 has an invalid interface number: 148 but max is 0 [ 297.247975][ T10] usb 4-1: config 0 has no interface number 0 [ 297.266451][ T10] usb 4-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36 [ 297.310436][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.318979][ T10] usb 4-1: Product: syz [ 297.333818][ T10] usb 4-1: Manufacturer: syz [ 297.365324][ T10] usb 4-1: SerialNumber: syz [ 297.387119][ T10] usb 4-1: config 0 descriptor?? [ 297.406843][ T10] kobil_sct 4-1:0.148: KOBIL USB smart card terminal converter detected [ 297.433303][ T10] usb 4-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 297.451108][ T8207] netlink: 'syz.1.593': attribute type 1 has an invalid length. [ 299.212834][ T10] usb 4-1: USB disconnect, device number 18 [ 299.248766][ T10] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 299.268080][ T10] kobil_sct 4-1:0.148: device disconnected [ 299.348246][ T30] kauditd_printk_skb: 2523 callbacks suppressed [ 299.348267][ T30] audit: type=1400 audit(1754255502.179:52092): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5839 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 299.380318][ T5839] audit: audit_backlog=65 > audit_backlog_limit=64 [ 299.388264][ T8228] audit: audit_backlog=65 > audit_backlog_limit=64 [ 299.398312][ T8229] audit: audit_backlog=65 > audit_backlog_limit=64 [ 299.407661][ T30] audit: type=1400 audit(1754255502.179:52093): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5839 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 299.407818][ T5839] audit: audit_lost=3096 audit_rate_limit=0 audit_backlog_limit=64 [ 299.431782][ T30] audit: type=1400 audit(1754255502.179:52094): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5839 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 299.446434][ T8229] audit: audit_lost=3097 audit_rate_limit=0 audit_backlog_limit=64 [ 299.463976][ T30] audit: type=1400 audit(1754255502.179:52095): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5839 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 299.464032][ T30] audit: type=1400 audit(1754255502.179:52096): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=5839 comm="syz-executor" name="129" dev="tmpfs" ino=713 [ 299.683078][ T8231] hfsplus: unable to find HFS+ superblock [ 300.183246][ T8234] xt_CT: You must specify a L4 protocol and not use inversions on it [ 301.192047][ T8245] loop2: detected capacity change from 0 to 7 [ 301.212028][ T8245] loop2: p1 [ 301.215411][ T8245] loop2: partition table partially beyond EOD, truncated [ 301.265989][ T8245] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 302.163957][ T36] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 302.203895][ T7465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.213277][ T8258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.252950][ T7465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.957300][ T8268] netlink: 32 bytes leftover after parsing attributes in process `syz.4.612'. [ 302.983162][ T8268] netlink: 4 bytes leftover after parsing attributes in process `syz.4.612'. [ 303.621202][ T8276] hfsplus: unable to find HFS+ superblock [ 304.362592][ T30] kauditd_printk_skb: 1821 callbacks suppressed [ 304.362612][ T30] audit: type=1400 audit(1754255507.189:53902): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8277 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 304.409634][ T8273] netlink: 12 bytes leftover after parsing attributes in process `syz.4.614'. [ 304.482326][ T8273] netlink: 'syz.4.614': attribute type 13 has an invalid length. [ 304.602800][ T30] audit: type=1400 audit(1754255507.189:53903): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8277 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 304.624091][ T30] audit: type=1400 audit(1754255507.189:53904): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8277 comm="syz-executor" name="116" dev="tmpfs" ino=630 [ 304.646270][ T30] audit: type=1400 audit(1754255507.189:53905): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=8277 comm="syz-executor" opid=8277 ocomm="syz-executor" [ 304.669020][ T30] audit: type=1400 audit(1754255507.199:53906): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8278 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 304.705374][ T30] audit: type=1400 audit(1754255507.199:53907): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8278 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 305.352061][ T30] audit: type=1400 audit(1754255507.199:53908): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8278 comm="syz-executor" name="132" dev="tmpfs" ino=729 [ 305.354105][ T5853] audit: audit_backlog=65 > audit_backlog_limit=64 [ 305.372062][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 305.384430][ C1] audit: audit_lost=3103 audit_rate_limit=0 audit_backlog_limit=64 [ 305.831352][ T8290] loop4: detected capacity change from 0 to 7 [ 305.846395][ T8290] Dev loop4: unable to read RDB block 7 [ 305.893319][ T8290] loop4: unable to read partition table [ 305.899276][ T8290] loop4: partition table beyond EOD, truncated [ 305.934486][ T8290] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 306.068431][ T8293] netlink: 'syz.5.619': attribute type 1 has an invalid length. [ 306.611142][ T8304] No source specified [ 307.984700][ T8313] netlink: 41 bytes leftover after parsing attributes in process `syz.5.624'. [ 308.389306][ T8320] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 308.592225][ T8325] hfsplus: unable to find HFS+ superblock [ 308.692253][ T5953] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 309.568917][ T30] kauditd_printk_skb: 2079 callbacks suppressed [ 309.568939][ T30] audit: type=1400 audit(1754255512.399:55796): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=8317 comm="syz.1.626" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 309.573289][ T5953] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 309.581906][ T30] audit: type=1400 audit(1754255512.399:55797): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=8317 comm="syz.1.626" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 309.713077][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.746390][ T30] audit: type=1400 audit(1754255512.399:55798): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=8317 comm="syz.1.626" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 309.831006][ T30] audit: type=1400 audit(1754255512.399:55799): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=8317 comm="syz.1.626" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 309.832836][ T5953] usb 2-1: Product: syz [ 309.911687][ T5953] usb 2-1: Manufacturer: syz [ 309.924066][ T5953] usb 2-1: SerialNumber: syz [ 310.116435][ T30] audit: type=1400 audit(1754255512.399:55800): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=8317 comm="syz.1.626" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 310.213355][ T30] audit: type=1400 audit(1754255512.399:55801): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=8317 comm="syz.1.626" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 310.214914][ T6076] audit: audit_backlog=65 > audit_backlog_limit=64 [ 310.234023][ T30] audit: type=1400 audit(1754255512.399:55802): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=8317 comm="syz.1.626" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 310.261756][ T26] audit: audit_backlog=65 > audit_backlog_limit=64 [ 310.262422][ T30] audit: type=1400 audit(1754255512.399:55803): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=8317 comm="syz.1.626" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 310.492790][ T5953] usb 2-1: config 0 descriptor?? [ 310.560770][ T5953] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 310.711032][ T8320] xt_CT: You must specify a L4 protocol and not use inversions on it [ 310.713871][ T8320] netlink: 56 bytes leftover after parsing attributes in process `syz.1.626'. [ 310.787846][ T5953] sonixb 2-1:0.0: Error reading register 00: -71 [ 311.525414][ T5953] usb 2-1: USB disconnect, device number 16 [ 314.203241][ T8371] tipc: Started in network mode [ 314.245450][ T8371] tipc: Node identity 9a287e2d1809, cluster identity 4711 [ 314.277530][ T8371] tipc: Enabled bearer , priority 10 [ 314.575309][ T30] kauditd_printk_skb: 1365 callbacks suppressed [ 314.575330][ T30] audit: type=1400 audit(1754255517.409:57165): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8376 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 314.610767][ T8377] netlink: 32 bytes leftover after parsing attributes in process `syz.3.642'. [ 314.630159][ T8377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.642'. [ 314.686706][ T30] audit: type=1400 audit(1754255517.409:57166): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8376 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 314.734936][ T5853] audit: audit_backlog=65 > audit_backlog_limit=64 [ 314.743936][ T5853] audit: audit_lost=3170 audit_rate_limit=0 audit_backlog_limit=64 [ 314.763495][ T5853] audit: backlog limit exceeded [ 314.768531][ T5853] audit: audit_backlog=65 > audit_backlog_limit=64 [ 314.785933][ T5853] audit: audit_lost=3171 audit_rate_limit=0 audit_backlog_limit=64 [ 314.791895][ T30] audit: type=1400 audit(1754255517.409:57167): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8376 comm="syz-executor" name="123" dev="tmpfs" ino=668 [ 314.797737][ T5853] audit: backlog limit exceeded [ 314.832911][ T5853] audit: audit_backlog=65 > audit_backlog_limit=64 [ 315.093581][ T8380] netlink: 24 bytes leftover after parsing attributes in process `syz.3.643'. [ 315.608461][ T10] tipc: Node number set to 2183233069 [ 316.081953][ T8388] netlink: 60 bytes leftover after parsing attributes in process `syz.4.645'. [ 316.113648][ T8384] netlink: 60 bytes leftover after parsing attributes in process `syz.4.645'. [ 316.207991][ T8392] Failed to get privilege flags for destination (handle=0x2:0xf7ffffff) [ 316.844054][ T8392] vlan2: entered allmulticast mode [ 316.849266][ T8392] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 317.407204][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.482029][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.292244][ T8410] netlink: 32 bytes leftover after parsing attributes in process `syz.0.653'. [ 318.372952][ T8410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.653'. [ 318.633422][ T8416] netlink: 24 bytes leftover after parsing attributes in process `syz.0.654'. [ 319.734521][ T30] kauditd_printk_skb: 2128 callbacks suppressed [ 319.734540][ T30] audit: type=1400 audit(1754255522.569:59066): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8423 comm="modprobe" name="/" dev="sda1" ino=2 [ 320.106060][ T5853] audit: audit_backlog=65 > audit_backlog_limit=64 [ 320.131000][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 320.137589][ C1] audit: audit_lost=3249 audit_rate_limit=0 audit_backlog_limit=64 [ 320.145614][ C1] audit: backlog limit exceeded [ 320.151929][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 320.158477][ C1] audit: audit_lost=3250 audit_rate_limit=0 audit_backlog_limit=64 [ 320.166434][ C1] audit: backlog limit exceeded [ 320.171693][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 320.178347][ C1] audit: audit_lost=3251 audit_rate_limit=0 audit_backlog_limit=64 [ 320.902649][ T10] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 321.375367][ T10] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 321.397749][ T10] usb 4-1: config 0 has an invalid interface number: 2 but max is -1 [ 321.476493][ T8456] netlink: 32 bytes leftover after parsing attributes in process `syz.0.664'. [ 321.482958][ T10] usb 4-1: config 0 has an invalid interface number: 2 but max is -1 [ 321.498998][ T8456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.664'. [ 321.519107][ T10] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 321.569721][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 321.591255][ T10] usb 4-1: config 0 has no interface number 0 [ 321.616975][ T10] usb 4-1: too many endpoints for config 0 interface 2 altsetting 48: 48, using maximum allowed: 30 [ 321.672920][ T10] usb 4-1: config 0 interface 2 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 321.708323][ T8461] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 321.708500][ T8460] IPVS: stopping backup sync thread 8461 ... [ 321.737676][ T10] usb 4-1: config 0 interface 2 has no altsetting 1 [ 321.765905][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 321.775751][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.793944][ T10] usb 4-1: Product: syz [ 321.807779][ T10] usb 4-1: Manufacturer: syz [ 321.882290][ T8464] syz_tun: entered allmulticast mode [ 321.891575][ T8462] syz_tun: left allmulticast mode [ 321.941881][ T10] usb 4-1: SerialNumber: syz [ 321.981459][ T10] usb 4-1: config 0 descriptor?? [ 322.354531][ T8445] netlink: 20 bytes leftover after parsing attributes in process `syz.3.658'. [ 322.494128][ T8475] netlink: 24 bytes leftover after parsing attributes in process `syz.1.667'. [ 323.578191][ T10] usb 4-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 323.610859][ T10] usb 4-1: MIDIStreaming interface descriptor not found [ 324.675283][ T24] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 324.899865][ T5839] audit_log_start: 2447 callbacks suppressed [ 324.899879][ T5839] audit: audit_backlog=65 > audit_backlog_limit=64 [ 324.912710][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 324.919427][ C1] audit: audit_lost=3273 audit_rate_limit=0 audit_backlog_limit=64 [ 324.927374][ C1] audit: backlog limit exceeded [ 324.932813][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 324.939422][ C1] audit: audit_lost=3274 audit_rate_limit=0 audit_backlog_limit=64 [ 324.947821][ C1] audit: backlog limit exceeded [ 324.952987][ T30] audit: type=1400 audit(1754255527.639:61452): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=8481 comm="syz.1.670" saddr=10.128.0.169 src=30008 daddr=10.128.0.126 dest=52354 netif=eth0 [ 324.953305][ T26] audit: audit_backlog=65 > audit_backlog_limit=64 [ 324.975816][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 325.058636][ T8489] FAULT_INJECTION: forcing a failure. [ 325.058636][ T8489] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 325.127542][ T8489] CPU: 0 UID: 0 PID: 8489 Comm: syz.3.671 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 325.127573][ T8489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 325.127585][ T8489] Call Trace: [ 325.127594][ T8489] [ 325.127603][ T8489] dump_stack_lvl+0x189/0x250 [ 325.127633][ T8489] ? __pfx____ratelimit+0x10/0x10 [ 325.127656][ T8489] ? __pfx_dump_stack_lvl+0x10/0x10 [ 325.127678][ T8489] ? __pfx__printk+0x10/0x10 [ 325.127700][ T8489] ? __might_fault+0xb0/0x130 [ 325.127733][ T8489] should_fail_ex+0x414/0x560 [ 325.127761][ T8489] _copy_from_user+0x2d/0xb0 [ 325.127790][ T8489] __se_sys_mount+0x18a/0x410 [ 325.127820][ T8489] ? __pfx___se_sys_mount+0x10/0x10 [ 325.127839][ T8489] ? rcu_is_watching+0x15/0xb0 [ 325.127867][ T8489] ? do_syscall_64+0xbe/0x3b0 [ 325.127887][ T8489] ? __x64_sys_mount+0x20/0xc0 [ 325.127912][ T8489] do_syscall_64+0xfa/0x3b0 [ 325.127932][ T8489] ? lockdep_hardirqs_on+0x9c/0x150 [ 325.127953][ T8489] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.127973][ T8489] ? clear_bhb_loop+0x60/0xb0 [ 325.127998][ T8489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.128017][ T8489] RIP: 0033:0x7f9a8478eb69 [ 325.128036][ T8489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.128054][ T8489] RSP: 002b:00007f9a85581038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 325.128078][ T8489] RAX: ffffffffffffffda RBX: 00007f9a849b5fa0 RCX: 00007f9a8478eb69 [ 325.128092][ T8489] RDX: 0000200000001200 RSI: 0000200000000000 RDI: 0000000000000000 [ 325.128105][ T8489] RBP: 00007f9a85581090 R08: 0000200000000180 R09: 0000000000000000 [ 325.128117][ T8489] R10: 000000000000400a R11: 0000000000000246 R12: 0000000000000001 [ 325.128129][ T8489] R13: 0000000000000000 R14: 00007f9a849b5fa0 R15: 00007ffd067cb2c8 [ 325.128160][ T8489] [ 325.192046][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 325.196648][ C0] vkms_vblank_simulate: vblank timer overrun [ 325.218866][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 325.220834][ C0] vkms_vblank_simulate: vblank timer overrun [ 325.228826][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 325.232107][ C0] hrtimer: interrupt took 100294139 ns [ 325.332180][ C0] vkms_vblank_simulate: vblank timer overrun [ 325.372064][ C0] vkms_vblank_simulate: vblank timer overrun [ 325.446541][ T10] usb 4-1: USB disconnect, device number 19 [ 325.582112][ T43] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 325.626288][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 325.650165][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.669278][ T24] usb 1-1: Product: syz [ 325.680908][ T24] usb 1-1: Manufacturer: syz [ 325.702072][ T24] usb 1-1: SerialNumber: syz [ 325.741918][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 325.754081][ T24] usb 1-1: config 0 descriptor?? [ 325.762584][ T43] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 325.786463][ T24] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 325.802093][ T24] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 325.815620][ T43] usb 6-1: New USB device found, idVendor=08ca, idProduct=0103, bcdDevice=bf.1b [ 325.828613][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.839936][ T43] usb 6-1: Product: syz [ 325.849801][ T43] usb 6-1: Manufacturer: syz [ 325.855116][ T43] usb 6-1: SerialNumber: syz [ 325.868144][ T43] usb 6-1: config 0 descriptor?? [ 326.086870][ T8493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.109669][ T8493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.156461][ T43] gspca_main: spca500-2.14.0 probing 08ca:0103 [ 326.206623][ T43] usb 6-1: USB disconnect, device number 19 [ 326.475967][ T24] em28xx 1-1:0.0: chip ID is em2874 [ 328.418367][ T8525] netlink: 24 bytes leftover after parsing attributes in process `syz.5.680'. [ 328.791657][ T5914] usb 1-1: USB disconnect, device number 21 [ 328.835001][ T5914] em28xx 1-1:0.0: Disconnecting em28xx [ 328.859192][ T5914] em28xx 1-1:0.0: Freeing device [ 329.718473][ T8542] FAULT_INJECTION: forcing a failure. [ 329.718473][ T8542] name failslab, interval 1, probability 0, space 0, times 1 [ 329.753060][ T8542] CPU: 1 UID: 0 PID: 8542 Comm: syz.5.684 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 329.753094][ T8542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 329.753107][ T8542] Call Trace: [ 329.753115][ T8542] [ 329.753124][ T8542] dump_stack_lvl+0x189/0x250 [ 329.753154][ T8542] ? __pfx____ratelimit+0x10/0x10 [ 329.753176][ T8542] ? __pfx_dump_stack_lvl+0x10/0x10 [ 329.753199][ T8542] ? __pfx__printk+0x10/0x10 [ 329.753231][ T8542] ? __pfx___might_resched+0x10/0x10 [ 329.753260][ T8542] should_fail_ex+0x414/0x560 [ 329.753294][ T8542] should_failslab+0xa8/0x100 [ 329.753320][ T8542] kmem_cache_alloc_noprof+0x73/0x3c0 [ 329.753339][ T8542] ? getname_flags+0xb8/0x540 [ 329.753369][ T8542] getname_flags+0xb8/0x540 [ 329.753398][ T8542] user_path_at+0x24/0x60 [ 329.753426][ T8542] __se_sys_mount+0x2d3/0x410 [ 329.753465][ T8542] ? __pfx___se_sys_mount+0x10/0x10 [ 329.753485][ T8542] ? rcu_is_watching+0x15/0xb0 [ 329.753513][ T8542] ? do_syscall_64+0xbe/0x3b0 [ 329.753534][ T8542] ? __x64_sys_mount+0x20/0xc0 [ 329.753559][ T8542] do_syscall_64+0xfa/0x3b0 [ 329.753580][ T8542] ? lockdep_hardirqs_on+0x9c/0x150 [ 329.753601][ T8542] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.753620][ T8542] ? clear_bhb_loop+0x60/0xb0 [ 329.753645][ T8542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.753664][ T8542] RIP: 0033:0x7f3e4018eb69 [ 329.753682][ T8542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.753700][ T8542] RSP: 002b:00007f3e41098038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 329.753723][ T8542] RAX: ffffffffffffffda RBX: 00007f3e403b6080 RCX: 00007f3e4018eb69 [ 329.753737][ T8542] RDX: 0000200000001200 RSI: 0000200000000000 RDI: 0000000000000000 [ 329.753751][ T8542] RBP: 00007f3e41098090 R08: 0000200000000180 R09: 0000000000000000 [ 329.753764][ T8542] R10: 000000000000400a R11: 0000000000000246 R12: 0000000000000001 [ 329.753776][ T8542] R13: 0000000000000000 R14: 00007f3e403b6080 R15: 00007fff9d9ee398 [ 329.753810][ T8542] [ 329.766216][ T5914] kernel write not supported for file /uinput (pid: 5914 comm: kworker/0:4) [ 329.988770][ T30] kauditd_printk_skb: 3115 callbacks suppressed [ 329.988792][ T30] audit: type=1400 audit(1754255532.819:63898): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=8529 comm="syz.4.681" saddr=10.128.0.169 src=30008 daddr=10.128.0.126 dest=52354 netif=eth0 [ 330.048133][ T5853] audit: audit_backlog=65 > audit_backlog_limit=64 [ 330.067616][ T5853] audit: audit_lost=3499 audit_rate_limit=0 audit_backlog_limit=64 [ 330.086775][ T30] audit: type=1400 audit(1754255532.849:63899): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=30 comm="kauditd" saddr=10.128.0.169 src=30008 daddr=10.128.0.126 dest=52354 netif=eth0 [ 330.120169][ T5853] audit: backlog limit exceeded [ 330.142926][ T5853] audit: audit_backlog=65 > audit_backlog_limit=64 [ 330.165360][ T5853] audit: audit_lost=3500 audit_rate_limit=0 audit_backlog_limit=64 [ 330.182186][ T5853] audit: backlog limit exceeded [ 330.187450][ T5853] audit: audit_backlog=65 > audit_backlog_limit=64 [ 330.190828][ T30] audit: type=1400 audit(1754255532.859:63900): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5853 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 330.592343][ T5914] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 330.662650][ T8553] ip6gretap0: entered promiscuous mode [ 330.668637][ T8553] macsec1: entered allmulticast mode [ 330.674427][ T8553] ip6gretap0: entered allmulticast mode [ 330.746429][ T8553] ip6gretap0: left allmulticast mode [ 330.754522][ T8553] ip6gretap0: left promiscuous mode [ 330.852729][ T5914] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.882023][ T5914] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 330.898803][ T5914] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 331.052045][ T8556] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 331.059993][ T8556] overlayfs: failed to set xattr on upper [ 331.066067][ T8556] overlayfs: ...falling back to redirect_dir=nofollow. [ 331.073290][ T8556] overlayfs: ...falling back to index=off. [ 331.079254][ T8556] overlayfs: ...falling back to uuid=null. [ 331.768372][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.846363][ T5914] usb 4-1: config 0 descriptor?? [ 331.928314][ T5914] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 331.991147][ T5914] dvb-usb: bulk message failed: -22 (3/0) [ 332.073950][ T8544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.075292][ T5914] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 332.105955][ T8544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.108552][ T5914] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 332.131101][ T5914] usb 4-1: media controller created [ 332.153909][ T5914] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 332.176625][ T5914] dvb-usb: bulk message failed: -22 (6/0) [ 332.183759][ T5914] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 332.199012][ T8544] dvb-usb: bulk message failed: -22 (2/0) [ 332.217077][ T5914] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input18 [ 332.308336][ T5914] dvb-usb: schedule remote query interval to 150 msecs. [ 332.399072][ T5914] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 332.434835][ T5914] usb 4-1: USB disconnect, device number 20 [ 333.046045][ T5914] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 333.706455][ T8578] netlink: 24 bytes leftover after parsing attributes in process `syz.3.694'. [ 335.011935][ T30] kauditd_printk_skb: 2824 callbacks suppressed [ 335.011957][ T30] audit: type=1400 audit(1754255537.839:66249): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=8586 comm="syz-executor" name="135" dev="tmpfs" ino=731 [ 335.082499][ T8587] xt_hashlimit: size too large, truncated to 1048576 [ 335.097671][ T5849] audit: audit_backlog=65 > audit_backlog_limit=64 [ 335.097773][ T5839] audit: audit_backlog=65 > audit_backlog_limit=64 [ 335.110862][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 335.117606][ C1] audit: audit_lost=3660 audit_rate_limit=0 audit_backlog_limit=64 [ 335.122121][ T5839] audit: audit_lost=3661 audit_rate_limit=0 audit_backlog_limit=64 [ 335.125551][ C1] audit: backlog limit exceeded [ 335.139193][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 335.141931][ T30] audit: type=1400 audit(1754255537.839:66250): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8586 comm="syz-executor" name="135" dev="tmpfs" ino=731 [ 335.145801][ C1] audit: audit_lost=3662 audit_rate_limit=0 audit_backlog_limit=64 [ 335.711747][ T8602] netlink: 60 bytes leftover after parsing attributes in process `syz.0.701'. [ 336.042300][ T24] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 336.089197][ T8606] overlayfs: missing 'lowerdir' [ 336.195693][ T24] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 336.204520][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.215394][ T24] usb 1-1: config 0 has no interface number 0 [ 336.252548][ T5929] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 336.267942][ T24] usb 1-1: config 0 interface 106 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 216 [ 336.279067][ T24] usb 1-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 336.293161][ T24] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 336.302708][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.318523][ T24] usb 1-1: config 0 descriptor?? [ 336.326968][ T8602] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 336.381136][ T24] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 336.432004][ T5929] usb 2-1: Using ep0 maxpacket: 8 [ 336.448280][ T5929] usb 2-1: config 0 has no interfaces? [ 336.460191][ T5929] usb 2-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 336.483124][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.500159][ T5929] usb 2-1: config 0 descriptor?? [ 336.532209][ T43] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 336.702831][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 336.712758][ T43] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 336.750170][ T43] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 336.776593][ T43] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 336.799396][ T43] usb 6-1: too many endpoints for config 1 interface 2 altsetting 1: 255, using maximum allowed: 30 [ 336.824722][ T43] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 336.879529][ T43] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 336.899643][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.917595][ T43] usb 6-1: Product: syz [ 336.927081][ T43] usb 6-1: Manufacturer: syz [ 336.931782][ T43] usb 6-1: SerialNumber: syz [ 337.355695][ T13] usb 1-1: Failed to submit usb control message: -71 [ 337.381643][ T10] usb 1-1: USB disconnect, device number 22 [ 337.403654][ T13] usb 1-1: unable to send the bmi data to the device: -71 [ 337.446075][ T13] usb 1-1: unable to get target info from device [ 337.464693][ T13] usb 1-1: could not get target info (-71) [ 337.477041][ T13] usb 1-1: could not probe fw (-71) [ 338.404901][ T24] usb 2-1: USB disconnect, device number 17 [ 338.766131][ T8628] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 339.273117][ T24] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 339.532538][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 339.719867][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.742847][ T43] usb 6-1: USB disconnect, device number 20 [ 339.749949][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.780446][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 339.818178][ T24] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 339.842601][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.902983][ T24] usb 2-1: config 0 descriptor?? [ 340.030733][ T30] kauditd_printk_skb: 2707 callbacks suppressed [ 340.030873][ T30] audit: type=1400 audit(1754255542.859:68423): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=5853 comm="syz-executor" opid=8618 ocomm="syz.3.706" [ 340.064544][ T30] audit: type=1400 audit(1754255542.869:68424): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8639 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 340.241059][ T8631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.202469][ T8631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.242658][ T30] audit: type=1400 audit(1754255542.869:68425): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8639 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 341.263301][ T30] audit: type=1400 audit(1754255542.869:68426): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8639 comm="syz-executor" name="178" dev="tmpfs" ino=962 [ 341.284844][ T30] audit: type=1400 audit(1754255542.869:68427): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=8639 comm="syz-executor" opid=8639 ocomm="syz-executor" [ 341.412123][ T30] audit: type=1400 audit(1754255542.869:68428): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8639 comm="syz-executor" name="178" dev="tmpfs" ino=962 [ 341.452670][ T43] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 341.473920][ T30] audit: type=1400 audit(1754255542.869:68429): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8639 comm="syz-executor" name="178" dev="tmpfs" ino=962 [ 341.498519][ T8631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.518496][ T8631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.526656][ T30] audit: type=1400 audit(1754255542.869:68430): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=8639 comm="syz-executor" name="178" dev="tmpfs" ino=962 [ 341.593839][ T30] audit: type=1400 audit(1754255542.869:68431): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8639 comm="syz-executor" name="178" dev="tmpfs" ino=962 [ 341.613838][ T24] HID 045e:07da: Invalid code 65791 type 1 [ 341.627500][ T24] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0006/input/input21 [ 341.640106][ T30] audit: type=1400 audit(1754255542.869:68432): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8639 comm="syz-executor" name="178" dev="tmpfs" ino=962 [ 341.659691][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 341.683304][ T43] usb 6-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 341.696250][ T24] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 341.708547][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.742146][ T43] usb 6-1: Product: syz [ 341.748219][ T43] usb 6-1: Manufacturer: syz [ 341.757581][ T8631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.770187][ T8646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.780908][ T43] usb 6-1: SerialNumber: syz [ 341.803125][ T8631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.819610][ T8646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.830520][ T43] usb 6-1: config 0 descriptor?? [ 342.049280][ T43] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 342.102692][ T10] usb 2-1: USB disconnect, device number 18 [ 342.626050][ T43] gspca_sunplus: reg_w_riv err -110 [ 342.967955][ T43] sunplus 6-1:0.0: probe with driver sunplus failed with error -110 [ 343.036260][ T43] usb 6-1: USB disconnect, device number 21 [ 343.202910][ T8660] netlink: 28 bytes leftover after parsing attributes in process `syz.3.717'. [ 343.212173][ T8660] netlink: 28 bytes leftover after parsing attributes in process `syz.3.717'. [ 343.234915][ T8660] netlink: 28 bytes leftover after parsing attributes in process `syz.3.717'. [ 343.244180][ T8660] netlink: 28 bytes leftover after parsing attributes in process `syz.3.717'. [ 343.537728][ T8666] netlink: 'syz.4.719': attribute type 32 has an invalid length. [ 343.552888][ T24] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 344.178199][ T8668] batadv_slave_0: entered promiscuous mode [ 344.414716][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.462910][ T8661] batadv_slave_0: left promiscuous mode [ 344.477448][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.532142][ T24] usb 2-1: New USB device found, idVendor=056a, idProduct=00f4, bcdDevice= 0.00 [ 344.709119][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.745996][ T24] usb 2-1: config 0 descriptor?? [ 345.036041][ T30] kauditd_printk_skb: 1221 callbacks suppressed [ 345.036062][ T30] audit: type=1400 audit(1754255547.869:69567): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=23 comm="ksoftirqd/1" saddr=10.128.0.169 src=30008 daddr=10.128.0.126 dest=52354 netif=eth0 [ 345.176405][ T8659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.185203][ T30] audit: type=1400 audit(1754255548.009:69568): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8657 comm="syz.1.716" name="newroot" dev="tmpfs" ino=2 [ 345.205124][ T8659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.213113][ T30] audit: type=1400 audit(1754255548.009:69569): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8657 comm="syz.1.716" name="/" dev="devtmpfs" ino=1 [ 345.413700][ T24] hid (null): usage index exceeded [ 345.426696][ T5849] audit: audit_backlog=65 > audit_backlog_limit=64 [ 345.437357][ T8659] audit: audit_backlog=65 > audit_backlog_limit=64 [ 345.444479][ T8659] audit: audit_lost=3870 audit_rate_limit=0 audit_backlog_limit=64 [ 345.454954][ T24] wacom 0003:056A:00F4.0007: ignoring exceeding usage max [ 345.464774][ T8659] audit: backlog limit exceeded [ 345.469792][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 345.469808][ C1] audit: audit_lost=3871 audit_rate_limit=0 audit_backlog_limit=64 [ 345.469817][ C1] audit: backlog limit exceeded [ 345.505554][ T24] wacom 0003:056A:00F4.0007: ignoring exceeding usage max [ 345.512897][ T24] wacom 0003:056A:00F4.0007: usage index exceeded [ 345.523197][ T24] wacom 0003:056A:00F4.0007: item 0 1 2 2 parsing failed [ 345.571968][ T24] wacom 0003:056A:00F4.0007: parse failed [ 345.610611][ T24] wacom 0003:056A:00F4.0007: probe with driver wacom failed with error -22 [ 346.019744][ T24] usb 2-1: USB disconnect, device number 19 [ 347.163679][ T8694] netlink: 32 bytes leftover after parsing attributes in process `syz.1.727'. [ 347.236247][ T8694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.727'. [ 347.929421][ T8703] netlink: 'syz.1.730': attribute type 1 has an invalid length. [ 347.978028][ T8703] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 347.998982][ T8705] binder: 8702:8705 ioctl 40046205 0 returned -22 [ 348.369166][ T8715] netlink: 40 bytes leftover after parsing attributes in process `syz.0.733'. [ 348.632049][ T10] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 348.812000][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 349.296277][ T10] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 349.334123][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 349.363263][ T10] usb 1-1: config 0 has no interface number 0 [ 349.397569][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 349.411537][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.450461][ T10] usb 1-1: Product: syz [ 349.490056][ T10] usb 1-1: Manufacturer: syz [ 349.516594][ T10] usb 1-1: SerialNumber: syz [ 349.553160][ T10] usb 1-1: config 0 descriptor?? [ 349.580160][ T10] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 349.613865][ T10] usb 1-1: No valid video chain found. [ 349.680313][ T8726] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN PTI [ 349.692275][ T8726] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 349.700808][ T8726] CPU: 0 UID: 0 PID: 8726 Comm: syz.1.736 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 349.710794][ T8726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 349.720867][ T8726] RIP: 0010:iter_file_splice_write+0xa9b/0x1000 [ 349.727140][ T8726] Code: 00 74 08 4c 89 f7 e8 14 5b e0 ff 49 8b 1e 49 c7 06 00 00 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 49 be 00 00 00 00 00 fc ff df <42> 80 3c 30 00 44 8b 64 24 04 74 08 48 89 df e8 e1 5a e0 ff 4c 8b [ 349.746761][ T8726] RSP: 0018:ffffc900041af820 EFLAGS: 00010202 [ 349.753017][ T8726] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff888027bfda00 [ 349.760994][ T8726] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 7ffffffffffffffa [ 349.769005][ T8726] RBP: ffffc900041afa30 R08: ffff88805a7280df R09: 1ffff1100b4e501b [ 349.777001][ T8726] R10: dffffc0000000000 R11: ffffffff81fe9d40 R12: dffffc0000000000 [ 349.784998][ T8726] R13: 7ffffffffffffffa R14: dffffc0000000000 R15: ffff888031506028 [ 349.793076][ T8726] FS: 00007f8d9c9bf6c0(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 349.802020][ T8726] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 349.808613][ T8726] CR2: 0000001b30c12ff8 CR3: 0000000079362000 CR4: 00000000003526f0 [ 349.816598][ T8726] Call Trace: [ 349.819886][ T8726] [ 349.822832][ T8726] ? __pfx_iter_file_splice_write+0x10/0x10 [ 349.828738][ T8726] ? rcu_read_lock_any_held+0xb3/0x120 [ 349.834224][ T8726] ? __pfx_iter_file_splice_write+0x10/0x10 [ 349.840190][ T8726] direct_splice_actor+0x101/0x160 [ 349.845320][ T8726] splice_direct_to_actor+0x5a5/0xcc0 [ 349.850794][ T8726] ? __pfx_direct_splice_actor+0x10/0x10 [ 349.856437][ T8726] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 349.862518][ T8726] do_splice_direct+0x181/0x270 [ 349.867570][ T8726] ? __pfx_do_splice_direct+0x10/0x10 [ 349.872948][ T8726] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 349.878854][ T8726] ? rw_verify_area+0x258/0x650 [ 349.883728][ T8726] do_sendfile+0x4da/0x7e0 [ 349.888160][ T8726] ? __pfx_do_sendfile+0x10/0x10 [ 349.893113][ T8726] ? __se_sys_futex+0x36f/0x400 [ 349.897979][ T8726] __se_sys_sendfile64+0x13e/0x190 [ 349.903099][ T8726] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 349.908738][ T8726] ? rcu_is_watching+0x15/0xb0 [ 349.913518][ T8726] ? do_syscall_64+0xbe/0x3b0 [ 349.918217][ T8726] do_syscall_64+0xfa/0x3b0 [ 349.922815][ T8726] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.928944][ T8726] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 349.934608][ T8726] ? clear_bhb_loop+0x60/0xb0 [ 349.939393][ T8726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.945296][ T8726] RIP: 0033:0x7f8d9bb8eb69 [ 349.949720][ T8726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.969335][ T8726] RSP: 002b:00007f8d9c9bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 349.977765][ T8726] RAX: ffffffffffffffda RBX: 00007f8d9bdb5fa0 RCX: 00007f8d9bb8eb69 [ 349.985755][ T8726] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000007 [ 349.993759][ T8726] RBP: 00007f8d9bc11df1 R08: 0000000000000000 R09: 0000000000000000 [ 350.001760][ T8726] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000000 [ 350.009832][ T8726] R13: 0000000000000000 R14: 00007f8d9bdb5fa0 R15: 00007ffe5d93d258 [ 350.017818][ T8726] [ 350.020840][ T8726] Modules linked in: [ 350.025841][ T8726] ---[ end trace 0000000000000000 ]--- [ 350.047641][ T30] kauditd_printk_skb: 2271 callbacks suppressed [ 350.047661][ T30] audit: type=1400 audit(1754255552.879:71710): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8713 comm="syz.0.733" name="newroot" dev="tmpfs" ino=2 [ 350.088065][ T30] audit: type=1400 audit(1754255552.909:71711): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8713 comm="syz.0.733" name="/" dev="devtmpfs" ino=1 [ 350.088723][ T8726] RIP: 0010:iter_file_splice_write+0xa9b/0x1000 [ 350.116559][ T30] audit: type=1400 audit(1754255552.909:71712): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=w pid=8713 comm="syz.0.733" name="kvm" dev="devtmpfs" ino=84 [ 350.150036][ T30] audit: type=1400 audit(1754255552.909:71713): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=8713 comm="syz.0.733" path="/dev/kvm" dev="devtmpfs" ino=84 [ 350.160247][ T8728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.736'. [ 350.170527][ T30] audit: type=1400 audit(1754255552.949:71714): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8727 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 350.199349][ T30] audit: type=1400 audit(1754255552.949:71715): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8727 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 350.220806][ T30] audit: type=1400 audit(1754255552.949:71716): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8727 comm="syz-executor" name="186" dev="tmpfs" ino=1003 [ 350.250335][ T10] usb 1-1: USB disconnect, device number 23 [ 350.269180][ T30] audit: type=1400 audit(1754255552.949:71717): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=8727 comm="syz-executor" opid=8727 ocomm="syz-executor" [ 350.289139][ T8726] Code: 00 74 08 4c 89 f7 e8 14 5b e0 ff 49 8b 1e 49 c7 06 00 00 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 49 be 00 00 00 00 00 fc ff df <42> 80 3c 30 00 44 8b 64 24 04 74 08 48 89 df e8 e1 5a e0 ff 4c 8b [ 350.403654][ T6076] audit: audit_backlog=65 > audit_backlog_limit=64 [ 350.410888][ T8728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.736'. [ 350.419972][ T6076] audit: audit_lost=3916 audit_rate_limit=0 audit_backlog_limit=64 [ 350.420107][ T8726] RSP: 0018:ffffc900041af820 EFLAGS: 00010202 [ 350.459226][ T8726] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff888027bfda00 [ 350.468287][ T8726] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 7ffffffffffffffa [ 350.480138][ T8726] RBP: ffffc900041afa30 R08: ffff88805a7280df R09: 1ffff1100b4e501b [ 350.497901][ T8726] R10: dffffc0000000000 R11: ffffffff81fe9d40 R12: dffffc0000000000 [ 350.506542][ T8726] R13: 7ffffffffffffffa R14: dffffc0000000000 R15: ffff888031506028 [ 350.515575][ T8726] FS: 00007f8d9c9bf6c0(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 350.528068][ T8726] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 350.543229][ T8726] CR2: 00007f3e40386358 CR3: 0000000079362000 CR4: 00000000003526f0 [ 350.552437][ T8726] Kernel panic - not syncing: Fatal exception [ 350.558912][ T8726] Kernel Offset: disabled [ 350.563247][ T8726] Rebooting in 86400 seconds..