last executing test programs: 6m57.068814999s ago: executing program 3 (id=644): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) io_setup(0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x3, &(0x7f0000000480)=[{0x48, 0x0, 0x60, 0xc68}, {0x1, 0x7, 0x1, 0x4}, {0x0, 0x8, 0x9, 0x580}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$alg(0x26, 0x5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) syz_open_procfs$namespace(r2, &(0x7f0000000240)='ns/pid_for_children\x00') r3 = openat$cachefiles(0xffffff9c, &(0x7f0000000000), 0x8000, 0x0) sendmmsg$alg(r3, &(0x7f0000000b40)=[{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000002c0)="9c284e5d7d81334455c56361c4e4960b08184a76755ac09cd88a4d63bbc3ab275893f29f7fbb42f8d1634d565d75f621235cbb3e90bbebb5c1a19b771ea5f16fba5ed84efd78b6b626d4900707b4e19602aba873e36ec4ad3b3c25fe56733f77623757ad5577adb0c4d526a5db88a7e65b7af3c41d64401669444fbf258a6c72eea3045027dd9600e0623972f830e6533cdc7a86881b26f471579162e9b595cd19b4bc561702e8e805efca5b25555dfbb4f6c58fe0de1d02cbb80fcd843952edd3e3bc4bac9cd34cb307148ddccda3905752858c8c687d9d71c08b1df33b39537ca89e76a107afcb8ddaa9e401445f", 0xef}, {&(0x7f00000003c0)="f8d40119501f96866c2c1d80b812d23962c966399f08e4164faa6b4e62978c95492ef0ddb1ff842ffb77fe462db3f157ea4a834d", 0x34}, {&(0x7f0000000540)="d4297357e211818653dfb6d1bf44e1f77fe8fd70f23d3df9bc51832f0562a966df1b9f6c727c46ae7ced8b0f7384d3ce8f3592894ba019e11c81fdd2a3131ce57c6cb2ee557e78b3abc9f35782799179d2e961a8a4407409790f920df2724fcc378d4d5a6f7dda29cfa59779163747e12872b7861c4d4968a996363257d96e423b1932ae5cbd5e2c8080c55b5cb08d306cc15c21", 0x94}, {&(0x7f0000000600)="d7d4fc90bc6d5463482db7e97d5e8cec2145f86f90fcd13ff76e3ec44a3fdb1abd7e4bd0cec21340dce5542e73e8cb1f15728a552d5d036c49e0b611c3ba3e828b1e362d9f95647ac99c38b546fb9f3e3d9ae9aec34195efd4a83f17b69e7c71973164150fe31467cfed1faefc6cbdee81111bd189c12f96c9ed05505a76f1555a7d0e3c7203d299d44fca2436c0e60a4f0b154a3c32cccea51260e2d01461186efcd96b0c43b8d99831f0fa771f57a9312b92f657933feca633df2876997dd70ba64b49af997a4af5c62847d69ec664d0c4b79f4df8a7", 0xd7}, {&(0x7f0000000400)="1b712f7a6c67b34ff5101d7aa5f60514aa683a70a5eed42095832dd53d080d746357129ce5c8594060cb9919f5fd83", 0x2f}, {&(0x7f0000000700)="143cdb6620b6f37950ad170cbc983032d869bcef98e97222f9e5964a978e49f6e9351ce55a2ed4c31cbef07e8d8086275b0a12ea36bf39962087bdd9388dbd7173d10694b9f6378a52521056c322681f417be8a5", 0x54}, {&(0x7f0000000780)="b1e4f4bdcb3033abedaeb82bc948be433c0994a9ef40a5d348011b7616447b66d3c0d0a6360a881a032beb5c1d08f37b72caddc3983a14dcc0", 0x39}, {&(0x7f00000007c0)="a4b0a10d130d071b1e6f938db4268c2d1694039bed5104b8c50c80956c760df01eb912eb90161a28c5246788cb5e768557b79a86474db8ba41263d62ba6f5da60b684c50f435e4474cf1c4f94a34bd0f37846ededa13e76653427afac18d6e362bc562fac0b1a0f69aa167e165549723fe08a376741c715d4e4c068dc775e169846020e05deac1e71b7c840bb81b6976921cd686b734ae7f5bc074eb520eed8cb392ce5d6b7b897efab656d5ab2176b51bdca4d69e278495c0d23c8156c080f1a6bb3dec0457f7c1e444", 0xca}], 0x8, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000c000}], 0x2, 0x20000000) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000c00), r3) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x40, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4081) 6m56.545475163s ago: executing program 3 (id=647): syz_io_uring_setup(0x48be, 0x0, 0x0, &(0x7f0000001180)) syz_io_uring_setup(0x2a31, &(0x7f0000000000)={0x0, 0x2f33, 0x2, 0x0, 0x16d}, &(0x7f0000000080), &(0x7f00000000c0)) r0 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) getpeername$l2tp(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000001300)=ANY=[], 0x140}, 0x1, 0x0, 0x0, 0x4004000}, 0x4810) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) chdir(&(0x7f00000000c0)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file5\x00', 0x2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) pread64(r1, &(0x7f0000000080)=""/237, 0xed, 0x0) 6m51.670527865s ago: executing program 3 (id=657): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="e706f2ff011f391e7dd7a2d786dd609907a600302c03cb697a653e336f000000500000000000ff020000000000000000000000000001020090"], 0x0) syz_emit_ethernet(0x66, &(0x7f0000000180)=ANY=[@ANYRES64=r1], 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r5 = syz_open_procfs(0x0, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x843c20, &(0x7f0000000680)=ANY=[@ANYBLOB='dont_measure,e', @ANYRESDEC=0x0, @ANYBLOB="2c66736e616d653db8d34dad09000000400000003ede24536828f1d4b92c54b6c730d9561eff4cdb6a329baf188bc99a97b45b395b", @ANYRESDEC=0x0, @ANYBLOB=',don', @ANYRESDEC=0x0, @ANYRES32=r2]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10042008) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="190800000000000000000000008000000000200039196f5408d752b3dfc4e03e9e45b614b74d26f361045f9082efa359ddb8697d822e2fb7522749394e7e66a590c8c799f767cf4db83be9ab164498e6cc", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="01000000020000000200"/28], 0x50) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x30}}, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f0000000040)='encrypted\x00', 0x0, &(0x7f0000000300), 0x0, 0xfffffffffffffffe) 6m47.639825719s ago: executing program 3 (id=662): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000140)='/dev/hwrng\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f00000005c0)='./file0/file0\x00', 0x9) 6m47.484783633s ago: executing program 3 (id=664): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) io_setup(0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x3, &(0x7f0000000480)=[{0x48, 0x0, 0x60, 0xc68}, {0x1, 0x7, 0x1, 0x4}, {0x0, 0x8, 0x9, 0x580}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$alg(0x26, 0x5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) syz_open_procfs$namespace(r2, &(0x7f0000000240)='ns/pid_for_children\x00') r3 = openat$cachefiles(0xffffff9c, &(0x7f0000000000), 0x8000, 0x0) sendmmsg$alg(r3, &(0x7f0000000b40)=[{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000002c0)="9c284e5d7d81334455c56361c4e4960b08184a76755ac09cd88a4d63bbc3ab275893f29f7fbb42f8d1634d565d75f621235cbb3e90bbebb5c1a19b771ea5f16fba5ed84efd78b6b626d4900707b4e19602aba873e36ec4ad3b3c25fe56733f77623757ad5577adb0c4d526a5db88a7e65b7af3c41d64401669444fbf258a6c72eea3045027dd9600e0623972f830e6533cdc7a86881b26f471579162e9b595cd19b4bc561702e8e805efca5b25555dfbb4f6c58fe0de1d02cbb80fcd843952edd3e3bc4bac9cd34cb307148ddccda3905752858c8c687d9d71c08b1df33b39537ca89e76a107afcb8ddaa9e401445f", 0xef}, {&(0x7f00000003c0)="f8d40119501f96866c2c1d80b812d23962c966399f08e4164faa6b4e62978c95492ef0ddb1ff842ffb77fe462db3f157ea4a834d", 0x34}, {&(0x7f0000000540)="d4297357e211818653dfb6d1bf44e1f77fe8fd70f23d3df9bc51832f0562a966df1b9f6c727c46ae7ced8b0f7384d3ce8f3592894ba019e11c81fdd2a3131ce57c6cb2ee557e78b3abc9f35782799179d2e961a8a4407409790f920df2724fcc378d4d5a6f7dda29cfa59779163747e12872b7861c4d4968a996363257d96e423b1932ae5cbd5e2c8080c55b5cb08d306cc15c21", 0x94}, {&(0x7f0000000600)="d7d4fc90bc6d5463482db7e97d5e8cec2145f86f90fcd13ff76e3ec44a3fdb1abd7e4bd0cec21340dce5542e73e8cb1f15728a552d5d036c49e0b611c3ba3e828b1e362d9f95647ac99c38b546fb9f3e3d9ae9aec34195efd4a83f17b69e7c71973164150fe31467cfed1faefc6cbdee81111bd189c12f96c9ed05505a76f1555a7d0e3c7203d299d44fca2436c0e60a4f0b154a3c32cccea51260e2d01461186efcd96b0c43b8d99831f0fa771f57a9312b92f657933feca633df2876997dd70ba64b49af997a4af5c62847d69ec664d0c4b79f4df8a734f168afabf24cde373901", 0xe2}, {&(0x7f0000000400)="1b712f7a6c67b34ff5101d7aa5f60514aa683a70a5eed42095832dd53d080d746357129ce5c8594060cb9919f5fd83", 0x2f}, {&(0x7f0000000700)="143cdb6620b6f37950ad170cbc983032d869bcef98e97222f9e5964a978e49f6e9351ce55a2ed4c31cbef07e8d8086275b0a12ea36bf39962087bdd9388dbd7173d10694b9f6378a52521056c322681f417be8a5", 0x54}, {&(0x7f0000000780)="b1e4f4bdcb3033abedaeb82bc948be433c0994a9ef40a5d348011b7616447b66d3c0d0a6360a881a032beb5c1d08f37b72caddc3983a14dcc0", 0x39}, {&(0x7f00000007c0)="a4b0a10d130d071b1e6f938db4268c2d1694039bed5104b8c50c80956c760df01eb912eb90161a28c5246788cb5e768557b79a86474db8ba41263d62ba6f5da60b684c50f435e4474cf1c4f94a34bd0f37846ededa13e76653427afac18d6e362bc562fac0b1a0f69aa167e165549723fe08a376741c715d4e4c068dc775e169846020e05deac1e71b7c840bb81b6976921cd686b734ae7f5bc074eb520eed8cb392ce5d6b7b897efab656d5ab2176b51bdca4d69e278495c0d23c8156c080f1a6bb3dec0457f7c1e444", 0xca}], 0x8, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000c000}], 0x2, 0x20000000) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000c00), r3) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x40, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4081) 6m47.275253364s ago: executing program 3 (id=665): syz_open_dev$sndpcmp(&(0x7f00000000c0), 0xc00f, 0x10003) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x4000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3010}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x80042, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r4, 0x0) r5 = dup(r3) write$UHID_INPUT(r5, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) 6m46.874608213s ago: executing program 32 (id=665): syz_open_dev$sndpcmp(&(0x7f00000000c0), 0xc00f, 0x10003) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x4000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3010}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x80042, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r4, 0x0) r5 = dup(r3) write$UHID_INPUT(r5, &(0x7f0000001c00)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd84568b8f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df", 0x1000}}, 0xfffffe38) 12.632955397s ago: executing program 4 (id=1780): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x100a, 0x9}) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x144f9db09b74c7a5, 0x4, &(0x7f0000000180)=ANY=[@ANYRESOCT=r4], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x103381) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80040) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7000001, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r5 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)="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", 0x1000}) 11.46587962s ago: executing program 4 (id=1784): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x85) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a4", 0x24}], 0x2) 11.026571107s ago: executing program 4 (id=1786): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) clock_nanosleep(0x7, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@fwd={0x10}, @type_tag={0x6, 0x0, 0x0, 0x12, 0x5}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x0, 0x25}]}, {0x0, [0x61, 0x5f, 0x5f, 0x2e]}}, &(0x7f00000001c0)=""/127, 0x46, 0x7f, 0x1, 0x8, 0x10000}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) creat(&(0x7f0000000380)='./file0\x00', 0x20) landlock_create_ruleset(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r1, 0x0) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1) syz_emit_ethernet(0xc2, &(0x7f00000008c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800460000b40000000000119078ac141400ac1414aa0703d70000000000fd40907801000000000000006fdfa0d2001efbb3e29a4ac2b984ff5def6ed2e4ea9bc0eabdd34c732b000000df23520b57e4c98679c7795a27c7bf3e7d776b600ba8d82d6ba417e219edd86fb708441efcf75fe885382dae374281c25df814aa2e34e4f8a759805b993e2d69a8f476de686861a9850edbe32cfee9b9d5b0b2b171b51f9174963b0ce40ca7e0a7b4bbc4bc9720c876a57954"], 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000000000000000080045000024000000000073907800000300e000000100000000fe9a90780200000000df00"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$TCSETA(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"}) 7.894050452s ago: executing program 2 (id=1797): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000003500)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x4}}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 7.680662559s ago: executing program 4 (id=1799): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000013c0)=[{{&(0x7f0000000dc0)={0xa, 0x4e22, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000001180)=[@tclass={{0x14, 0x29, 0x43, 0xfffffeff}}], 0x18}}], 0x1, 0x1) 7.44216402s ago: executing program 4 (id=1803): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x123a02, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000006680)) pwritev(r1, 0x0, 0x0, 0x7, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sendto$unix(r2, &(0x7f0000000040)="6c0e083ab4bce454a68b6caf12d46634537c66a18d4fe323bd123f54eedbdd", 0x1f, 0x4004004, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r3 = dup(r0) write$UHID_INPUT(r3, &(0x7f0000001040)={0x1a, {"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", 0x1000}}, 0x1006) 6.763323635s ago: executing program 2 (id=1804): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x103000, 0x8d) open$dir(&(0x7f0000000000)='./file1\x00', 0x80, 0x1c9) r1 = socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) timer_settime(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x80140, 0x0) ioctl$TIOCGISO7816(r3, 0x80285442, 0x0) recvmmsg$unix(r1, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)}}], 0x1, 0x34000, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x198, 0x4c, 0x1a, 0x198, 0x73, 0x2c8, 0x258, 0x258, 0x2c8, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x168, 0x198, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0xc}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @dev, [], [0x0, 0x0, 0xffffff00]}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x0, 0x7}}}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) close(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, &(0x7f0000000280), &(0x7f00000002c0), 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) 5.532786146s ago: executing program 1 (id=1807): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=@delchain={0x49c, 0x65, 0x200, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x4, 0xfff1}, {0xd, 0xffe0}, {0xa, 0xd}}, [@filter_kind_options=@f_fw={{0x7}, {0x460, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'pim6reg0\x00'}, @TCA_FW_MASK={0x8, 0x5, 0x8}, @TCA_FW_CLASSID={0x8, 0x1, {0xa, 0x9}}, @TCA_FW_INDEV={0x14, 0x3, 'veth1_to_batadv\x00'}, @TCA_FW_POLICE={0x408, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x8, 0x40, 0x1, 0x0, 0x2, 0x8, 0x910, 0x6, 0x0, 0xfffffff7, 0x9, 0x7, 0xffffffff, 0x9, 0x62ff, 0x2, 0x8, 0x10, 0x4, 0x2, 0x10001, 0x93, 0x10001, 0x3, 0x3fff, 0xc99, 0x5, 0xf, 0x0, 0x69, 0x10000, 0x401, 0x1f89, 0x4, 0x3, 0x7, 0x9, 0x200, 0x80000000, 0x9, 0x9, 0x0, 0x2, 0x5, 0x8, 0x7, 0x3ff, 0x3, 0xed1, 0xa, 0x3, 0x4, 0x5, 0x81, 0xfffffff7, 0x5, 0x5, 0x2, 0x2, 0x1, 0x71bca84, 0x4, 0x6, 0xc, 0x8, 0xe0, 0x5, 0x3, 0xf, 0x5, 0xefde, 0x3, 0x0, 0xc, 0x6, 0x448, 0x8, 0x7fff, 0x9, 0x7, 0x0, 0x6, 0xb, 0x9, 0x1000, 0x2, 0x8, 0x1, 0x67e, 0x101, 0x3, 0x80000000, 0xbcc, 0x1, 0x3f9, 0x1, 0xfffffffb, 0x6, 0x0, 0x400, 0x10000, 0x4, 0x16, 0x0, 0x3, 0x48fe, 0xffffffff, 0x0, 0x200, 0x4, 0x0, 0x8000, 0x6, 0x8000, 0x2, 0x646, 0x3, 0xffffffff, 0xffff900f, 0x9, 0x0, 0x0, 0x80, 0x200, 0x7, 0x80, 0x5, 0x17ebec8, 0xd1d3, 0x7f, 0x200, 0x6, 0x5, 0x6, 0x7ff, 0x7, 0xd, 0xea, 0x80, 0x3, 0x9, 0x1, 0xfffff608, 0xe00000, 0x10001, 0x7a, 0x3ff, 0x1ff, 0xfffffff0, 0x2c7, 0xfffffffd, 0x5, 0x2, 0x400, 0x10001, 0x2, 0xfffffff9, 0x818c, 0x27e, 0x1, 0x6, 0x8001, 0x2, 0x27c, 0x0, 0x1, 0x80000000, 0xffff, 0x8000, 0x5, 0x96, 0xfffffff1, 0x3, 0xfffffffb, 0xd, 0x80000000, 0x3f9, 0x2, 0x1, 0x2, 0x6, 0xffff, 0x8001, 0x7f, 0x4, 0x5172, 0x9c07, 0x6, 0xfffffffc, 0xa, 0xc2, 0x770b, 0x8, 0x9, 0x33a5, 0x4, 0x3, 0x4, 0xffffffff, 0x8, 0x7, 0xb, 0x7, 0x3, 0x2, 0x9, 0xe, 0x44, 0x9, 0x47800000, 0x0, 0x3, 0xb, 0x14, 0x204ff45, 0x2, 0xe, 0xeb, 0x8, 0x1, 0x8, 0xa41, 0x4, 0x38, 0x3, 0x2, 0x9, 0x8, 0x10000, 0xb03, 0x81, 0x45, 0x5, 0x2e42, 0x3, 0x6, 0x4, 0xfffffffa, 0x9f1d, 0x0, 0x200, 0xaba, 0x7ff, 0x81, 0x80000000, 0x8001, 0x401, 0x5, 0xc5, 0x3, 0x1eea, 0x4, 0xf96, 0x80000008, 0x19]}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xe, 0xf}}, @TCA_FW_INDEV={0x14, 0x3, 'pim6reg\x00'}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @TCA_RATE={0x6, 0x5, {0x83, 0xcc}}]}, 0x49c}}, 0x40010) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x20}, 0x1, 0x0, 0x0, 0xc041}, 0x814) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) syz_open_dev$video(&(0x7f0000000080), 0x8, 0x20000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_normal', 0x1c1f80, 0x19c) read$FUSE(r2, &(0x7f0000002480)={0x2020}, 0x2020) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000580), 0x4) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/card1/oss_mixer\x00', 0x400000, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x80) bind$802154_dgram(r3, &(0x7f00000001c0)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0202}}}, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x28, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x1}]}]}, 0x28}}, 0x4000) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) eventfd(0xfffffff9) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) 5.188320061s ago: executing program 2 (id=1808): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_create_resource$binfmt(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], &(0x7f0000001f80)=""/212, 0x1a, 0xd4, 0xa}, 0x28) syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f00000002c0)={{0xa, 0x4e24, 0x7, @mcast2, 0x80000000}, {0xa, 0x4e21, 0x3, @local, 0x40e}, 0x1, {[0xce8, 0x6, 0x6, 0x1, 0x10000, 0x3, 0xfffff258, 0xf85]}}, 0x5c) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$kcm(0x11, 0x3, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000040)={@broadcast, @multicast2}, &(0x7f0000000200)=0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000440)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050004ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x35}], 0x1}, 0x4) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x280240, 0x0) syz_clone3(&(0x7f0000000400)={0x3a22a8400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @bcast, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000540)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) 4.712526399s ago: executing program 5 (id=1810): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) r4 = fspick(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f0000000300)='#$\x00', &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r6 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r6) fcntl$setstatus(r6, 0x4, 0x2c00) r7 = gettid() fcntl$setown(r6, 0x8, r7) getsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000500)={0x0, 0x1, 0x0, 0xf, 0x57, 0x7}, &(0x7f0000000540)=0x14) prlimit64(r7, 0xb, 0x0, &(0x7f0000000140)) close(r5) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x1) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 4.63359662s ago: executing program 2 (id=1811): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) socket$kcm(0x2, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000000)='omfs\x00', 0x208000, 0x0) 4.607867013s ago: executing program 1 (id=1812): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) socket$inet(0x2, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$alg(0x26, 0x5, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r5 = gettid() r6 = getpid() rt_tgsigqueueinfo(r6, r5, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x4}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r7, 0x4b72, &(0x7f0000000040)={0x4, 0x0, 0x9, 0x61, 0x100, 0x0}) r8 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) read(r8, &(0x7f0000000740)=""/384, 0x200008c0) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r9, 0x89fb, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000000)={@local, @rand_addr=0x64010100, 0x7, 0x1b}}) ioctl$SIOCPNDELRESOURCE(r4, 0x89ef, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) close(0xffffffffffffffff) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4.001245487s ago: executing program 1 (id=1813): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000020303010000000000000000040000"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000000b06010200000000000000000300000009"], 0x4c}}, 0x0) 3.94639872s ago: executing program 5 (id=1814): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000a3000000000000000800000018110000fb9008d9df5d4049c46fa61a0291931e0546db80f46fb8b96cc304c4ff43c7cf065295c7d7a239948bc2315fd7a9d120d72e4a0fa9e66e95d6e8a156de256139604e1c2a34cf0384dba926b0cdccf653d48b94c441aa18b2a78c6f0cc290f5d3678d4c512236db881e13593a9f90f658776deef6cf660e6c1591625aabc6705ee003000297af6131ac3f41ce2b121c9f690c7e02fb3f1ae7d9fab3e604c3459cf4c81857c3136775e3b2586ce3b36a02dd646baff4d73fafd83b5a0bc4567beaf7b7309a29e5cd346b12865feae0f2441636cb0e80cbc7dffbdd0d1a4d6186a0148f3ba65f015d0bd965d40a35dc4ecdc64054d85eb0e37a204125ab94822a460e54efcb2f35edae6d180eb370f9bdbb33b5f08f0dcc082af9"], 0x0, 0x2}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(0xffffffffffffffff, 0x4008ae73, &(0x7f0000000000)={0xe, 0x3d6}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf21, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0xd}, 0x94) 3.730392703s ago: executing program 1 (id=1815): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000801) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getresgid(&(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000240)=0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000280)={0x4, 0x9, {r0}, {0xee00}, 0x8001, 0x2}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000002c0)={0x6, 0x401, {r0}, {0x0}, 0x9, 0x6}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0x0, 0xee01}}, './file0\x00'}) r7 = getegid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in=@multicast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@private0}}, &(0x7f0000000440)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in=@local, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@private2}}, &(0x7f0000000580)=0xe8) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x100000, &(0x7f00000005c0)={[{@mode={'mode', 0x3d, 0x9}}, {@gid={'gid', 0x3d, r3}}, {@mode={'mode', 0x3d, 0x5}}, {@uid={'uid', 0x3d, r4}}, {@uid={'uid', 0x3d, r5}}, {@uid={'uid', 0x3d, r6}}, {@mode={'mode', 0x3d, 0x923}}, {@gid}, {@gid={'gid', 0x3d, r7}}, {@mode={'mode', 0x3d, 0x3}}], [{@obj_user={'obj_user', 0x3d, '[#'}}, {@fowner_eq={'fowner', 0x3d, r8}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'pagemap\x00'}}, {@fsname={'fsname', 0x3d, 'pagemap\x00'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@pcr={'pcr', 0x3d, 0x1}}, {@uid_gt={'uid>', r9}}]}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r10 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r11 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x31) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) ioctl$PAGEMAP_SCAN(r10, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000000c0)=[{0x800000000, 0x2000000}, {0xfffffffffffffffc}], 0x2, 0x100000c01, 0x38, 0x0, 0x70, 0x6e}) 3.134026558s ago: executing program 1 (id=1816): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x9, "c46e9fd1a84b7fefa0bf2cca6beb9363a680b652a86bcf56a1b9f4e6b54cc6beca5462202c484c10ca5386103a5ccbe47b7b9aa6d8d701a3ba6a6c0ce8b978", 0x1}, 0x60) r1 = dup(r0) getsockopt$inet_buf(r1, 0x118, 0x1, 0x0, &(0x7f0000000000)) read$FUSE(r1, &(0x7f00000022c0)={0x2020}, 0x2020) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) r2 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40088a01, &(0x7f0000000000)=0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) connect$x25(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, r3, 0xd95b3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = add_key(&(0x7f00000000c0)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000400)="f81da85b6eb73d7efae6dc5fedb3bdc4321d31f81d5fb67acf37aca1dae3ac9912892ee476427a4bbd411e4c0036bababb0e6be02c4eb7e0a3f8ab12fea481114fe0205162e00d1e3912292836c4ccdf73852960582592c8c027869bcd79550fa18ecd713844cebe89", 0x69, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r7, 0xffffffffffffffff, 0xc4) epoll_create1(0x0) socket$key(0xf, 0x3, 0x2) 3.116280218s ago: executing program 0 (id=1817): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xfffffff7, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x8}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000a40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x80001}, 0x6, 0x100, 0x2, 0x0, 0x0, 0x7, 'syz0\x00', 0x0}) 3.066530425s ago: executing program 2 (id=1818): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x103000, 0x8d) open$dir(&(0x7f0000000000)='./file1\x00', 0x80, 0x1c9) r1 = socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) timer_settime(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x80140, 0x0) ioctl$TIOCGISO7816(r3, 0x80285442, 0x0) recvmmsg$unix(r1, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)}}], 0x1, 0x34000, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x198, 0x4c, 0x1a, 0x198, 0x73, 0x2c8, 0x258, 0x258, 0x2c8, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x168, 0x198, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0xc}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @dev, [], [0x0, 0x0, 0xffffff00]}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x0, 0x7}}}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) close(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, &(0x7f0000000280), &(0x7f00000002c0), 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) 2.964424895s ago: executing program 0 (id=1819): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) (async) r1 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r1, 0x7a98, 0x0, 0x8, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="23af25bd7000fddbdf4c26", @ANYBLOB='+\x00\x00\x00', @ANYRES16=r8], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x800) (async) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open_tree(0xffffffffffffffff, &(0x7f00000001c0)='\x00', 0x89901) (async) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="074ea698"], 0x50) (async) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r9, 0x5600, &(0x7f0000000100)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48) (async) pipe(&(0x7f0000000600)) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000"], 0x48) socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) 2.955738813s ago: executing program 5 (id=1820): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)={0x34, r1, 0x101, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BSS_BASIC_RATES={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0xc000) r3 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) epoll_create1(0x80000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0xfea7) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x2}) 2.892447264s ago: executing program 5 (id=1821): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) (fail_nth: 3) 2.454600441s ago: executing program 0 (id=1822): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_create_resource$binfmt(0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], &(0x7f0000001f80)=""/212, 0x1a, 0xd4, 0xa}, 0x28) syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f00000002c0)={{0xa, 0x4e24, 0x7, @mcast2, 0x80000000}, {0xa, 0x4e21, 0x3, @local, 0x40e}, 0x1, {[0xce8, 0x6, 0x6, 0x1, 0x10000, 0x3, 0xfffff258, 0xf85]}}, 0x5c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$kcm(0x11, 0x3, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000040)={@broadcast, @multicast2}, &(0x7f0000000200)=0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000440)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050004ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x35}], 0x1}, 0x4) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x280240, 0x0) syz_clone3(&(0x7f0000000400)={0x3a22a8400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @bcast, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000540)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) 2.453603316s ago: executing program 5 (id=1823): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x103000, 0x8d) open$dir(&(0x7f0000000000)='./file1\x00', 0x80, 0x1c9) r1 = socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) timer_settime(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x80140, 0x0) recvmmsg$unix(r1, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)}}], 0x1, 0x34000, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x10, 0x3, 0x0) close(0xffffffffffffffff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x198, 0x4c, 0x1a, 0x198, 0x73, 0x2c8, 0x258, 0x258, 0x2c8, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x168, 0x198, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0xc}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @dev, [], [0x0, 0x0, 0xffffff00]}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x0, 0x7}}}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) close(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, &(0x7f0000000280), &(0x7f00000002c0), 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) pread64(0xffffffffffffffff, &(0x7f0000001440)=""/126, 0x7e, 0x40) 2.37598055s ago: executing program 0 (id=1824): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x103000, 0x8d) open$dir(&(0x7f0000000000)='./file1\x00', 0x80, 0x1c9) r1 = socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) timer_settime(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x80140, 0x0) ioctl$TIOCGISO7816(r3, 0x80285442, 0x0) recvmmsg$unix(r1, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)}}], 0x1, 0x34000, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x198, 0x4c, 0x1a, 0x198, 0x73, 0x2c8, 0x258, 0x258, 0x2c8, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x168, 0x198, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0xc}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @dev, [], [0x0, 0x0, 0xffffff00]}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x0, 0x7}}}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) close(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, &(0x7f0000000280), &(0x7f00000002c0), 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) 1.68174455s ago: executing program 1 (id=1825): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r2, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38) sendto$inet6(r2, &(0x7f0000000080), 0x0, 0x8000, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x25dfdbfc, {0x7a, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x2, 0x2d, &(0x7f0000004c00)=ANY=[@ANYBLOB="12012e02069c4e082505a0a45b3e010203010902"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) 1.328512156s ago: executing program 4 (id=1826): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x57e, 0x2019, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000100)='.log\x00', 0x4000, 0x30) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x0, 0x2, 0x2000, 0x2, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x85}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x2000c000) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000040)="81") recvmmsg(0xffffffffffffffff, &(0x7f0000001280)=[{{&(0x7f0000000240)=@nfc, 0x80, &(0x7f0000000340)=[{&(0x7f0000000300)=""/5, 0x5}, {&(0x7f0000000400)=""/230, 0xe6}, {&(0x7f0000000640)=""/156, 0x9c}, {&(0x7f0000000700)=""/239, 0xef}], 0x4}, 0x3}, {{&(0x7f0000000800)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/81, 0x51}, {&(0x7f0000000380)=""/38, 0x26}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000900)=""/26, 0x1a}, {&(0x7f0000000940)=""/174, 0xae}, {&(0x7f0000000a00)=""/142, 0x8e}, {&(0x7f0000000ac0)=""/55, 0x37}, {&(0x7f0000000b00)=""/6, 0x6}], 0x8, &(0x7f0000000bc0)=""/93, 0x5d}, 0x9}, {{&(0x7f0000000c40)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000cc0)=""/31, 0x1f}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x2}, 0x7}, {{&(0x7f0000000e00)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000001100)=[{&(0x7f0000000e80)=""/71, 0x47}, {&(0x7f0000003480)=""/4096, 0x1000}, {&(0x7f0000000f00)=""/114, 0x72}, {&(0x7f0000000f80)=""/214, 0xd6}, {&(0x7f0000001080)=""/35, 0x23}], 0x5, &(0x7f0000001180)=""/252, 0xfc}, 0x1a33}], 0x4, 0x10001, &(0x7f0000004480)) 1.255720302s ago: executing program 2 (id=1827): mkdir(&(0x7f00000002c0)='./bus\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x820009408200a5fe) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x150) mknodat$loop(r0, &(0x7f0000000040)='./file1\x00', 0x2000, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x37, &(0x7f00000009c0)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xfff7fffffffffff5}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(r3, &(0x7f00000011c0)=""/4117, 0x200021d5) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x8008af26, 0x0) linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x4, 0x0) 113.994626ms ago: executing program 0 (id=1828): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='rose0\x00', 0x10) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) 51.962817ms ago: executing program 0 (id=1829): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x6, 0x210000) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f0000000080)={0x0, "4dd5615b32c19672e086ae429d73cc8bedad14537784cadbccaf0b890fd9b13b", 0x3, 0x1ff, 0x10001, 0x3200e0, 0x4}) r3 = accept4(r1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x64a, 0x0) r5 = syz_io_uring_setup(0x5fce, &(0x7f0000000940)={0x0, 0x939e, 0x1, 0xfffffffe, 0x35}, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, 0x0, 0x1) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="d393ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000010000000200"/28], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r8, 0x58, &(0x7f0000000300)}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a30000000000900010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c0001800a00010071756575650000001c000280060002400ffe009b06000140faff"], 0xcc}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) r9 = socket$nl_rdma(0x10, 0x3, 0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x9c, 0x464, 0x200, 0x70bd2b, 0x25dfdbfb, "e00c60b0eda60303bde13d74dddde18f4891bf814cba793c20523011c3b0d09b8f5364ca2a3e437fb31cb874b90d7e5d64057768d1273e2898c77a5f89a710db509980b95e92b332700f00d412c9008cfcebfde4e22932ee834b2f4175e7ee8573584cda1cbf0d8ee33018e75d0408f48fb83ce4c2ed3e7fd6369089be4273d029d3d6760b6b1a91fe93", ["", "", ""]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa, 0x8, 0x0, 0x0}}, 0x10) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r11, 0x40186f40, &(0x7f0000000440)=0x1f) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x2c, 0x20, 0x301, 0x0, 0x25dfdbfb, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_FLOW={0x8}]}, 0x2c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x18, 0x1404, 0x1, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x8044) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept$alg(r3, 0x0, 0x0) 0s ago: executing program 5 (id=1830): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0xfffffff7, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x8}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000a40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x80001}, 0x6, 0x100, 0x2, 0x0, 0x0, 0x7, 'syz0\x00', 0x0}) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Cap'], 0x86) kernel console output (not intermixed with test programs): 067][ T5884] usb 3-1: config 0 has an invalid descriptor of length 67, skipping remainder of the config [ 742.609252][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 742.624967][ T5884] usb 3-1: config 0 has no interface number 0 [ 742.638938][ T5884] usb 3-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=45.e8 [ 742.664588][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.686188][ T5884] usb 3-1: config 0 descriptor?? [ 742.699947][ T5884] rndis_host 3-1:0.9: More than one union descriptor, skipping ... [ 742.707919][ T5884] usb 3-1: bad CDC descriptors [ 742.714630][ T5884] cdc_acm 3-1:0.9: More than one union descriptor, skipping ... [ 742.849648][ T5152] Bluetooth: hci2: command 0x0406 tx timeout [ 742.854538][T12080] xt_l2tp: wrong L2TP version: 0 [ 743.649236][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 744.169271][ T5884] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 744.689241][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 744.827328][ T30] audit: type=1800 audit(1753325484.595:787): pid=12099 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1452" name="bus" dev="overlay" ino=1739 res=0 errno=0 [ 744.961161][ T5884] usb 6-1: Using ep0 maxpacket: 16 [ 744.968146][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 745.090900][ T5884] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 745.151750][ T5884] usb 6-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 745.167825][T12106] snd_dummy snd_dummy.0: control 0:0:0:syz0:524289 is already present [ 745.186852][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.227486][ T5884] usb 6-1: config 0 descriptor?? [ 745.404095][T10030] usb 3-1: USB disconnect, device number 44 [ 745.739239][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 745.901263][ T5884] nintendo 0003:057E:2019.0016: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.5-1/input0 [ 745.980024][ T5884] nintendo 0003:057E:2019.0016: Failed to get joycon info; ret=-38 [ 746.114176][ T5884] nintendo 0003:057E:2019.0016: Failed to retrieve controller info; ret=-38 [ 746.201285][T12121] netlink: 'syz.2.1457': attribute type 4 has an invalid length. [ 746.259497][T12121] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 746.437137][ T5884] nintendo 0003:057E:2019.0016: Failed to initialize controller; ret=-38 [ 746.501517][ T5884] nintendo 0003:057E:2019.0016: probe - fail = -38 [ 746.513288][ T5884] nintendo 0003:057E:2019.0016: probe with driver nintendo failed with error -38 [ 746.769230][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 747.193511][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.205870][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.809235][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 748.051283][ T5884] usb 6-1: USB disconnect, device number 24 [ 748.350404][ T30] audit: type=1400 audit(1753325488.885:788): avc: denied { create } for pid=12129 comm="syz.2.1461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 748.435697][ T30] audit: type=1400 audit(1753325488.965:789): avc: denied { write } for pid=12129 comm="syz.2.1461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 748.649263][ T5939] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 748.859246][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 748.939290][ T5939] usb 2-1: Using ep0 maxpacket: 16 [ 749.178605][T12129] delete_channel: no stack [ 749.193712][ T5939] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 749.213287][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.227899][ T5939] usb 2-1: Product: syz [ 749.235202][ T5939] usb 2-1: Manufacturer: syz [ 749.240176][ T5939] usb 2-1: SerialNumber: syz [ 749.247505][ T5939] usb 2-1: config 0 descriptor?? [ 749.261376][ T5939] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 749.697001][ T30] audit: type=1800 audit(1753325490.215:790): pid=12151 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1466" name="bus" dev="overlay" ino=1556 res=0 errno=0 [ 749.889427][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 750.699260][ T5884] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 750.859591][ T5884] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 750.929228][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 750.997470][ T5884] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 751.007901][ T5884] usb 6-1: config 0 interface 0 has no altsetting 0 [ 751.014763][ T5884] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 751.024038][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.086427][ T5884] usb 6-1: config 0 descriptor?? [ 751.570563][ T5939] usb 2-1: Quatech SSU-100 USB to Serial Driver converter now attached to ttyUSB0 [ 751.837348][ T5939] usb 2-1: USB disconnect, device number 46 [ 751.887083][ T5939] ssu100 ttyUSB0: Quatech SSU-100 USB to Serial Driver converter now disconnected from ttyUSB0 [ 751.913755][T12175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1472'. [ 751.969242][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 751.969899][T12175] netlink: 356 bytes leftover after parsing attributes in process `syz.4.1472'. [ 752.184206][ T5884] usb 6-1: string descriptor 0 read error: -22 [ 752.191947][ T5939] ssu100 2-1:0.0: device disconnected [ 752.429079][T12179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1473'. [ 752.515351][T12179] netlink: 356 bytes leftover after parsing attributes in process `syz.0.1473'. [ 752.564293][T12181] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1467'. [ 753.009247][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 753.062780][T12195] xt_l2tp: wrong L2TP version: 0 [ 753.471042][ T5884] uclogic 0003:256C:006D.0017: failed retrieving string descriptor #100: -71 [ 753.480017][ T5884] uclogic 0003:256C:006D.0017: failed retrieving pen parameters: -71 [ 753.488690][ T5884] uclogic 0003:256C:006D.0017: failed probing pen v1 parameters: -71 [ 753.515878][ T5884] uclogic 0003:256C:006D.0017: failed probing parameters: -71 [ 753.535118][ T5884] uclogic 0003:256C:006D.0017: probe with driver uclogic failed with error -71 [ 753.549978][ T5884] usb 6-1: USB disconnect, device number 25 [ 753.693847][T12205] loop6: detected capacity change from 0 to 524287999 [ 753.818148][ T973] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 754.049240][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 754.132642][ T973] usb 2-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 754.145366][ T973] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.162428][ T973] usb 2-1: Product: syz [ 754.352457][ T973] usb 2-1: Manufacturer: syz [ 754.357105][ T973] usb 2-1: SerialNumber: syz [ 754.367502][ T973] usb 2-1: config 0 descriptor?? [ 754.381173][ T973] usb 2-1: interface 1 not found [ 754.609994][T12202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 754.622712][T12202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 754.643242][T12202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 754.653613][T12202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 754.667473][T12202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 754.681974][T12202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.001639][ T5939] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 755.015124][ T5959] usb 2-1: USB disconnect, device number 47 [ 755.048411][T12221] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 755.089237][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 755.128629][T10406] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 755.161347][ T5939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 755.221060][ T5939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 755.253232][ T5939] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 755.291750][ T5939] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 755.347884][ T5939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.468505][ T5939] usb 6-1: config 0 descriptor?? [ 755.571887][T12231] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 755.581733][T12231] binder: Unknown parameter '00' [ 755.610434][T12230] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 756.139240][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 756.194600][ T5939] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 756.278024][ T5939] usb 6-1: USB disconnect, device number 26 [ 756.404584][T12249] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1491'. [ 756.809634][ T973] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 757.179228][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 757.242257][T12247] fido_id[12247]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 757.370248][ T973] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 757.452329][ T973] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 757.464223][ T973] usb 5-1: config 0 interface 0 has no altsetting 0 [ 757.471581][ T973] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 757.519275][ T5939] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 757.624914][T12263] xt_l2tp: wrong L2TP version: 0 [ 757.664156][ T973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.737403][ T5939] usb 1-1: config 0 has an invalid interface number: 9 but max is 0 [ 757.747181][ T5939] usb 1-1: config 0 has an invalid descriptor of length 67, skipping remainder of the config [ 757.816243][ T973] usb 5-1: config 0 descriptor?? [ 758.072184][ T5939] usb 1-1: config 0 has no interface number 0 [ 758.078373][ T5939] usb 1-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=45.e8 [ 758.138437][ T5939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.142765][T12273] xt_l2tp: wrong L2TP version: 0 [ 758.209369][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 758.381223][ T5939] usb 1-1: config 0 descriptor?? [ 758.403145][ T5939] rndis_host 1-1:0.9: More than one union descriptor, skipping ... [ 758.412621][ T5939] usb 1-1: bad CDC descriptors [ 758.421918][ T5939] cdc_acm 1-1:0.9: More than one union descriptor, skipping ... [ 758.549658][ T973] usb 5-1: string descriptor 0 read error: -22 [ 758.864000][T12276] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1493'. [ 758.950171][ T973] uclogic 0003:256C:006D.0019: failed retrieving string descriptor #100: -71 [ 758.959049][ T973] uclogic 0003:256C:006D.0019: failed retrieving pen parameters: -71 [ 758.967939][ T973] uclogic 0003:256C:006D.0019: failed probing pen v1 parameters: -71 [ 758.981858][ T973] uclogic 0003:256C:006D.0019: failed probing parameters: -71 [ 758.997768][ T973] uclogic 0003:256C:006D.0019: probe with driver uclogic failed with error -71 [ 759.017118][ T973] usb 5-1: USB disconnect, device number 45 [ 759.085506][T12283] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 759.213381][T12289] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 759.213381][T12289] program syz.5.1498 not setting count and/or reply_len properly [ 759.249223][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 759.988393][T10406] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 760.199584][ T973] usb 1-1: USB disconnect, device number 56 [ 760.289405][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 760.289910][T12298] netlink: 'syz.5.1500': attribute type 8 has an invalid length. [ 760.633673][T12301] xt_l2tp: wrong L2TP version: 0 [ 760.656431][T12304] loop6: detected capacity change from 0 to 524287999 [ 761.076189][ T5939] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 761.149233][ T5959] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 761.241128][ T5939] usb 6-1: unable to get BOS descriptor or descriptor too short [ 761.255987][ T5939] usb 6-1: not running at top speed; connect to a high speed hub [ 761.274301][ T5939] usb 6-1: config 0 has no interfaces? [ 761.282279][ T5939] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=3e.5b [ 761.329226][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 761.452141][ T5959] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 761.469211][ T5959] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 761.478970][ T5959] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 761.522255][ T5939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.530414][ T5939] usb 6-1: Product: syz [ 761.534587][ T5939] usb 6-1: Manufacturer: syz [ 761.539341][ T5939] usb 6-1: SerialNumber: syz [ 761.545548][ T5959] usb 1-1: New USB device found, idVendor=046d, idProduct=c088, bcdDevice= 0.00 [ 761.558912][ T5939] usb 6-1: config 0 descriptor?? [ 761.574317][ T5959] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.613374][ T5959] usb 1-1: config 0 descriptor?? [ 761.695015][T12316] siw: device registration error -23 [ 761.847852][ T5939] usb 6-1: USB disconnect, device number 27 [ 761.856948][ T30] audit: type=1326 audit(1753325502.375:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12315 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a5f8e9a9 code=0x7ffc0000 [ 761.880500][ T973] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 761.904002][ T30] audit: type=1326 audit(1753325502.375:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12315 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a5f8e9a9 code=0x7ffc0000 [ 761.928011][ T30] audit: type=1326 audit(1753325502.375:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12315 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f27a5f8e9a9 code=0x7ffc0000 [ 761.952150][ T30] audit: type=1326 audit(1753325502.375:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12315 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a5f8e9a9 code=0x7ffc0000 [ 761.976541][ T30] audit: type=1326 audit(1753325502.375:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12315 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f27a5f8e9a9 code=0x7ffc0000 [ 762.000734][ T30] audit: type=1326 audit(1753325502.375:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12315 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a5f8e9a9 code=0x7ffc0000 [ 762.027140][ T30] audit: type=1326 audit(1753325502.375:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12315 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f27a5f8e9a9 code=0x7ffc0000 [ 762.049231][T12308] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 762.056359][ T30] audit: type=1326 audit(1753325502.395:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12315 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a5f8e9a9 code=0x7ffc0000 [ 762.082318][ T5959] usb 1-1: string descriptor 0 read error: -71 [ 762.083932][ T30] audit: type=1326 audit(1753325502.395:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12315 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f27a5f8d310 code=0x7ffc0000 [ 762.093826][ T5959] usbhid 1-1:0.0: can't add hid device: -71 [ 762.111961][ T973] usb 2-1: Using ep0 maxpacket: 16 [ 762.121468][ T5959] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 762.132026][ T30] audit: type=1326 audit(1753325502.395:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12315 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a5f8e9a9 code=0x7ffc0000 [ 762.139027][ T5959] usb 1-1: USB disconnect, device number 57 [ 762.159453][ T973] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 762.172681][ T973] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.186209][ T973] usb 2-1: Product: syz [ 762.190725][ T973] usb 2-1: Manufacturer: syz [ 762.195390][ T973] usb 2-1: SerialNumber: syz [ 762.203151][ T973] usb 2-1: config 0 descriptor?? [ 762.209968][ T973] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 762.289451][ T5884] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 762.369271][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 762.434964][T12322] netlink: 2384 bytes leftover after parsing attributes in process `syz.5.1510'. [ 762.459407][ T5884] usb 3-1: Using ep0 maxpacket: 16 [ 762.472373][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 762.483425][ T5884] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 762.496293][ T5884] usb 3-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 762.505354][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.515217][ T5884] usb 3-1: config 0 descriptor?? [ 762.711395][T12329] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 762.711395][T12329] program syz.0.1511 not setting count and/or reply_len properly [ 763.214859][ T5884] nintendo 0003:057E:2019.001A: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.2-1/input0 [ 763.409233][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 764.029801][T12333] syz.4.1512 (12333): drop_caches: 2 [ 764.056589][ T973] usb 2-1: Quatech SSU-100 USB to Serial Driver converter now attached to ttyUSB0 [ 764.119346][ T5884] nintendo 0003:057E:2019.001A: Failed to get joycon info; ret=-38 [ 764.449343][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 764.691276][ T5884] nintendo 0003:057E:2019.001A: Failed to retrieve controller info; ret=-38 [ 764.840320][ T5884] nintendo 0003:057E:2019.001A: Failed to initialize controller; ret=-38 [ 764.900946][ T973] usb 2-1: USB disconnect, device number 48 [ 764.994708][ T5884] nintendo 0003:057E:2019.001A: probe - fail = -38 [ 765.002045][ T973] ssu100 ttyUSB0: Quatech SSU-100 USB to Serial Driver converter now disconnected from ttyUSB0 [ 765.045597][ T5884] nintendo 0003:057E:2019.001A: probe with driver nintendo failed with error -38 [ 765.071500][ T973] ssu100 2-1:0.0: device disconnected [ 765.107137][ T5884] usb 3-1: USB disconnect, device number 45 [ 765.202477][T12344] xt_l2tp: wrong L2TP version: 0 [ 765.489339][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 766.539223][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 767.033627][T12360] netlink: 'syz.2.1518': attribute type 4 has an invalid length. [ 767.096523][T12360] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 767.145549][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 767.145603][ T30] audit: type=1400 audit(1753325507.665:812): avc: denied { ioctl } for pid=12359 comm="syz.5.1519" path="socket:[30935]" dev="sockfs" ino=30935 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 767.569241][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 768.125245][T12382] siw: device registration error -23 [ 768.159123][ T30] audit: type=1326 audit(1753325508.685:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12381 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7da78e9a9 code=0x7ffc0000 [ 768.239480][ T30] audit: type=1326 audit(1753325508.685:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12381 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb7da78e9a9 code=0x7ffc0000 [ 768.429646][ T30] audit: type=1326 audit(1753325508.685:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12381 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7da78e9a9 code=0x7ffc0000 [ 768.609232][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 769.649249][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 769.764352][ T30] audit: type=1326 audit(1753325508.685:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12381 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7fb7da78e9a9 code=0x7ffc0000 [ 769.869356][ T30] audit: type=1326 audit(1753325508.685:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12381 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7da78e9a9 code=0x7ffc0000 [ 769.892740][ T30] audit: type=1326 audit(1753325508.695:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12381 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7da78e9a9 code=0x7ffc0000 [ 769.916013][ T30] audit: type=1326 audit(1753325508.795:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12381 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7da78e9a9 code=0x7ffc0000 [ 769.938854][ C1] vkms_vblank_simulate: vblank timer overrun [ 769.945949][ T30] audit: type=1326 audit(1753325508.795:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12381 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7da78e9a9 code=0x7ffc0000 [ 769.968829][ C1] vkms_vblank_simulate: vblank timer overrun [ 769.979394][ T30] audit: type=1326 audit(1753325508.795:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12381 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb7da78d310 code=0x7ffc0000 [ 770.002277][ C1] vkms_vblank_simulate: vblank timer overrun [ 770.275127][T12398] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 770.395890][T12403] xt_l2tp: wrong L2TP version: 0 [ 770.689235][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 770.732654][T12398] binder: Unknown parameter '00' [ 770.898437][T12406] IPv6: sit1: Disabled Multicast RS [ 771.194079][T12418] snd_dummy snd_dummy.0: control 0:0:0:syz0:524289 is already present [ 771.729226][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 772.676183][T12439] trusted_key: encrypted_key: insufficient parameters specified [ 772.729394][T12439] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1536'. [ 772.769230][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 773.152538][T12441] siw: device registration error -23 [ 773.208438][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 773.208454][ T30] audit: type=1326 audit(1753325513.735:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12440 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994d58e9a9 code=0x7ffc0000 [ 773.237491][ C1] vkms_vblank_simulate: vblank timer overrun [ 773.375837][ T30] audit: type=1326 audit(1753325513.735:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12440 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f994d58e9a9 code=0x7ffc0000 [ 773.458719][T12453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1540'. [ 773.478033][T12453] netlink: 356 bytes leftover after parsing attributes in process `syz.1.1540'. [ 773.698473][ T30] audit: type=1326 audit(1753325513.735:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12440 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994d58e9a9 code=0x7ffc0000 [ 773.721408][ C1] vkms_vblank_simulate: vblank timer overrun [ 773.794862][ T30] audit: type=1326 audit(1753325513.735:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12440 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f994d58e9a9 code=0x7ffc0000 [ 773.817704][ C1] vkms_vblank_simulate: vblank timer overrun [ 773.817809][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 773.917347][ T30] audit: type=1326 audit(1753325513.735:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12440 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994d58e9a9 code=0x7ffc0000 [ 773.943607][ T30] audit: type=1326 audit(1753325513.735:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12440 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f994d58e9a9 code=0x7ffc0000 [ 774.162209][T12456] xt_l2tp: wrong L2TP version: 0 [ 774.195698][ T30] audit: type=1326 audit(1753325513.735:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12440 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994d58e9a9 code=0x7ffc0000 [ 774.218796][ C1] vkms_vblank_simulate: vblank timer overrun [ 774.346895][ T30] audit: type=1326 audit(1753325513.735:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12440 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f994d58d310 code=0x7ffc0000 [ 774.370612][ C1] vkms_vblank_simulate: vblank timer overrun [ 774.513416][ T30] audit: type=1326 audit(1753325513.735:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12440 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994d58e9a9 code=0x7ffc0000 [ 774.849276][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 774.852912][ T30] audit: type=1326 audit(1753325513.735:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12440 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f994d58d60a code=0x7ffc0000 [ 775.889232][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 776.929304][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 777.569766][T12498] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1550'. [ 777.722022][ T5959] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 777.782168][T12502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1552'. [ 777.796576][T12502] netlink: 356 bytes leftover after parsing attributes in process `syz.2.1552'. [ 777.969238][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 778.280617][T12511] snd_dummy snd_dummy.0: control 0:0:0:syz0:524289 is already present [ 778.911422][ T5959] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 778.962878][ T5959] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 779.009241][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 779.104478][ T5959] usb 5-1: config 0 interface 0 has no altsetting 0 [ 779.119523][ T5959] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 779.138394][ T5959] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.171669][T12518] xt_l2tp: wrong L2TP version: 0 [ 779.429628][T12519] xt_l2tp: wrong L2TP version: 0 [ 779.525181][ T5959] usb 5-1: config 0 descriptor?? [ 779.790774][T12524] block device autoloading is deprecated and will be removed. [ 779.840674][T12523] md2: using deprecated bitmap file support [ 779.847888][T12523] md2: error: bitmap file must be a regular file [ 779.869573][ T973] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 779.913419][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 779.913436][ T30] audit: type=1400 audit(1753325520.445:858): avc: denied { watch watch_reads } for pid=12525 comm="syz.0.1558" path="/" dev="ramfs" ino=30282 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 780.031760][ T973] usb 6-1: config 0 has an invalid interface number: 9 but max is 0 [ 780.042528][ T973] usb 6-1: config 0 has an invalid descriptor of length 67, skipping remainder of the config [ 780.049235][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 780.063902][ T973] usb 6-1: config 0 has no interface number 0 [ 780.083410][ T973] usb 6-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=45.e8 [ 780.096871][ T973] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.134179][ T973] usb 6-1: config 0 descriptor?? [ 780.154443][ T973] rndis_host 6-1:0.9: More than one union descriptor, skipping ... [ 780.164799][ T973] usb 6-1: bad CDC descriptors [ 780.173226][ T973] cdc_acm 6-1:0.9: More than one union descriptor, skipping ... [ 780.238954][ T5959] usb 5-1: string descriptor 0 read error: -22 [ 780.474340][T12534] netlink: 'syz.2.1560': attribute type 4 has an invalid length. [ 780.489387][T12534] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 780.743077][T12536] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1551'. [ 780.769821][T12533] block device autoloading is deprecated and will be removed. [ 780.872024][T12540] FAULT_INJECTION: forcing a failure. [ 780.872024][T12540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 780.904065][T12540] CPU: 0 UID: 0 PID: 12540 Comm: syz.1.1561 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 780.904097][T12540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 780.904108][T12540] Call Trace: [ 780.904115][T12540] [ 780.904122][T12540] dump_stack_lvl+0x16c/0x1f0 [ 780.904146][T12540] should_fail_ex+0x512/0x640 [ 780.904178][T12540] _copy_to_user+0x32/0xd0 [ 780.904199][T12540] simple_read_from_buffer+0xcb/0x170 [ 780.904228][T12540] proc_fail_nth_read+0x197/0x270 [ 780.904257][T12540] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 780.904283][T12540] ? rw_verify_area+0xcf/0x680 [ 780.904304][T12540] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 780.904328][T12540] vfs_read+0x1e1/0xc60 [ 780.904356][T12540] ? __pfx___mutex_lock+0x10/0x10 [ 780.904375][T12540] ? __pfx_vfs_read+0x10/0x10 [ 780.904405][T12540] ? __fget_files+0x20e/0x3c0 [ 780.904428][T12540] ksys_read+0x12a/0x250 [ 780.904452][T12540] ? __pfx_ksys_read+0x10/0x10 [ 780.904475][T12540] ? syscall_trace_enter+0x1cb/0x260 [ 780.904499][T12540] ? rcu_is_watching+0x12/0xc0 [ 780.904525][T12540] do_syscall_64+0xcd/0x4c0 [ 780.904545][T12540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.904564][T12540] RIP: 0033:0x7fb7da78d3bc [ 780.904578][T12540] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 780.904595][T12540] RSP: 002b:00007fb7db568030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 780.904613][T12540] RAX: ffffffffffffffda RBX: 00007fb7da9b5fa0 RCX: 00007fb7da78d3bc [ 780.904625][T12540] RDX: 000000000000000f RSI: 00007fb7db5680a0 RDI: 0000000000000005 [ 780.904636][T12540] RBP: 00007fb7db568090 R08: 0000000000000000 R09: 0000000000000000 [ 780.904647][T12540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 780.904658][T12540] R13: 0000000000000000 R14: 00007fb7da9b5fa0 R15: 00007ffed78ce828 [ 780.904683][T12540] [ 781.089199][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 781.194780][ T5959] uclogic 0003:256C:006D.001B: failed retrieving string descriptor #100: -71 [ 781.305849][ T5959] uclogic 0003:256C:006D.001B: failed retrieving pen parameters: -71 [ 781.375141][ T5959] uclogic 0003:256C:006D.001B: failed probing pen v1 parameters: -71 [ 781.386177][ T5959] uclogic 0003:256C:006D.001B: failed probing parameters: -71 [ 781.398006][ T5959] uclogic 0003:256C:006D.001B: probe with driver uclogic failed with error -71 [ 781.428882][ T5959] usb 5-1: USB disconnect, device number 46 [ 781.612244][T12550] xt_l2tp: wrong L2TP version: 0 [ 781.629870][ T973] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 781.894133][T12552] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1565'. [ 781.963540][ T973] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 782.129214][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 782.830690][ T30] audit: type=1800 audit(1753325522.535:859): pid=12553 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1565" name="bus" dev="overlay" ino=1865 res=0 errno=0 [ 782.852418][ C1] vkms_vblank_simulate: vblank timer overrun [ 782.852440][ T973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.876669][ T973] usb 2-1: config 0 descriptor?? [ 782.908735][ T5959] usb 6-1: USB disconnect, device number 28 [ 783.016570][T12556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1567'. [ 783.179254][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 783.569235][T12558] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 783.576148][T12558] PKCS7: Only support pkcs7_signedData type [ 783.582221][T12560] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 783.588893][T12560] PKCS7: Only support pkcs7_signedData type [ 783.597174][T12558] x_tables: duplicate underflow at hook 1 [ 783.603173][T12558] x_tables: duplicate underflow at hook 1 [ 783.821025][T12547] binder: BINDER_SET_CONTEXT_MGR already set [ 783.835483][T12547] binder: 12544:12547 ioctl 4018620d 200000000040 returned -16 [ 783.845452][T12547] binder: 12544:12547 ioctl c0306201 200000001a80 returned -11 [ 783.857172][ T973] pegasus 2-1:0.0: probe with driver pegasus failed with error -71 [ 783.868833][ T973] usb 2-1: USB disconnect, device number 49 [ 784.209201][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 784.619545][T12574] xt_l2tp: wrong L2TP version: 0 [ 784.854966][T12580] loop6: detected capacity change from 0 to 524287999 [ 785.059348][ T5959] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 785.245817][ T5959] usb 3-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 785.255005][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 785.389341][ T5959] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.413352][ T5959] usb 3-1: Product: syz [ 785.467183][T12584] netlink: 'syz.1.1573': attribute type 4 has an invalid length. [ 785.689500][ T5959] usb 3-1: Manufacturer: syz [ 785.694200][ T5959] usb 3-1: SerialNumber: syz [ 785.747047][ T5959] usb 3-1: config 0 descriptor?? [ 786.016307][T12583] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 786.034902][ T5959] usb 3-1: interface 1 not found [ 786.245150][T12579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 786.259705][T12579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 786.289258][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 786.350590][T12579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 786.380775][T12579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 786.468987][T12594] binder: 12590:12594 ioctl 4018620d 0 returned -22 [ 786.581534][T12579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 786.649540][T12594] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1576'. [ 786.659431][T12594] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 786.778956][T12596] siw: device registration error -23 [ 786.789518][T12579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 786.910109][ T30] audit: type=1326 audit(1753325527.445:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12595 comm="syz.4.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a5f8e9a9 code=0x7ffc0000 [ 786.937833][ T30] audit: type=1326 audit(1753325527.465:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12595 comm="syz.4.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a5f8e9a9 code=0x7ffc0000 [ 786.938212][ T973] usb 3-1: USB disconnect, device number 46 [ 786.983274][ T30] audit: type=1326 audit(1753325527.465:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12595 comm="syz.4.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f27a5f8e9a9 code=0x7ffc0000 [ 787.181713][ T30] audit: type=1326 audit(1753325527.465:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12595 comm="syz.4.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a5f8e9a9 code=0x7ffc0000 [ 787.193633][T12601] loop6: detected capacity change from 0 to 524287999 [ 787.272145][ T30] audit: type=1326 audit(1753325527.465:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12595 comm="syz.4.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a5f8e9a9 code=0x7ffc0000 [ 787.339227][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 787.382531][T12604] overlayfs: failed to resolve './file1': -2 [ 788.094392][ T30] audit: type=1326 audit(1753325527.465:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12595 comm="syz.4.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f27a5f8e9a9 code=0x7ffc0000 [ 788.158724][ T30] audit: type=1326 audit(1753325527.465:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12595 comm="syz.4.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a5f8e9a9 code=0x7ffc0000 [ 788.187861][T12607] QAT: Device 7 not found [ 788.218796][ T30] audit: type=1326 audit(1753325527.465:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12595 comm="syz.4.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a5f8e9a9 code=0x7ffc0000 [ 788.261972][ T30] audit: type=1326 audit(1753325527.465:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12595 comm="syz.4.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f27a5f8e9a9 code=0x7ffc0000 [ 788.360210][T12610] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1581'. [ 788.376862][T12610] netlink: 356 bytes leftover after parsing attributes in process `syz.4.1581'. [ 788.379214][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 788.624062][ T30] audit: type=1326 audit(1753325527.465:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12595 comm="syz.4.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a5f8e9a9 code=0x7ffc0000 [ 788.909280][ T973] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 789.069305][ T5884] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 789.083877][ T973] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 789.099297][ T5959] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 789.165706][ T973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.189490][ T973] usb 3-1: config 0 descriptor?? [ 789.251889][ T5884] usb 2-1: Using ep0 maxpacket: 16 [ 789.260934][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 789.272008][ T5884] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 789.288364][ T5884] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 789.299463][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.315664][ T5959] usb 6-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 789.349823][ T5884] usb 2-1: config 0 descriptor?? [ 789.388619][ T5959] usb 6-1: config 0 has an invalid descriptor of length 107, skipping remainder of the config [ 789.409228][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 789.446939][ T5959] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 65 [ 789.477378][ T5959] usb 6-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 789.569045][ T5959] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.670808][ T5959] usb 6-1: config 0 descriptor?? [ 789.808784][T12615] binder: BINDER_SET_CONTEXT_MGR already set [ 789.814899][T12615] binder: 12613:12615 ioctl 4018620d 200000000040 returned -16 [ 789.823318][T12615] binder: 12613:12615 ioctl c0306201 200000001a80 returned -11 [ 789.841573][ T973] pegasus 3-1:0.0: probe with driver pegasus failed with error -71 [ 789.851916][ T5884] nintendo 0003:057E:2019.001C: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.1-1/input0 [ 789.872949][ T973] usb 3-1: USB disconnect, device number 47 [ 789.949410][ T5884] nintendo 0003:057E:2019.001C: Failed to get joycon info; ret=-38 [ 790.013258][ T5884] nintendo 0003:057E:2019.001C: Failed to retrieve controller info; ret=-38 [ 790.098720][ T5884] nintendo 0003:057E:2019.001C: Failed to initialize controller; ret=-38 [ 790.155068][ T5884] nintendo 0003:057E:2019.001C: probe - fail = -38 [ 790.199074][ T5884] nintendo 0003:057E:2019.001C: probe with driver nintendo failed with error -38 [ 790.275013][ T5884] usb 2-1: USB disconnect, device number 50 [ 790.301613][ T973] usb 6-1: USB disconnect, device number 29 [ 790.459216][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 790.927361][T12638] netlink: 'syz.5.1587': attribute type 4 has an invalid length. [ 790.943859][T12638] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 791.489243][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 792.529203][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 792.810472][T12649] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 792.810472][T12649] program syz.1.1589 not setting count and/or reply_len properly [ 793.569193][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 794.133831][T12655] netlink: 'syz.2.1592': attribute type 8 has an invalid length. [ 794.419345][ T5884] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 794.489212][ T973] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 794.609206][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 794.704103][T12661] loop6: detected capacity change from 0 to 524287999 [ 794.707470][T12660] netlink: 'syz.0.1594': attribute type 8 has an invalid length. [ 795.029461][ T973] usb 3-1: unable to get BOS descriptor or descriptor too short [ 795.037572][ T973] usb 3-1: not running at top speed; connect to a high speed hub [ 795.067032][ T973] usb 3-1: config 0 has no interfaces? [ 795.081363][ T5884] usb 6-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 795.099420][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.107889][ T5884] usb 6-1: Product: syz [ 795.112341][ T5884] usb 6-1: Manufacturer: syz [ 795.117475][ T5884] usb 6-1: SerialNumber: syz [ 795.118062][ T973] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=3e.5b [ 795.158237][ T5884] usb 6-1: config 0 descriptor?? [ 795.163600][ T973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.186553][ T5884] usb 6-1: interface 1 not found [ 795.257062][ T973] usb 3-1: Product: syz [ 795.355000][ T973] usb 3-1: Manufacturer: syz [ 795.409374][ T5959] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 795.413671][T12651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 795.528080][ T973] usb 3-1: SerialNumber: syz [ 795.552902][T12651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 795.561649][ T973] usb 3-1: config 0 descriptor?? [ 795.572687][T12651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 795.597997][T12651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 795.649218][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 795.656670][T12651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 795.686347][T12651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 795.701692][ T5959] usb 1-1: unable to get BOS descriptor or descriptor too short [ 795.856936][ T5959] usb 1-1: not running at top speed; connect to a high speed hub [ 795.864735][ T973] usb 6-1: USB disconnect, device number 30 [ 795.872753][ T5959] usb 1-1: config 0 has no interfaces? [ 795.886370][T10030] usb 3-1: USB disconnect, device number 48 [ 795.886825][ T5959] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=3e.5b [ 795.903672][ T5959] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.917435][ T5959] usb 1-1: Product: syz [ 795.923270][ T5959] usb 1-1: Manufacturer: syz [ 795.927883][ T5959] usb 1-1: SerialNumber: syz [ 795.946455][ T5959] usb 1-1: config 0 descriptor?? [ 795.979306][ T5939] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 796.130752][ T5939] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 796.160094][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.191574][ T5959] usb 1-1: USB disconnect, device number 58 [ 796.200448][ T5939] usb 5-1: config 0 descriptor?? [ 796.444411][T12674] xt_l2tp: wrong L2TP version: 0 [ 796.689227][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 796.774425][T12677] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 796.892449][T12679] binder: Unknown parameter '00' [ 797.141488][T12685] trusted_key: encrypted_key: insufficient parameters specified [ 797.174917][T12685] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1600'. [ 797.507730][T12668] binder_alloc: 12667: binder_alloc_buf, no vma [ 797.530265][T12668] binder: 12667:12668 ioctl c0306201 200000001a80 returned -11 [ 797.567408][ T5939] pegasus 5-1:0.0: probe with driver pegasus failed with error -71 [ 797.603664][ T5939] usb 5-1: USB disconnect, device number 47 [ 797.729205][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 798.114336][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 798.114353][ T30] audit: type=1400 audit(1753325538.645:878): avc: denied { ioctl } for pid=12692 comm="syz.1.1603" path="socket:[31387]" dev="sockfs" ino=31387 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 798.163169][T12689] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 798.330067][T12698] xt_l2tp: wrong L2TP version: 0 [ 798.529290][ T5939] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 798.689273][ T5939] usb 2-1: Using ep0 maxpacket: 8 [ 798.696111][ T5939] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 798.708160][ T5939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 798.769207][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 798.804255][T12702] netlink: 'syz.0.1605': attribute type 8 has an invalid length. [ 798.892346][ T5939] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 798.949112][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.958537][ T5939] usb 2-1: Product: syz [ 798.969379][ T5939] usb 2-1: Manufacturer: syz [ 798.974059][ T5939] usb 2-1: SerialNumber: syz [ 799.079212][T10030] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 799.087261][ T5939] usb 2-1: config 0 descriptor?? [ 799.428175][T12705] team0: Unable to change to the same mode the team is in [ 799.809299][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 799.863948][ T5939] streamzap 2-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 800.498864][T10030] usb 1-1: unable to get BOS descriptor or descriptor too short [ 800.849259][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 801.330427][T10030] usb 1-1: not running at top speed; connect to a high speed hub [ 801.595061][T10030] usb 1-1: config 0 has no interfaces? [ 801.660627][T10030] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=3e.5b [ 801.674375][ T30] audit: type=1400 audit(1753325542.205:879): avc: denied { setopt } for pid=12692 comm="syz.1.1603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 801.734880][T10030] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.790352][T10030] usb 1-1: Product: syz [ 801.804881][T10030] usb 1-1: Manufacturer: syz [ 801.816511][T10030] usb 1-1: SerialNumber: syz [ 801.834455][ T5939] usb 2-1: USB disconnect, device number 51 [ 801.889211][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 801.964490][T10030] usb 1-1: config 0 descriptor?? [ 801.972567][T10030] usb 1-1: can't set config #0, error -71 [ 801.985124][T10030] usb 1-1: USB disconnect, device number 59 [ 802.006978][ T30] audit: type=1400 audit(1753325542.535:880): avc: denied { append } for pid=12715 comm="syz.5.1609" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 802.172448][T12716] FAULT_INJECTION: forcing a failure. [ 802.172448][T12716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 802.172657][T12716] CPU: 1 UID: 0 PID: 12716 Comm: syz.5.1609 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 802.172681][T12716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 802.172691][T12716] Call Trace: [ 802.172698][T12716] [ 802.172704][T12716] dump_stack_lvl+0x16c/0x1f0 [ 802.172724][T12716] should_fail_ex+0x512/0x640 [ 802.172754][T12716] _copy_from_user+0x2e/0xd0 [ 802.172771][T12716] core_sys_select+0x35b/0xc10 [ 802.172809][T12716] ? __pfx_core_sys_select+0x10/0x10 [ 802.172858][T12716] ? set_user_sigmask+0x21b/0x2b0 [ 802.172878][T12716] ? __pfx_set_user_sigmask+0x10/0x10 [ 802.172902][T12716] do_pselect.constprop.0+0x19f/0x1e0 [ 802.172930][T12716] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 802.172955][T12716] ? __pfx___schedule+0x10/0x10 [ 802.172982][T12716] ? rcu_is_watching+0x12/0xc0 [ 802.173007][T12716] __x64_sys_pselect6+0x182/0x240 [ 802.173036][T12716] ? __pfx___x64_sys_pselect6+0x10/0x10 [ 802.173062][T12716] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 802.173086][T12716] do_syscall_64+0xcd/0x4c0 [ 802.173105][T12716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.173122][T12716] RIP: 0033:0x7f994d58e9a9 [ 802.173136][T12716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 802.173153][T12716] RSP: 002b:00007f994b3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 802.173169][T12716] RAX: ffffffffffffffda RBX: 00007f994d7b5fa0 RCX: 00007f994d58e9a9 [ 802.173180][T12716] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 802.173191][T12716] RBP: 00007f994b3f6090 R08: 0000200000000300 R09: 0000000000000000 [ 802.173201][T12716] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 802.173211][T12716] R13: 0000000000000000 R14: 00007f994d7b5fa0 R15: 00007ffe2f8196d8 [ 802.173233][T12716] [ 802.215228][T12720] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 802.571351][T12723] syz_tun: entered allmulticast mode [ 802.577735][T12721] syz_tun: left allmulticast mode [ 802.875565][T10030] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 802.929224][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 803.099587][T10030] usb 1-1: Using ep0 maxpacket: 16 [ 803.115093][T10030] usb 1-1: unable to get BOS descriptor or descriptor too short [ 803.229765][T10030] usb 1-1: config 8 interface 0 has no altsetting 0 [ 803.246455][T10030] usb 1-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice= f.ca [ 803.257051][T10030] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.410718][T10030] usb 1-1: Product: syz [ 803.417303][T10030] usb 1-1: Manufacturer: syz [ 803.609463][T10030] usb 1-1: SerialNumber: syz [ 803.707111][T12745] snd_dummy snd_dummy.0: control 0:0:0:syz0:524289 is already present [ 803.969205][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 804.727826][T12726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 804.771403][T12726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 804.820557][T12750] syz_tun: entered allmulticast mode [ 804.827643][T12749] syz_tun: left allmulticast mode [ 804.843046][T10030] usb 1-1: USB disconnect, device number 60 [ 804.923777][ T30] audit: type=1326 audit(1753325545.455:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12747 comm="syz.2.1619" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b3f18e9a9 code=0x0 [ 804.949332][T12726] dummy0: entered promiscuous mode [ 804.973683][T12726] dummy0: left promiscuous mode [ 805.009194][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 805.646721][ T30] audit: type=1400 audit(1753325546.035:882): avc: denied { execute } for pid=12757 comm="syz.1.1621" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=30702 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 806.009401][ T5939] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 806.012763][T12766] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 806.049216][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 806.182814][ T5939] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 806.203298][ T5939] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 806.218128][ T5939] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 806.227733][ T5939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.240491][T12758] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 806.260443][ T5939] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 806.389406][T10030] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 806.458562][ T30] audit: type=1800 audit(1753325546.955:883): pid=12780 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1628" name="bus" dev="overlay" ino=1744 res=0 errno=0 [ 806.544722][ T5939] usb 2-1: USB disconnect, device number 52 [ 807.089196][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 807.259383][T12788] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 807.268885][T12788] binder: Unknown parameter '00' [ 807.482449][T10030] usb 6-1: descriptor type invalid, skip [ 807.495268][T10030] usb 6-1: descriptor type invalid, skip [ 808.129273][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 808.456320][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.462732][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.642267][T12792] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 808.642267][T12792] program syz.0.1631 not setting count and/or reply_len properly [ 809.050919][T10030] usb 6-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 809.139241][T10030] usb 6-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 809.152458][T10030] usb 6-1: config 1 interface 0 has no altsetting 0 [ 809.166024][T10030] usb 6-1: string descriptor 0 read error: -71 [ 809.169197][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 809.172422][T10030] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 809.188193][T10030] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.210265][T12800] md2: using deprecated bitmap file support [ 809.216212][T12800] md2: error: failed to get bitmap file [ 809.232340][T10030] usb 6-1: can't set config #1, error -71 [ 809.252605][T12808] FAULT_INJECTION: forcing a failure. [ 809.252605][T12808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 809.329507][T10030] usb 6-1: USB disconnect, device number 31 [ 809.334335][ T30] audit: type=1800 audit(1753325549.865:884): pid=12803 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1636" name="bus" dev="overlay" ino=1768 res=0 errno=0 [ 809.341472][T12808] CPU: 0 UID: 0 PID: 12808 Comm: syz.1.1637 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 809.341498][T12808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 809.341508][T12808] Call Trace: [ 809.341514][T12808] [ 809.341520][T12808] dump_stack_lvl+0x16c/0x1f0 [ 809.341541][T12808] should_fail_ex+0x512/0x640 [ 809.341569][T12808] _copy_from_user+0x2e/0xd0 [ 809.341586][T12808] video_usercopy+0xedd/0x1720 [ 809.341612][T12808] ? __pfx___video_do_ioctl+0x10/0x10 [ 809.341635][T12808] ? selinux_kernel_read_file+0xf0/0x130 [ 809.341651][T12808] ? __pfx_video_usercopy+0x10/0x10 [ 809.341690][T12808] v4l2_ioctl+0x1bd/0x250 [ 809.341712][T12808] ? __pfx_v4l2_ioctl+0x10/0x10 [ 809.341735][T12808] __x64_sys_ioctl+0x18e/0x210 [ 809.341758][T12808] do_syscall_64+0xcd/0x4c0 [ 809.341776][T12808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.341792][T12808] RIP: 0033:0x7fb7da78e9a9 [ 809.341805][T12808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 809.341820][T12808] RSP: 002b:00007fb7db568038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 809.341841][T12808] RAX: ffffffffffffffda RBX: 00007fb7da9b5fa0 RCX: 00007fb7da78e9a9 [ 809.341851][T12808] RDX: 0000200000000100 RSI: 00000000c0405668 RDI: 0000000000000003 [ 809.341861][T12808] RBP: 00007fb7db568090 R08: 0000000000000000 R09: 0000000000000000 [ 809.341871][T12808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 809.341880][T12808] R13: 0000000000000000 R14: 00007fb7da9b5fa0 R15: 00007ffed78ce828 [ 809.341901][T12808] [ 809.679289][T10030] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 809.753647][T12815] snd_dummy snd_dummy.0: control 0:0:0:syz0:524289 is already present [ 810.209206][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 810.220366][T10030] usb 6-1: config 0 has an invalid interface number: 147 but max is 0 [ 810.644226][T10030] usb 6-1: config 0 has no interface number 0 [ 810.653453][T10030] usb 6-1: config 0 interface 147 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 810.659434][ T30] audit: type=1326 audit(1753325550.775:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12804 comm="syz.0.1635" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f0418e9a9 code=0x0 [ 810.667132][T10030] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.03 [ 810.745122][T10030] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.749335][T10030] usb 6-1: Product: syz [ 810.750024][T10030] usb 6-1: Manufacturer: syz [ 810.751887][T10030] usb 6-1: SerialNumber: syz [ 810.913040][T12819] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 811.028037][T10030] usb 6-1: config 0 descriptor?? [ 811.035704][T12823] netlink: 'syz.4.1642': attribute type 33 has an invalid length. [ 811.040897][T12809] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 811.044093][T12823] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1642'. [ 811.154647][T12829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1642'. [ 811.174884][T10030] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 811.249277][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 812.080990][T12844] snd_dummy snd_dummy.0: control 0:0:0:syz0:524289 is already present [ 812.289293][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 812.289488][ T13] usb 6-1: Failed to submit usb control message: -110 [ 812.317113][ T13] usb 6-1: unable to send the bmi data to the device: -110 [ 812.325325][ T13] usb 6-1: unable to get target info from device [ 812.340277][ T13] usb 6-1: could not get target info (-110) [ 812.397042][ T13] usb 6-1: could not probe fw (-110) [ 812.823952][T10030] usb 6-1: USB disconnect, device number 32 [ 813.079450][ T5939] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 813.272629][T12874] bridge_slave_0: left allmulticast mode [ 813.278371][T12874] bridge_slave_0: left promiscuous mode [ 813.284888][T12869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1657'. [ 813.294825][T12874] bridge0: port 1(bridge_slave_0) entered disabled state [ 813.329187][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 814.369189][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 814.476490][T12879] xt_l2tp: wrong L2TP version: 0 [ 814.493807][ T5939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 814.564570][T12874] bridge_slave_1: left allmulticast mode [ 814.570543][T12874] bridge_slave_1: left promiscuous mode [ 814.576852][T12874] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.613603][ T5939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 814.693646][ T5939] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 814.950887][ T5939] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 814.973031][T12881] block device autoloading is deprecated and will be removed. [ 814.998839][ T5939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.021258][ T5939] usb 2-1: config 0 descriptor?? [ 815.153692][T12874] bond0: (slave bond_slave_0): Releasing backup interface [ 815.176943][T12874] bond0: (slave bond_slave_1): Releasing backup interface [ 815.409184][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 815.627406][T12874] team0: Port device team_slave_0 removed [ 815.642833][T12874] team0: Port device team_slave_1 removed [ 815.661690][T12874] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 815.671568][T12874] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 815.681337][T12874] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 815.691834][T12874] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 816.079532][ T5898] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 816.381414][ T5898] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 816.403730][ T5898] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 816.435280][ T5898] usb 3-1: config 0 interface 0 has no altsetting 0 [ 816.444131][ T5898] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 816.453497][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 816.465071][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.487415][ T5898] usb 3-1: config 0 descriptor?? [ 816.627927][T12899] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 816.627927][T12899] program syz.4.1662 not setting count and/or reply_len properly [ 817.489191][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 817.898832][ T5939] usbhid 2-1:0.0: can't add hid device: -71 [ 817.905017][ T5939] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 817.922385][ T5939] usb 2-1: USB disconnect, device number 53 [ 817.970653][ T5898] usb 3-1: string descriptor 0 read error: -22 [ 818.181776][ T30] audit: type=1400 audit(1753325558.715:886): avc: denied { mounton } for pid=12903 comm="syz.1.1664" path="/342/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 818.303345][ T5898] uclogic 0003:256C:006D.001D: failed retrieving string descriptor #200: -71 [ 818.312259][ T5898] uclogic 0003:256C:006D.001D: failed retrieving pen parameters: -71 [ 818.320597][ T5898] uclogic 0003:256C:006D.001D: failed probing pen v2 parameters: -71 [ 818.328692][ T5898] uclogic 0003:256C:006D.001D: failed probing parameters: -71 [ 818.336667][ T5898] uclogic 0003:256C:006D.001D: probe with driver uclogic failed with error -71 [ 818.348616][ T5898] usb 3-1: USB disconnect, device number 49 [ 818.354699][ T5959] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 818.489241][ T5939] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 818.496973][ T5959] usb 1-1: device descriptor read/64, error -71 [ 818.509216][ T5940] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 818.529239][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 818.650314][ T5939] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 818.662380][ T5939] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 818.672821][ T5939] usb 5-1: config 0 interface 0 has no altsetting 0 [ 818.679859][ T5939] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 818.689510][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.700647][ T5939] usb 5-1: config 0 descriptor?? [ 818.707182][ T5940] usb 6-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 818.717788][ T5940] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.726658][ T5940] usb 6-1: Product: syz [ 818.730893][ T5940] usb 6-1: Manufacturer: syz [ 818.735495][ T5940] usb 6-1: SerialNumber: syz [ 818.742278][ T5940] usb 6-1: config 0 descriptor?? [ 818.749234][ T5959] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 818.758272][ T5940] usb 6-1: interface 1 not found [ 818.879475][ T5959] usb 1-1: device descriptor read/64, error -71 [ 818.918282][T12922] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1670'. [ 818.936750][T12919] overlayfs: statfs failed on './file0' [ 818.992033][ T5959] usb usb1-port1: attempt power cycle [ 819.114332][T12915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 819.176070][T12915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 819.227516][T12915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 819.247465][T12915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 819.284313][T12915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 819.311880][T12915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 819.482700][ T973] usb 6-1: USB disconnect, device number 33 [ 819.486303][ T5959] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 819.509536][ T5939] usb 5-1: string descriptor 0 read error: -22 [ 819.569198][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 819.634182][ T5959] usb 1-1: device descriptor read/8, error -71 [ 819.920721][ T5959] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 819.949058][ T5939] uclogic 0003:256C:006D.001E: failed retrieving string descriptor #100: -71 [ 819.963930][ T5959] usb 1-1: device descriptor read/8, error -71 [ 819.972136][ T5939] uclogic 0003:256C:006D.001E: failed retrieving pen parameters: -71 [ 819.996662][ T5939] uclogic 0003:256C:006D.001E: failed probing pen v1 parameters: -71 [ 820.005062][ T5939] uclogic 0003:256C:006D.001E: failed probing parameters: -71 [ 820.060989][ T5939] uclogic 0003:256C:006D.001E: probe with driver uclogic failed with error -71 [ 820.101350][ T5959] usb usb1-port1: unable to enumerate USB device [ 820.569269][ T5939] usb 5-1: USB disconnect, device number 48 [ 820.609209][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 821.334413][T12942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1674'. [ 821.347900][T12942] netlink: 356 bytes leftover after parsing attributes in process `syz.2.1674'. [ 821.383587][T12948] FAULT_INJECTION: forcing a failure. [ 821.383587][T12948] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 821.455398][T12948] CPU: 1 UID: 0 PID: 12948 Comm: syz.5.1677 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 821.455427][T12948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 821.455438][T12948] Call Trace: [ 821.455444][T12948] [ 821.455451][T12948] dump_stack_lvl+0x16c/0x1f0 [ 821.455473][T12948] should_fail_ex+0x512/0x640 [ 821.455503][T12948] _copy_from_user+0x2e/0xd0 [ 821.455522][T12948] sg_write+0x2cc/0xe10 [ 821.455547][T12948] ? __pfx_sg_write+0x10/0x10 [ 821.455567][T12948] ? __pfx__kstrtoull+0x10/0x10 [ 821.455609][T12948] ? bpf_lsm_file_permission+0x9/0x10 [ 821.455629][T12948] ? security_file_permission+0x71/0x210 [ 821.455647][T12948] ? rw_verify_area+0xcf/0x680 [ 821.455671][T12948] ? __pfx_sg_write+0x10/0x10 [ 821.455690][T12948] vfs_writev+0x5df/0xde0 [ 821.455717][T12948] ? __pfx_vfs_writev+0x10/0x10 [ 821.455753][T12948] ? __fget_files+0x20e/0x3c0 [ 821.455766][T12948] ? __fget_files+0x190/0x3c0 [ 821.455784][T12948] ? do_writev+0x132/0x340 [ 821.455803][T12948] do_writev+0x132/0x340 [ 821.455824][T12948] ? __pfx_do_writev+0x10/0x10 [ 821.455850][T12948] do_syscall_64+0xcd/0x4c0 [ 821.455867][T12948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.455885][T12948] RIP: 0033:0x7f994d58e9a9 [ 821.455899][T12948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 821.455916][T12948] RSP: 002b:00007f994b3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 821.455933][T12948] RAX: ffffffffffffffda RBX: 00007f994d7b5fa0 RCX: 00007f994d58e9a9 [ 821.455945][T12948] RDX: 0000000000000002 RSI: 0000200000000400 RDI: 0000000000000003 [ 821.455956][T12948] RBP: 00007f994b3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 821.455967][T12948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 821.455976][T12948] R13: 0000000000000000 R14: 00007f994d7b5fa0 R15: 00007ffe2f8196d8 [ 821.455998][T12948] [ 821.652417][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 822.689194][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 823.341236][ T30] audit: type=1326 audit(1753325563.845:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12954 comm="syz.5.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994d58e9a9 code=0x7ffc0000 [ 823.379748][ T30] audit: type=1326 audit(1753325563.855:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12954 comm="syz.5.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f994d58e9a9 code=0x7ffc0000 [ 823.436999][ T30] audit: type=1326 audit(1753325563.855:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12954 comm="syz.5.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994d58e9a9 code=0x7ffc0000 [ 823.563935][T12956] sg_write: data in/out 49020/1 bytes for SCSI command 0x1c-- guessing data in; [ 823.563935][T12956] program syz.5.1679 not setting count and/or reply_len properly [ 823.729218][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 824.769251][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 825.259237][ T30] audit: type=1326 audit(1753325563.855:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12954 comm="syz.5.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994d58e9a9 code=0x7ffc0000 [ 825.503738][ T30] audit: type=1326 audit(1753325563.905:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12954 comm="syz.5.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f994d58e9a9 code=0x7ffc0000 [ 825.527114][ C0] vkms_vblank_simulate: vblank timer overrun [ 825.533749][ T30] audit: type=1326 audit(1753325563.905:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12954 comm="syz.5.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994d58e9a9 code=0x7ffc0000 [ 825.557123][ C0] vkms_vblank_simulate: vblank timer overrun [ 825.809181][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 826.053944][ T30] audit: type=1326 audit(1753325563.905:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12954 comm="syz.5.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994d58e9a9 code=0x7ffc0000 [ 826.080392][ T30] audit: type=1326 audit(1753325563.945:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12954 comm="syz.5.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f994d58e9a9 code=0x7ffc0000 [ 826.512558][ T30] audit: type=1326 audit(1753325564.005:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12954 comm="syz.5.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994d58e9a9 code=0x7ffc0000 [ 826.859178][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 827.108236][ T30] audit: type=1326 audit(1753325564.005:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12954 comm="syz.5.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994d58e9a9 code=0x7ffc0000 [ 827.295967][T12987] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 827.317118][T12987] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1686'. [ 827.362405][T12987] gretap0: entered promiscuous mode [ 827.368602][T12987] macsec1: entered allmulticast mode [ 827.374305][T12987] gretap0: entered allmulticast mode [ 827.572255][T12986] siw: device registration error -23 [ 827.889199][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 827.965116][T12995] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1689'. [ 828.173866][T12997] vivid-002: ================= START STATUS ================= [ 828.197945][T12991] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 828.205204][T12991] IPv6: NLM_F_CREATE should be set when creating new route [ 828.212433][T12991] IPv6: NLM_F_CREATE should be set when creating new route [ 828.219668][T12991] IPv6: NLM_F_CREATE should be set when creating new route [ 828.289088][T12997] vivid-002: Radio HW Seek Mode: Bounded [ 828.296777][T12997] vivid-002: Radio Programmable HW Seek: false [ 828.413244][T12997] vivid-002: RDS Rx I/O Mode: Block I/O [ 828.420714][T12997] vivid-002: Generate RBDS Instead of RDS: false [ 828.431374][T12997] vivid-002: RDS Reception: true [ 828.438948][T12997] vivid-002: RDS Program Type: 0 inactive [ 828.455773][T12997] vivid-002: RDS PS Name: inactive [ 828.548559][T13002] netlink: 'syz.2.1690': attribute type 4 has an invalid length. [ 828.581930][T13002] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 828.772437][T12997] vivid-002: RDS Radio Text: inactive [ 828.828792][T12997] vivid-002: RDS Traffic Announcement: false inactive [ 828.863042][T13006] FAULT_INJECTION: forcing a failure. [ 828.863042][T13006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 828.877143][T12997] vivid-002: RDS Traffic Program: false inactive [ 828.908577][T13008] syz.4.1693: attempt to access beyond end of device [ 828.908577][T13008] loop4: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 828.929229][T13006] CPU: 1 UID: 0 PID: 13006 Comm: syz.0.1691 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 828.929257][T13006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 828.929268][T13006] Call Trace: [ 828.929275][T13006] [ 828.929283][T13006] dump_stack_lvl+0x16c/0x1f0 [ 828.929306][T13006] should_fail_ex+0x512/0x640 [ 828.929338][T13006] _copy_from_user+0x2e/0xd0 [ 828.929357][T13006] ptp_ioctl+0x1508/0x21a0 [ 828.929387][T13006] ? __pfx_ptp_ioctl+0x10/0x10 [ 828.929416][T13006] ? tomoyo_path_number_perm+0x18d/0x580 [ 828.929447][T13006] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 828.929506][T13006] ? __pfx_ptp_ioctl+0x10/0x10 [ 828.929528][T13006] posix_clock_ioctl+0xf6/0x170 [ 828.929552][T13006] ? __pfx_posix_clock_ioctl+0x10/0x10 [ 828.929579][T13006] __x64_sys_ioctl+0x18e/0x210 [ 828.929605][T13006] do_syscall_64+0xcd/0x4c0 [ 828.929624][T13006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.929642][T13006] RIP: 0033:0x7f0f0418e9a9 [ 828.929657][T13006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 828.929673][T13006] RSP: 002b:00007f0f04f5a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 828.929690][T13006] RAX: ffffffffffffffda RBX: 00007f0f043b5fa0 RCX: 00007f0f0418e9a9 [ 828.929702][T13006] RDX: 0000200000000040 RSI: 0000000040383d0c RDI: 0000000000000003 [ 828.929712][T13006] RBP: 00007f0f04f5a090 R08: 0000000000000000 R09: 0000000000000000 [ 828.929722][T13006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 828.929733][T13006] R13: 0000000000000000 R14: 00007f0f043b5fa0 R15: 00007fffe892a4b8 [ 828.929756][T13006] [ 828.933698][T12997] vivid-002: RDS Music: [ 828.945902][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 828.989254][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 828.989270][ T30] audit: type=1400 audit(1753325569.485:936): avc: denied { write } for pid=12996 comm="syz.1.1688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 829.144840][T12997] false inactive [ 829.148442][T12997] vivid-002: ================== END STATUS ================== [ 829.167218][ T30] audit: type=1400 audit(1753325569.485:937): avc: denied { ioctl } for pid=12996 comm="syz.1.1688" path="socket:[32973]" dev="sockfs" ino=32973 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 829.549190][ T973] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 829.669393][T10030] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 829.771463][ T973] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 829.780765][ T973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.930321][ T973] usb 1-1: config 0 descriptor?? [ 829.975004][T10030] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 829.979209][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 829.986262][T10030] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 830.053877][T10030] usb 2-1: config 0 interface 0 has no altsetting 0 [ 830.069671][T10030] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 830.091944][T10030] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.147763][T10030] usb 2-1: config 0 descriptor?? [ 830.269230][ T5884] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 830.421393][ T5884] usb 5-1: Using ep0 maxpacket: 16 [ 830.447589][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 830.480900][ T5884] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 830.534781][ T5884] usb 5-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 830.577947][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.612642][ T5884] usb 5-1: config 0 descriptor?? [ 830.629048][ T973] pegasus 1-1:0.0: probe with driver pegasus failed with error -71 [ 830.639664][ T973] usb 1-1: USB disconnect, device number 65 [ 830.951515][T13030] team0: Mode changed to "loadbalance" [ 831.009174][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 832.049183][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 832.249910][T10030] usb 2-1: string descriptor 0 read error: -22 [ 832.493307][ T5884] nintendo 0003:057E:2019.0020: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.4-1/input0 [ 832.602588][ T5884] nintendo 0003:057E:2019.0020: Failed to get joycon info; ret=-38 [ 832.612569][ T5884] nintendo 0003:057E:2019.0020: Failed to retrieve controller info; ret=-38 [ 832.624411][ T5884] nintendo 0003:057E:2019.0020: Failed to initialize controller; ret=-38 [ 832.638606][T10030] uclogic 0003:256C:006D.001F: failed retrieving string descriptor #100: -71 [ 832.650911][ T5884] nintendo 0003:057E:2019.0020: probe - fail = -38 [ 832.657664][ T5884] nintendo 0003:057E:2019.0020: probe with driver nintendo failed with error -38 [ 832.677396][T10030] uclogic 0003:256C:006D.001F: failed retrieving pen parameters: -71 [ 832.696837][T10030] uclogic 0003:256C:006D.001F: failed probing pen v1 parameters: -71 [ 832.708438][T10030] uclogic 0003:256C:006D.001F: failed probing parameters: -71 [ 832.716671][T10030] uclogic 0003:256C:006D.001F: probe with driver uclogic failed with error -71 [ 832.735443][T10030] usb 2-1: USB disconnect, device number 54 [ 833.089276][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 833.193509][ T5939] usb 5-1: USB disconnect, device number 49 [ 834.139186][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 834.770778][T13055] program syz.4.1706 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 834.903950][T13055] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 835.169178][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 835.228354][T13063] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 835.405191][T13065] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 835.406637][T13068] netlink: 'syz.0.1705': attribute type 4 has an invalid length. [ 835.651588][T13057] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 835.889270][T13080] md2: using deprecated bitmap file support [ 836.035869][T13086] xt_l2tp: wrong L2TP version: 0 [ 836.075747][T13080] md2: error: failed to get bitmap file [ 836.209278][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 837.117288][ T30] audit: type=1800 audit(1753325576.815:938): pid=13091 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1714" name="bus" dev="overlay" ino=1908 res=0 errno=0 [ 837.259191][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 837.385876][T13103] syz0: rxe_newlink: already configured on bond_slave_1 [ 837.464974][ T5152] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 837.533371][ T5939] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 837.743306][T10030] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 838.016546][ T5939] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 838.019205][T10030] usb 2-1: Using ep0 maxpacket: 16 [ 838.032247][ T5939] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 838.044903][T10030] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 838.055233][T10030] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.064293][T10030] usb 2-1: Product: syz [ 838.068622][T10030] usb 2-1: Manufacturer: syz [ 838.075081][ T5939] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 838.075148][T10030] usb 2-1: SerialNumber: syz [ 838.113382][ T5939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.114318][T10030] usb 2-1: config 0 descriptor?? [ 838.133512][T10030] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 838.189347][ T5959] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 838.211461][ T5939] usb 6-1: config 0 descriptor?? [ 838.239353][ T5884] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 838.250686][ T5939] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 838.273557][ T5939] dvb-usb: bulk message failed: -22 (3/0) [ 838.289216][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 838.300329][ T5939] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 838.313554][ T5939] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 838.322989][ T5939] usb 6-1: media controller created [ 838.349051][ T5939] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 838.379214][ T5959] usb 1-1: Using ep0 maxpacket: 16 [ 838.385823][ T5959] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 838.397261][ T5939] dvb-usb: bulk message failed: -22 (6/0) [ 838.404244][ T5959] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 838.417141][ T5939] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 838.424685][ T5884] usb 3-1: Using ep0 maxpacket: 16 [ 838.444456][ T5939] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input40 [ 838.458503][ T5959] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 838.483760][ T5959] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.487204][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 838.504665][ T5884] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 838.518165][ T5884] usb 3-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 838.518775][ T5939] dvb-usb: schedule remote query interval to 150 msecs. [ 838.535429][ T5959] usb 1-1: config 0 descriptor?? [ 838.552234][T13097] netlink: 'syz.5.1710': attribute type 13 has an invalid length. [ 838.572737][T13097] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 838.582882][ T5939] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 838.594873][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.623318][ T5884] usb 3-1: config 0 descriptor?? [ 838.741000][ T5939] dvb-usb: bulk message failed: -22 (1/0) [ 838.747086][ T5939] dvb-usb: error while querying for an remote control event. [ 839.028733][ T5939] dvb-usb: bulk message failed: -22 (1/0) [ 839.034606][ T5939] dvb-usb: error while querying for an remote control event. [ 839.079978][ T5959] nintendo 0003:057E:2019.0021: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.0-1/input0 [ 839.081303][ T5884] nintendo 0003:057E:2019.0022: hidraw1: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.2-1/input0 [ 839.189308][ T5959] nintendo 0003:057E:2019.0021: Failed to get joycon info; ret=-38 [ 839.199326][ T5939] dvb-usb: bulk message failed: -22 (1/0) [ 839.207505][ T5959] nintendo 0003:057E:2019.0021: Failed to retrieve controller info; ret=-38 [ 839.222272][ T5939] dvb-usb: error while querying for an remote control event. [ 839.229341][ T5884] nintendo 0003:057E:2019.0022: Failed to get joycon info; ret=-38 [ 839.237959][ T5959] nintendo 0003:057E:2019.0021: Failed to initialize controller; ret=-38 [ 839.238293][ T5884] nintendo 0003:057E:2019.0022: Failed to retrieve controller info; ret=-38 [ 839.264332][ T5959] nintendo 0003:057E:2019.0021: probe - fail = -38 [ 839.284010][ T5884] nintendo 0003:057E:2019.0022: Failed to initialize controller; ret=-38 [ 839.289291][ T5959] nintendo 0003:057E:2019.0021: probe with driver nintendo failed with error -38 [ 839.318902][ T5884] nintendo 0003:057E:2019.0022: probe - fail = -38 [ 839.327985][ T5884] nintendo 0003:057E:2019.0022: probe with driver nintendo failed with error -38 [ 839.340055][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 839.350931][T10030] usb 2-1: Quatech SSU-100 USB to Serial Driver converter now attached to ttyUSB0 [ 839.390049][ T5939] dvb-usb: bulk message failed: -22 (1/0) [ 839.395943][ T5939] dvb-usb: error while querying for an remote control event. [ 839.420172][ T973] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 839.473581][T10030] usb 3-1: USB disconnect, device number 50 [ 839.488885][ T5939] usb 1-1: USB disconnect, device number 66 [ 839.559217][ T5959] dvb-usb: bulk message failed: -22 (1/0) [ 839.559292][ T973] usb 5-1: device descriptor read/64, error -71 [ 839.564987][ T5959] dvb-usb: error while querying for an remote control event. [ 839.578382][ T5959] usb 2-1: USB disconnect, device number 55 [ 839.591395][ T5959] ssu100 ttyUSB0: Quatech SSU-100 USB to Serial Driver converter now disconnected from ttyUSB0 [ 839.602344][ T5959] ssu100 2-1:0.0: device disconnected [ 839.719200][ T5939] dvb-usb: bulk message failed: -22 (1/0) [ 839.724961][ T5939] dvb-usb: error while querying for an remote control event. [ 839.819194][ T973] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 839.891053][ T5959] dvb-usb: bulk message failed: -22 (1/0) [ 839.897010][ T5959] dvb-usb: error while querying for an remote control event. [ 839.949200][ T973] usb 5-1: device descriptor read/64, error -71 [ 840.059335][ T5959] dvb-usb: bulk message failed: -22 (1/0) [ 840.061603][ T973] usb usb5-port1: attempt power cycle [ 840.070503][ T5959] dvb-usb: error while querying for an remote control event. [ 840.234858][ T5959] dvb-usb: bulk message failed: -22 (1/0) [ 840.272807][ T5959] dvb-usb: error while querying for an remote control event. [ 840.279246][T10030] usb 6-1: USB disconnect, device number 34 [ 840.293080][ T30] audit: type=1326 audit(1753325580.825:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13127 comm="syz.0.1727" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f0418e9a9 code=0x0 [ 840.369190][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 840.371903][T13133] xt_l2tp: wrong L2TP version: 0 [ 840.623103][T10030] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 840.661097][ T973] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 840.785424][ T973] usb 5-1: device descriptor read/8, error -71 [ 840.866643][T13140] snd_dummy snd_dummy.0: control 0:0:0:syz0:524289 is already present [ 841.314723][T13144] FAULT_INJECTION: forcing a failure. [ 841.314723][T13144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 841.328195][T13144] CPU: 1 UID: 0 PID: 13144 Comm: syz.0.1732 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 841.328211][T13144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 841.328219][T13144] Call Trace: [ 841.328223][T13144] [ 841.328228][T13144] dump_stack_lvl+0x16c/0x1f0 [ 841.328244][T13144] should_fail_ex+0x512/0x640 [ 841.328264][T13144] _copy_to_user+0x32/0xd0 [ 841.328277][T13144] simple_read_from_buffer+0xcb/0x170 [ 841.328295][T13144] proc_fail_nth_read+0x197/0x270 [ 841.328312][T13144] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 841.328329][T13144] ? rw_verify_area+0xcf/0x680 [ 841.328343][T13144] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 841.328358][T13144] vfs_read+0x1e1/0xc60 [ 841.328377][T13144] ? __pfx___mutex_lock+0x10/0x10 [ 841.328388][T13144] ? __pfx_vfs_read+0x10/0x10 [ 841.328407][T13144] ? __fget_files+0x20e/0x3c0 [ 841.328421][T13144] ksys_read+0x12a/0x250 [ 841.328436][T13144] ? __pfx_ksys_read+0x10/0x10 [ 841.328455][T13144] do_syscall_64+0xcd/0x4c0 [ 841.328467][T13144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.328479][T13144] RIP: 0033:0x7f0f0418d3bc [ 841.328488][T13144] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 841.328499][T13144] RSP: 002b:00007f0f04f5a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 841.328510][T13144] RAX: ffffffffffffffda RBX: 00007f0f043b5fa0 RCX: 00007f0f0418d3bc [ 841.328517][T13144] RDX: 000000000000000f RSI: 00007f0f04f5a0a0 RDI: 0000000000000006 [ 841.328524][T13144] RBP: 00007f0f04f5a090 R08: 0000000000000000 R09: 0000000000000000 [ 841.328530][T13144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 841.328537][T13144] R13: 0000000000000000 R14: 00007f0f043b5fa0 R15: 00007fffe892a4b8 [ 841.328550][T13144] [ 841.510543][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 841.531971][ T973] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 841.539668][T10030] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 841.575513][ T973] usb 5-1: device descriptor read/8, error -71 [ 841.618951][T13149] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 841.683129][ T5152] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 841.743328][ T973] usb usb5-port1: unable to enumerate USB device [ 841.759799][T10030] usb 6-1: Using ep0 maxpacket: 32 [ 841.845425][T10030] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 841.853760][T10030] usb 6-1: config 0 has no interface number 0 [ 841.860305][T10030] usb 6-1: config 0 interface 184 has no altsetting 0 [ 841.935024][T13153] xt_l2tp: wrong L2TP version: 0 [ 842.023613][T10030] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 842.033998][T10030] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.050374][T10030] usb 6-1: Product: syz [ 842.057380][T10030] usb 6-1: Manufacturer: syz [ 842.204008][T10030] usb 6-1: SerialNumber: syz [ 842.308280][ T30] audit: type=1326 audit(1753325582.815:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13155 comm="syz.2.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b3f18e9a9 code=0x7ffc0000 [ 842.529278][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 842.649845][T10030] usb 6-1: config 0 descriptor?? [ 842.658462][T10030] smsc75xx v1.0.0 [ 842.668014][T10030] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 842.670183][ T30] audit: type=1326 audit(1753325582.815:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13155 comm="syz.2.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b3f18e9a9 code=0x7ffc0000 [ 842.707031][T10030] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -22 [ 842.751312][ T30] audit: type=1326 audit(1753325582.815:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13155 comm="syz.2.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7f8b3f18e9a9 code=0x7ffc0000 [ 842.776861][ T30] audit: type=1326 audit(1753325582.815:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13155 comm="syz.2.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b3f18e9a9 code=0x7ffc0000 [ 842.801069][ T30] audit: type=1326 audit(1753325582.815:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13155 comm="syz.2.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b3f18e9a9 code=0x7ffc0000 [ 842.825146][ T30] audit: type=1326 audit(1753325582.815:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13155 comm="syz.2.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f8b3f18e9a9 code=0x7ffc0000 [ 842.849827][ T30] audit: type=1326 audit(1753325582.815:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13155 comm="syz.2.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b3f18e9a9 code=0x7ffc0000 [ 842.877403][ T30] audit: type=1326 audit(1753325582.825:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13155 comm="syz.2.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b3f18e9a9 code=0x7ffc0000 [ 842.901735][ T30] audit: type=1326 audit(1753325582.825:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13155 comm="syz.2.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f8b3f18e9a9 code=0x7ffc0000 [ 842.930789][ T5939] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 842.941951][ T30] audit: type=1326 audit(1753325582.825:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13155 comm="syz.2.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b3f18e9a9 code=0x7ffc0000 [ 842.958734][T13162] evm: overlay not supported [ 843.149347][ T5939] usb 5-1: Using ep0 maxpacket: 16 [ 843.159578][ T5939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 843.170716][ T5939] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 843.341733][ T5939] usb 5-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 843.351262][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.569178][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 843.695024][ T5939] usb 5-1: config 0 descriptor?? [ 843.998099][T10030] usb 6-1: USB disconnect, device number 35 [ 844.194838][ T5939] nintendo 0003:057E:2019.0023: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.4-1/input0 [ 844.207494][ T5940] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 844.281753][ T5939] nintendo 0003:057E:2019.0023: Failed to get joycon info; ret=-38 [ 844.300876][ T5939] nintendo 0003:057E:2019.0023: Failed to retrieve controller info; ret=-38 [ 844.322907][ T5939] nintendo 0003:057E:2019.0023: Failed to initialize controller; ret=-38 [ 844.326072][T13180] netlink: 'syz.0.1743': attribute type 2 has an invalid length. [ 844.370159][ T5940] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 844.383762][ T5939] nintendo 0003:057E:2019.0023: probe - fail = -38 [ 844.395915][ T5940] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 844.407684][ T5939] nintendo 0003:057E:2019.0023: probe with driver nintendo failed with error -38 [ 844.419757][ T5940] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 844.450587][ T5940] usb 3-1: config 0 interface 0 has no altsetting 0 [ 844.458539][ T5940] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 844.475144][ T5940] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 844.486322][ T5940] usb 3-1: config 0 interface 0 has no altsetting 0 [ 844.494250][ T5940] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 844.504385][ T5940] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 844.515324][ T5940] usb 3-1: config 0 interface 0 has no altsetting 0 [ 844.523846][ T5940] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 844.532809][ T5940] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 844.543905][ T5940] usb 3-1: config 0 interface 0 has no altsetting 0 [ 844.551551][ T5940] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 844.566505][T13183] block device autoloading is deprecated and will be removed. [ 844.567654][ T5939] usb 5-1: USB disconnect, device number 54 [ 844.580819][ T5940] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 844.589292][T10030] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 844.595868][ T5940] usb 3-1: config 0 interface 0 has no altsetting 0 [ 844.606996][ T5940] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 844.616038][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 844.626018][ T5940] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 844.637580][ T5940] usb 3-1: config 0 interface 0 has no altsetting 0 [ 844.639647][T13182] md2: using deprecated bitmap file support [ 844.647009][ T5940] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 844.650282][ T973] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 844.659263][ T5940] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 844.670274][T13182] md2: error: failed to get bitmap file [ 844.677849][ T5940] usb 3-1: config 0 interface 0 has no altsetting 0 [ 844.690825][ T5940] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 844.699995][ T5940] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 844.711232][ T5940] usb 3-1: config 0 interface 0 has no altsetting 0 [ 844.733581][ T5940] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 844.742816][ T5940] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 844.755991][ T5940] usb 3-1: Product: syz [ 844.760321][ T5940] usb 3-1: Manufacturer: syz [ 844.766127][ T5940] usb 3-1: SerialNumber: syz [ 844.822198][ T5940] usb 3-1: config 0 descriptor?? [ 844.834149][T10030] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 844.846824][ T5940] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 844.848327][ T973] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 844.878076][T10030] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 844.889191][ T973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.909209][T10030] usb 6-1: config 0 interface 0 has no altsetting 0 [ 844.966983][T10030] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 845.015426][ T973] usb 1-1: config 0 descriptor?? [ 845.059393][T10030] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.078022][ T973] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 845.198727][T10030] usb 6-1: config 0 descriptor?? [ 845.273386][ T973] gspca_sunplus: reg_w_riv err -71 [ 845.286462][ T973] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 845.307188][ T973] usb 1-1: USB disconnect, device number 67 [ 845.396312][ T5884] usb 3-1: USB disconnect, device number 51 [ 845.409977][ T5884] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 845.588287][ T9] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 845.649170][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 845.859324][ T9] usb 5-1: device descriptor read/64, error -71 [ 846.109408][ T9] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 846.196467][T13208] trusted_key: encrypted_key: insufficient parameters specified [ 846.218792][T13208] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1750'. [ 846.689180][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 846.789168][ T9] usb 5-1: device descriptor read/64, error -71 [ 846.821748][T10030] usb 6-1: string descriptor 0 read error: -71 [ 846.972832][ T9] usb usb5-port1: attempt power cycle [ 846.979285][T10030] uclogic 0003:256C:006D.0024: failed retrieving string descriptor #200: -71 [ 846.979336][T10030] uclogic 0003:256C:006D.0024: failed retrieving pen parameters: -71 [ 846.979352][T10030] uclogic 0003:256C:006D.0024: failed probing pen v2 parameters: -71 [ 846.979389][T10030] uclogic 0003:256C:006D.0024: failed probing parameters: -71 [ 846.979467][T10030] uclogic 0003:256C:006D.0024: probe with driver uclogic failed with error -71 [ 846.982463][T10030] usb 6-1: USB disconnect, device number 36 [ 847.319181][ T9] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 847.729172][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 847.977437][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 847.977454][ T30] audit: type=1326 audit(1753325587.755:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13211 comm="syz.0.1752" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f0418e9a9 code=0x0 [ 847.979632][ T9] usb 5-1: device descriptor read/8, error -71 [ 848.017359][T13207] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 848.100762][ T30] audit: type=1800 audit(1753325588.635:958): pid=13217 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1753" name="bus" dev="overlay" ino=1929 res=0 errno=0 [ 848.280064][ T9] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 848.769185][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 849.182325][ T9] usb 5-1: device descriptor read/8, error -71 [ 849.309492][ T9] usb usb5-port1: unable to enumerate USB device [ 849.380553][T13231] block device autoloading is deprecated and will be removed. [ 849.809163][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 849.882165][T13222] md2: using deprecated bitmap file support [ 849.896606][T13222] md2: error: failed to get bitmap file [ 849.906305][T13233] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1758'. [ 850.061875][T13240] overlayfs: failed to resolve './file1': -2 [ 850.503845][T13238] netlink: 'syz.4.1757': attribute type 4 has an invalid length. [ 850.596862][T13238] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 850.602093][T13245] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1763'. [ 850.849195][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 851.007108][T13249] trusted_key: encrypted_key: insufficient parameters specified [ 851.034965][T13249] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1762'. [ 851.629245][T10030] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 851.739215][ T5940] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 851.859187][T10030] usb 6-1: Using ep0 maxpacket: 8 [ 851.868893][T10030] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 851.888288][T10030] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 851.889185][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 851.901688][T10030] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 851.948491][ T5940] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 851.988697][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.067818][ T5940] usb 5-1: config 0 descriptor?? [ 852.269451][ T5939] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 852.304648][T10030] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 852.315975][T10030] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 852.326123][T10030] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 852.339176][T10030] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 852.348244][T10030] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.369273][ T9] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 852.431780][ T5939] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 852.443173][ T5939] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 852.453327][ T5939] usb 1-1: config 0 interface 0 has no altsetting 0 [ 852.460063][ T5939] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 852.469232][ T5939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.479347][ T5939] usb 1-1: config 0 descriptor?? [ 852.529478][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 852.537860][ T9] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 852.547040][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.555105][ T9] usb 3-1: Product: syz [ 852.559386][ T9] usb 3-1: Manufacturer: syz [ 852.564004][ T9] usb 3-1: SerialNumber: syz [ 852.573505][ T9] usb 3-1: config 0 descriptor?? [ 852.579225][T10030] usb 6-1: GET_CAPABILITIES returned 0 [ 852.586056][ T9] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 852.594665][T10030] usbtmc 6-1:16.0: can't read capabilities [ 852.798797][ T5940] pegasus 5-1:0.0: probe with driver pegasus failed with error -71 [ 852.831294][ T30] audit: type=1800 audit(1753325593.345:959): pid=13265 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1769" name="bus" dev="overlay" ino=1987 res=0 errno=0 [ 852.929173][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 853.584805][ T5940] usb 5-1: USB disconnect, device number 59 [ 853.748173][ T5939] usbhid 1-1:0.0: can't add hid device: -71 [ 853.758065][ T5939] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 853.807678][ T5939] usb 1-1: USB disconnect, device number 68 [ 853.894735][ T9] usb 3-1: Quatech SSU-100 USB to Serial Driver converter now attached to ttyUSB0 [ 853.969160][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 854.240147][ T9] usb 6-1: USB disconnect, device number 37 [ 854.289782][T10030] usb 3-1: USB disconnect, device number 52 [ 854.300660][T10030] ssu100 ttyUSB0: Quatech SSU-100 USB to Serial Driver converter now disconnected from ttyUSB0 [ 854.336356][T10030] ssu100 3-1:0.0: device disconnected [ 854.388819][T13277] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1772'. [ 854.497034][ T30] audit: type=1400 audit(1753325595.025:960): avc: denied { map } for pid=13284 comm="syz.0.1776" path="/dev/bus/usb/008/001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 854.749628][T13293] snd_dummy snd_dummy.0: control 0:0:0:syz0:524289 is already present [ 855.019177][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 855.440117][T13294] xt_l2tp: wrong L2TP version: 0 [ 855.617911][T13300] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 855.632174][T13298] netlink: 'syz.2.1778': attribute type 4 has an invalid length. [ 855.650986][T13298] netlink: 'syz.2.1778': attribute type 4 has an invalid length. [ 855.702962][T13305] FAULT_INJECTION: forcing a failure. [ 855.702962][T13305] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 856.049152][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 856.516820][ T30] audit: type=1800 audit(1753325596.885:961): pid=13313 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.1781" name="bus" dev="overlay" ino=1071 res=0 errno=0 [ 856.744959][T13305] CPU: 0 UID: 0 PID: 13305 Comm: syz.0.1782 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 856.744986][T13305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 856.744995][T13305] Call Trace: [ 856.745001][T13305] [ 856.745007][T13305] dump_stack_lvl+0x16c/0x1f0 [ 856.745033][T13305] should_fail_ex+0x512/0x640 [ 856.745060][T13305] _copy_from_user+0x2e/0xd0 [ 856.745076][T13305] sg_write+0x2cc/0xe10 [ 856.745098][T13305] ? __pfx_sg_write+0x10/0x10 [ 856.745116][T13305] ? __pfx__kstrtoull+0x10/0x10 [ 856.745158][T13305] ? bpf_lsm_file_permission+0x9/0x10 [ 856.745175][T13305] ? security_file_permission+0x71/0x210 [ 856.745191][T13305] ? rw_verify_area+0xcf/0x680 [ 856.745212][T13305] ? __pfx_sg_write+0x10/0x10 [ 856.745229][T13305] vfs_writev+0x5df/0xde0 [ 856.745254][T13305] ? __pfx_vfs_writev+0x10/0x10 [ 856.745289][T13305] ? __fget_files+0x20e/0x3c0 [ 856.745301][T13305] ? __fget_files+0x190/0x3c0 [ 856.745318][T13305] ? do_writev+0x132/0x340 [ 856.745336][T13305] do_writev+0x132/0x340 [ 856.745355][T13305] ? __pfx_do_writev+0x10/0x10 [ 856.745382][T13305] do_syscall_64+0xcd/0x4c0 [ 856.745398][T13305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.745414][T13305] RIP: 0033:0x7f0f0418e9a9 [ 856.745426][T13305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 856.745441][T13305] RSP: 002b:00007f0f04f5a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 856.745458][T13305] RAX: ffffffffffffffda RBX: 00007f0f043b5fa0 RCX: 00007f0f0418e9a9 [ 856.745468][T13305] RDX: 0000000000000002 RSI: 0000200000000400 RDI: 0000000000000003 [ 856.745478][T13305] RBP: 00007f0f04f5a090 R08: 0000000000000000 R09: 0000000000000000 [ 856.745486][T13305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 856.745495][T13305] R13: 0000000000000000 R14: 00007f0f043b5fa0 R15: 00007fffe892a4b8 [ 856.745515][T13305] [ 856.942327][ C0] vkms_vblank_simulate: vblank timer overrun [ 856.961759][T13306] afs: Unknown parameter 'dynÊUò<©è"Ñ‚MTÕ<Ò¶ÛqNKëTG' [ 857.089186][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 857.218612][T13323] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1783'. [ 857.334920][T13333] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 857.354775][T13333] binder: Unknown parameter '00' [ 857.449285][ T5939] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 857.579190][T10030] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 857.636018][T13339] snd_dummy snd_dummy.0: control 0:0:0:syz0:524289 is already present [ 857.767372][ T5939] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 857.795114][ T5939] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 857.811539][ T5939] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 857.832727][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.893563][ T5939] usb 5-1: config 0 descriptor?? [ 857.963680][ T5939] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 857.972160][ T5939] dvb-usb: bulk message failed: -22 (3/0) [ 857.980831][ T5939] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 857.992575][ T5939] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 858.000509][ T5939] usb 5-1: media controller created [ 858.006569][ T5939] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 858.018689][ T5939] dvb-usb: bulk message failed: -22 (6/0) [ 858.030409][ T5939] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 858.038943][ T5939] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input41 [ 858.053722][ T5939] dvb-usb: schedule remote query interval to 150 msecs. [ 858.060824][ T5939] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 858.100323][T10030] usb 2-1: Using ep0 maxpacket: 16 [ 858.107337][T10030] usb 2-1: config 8 has an invalid interface number: 39 but max is 0 [ 858.115987][T10030] usb 2-1: config 8 has no interface number 0 [ 858.122860][T10030] usb 2-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 858.134831][T10030] usb 2-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 858.139166][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 858.144991][T10030] usb 2-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 858.170965][T10030] usb 2-1: config 8 interface 39 has no altsetting 0 [ 858.179955][T10030] usb 2-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 858.189192][T10030] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.197367][T10030] usb 2-1: Product: syz [ 858.201875][T10030] usb 2-1: Manufacturer: syz [ 858.206618][T10030] usb 2-1: SerialNumber: syz [ 858.219469][ T5939] dvb-usb: bulk message failed: -22 (1/0) [ 858.229747][ T5939] dvb-usb: error while querying for an remote control event. [ 858.723095][ T5939] dvb-usb: bulk message failed: -22 (1/0) [ 858.738742][ T5939] dvb-usb: error while querying for an remote control event. [ 858.812364][T13348] snd_dummy snd_dummy.0: control 0:0:0:syz0:524289 is already present [ 859.169164][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 859.713512][ T5939] dvb-usb: bulk message failed: -22 (1/0) [ 860.159674][ T5939] dvb-usb: error while querying for an remote control event. [ 860.175690][ T30] audit: type=1800 audit(1753325599.945:962): pid=13351 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.1794" name="bus" dev="overlay" ino=1100 res=0 errno=0 [ 860.209155][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 860.321418][ T5939] dvb-usb: bulk message failed: -22 (1/0) [ 860.327241][ T5939] dvb-usb: error while querying for an remote control event. [ 860.335599][ T5884] usb 5-1: USB disconnect, device number 60 [ 860.363462][T10030] ipheth 2-1:8.39: ipheth_get_macaddr: usb_control_msg: -71 [ 860.388038][T10030] ipheth 2-1:8.39: probe with driver ipheth failed with error -71 [ 860.403053][T10030] usb 2-1: USB disconnect, device number 56 [ 860.485165][T13358] batman_adv: batadv0: Adding interface: gretap2 [ 860.494950][ T5884] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 860.525570][T13358] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 860.571827][T13358] batman_adv: batadv0: Interface activated: gretap2 [ 860.634897][T13370] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1801'. [ 860.644094][T13370] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1801'. [ 860.656309][T13370] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1801'. [ 860.665378][T13368] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1800'. [ 860.819757][ T5939] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 860.941763][T13378] nvme_fabrics: unknown parameter or missing value '(' in ctrl creation request [ 861.009168][ T5939] usb 6-1: Using ep0 maxpacket: 16 [ 861.023802][ T5939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 861.160258][ T5939] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 861.160786][ T5939] usb 6-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 861.160946][ T5939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.249236][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 861.292914][ T5939] usb 6-1: config 0 descriptor?? [ 861.718270][T13384] xt_l2tp: wrong L2TP version: 0 [ 861.947918][ T5939] nintendo 0003:057E:2019.0025: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.5-1/input0 [ 862.010975][ T5939] nintendo 0003:057E:2019.0025: Failed to get joycon info; ret=-38 [ 862.011104][ T5939] nintendo 0003:057E:2019.0025: Failed to retrieve controller info; ret=-38 [ 862.011226][ T5939] nintendo 0003:057E:2019.0025: Failed to initialize controller; ret=-38 [ 862.037480][ T5939] nintendo 0003:057E:2019.0025: probe - fail = -38 [ 862.046609][ T5939] nintendo 0003:057E:2019.0025: probe with driver nintendo failed with error -38 [ 862.272018][ T5939] usb 6-1: USB disconnect, device number 38 [ 862.290237][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 862.328810][ T30] audit: type=1800 audit(1753325602.855:963): pid=13393 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1806" name="bus" dev="overlay" ino=2176 res=0 errno=0 [ 863.136018][T13390] fido_id[13390]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 863.339166][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 863.587681][T13403] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 863.642847][ T30] audit: type=1400 audit(1753325604.175:964): avc: denied { execute } for pid=13404 comm="syz.2.1811" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=33723 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 863.651171][T13402] tipc: Started in network mode [ 863.651200][T13402] tipc: Node identity 080211000001, cluster identity 4711 [ 863.651321][T13402] tipc: Enabled bearer , priority 0 [ 863.657397][ T5152] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 863.659738][T13402] mac80211_hwsim hwsim15 syzkaller0: entered promiscuous mode [ 863.660412][T13402] mac80211_hwsim hwsim15 syzkaller0: entered allmulticast mode [ 863.823918][ T30] audit: type=1400 audit(1753325604.365:965): avc: denied { write } for pid=13404 comm="syz.2.1811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 864.159970][T13408] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 864.223367][T13417] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1813'. [ 864.369154][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 864.556805][T13410] syz.2.1811: attempt to access beyond end of device [ 864.556805][T13410] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 864.771165][ T5884] tipc: Node number set to 134418688 [ 865.181832][ T30] audit: type=1400 audit(1753325605.715:966): avc: denied { getopt } for pid=13427 comm="syz.1.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 865.187513][T13431] snd_dummy snd_dummy.0: control 0:0:0:syz0:524289 is already present [ 865.395379][T13439] xt_l2tp: wrong L2TP version: 0 [ 865.409170][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 865.997214][T13456] xt_l2tp: wrong L2TP version: 0 [ 866.049323][T13429] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 866.322232][T13458] xt_l2tp: wrong L2TP version: 0 [ 866.449146][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 866.815359][T13461] netlink: 'syz.1.1825': attribute type 8 has an invalid length. [ 866.967166][ T30] audit: type=1400 audit(1753325607.495:967): avc: denied { create } for pid=13466 comm="syz.2.1827" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 867.109392][ T5884] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 867.119443][ T5939] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 867.244846][ T30] audit: type=1400 audit(1753325607.635:968): avc: denied { link } for pid=13466 comm="syz.2.1827" name="file1" dev="tmpfs" ino=2004 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 867.305244][ T30] audit: type=1400 audit(1753325607.675:969): avc: denied { setattr } for pid=13466 comm="syz.2.1827" name="#65" dev="tmpfs" ino=2005 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 867.499162][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 868.086594][ T30] audit: type=1400 audit(1753325607.675:970): avc: denied { rename } for pid=13466 comm="syz.2.1827" name="#65" dev="tmpfs" ino=2005 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 868.113618][ T5939] usb 2-1: unable to get BOS descriptor or descriptor too short [ 868.122339][ T5939] usb 2-1: not running at top speed; connect to a high speed hub [ 868.134075][ T5939] usb 2-1: config 0 has no interfaces? [ 868.142773][ T5939] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=3e.5b [ 868.154926][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.218998][ T5939] usb 2-1: Product: syz [ 868.219182][ T5884] usb 5-1: Using ep0 maxpacket: 16 [ 868.234140][T13476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1829'. [ 868.264293][T13476] smc: removing ib device syz0 [ 868.529156][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 868.796691][T13476] ------------[ cut here ]------------ [ 868.802212][T13476] WARNING: CPU: 1 PID: 13476 at drivers/infiniband/sw/rxe/rxe_pool.c:116 rxe_pool_cleanup+0x41/0x60 [ 868.813013][T13476] Modules linked in: [ 868.817122][T13476] CPU: 1 UID: 0 PID: 13476 Comm: syz.0.1829 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 868.829268][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 868.839365][T13476] RIP: 0010:rxe_pool_cleanup+0x41/0x60 [ 868.844819][T13476] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1f 48 83 bb 80 00 00 00 00 75 06 5b e9 b5 a6 0b f9 e8 b0 a6 0b f9 90 <0f> 0b 90 5b e9 a6 a6 0b f9 e8 81 fa 70 f9 eb da 66 66 2e 0f 1f 84 [ 868.864489][T13476] RSP: 0018:ffffc900033271e8 EFLAGS: 00010246 [ 868.870586][T13476] RAX: 0000000000080000 RBX: ffff888033e59320 RCX: ffffc9000d5ab000 [ 868.878545][T13476] RDX: 0000000000080000 RSI: ffffffff88b041c0 RDI: ffff888033e593a0 [ 868.886544][T13476] RBP: ffffffff88aea670 R08: 0000000000000005 R09: 0000000000000001 [ 868.894556][T13476] R10: 0000000000000002 R11: 0000000000000001 R12: ffff888033e58668 [ 868.902545][T13476] R13: ffff888033e57fe0 R14: ffff888033e57fe0 R15: ffff888033e59080 [ 868.910534][T13476] FS: 00007f0f04f396c0(0000) GS:ffff888124820000(0000) knlGS:0000000000000000 [ 868.919498][T13476] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 868.926080][T13476] CR2: 000020000001b000 CR3: 0000000036496000 CR4: 00000000003526f0 [ 868.934234][T13476] Call Trace: [ 868.937537][T13476] [ 868.940496][T13476] rxe_dealloc+0x25/0xc0 [ 868.944770][T13476] ib_dealloc_device+0x49/0x230 [ 868.949648][T13476] __ib_unregister_device+0x396/0x480 [ 868.955010][T13476] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 868.960940][T13476] ib_unregister_device_and_put+0x5a/0x80 [ 868.966649][T13476] nldev_dellink+0x21f/0x320 [ 868.971263][T13476] ? __pfx_nldev_dellink+0x10/0x10 [ 868.976430][T13476] ? cap_capable+0xb3/0x250 [ 868.980982][T13476] ? bpf_lsm_capable+0x9/0x10 [ 868.985658][T13476] ? security_capable+0x7e/0x260 [ 868.990645][T13476] ? ns_capable+0xd7/0x110 [ 868.995081][T13476] ? __pfx_nldev_dellink+0x10/0x10 [ 869.000269][T13476] rdma_nl_rcv_msg+0x387/0x6e0 [ 869.005061][T13476] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 869.010416][T13476] ? __lock_acquire+0x622/0x1c90 [ 869.015388][T13476] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 869.021952][T13476] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 869.028928][T13476] ? netlink_deliver_tap+0x1ae/0xd30 [ 869.034226][T13476] ? is_vmalloc_addr+0x86/0xa0 [ 869.038994][T13476] netlink_unicast+0x58a/0x850 [ 869.043776][T13476] ? __pfx_netlink_unicast+0x10/0x10 [ 869.049109][T13476] netlink_sendmsg+0x8d1/0xdd0 [ 869.053879][T13476] ? __pfx_netlink_sendmsg+0x10/0x10 [ 869.059180][T13476] ____sys_sendmsg+0xa95/0xc70 [ 869.063944][T13476] ? copy_msghdr_from_user+0x10a/0x160 [ 869.069414][T13476] ? __pfx_____sys_sendmsg+0x10/0x10 [ 869.074693][T13476] ? __pfx_futex_wake_mark+0x10/0x10 [ 869.079994][T13476] ___sys_sendmsg+0x134/0x1d0 [ 869.084671][T13476] ? __pfx____sys_sendmsg+0x10/0x10 [ 869.089897][T13476] ? __lock_acquire+0x622/0x1c90 [ 869.094840][T13476] __sys_sendmsg+0x16d/0x220 [ 869.099538][T13476] ? __pfx___sys_sendmsg+0x10/0x10 [ 869.104664][T13476] ? __x64_sys_futex+0x1e0/0x4c0 [ 869.109676][T13476] ? fput+0x70/0xf0 [ 869.113477][T13476] do_syscall_64+0xcd/0x4c0 [ 869.117973][T13476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.123889][T13476] RIP: 0033:0x7f0f0418e9a9 [ 869.128299][T13476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 869.147941][T13476] RSP: 002b:00007f0f04f39038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 869.156362][T13476] RAX: ffffffffffffffda RBX: 00007f0f043b6080 RCX: 00007f0f0418e9a9 [ 869.164364][T13476] RDX: 0000000000008044 RSI: 0000200000000200 RDI: 0000000000000008 [ 869.172394][T13476] RBP: 00007f0f04210d69 R08: 0000000000000000 R09: 0000000000000000 [ 869.180443][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 869.188428][T13476] R13: 0000000000000000 R14: 00007f0f043b6080 R15: 00007fffe892a4b8 [ 869.196421][T13476] [ 869.199457][T13476] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 869.206722][T13476] CPU: 1 UID: 0 PID: 13476 Comm: syz.0.1829 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 869.218807][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 869.228855][T13476] Call Trace: [ 869.232124][T13476] [ 869.235052][T13476] dump_stack_lvl+0x3d/0x1f0 [ 869.239655][T13476] panic+0x71c/0x800 [ 869.243571][T13476] ? __pfx_panic+0x10/0x10 [ 869.248014][T13476] ? show_trace_log_lvl+0x29b/0x3e0 [ 869.253223][T13476] ? rxe_pool_cleanup+0x41/0x60 [ 869.258055][T13476] check_panic_on_warn+0xab/0xb0 [ 869.262998][T13476] __warn+0xf6/0x3c0 [ 869.266886][T13476] ? rxe_pool_cleanup+0x41/0x60 [ 869.271735][T13476] report_bug+0x3c3/0x580 [ 869.276071][T13476] ? rxe_pool_cleanup+0x41/0x60 [ 869.280908][T13476] handle_bug+0x184/0x210 [ 869.285264][T13476] exc_invalid_op+0x17/0x50 [ 869.289795][T13476] asm_exc_invalid_op+0x1a/0x20 [ 869.294640][T13476] RIP: 0010:rxe_pool_cleanup+0x41/0x60 [ 869.300087][T13476] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1f 48 83 bb 80 00 00 00 00 75 06 5b e9 b5 a6 0b f9 e8 b0 a6 0b f9 90 <0f> 0b 90 5b e9 a6 a6 0b f9 e8 81 fa 70 f9 eb da 66 66 2e 0f 1f 84 [ 869.319694][T13476] RSP: 0018:ffffc900033271e8 EFLAGS: 00010246 [ 869.325770][T13476] RAX: 0000000000080000 RBX: ffff888033e59320 RCX: ffffc9000d5ab000 [ 869.333783][T13476] RDX: 0000000000080000 RSI: ffffffff88b041c0 RDI: ffff888033e593a0 [ 869.341760][T13476] RBP: ffffffff88aea670 R08: 0000000000000005 R09: 0000000000000001 [ 869.349730][T13476] R10: 0000000000000002 R11: 0000000000000001 R12: ffff888033e58668 [ 869.357705][T13476] R13: ffff888033e57fe0 R14: ffff888033e57fe0 R15: ffff888033e59080 [ 869.365682][T13476] ? __pfx_rxe_dealloc+0x10/0x10 [ 869.370624][T13476] ? rxe_pool_cleanup+0x40/0x60 [ 869.375467][T13476] ? rxe_pool_cleanup+0x40/0x60 [ 869.380310][T13476] rxe_dealloc+0x25/0xc0 [ 869.384544][T13476] ib_dealloc_device+0x49/0x230 [ 869.389383][T13476] __ib_unregister_device+0x396/0x480 [ 869.394760][T13476] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 869.400651][T13476] ib_unregister_device_and_put+0x5a/0x80 [ 869.406363][T13476] nldev_dellink+0x21f/0x320 [ 869.410960][T13476] ? __pfx_nldev_dellink+0x10/0x10 [ 869.416107][T13476] ? cap_capable+0xb3/0x250 [ 869.420619][T13476] ? bpf_lsm_capable+0x9/0x10 [ 869.425289][T13476] ? security_capable+0x7e/0x260 [ 869.430249][T13476] ? ns_capable+0xd7/0x110 [ 869.434684][T13476] ? __pfx_nldev_dellink+0x10/0x10 [ 869.439809][T13476] rdma_nl_rcv_msg+0x387/0x6e0 [ 869.444577][T13476] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 869.449879][T13476] ? __lock_acquire+0x622/0x1c90 [ 869.454818][T13476] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 869.461238][T13476] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 869.468183][T13476] ? netlink_deliver_tap+0x1ae/0xd30 [ 869.473460][T13476] ? is_vmalloc_addr+0x86/0xa0 [ 869.478223][T13476] netlink_unicast+0x58a/0x850 [ 869.482976][T13476] ? __pfx_netlink_unicast+0x10/0x10 [ 869.488258][T13476] netlink_sendmsg+0x8d1/0xdd0 [ 869.493019][T13476] ? __pfx_netlink_sendmsg+0x10/0x10 [ 869.498317][T13476] ____sys_sendmsg+0xa95/0xc70 [ 869.503072][T13476] ? copy_msghdr_from_user+0x10a/0x160 [ 869.508547][T13476] ? __pfx_____sys_sendmsg+0x10/0x10 [ 869.513826][T13476] ? __pfx_futex_wake_mark+0x10/0x10 [ 869.519107][T13476] ___sys_sendmsg+0x134/0x1d0 [ 869.523800][T13476] ? __pfx____sys_sendmsg+0x10/0x10 [ 869.528984][T13476] ? __lock_acquire+0x622/0x1c90 [ 869.533921][T13476] __sys_sendmsg+0x16d/0x220 [ 869.538495][T13476] ? __pfx___sys_sendmsg+0x10/0x10 [ 869.543616][T13476] ? __x64_sys_futex+0x1e0/0x4c0 [ 869.548561][T13476] ? fput+0x70/0xf0 [ 869.552370][T13476] do_syscall_64+0xcd/0x4c0 [ 869.556869][T13476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.562748][T13476] RIP: 0033:0x7f0f0418e9a9 [ 869.567159][T13476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 869.586781][T13476] RSP: 002b:00007f0f04f39038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 869.595189][T13476] RAX: ffffffffffffffda RBX: 00007f0f043b6080 RCX: 00007f0f0418e9a9 [ 869.603151][T13476] RDX: 0000000000008044 RSI: 0000200000000200 RDI: 0000000000000008 [ 869.611111][T13476] RBP: 00007f0f04210d69 R08: 0000000000000000 R09: 0000000000000000 [ 869.619073][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 869.627042][T13476] R13: 0000000000000000 R14: 00007f0f043b6080 R15: 00007fffe892a4b8 [ 869.635021][T13476] [ 869.638277][T13476] Kernel Offset: disabled [ 869.642587][T13476] Rebooting in 86400 seconds..