last executing test programs: 57.904335717s ago: executing program 0 (id=1132): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYBLOB='\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) close(r2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r3, &(0x7f0000000040)='./file1\x00', r3, &(0x7f0000000180)='./bus\x00', 0x0) link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x4020aeb2, &(0x7f0000000080)={0x0, 0x2000000, @ioapic={0x0, 0x1, 0x8000, 0x0, 0x0, [{0x6, 0x7, 0xa, '\x00', 0xab}, {0x2, 0x0, 0x4, '\x00', 0x5b}, {0x60, 0x4, 0x8, '\x00', 0xb}, {0x5, 0xe, 0x7, '\x00', 0xf1}, {0x1c, 0xc, 0xd, '\x00', 0x43}, {0x5, 0x6, 0xc5, '\x00', 0x9}, {0x94, 0x2, 0x9, '\x00', 0xbe}, {0xf, 0x0, 0x6, '\x00', 0xfd}, {0x1, 0x4, 0x48, '\x00', 0x33}, {0x85, 0xf, 0x57, '\x00', 0x9}, {0x5, 0x4, 0x80, '\x00', 0x6}, {0x81, 0x6, 0x6, '\x00', 0x48}, {0x3, 0x1, 0x8, '\x00', 0x8}, {0x6, 0x3, 0x2, '\x00', 0x2}, {0xa, 0x5, 0x4, '\x00', 0x50}, {0xf, 0x2, 0xd}, {0x8, 0x7d, 0xc1, '\x00', 0x7f}, {0x3, 0x89, 0x1, '\x00', 0xf}, {0x78, 0x7, 0x2, '\x00', 0x5}, {0x3, 0x7, 0xc1, '\x00', 0x7}, {0x5, 0x26, 0x5, '\x00', 0x9}, {0x7, 0x9, 0xe4, '\x00', 0xe}, {0xc1, 0xd, 0x3, '\x00', 0x10}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) socket$inet6_mptcp(0xa, 0x1, 0x106) 55.684739267s ago: executing program 0 (id=1142): socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000800)=[{&(0x7f0000000700)="ebfa0e81ceb3dc4c43c215dc4dade38ff8c84ace9d15af003afa41ae5fbebe5b175c12cf29c48c2d4b61ce76443645c1dc73113beeb9b5a73cd0415b0437839aa6c68111a4582c3a6a3bb8f9e0c37b9b3f386c", 0x53}], 0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000380)={@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @private=0xa010101}, 0x2, 0x2, 0x0, 0x3}}, {&(0x7f0000000900)=""/4096, 0x1000}, &(0x7f0000000040), 0x22}, 0xa0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="850000006c0080006a0a00ff000000000c00000000000008950900000000000000106aba95e2aab1490bc14021a976c4630000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480312d4e", @ANYBLOB='\v'], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0x4000080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@delchain={0x24, 0x65, 0xe0a, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffe0}, {0xc, 0xa}, {0x8, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x8040) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 55.118715306s ago: executing program 0 (id=1145): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x88002) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005410080060ec970001"], 0xfdef) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/sctp\x00') open_tree(r3, &(0x7f0000000640)='\x00', 0x89901) read$alg(r3, &(0x7f0000000600)=""/4096, 0x1000) accept4$ax25(r3, &(0x7f00000000c0)={{0x3, @rose}, [@null, @default, @remote, @rose, @null, @netrom, @netrom, @null]}, &(0x7f0000000180)=0x48, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x6, 0x7, 0x0, 0x2, "7f0e279d2e5cf55a61e2c40d6e76943e0347c74d3000002a0fc535970be7f3f3"}) 54.211431448s ago: executing program 0 (id=1147): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101240, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e42000c371303ed6a33f2ff8689b3f60e"]) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) timer_create(0x1, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x236bd4336e4642df, &(0x7f0000000300)={{}, {0x0, 0xe4c}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000600)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000000680)={{0x0, 0x0}}) mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x158) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2145c99, 0x0) capset(&(0x7f0000000440)={0x20080522}, &(0x7f0000000580)={0x95, 0x23e, 0xa, 0x6, 0x1, 0x9}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0xfffffffffffffffb, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="fc000000000000000000000000000000ac1414aa000000000005000000000a002000"/48, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000008000000000000000000000000000000ffffffffffffffff000000000000000000100000000000000000000000000000000a0000000000000000000000804000000000000000000800000000000000000200000000000000f7fc080000000800000700002a498f0a32f029c412543e8f0ecc794a000018000600000000000900060000000000000003000000000000000000000000000080fbffffffffffffff"], 0xfc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b80)=ANY=[@ANYBLOB="ec0000002100010000000000fefffffffc020000000000000000000000000000fc020000000000000000000000000001fffc0000000000000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000009c001100ac1414aa000000000000000000000000fc00000000000000000000000000000000000000000000000000fe8000000000000000000000000000aa33030000020000000200020000000000000000000000ffff7f00000100000000000000000000ffff0a0101026401010200000000000000cc2a4fbd8ff00ddb5a3eba7d6980fdab0000000000fc0200"/158], 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x42000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181242, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x401c2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x4000000000000b9, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) futex(&(0x7f0000000040)=0x2, 0x80, 0x5, &(0x7f0000000080)={r11, r12+10000000}, &(0x7f00000000c0)=0x5, 0x1) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000840)=ANY=[@ANYRES64=r10, @ANYBLOB="af4827af3e97d243db532a9a66da6e8fc70abf375f2be95810e8f51f162ee9f49a55fd95aba39627e0b82b46d6aaf0f2a3472e517fb3a35293c1875b990a0f362f725a992c79a5fa466ebf80d8c5808f6d8614f41a73b7877ffcacedb8d9f3bdaff724afafaeb0a6bd5669f97b6531eb0706f8a5f4a813016c8fbdf1f2c74d0ec660ca45dafc5accb5385f402f8d7b2d7d140ed067f6db67c02d0dac9e25323c9041e17b08", @ANYRESOCT=r4, @ANYRESDEC=r7, @ANYRESOCT, @ANYBLOB="af15ba28ff6420cc601738822aa09746aa72e8c8417a50c69991a0c7074701285f856b5af6f4e808b496aadbf859a21badf4a9696f545cdf278adfe8de5efc14eb3fd4cb1342b3c818ba83f24d45fa7d89720dfa7d19366e48ce5a9e9e9b174d57edd16376fe002d7663d8d78e40d2c2369b3f97abcc1b6fd2b5c1f016b5ce350de19a8aca30721497754cd76c011c8a9a525c7d3346b2", @ANYRES8=r2, @ANYRESDEC=r3]) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) 53.936738924s ago: executing program 0 (id=1150): r0 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@delchain={0x24, 0x65, 0xe0a, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffe0}, {0xc, 0xa}, {0x8, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000003580)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xe}, 0x0, 0x0, 0x6e, 0x8, 0xfffffffffffffffc, 0x1, 0x9, 0x0, 0x2, 0x2}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000740)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a000f000000028000820d062d", 0x2f}], 0x1}, 0x0) 53.730344078s ago: executing program 0 (id=1152): setrlimit(0xb, &(0x7f0000000080)={0xe, 0x45}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x22, 0x2, 0x5) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000440)={r4, @in={{0x2, 0x4e23, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffe, 0x5}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911", 0x11, 0x0, 0x0, 0x0) bind$can_j1939(r6, &(0x7f0000000000)={0x1d, r5, 0x0, {0x0, 0xf0}, 0xfe}, 0x18) sendmsg$can_j1939(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r5, 0x0, {}, 0x2}, 0x18, &(0x7f0000000180)={&(0x7f00000003c0)="08030005c7373d5b04", 0x9}}, 0xee) close(r6) mknod(0x0, 0x1ffa, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r5, {0x6, 0x8}, {0x5, 0xffff}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 53.607332202s ago: executing program 32 (id=1152): setrlimit(0xb, &(0x7f0000000080)={0xe, 0x45}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x22, 0x2, 0x5) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000440)={r4, @in={{0x2, 0x4e23, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffe, 0x5}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911", 0x11, 0x0, 0x0, 0x0) bind$can_j1939(r6, &(0x7f0000000000)={0x1d, r5, 0x0, {0x0, 0xf0}, 0xfe}, 0x18) sendmsg$can_j1939(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r5, 0x0, {}, 0x2}, 0x18, &(0x7f0000000180)={&(0x7f00000003c0)="08030005c7373d5b04", 0x9}}, 0xee) close(r6) mknod(0x0, 0x1ffa, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r5, {0x6, 0x8}, {0x5, 0xffff}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 50.754484827s ago: executing program 4 (id=1169): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000005ec0)=ANY=[@ANYBLOB="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"/6832], 0x1ab0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) 50.309151267s ago: executing program 4 (id=1170): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="f57481000000003eb62c7318"], &(0x7f0000000100)='GPL\x00'}, 0x90) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002b40), 0x82, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 50.110016312s ago: executing program 4 (id=1171): mount$binderfs(0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=0000000000000000000']) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0x44}], 0x1, 0x0, 0x0, 0x10004800}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000e5fff2000040"]) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 49.704790003s ago: executing program 4 (id=1172): r0 = socket(0x28, 0x5, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000002600), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x3c, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d6}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000003880)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000280)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r3, 0xde34) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x13, r3, 0x0) mount$9p_tcp(0x0, 0x0, 0x0, 0x2000000, &(0x7f0000000400)={'trans=tcp,', {'port', 0x3d, 0x4e22}}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wg2\x00'}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) tee(r6, r5, 0xff, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGSKNS(r5, 0x894c, &(0x7f0000000040)=0x9b) 49.350411726s ago: executing program 4 (id=1174): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_getevents(0x0, 0x100000001, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045520, &(0x7f00000003c0)=0xffff7fff) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r1, 0x400, 0x3) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file0\x00'}) 49.07290919s ago: executing program 4 (id=1176): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80000) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x0, [[0x7, 0x2, 0x0, 0x0, 0x10000], [0x4, 0x1, 0x1, 0x0, 0x0, 0x4, 0xe58, 0x8004], [0x0, 0xfffffffd, 0xfffffffe, 0x37, 0x0, 0x0, 0xffffffff, 0xffffdffd]], '\x00', [{0xfffffffc, 0xf8}, {0x102, 0x1}, {0xffffffff}, {0x10000000, 0x10000000, 0x0, 0x1}, {0x3, 0xffffffff}, {0x1, 0x100000}, {0x1, 0x5}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, {0x1}, {0x2, 0x8b}, {}, {0xfdfffff6}], '\x00', 0x8, 0x0, 0x0, 0xf8}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) ppoll(&(0x7f0000000240)=[{r1}], 0xd8, &(0x7f0000000080)={0x0, 0x989680}, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000040), &(0x7f00000000c0)=r1}, 0x20) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_trace_dev_match', 0xa0602, 0x12) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) ioctl$PPPIOCGIDLE32(r1, 0x8008743f, &(0x7f00000002c0)) sendmsg$kcm(r2, &(0x7f0000000380)={&(0x7f0000000cc0)=@phonet={0x23, 0x0, 0x0, 0x37}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000740)="27050200000000000600002fb96d02000000000000008100", 0x18}], 0x1}, 0x20000000) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000300)) 48.925942434s ago: executing program 33 (id=1176): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80000) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x0, [[0x7, 0x2, 0x0, 0x0, 0x10000], [0x4, 0x1, 0x1, 0x0, 0x0, 0x4, 0xe58, 0x8004], [0x0, 0xfffffffd, 0xfffffffe, 0x37, 0x0, 0x0, 0xffffffff, 0xffffdffd]], '\x00', [{0xfffffffc, 0xf8}, {0x102, 0x1}, {0xffffffff}, {0x10000000, 0x10000000, 0x0, 0x1}, {0x3, 0xffffffff}, {0x1, 0x100000}, {0x1, 0x5}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, {0x1}, {0x2, 0x8b}, {}, {0xfdfffff6}], '\x00', 0x8, 0x0, 0x0, 0xf8}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) ppoll(&(0x7f0000000240)=[{r1}], 0xd8, &(0x7f0000000080)={0x0, 0x989680}, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000040), &(0x7f00000000c0)=r1}, 0x20) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_trace_dev_match', 0xa0602, 0x12) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) ioctl$PPPIOCGIDLE32(r1, 0x8008743f, &(0x7f00000002c0)) sendmsg$kcm(r2, &(0x7f0000000380)={&(0x7f0000000cc0)=@phonet={0x23, 0x0, 0x0, 0x37}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000740)="27050200000000000600002fb96d02000000000000008100", 0x18}], 0x1}, 0x20000000) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000300)) 8.222284929s ago: executing program 6 (id=1388): ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x8, 0x42, 0x40, 0xc0, 0x1}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, r0}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40090) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1a000}}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r6 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000280)) shutdown(r6, 0x1) close_range(r5, 0xffffffffffffffff, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000300)=0xe) stat(0x0, 0x0) 7.337310471s ago: executing program 6 (id=1396): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r2, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r3, &(0x7f00000000c0)=""/57, 0x39, 0x60, 0x0, 0x0) (fail_nth: 1) 6.544896732s ago: executing program 6 (id=1399): r0 = inotify_init1(0x0) inotify_add_watch(r0, 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x4000000805, 0x0) listen(r1, 0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x9, 0x2) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, &(0x7f0000000240)={0x0, @src_change}) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x4, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r3, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) 5.730668563s ago: executing program 6 (id=1404): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2539000020000365f507f62aa6172f7881"], 0x33fe0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000180), 0x0, 0x10101, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x13, &(0x7f0000000e40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x75, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) bind$can_raw(r5, &(0x7f0000000000)={0x1d, r6}, 0x10) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f00000000c0), 0xf00) close_range(r4, 0xffffffffffffffff, 0x0) 4.556721449s ago: executing program 6 (id=1412): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = mq_open(0x0, 0x80, 0x1f0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x4, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x4, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x3, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x800) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r5, 0x80dc5521, &(0x7f00000001c0)=""/4096) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000040)={0x8098f908, 0x0, "60055808889f90ac0600000500fdfd9ab67e1db9c9a431078d40f722e600"}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r6 = openat$comedi(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x100000) 4.098720895s ago: executing program 5 (id=1416): ustat(0xfffffffeffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x3c, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008}, 0x20000000) 3.910596064s ago: executing program 5 (id=1420): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_connect(0x0, 0x62, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601030405050724040501"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="202617000000172329330dc778e7a4cadf8b92a100000000000000e9a4"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2, 0xfdfdffffffffffff, &(0x7f00000005c0)="c6c4"}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x1000000}}, &(0x7f0000000300)='syzkaller\x00'}, 0x94) r3 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x80000006}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000140)=ANY=[], 0x28}}], 0x1, 0x40000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$netlink(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000002000080080002"], 0x1c}], 0x1}, 0x0) 3.689919256s ago: executing program 3 (id=1421): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600010000000800090001000000050002"], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x40080c0) 3.689026281s ago: executing program 3 (id=1422): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fchmodat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x178) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007", @ANYBLOB, @ANYRES32=0x0], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=@newtaction={0xf0, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x0, 0x446, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, 0xfffffffd}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x401}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000) fchownat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a00)=@newqdisc={0x160, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x130, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x4ae, 0x4, 0x5, 0x16, 0xf, 0x4, 0x6}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xb, 0x6, 0x80, 0x17, 0x20, 0x0, 0x1}}]}}]}, 0x160}}, 0x44080) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2a, 0x25dfdbff, {0x60, 0x0, 0x0, r8, {0x0, 0xf}, {0xfff2, 0xa}, {0x7}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x8, 0x8, 0x400004, 0x0, 0x7}, 0xf0, 0x0, 0x5, 0x3, 0x88a, 0x0, 0x8e, 0x1f, 0x5, 0xff, {0x6696, 0x2, 0x800, 0x5, 0x0, 0x5}}}}]}, 0x78}}, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r10 = socket$key(0xf, 0x3, 0x2) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, 0x0) sendmsg$key(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000000000000000000080012000007a18208"], 0x50}}, 0x0) 3.4759797s ago: executing program 2 (id=1423): socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp(0x2, 0x2, 0x73) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x936, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 3.391848338s ago: executing program 2 (id=1425): openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b37, 0x0) fsopen(&(0x7f0000000300)='binfmt_misc\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020) syz_io_uring_submit(0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback=0x1c, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000080), &(0x7f00000000c0)=r2}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 2.487225332s ago: executing program 3 (id=1429): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_getevents(0x0, 0x100000001, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file0\x00'}) 2.238775054s ago: executing program 2 (id=1431): socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000800)=[{&(0x7f0000000700)="ebfa0e81ceb3dc4c43c215dc4dade38ff8c84ace9d15af003afa41ae5fbebe5b175c12cf29c48c2d4b61ce76443645c1dc73113beeb9b5a73cd0415b0437839aa6c68111a4582c3a6a3bb8f9e0c37b9b3f386c", 0x53}], 0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="850000006c0080006a0a00ff000000000c00000000000008950900000000000000106aba95e2aab1490bc14021a976c4", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480312d4e", @ANYBLOB='\v'], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0x4000080) 2.227026465s ago: executing program 3 (id=1432): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000880)=ANY=[], 0x200) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000013c0), 0x300, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, 0xffffffffffffffff) 1.810434931s ago: executing program 1 (id=1433): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3, 0x3, 0xfffffffe, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 1.713117236s ago: executing program 5 (id=1434): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) listen(r0, 0x3) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x2, {0x2, 0x0, 0x0, 0xa6, 0x4000, 0x0, {0x3, 0x0, 0x101, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x1, 0x3ff, 0x6000, 0x0, 0x0, 0xee01, 0x801}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000001240)={0x50, 0x0, r2, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x7, 0x1ff, 0x9, 0x0, 0x0, 0x10, 0x8}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) getpid() r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.588973498s ago: executing program 1 (id=1435): socket$kcm(0xa, 0x3, 0x87) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x48a82, 0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) fsmount(0xffffffffffffffff, 0x1, 0x8c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x20000000000001) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040)) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$netlink(0x10, 0x3, 0x14) r3 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002140100"], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001200)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, &(0x7f00000000c0), &(0x7f0000000180)=0x4) 1.588088633s ago: executing program 5 (id=1436): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, 0x0, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$EXT4_IOC_SETFSUUID(r1, 0x4008662c, &(0x7f0000000040)={0x0, 0x0, "8f61a583713a593383deeef9eb43bec9"}) prlimit64(0x0, 0xe, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = getpid() r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}, 0x0, 0x33}, @in6=@empty, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff1, 0x3}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x1a0b1}}, 0xf8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) sched_setscheduler(r3, 0x2, 0x0) sched_setaffinity(r3, 0x8, &(0x7f00000000c0)=0xfffffffffffffff7) r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(r6, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r6, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x802, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) 1.459306706s ago: executing program 6 (id=1437): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0), 0x0, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)=0x7) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0684113, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xfffffffffffffea8, &(0x7f00000000c0)=ANY=[]) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = epoll_create1(0x0) poll(&(0x7f0000000040)=[{r6, 0x3201}], 0x1, 0x10000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)={0x20000000}) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r7, 0x1, &(0x7f00000005c0)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x88000) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x8000) 1.360350866s ago: executing program 1 (id=1438): setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) (async) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r0, 0x29, 0x4b, 0x0, &(0x7f00000023c0)) (async) getsockopt$inet6_int(r0, 0x29, 0x4b, 0x0, &(0x7f00000023c0)) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000020c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56561, 0x4000, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0x1, 0xfff2}, {0x0, 0xc}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x0, 0xe, 0x0, 0x5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000810) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xa, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0xfc, 0x0, 0xff, 0xffffffff}}}}]}, 0x4c}}, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2}) ioctl$TUNATTACHFILTER(r10, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}) (async) ioctl$TUNATTACHFILTER(r10, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}) ioctl$TUNDETACHFILTER(r10, 0x401054d6, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@delchain={0x24, 0x65, 0xe0a, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xa}, {0x4, 0xa}, {0xd, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x8040) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x8040) socket$netlink(0x10, 0x3, 0x0) (async) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="329c3ff27409441b5e179ae29ae0acb4f44f0d065d4359a1baf76fa816433148c54f80a80c4028ca78d5a68285e8d96a25a4a3258882598c455a61fb3b6dc121ed5d9ea1b27a00dec202d2bbc3a1ac1b819616b6057f065a12ce9b80cab0228eabf8b7139685", 0x66}], 0x1}}, {{&(0x7f0000000380)=@pptp={0x18, 0x2, {0x1, @multicast2}}, 0x80, &(0x7f0000000400)=[{&(0x7f00000004c0)="e5881949eb7f2ecb52d6b13363b721665741437e35f261293e96b5ed45d3a803b24cefcecd23ef55d2c81df211b2b8e558cab7e4c7e69595b35deba90af91b9fa1d2aa6ff94aa1ac4e5d250fbe90a40b5f31375b58e59bda807ce375c2c091680b0de68b04547832943355e28464bf7643c5506af3580076082829b25022a2264f67cb32745bef29d970959dbc241fec3cdc0d68c2f4f2b7b6cdedd0edb351f9785770fae6f4d7e5f6b8d494b47b5f67522eaf62a113f2eabefddbb21a2070c3a1f0fb309e72abb9ecd4940e3725bb", 0xcf}, {&(0x7f0000000240)}], 0x2, &(0x7f00000005c0)=[{0x30, 0x114, 0x9, "73b9e759944c0729fe951b431235048d0d2ad5630487a9f21c73c538"}], 0x30}}, {{&(0x7f0000000980)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000880)="8a81cd2e36c7e6fcb7c484d98334a7f5c95a5fd75813f53cf4957632aa02735b5247a5c5c6410a528a5427eff36a1b34", 0x30}, {&(0x7f0000001880)="dcea979aaf62688db6b26a113334f2c10e2e57800d21f5aa4b73d21c8abcb858aa6f2e3c4a3029a10b4757c6cea91314e5e99131f42463bbdf52e7f5ff47c9dc83a32f1506cedbc1b77d97182d64035757629e1b251fc3e04358114480a2e0eca8c0597e96582fbfea703e2e0d65d122d611982afe28fe5810088857d06556c3772032ea3b26bc43bd1516dd0bba62abadd94914c665b44e69b98358b70eb19bd61b8bdebed2420deeaca320b1ceac3e32b33ab2cc3496751bfe082cd9f7513e58cfb0cb0d1f798f81ed134e4dc67a84922e70f5adb8eac88c00467b514da405c25469b056c6559e8079d4268076e7aa3dce4f7efbfaa738468d9fed47f470c5e5e06816820e14a66936b981c741f136967b2955ca3e8ff5509b2f731e74082d65fc91", 0x43}, {&(0x7f0000000a80)="48622c10dd9ac0f6b5c7bac71289c443ea251c1ca05a77774d82b7452cee8231538c3e9c00f5434ed2db88235de882545d2b68a16328a66463b7655e8c18d8f6f7b3f0acbb7dcb1b23325c388bf65fa6644e842a9e27787be5fcb66f06a563087d2e096c1f2d193dc6cdff5468f2eb032f786f0ddf6269f94f172917130603cff23e04dc973b6b138f1b1927bd006e137c4a7e77285f2ea3436827c283cf10fa4de07636f9a92467f72c61fb494b18eee1d193a56f3b5f0d1d8e752cf8de4945fe5d6c0a5281b6166c98f091dee7a8b6c0abe6586d6181dc4b35f256f4", 0xdd}, {&(0x7f0000000b80)="2e36d316eba8c30d42a1311495d2df6fb8abfb978db227c9e481d506d7eecf96d7ddbbbd15eac8ba0b6b889f24c51f60e2c7698623ab3640c165ea49720a41d8da70b366ff5a618332eee3cfa007445b1fa8d252b3c4b08c7cd8a5d482ec98e048070764860b50b03d97ec2366bc11dcfdf9d3fac8a6d3619e8eec0062f46109df0b2b1f11ac69ee4c9e2450790464bcf137aa9beff7bc2f757f368fd64547ee431d8b75101d76b9937b2ee600e124462a013d5d88c7", 0xb6}, {&(0x7f0000000c40)="5fe41b94acaeefaad6fbf39ea9ccd2e9b888d84da6568630254c28efce1dc3b7eaf341f462bc93833c96d59fa5e9863b040309830ee4b4b5ccbe82ba1813d115244e3479f5930b7253af64679deb02a9796cba3cf05ec63a07ba07bee0711d6c1af9", 0x62}, {&(0x7f0000000f40)="c775e6eb56fd0be8046f6fa94717112a7823bdc7d025d949bc80fee855203ad42787ed9979d39856e02901cf9441ca802c378326e385828a161adbdc5e120beb376dfd2bf02a19816dc3a061c236057711fb9b275aef5a85531a8cc13a1b2c109a5a3f2909b095889c89295955fe8a26384c2efc27cc7a8923b67003e4503efb36b84830d4aa9033458e0bfea394785899a519abbfef9eb682d970f8dabbffd8d81cfa1aadf9db54e246f3be986f11f452123d2f01991a1725b1cea0288e7db1aed3b53a916c55080ce390b73e5b33e066", 0xd1}], 0x6, &(0x7f0000001300), 0x410}}, {{&(0x7f0000000700)=@phonet={0x23, 0x3, 0x5, 0x1}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000780)="2d05c94b5f8faf5df4a9dcfce4a82708d93335be0830f90406011f0a1cea5596836bb9a429696aa939a7dd9ae60e4175d0b9289909febf59e9ba7b9183d78f1638b9698f82dd54023f", 0x49}, {&(0x7f0000000800)="033e134f9a", 0x5}], 0x2, &(0x7f0000000900)=[{0xffffffffffffff44, 0x84, 0x9, "e6554ecfc8016defad80975ab17427816da445741fb18b22867635d76bb1b9d5739e4ff2c6dff919707b945ac541f9"}, {0x18, 0x119, 0x8, "6a6fce6016af"}], 0x58}}, {{&(0x7f0000000cc0)=@ethernet={0x306, @random="00000200"}, 0x0, &(0x7f0000001100)=[{&(0x7f0000000d40)="17ee6e57abd38f2fda2bcb6edb7a27d41ad1d8d0fd6a57a2098f2012c79da68613e2fb06db1b5c269854b53e8eff6d5ab5fd969cbdfe8cc56fed4fdfa45eb49cf492986cdfb3901b5bbe1474df"}, {&(0x7f0000000240)="e3a49afcba2f689fe32d"}, {&(0x7f0000001040)="7559105ce7a4b2747240fb5e4c503730cace787ed3f0e2ca8fbe48fc7ca698cc0dd8278a2906ec8ebdb0ed85237faa6796fd6ad890d6aeacba246ec88d0a480de53845500bbf6e3dfd35a497a68f6f80b0ac33a36250cd210440eddca666ed79031295734450183c3e1d945f293c404dd2c6c8b2724c92083bacfca1e6d9bbbe226aac5acc"}], 0x0, &(0x7f0000001300)=[{0x0, 0x3a, 0x2, "aca9c959877fbe501bba8624bbaf887b5d8c09a367304c8516d97df0f2acb096e41c3acbc186f5aa1af2e6d976e9c0a6174a045fe47d8b713aac6424e1a1533955d3ee57c2a1030edb198069d6ed09"}, {0x0, 0x10a, 0x1000, "a144fea02f06026e390cd8"}, {0x0, 0x10c, 0x9, "96a3ba48298dbf196da833c1de6ab3d53f8dbc7e02545df93423be472dd7a7751509b6ccc9a29a7a726ffa100e2689c35493c2b6377ea27b13fec78bf74865b9366cbeb193c185af21a8a8c0a705f230613c04703144a1b3c8310550a24e5c2d1679d0e9aa0eedac6df523cf1965b6fc1a5e7ebcda5b78bb64382f86f1be3994f61fc57a71d1ce12f571d7c3edc5d1df4b44e347937bac6df4f9354ea457c0a81ac4c3c282a5236f25b5e61efb4ff3251ba62b8481a5856addea114d08f531b38a1a4eda8953665879ea99e5f623840982bf314bda8a830868e88b8f2adcd1cccba1d5b322ed63012e6271"}, {0x0, 0x104, 0x3, "b146091d2db32ee16710a247a9b03f5ba0350a8eefcadc362959d0af932ed0700851fb63c46e8adacc3ad89f8e30c203ccddbd2248343768b49c9feaea3cf6ee2b7c8e926f555828fb73ab0bbd12f1fa9d8d994c4415ee4d71069fe2ba545171196e03e3086a99a0e6f0240f"}]}}], 0x4, 0x0) 1.024392802s ago: executing program 1 (id=1439): mkdir(&(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$sysctl(0xffffffffffffffff, &(0x7f0000000080)='6\x00', 0x2) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'team0\x00', &(0x7f0000000180)=@ethtool_modinfo={0x42, 0x40, 0x8}}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) fsync(0xffffffffffffffff) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002640)=ANY=[@ANYBLOB="180000001214010100000000b30000000008004b001300004c32deb894b29ced06d51c6a828bfe07f145"], 0x18}}, 0x4000) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r6}, 0x18) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{}, [{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x20000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x80003}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff}], [{}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r7 = syz_open_dev$sndctrl(0x0, 0x8, 0x80100) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r7, 0xc4c85513, &(0x7f0000000380)={{0x4, 0x6, 0x800, 0x571, '\x00', 0x8}, 0x1, [0x10000, 0x3, 0x80000001, 0x7, 0x9, 0x10001, 0x2, 0xffffffffffffffff, 0x8, 0x3, 0x6, 0x3ff, 0x8, 0xffffffffffffffff, 0x33, 0x6, 0x0, 0x3, 0x6, 0x4, 0x8154, 0x4, 0x5, 0x10000, 0xa, 0x1ff, 0x8, 0xb5, 0x34, 0x6, 0x1, 0x8000, 0x7, 0x2, 0x8, 0x994, 0x3, 0x0, 0x6, 0x8000, 0x100000001, 0x2, 0x9, 0x1, 0x3, 0x101, 0x5, 0xfff, 0x1, 0x1, 0x6, 0x7, 0xf, 0x1, 0xd9, 0x4, 0x6d40, 0x4, 0x200, 0x4, 0x311, 0x2, 0x1, 0x9, 0x0, 0x401, 0x7e, 0x8, 0x8, 0x6, 0x2, 0x8, 0xfffffffffffffffa, 0x7fffffffffffffff, 0x5, 0x3, 0x9, 0x1, 0x6, 0x4, 0x800, 0x6, 0x80000000, 0x0, 0xcac, 0xb21b, 0x9, 0xfffffffffffff541, 0xf, 0x5, 0xffffffffffff0001, 0x8, 0x18a, 0x71291043, 0x5, 0x1, 0x80, 0xffffffffffffffff, 0x5f, 0x0, 0x5, 0x3, 0x5, 0x1, 0xd, 0x6, 0x5, 0x21, 0x3fff8000000000, 0x8c7, 0x1, 0xffffffffffffff57, 0x7, 0x3, 0xffffffffffff4177, 0x0, 0x4, 0x2400000000, 0x3, 0x9, 0x0, 0x4, 0x7ff, 0x290, 0xe, 0xaf6e, 0x7fff, 0x5]}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x0) getsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, &(0x7f00000008c0)) r9 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x200000, 0x100) setsockopt$WPAN_WANTLQI(r9, 0x0, 0x3, &(0x7f0000000040)=0x1, 0x4) ioctl$TCSETA(r9, 0x5406, &(0x7f0000000180)={0x5, 0x0, 0x0, 0x400, 0x7, "8b1a6222a1f8a258"}) mount$9p_unix(0x0, &(0x7f0000002040)='./file0/file3\x00', 0x0, 0x10440, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004380)="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", 0x2000, &(0x7f0000007580)={&(0x7f0000004200)={0x50, 0x0, 0x3, {0x7, 0x2b, 0x9, 0x40802140, 0xe, 0x6, 0x7, 0xffffffff, 0x0, 0x0, 0x80, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)={0xfffffee4, 0x0, 0x6, {0x3, 0x0, 0x820, 0xfffffffffffffff9, 0x400, 0xc, {0x0, 0xb, 0x7, 0x1, 0x1, 0x4, 0x8, 0x9, 0x4, 0xa000, 0x0, 0x0, 0x0, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) close(0x3) 913.488914ms ago: executing program 2 (id=1440): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r0, r1, 0x0, 0xc19) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x201}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a38000000180a010100000000000000000200000524000380080002400000000408000240000000070800014000000000080002409ebfaf19f831271e988000000000140000001100435c0f01000000ee4fab5a7e8dc27e3e8180e8ec8e51b07d64c6a49fee349d1877c2f41b34e0cca0c482c3e219fefa51ebde2e"], 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x0) 803.673273ms ago: executing program 3 (id=1441): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='highspeed\x00', 0xa) sendmmsg$inet(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000007c0)="353a35d6094e4e", 0x7}], 0x1}}], 0x1, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 760.620837ms ago: executing program 5 (id=1442): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000001140)=[@in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e21, @multicast1}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r2, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e21, @loopback}}, 0x0, 0x0, 0xb, 0x0, "f6a7346a1ca3caf66200f0e70b995efa20d5ddc09c0bc0c88e00bdea5e0e3ef03a96483bcaaa5ab222d1993083e8e3619fbbff30da0288a8b78a3f921c40fdc06a00"}, 0x1b) 722.4697ms ago: executing program 1 (id=1443): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1181}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7, 0x5}}]}]}]}, 0x50}}, 0x0) openat$snapshot(0xffffff9c, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@delqdisc={0x24, 0x25, 0x1}, 0x24}}, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002340)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000004000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$key(0xf, 0x3, 0x2) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0xfffffffffffffe56) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000000080)={[{@quota}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x37]}}]}) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r8, &(0x7f0000000300)={0x2020}, 0x2020) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000005c0)={r7, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88000) 722.096189ms ago: executing program 2 (id=1444): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x3, 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fstat(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r3) r4 = getgid() write$P9_RGETATTR(0xffffffffffffffff, &(0x7f00000001c0)={0xa0, 0x19, 0x2, {0x27b4, {0x0, 0x3, 0x7}, 0x1b6, r3, r4, 0x4, 0x0, 0x9, 0x8001, 0xd, 0x7fffffff, 0x1, 0xbe25, 0x100000000, 0x3, 0xb, 0x800, 0xfff, 0x8, 0x7}}, 0xa0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0xfffffffffffffd8f, &(0x7f00000000c0)=[{&(0x7f0000000100)="5c00000015006b05c84e21000af32c6e021875f802000000400001800000d34460bc04eab556a71525346182949a36c23d3b48dfd810000000003fce86b6345b05ca97fe4d5670a568fe43", 0x7c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 630.121298ms ago: executing program 3 (id=1445): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_connect(0x0, 0x62, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601030405050724040501"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="202617000000172329330dc778e7a4cadf8b92a100000000000000e9a4"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2, 0xfdfdffffffffffff, &(0x7f00000005c0)="c6c4"}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x1000000}}, &(0x7f0000000300)='syzkaller\x00'}, 0x94) r3 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x80000006}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000140)=ANY=[], 0x28}}], 0x1, 0x40000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$netlink(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000002000080080002"], 0x1c}], 0x1}, 0x0) 356.661345ms ago: executing program 2 (id=1446): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095883cddd5eea796a6485fab0bba138e5bc454521738fe32c119bcb65829cafca9b040284699ccba82cc9383d4f289e8957185f392b645aab44bc0e479988f1eb3e7bb5d21a8914e6c189e62ef3ddd45b91a19e8bd5c58f8917d497bcd1abddd72468bf67a479ac61e98e00e762a3daefae77155b799265bfa0b04aec65076b7afddb118c01365efec28246aa90a919659c44be6cfab3df96b530132ca369e101c3312516b952ef71bd8b7f2c579ad7d6e8100b2422996b511a7c8da03d8c4ef4e0cd3ef7f181bab7455bd77c6"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfefa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r2) tkill(r2, 0x13) ptrace(0x4208, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r2, 0x3, &(0x7f0000000000)=0x9) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) r6 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7fff, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f00000001c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', r8, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x94) syz_clone3(&(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0}}, 0x58) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) fadvise64(r7, 0x5, 0x1, 0x5) 345.515388ms ago: executing program 5 (id=1447): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = mq_open(0x0, 0x80, 0x1f0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x4, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x4, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x3, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x800) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r5, 0x80dc5521, &(0x7f00000001c0)=""/4096) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000040)={0x8098f908, 0x0, "60055808889f90ac0600000500fdfd9ab67e1db9c9a431078d40f722e600"}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r6 = openat$comedi(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x100000) 0s ago: executing program 1 (id=1448): socket$nl_route(0x10, 0x3, 0x0) openat$snapshot(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002340)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000004000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r6, &(0x7f0000000300)={0x2020}, 0x2020) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000005c0)={r5, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88000) kernel console output (not intermixed with test programs): .041251][T10073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.063771][ T30] audit: type=1326 audit(1755849646.058:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10072 comm="syz.2.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ee6d8ebe9 code=0x7ffc0000 [ 319.095002][ T30] audit: type=1326 audit(1755849646.058:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10072 comm="syz.2.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee6d8ebe9 code=0x7ffc0000 [ 319.119532][ T30] audit: type=1326 audit(1755849646.058:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10072 comm="syz.2.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee6d8ebe9 code=0x7ffc0000 [ 319.143093][ T5851] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 319.150373][ T30] audit: type=1326 audit(1755849646.058:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10072 comm="syz.2.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6ee6d8ebe9 code=0x7ffc0000 [ 319.174309][ T30] audit: type=1326 audit(1755849646.058:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10072 comm="syz.2.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee6d8ebe9 code=0x7ffc0000 [ 319.331776][ T5851] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 319.340131][ T5851] usb 5-1: config 179 has no interface number 0 [ 319.346892][ T5851] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 319.358271][ T5851] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 319.369468][ T5851] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 319.380872][ T5851] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 319.392102][ T5851] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 319.405430][ T5851] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 319.406105][T10048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.416060][ T5851] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.437401][T10048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.438721][T10069] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 319.479733][T10069] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 319.690777][ T5955] ch9200 4-1:2.31: probe with driver ch9200 failed with error -22 [ 319.743109][T10069] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 319.749642][T10069] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 319.758666][ T5955] usb 4-1: USB disconnect, device number 26 [ 319.772697][T10069] vhci_hcd vhci_hcd.0: Device attached [ 319.807624][T10079] vhci_hcd: connection closed [ 319.807837][ T61] vhci_hcd: stop threads [ 319.818806][ T61] vhci_hcd: release socket [ 319.819002][ T24] usb 5-1: USB disconnect, device number 23 [ 319.823342][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 319.823377][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 319.846882][ T61] vhci_hcd: disconnect device [ 319.855921][T10082] dlm: no local IP address has been set [ 319.861506][T10082] dlm: cannot start dlm midcomms -107 [ 320.040541][ T5904] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 320.630476][ T5904] usb 1-1: Using ep0 maxpacket: 32 [ 320.636702][ T5904] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 320.644926][ T5904] usb 1-1: config 0 has no interface number 0 [ 320.652525][ T5904] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 320.661896][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.669903][ T5904] usb 1-1: Product: syz [ 320.674079][ T5904] usb 1-1: Manufacturer: syz [ 320.678663][ T5904] usb 1-1: SerialNumber: syz [ 320.686746][ T5904] usb 1-1: config 0 descriptor?? [ 320.702692][ T5904] smsc95xx v2.0.0 [ 321.262351][T10100] FAULT_INJECTION: forcing a failure. [ 321.262351][T10100] name failslab, interval 1, probability 0, space 0, times 0 [ 321.410993][T10100] CPU: 1 UID: 0 PID: 10100 Comm: syz.1.1018 Not tainted syzkaller #0 PREEMPT(full) [ 321.411020][T10100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 321.411030][T10100] Call Trace: [ 321.411035][T10100] [ 321.411041][T10100] dump_stack_lvl+0x16c/0x1f0 [ 321.411067][T10100] should_fail_ex+0x512/0x640 [ 321.411089][T10100] ? sock_kmalloc+0x111/0x170 [ 321.411110][T10100] should_failslab+0xc2/0x120 [ 321.411130][T10100] __kmalloc_noprof+0xd2/0x510 [ 321.411149][T10100] sock_kmalloc+0x111/0x170 [ 321.411170][T10100] skcipher_recvmsg+0x4a6/0x1030 [ 321.411195][T10100] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 321.411213][T10100] ? security_socket_recvmsg+0x56/0x260 [ 321.411236][T10100] ? __sanitizer_cov_trace_pc+0x10/0x70 [ 321.411257][T10100] sock_recvmsg+0x1f6/0x250 [ 321.411280][T10100] __sys_recvfrom+0x203/0x310 [ 321.411296][T10100] ? __pfx___sys_recvfrom+0x10/0x10 [ 321.411322][T10100] ? xfd_validate_state+0x61/0x180 [ 321.411350][T10100] __x64_sys_recvfrom+0xe0/0x1c0 [ 321.411365][T10100] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 321.411385][T10100] do_syscall_64+0xcd/0x4c0 [ 321.411403][T10100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.411425][T10100] RIP: 0033:0x7fd08fb909b4 [ 321.411439][T10100] Code: 89 4c 24 1c e8 ed 5f 02 00 44 8b 54 24 1c 8b 3c 24 45 31 c9 89 c5 48 8b 54 24 10 48 8b 74 24 08 45 31 c0 b8 2d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 04 24 e8 39 60 02 00 48 8b 04 [ 321.411455][T10100] RSP: 002b:00007fd09097aed0 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 321.411472][T10100] RAX: ffffffffffffffda RBX: 00007fd09097afc0 RCX: 00007fd08fb909b4 [ 321.411483][T10100] RDX: 0000000000001000 RSI: 00007fd09097b010 RDI: 0000000000000004 [ 321.411494][T10100] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 321.411503][T10100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 321.411513][T10100] R13: 00007fd09097af68 R14: 00007fd09097b010 R15: 0000000000000000 [ 321.411529][T10100] [ 321.625744][T10102] input: syz1 as /devices/virtual/input/input55 [ 321.905729][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 321.905746][ T30] audit: type=1400 audit(1755849648.958:1761): avc: denied { connect } for pid=10108 comm="syz.2.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 322.390553][ T30] audit: type=1400 audit(1755849648.958:1762): avc: denied { bind } for pid=10108 comm="syz.2.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 322.459625][ T30] audit: type=1400 audit(1755849648.998:1763): avc: denied { listen } for pid=10108 comm="syz.2.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 322.517007][ T30] audit: type=1400 audit(1755849648.998:1764): avc: denied { accept } for pid=10108 comm="syz.2.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 322.539609][ T30] audit: type=1400 audit(1755849649.428:1765): avc: denied { ioctl } for pid=10108 comm="syz.2.1021" path="socket:[28497]" dev="sockfs" ino=28497 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 322.622064][T10104] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1019'. [ 322.701971][ T30] audit: type=1400 audit(1755849649.758:1766): avc: denied { append } for pid=10112 comm="syz.3.1022" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 322.792429][ T5904] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 322.803943][T10084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.815913][ T30] audit: type=1400 audit(1755849649.848:1767): avc: denied { bind } for pid=10083 comm="syz.0.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 322.855425][T10084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.875001][ T5904] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 323.510743][ T5904] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 323.530936][ T5904] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -61 [ 323.554720][T10138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1027'. [ 323.840543][ T24] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 324.005713][ T30] audit: type=1400 audit(1755849651.058:1768): avc: denied { write } for pid=10148 comm="syz.2.1031" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 324.050583][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 324.153565][ T24] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 324.527356][ T24] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 324.555440][ T24] usb 5-1: Product: syz [ 324.671504][ T24] usb 5-1: Manufacturer: syz [ 324.679670][ T24] usb 5-1: SerialNumber: syz [ 324.706516][ T24] usb 5-1: config 0 descriptor?? [ 324.856920][ T5955] usb 1-1: USB disconnect, device number 30 [ 326.065331][ T5955] usb 5-1: USB disconnect, device number 24 [ 326.452274][ T30] audit: type=1400 audit(1755849653.508:1769): avc: denied { read } for pid=10184 comm="syz.1.1042" path="socket:[29707]" dev="sockfs" ino=29707 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 326.904745][T10178] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 326.910954][T10178] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 326.921698][T10178] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 326.928220][T10178] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 327.177774][ T30] audit: type=1400 audit(1755849654.228:1770): avc: denied { create } for pid=10202 comm="syz.4.1047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 327.240527][T10204] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1045'. [ 327.769499][T10206] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 328.160524][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 328.173852][T10210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1048'. [ 328.902145][T10228] binder: 10226:10228 ioctl c0306201 200000002380 returned -11 [ 329.059520][ T50] Bluetooth: hci3: command 0x040f tx timeout [ 329.065899][ T50] Bluetooth: hci4: command 0x0c1a tx timeout [ 329.071900][T10208] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 329.072030][T10208] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 329.110497][ T30] audit: type=1400 audit(1755849656.158:1771): avc: denied { append } for pid=10226 comm="syz.1.1054" name="001" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 329.133674][T10208] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 329.139623][T10208] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 329.150583][T10227] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5124 sclass=netlink_route_socket pid=10227 comm=syz.1.1054 [ 329.736822][ T5904] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 329.920681][ T5904] usb 1-1: Using ep0 maxpacket: 16 [ 329.952268][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.158088][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.170257][ T5904] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 330.186529][ T5904] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 330.208374][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.225877][ T5904] usb 1-1: config 0 descriptor?? [ 330.234640][ T30] audit: type=1400 audit(1755849657.288:1772): avc: denied { accept } for pid=10249 comm="syz.4.1060" path="/140/file0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 330.491067][T10237] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 330.510625][T10237] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 330.516644][T10237] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 330.526553][T10237] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 330.547086][T10218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.549119][ T30] audit: type=1400 audit(1755849657.548:1773): avc: denied { create } for pid=10252 comm="syz.3.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 330.576983][ T30] audit: type=1400 audit(1755849657.548:1774): avc: denied { read } for pid=10252 comm="syz.3.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 330.596372][ C1] vkms_vblank_simulate: vblank timer overrun [ 330.620793][T10218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.841212][ T30] audit: type=1400 audit(1755849657.698:1775): avc: denied { ioctl } for pid=10262 comm="syz.2.1064" path="socket:[29951]" dev="sockfs" ino=29951 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 330.929189][ C1] vkms_vblank_simulate: vblank timer overrun [ 330.936770][ T5904] input: HID 0955:7214 Haptics as /devices/virtual/input/input56 [ 331.440616][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 331.544101][ T30] audit: type=1400 audit(1755849658.098:1776): avc: denied { connect } for pid=10252 comm="syz.3.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 331.563764][ C1] vkms_vblank_simulate: vblank timer overrun [ 331.778276][ T5904] shield 0003:0955:7214.001F: Registered Thunderstrike controller [ 331.818186][ T5904] shield 0003:0955:7214.001F: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 331.949376][ T5904] usb 1-1: USB disconnect, device number 31 [ 331.957064][ T5918] shield 0003:0955:7214.001F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 331.980167][ T5918] shield 0003:0955:7214.001F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 331.997190][ T5918] shield 0003:0955:7214.001F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 332.008516][ T5918] shield 0003:0955:7214.001F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 332.577471][ T5845] Bluetooth: hci3: command 0x040f tx timeout [ 332.577471][ T5856] Bluetooth: hci2: command 0x0c1a tx timeout [ 332.577507][ T5845] Bluetooth: hci4: command 0x0c1a tx timeout [ 333.510619][T10301] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1075'. [ 333.848058][T10309] dlm: no local IP address has been set [ 333.853792][T10309] dlm: cannot start dlm midcomms -107 [ 334.535000][ T5955] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 334.572826][T10322] lo speed is unknown, defaulting to 1000 [ 334.712459][ T5955] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.724392][ T5955] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.740432][ T5955] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.774974][T10325] lo speed is unknown, defaulting to 1000 [ 334.934955][ T5955] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 335.007027][ T5955] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 335.016619][ T5955] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.056757][ T5955] usb 1-1: config 0 descriptor?? [ 335.170492][ T5904] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 335.801856][ T5904] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 335.817933][ T5904] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 335.932097][T10316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.952792][T10316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.031036][ T5904] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 336.058846][ T5955] keytouch 0003:0926:3333.0020: fixing up Keytouch IEC report descriptor [ 336.069662][ T5904] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 336.071611][ T5955] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0020/input/input57 [ 336.096254][ T5904] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 336.140115][ T5904] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 336.147711][ T5904] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 336.159671][ T5904] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 336.213272][ T5904] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 336.268144][T10316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.290623][T10316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.322851][ T5955] keytouch 0003:0926:3333.0020: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 336.365388][ T5904] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 336.737214][ T5904] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 336.780494][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 336.828606][ T5904] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 336.851332][ T5904] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 336.863132][ T5904] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 336.884015][T10316] random: crng reseeded on system resumption [ 336.890102][ T30] audit: type=1400 audit(1755849663.938:1777): avc: denied { write } for pid=10315 comm="syz.0.1079" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 336.900425][ T5904] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 336.957927][ T5904] usb 2-1: string descriptor 0 read error: -22 [ 336.960581][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 336.971972][ T5904] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 336.973329][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 336.990671][ T5911] usb 1-1: USB disconnect, device number 32 [ 336.996626][ T9] usb 4-1: config 0 has no interface number 0 [ 337.011910][ T9] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 337.026183][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.036570][ T9] usb 4-1: Product: syz [ 337.044251][ T9] usb 4-1: Manufacturer: syz [ 337.048999][ T9] usb 4-1: SerialNumber: syz [ 337.075265][ T9] usb 4-1: config 0 descriptor?? [ 337.086619][ T9] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 337.096853][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.206856][ T5904] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 337.511440][ T9] gspca_spca1528: reg_w err -71 [ 337.530528][ T9] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 337.543361][ T9] usb 4-1: USB disconnect, device number 27 [ 339.535896][T10383] dlm: no local IP address has been set [ 339.558372][T10383] dlm: cannot start dlm midcomms -107 [ 340.470116][T10399] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1099'. [ 340.550455][ T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 340.730597][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 340.736694][ T30] audit: type=1400 audit(1755849667.778:1778): avc: denied { create } for pid=10402 comm="syz.3.1101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 340.872384][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.893418][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.909925][ T30] audit: type=1400 audit(1755849667.788:1779): avc: denied { connect } for pid=10402 comm="syz.3.1101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 340.944561][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 340.959121][ T9] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 340.969135][ T30] audit: type=1400 audit(1755849667.848:1780): avc: denied { ioctl } for pid=10402 comm="syz.3.1101" path="socket:[29228]" dev="sockfs" ino=29228 ioctlcmd=0x9362 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 340.997632][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.998352][T10410] nvme_fabrics: missing parameter 'transport=%s' [ 341.018204][T10410] nvme_fabrics: missing parameter 'nqn=%s' [ 341.025693][ T9] usb 1-1: config 0 descriptor?? [ 341.042004][ T5955] usb 2-1: USB disconnect, device number 23 [ 341.144519][T10413] netlink: 1836 bytes leftover after parsing attributes in process `syz.2.1103'. [ 341.235456][T10397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.245516][T10397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.459067][ T9] input: HID 0955:7214 Haptics as /devices/virtual/input/input58 [ 341.470580][ T5955] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 341.480573][ T9] shield 0003:0955:7214.0021: Registered Thunderstrike controller [ 341.489055][ T9] shield 0003:0955:7214.0021: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 341.637538][ T5955] usb 2-1: Using ep0 maxpacket: 16 [ 341.644874][ T5955] usb 2-1: unable to get BOS descriptor or descriptor too short [ 341.671939][ T5955] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 341.682828][ T92] shield 0003:0955:7214.0021: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 341.695031][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.695173][ T92] shield 0003:0955:7214.0021: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 341.714246][ T5955] usb 2-1: Product: syz [ 341.723999][ T5955] usb 2-1: Manufacturer: syz [ 341.730971][ T5955] usb 2-1: SerialNumber: syz [ 341.739634][ T5851] usb 1-1: USB disconnect, device number 33 [ 341.751802][ T92] shield 0003:0955:7214.0021: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 341.787941][ T92] shield 0003:0955:7214.0021: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 341.840537][ T24] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 341.968424][ T5955] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 341.992357][ T5955] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 342.004044][ T24] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 342.014911][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.033929][ T5955] usb 2-1: USB disconnect, device number 24 [ 342.036097][ T24] usb 4-1: config 0 descriptor?? [ 342.064408][ T5860] udevd[5860]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 342.088603][ T24] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 342.282069][T10421] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=60181 sclass=netlink_tcpdiag_socket pid=10421 comm=syz.4.1107 [ 342.530491][ T5904] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 342.642821][T10430] dlm: no local IP address has been set [ 342.648401][T10430] dlm: cannot start dlm midcomms -107 [ 342.691978][ T5904] usb 5-1: Using ep0 maxpacket: 32 [ 342.699174][ T5904] usb 5-1: config index 0 descriptor too short (expected 58130, got 18) [ 342.710754][ T5904] usb 5-1: config 3 has an invalid interface number: 146 but max is -1 [ 342.719142][ T5904] usb 5-1: config 3 has 1 interface, different from the descriptor's value: 0 [ 342.729409][ T5904] usb 5-1: config 3 has no interface number 0 [ 342.736239][ T5904] usb 5-1: config 3 interface 146 has no altsetting 0 [ 342.746710][T10431] dlm: no local IP address has been set [ 342.752354][T10431] dlm: cannot start dlm midcomms -107 [ 342.778228][ T5904] usb 5-1: New USB device found, idVendor=1209, idProduct=1006, bcdDevice= 2.80 [ 342.802899][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.814526][ T5904] usb 5-1: Product: syz [ 342.879062][ T5904] usb 5-1: Manufacturer: syz [ 342.884194][ T5904] usb 5-1: SerialNumber: syz [ 343.106112][ T24] gspca_nw80x: reg_w err -110 [ 343.123420][ T5904] ftdi_sio 5-1:3.146: FTDI USB Serial Device converter detected [ 343.132956][ T24] nw80x 4-1:0.0: probe with driver nw80x failed with error -110 [ 343.144801][ T5904] ftdi_sio ttyUSB0: unknown device type: 0x280 [ 343.260577][ T30] audit: type=1400 audit(1755849670.148:1781): avc: denied { mount } for pid=10420 comm="syz.4.1107" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 343.274390][ T5904] usb 5-1: USB disconnect, device number 25 [ 343.288871][ T8081] Bluetooth: (null): Invalid header checksum [ 343.295053][ T8081] Bluetooth: (null): Invalid header checksum [ 343.303467][ T8081] Bluetooth: (null): Invalid header checksum [ 343.311422][ T8081] Bluetooth: (null): Invalid header checksum [ 343.317404][ T5904] ftdi_sio 5-1:3.146: device disconnected [ 343.323456][ T8081] Bluetooth: (null): Invalid header checksum [ 343.431330][ T8081] Bluetooth: (null): Invalid header checksum [ 343.540779][ T1085] Bluetooth: (null): Invalid header checksum [ 343.640163][ T30] audit: type=1400 audit(1755849670.688:1782): avc: denied { unmount } for pid=7362 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 343.662770][ T9771] Bluetooth: (null): Invalid header checksum [ 343.731698][ T30] audit: type=1400 audit(1755849670.748:1783): avc: denied { watch watch_reads } for pid=10437 comm="syz.0.1112" path="/219/file0" dev="tmpfs" ino=1142 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 343.760680][ T1085] Bluetooth: (null): Invalid header checksum [ 343.782764][T10440] Driver unsupported XDP return value 0 on prog (id 240) dev N/A, expect packet loss! [ 343.864728][ T5955] kernel write not supported for file /584/gid_map (pid: 5955 comm: kworker/0:6) [ 343.874304][ T12] Bluetooth: (null): Invalid header checksum [ 343.875255][ T30] audit: type=1400 audit(1755849670.928:1784): avc: denied { listen } for pid=10439 comm="syz.4.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 343.981371][ T6185] Bluetooth: (null): Invalid header checksum [ 344.052163][T10446] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 344.460620][T10450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1116'. [ 344.516629][ T8081] Bluetooth: (null): Invalid header checksum [ 344.544761][ T8081] Bluetooth: (null): Invalid header checksum [ 344.552416][ T8081] Bluetooth: (null): Invalid header checksum [ 344.567969][ T8081] Bluetooth: (null): Invalid header checksum [ 344.583656][ T8081] Bluetooth: (null): Invalid header checksum [ 344.659431][T10451] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 344.666741][T10451] IPv6: NLM_F_CREATE should be set when creating new route [ 344.674051][T10451] IPv6: NLM_F_CREATE should be set when creating new route [ 344.681371][T10451] IPv6: NLM_F_CREATE should be set when creating new route [ 344.801179][ T24] usb 4-1: USB disconnect, device number 28 [ 345.005305][T10460] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1118'. [ 345.020549][ T5851] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 345.220533][ T5851] usb 5-1: Using ep0 maxpacket: 8 [ 345.228477][ T5851] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 345.237505][ T5851] usb 5-1: config 2 has no interface number 0 [ 345.327083][ T5851] usb 5-1: config 2 interface 31 has no altsetting 0 [ 345.402354][ T5851] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 345.419683][ T5851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.430698][ T5851] usb 5-1: Product: syz [ 345.436215][ T5851] usb 5-1: Manufacturer: syz [ 345.739766][ T5851] usb 5-1: SerialNumber: syz [ 345.751541][T10469] dlm: no local IP address has been set [ 345.758716][T10469] dlm: cannot start dlm midcomms -107 [ 346.522150][T10453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.550992][T10453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.597722][T10453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.623333][T10453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.665995][ T5851] ch9200 5-1:2.31: probe with driver ch9200 failed with error -22 [ 346.679075][ T5851] usb 5-1: USB disconnect, device number 26 [ 346.713028][T10483] nvme_fabrics: missing parameter 'transport=%s' [ 346.716947][T10486] FAULT_INJECTION: forcing a failure. [ 346.716947][T10486] name failslab, interval 1, probability 0, space 0, times 0 [ 346.722524][T10483] nvme_fabrics: missing parameter 'nqn=%s' [ 346.755636][T10486] CPU: 1 UID: 0 PID: 10486 Comm: syz.2.1127 Not tainted syzkaller #0 PREEMPT(full) [ 346.755663][T10486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 346.755674][T10486] Call Trace: [ 346.755680][T10486] [ 346.755688][T10486] dump_stack_lvl+0x16c/0x1f0 [ 346.755712][T10486] should_fail_ex+0x512/0x640 [ 346.755733][T10486] ? iter_file_splice_write+0x1cc/0x12e0 [ 346.755752][T10486] should_failslab+0xc2/0x120 [ 346.755772][T10486] __kmalloc_noprof+0xd2/0x510 [ 346.755788][T10486] ? ovl_revert_creds+0x13/0x50 [ 346.755810][T10486] ? ovl_other_xattr_get+0x100/0x160 [ 346.755832][T10486] iter_file_splice_write+0x1cc/0x12e0 [ 346.755853][T10486] ? __vfs_getxattr+0x145/0x1a0 [ 346.755872][T10486] ? bpf_lsm_capable+0x9/0x10 [ 346.755896][T10486] ? security_capable+0x7e/0x260 [ 346.755917][T10486] ? __pfx_iter_file_splice_write+0x10/0x10 [ 346.755936][T10486] ? cap_inode_need_killpriv+0x4c/0x60 [ 346.755956][T10486] ? bpf_lsm_inode_need_killpriv+0x9/0x10 [ 346.755978][T10486] ? security_inode_need_killpriv+0x6c/0x1e0 [ 346.756004][T10486] ? file_remove_privs_flags+0x189/0x580 [ 346.756027][T10486] ? __pfx_file_remove_privs_flags+0x10/0x10 [ 346.756050][T10486] ? __pfx_ovl_verify_lowerdata+0x10/0x10 [ 346.756072][T10486] ? __pfx___might_resched+0x10/0x10 [ 346.756096][T10486] backing_file_splice_write+0x27f/0x890 [ 346.756121][T10486] ovl_splice_write+0x38d/0x6c0 [ 346.756145][T10486] ? __pfx_ovl_splice_write+0x10/0x10 [ 346.756167][T10486] ? __pfx_ovl_file_end_write+0x10/0x10 [ 346.756187][T10486] ? look_up_lock_class+0x59/0x150 [ 346.756207][T10486] ? __pfx___might_resched+0x10/0x10 [ 346.756227][T10486] ? lock_release+0x201/0x2f0 [ 346.756253][T10486] ? __pfx_ovl_splice_write+0x10/0x10 [ 346.756281][T10486] direct_splice_actor+0x192/0x6c0 [ 346.756300][T10486] splice_direct_to_actor+0x342/0xa30 [ 346.756319][T10486] ? __pfx_direct_splice_actor+0x10/0x10 [ 346.756338][T10486] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 346.756359][T10486] do_splice_direct+0x174/0x240 [ 346.756375][T10486] ? __pfx_do_splice_direct+0x10/0x10 [ 346.756392][T10486] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 346.756409][T10486] ? bpf_lsm_file_permission+0x9/0x10 [ 346.756429][T10486] ? security_file_permission+0x71/0x210 [ 346.756455][T10486] ? rw_verify_area+0xcf/0x6c0 [ 346.756481][T10486] do_sendfile+0xb06/0xe50 [ 346.756498][T10486] ? __pfx_do_sendfile+0x10/0x10 [ 346.756512][T10486] ? lock_release+0x201/0x2f0 [ 346.756539][T10486] __x64_sys_sendfile64+0x154/0x220 [ 346.756561][T10486] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 346.756585][T10486] do_syscall_64+0xcd/0x4c0 [ 346.756604][T10486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.756622][T10486] RIP: 0033:0x7f6ee6d8ebe9 [ 346.756636][T10486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.756653][T10486] RSP: 002b:00007f6ee7c0e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 346.756670][T10486] RAX: ffffffffffffffda RBX: 00007f6ee6fb5fa0 RCX: 00007f6ee6d8ebe9 [ 346.756681][T10486] RDX: 0000200000000080 RSI: 0000000000000003 RDI: 0000000000000003 [ 346.756691][T10486] RBP: 00007f6ee7c0e090 R08: 0000000000000000 R09: 0000000000000000 [ 346.756702][T10486] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000002 [ 346.756712][T10486] R13: 00007f6ee6fb6038 R14: 00007f6ee6fb5fa0 R15: 00007ffe2d4ee018 [ 346.756728][T10486] [ 348.099536][T10514] overlayfs: missing 'lowerdir' [ 348.590068][T10527] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 348.989171][T10530] dlm: no local IP address has been set [ 348.997998][T10530] dlm: cannot start dlm midcomms -107 [ 349.072323][T10531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1137'. [ 349.371401][ T30] audit: type=1400 audit(1755849676.408:1785): avc: denied { read write } for pid=10533 comm="syz.1.1139" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 349.471507][ T30] audit: type=1400 audit(1755849676.408:1786): avc: denied { open } for pid=10533 comm="syz.1.1139" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 350.060470][ T5904] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 350.148997][ T30] audit: type=1400 audit(1755849677.198:1787): avc: denied { connect } for pid=10540 comm="syz.2.1140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 350.170613][ T30] audit: type=1326 audit(1755849677.228:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10540 comm="syz.2.1140" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6ee6d8ebe9 code=0x0 [ 350.420497][ T5904] usb 2-1: Using ep0 maxpacket: 16 [ 350.539920][ T5904] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 350.570483][ T5904] usb 2-1: config 0 has no interface number 0 [ 350.576891][ T5904] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 350.590273][ T5904] usb 2-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 350.599620][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.772916][ T5904] usb 2-1: Product: syz [ 350.777149][ T5904] usb 2-1: Manufacturer: syz [ 350.783039][ T5904] usb 2-1: SerialNumber: syz [ 350.790771][ T5904] usb 2-1: config 0 descriptor?? [ 350.800162][ T5904] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 351.146575][ T30] audit: type=1400 audit(1755849678.178:1789): avc: denied { listen } for pid=10555 comm="syz.4.1144" lport=40774 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 351.146731][ T30] audit: type=1400 audit(1755849678.178:1790): avc: denied { accept } for pid=10555 comm="syz.4.1144" lport=40774 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 351.775270][ T30] audit: type=1400 audit(1755849678.828:1791): avc: denied { map } for pid=10568 comm="syz.4.1148" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 351.800943][T10561] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 351.809003][T10561] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 351.821510][T10561] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 351.828951][T10561] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 351.838583][ T30] audit: type=1400 audit(1755849678.888:1792): avc: denied { ioctl } for pid=10568 comm="syz.4.1148" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 351.906614][ T30] audit: type=1400 audit(1755849678.958:1793): avc: denied { getopt } for pid=10575 comm="syz.2.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 352.133620][ T1085] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.283383][ T1085] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.410889][ T5904] usb 2-1: USB disconnect, device number 25 [ 352.492274][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 352.499667][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 352.507292][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 352.514992][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 352.522756][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 352.535444][ T30] audit: type=1400 audit(1755849679.588:1794): avc: denied { mounton } for pid=10584 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 352.570297][ T1085] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.580698][ T1085] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.600848][T10584] lo speed is unknown, defaulting to 1000 [ 352.994381][ T1085] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.008202][ T1085] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.053367][T10584] chnl_net:caif_netlink_parms(): no params data found [ 353.116108][ T1085] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.132620][ T1085] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.301351][T10584] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.325025][T10584] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.339546][T10584] bridge_slave_0: entered allmulticast mode [ 353.366874][T10584] bridge_slave_0: entered promiscuous mode [ 353.374104][T10584] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.381206][T10584] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.388363][T10584] bridge_slave_1: entered allmulticast mode [ 353.394982][T10584] bridge_slave_1: entered promiscuous mode [ 353.590479][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 353.594049][T10613] virtiofs: Unknown parameter 'always' [ 353.671076][T10584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.701878][T10584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.734200][ T1085] bridge0: port 3(team0) entered disabled state [ 353.753463][ T1085] bridge_slave_1: left allmulticast mode [ 353.802522][ T1085] bridge_slave_1: left promiscuous mode [ 353.828010][ T1085] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.845817][ T50] Bluetooth: hci3: command 0x040f tx timeout [ 353.845835][ T5845] Bluetooth: hci4: command 0x0c1a tx timeout [ 353.845863][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout [ 353.891280][ T1085] bridge_slave_0: left allmulticast mode [ 353.911713][ T1085] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.165140][ T1085] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.183067][ T1085] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.197354][ T5904] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 354.226703][ T1085] bond0 (unregistering): Released all slaves [ 354.332871][T10584] team0: Port device team_slave_0 added [ 354.342415][T10584] team0: Port device team_slave_1 added [ 354.356972][ T5904] usb 2-1: Using ep0 maxpacket: 16 [ 354.362548][T10638] FAULT_INJECTION: forcing a failure. [ 354.362548][T10638] name failslab, interval 1, probability 0, space 0, times 0 [ 354.375204][T10638] CPU: 0 UID: 0 PID: 10638 Comm: syz.2.1164 Not tainted syzkaller #0 PREEMPT(full) [ 354.375228][T10638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 354.375238][T10638] Call Trace: [ 354.375243][T10638] [ 354.375249][T10638] dump_stack_lvl+0x16c/0x1f0 [ 354.375273][T10638] should_fail_ex+0x512/0x640 [ 354.375293][T10638] ? switchdev_deferred_enqueue+0x2b/0x2a0 [ 354.375310][T10638] should_failslab+0xc2/0x120 [ 354.375330][T10638] __kmalloc_noprof+0xd2/0x510 [ 354.375348][T10638] ? __pfx_br_rtr_notify+0x10/0x10 [ 354.375372][T10638] ? __pfx_switchdev_port_attr_set_deferred+0x10/0x10 [ 354.375390][T10638] switchdev_deferred_enqueue+0x2b/0x2a0 [ 354.375408][T10638] switchdev_port_attr_set+0xb5/0x120 [ 354.375426][T10638] br_multicast_add_router.part.0+0x432/0x690 [ 354.375452][T10638] ? __pfx_br_multicast_add_router.part.0+0x10/0x10 [ 354.375481][T10638] br_multicast_set_port_router+0x70c/0x9f0 [ 354.375500][T10638] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 354.375521][T10638] br_setport+0xdd0/0x17d0 [ 354.375547][T10638] ? __pfx_br_setport+0x10/0x10 [ 354.375571][T10638] ? do_raw_spin_lock+0x12c/0x2b0 [ 354.375590][T10638] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 354.375611][T10638] br_port_slave_changelink+0xcf/0x190 [ 354.375636][T10638] ? __pfx_br_port_slave_changelink+0x10/0x10 [ 354.375661][T10638] rtnl_newlink+0x1409/0x2000 [ 354.375685][T10638] ? __pfx_rtnl_newlink+0x10/0x10 [ 354.375703][T10638] ? avc_has_perm_noaudit+0x117/0x3b0 [ 354.375721][T10638] ? rcu_is_watching+0x12/0xc0 [ 354.375743][T10638] ? lock_release+0x201/0x2f0 [ 354.375769][T10638] ? avc_has_perm_noaudit+0x149/0x3b0 [ 354.375786][T10638] ? cred_has_capability.isra.0+0x190/0x310 [ 354.375811][T10638] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 354.375839][T10638] ? cap_capable+0xb3/0x250 [ 354.375858][T10638] ? rcu_is_watching+0x12/0xc0 [ 354.375879][T10638] ? __pfx_rtnl_newlink+0x10/0x10 [ 354.375895][T10638] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 354.375912][T10638] ? rcu_is_watching+0x12/0xc0 [ 354.375931][T10638] ? __pfx_rtnl_newlink+0x10/0x10 [ 354.375948][T10638] ? lock_release+0x201/0x2f0 [ 354.375972][T10638] ? __pfx_rtnl_newlink+0x10/0x10 [ 354.375989][T10638] rtnetlink_rcv_msg+0x95b/0xe90 [ 354.376008][T10638] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 354.376035][T10638] ? ref_tracker_free+0x37c/0x830 [ 354.376056][T10638] netlink_rcv_skb+0x155/0x420 [ 354.376075][T10638] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 354.376095][T10638] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 354.376118][T10638] ? netlink_deliver_tap+0x1ae/0xd30 [ 354.376138][T10638] netlink_unicast+0x5aa/0x870 [ 354.376158][T10638] ? __pfx_netlink_unicast+0x10/0x10 [ 354.376176][T10638] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 354.376197][T10638] netlink_sendmsg+0x8d1/0xdd0 [ 354.376217][T10638] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.376240][T10638] ____sys_sendmsg+0xa95/0xc70 [ 354.376262][T10638] ? copy_msghdr_from_user+0x10a/0x160 [ 354.376278][T10638] ? __pfx_____sys_sendmsg+0x10/0x10 [ 354.376299][T10638] ? __pfx_kstrtouint+0x10/0x10 [ 354.376316][T10638] ? kstrtouint_from_user+0x13c/0x1d0 [ 354.376333][T10638] ___sys_sendmsg+0x134/0x1d0 [ 354.376350][T10638] ? __pfx____sys_sendmsg+0x10/0x10 [ 354.376371][T10638] ? rcu_is_watching+0x12/0xc0 [ 354.376398][T10638] __sys_sendmsg+0x16d/0x220 [ 354.376415][T10638] ? __pfx___sys_sendmsg+0x10/0x10 [ 354.376439][T10638] do_syscall_64+0xcd/0x4c0 [ 354.376457][T10638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.376474][T10638] RIP: 0033:0x7f6ee6d8ebe9 [ 354.376487][T10638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.376504][T10638] RSP: 002b:00007f6ee7c0e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 354.376521][T10638] RAX: ffffffffffffffda RBX: 00007f6ee6fb5fa0 RCX: 00007f6ee6d8ebe9 [ 354.376533][T10638] RDX: 00000000040000c0 RSI: 0000200000000200 RDI: 0000000000000003 [ 354.376544][T10638] RBP: 00007f6ee7c0e090 R08: 0000000000000000 R09: 0000000000000000 [ 354.376554][T10638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 354.376564][T10638] R13: 00007f6ee6fb6038 R14: 00007f6ee6fb5fa0 R15: 00007ffe2d4ee018 [ 354.376581][T10638] [ 354.378574][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.379352][T10638] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.388232][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.570504][ T5845] Bluetooth: hci0: command tx timeout [ 354.830146][T10629] pim6reg: entered allmulticast mode [ 354.843347][T10629] pim6reg: left allmulticast mode [ 354.849478][T10644] netlink: 'syz.3.1165': attribute type 10 has an invalid length. [ 354.941460][ T5904] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 354.955054][ T5904] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 354.985118][T10651] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 355.000601][T10651] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 355.023272][T10649] batadv_slave_0: entered promiscuous mode [ 355.052987][T10584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.078804][T10584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.081352][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.112803][T10584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.128107][T10584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.137419][T10584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.161305][ T5904] usb 2-1: config 0 descriptor?? [ 355.423144][T10627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.475542][T10627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.486275][T10584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.501850][T10662] netlink: 1836 bytes leftover after parsing attributes in process `syz.4.1169'. [ 355.535164][T10584] hsr_slave_0: entered promiscuous mode [ 355.591096][T10584] hsr_slave_1: entered promiscuous mode [ 355.603782][T10584] debugfs: 'hsr0' already exists in 'hsr' [ 355.609621][T10584] Cannot create hsr debugfs directory [ 355.684804][T10664] nvme_fabrics: missing parameter 'transport=%s' [ 355.691555][T10664] nvme_fabrics: missing parameter 'nqn=%s' [ 355.725198][ T5904] input: HID 0955:7214 Haptics as /devices/virtual/input/input60 [ 355.747200][T10646] batadv_slave_0: left promiscuous mode [ 355.812461][ T5904] shield 0003:0955:7214.0022: Registered Thunderstrike controller [ 355.846811][ T5904] shield 0003:0955:7214.0022: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 355.902186][ T1085] hsr_slave_0: left promiscuous mode [ 355.953186][ T1085] hsr_slave_1: left promiscuous mode [ 355.953472][ T5911] shield 0003:0955:7214.0022: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 355.970341][ T5911] shield 0003:0955:7214.0022: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 355.976478][ T1085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.987772][ T5904] usb 2-1: USB disconnect, device number 26 [ 355.994926][ T1085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.997978][ T5911] shield 0003:0955:7214.0022: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 356.014882][ T5911] shield 0003:0955:7214.0022: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 356.015109][ T1085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.035085][ T1085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.047244][ T1085] batadv_slave_1: left promiscuous mode [ 356.061669][ T1085] veth1_macvtap: left promiscuous mode [ 356.067169][ T1085] veth0_macvtap: left promiscuous mode [ 356.076071][ T1085] veth1_vlan: left promiscuous mode [ 356.081488][ T1085] veth0_vlan: left promiscuous mode [ 356.285382][ T1085] team_slave_1 (unregistering): left promiscuous mode [ 356.294968][ T1085] team_slave_1 (unregistering): left allmulticast mode [ 356.302148][ T1085] team0 (unregistering): Port device team_slave_1 removed [ 356.310594][T10680] block nbd1: server does not support multiple connections per device. [ 356.322481][ T1085] team_slave_0 (unregistering): left promiscuous mode [ 356.329505][T10680] block nbd1: shutting down sockets [ 356.336177][ T1085] team_slave_0 (unregistering): left allmulticast mode [ 356.356101][ T1085] team0 (unregistering): Port device team_slave_0 removed [ 356.651526][T10584] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 356.671802][T10584] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 356.683861][T10584] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 356.696999][T10701] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1175'. [ 356.725081][ T5845] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 356.733777][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 356.733793][ T30] audit: type=1400 audit(1755849683.778:1797): avc: denied { accept } for pid=10700 comm="syz.2.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 356.767196][T10584] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 356.884582][ T5845] Bluetooth: hci0: command tx timeout [ 356.898530][T10584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.928040][T10584] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.971280][ T6185] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.978403][ T6185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.265651][ T6185] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.272783][ T6185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.478774][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 357.486417][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 357.493627][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 357.501285][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 357.508706][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 357.647622][T10728] lo speed is unknown, defaulting to 1000 [ 357.831667][T10728] chnl_net:caif_netlink_parms(): no params data found [ 358.024997][T10584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.091841][T10728] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.099240][T10728] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.107310][T10728] bridge_slave_0: entered allmulticast mode [ 358.115788][T10728] bridge_slave_0: entered promiscuous mode [ 358.128538][T10728] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.136418][T10728] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.201726][T10751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.205607][T10728] bridge_slave_1: entered allmulticast mode [ 358.210306][T10751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.244052][T10728] bridge_slave_1: entered promiscuous mode [ 358.293310][T10755] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1182'. [ 358.308930][T10728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.311193][ T30] audit: type=1400 audit(1755849685.348:1798): avc: denied { setopt } for pid=10754 comm="syz.3.1182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 358.350344][T10728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.363476][ T30] audit: type=1400 audit(1755849685.408:1799): avc: denied { map } for pid=10749 comm="syz.2.1181" path="socket:[31739]" dev="sockfs" ino=31739 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 358.412334][T10728] team0: Port device team_slave_0 added [ 358.429848][T10728] team0: Port device team_slave_1 added [ 358.480017][T10728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.500417][T10728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.534916][T10728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.572444][T10728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.579478][T10728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.609425][T10728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.655065][T10728] hsr_slave_0: entered promiscuous mode [ 358.662044][T10728] hsr_slave_1: entered promiscuous mode [ 358.668172][T10728] debugfs: 'hsr0' already exists in 'hsr' [ 358.674198][T10728] Cannot create hsr debugfs directory [ 358.689910][T10584] veth0_vlan: entered promiscuous mode [ 358.695656][ T24] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 358.718066][T10584] veth1_vlan: entered promiscuous mode [ 358.763404][T10584] veth0_macvtap: entered promiscuous mode [ 358.769774][T10728] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 358.778556][T10728] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 358.787464][T10584] veth1_macvtap: entered promiscuous mode [ 358.794013][T10728] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 358.802923][T10728] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 358.822225][T10584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.834995][T10584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.850129][ T1085] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.860762][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 358.866579][ T1085] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.876738][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.898313][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.912637][ T1085] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.921523][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 358.927080][ T30] audit: type=1400 audit(1755849685.978:1800): avc: denied { connect } for pid=10776 comm="syz.2.1185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 358.934596][ T1085] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.964749][ T5845] Bluetooth: hci0: command tx timeout [ 358.970307][ T24] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 358.979596][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.989037][ T24] usb 4-1: config 0 descriptor?? [ 359.024144][T10784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.036342][T10784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.041791][T10728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.051974][T10784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.060439][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.060457][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.076421][T10784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.095562][T10728] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.106675][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.116611][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.116953][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.131006][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.139893][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.146988][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.166672][ T30] audit: type=1400 audit(1755849686.218:1801): avc: denied { mounton } for pid=10584 comm="syz-executor" path="/root/syzkaller.qqqOte/syz-tmp" dev="sda1" ino=2050 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 359.170101][T10728] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 359.207900][ T30] audit: type=1400 audit(1755849686.218:1802): avc: denied { mounton } for pid=10584 comm="syz-executor" path="/root/syzkaller.qqqOte/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 359.208899][T10763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.237232][ T30] audit: type=1400 audit(1755849686.218:1803): avc: denied { mounton } for pid=10584 comm="syz-executor" path="/root/syzkaller.qqqOte/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=32898 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 359.246044][T10728] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 359.277532][ T30] audit: type=1400 audit(1755849686.258:1804): avc: denied { mounton } for pid=10584 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 359.285326][T10763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.311028][ T30] audit: type=1400 audit(1755849686.258:1805): avc: denied { mounton } for pid=10584 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 359.514103][T10728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.607750][ T5845] Bluetooth: hci3: command tx timeout [ 359.618383][ T24] input: HID 0955:7214 Haptics as /devices/virtual/input/input61 [ 359.645086][ T24] shield 0003:0955:7214.0023: Registered Thunderstrike controller [ 359.663000][ T24] shield 0003:0955:7214.0023: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 359.753632][T10806] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 359.931712][T10806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1189'. [ 359.956061][ T5918] shield 0003:0955:7214.0023: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 359.983317][ T5904] usb 4-1: USB disconnect, device number 29 [ 360.129701][ T5918] shield 0003:0955:7214.0023: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 360.159560][ T5918] shield 0003:0955:7214.0023: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 360.176900][ T5918] shield 0003:0955:7214.0023: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 360.711828][T10728] veth0_vlan: entered promiscuous mode [ 360.729707][T10728] veth1_vlan: entered promiscuous mode [ 360.748035][T10728] veth0_macvtap: entered promiscuous mode [ 360.755949][T10728] veth1_macvtap: entered promiscuous mode [ 360.767070][T10728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.778181][T10728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.788828][ T8081] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.798171][ T8081] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.808522][ T9771] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.818556][ T9771] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.864585][ T9771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.879724][ T9771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.898684][ T6185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.909277][ T6185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.950565][ T92] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 361.040728][ T5845] Bluetooth: hci0: command tx timeout [ 361.790464][ T5845] Bluetooth: hci3: command tx timeout [ 361.832232][ T92] usb 6-1: Using ep0 maxpacket: 16 [ 361.848967][ T30] audit: type=1326 audit(1755849688.898:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10827 comm="syz.3.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c1f8ebe9 code=0x7ffc0000 [ 361.855271][T10830] batadv_slave_0: entered promiscuous mode [ 361.878543][ T30] audit: type=1326 audit(1755849688.928:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10827 comm="syz.3.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f34c1f8ebe9 code=0x7ffc0000 [ 361.903705][T10832] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1177'. [ 361.913458][ T30] audit: type=1326 audit(1755849688.928:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10827 comm="syz.3.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c1f8ebe9 code=0x7ffc0000 [ 361.937874][ T30] audit: type=1326 audit(1755849688.928:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10827 comm="syz.3.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f34c1f8ebe9 code=0x7ffc0000 [ 361.967994][ T92] usb 6-1: unable to get BOS descriptor or descriptor too short [ 361.981512][T10835] ======================================================= [ 361.981512][T10835] WARNING: The mand mount option has been deprecated and [ 361.981512][T10835] and is ignored by this kernel. Remove the mand [ 361.981512][T10835] option from the mount to silence this warning. [ 361.981512][T10835] ======================================================= [ 362.017548][ T30] audit: type=1326 audit(1755849688.928:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10827 comm="syz.3.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c1f8ebe9 code=0x7ffc0000 [ 362.043283][ T92] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 362.053794][ T92] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.067946][ T92] usb 6-1: Product: syz [ 362.072276][ T92] usb 6-1: Manufacturer: syz [ 362.075435][ T30] audit: type=1326 audit(1755849688.928:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10827 comm="syz.3.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f34c1f8ebe9 code=0x7ffc0000 [ 362.077998][ T92] usb 6-1: SerialNumber: syz [ 362.107785][ T30] audit: type=1326 audit(1755849688.928:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10827 comm="syz.3.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c1f8ebe9 code=0x7ffc0000 [ 362.136639][ T30] audit: type=1326 audit(1755849688.928:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10827 comm="syz.3.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f34c1f8d550 code=0x7ffc0000 [ 362.160763][ T30] audit: type=1326 audit(1755849688.928:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10827 comm="syz.3.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f34c1f8e7eb code=0x7ffc0000 [ 362.184576][ T30] audit: type=1326 audit(1755849688.928:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10827 comm="syz.3.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f34c1f8e7eb code=0x7ffc0000 [ 362.210664][ T5904] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 362.368366][ T92] usb 6-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 362.377672][ T92] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 362.383205][ T5904] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 362.393333][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.402680][ T5904] usb 4-1: Product: syz [ 362.716530][ T5904] usb 4-1: Manufacturer: syz [ 362.717645][T10829] batadv_slave_0: left promiscuous mode [ 362.721631][ T5904] usb 4-1: SerialNumber: syz [ 362.732985][ T5904] usb 4-1: config 0 descriptor?? [ 362.735652][ T92] usb 6-1: USB disconnect, device number 2 [ 362.995578][ T5955] usb 4-1: USB disconnect, device number 30 [ 363.337434][T10842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1198'. [ 363.347275][T10842] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1198'. [ 363.356662][T10842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1198'. [ 363.365513][T10842] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1198'. [ 363.840563][ T5845] Bluetooth: hci3: command tx timeout [ 366.155322][ T5845] Bluetooth: hci3: command tx timeout [ 366.281373][T10891] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1210'. [ 366.544071][T10899] evm: overlay not supported [ 366.900466][ T5851] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 366.908613][ T30] kauditd_printk_skb: 104 callbacks suppressed [ 366.908623][ T30] audit: type=1326 audit(1755849693.958:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10902 comm="syz.3.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f34c1f8e7eb code=0x7ffc0000 [ 366.971685][ T30] audit: type=1326 audit(1755849693.988:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10902 comm="syz.3.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f34c1f8e7eb code=0x7ffc0000 [ 367.013408][ T30] audit: type=1326 audit(1755849693.988:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10902 comm="syz.3.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f34c1f8e7eb code=0x7ffc0000 [ 367.037357][ T30] audit: type=1326 audit(1755849694.068:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10902 comm="syz.3.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f34c1f8e7eb code=0x7ffc0000 [ 367.091173][ T30] audit: type=1326 audit(1755849694.148:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10902 comm="syz.3.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f34c1f8e7eb code=0x7ffc0000 [ 367.170528][ T30] audit: type=1326 audit(1755849694.168:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10902 comm="syz.3.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f34c1f8e7eb code=0x7ffc0000 [ 367.194417][ T30] audit: type=1326 audit(1755849694.168:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10902 comm="syz.3.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f34c1f8e7eb code=0x7ffc0000 [ 367.266000][ T5851] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 367.275787][ T5851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.321017][ T5851] usb 4-1: Product: syz [ 367.330607][ T5851] usb 4-1: Manufacturer: syz [ 367.340970][ T5851] usb 4-1: SerialNumber: syz [ 367.354921][ T5851] usb 4-1: config 0 descriptor?? [ 367.365699][ T30] audit: type=1326 audit(1755849694.168:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10902 comm="syz.3.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f34c1f8e7eb code=0x7ffc0000 [ 367.397512][ T30] audit: type=1326 audit(1755849694.168:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10902 comm="syz.3.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f34c1f8e7eb code=0x7ffc0000 [ 367.428527][T10908] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 367.458198][ T30] audit: type=1326 audit(1755849694.178:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10902 comm="syz.3.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f34c1f8e7eb code=0x7ffc0000 [ 367.958347][T10916] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1216'. [ 368.142681][ T92] usb 4-1: USB disconnect, device number 31 [ 368.450447][ T5904] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 368.567019][T10926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.578884][T10926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.619966][T10926] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1221'. [ 368.620526][ T5904] usb 6-1: Using ep0 maxpacket: 16 [ 368.635877][ T5904] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.641457][T10926] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1221'. [ 368.647558][ T5904] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.675999][ T5904] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 368.692759][ T5904] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 368.702668][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.739251][ T5904] usb 6-1: config 0 descriptor?? [ 368.808375][T10936] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 369.109253][T10943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1222'. [ 369.139304][T10919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.148001][T10919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.226007][T10950] batadv_slave_0: entered promiscuous mode [ 369.405589][ T5904] input: HID 0955:7214 Haptics as /devices/virtual/input/input62 [ 369.410468][ T92] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 369.500069][ T5904] shield 0003:0955:7214.0024: Registered Thunderstrike controller [ 369.525716][ T5904] shield 0003:0955:7214.0024: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 369.570861][ T92] usb 7-1: Using ep0 maxpacket: 32 [ 369.590688][ T5911] shield 0003:0955:7214.0024: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 369.596534][ T92] usb 7-1: config 0 has an invalid interface number: 37 but max is 0 [ 369.619772][ T5904] usb 6-1: USB disconnect, device number 3 [ 369.637980][ T5911] shield 0003:0955:7214.0024: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 369.656875][ T92] usb 7-1: config 0 has no interface number 0 [ 369.662138][ T5911] shield 0003:0955:7214.0024: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 369.679088][ T5911] shield 0003:0955:7214.0024: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 369.732796][ T92] usb 7-1: config 0 interface 37 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 16 [ 369.760562][ T92] usb 7-1: config 0 interface 37 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 369.802779][ T92] usb 7-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=e1.b6 [ 369.812907][ T92] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.826451][ T92] usb 7-1: Product: syz [ 369.840492][ T92] usb 7-1: Manufacturer: syz [ 369.857662][ T92] usb 7-1: SerialNumber: syz [ 369.878475][ T92] usb 7-1: config 0 descriptor?? [ 369.893330][T10946] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 369.901384][T10946] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 370.311769][T10949] batadv_slave_0: left promiscuous mode [ 370.323636][ T92] usb 7-1: USB disconnect, device number 2 [ 370.720497][ T5911] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 370.760549][ T92] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 370.900454][ T5911] usb 2-1: Using ep0 maxpacket: 16 [ 370.907377][ T5911] usb 2-1: unable to get BOS descriptor or descriptor too short [ 370.919118][ T5911] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 370.928420][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.929640][ T92] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 370.937757][ T5911] usb 2-1: Product: syz [ 370.954165][ T5911] usb 2-1: Manufacturer: syz [ 370.958773][ T5911] usb 2-1: SerialNumber: syz [ 370.977465][ T92] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.989675][ T92] usb 4-1: Product: syz [ 370.993885][ T92] usb 4-1: Manufacturer: syz [ 370.998576][ T92] usb 4-1: SerialNumber: syz [ 371.004651][ T92] usb 4-1: config 0 descriptor?? [ 371.024752][T11024] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 371.139042][T11027] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1236'. [ 371.381197][ T5911] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 371.460076][ T5851] usb 4-1: USB disconnect, device number 32 [ 371.466086][ T5911] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 371.641070][ T5911] usb 2-1: USB disconnect, device number 27 [ 372.183976][T11042] bond1: entered allmulticast mode [ 372.189403][T11042] 8021q: adding VLAN 0 to HW filter on device bond1 [ 372.198780][T11042] bridge0: port 3(bond1) entered blocking state [ 372.205237][T11042] bridge0: port 3(bond1) entered disabled state [ 372.218920][ T30] kauditd_printk_skb: 96 callbacks suppressed [ 372.218955][ T30] audit: type=1400 audit(1755849699.268:2026): avc: denied { read } for pid=11043 comm="syz.1.1240" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 372.220089][T11042] bond1: entered promiscuous mode [ 372.236139][ T30] audit: type=1400 audit(1755849699.268:2027): avc: denied { open } for pid=11043 comm="syz.1.1240" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 372.250284][T11042] bridge0: port 3(bond1) entered blocking state [ 372.284531][T11042] bridge0: port 3(bond1) entered forwarding state [ 372.313193][ T12] bridge0: port 3(bond1) entered disabled state [ 372.406582][T11054] FAULT_INJECTION: forcing a failure. [ 372.406582][T11054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.426379][ T30] audit: type=1400 audit(1755849699.458:2028): avc: denied { create } for pid=11053 comm="syz.3.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 372.451283][ T30] audit: type=1400 audit(1755849699.458:2029): avc: denied { bind } for pid=11053 comm="syz.3.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 372.485210][T11054] CPU: 0 UID: 0 PID: 11054 Comm: syz.3.1242 Not tainted syzkaller #0 PREEMPT(full) [ 372.485235][T11054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 372.485242][T11054] Call Trace: [ 372.485246][T11054] [ 372.485250][T11054] dump_stack_lvl+0x16c/0x1f0 [ 372.485267][T11054] should_fail_ex+0x512/0x640 [ 372.485280][T11054] _copy_to_user+0x32/0xd0 [ 372.485295][T11054] simple_read_from_buffer+0xcb/0x170 [ 372.485307][T11054] proc_fail_nth_read+0x197/0x240 [ 372.485319][T11054] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 372.485330][T11054] ? security_file_permission+0x71/0x210 [ 372.485348][T11054] ? rw_verify_area+0xcf/0x6c0 [ 372.485364][T11054] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 372.485375][T11054] vfs_read+0x1e1/0xcf0 [ 372.485386][T11054] ? __pfx___mutex_lock+0x10/0x10 [ 372.485399][T11054] ? __pfx_vfs_read+0x10/0x10 [ 372.485409][T11054] ? __fget_files+0x204/0x3c0 [ 372.485420][T11054] ? rcu_is_watching+0x12/0xc0 [ 372.485435][T11054] ? __fget_files+0x20e/0x3c0 [ 372.485448][T11054] ksys_read+0x12a/0x250 [ 372.485458][T11054] ? __pfx_ksys_read+0x10/0x10 [ 372.485469][T11054] do_syscall_64+0xcd/0x4c0 [ 372.485481][T11054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.485492][T11054] RIP: 0033:0x7f34c1f8d5fc [ 372.485501][T11054] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 372.485512][T11054] RSP: 002b:00007f34c2eb3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 372.485522][T11054] RAX: ffffffffffffffda RBX: 00007f34c21b5fa0 RCX: 00007f34c1f8d5fc [ 372.485529][T11054] RDX: 000000000000000f RSI: 00007f34c2eb30a0 RDI: 0000000000000004 [ 372.485536][T11054] RBP: 00007f34c2eb3090 R08: 0000000000000000 R09: 0000000000000000 [ 372.485542][T11054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.485551][T11054] R13: 00007f34c21b6038 R14: 00007f34c21b5fa0 R15: 00007ffdc61ab2a8 [ 372.485560][T11054] [ 372.741413][T11057] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1244'. [ 372.890166][T11061] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1243'. [ 372.899224][T11061] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1243'. [ 372.909260][T11061] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1243'. [ 372.918244][T11061] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1243'. [ 373.078262][ T30] audit: type=1400 audit(1755849700.128:2030): avc: denied { ioctl } for pid=11056 comm="syz.3.1244" path="socket:[33558]" dev="sockfs" ino=33558 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 373.114254][ T30] audit: type=1400 audit(1755849700.128:2031): avc: denied { bind } for pid=11056 comm="syz.3.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 373.221709][T11068] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 373.920204][T11068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1247'. [ 373.963186][T11072] batadv_slave_0: entered promiscuous mode [ 374.246302][T11083] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 374.280483][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 374.512579][ T9] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 374.521586][ T9] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 374.549531][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 374.559071][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 374.591631][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 374.605068][ T9] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 374.664414][ T9] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 374.674156][ T9] usb 6-1: Product: syz [ 374.678393][ T9] usb 6-1: Manufacturer: syz [ 374.690000][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 374.700613][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 374.708448][ T9] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 374.737258][ T9] cdc_wdm 6-1:1.0: Unknown control protocol [ 374.807829][T11071] batadv_slave_0: left promiscuous mode [ 374.976579][ T30] audit: type=1400 audit(1755849702.028:2032): avc: denied { read write } for pid=11075 comm="syz.5.1250" name="cdc-wdm0" dev="devtmpfs" ino=3561 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 375.113866][T11105] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 375.113866][T11105] The task syz.5.1250 (11105) triggered the difference, watch for misbehavior. [ 375.268077][T11109] dlm: no local IP address has been set [ 375.396403][T11109] dlm: cannot start dlm midcomms -107 [ 375.406022][ T30] audit: type=1400 audit(1755849702.028:2033): avc: denied { open } for pid=11075 comm="syz.5.1250" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3561 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 375.491843][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 375.498454][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 375.505002][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 375.511590][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 375.517803][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 375.524370][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 375.530659][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 375.537233][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 375.544157][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 375.550740][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 375.557036][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 375.563622][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 375.569848][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 375.576430][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 375.582634][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 375.589198][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 375.595393][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 375.601966][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 375.608187][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 375.614760][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 375.623641][ T5851] usb 6-1: USB disconnect, device number 4 [ 375.629471][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 376.438854][T11123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1259'. [ 376.649197][ T30] audit: type=1400 audit(1755849703.698:2034): avc: denied { kexec_image_load } for pid=11120 comm="syz.2.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 376.712725][T11115] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 376.727145][T11115] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 376.751574][T11115] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 376.757721][T11115] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 376.766058][T11115] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 376.773146][T11115] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 376.779699][T11115] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 376.787176][T11115] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 376.795997][T11115] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 376.875492][T11135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.884253][T11135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.198542][ T5851] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 377.334886][T11149] netlink: 'syz.5.1267': attribute type 10 has an invalid length. [ 377.430574][ T5851] usb 2-1: Using ep0 maxpacket: 16 [ 377.468095][ T5851] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.500206][T11153] tipc: Enabling of bearer rejected, failed to enable media [ 377.509225][ T5851] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.534552][ T5851] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 377.552757][ T5851] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 377.561941][ T5851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.577961][ T5851] usb 2-1: config 0 descriptor?? [ 377.671758][T11158] sp0: Synchronizing with TNC [ 377.810637][T11142] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 377.821205][T11142] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 377.831781][T11142] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 377.838947][T11142] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 377.848092][T11142] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 377.858539][T11140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.867188][T11140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.958285][T11166] netlink: 1836 bytes leftover after parsing attributes in process `syz.6.1270'. [ 378.054209][T11172] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1273'. [ 378.178543][T11174] dlm: no local IP address has been set [ 378.184197][T11174] dlm: cannot start dlm midcomms -107 [ 378.202267][T11173] dlm: no local IP address has been set [ 378.208129][T11173] dlm: cannot start dlm midcomms -107 [ 378.350855][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.357244][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.366564][ T5851] input: HID 0955:7214 Haptics as /devices/virtual/input/input63 [ 378.962599][ T5851] shield 0003:0955:7214.0025: Registered Thunderstrike controller [ 378.986091][ T5851] shield 0003:0955:7214.0025: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 379.052883][ T5851] usb 2-1: USB disconnect, device number 28 [ 379.058905][ T92] shield 0003:0955:7214.0025: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 379.072472][ T92] shield 0003:0955:7214.0025: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 379.104166][ T92] shield 0003:0955:7214.0025: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 379.143235][ T92] shield 0003:0955:7214.0025: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 379.192476][T11186] fuse: Bad value for 'fd' [ 379.223686][T11176] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 379.230586][T11176] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 379.244823][T11176] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 379.251313][T11176] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 379.257270][T11176] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 379.267057][T11185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.290594][T11185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.330921][T11191] IPVS: set_ctl: invalid protocol: 255 0.0.0.0:20000 [ 379.372796][T11193] dlm: no local IP address has been set [ 379.380580][T11193] dlm: cannot start dlm midcomms -107 [ 379.436654][T11185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.445204][T11185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.518624][T11197] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1277'. [ 379.544560][T11196] overlayfs: failed to get inode (-116) [ 379.554889][T11196] overlayfs: failed to get inode (-116) [ 380.317903][T11210] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1283'. [ 380.534068][ T30] audit: type=1400 audit(1755849707.358:2035): avc: denied { mounton } for pid=11204 comm="syz.6.1283" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 380.567560][ T30] audit: type=1400 audit(1755849707.388:2036): avc: denied { getopt } for pid=11204 comm="syz.6.1283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 380.591078][ T30] audit: type=1400 audit(1755849707.388:2037): avc: denied { mount } for pid=11204 comm="syz.6.1283" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 381.000559][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 381.107832][T11219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1285'. [ 381.167887][T11224] syzkaller1: entered allmulticast mode [ 381.182362][T11224] block device autoloading is deprecated and will be removed. [ 381.195180][T11226] netlink: 'syz.1.1288': attribute type 10 has an invalid length. [ 381.219099][T11224] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(14) [ 381.225723][T11224] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 381.238849][T11224] vhci_hcd vhci_hcd.0: Device attached [ 381.268711][T11228] vhci_hcd: connection closed [ 381.268859][ T9771] vhci_hcd: stop threads [ 381.281294][ T9771] vhci_hcd: release socket [ 381.289793][ T9771] vhci_hcd: disconnect device [ 381.294613][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 381.294645][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout [ 381.294666][ T5845] Bluetooth: hci4: command 0x0c1a tx timeout [ 381.294686][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout [ 381.320771][ T5851] libceph: connect (1)[c::]:6789 error -101 [ 381.350693][ T5851] libceph: mon0 (1)[c::]:6789 connect error [ 381.360988][ T5851] libceph: connect (1)[c::]:6789 error -101 [ 381.366980][ T5851] libceph: mon0 (1)[c::]:6789 connect error [ 381.620755][ T92] libceph: connect (1)[c::]:6789 error -101 [ 381.626740][ T5851] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 381.634356][ T92] libceph: mon0 (1)[c::]:6789 connect error [ 381.640832][ T92] libceph: connect (1)[c::]:6789 error -101 [ 381.648005][ T92] libceph: mon0 (1)[c::]:6789 connect error [ 381.880521][ T5851] usb 6-1: Using ep0 maxpacket: 16 [ 381.890121][ T5851] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.906147][ T5851] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.918450][ T5851] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 381.931832][ T5851] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 381.941343][ T5851] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.950246][ T5851] usb 6-1: config 0 descriptor?? [ 382.057971][ T30] audit: type=1400 audit(1755849709.108:2038): avc: denied { setattr } for pid=11248 comm="syz.3.1294" name="" dev="pipefs" ino=34797 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 382.084279][T11231] ceph: No mds server is up or the cluster is laggy [ 382.095942][T11234] ceph: No mds server is up or the cluster is laggy [ 382.158109][T11238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.167794][T11238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.237714][ T5904] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 382.267593][ T5904] hid-generic 0000:0000:0000.0026: hidraw0: HID v0.00 Device [syz1] on syz0 [ 382.291857][T11266] dlm: no local IP address has been set [ 382.297554][T11266] dlm: cannot start dlm midcomms -107 [ 382.410911][ T5851] input: HID 0955:7214 Haptics as /devices/virtual/input/input64 [ 382.432248][T11270] qrtr: Invalid version 0 [ 382.491376][ T5851] shield 0003:0955:7214.0027: Registered Thunderstrike controller [ 382.660766][T11272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.669717][T11272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.688996][ T30] audit: type=1400 audit(1755849709.658:2039): avc: denied { name_bind } for pid=11267 comm="syz.2.1299" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 382.758102][ T5851] shield 0003:0955:7214.0027: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 382.775224][ T30] audit: type=1400 audit(1755849709.827:2040): avc: denied { write } for pid=11257 comm="syz.3.1296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 382.922505][ T9] shield 0003:0955:7214.0027: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 382.933974][ T5851] usb 6-1: USB disconnect, device number 5 [ 382.943350][ T9] shield 0003:0955:7214.0027: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 382.979644][ T9] shield 0003:0955:7214.0027: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 382.999688][ T9] shield 0003:0955:7214.0027: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 383.360809][ T5856] Bluetooth: hci0: command 0x0c1a tx timeout [ 383.367343][ T5856] Bluetooth: hci3: command 0x0c1a tx timeout [ 383.706029][ T30] audit: type=1400 audit(1755849710.757:2041): avc: denied { append } for pid=11282 comm="syz.5.1303" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 383.802324][T11286] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 383.879798][T11287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1304'. [ 384.232071][T11295] netlink: 1836 bytes leftover after parsing attributes in process `syz.3.1307'. [ 384.376157][ T30] audit: type=1400 audit(1755849710.787:2042): avc: denied { map } for pid=11282 comm="syz.5.1303" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 384.420891][ T30] audit: type=1400 audit(1755849710.787:2043): avc: denied { write execute } for pid=11282 comm="syz.5.1303" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 384.464225][ T30] audit: type=1400 audit(1755849711.187:2044): avc: denied { remount } for pid=11288 comm="syz.3.1306" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 384.544989][T11303] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 384.650749][T11303] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 384.848718][T11310] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1310'. [ 384.857926][T11310] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1310'. [ 384.869667][T11310] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1310'. [ 384.878657][T11310] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1310'. [ 385.106117][T11314] batadv_slave_0: entered promiscuous mode [ 385.223399][T11319] dlm: no local IP address has been set [ 385.229071][T11319] dlm: cannot start dlm midcomms -107 [ 385.456509][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 385.462615][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout [ 385.985535][T11313] batadv_slave_0: left promiscuous mode [ 386.221018][T11341] vxfs: WRONG superblock magic 00000000 at 1 [ 386.227772][T11341] vxfs: WRONG superblock magic 00000000 at 8 [ 386.233919][T11341] vxfs: can't find superblock. [ 386.769599][T11339] ceph: No mds server is up or the cluster is laggy [ 387.112116][T11354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.163105][T11354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.211506][T11359] veth1_to_bond: entered allmulticast mode [ 387.286798][T11359] veth1_to_bond: left allmulticast mode [ 387.293662][T11363] qrtr: Invalid version 0 [ 387.643468][T11384] sctp: [Deprecated]: syz.6.1326 (pid 11384) Use of struct sctp_assoc_value in delayed_ack socket option. [ 387.643468][T11384] Use struct sctp_sack_info instead [ 387.666599][T11384] netlink: 'syz.6.1326': attribute type 12 has an invalid length. [ 387.677784][T11384] netlink: 9472 bytes leftover after parsing attributes in process `syz.6.1326'. [ 387.690515][ T1208] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 387.922922][ T1208] usb 6-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 388.025669][ T1208] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 388.480031][ T1208] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.528591][ T1208] aiptek 6-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 388.642252][T11413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1331'. [ 388.659497][T11413] netlink: 1836 bytes leftover after parsing attributes in process `syz.2.1331'. [ 388.743642][ T1208] usb 6-1: USB disconnect, device number 6 [ 388.796823][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 388.796839][ T30] audit: type=1400 audit(1755849715.847:2046): avc: denied { getopt } for pid=11419 comm="syz.2.1333" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 389.002528][ T5851] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 389.250408][ T5851] usb 4-1: Using ep0 maxpacket: 16 [ 389.312303][T11435] netlink: 'syz.1.1335': attribute type 10 has an invalid length. [ 389.685065][ T5851] usb 4-1: unable to get BOS descriptor or descriptor too short [ 389.728820][ T5851] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 389.736470][ T30] audit: type=1326 audit(1755849716.787:2047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11440 comm="syz.1.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08fb8ebe9 code=0x7ffc0000 [ 389.767670][ T30] audit: type=1326 audit(1755849716.817:2048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11440 comm="syz.1.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08fb8ebe9 code=0x7ffc0000 [ 389.793309][ T30] audit: type=1326 audit(1755849716.817:2049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11440 comm="syz.1.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fd08fb8ebe9 code=0x7ffc0000 [ 389.816847][ C1] vkms_vblank_simulate: vblank timer overrun [ 389.827003][ T5851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.841841][ T30] audit: type=1326 audit(1755849716.817:2050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11440 comm="syz.1.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08fb8ebe9 code=0x7ffc0000 [ 389.865312][ C1] vkms_vblank_simulate: vblank timer overrun [ 389.872745][ T30] audit: type=1326 audit(1755849716.817:2051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11440 comm="syz.1.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fd08fb8ebe9 code=0x7ffc0000 [ 389.922255][T11445] netlink: 'syz.5.1340': attribute type 2 has an invalid length. [ 389.953541][ T30] audit: type=1326 audit(1755849716.817:2052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11440 comm="syz.1.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08fb8ebe9 code=0x7ffc0000 [ 389.953644][ T5851] usb 4-1: Product: syz [ 389.980064][ T30] audit: type=1326 audit(1755849716.817:2053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11440 comm="syz.1.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fd08fb8ebe9 code=0x7ffc0000 [ 390.005028][ T5851] usb 4-1: Manufacturer: syz [ 390.005049][ T5851] usb 4-1: SerialNumber: syz [ 390.022220][ T30] audit: type=1326 audit(1755849716.817:2054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11440 comm="syz.1.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08fb8ebe9 code=0x7ffc0000 [ 390.082356][T11434] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 390.094070][T11451] tipc: Started in network mode [ 390.099006][ T30] audit: type=1326 audit(1755849716.817:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11440 comm="syz.1.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd08fb8d550 code=0x7ffc0000 [ 390.123705][T11451] tipc: Node identity 0000000000005f120000000000000001, cluster identity 4711 [ 390.131828][T11434] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 390.134925][T11451] tipc: Enabling of bearer rejected, failed to enable media [ 390.148004][T11434] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 390.162812][T11434] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 390.413469][T11434] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 390.452366][ T5851] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 390.489838][ T5851] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 390.528434][T11464] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1344'. [ 390.530718][ T5851] usb 4-1: USB disconnect, device number 33 [ 390.546093][T11464] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 390.582288][ T5860] udevd[5860]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 390.651727][ T92] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 390.670977][ T92] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 390.679656][ T92] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 390.687370][ T92] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 390.694857][ T5955] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 390.702910][ T92] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 390.713193][ T92] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 390.721201][ T92] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 390.739704][ T92] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 390.748636][ T92] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 390.756270][ T92] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 390.767080][ T92] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.03 Device [syz1] on syz1 [ 390.848010][T11480] fido_id[11480]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 390.875045][ T5955] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 390.884735][T11485] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1348'. [ 390.885902][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.913781][ T5955] usb 2-1: Product: syz [ 390.918064][ T5955] usb 2-1: Manufacturer: syz [ 390.926787][ T5955] usb 2-1: SerialNumber: syz [ 390.934604][ T5955] usb 2-1: config 0 descriptor?? [ 391.015204][ T5851] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 391.190331][ T5851] usb 7-1: Using ep0 maxpacket: 32 [ 391.269200][ T5851] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 391.274116][ T5959] usb 2-1: USB disconnect, device number 29 [ 391.371220][ T5851] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.424678][ T5851] usb 7-1: config 0 descriptor?? [ 391.450457][ T5851] as10x_usb: device has been detected [ 391.457668][ T5851] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 391.479594][ T5851] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 391.535587][ T5851] as10x_usb: error during firmware upload part1 [ 391.561131][ T5851] Registered device nBox DVB-T Dongle [ 391.580483][ T92] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 391.648521][ T5959] usb 7-1: USB disconnect, device number 3 [ 391.663201][ T5959] Unregistered device nBox DVB-T Dongle [ 391.664094][ T5959] as10x_usb: device has been disconnected [ 391.740418][ T92] usb 6-1: Using ep0 maxpacket: 32 [ 391.760732][ T5856] Bluetooth: hci1: command 0x0c1a tx timeout [ 391.792745][ T92] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 391.811459][T11517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1352'. [ 391.820628][T11517] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1352'. [ 391.830794][T11517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1352'. [ 391.839700][T11517] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1352'. [ 391.997600][ T92] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 392.011776][ T92] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 392.047698][ T92] usb 6-1: Product: syz [ 392.150702][ T92] usb 6-1: Manufacturer: syz [ 392.160534][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout [ 392.166659][ T5856] Bluetooth: hci4: command 0x0c1a tx timeout [ 392.166855][ T92] usb 6-1: SerialNumber: syz [ 392.240455][ T5856] Bluetooth: hci0: command 0x0c1a tx timeout [ 392.321563][ T92] usb 6-1: config 0 descriptor?? [ 392.329443][T11495] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 392.354776][ T92] hub 6-1:0.0: bad descriptor, ignoring hub [ 392.380309][ T92] hub 6-1:0.0: probe with driver hub failed with error -5 [ 392.480616][ T5856] Bluetooth: hci3: command 0x0c1a tx timeout [ 392.753008][T11532] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1358'. [ 392.840215][T11532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1358'. [ 393.342475][T11550] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 393.413808][T11557] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1361'. [ 393.628223][T11562] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1364'. [ 393.835364][T11566] fuse: Bad value for 'fd' [ 393.930435][ T5911] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 394.110834][ T5911] usb 2-1: Using ep0 maxpacket: 32 [ 394.131856][ T5911] usb 2-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=6d.c8 [ 394.150455][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.169950][ T5911] usb 2-1: config 0 descriptor?? [ 394.184707][ T5911] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 394.200433][ T5911] gspca_mr97310a: reg write [21] error -22 [ 394.212808][ T5911] mr97310a 2-1:0.0: probe with driver mr97310a failed with error -22 [ 394.410539][ T92] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 394.487807][T11582] netlink: 'syz.3.1370': attribute type 10 has an invalid length. [ 394.617902][T11536] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 394.632893][ T92] usb 7-1: Using ep0 maxpacket: 32 [ 394.668521][ T92] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 394.689648][ T92] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 394.713560][ T92] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.724898][ T92] usb 7-1: Product: syz [ 394.729120][ T92] usb 7-1: Manufacturer: syz [ 394.734201][ T92] usb 7-1: SerialNumber: syz [ 394.740034][ T92] usb 7-1: config 0 descriptor?? [ 394.957610][ T5955] usb 7-1: USB disconnect, device number 4 [ 395.079764][T11590] dlm: no local IP address has been set [ 395.079781][T11590] dlm: cannot start dlm midcomms -107 [ 395.775355][T11594] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 395.886078][T11595] __nla_validate_parse: 1 callbacks suppressed [ 395.886126][T11595] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1374'. [ 396.249109][ T5904] hid (null): unknown global tag 0xd [ 396.254637][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 396.254652][ T30] audit: type=1400 audit(1755849723.307:2102): avc: denied { accept } for pid=11600 comm="syz.2.1376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 396.257836][T11601] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1376'. [ 396.277497][ T5904] hid_parser_main: 73 callbacks suppressed [ 396.277513][ T5904] hid-generic FFFF:0004:0001.0029: unknown main item tag 0x3 [ 396.336143][T11601] batadv_slave_1: entered promiscuous mode [ 396.355194][T11601] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1376'. [ 396.368173][ T5904] hid-generic FFFF:0004:0001.0029: unknown global tag 0xd [ 396.381851][T11601] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1376'. [ 396.416702][ T5904] hid-generic FFFF:0004:0001.0029: item 0 1 1 13 parsing failed [ 396.516623][ T5904] hid-generic FFFF:0004:0001.0029: probe with driver hid-generic failed with error -22 [ 396.650799][ T5955] usb 2-1: USB disconnect, device number 30 [ 396.672297][T11610] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 396.697967][T11612] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1379'. [ 396.705402][T11608] lo speed is unknown, defaulting to 1000 [ 396.721549][T11610] qnx6: wrong signature (magic) in superblock #1. [ 396.741441][T11610] qnx6: unable to read the first superblock [ 396.765549][T11612] 8021q: adding VLAN 0 to HW filter on device bond2 [ 396.796395][T11612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1379'. [ 397.113098][ T5851] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 397.242090][ T9] usb 6-1: USB disconnect, device number 7 [ 397.320861][ T5851] usb 2-1: Using ep0 maxpacket: 8 [ 397.327590][ T5851] usb 2-1: too many configurations: 10, using maximum allowed: 8 [ 397.352745][ T5851] usb 2-1: New USB device found, idVendor=00bb, idProduct=0da4, bcdDevice=6a.6b [ 397.372141][ T5851] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.381134][ T5851] usb 2-1: Product: syz [ 397.385856][ T5851] usb 2-1: Manufacturer: syz [ 397.391900][ T5851] usb 2-1: SerialNumber: syz [ 397.413261][ T5851] usb 2-1: config 0 descriptor?? [ 397.648553][ T5911] usb 2-1: USB disconnect, device number 31 [ 397.865773][T11651] lo speed is unknown, defaulting to 1000 [ 397.889472][T11653] dlm: no local IP address has been set [ 397.895313][T11653] dlm: cannot start dlm midcomms -107 [ 398.733050][T11673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.750946][T11673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.918702][T11677] FAULT_INJECTION: forcing a failure. [ 398.918702][T11677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 398.931816][T11677] CPU: 1 UID: 0 PID: 11677 Comm: syz.6.1396 Not tainted syzkaller #0 PREEMPT(full) [ 398.931839][T11677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 398.931849][T11677] Call Trace: [ 398.931855][T11677] [ 398.931861][T11677] dump_stack_lvl+0x16c/0x1f0 [ 398.931884][T11677] should_fail_ex+0x512/0x640 [ 398.931907][T11677] _copy_to_user+0x32/0xd0 [ 398.931930][T11677] simple_read_from_buffer+0xcb/0x170 [ 398.931951][T11677] proc_fail_nth_read+0x197/0x240 [ 398.931971][T11677] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 398.931990][T11677] ? security_file_permission+0x71/0x210 [ 398.932017][T11677] ? rw_verify_area+0xcf/0x6c0 [ 398.932044][T11677] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 398.932064][T11677] vfs_read+0x1e1/0xcf0 [ 398.932087][T11677] ? __pfx___sys_recvfrom+0x10/0x10 [ 398.932104][T11677] ? __pfx___mutex_lock+0x10/0x10 [ 398.932125][T11677] ? __pfx_vfs_read+0x10/0x10 [ 398.932142][T11677] ? __fget_files+0x204/0x3c0 [ 398.932160][T11677] ? rcu_is_watching+0x12/0xc0 [ 398.932184][T11677] ? __fget_files+0x20e/0x3c0 [ 398.932206][T11677] ksys_read+0x12a/0x250 [ 398.932222][T11677] ? __pfx_ksys_read+0x10/0x10 [ 398.932243][T11677] do_syscall_64+0xcd/0x4c0 [ 398.932262][T11677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.932280][T11677] RIP: 0033:0x7f5cb818d5fc [ 398.932294][T11677] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 398.932311][T11677] RSP: 002b:00007f5cb63b4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 398.932329][T11677] RAX: ffffffffffffffda RBX: 00007f5cb83b6180 RCX: 00007f5cb818d5fc [ 398.932342][T11677] RDX: 000000000000000f RSI: 00007f5cb63b40a0 RDI: 0000000000000007 [ 398.932352][T11677] RBP: 00007f5cb63b4090 R08: 0000000000000000 R09: 0000000000000000 [ 398.932363][T11677] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000001 [ 398.932373][T11677] R13: 00007f5cb83b6218 R14: 00007f5cb83b6180 R15: 00007ffc1f63e808 [ 398.932391][T11677] [ 399.138829][ C1] vkms_vblank_simulate: vblank timer overrun [ 399.543507][T11690] netlink: 172 bytes leftover after parsing attributes in process `syz.5.1400'. [ 399.926214][T11698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1403'. [ 399.935201][T11698] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1403'. [ 399.952804][T11698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1403'. [ 401.352316][T11730] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 401.650858][T11737] __nla_validate_parse: 2 callbacks suppressed [ 401.650876][T11737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1413'. [ 401.906654][T11744] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0 [ 401.970693][ T5911] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 402.200449][ T5911] usb 7-1: Using ep0 maxpacket: 16 [ 402.215499][ T5911] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 402.229456][ T5911] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 402.274651][ T5911] usb 7-1: Product: syz [ 402.284288][ T5911] usb 7-1: Manufacturer: syz [ 402.294842][ T5911] usb 7-1: SerialNumber: syz [ 402.307296][ T5911] usb 7-1: config 0 descriptor?? [ 402.404351][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 402.562108][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 402.572964][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.584145][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.600464][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 402.613514][ T9] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 402.618939][T11731] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1412'. [ 402.622951][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.647144][ T9] usb 6-1: config 0 descriptor?? [ 403.058482][T11752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.068811][T11731] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1412'. [ 403.078036][T11752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.222318][ T8081] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.238007][ T8081] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.295172][ T9] input: HID 0955:7214 Haptics as /devices/virtual/input/input66 [ 403.329171][ T9] shield 0003:0955:7214.002A: Registered Thunderstrike controller [ 403.338728][ T9] shield 0003:0955:7214.002A: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 403.417325][T11776] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 403.417866][ T8081] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.440050][ T8081] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.454285][ T30] audit: type=1326 audit(1755849730.507:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11777 comm="syz.3.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c1f8ebe9 code=0x7ffc0000 [ 403.522043][T11778] No control pipe specified [ 403.561421][T11776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1430'. [ 403.595252][ T5904] usb 6-1: USB disconnect, device number 8 [ 403.610468][ T5955] shield 0003:0955:7214.002A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 403.636556][ T5955] shield 0003:0955:7214.002A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 403.647718][ T30] audit: type=1326 audit(1755849730.507:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11777 comm="syz.3.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c1f8ebe9 code=0x7ffc0000 [ 403.730032][ T8081] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.745087][ T5955] shield 0003:0955:7214.002A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 403.761534][ T8081] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.822816][ T5955] shield 0003:0955:7214.002A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 403.827643][ T30] audit: type=1326 audit(1755849730.537:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11777 comm="syz.3.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f34c1f8ebe9 code=0x7ffc0000 [ 403.861877][ T30] audit: type=1326 audit(1755849730.557:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11777 comm="syz.3.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c1f8ebe9 code=0x7ffc0000 [ 403.913947][ T30] audit: type=1326 audit(1755849730.557:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11777 comm="syz.3.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c1f8ebe9 code=0x7ffc0000 [ 403.954637][ T8081] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.971805][ T8081] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.991710][ T30] audit: type=1326 audit(1755849730.577:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11777 comm="syz.3.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f34c1f8ebe9 code=0x7ffc0000 [ 404.017001][ T30] audit: type=1326 audit(1755849730.577:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11777 comm="syz.3.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c1f8ebe9 code=0x7ffc0000 [ 404.066243][ T30] audit: type=1326 audit(1755849730.577:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11777 comm="syz.3.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c1f8ebe9 code=0x7ffc0000 [ 404.094024][ T30] audit: type=1326 audit(1755849730.577:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11777 comm="syz.3.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f34c1f8ebe9 code=0x7ffc0000 [ 404.193618][ T30] audit: type=1326 audit(1755849730.637:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11777 comm="syz.3.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c1f8ebe9 code=0x7ffc0000 [ 404.247832][ T8081] bridge0: port 3(team0) entered disabled state [ 404.301603][ T8081] bridge_slave_1: left allmulticast mode [ 404.324052][ T8081] bridge_slave_1: left promiscuous mode [ 404.333164][T11793] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 404.350597][ T8081] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.364976][ T9] usb 7-1: USB disconnect, device number 5 [ 404.415844][T11795] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1435'. [ 404.514568][ T8081] bridge_slave_0: left allmulticast mode [ 404.523310][ T8081] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.554172][T11797] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1436'. [ 404.773435][ T8081] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 404.783779][ T8081] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 404.807199][ T8081] bond0 (unregistering): Released all slaves [ 404.900426][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 405.075101][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 405.095006][ T9] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 405.126720][ T9] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 405.173414][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 405.433761][ T9] usb 7-1: config 1 has no interface number 0 [ 405.439879][ T9] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 405.468667][ T9] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 405.482258][ T9] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 405.510489][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.716069][ T9] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 405.870679][ T92] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 405.921083][ T9] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now attached [ 406.021740][ T92] usb 4-1: Using ep0 maxpacket: 16 [ 406.080539][ T5904] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 406.120651][ T8081] hsr_slave_0: left promiscuous mode [ 406.124048][ T92] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.214487][ T8081] hsr_slave_1: left promiscuous mode [ 406.223444][ T92] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.230605][ T8081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.249770][ T92] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 406.261965][ T8081] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.267673][ T92] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 406.279319][ T92] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.288689][ T8081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.303728][ T92] usb 4-1: config 0 descriptor?? [ 406.307971][ T8081] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.329247][ T8081] veth1_macvtap: left promiscuous mode [ 406.336274][ T8081] veth0_macvtap: left promiscuous mode [ 406.344588][ T8081] veth1_vlan: left promiscuous mode [ 406.349928][ T8081] veth0_vlan: left promiscuous mode [ 406.361967][ T5904] usb 6-1: Using ep0 maxpacket: 16 [ 406.371589][ T5904] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 406.382129][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 406.390701][ T5904] usb 6-1: Product: syz [ 406.394949][ T5904] usb 6-1: Manufacturer: syz [ 406.399603][ T5904] usb 6-1: SerialNumber: syz [ 406.415017][ T5904] usb 6-1: config 0 descriptor?? [ 406.476441][ T8081] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN NOPTI [ 406.488536][ T8081] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007] [ 406.498070][ T8081] CPU: 0 UID: 0 PID: 8081 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 406.507605][ T8081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 406.517655][ T8081] Workqueue: netns cleanup_net [ 406.522407][ T8081] RIP: 0010:mld_clear_delrec+0x2f0/0x6d0 [ 406.528025][ T8081] Code: 20 00 0f 85 b4 03 00 00 49 8b 5d 28 49 c7 45 28 00 00 00 00 48 85 db 75 37 e9 d4 00 00 00 e8 b7 5b 71 f7 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 0f 85 70 03 00 00 48 8b 2b 48 8d 7b 30 48 89 de e8 [ 406.547630][ T8081] RSP: 0018:ffffc9000ac6f5c8 EFLAGS: 00010206 [ 406.553678][ T8081] RAX: 000000001fffe000 RBX: 00000000ffff0000 RCX: ffffffff8a4a307b [ 406.561629][ T8081] RDX: ffff88802d334880 RSI: ffffffff8a4a3039 RDI: 0000000000000005 [ 406.569581][ T8081] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 406.577623][ T8081] R10: 0000000000000000 R11: 0000000000002c10 R12: dffffc0000000000 [ 406.585573][ T8081] R13: ffff888056b75400 R14: ffff888052ca2000 R15: dffffc0000000000 [ 406.593523][ T8081] FS: 0000000000000000(0000) GS:ffff8881246bc000(0000) knlGS:0000000000000000 [ 406.602433][ T8081] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 406.608996][ T8081] CR2: 000055fb69b99da8 CR3: 0000000059e8e000 CR4: 00000000003526f0 [ 406.616968][ T8081] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 406.625002][ T8081] DR3: 00000000000032e7 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 406.632956][ T8081] Call Trace: [ 406.636214][ T8081] [ 406.639133][ T8081] ipv6_mc_destroy_dev+0x49/0x690 [ 406.644162][ T8081] ? addrconf_ifdown.isra.0+0x13f8/0x1aa0 [ 406.649878][ T8081] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 406.655863][ T8081] addrconf_ifdown.isra.0+0x1400/0x1aa0 [ 406.661420][ T8081] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 406.667301][ T8081] ? tls_dev_event+0xfd/0x10b0 [ 406.672067][ T8081] ? net_generic+0xea/0x2a0 [ 406.676548][ T8081] ? rcu_is_watching+0x12/0xc0 [ 406.681308][ T8081] ? __pfx_tls_dev_event+0x10/0x10 [ 406.686414][ T8081] addrconf_notify+0x220/0x19e0 [ 406.691264][ T8081] ? ip6mr_device_event+0x1bc/0x230 [ 406.696457][ T8081] notifier_call_chain+0xb9/0x410 [ 406.701476][ T8081] ? __pfx_addrconf_notify+0x10/0x10 [ 406.706742][ T8081] call_netdevice_notifiers_info+0xbe/0x140 [ 406.712672][ T8081] unregister_netdevice_many_notify+0xf76/0x24c0 [ 406.719015][ T8081] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 406.725786][ T8081] ? unregister_netdevice_queue+0x22e/0x3f0 [ 406.731665][ T8081] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 406.737977][ T8081] ? batadv_meshif_destroy_vlan+0xdf/0x160 [ 406.743773][ T8081] default_device_exit_batch+0x853/0xaf0 [ 406.749389][ T8081] ? __pfx_default_device_exit_batch+0x10/0x10 [ 406.755537][ T8081] ? __pfx___might_resched+0x10/0x10 [ 406.760813][ T8081] ? __pfx_default_device_exit_batch+0x10/0x10 [ 406.767145][ T8081] ops_undo_list+0x360/0xab0 [ 406.771748][ T8081] ? __pfx_ops_undo_list+0x10/0x10 [ 406.776970][ T8081] ? cleanup_net+0x334/0x890 [ 406.781546][ T8081] ? lock_release+0x201/0x2f0 [ 406.786209][ T8081] ? idr_destroy+0x62/0x2e0 [ 406.790702][ T8081] cleanup_net+0x408/0x890 [ 406.795115][ T8081] ? __pfx_cleanup_net+0x10/0x10 [ 406.800118][ T8081] ? lock_acquire+0x2cd/0x350 [ 406.804778][ T8081] ? rcu_is_watching+0x12/0xc0 [ 406.809544][ T8081] process_one_work+0x9cf/0x1b70 [ 406.814481][ T8081] ? __pfx_batadv_mcast_mla_update+0x10/0x10 [ 406.820444][ T8081] ? __pfx_process_one_work+0x10/0x10 [ 406.825794][ T8081] ? assign_work+0x1a0/0x250 [ 406.830399][ T8081] worker_thread+0x6c8/0xf10 [ 406.834990][ T8081] ? __kthread_parkme+0x19e/0x250 [ 406.840003][ T8081] ? __pfx_worker_thread+0x10/0x10 [ 406.845114][ T8081] kthread+0x3c2/0x780 [ 406.849169][ T8081] ? __pfx_kthread+0x10/0x10 [ 406.853743][ T8081] ? ret_from_fork+0x25/0x6f0 [ 406.858399][ T8081] ? rcu_is_watching+0x12/0xc0 [ 406.863144][ T8081] ? rcu_is_watching+0x12/0xc0 [ 406.867886][ T8081] ? __pfx_kthread+0x10/0x10 [ 406.872461][ T8081] ret_from_fork+0x5d7/0x6f0 [ 406.877031][ T8081] ? __pfx_kthread+0x10/0x10 [ 406.881595][ T8081] ret_from_fork_asm+0x1a/0x30 [ 406.886353][ T8081] [ 406.889347][ T8081] Modules linked in: [ 406.893679][ T8081] ---[ end trace 0000000000000000 ]--- [ 406.918514][T11854] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 406.938966][T11854] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 406.954462][T11854] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 406.972481][T11854] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 406.978573][T11854] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 406.988903][ T9] snd_usb_pod 7-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 406.989238][T11835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.007883][T11835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.015940][T11844] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1447'. [ 407.024891][T11844] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1447'. [ 407.046083][ T8081] RIP: 0010:mld_clear_delrec+0x2f0/0x6d0 [ 407.052550][ T8081] Code: 20 00 0f 85 b4 03 00 00 49 8b 5d 28 49 c7 45 28 00 00 00 00 48 85 db 75 37 e9 d4 00 00 00 e8 b7 5b 71 f7 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 0f 85 70 03 00 00 48 8b 2b 48 8d 7b 30 48 89 de e8 [ 407.072464][ T8081] RSP: 0018:ffffc9000ac6f5c8 EFLAGS: 00010206 [ 407.078668][ T8081] RAX: 000000001fffe000 RBX: 00000000ffff0000 RCX: ffffffff8a4a307b [ 407.086976][ T8081] RDX: ffff88802d334880 RSI: ffffffff8a4a3039 RDI: 0000000000000005 [ 407.095083][ T8081] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 407.103997][ T8081] R10: 0000000000000000 R11: 0000000000002c10 R12: dffffc0000000000 [ 407.112112][ T8081] R13: ffff888056b75400 R14: ffff888052ca2000 R15: dffffc0000000000 [ 407.120098][ T8081] FS: 0000000000000000(0000) GS:ffff8881247bc000(0000) knlGS:0000000000000000 [ 407.129070][ T8081] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 407.136180][ T8081] CR2: 0000000000000000 CR3: 00000000582cb000 CR4: 00000000003526f0 [ 407.144298][ T8081] Kernel panic - not syncing: Fatal exception [ 407.150565][ T8081] Kernel Offset: disabled [ 407.154870][ T8081] Rebooting in 86400 seconds..