last executing test programs: 3m33.996177308s ago: executing program 2 (id=139): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) io_setup(0x5, &(0x7f0000000e80)=0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x2000000}) io_submit(r0, 0x1, &(0x7f0000001580)=[&(0x7f0000000180)={0x0, 0xeffd, 0x0, 0x7, 0x0, r1, 0x0}]) 3m33.751533552s ago: executing program 2 (id=140): openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x8000) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r0 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) bind$alg(r0, &(0x7f0000001140)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000001080)='\b', 0x1, 0x48000, 0x0, 0x0) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x84}}, 0x0) (async) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, 0x0, &(0x7f00000001c0)) syz_open_dev$amidi(&(0x7f0000000480), 0x2, 0x80042) (async, rerun: 64) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async, rerun: 64) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) (rerun: 64) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x303}, "0400", "0d07080d004fcf0000e8ffff1a8600", "cf0d00", "8657e2b7e43b34e4"}, 0x28) (async) write$binfmt_script(r4, &(0x7f0000001300), 0x8f) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000740)=0x40) writev(r4, &(0x7f00000030c0)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) (async, rerun: 64) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 64) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40) writev(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0x1}], 0x1) (async, rerun: 32) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010200000000000000000000000005000100070000000900020073797a300000000005000500020000001400078005001500020000000800124000000000050004000000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xf}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) (async) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c0007801800018014000240"], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) (async, rerun: 32) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 32) 3m33.476326544s ago: executing program 2 (id=142): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/kexec_crash_loaded', 0x101600, 0x8) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r2 = socket$inet6(0xa, 0x6, 0x5e) r3 = syz_open_dev$media(&(0x7f0000000040), 0x200, 0x412802) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 0', 0x1b) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000080)) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000000)={0x80000000, 0xc}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$x25(r1, &(0x7f00000000c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) 3m33.21618935s ago: executing program 2 (id=143): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x22020600) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000001340)={0x2020}, 0x2020) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x1c}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000230000"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 3m29.180702367s ago: executing program 2 (id=154): syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) request_key(&(0x7f0000000480)='keyring\x00', 0x0, 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc1105511, &(0x7f00000000c0)={{0xb}, 0x0, [0x4, 0x0, 0x0, 0x0, 0x7, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa8, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0xc232]}) sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x2, 0x2}, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2000000c}, 0x0) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000000)={0xffffffffffffffff, 0x6, 0x3672, 'e'}) 3m28.785203938s ago: executing program 2 (id=158): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = gettid() signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x20, 0x7fc00100}]}) socket$kcm(0xa, 0x0, 0x87) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0x10030, 0xffffffffffffffff, 0x2533e000) prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000000c0)={0x0, 0x3, r3, 0x3}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', r5, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m28.667651099s ago: executing program 32 (id=158): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = gettid() signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x20, 0x7fc00100}]}) socket$kcm(0xa, 0x0, 0x87) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0x10030, 0xffffffffffffffff, 0x2533e000) prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000000c0)={0x0, 0x3, r3, 0x3}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', r5, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 11.628052164s ago: executing program 0 (id=1001): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00ff001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000140012800b00010067656e65766500000400028008000a00", @ANYRES32], 0x3c}}, 0x0) 11.526133343s ago: executing program 0 (id=1002): syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00"], 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) setsockopt$sock_int(r5, 0x1, 0x13, &(0x7f0000000000)=0xfffff000, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x2, 0x0, 0x8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x14, 0x5a, 0xc6b747b6bf1c6b95, 0x70bd29}, 0x14}}, 0x4040) ioctl$SIOCSIFHWADDR(r0, 0x89f2, &(0x7f0000000900)={'ip6gre0\x00', @random='\x00\x00\x00 \x00'}) r8 = socket(0xb, 0x4, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x24}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f00000001c0)={0x5, 0x5, 0x3, 0x3}, 0x10) 10.051389226s ago: executing program 0 (id=1016): syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b", @ANYRES64], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file3\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r3, 0x0, 0xa0028000}, 0x38) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x4da4f7a6330322ce, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r7}, 0x10) 5.729469747s ago: executing program 0 (id=1025): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x801) syz_init_net_socket$ax25(0x3, 0x5, 0xcd) (async) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xcd) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000140)={0x2, 0x7, [{0x8001, 0x0, 0x1303}, {0x6, 0x0, 0x2}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x300, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004040}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ppoll(&(0x7f0000000300)=[{r5, 0x4400}, {r3, 0x20}], 0x2, &(0x7f0000000340)={0x77359400}, &(0x7f0000000380)={[0x6]}, 0x8) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x14000000}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xd}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x804}, 0x1000) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) syz_open_dev$MSR(&(0x7f0000000500), 0x8000000000000000, 0x0) accept$ax25(r5, 0x0, &(0x7f0000000540)) (async) r6 = accept$ax25(r5, 0x0, &(0x7f0000000540)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7925, 0x8, &(0x7f0000000580)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f00000005c0)={0x7, 0x3, 0x3, "96860f1cf36c3b7b2076ce267bba80b8e884707f90db8e42471dc4dd8d30f0dc", 0x52424752}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f00000005c0)={0x7, 0x3, 0x3, "96860f1cf36c3b7b2076ce267bba80b8e884707f90db8e42471dc4dd8d30f0dc", 0x52424752}) timer_create(0x6, &(0x7f0000000600)={0x0, 0x40, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000000640)=0x0) clock_gettime(0x0, &(0x7f0000000680)={0x0, 0x0}) timer_settime(r7, 0x1, &(0x7f00000006c0)={{0x0, 0x3938700}, {r8, r9+10000000}}, &(0x7f0000000700)) (async) timer_settime(r7, 0x1, &(0x7f00000006c0)={{0x0, 0x3938700}, {r8, r9+10000000}}, &(0x7f0000000700)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000780), r3) (async) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000780), r3) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x40, r10, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfe}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x810) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x40, r10, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfe}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x810) fcntl$setpipe(r6, 0x407, 0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x31, 0x7, &(0x7f0000000880)) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x31, 0x7, &(0x7f0000000880)) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x44, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netdevsim0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x1) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x44, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netdevsim0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000a00)="5da766b72fc450b3ce3e1c1b78acd995", 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), r5) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000ac0)={'vcan0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x80, r11, 0x400, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffffc}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x20048088}, 0x8080) pipe2(&(0x7f0000000c00)={0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x5342, &(0x7f0000000c40)={0x0, 0x56de, 0x20, 0x3, 0x197, 0x0, r13}, &(0x7f0000000cc0), &(0x7f0000000d00)) 5.728795343s ago: executing program 5 (id=1026): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000014480a0018000180140002006e657464657673696d3000000000000005000c000100000208000600480a000005000b"], 0x44}, 0x1, 0x0, 0x0, 0x200000c0}, 0x800) 5.525453912s ago: executing program 5 (id=1030): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="60000000100001040100"/20, @ANYBLOB="7b13000000000000380012800800010067747000", @ANYRES32, @ANYBLOB="0800030008000000080001", @ANYRES32=r0], 0x60}}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f00000003c0)=0x4080000, 0x4) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000a80)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0xb7, 0x20, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x21c66fc0, 0xfffa, 0x7f52}, {0x6, 0x24, 0x1a, 0xc58, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x81, 0xe, 0x10}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x6, 0x4, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xd2, 0x5, 0x9}}}}}}}]}}, 0x0) timer_create(0x5, &(0x7f0000000280)={0x0, 0x10, 0x4, @thr={&(0x7f0000000100)="712bf74f65973d8397ef937a7329", &(0x7f0000000200)="2ef937a83b1d402b3f6788a3d4682fa598bfc19567b805bca673ea4829f52a17f2da6c3dfa0f96909ab2751091d3bb1483d26edb30749631f2c376a4440dbbf5d7eb97903992da680820d1b760b308db4c9528733b282a25b245be74a965df3832acb48065ea22923dac6ec5444554a89509d9b39ec9c73a87"}}, &(0x7f0000000300)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340), &(0x7f0000000380)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x3, 0x3800, 0x7, 0x11, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$ax25(0x3, 0x3, 0xcc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001b700)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000002c0), 0x4e, r3, 0x0, 0x1c000000007400}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000808000000000000000000850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x4f) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r5, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_DONE(r5, 0x29, 0xc9, 0x0, 0x0) close(0x4) 5.351962462s ago: executing program 4 (id=1032): r0 = socket$netlink(0x10, 0x3, 0x1) getdents(0xffffffffffffffff, &(0x7f0000000000)=""/26, 0x1a) lseek(r0, 0x401, 0x4) r1 = fcntl$getown(r0, 0x9) sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x3) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x1000, 0x410000) ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f00000000c0)) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) r4 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x200400, 0xa8) r5 = accept$alg(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000000140)={{0x88, 0x3}, 'port1\x00', 0x84, 0x100000, 0x2, 0x9, 0x8000, 0x2, 0x3, 0x0, 0x6, 0x9}) r6 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r6, 0xc0845658, &(0x7f0000000240)={0x0, @bt={0x6, 0x8, 0x1, 0x0, 0x9, 0xd, 0x1, 0xe, 0x2, 0x4, 0x3ff, 0x40, 0xb, 0xfd5, 0x4, 0x8, {0x40, 0xfffffffe}, 0xfc, 0x9}}) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x31080}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, r7, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xab}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008014}, 0x400c004) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000480)=0x142, 0x4) newfstatat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x800040, &(0x7f0000000600)={[{@verity_on}, {@index_off}, {@xino_auto}, {@nfs_export_on}, {@redirect_dir_nofollow}, {@xino_off}, {@redirect_dir_nofollow}, {@metacopy_on}], [{@euid_eq={'euid', 0x3d, r9}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}) socket$netlink(0x10, 0x3, 0x8) socket$kcm(0x29, 0x5, 0x0) read$msr(r6, &(0x7f00000006c0)=""/162, 0xa2) recvmmsg(r5, &(0x7f0000004180)=[{{&(0x7f0000000780)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000800)=""/98, 0x62}], 0x1, &(0x7f00000008c0)=""/4096, 0x1000}, 0x2}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/231, 0xe7}, {&(0x7f00000019c0)=""/81, 0x51}], 0x2}, 0x5}, {{&(0x7f0000001a80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001b00)=""/198, 0xc6}, {&(0x7f0000001c00)}], 0x2, &(0x7f0000001c80)=""/85, 0x55}}, {{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000001d00)=""/189, 0xbd}, {&(0x7f0000001dc0)=""/212, 0xd4}, {&(0x7f0000001ec0)=""/30, 0x1e}], 0x3, &(0x7f0000001f40)=""/41, 0x29}, 0x5a1}, {{&(0x7f0000001f80)=@rc, 0x80, &(0x7f0000002240)=[{&(0x7f0000002000)=""/56, 0x38}, {&(0x7f0000002040)=""/122, 0x7a}, {&(0x7f00000020c0)=""/222, 0xde}, {&(0x7f00000021c0)=""/108, 0x6c}], 0x4, &(0x7f0000002280)=""/42, 0x2a}}, {{&(0x7f00000022c0)=@ax25={{0x3, @bcast}, [@netrom, @remote, @default, @remote, @remote, @rose, @remote, @rose]}, 0x80, &(0x7f0000002800)=[{&(0x7f0000002340)=""/196, 0xc4}, {&(0x7f0000002440)=""/132, 0x84}, {&(0x7f0000002500)=""/26, 0x1a}, {&(0x7f0000002540)=""/169, 0xa9}, {&(0x7f0000002600)=""/239, 0xef}, {&(0x7f0000002700)=""/225, 0xe1}], 0x6}, 0x3}, {{&(0x7f0000002880)=@nfc, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002900)=""/61, 0x3d}, {&(0x7f0000002940)=""/19, 0x13}, {&(0x7f0000002980)=""/176, 0xb0}], 0x3, &(0x7f0000002a80)=""/116, 0x74}, 0x6}, {{&(0x7f0000002b00)=@nfc_llcp, 0x80, &(0x7f0000004080)=[{&(0x7f0000002b80)=""/11, 0xb}, {&(0x7f0000002bc0)=""/203, 0xcb}, {&(0x7f0000002cc0)=""/179, 0xb3}, {&(0x7f0000002d80)=""/252, 0xfc}, {&(0x7f0000002e80)=""/4096, 0x1000}, {&(0x7f0000003e80)=""/207, 0xcf}, {&(0x7f0000003f80)=""/37, 0x25}, {&(0x7f0000003fc0)=""/156, 0x9c}], 0x8, &(0x7f0000004100)=""/85, 0x55}, 0x7}], 0x8, 0x40000060, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r11 = pidfd_getfd(r4, r2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000004380)={'batadv_slave_1\x00'}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000043c0)={0xc}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004440), r10) sendmsg$NL80211_CMD_SET_MPATH(r11, &(0x7f0000004540)={&(0x7f0000004400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000004500)={&(0x7f00000044c0)={0x34, r12, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4) 5.130165147s ago: executing program 4 (id=1034): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r2 = io_uring_setup(0x5086, &(0x7f0000000300)={0x0, 0x3c15, 0x800, 0x2, 0x1a0}) r3 = syz_io_uring_setup(0x1237, &(0x7f0000000440)={0x0, 0x1ffffe, 0x8, 0x4000003, 0x2e4, 0x0, r2}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001, @void, @value}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x3f, 0x2000, &(0x7f00001b6000/0x2000)=nil}) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000380)=0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, &(0x7f00000004c0)) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000040)) pwritev2(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000080)='7', 0x1}], 0x1, 0x6e45, 0x80, 0x0) r8 = fanotify_init(0x0, 0x0) write$binfmt_elf64(r8, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4622"], 0x18) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9, 0x0, 0x10000000}, &(0x7f0000000240)=0x0, &(0x7f0000000280)) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r10) sendmsg$NLBL_MGMT_C_ADDDEF(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000300000000000004000000080002000500000006000b0002"], 0x24}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 5.035832344s ago: executing program 1 (id=1035): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0xc7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc86a00", "4617a9f6040839230fb7fead776dd8dc", "c6db0872", "a44a883fca4400"}, 0x28) recvmmsg(r1, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000700)=""/34, 0x22}], 0x1}, 0x9}], 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0x401}], 0x1, 0x10001, 0x0) shutdown(r1, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r3 = accept4$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14, 0x800) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f00000001c0)={r3, 0xffff, 0xfff8, "2e08973a029662a9cc4655edfb87f88b3261203a7d11cf89735c1a8c278f32bd69dddfc0f44ee738d3717a488bb9dea6af6cd280dda63c706f98bf83a29fddcb2455f8390878dc865bfb37acb33f1d552a98a3dd8191637a0bfadadb348c818be37978867870091d26d877132f1634e98c1862be0f54955e8cb03fc67e534197e136c2307ee36a0b112171bd1b534673bb09959f3499dad283ad4461631ca94f398f8bbc0bc9ec037adbe7cf5eca6f6baf3989d3292037c53dc06da942cd50f1460dba17a91d2722831d91"}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f00000000c0)={0x2, [0x7d6, 0x8]}, &(0x7f0000000100)=0x8) listen(r2, 0x2) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r4, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000001500)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) fstat(r3, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000000040)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0x1204020, 0x1, 0x3}}, 0x50) r12 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x24c01, 0x0) write$FUSE_ENTRY(r12, &(0x7f0000000340)={0x90, 0x0, r9, {0x2, 0x0, 0xa, 0x0, 0x800, 0x7, {0x5, 0x6, 0x7ff, 0x0, 0x51b5, 0x4, 0x1, 0x7fffffff, 0xf5, 0x6000, 0x9, r10, r11, 0x6, 0x3e}}}, 0x90) syz_fuse_handle_req(r2, &(0x7f00000017c0)="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", 0x2000, &(0x7f00000016c0)={&(0x7f0000000300)={0x50, 0xfffffffffffffff5, 0x6, {0x7, 0x29, 0x7, 0xffffffff86200021, 0x9, 0xa, 0x1, 0x9, 0x0, 0x0, 0x10, 0x4}}, &(0x7f0000000380)={0x18, 0x0, 0x5, {0x7}}, &(0x7f00000003c0)={0x18, 0x0, 0xff, {0x7fff}}, &(0x7f0000000400)={0x18, 0xffffffffffffffda, 0x3, {0x4}}, &(0x7f0000000440)={0x18, 0x0, 0x1, {0xffffffff}}, &(0x7f0000000480)={0x28, 0x0, 0x101, {{0x6, 0x2, 0x2}}}, &(0x7f00000004c0)={0x60, 0x0, 0xffffffffffffff6f, {{0x81, 0x8, 0x8, 0x400, 0x800, 0x1ea, 0x9, 0x1}}}, &(0x7f0000000540)={0x18, 0x0, 0x1, {0x2}}, &(0x7f0000000580)={0x1a, 0x0, 0xdf4, {'!/[#,-%/-\x00'}}, &(0x7f00000005c0)={0x20, 0xfffffffffffffffe, 0xd, {0x0, 0x1}}, &(0x7f0000000640)={0x78, 0x0, 0x7fffffffffffffff, {0x100000000, 0x6a7, 0x0, {0x5, 0x4, 0x7, 0xffffffff, 0x7, 0x6, 0xa972, 0x80, 0x0, 0xa000, 0x5, 0x0, 0x0, 0x7, 0x80000000}}}, &(0x7f0000000900)={0x90, 0x0, 0x2, {0x6, 0x0, 0x7fffffff, 0x7, 0x5, 0x3, {0x1, 0xffff, 0x6, 0x8000000000000000, 0xfd, 0x7ff, 0x2281, 0x2d6, 0x36, 0x8000, 0x69, 0x0, 0x0, 0xfffffffc}}}, &(0x7f00000009c0)={0xf8, 0xfffffffffffffff5, 0x5, [{0x3, 0xb, 0x0, 0x8}, {0x1, 0xfffffffffffffffc, 0xa, 0x9, '/dev/vcsa\x00'}, {0x4, 0x7f, 0x4, 0x9, 'tls\x00'}, {0x5, 0x6, 0x4, 0x4, '\'@$#'}, {0x3, 0x6, 0x8, 0x1ff, ')}.(#X.-'}, {0x5, 0xff, 0xa, 0xfffffff7, '/dev/vcsa\x00'}, {0x5, 0x2, 0x4, 0x7ff, 'tls\x00'}]}, &(0x7f00000037c0)={0x670, 0xfffffffffffffffe, 0x288b, [{{0x0, 0x2, 0x3, 0x79b, 0x16a9f427, 0x2, {0x4, 0x5, 0x4, 0x7f, 0x0, 0x20, 0x604f, 0x10, 0x0, 0x1000, 0x8, 0x0, 0x0, 0x7fff}}, {0x3, 0x4cc, 0x4, 0x9, 'tls\x00'}}, {{0x1, 0x3, 0x3, 0x1ff, 0x4, 0x9, {0x1, 0x9, 0xfffffffffffff8ba, 0x6b, 0x7fffffff, 0x5, 0x0, 0x800, 0xb, 0xc000, 0x8, 0x0, 0x0, 0x3955, 0x4}}, {0x1, 0x4, 0x5, 0xe, '$-^.)'}}, {{0x0, 0x2, 0x40, 0x5, 0x2, 0x4, {0x6, 0x5, 0xb33, 0xfbd, 0x5, 0x8, 0x2, 0x7f, 0xffff, 0x4000, 0xffff, 0x0, 0xee00, 0x3, 0xdd5}}, {0x4, 0x800, 0x1, 0x6, '\x00'}}, {{0x1, 0x2, 0x5a6, 0x8, 0x6, 0x5, {0x6, 0x0, 0x0, 0x1, 0x100000000, 0x2, 0x1ff, 0x0, 0x2, 0xc000, 0x5, 0x0, 0x0, 0x10000, 0x2}}, {0x2, 0x80, 0xa, 0x8, '/dev/vmci\x00'}}, {{0x0, 0x1, 0xffffffffffffffff, 0x7fffffff, 0x5, 0x6, {0x4, 0x9, 0x6, 0x5, 0x2, 0x9, 0x7, 0x3, 0x200, 0x6000, 0x1, 0x0, 0x0, 0x10, 0x799}}, {0x3, 0x6, 0xa, 0x3, '/dev/vcsa\x00'}}, {{0x2, 0x0, 0xa, 0x9b, 0xc9, 0x4, {0x0, 0xfffffffffffffff8, 0x3ff, 0x9, 0x1, 0x3, 0x9, 0x6, 0x800, 0x6000, 0x3, 0xee00, 0x0, 0x300000}}, {0x6, 0xff000, 0x4, 0x80000001, 'tls\x00'}}, {{0x6, 0x3, 0x1, 0xf6, 0x8, 0xbd64, {0x0, 0x6, 0x3, 0x4, 0x1, 0xde8, 0xff, 0x8, 0x80, 0xc000, 0x5, 0x0, 0x0, 0x4, 0x9}}, {0x2, 0x8, 0xa, 0x5, '/dev/vmci\x00'}}, {{0x0, 0x1, 0x0, 0x3, 0x0, 0xfffffffe, {0x1, 0xb, 0x2, 0x3ff, 0x5, 0xa, 0x13, 0xb2, 0x91cf214, 0x4000, 0x0, 0x0, 0x0, 0x7, 0x7}}, {0x1, 0x80000001, 0xa, 0x1, '/dev/vcsa\x00'}}, {{0x4, 0x3, 0x81, 0x10001, 0xd1d7, 0x800, {0x0, 0x1, 0x2, 0x40, 0x80000001, 0x1000, 0x2, 0xfffff6d3, 0x65ed7d4e, 0x8000, 0x6, 0xee00, 0x0, 0x5, 0x634c43f9}}, {0x2, 0x3, 0x1, 0x130, '\x00'}}, {{0x6, 0x2, 0x3, 0x800002, 0x6, 0xfffff8ca, {0x0, 0x5, 0x1, 0x8, 0x7fffffff, 0x7fff, 0x1ff, 0x10, 0x3, 0x6000, 0x9, r4, r5, 0x6, 0x2}}, {0x6, 0x4, 0x1, 0x7fffffff, '%'}}]}, &(0x7f0000001540)={0xa0, 0x0, 0x1, {{0x4, 0x2, 0xffffffffffffffff, 0xe, 0xfffffffe, 0x6, {0x0, 0x6, 0xc58b, 0x6, 0x1, 0x10001, 0x79, 0x6, 0x2, 0x8000, 0x0, r6, 0xee01, 0x9, 0x6f}}, {0x0, 0xc}}}, &(0x7f0000001600)={0x20, 0xffffffffffffffda, 0x6e2, {0x2, 0x0, 0x3, 0x6ae8}}, &(0x7f0000003e40)={0x130, 0x0, 0x400, {0x2, 0x5335, 0x0, '\x00', {0x2000, 0x7c467ead, 0xb, 0x3, r7, r11, 0xa000, '\x00', 0x5, 0x7, 0x2, 0x0, {0x4b687d, 0x9}, {0x7fffffffffffffff, 0x3}, {0x9, 0x8}, {0x7, 0x5}, 0x3, 0xea, 0xa, 0x2}}}}) r13 = socket$netlink(0x10, 0x3, 0x4) writev(r13, &(0x7f00000006c0)=[{&(0x7f0000000600)="47cd9c8890ccca11d4ff833fa41258df06ae1c05c4c8f9339d5e2b5ab32873dd5b0e"}, {&(0x7f0000000740)="8edf1bd9b8e009e5e14e4c4b463398b12f786234a1f62493799cc47e763b7c3efdf43b04ced6dddf4cc6700271c71f5fdbd175598a60340bdd8d005686e1873448bffb8b1ce49a6362ebfa11418293848faada34296b57bab9fa75cdb574a399a901d9d782da2cada1716988c71d61d9e7fc4ce34d883ac065fcf5ba9ed316c8ec0eb01df897d90e8e4cdc553981ed377cf365a0ea6bd92eeddec39b7c00616fd575a5a2cf1f1ab1a2aa1cc0cbd65bbbc970969456b2"}, {&(0x7f0000000800)="7f504903031438be55dae740e8b6e8884d016c2e19393b875df63c54fd2c69b98613ad455c80867c518f81405e73459518d391e545ed470bb833e703e5b144b168d9947703ddb6cf20e0c786e1433973af65135455cd316c3f63fc8703f49e91c7ffba2c74a40d0c02b16e7f14fdc37797244502d7223a93dd8c6cc3e53bc7a1a4256643a4581f5e"}], 0x10b6) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 4.46262619s ago: executing program 3 (id=1036): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xe, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x3}]}}]}, 0x44}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000040000000400000002"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="680000001000090400000000fbdbdf2500000000", @ANYRES32=r7, @ANYBLOB="00000000000000004800128011000100a8447147afb69ea36c617665000000003000058005000900000000000500050001000000050028"], 0x68}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000004d00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) fchmodat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0) r9 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB=',privport,access=']) ioctl$IOCTL_VMCI_INIT_CONTEXT(r9, 0x7a0, &(0x7f0000000180)={@hyper, 0x1}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 4.431939366s ago: executing program 1 (id=1037): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff1c0898e813703caa792305009211d49ccc8008204500001c00000000008890780a010101ffffffff11"], 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) quotactl$Q_GETQUOTA(0xffffffff80000702, 0x0, 0x0, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000000280)={0x10, 0x0, 0x1, 0x2ffffffff}, 0xc) r7 = socket$inet(0x2, 0x2, 0x1) bind$inet(r7, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10) sendmsg$inet(r7, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000fedbdf252e00000008000300", @ANYRES32=r8, @ANYBLOB="0a00340002020202020200000800fe00bdbcff9606006600f900000014c9eb5c2803efccc0d74f5f8e7a42be46f6a929fd78f5c904d79cfa84750b2113cebf0c2da1eb4c59b4c0a6ea96ddbbf81871cb3dc64b3b66f2172acddd4e1b2f985557a48889dca7f6"], 0x38}}, 0x0) 3.574975424s ago: executing program 4 (id=1038): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100004800c000680080004"], 0x34}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x26e1, 0x0) close(r3) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000027eb631800"/28], 0x50) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r7, 0x4068aea3, &(0x7f0000000000)={0x74, 0x0, 0x58c6043ec1a9651e}) 3.528879323s ago: executing program 5 (id=1039): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[], 0x1c}}, 0x0) 3.456976115s ago: executing program 1 (id=1040): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x2b8, 0xb0000010, 0x248, 0x5c8f0200, 0x340, 0x3a8, 0x3a8, 0x340, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @broadcast}, [], [], 'vlan1\x00', 'veth0_to_team\x00', {}, {0xff}}, 0x0, 0x228, 0x248, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0xfffffffffffffffc, 0x7b, 0x0, 0x6, 0x1, 0x101}}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x480) r1 = socket(0x23, 0xa, 0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYRESOCT=r1, @ANYRESDEC, @ANYRES64=0x0, @ANYRES8=r1, @ANYRESDEC=0x0, @ANYRESHEX=0x0], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r6}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0x10, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r10, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, &(0x7f0000000180)=0x221a, 0x4) sendto$inet(r10, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r11 = socket$inet_tcp(0x2, 0x1, 0x0) dup3(r10, r11, 0x0) sendmmsg$inet(r11, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)="679512f062b8d965651edd4c06c901784e56aa174403ad4134742b71d211c6a85d8bc563c27f754fc2af5351f2f41e867c71c19837f2feba7862e511a47c446cd11c960f018962a53f6cf31a1123ff8092c9ff560701bfc579fa80f9149acafe2a225fed70d9173f0243a55be3", 0x6d}, {&(0x7f0000000dc0)="5a268f4785bb01774702365bf4469155da654cbe1ea17e28716b296b91c331d001252590629a986ae48df7105eb745995b8660de090a957faa98aff6f13a755af89f31407ee80f0c1255ba53eccdfabc69f0447f4244e94a46abb0d8bdf4577052a27809fe7c76ca43a8a77a452e403da655fd5a2a80310c1f96b910faaf8c6fe3ffb93ec7523699719aff2f85e56cbde2addc21a746b29f163fb7109b995b221678da2b3f256ea08aee3c6467995c65920218de42603a83291d6910e66d1e39c002f503c9ef", 0xc6}], 0x2}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f00000012c0)="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", 0x4fe}], 0x1}}], 0x2, 0x0) ioctl$KVM_INTERRUPT(r9, 0xc048aeca, &(0x7f0000000040)=0x3) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x38, r4, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_PMK={0x8, 0xfe, "bdbcff96"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xf9}]]}, 0x38}}, 0x0) 3.369997846s ago: executing program 5 (id=1041): bpf$PROG_LOAD(0x5, &(0x7f0000006880)={0xf, 0x10, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f5c64000000000c000280060019"], 0x3c}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x2f}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x5da0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(&(0x7f00000001c0)='./file0\x00', 0x108) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="fd00000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe2, 0x0) 3.143978932s ago: executing program 0 (id=1042): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x11, r1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x8, 0x10, 0x20000000, 0x20004, 0x0, 0x0, {0x1}}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) bind$alg(r1, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) socket$inet_tcp(0x2, 0x1, 0x0) accept4(r1, 0x0, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x10, &(0x7f0000000180)=0xf5d, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) bind$packet(r4, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @random="29ec608dd857"}, 0x14) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x1000, 0xfe}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 3.101634173s ago: executing program 3 (id=1043): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x400, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {}, {}, {}, {}, 0x1, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x0, 0x4001, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5}) getpid() sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@can_delroute={0x44, 0x19, 0x1, 0x70bd2c, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x1}, 0x2, 0x2, 0x0, 0x0, "8ab30d47c869f2cf"}, 0x6}}, @CGW_MOD_OR={0x15, 0x2, {{{0x0, 0x1, 0x1}, 0x2, 0x4, 0x0, 0x0, "e5166a66910a29ef"}, 0x6}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.907408133s ago: executing program 3 (id=1044): syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="89000000120081ae08060cdc030ec0007f03e3f70000000fffe2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 2.755969663s ago: executing program 1 (id=1045): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b40a00004000090000000000000000000100"], 0xab4}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40844}, 0x44) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() (async) socket$xdp(0x2c, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) keyctl$set_reqkey_keyring(0xe, 0x0) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000380)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) syz_open_dev$loop(&(0x7f0000000300), 0x2, 0x40000) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0) ioctl$sock_bt_hci(r4, 0x800448d3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r5, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) (async) shutdown(r5, 0x1) (async) syz_open_dev$usbfs(&(0x7f0000000c40), 0x310decfa, 0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) 2.174622645s ago: executing program 5 (id=1046): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=@dellink={0x34, 0x11, 0x1, 0x2000, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan0\x00'}]}, 0x34}}, 0x0) 2.09439633s ago: executing program 1 (id=1047): syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="1194dcea83b923ec1ca53b35040903ffc900"], 0x6) socket$key(0xf, 0x3, 0x2) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x6, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000400)='rxrpc_rx_rwind_change\x00', r0, 0x0, 0x8}, 0x18) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x0, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000580)={0x0, 0x2000, 0x80, 0x3231564e, 0x3, [0x2], [0x2000], [], [0x400000000000001]}) syz_open_dev$loop(&(0x7f0000000240), 0x20364, 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc601}) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001a00), 0x2, 0x0) write$6lowpan_control(r6, &(0x7f0000001a40)='connect aa:aa:aa:aa:aa:10 2', 0x1b) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x24a781, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'\x00', 0x8411}) ioctl$TUNGETVNETBE(r7, 0x800454df, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x4) mount$9p_rdma(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x200000, &(0x7f0000000580)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030303030346532322c73713d3078303030303030303030303030303030312c74696dba925dff3d3078303030303030303030303030303030342c00"]) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04225b060000000000000301044ca990000009ffffffeaffff0608091d8444db0eff0000000000000309087f00a6030088aaaaaaaaaa100357017d9f40090003aaaaaaaaaa110ac00969cb1b0d0002aaaaaaaaaa1210b380385b5c0600090aebed845a29b32f4129144cbfbabdfec9c3294c6fef89378f0ab0ff4c02295d77d8828e072a8d55d627f087b8dea88b644583dda3ecfb52d4383cd7cb647b329b63c94419f3c75c5ec19ff7313e78304e6e7acc7058232c0a447dcaf82ca4cd44fa0523e7db76ebd9ce8d85930ef0df91c6bc95db072b8c2d7f5d69a71a7bc2"], 0x5e) 1.988049404s ago: executing program 0 (id=1048): writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)='\n', 0x1}, {&(0x7f0000000140)="9f", 0x1}], 0x2) r0 = memfd_create(&(0x7f00000000c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05x\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4;\xe9u\x11\xb2(\x90\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xa8C\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4', 0x0) ftruncate(r0, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0xf500000000000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) lseek(r0, 0x1003ff, 0x4) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000f2303920422c02010000100009040c0202c17f0c0009050202000202000009058202000200"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x10ffff, 0xfffffffd}) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000b80)={0x34, &(0x7f00000009c0)=ANY=[@ANYBLOB="4001"], 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) 1.893250922s ago: executing program 5 (id=1049): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="60000000100001040100"/20, @ANYBLOB="7b13000000000000380012800800010067747000", @ANYRES32, @ANYBLOB="0800030008000000080001", @ANYRES32=r0], 0x60}}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f00000003c0)=0x4080000, 0x4) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000a80)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0xb7, 0x20, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x21c66fc0, 0xfffa, 0x7f52}, {0x6, 0x24, 0x1a, 0xc58, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x81, 0xe, 0x10}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x6, 0x4, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xd2, 0x5, 0x9}}}}}}}]}}, 0x0) timer_create(0x5, &(0x7f0000000280)={0x0, 0x10, 0x4, @thr={&(0x7f0000000100)="712bf74f65973d8397ef937a7329", &(0x7f0000000200)="2ef937a83b1d402b3f6788a3d4682fa598bfc19567b805bca673ea4829f52a17f2da6c3dfa0f96909ab2751091d3bb1483d26edb30749631f2c376a4440dbbf5d7eb97903992da680820d1b760b308db4c9528733b282a25b245be74a965df3832acb48065ea22923dac6ec5444554a89509d9b39ec9c73a87"}}, &(0x7f0000000300)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340), &(0x7f0000000380)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x3, 0x3800, 0x7, 0x11, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$ax25(0x3, 0x3, 0xcc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001b700)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000002c0), 0x4e, r3, 0x0, 0x1c000000007400}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000808000000000000000000850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x4f) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r5, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_DONE(r5, 0x29, 0xc9, 0x0, 0x0) close(0x4) 1.762698272s ago: executing program 4 (id=1050): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff1c0898e813703caa792305009211d49ccc8008204500001c00000000008890780a010101ffffffff11"], 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) quotactl$Q_GETQUOTA(0xffffffff80000702, 0x0, 0x0, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000280)={0x10, 0x0, 0x1, 0x2ffffffff}, 0xc) r6 = socket$inet(0x2, 0x2, 0x1) bind$inet(r6, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10) sendmsg$inet(r6, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000fedbdf252e00000008000300", @ANYRES32=r7, @ANYBLOB="0a00340002020202020200000800fe00bdbcff9606006600f900000014c9eb5c2803efccc0d74f5f8e7a42be46f6a929fd78f5c904d79cfa84750b2113cebf0c2da1eb4c59b4c0a6ea96ddbbf81871cb3dc64b3b66f2172acddd4e1b2f985557a48889dca7f6"], 0x38}}, 0x0) 767.082ms ago: executing program 4 (id=1051): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="090b00000000000000000500000008000300"], 0x1c}}, 0x0) 692.140239ms ago: executing program 1 (id=1052): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) kcmp(0x0, 0x0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x9c, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value=0x1800, @void, @value}, 0x50) 691.684851ms ago: executing program 3 (id=1053): sysfs$3(0x3) (async) sysfs$3(0x3) sysfs$3(0x3) (async) sysfs$3(0x3) sysfs$3(0x3) (async) sysfs$3(0x3) (async, rerun: 32) sysfs$3(0x3) (async, rerun: 32) sysfs$3(0x3) sysfs$3(0x3) sysfs$3(0x3) (async) sysfs$3(0x3) (async) sysfs$3(0x3) sysfs$3(0x3) (async) sysfs$3(0x3) sysfs$3(0x3) sysfs$3(0x3) sysfs$3(0x3) (async) sysfs$3(0x3) (async, rerun: 32) sysfs$3(0x3) (async, rerun: 32) sysfs$3(0x3) (async, rerun: 64) sysfs$3(0x3) (rerun: 64) sysfs$3(0x3) (async) sysfs$3(0x3) (async) sysfs$3(0x3) (async) sysfs$3(0x3) (async) sysfs$3(0x3) (async) sysfs$3(0x3) sysfs$3(0x3) sysfs$3(0x3) (async, rerun: 32) sysfs$3(0x3) (rerun: 32) 285.601189ms ago: executing program 3 (id=1054): r0 = getpgrp(0xffffffffffffffff) ptrace(0x4207, r0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d00000000002e5f76"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000000c0)={r3, 0x1, 0x6, @broadcast}, 0x10) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000080)=0x3, 0x12) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000180)={0xc}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6, @multicast}, 0x10) r5 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f00000007c0)={{0x5, 0x6, 0xffffffff, 0x0, 'syz1\x00', 0x7}, 0x3, 0x200, 0x20000006, 0x0, 0x0, 0x1, 'syz1\x00', 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) ptrace$ARCH_GET_GS(0x1e, r0, &(0x7f0000000100), 0x1004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500003d840000009d1fd8e6ac5f69218d8c0033bb42a2ee097f853dd89d0910a5f117c3b666a35ef6c09646687de0c1d09111dea7be9a1078d9b118215226680414d7638fa688988d4e99cdc8918cc09bc35aeeec5793602233749681ac0017f29447e2fac7db4213880500d257d208e3b3"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 120.362855ms ago: executing program 4 (id=1055): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) close(r2) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000180)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=1056): syz_clone3(&(0x7f0000000040)={0x200126000, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, 0x0, 0x0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(0x0, 0x48141, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r4, 0x0, &(0x7f0000000a40)=@tcp6=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r4, &(0x7f0000000200)}, 0x20) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) ustat(0xfffffffeffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x2, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="891000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): { set_context_mgr } for pid=7767 comm="syz.5.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 176.117567][ T7770] binder: BINDER_SET_CONTEXT_MGR already set [ 176.144848][ T7770] binder: 7767:7770 ioctl 4018620d 20000040 returned -16 [ 176.193167][ T7777] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 176.354086][ T5822] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 176.569823][ T5902] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 176.742840][ T5902] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.766397][ T5902] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 176.865206][ T5902] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 176.933342][ T5902] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 176.965811][ T5902] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 176.983166][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.001504][ T5902] usb 6-1: Product: syz [ 177.021939][ T5902] usb 6-1: Manufacturer: syz [ 177.059312][ T5902] usb 6-1: SerialNumber: syz [ 177.190394][ T5902] usb 6-1: config 0 descriptor?? [ 177.276593][ T5902] garmin_gps 6-1:0.0: Garmin GPS usb/tty converter detected [ 177.347122][ T29] audit: type=1400 audit(1734107580.322:440): avc: denied { write } for pid=7787 comm="syz.1.483" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 177.462947][ T5902] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 177.510556][ T29] audit: type=1400 audit(1734107580.482:441): avc: denied { create } for pid=7787 comm="syz.1.483" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 177.521518][ T5902] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 177.531090][ C1] vkms_vblank_simulate: vblank timer overrun [ 177.583338][ T5902] usb 6-1: USB disconnect, device number 8 [ 177.589671][ T29] audit: type=1400 audit(1734107580.553:442): avc: denied { unlink } for pid=5815 comm="syz-executor" name="file0" dev="tmpfs" ino=522 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 177.601576][ T5902] garmin_gps 6-1:0.0: device disconnected [ 178.066997][ T5822] Bluetooth: hci0: command tx timeout [ 178.331227][ T29] audit: type=1400 audit(1734107581.313:443): avc: denied { write } for pid=7796 comm="syz.5.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 178.388081][ T7804] overlayfs: missing 'lowerdir' [ 178.619420][ T970] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 179.208441][ T970] usb 5-1: unable to get BOS descriptor or descriptor too short [ 179.217061][ T970] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.227402][ T970] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 179.237218][ T970] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 59 [ 179.254938][ T970] usb 5-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 179.282787][ T970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.291241][ T970] usb 5-1: Product: syz [ 179.295416][ T970] usb 5-1: Manufacturer: syz [ 179.300107][ T970] usb 5-1: SerialNumber: syz [ 179.333653][ T970] usb 5-1: config 0 descriptor?? [ 179.382052][ T7795] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 179.393740][ T7795] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 179.418845][ C1] usb 5-1: NFC: Urb failure (status -71) [ 179.430835][ C1] usb 5-1: NFC: Urb failure (status -71) [ 179.440590][ T970] usb 5-1: NFC: Unable to get FW version [ 179.458912][ T970] pn533_usb 5-1:0.0: probe with driver pn533_usb failed with error -71 [ 180.530747][ T5867] usb 5-1: USB disconnect, device number 13 [ 180.902476][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 180.902497][ T29] audit: type=1400 audit(1734107583.873:448): avc: denied { ioctl } for pid=7834 comm="syz.0.500" path="socket:[17233]" dev="sockfs" ino=17233 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 181.029189][ T29] audit: type=1400 audit(1734107583.983:449): avc: denied { connect } for pid=7836 comm="syz.5.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 181.161330][ T29] audit: type=1400 audit(1734107584.133:450): avc: denied { read } for pid=7838 comm="syz.3.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 181.229760][ T5827] Bluetooth: hci0: command 0x0406 tx timeout [ 181.235906][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 181.242342][ T5827] Bluetooth: hci2: command 0x0406 tx timeout [ 181.430956][ T7857] netlink: 12 bytes leftover after parsing attributes in process `syz.0.506'. [ 182.426375][ T29] audit: type=1400 audit(1734107585.403:451): avc: denied { validate_trans } for pid=7866 comm="syz.0.512" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 182.446657][ C0] vkms_vblank_simulate: vblank timer overrun [ 182.871055][ T7883] netlink: 12 bytes leftover after parsing attributes in process `syz.0.514'. [ 183.633969][ T7890] vim2m vim2m.0: vidioc_s_fmt queue busy [ 183.908250][ T29] audit: type=1400 audit(1734107586.863:452): avc: denied { read } for pid=7891 comm="syz.3.517" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 183.931158][ C0] vkms_vblank_simulate: vblank timer overrun [ 183.937437][ T29] audit: type=1400 audit(1734107586.863:453): avc: denied { open } for pid=7891 comm="syz.3.517" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 183.960771][ C0] vkms_vblank_simulate: vblank timer overrun [ 184.194207][ T7897] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 184.229931][ T29] audit: type=1400 audit(1734107587.173:454): avc: denied { create } for pid=7893 comm="syz.5.518" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 184.358349][ T29] audit: type=1400 audit(1734107587.173:455): avc: denied { associate } for pid=7893 comm="syz.5.518" name="file1" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 184.460141][ C0] vkms_vblank_simulate: vblank timer overrun [ 184.551713][ C0] vkms_vblank_simulate: vblank timer overrun [ 184.565445][ T29] audit: type=1400 audit(1734107587.213:456): avc: denied { mounton } for pid=7893 comm="syz.5.518" path="/53/bus" dev="tmpfs" ino=296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 184.705194][ T29] audit: type=1400 audit(1734107587.213:457): avc: denied { write } for pid=7893 comm="syz.5.518" name="bus" dev="tmpfs" ino=296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 185.018710][ T5819] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 185.109859][ C0] vkms_vblank_simulate: vblank timer overrun [ 185.459445][ T5819] usb 6-1: Using ep0 maxpacket: 16 [ 185.471222][ T5819] usb 6-1: config 0 has no interfaces? [ 185.508236][ T5819] usb 6-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=79.b0 [ 185.825785][ T5819] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.851823][ T5819] usb 6-1: Product: syz [ 186.030834][ T5819] usb 6-1: Manufacturer: syz [ 186.190173][ T5819] usb 6-1: SerialNumber: syz [ 186.247478][ T5819] usb 6-1: config 0 descriptor?? [ 186.510131][ T7938] netlink: 332 bytes leftover after parsing attributes in process `syz.1.531'. [ 186.519802][ T7938] netlink: 'syz.1.531': attribute type 9 has an invalid length. [ 186.527471][ T7938] netlink: 108 bytes leftover after parsing attributes in process `syz.1.531'. [ 186.536983][ T7938] netlink: 32 bytes leftover after parsing attributes in process `syz.1.531'. [ 186.570779][ T7911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.579735][ T7942] netlink: 'syz.0.532': attribute type 40 has an invalid length. [ 186.599582][ T7911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.605770][ T7942] netlink: 'syz.0.532': attribute type 40 has an invalid length. [ 186.617315][ T7938] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 186.648623][ T7938] 9pnet_fd: Insufficient options for proto=fd [ 188.249308][ T5819] usb 6-1: USB disconnect, device number 9 [ 188.358480][ T7972] rdma_op ffff888034fef1f0 conn xmit_rdma 0000000000000000 [ 189.248311][ T7985] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 189.329502][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 189.329520][ T29] audit: type=1400 audit(1734107592.304:467): avc: denied { relabelto } for pid=7984 comm="syz.5.542" name="cgroup.procs" dev="cgroup" ino=526 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 189.400248][ T29] audit: type=1400 audit(1734107592.364:468): avc: denied { associate } for pid=7984 comm="syz.5.542" name="cgroup.procs" dev="cgroup" ino=526 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:semanage_exec_t:s0" [ 191.762447][ T29] audit: type=1400 audit(1734107594.744:469): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 192.247692][ T29] audit: type=1400 audit(1734107595.224:470): avc: denied { map } for pid=8016 comm="syz.3.553" path="socket:[18730]" dev="sockfs" ino=18730 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 192.370413][ T29] audit: type=1400 audit(1734107595.224:471): avc: denied { accept } for pid=8016 comm="syz.3.553" path="socket:[18730]" dev="sockfs" ino=18730 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 193.057922][ T8033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.559'. [ 193.362026][ T970] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 194.011942][ T5143] Bluetooth: hci0: command 0x0406 tx timeout [ 194.033683][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.233257][ T970] usb 4-1: device descriptor read/64, error -71 [ 194.988315][ T970] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 195.100112][ T29] audit: type=1400 audit(1734107598.085:472): avc: denied { getopt } for pid=8057 comm="syz.1.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 195.183583][ T970] usb 4-1: device descriptor read/64, error -71 [ 195.194058][ T8061] netlink: 'syz.4.567': attribute type 32 has an invalid length. [ 195.202531][ T8061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.567'. [ 195.570917][ T7204] tipc: Subscription rejected, illegal request [ 195.692603][ T970] usb usb4-port1: attempt power cycle [ 195.708213][ T8063] Illegal XDP return value 4294967274 on prog (id 95) dev N/A, expect packet loss! [ 196.291922][ T8071] netlink: 1268 bytes leftover after parsing attributes in process `syz.3.568'. [ 196.359908][ T8071] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 196.437022][ T8061] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 196.452073][ T8061] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 196.454284][ T29] audit: type=1400 audit(1734107599.415:473): avc: denied { setopt } for pid=8072 comm="syz.1.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 196.610720][ T8078] netlink: 'syz.3.570': attribute type 4 has an invalid length. [ 196.646569][ T8078] netlink: 17 bytes leftover after parsing attributes in process `syz.3.570'. [ 196.729926][ T29] audit: type=1400 audit(1734107599.715:474): avc: denied { bind } for pid=8072 comm="syz.1.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 196.838166][ T8087] FAULT_INJECTION: forcing a failure. [ 196.838166][ T8087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.856798][ T8087] CPU: 0 UID: 0 PID: 8087 Comm: syz.4.573 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 196.867411][ T8087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 196.877448][ T8087] Call Trace: [ 196.880746][ T8087] [ 196.883677][ T8087] dump_stack_lvl+0x16c/0x1f0 [ 196.888370][ T8087] should_fail_ex+0x497/0x5b0 [ 196.893033][ T8087] _copy_from_user+0x2e/0xd0 [ 196.897625][ T8087] video_usercopy+0xedb/0x1620 [ 196.902456][ T8087] ? __pfx___video_do_ioctl+0x10/0x10 [ 196.907813][ T8087] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 196.914815][ T8087] ? __pfx_video_usercopy+0x10/0x10 [ 196.920016][ T8087] v4l2_ioctl+0x1ba/0x250 [ 196.924414][ T8087] ? __pfx_v4l2_ioctl+0x10/0x10 [ 196.929260][ T8087] __x64_sys_ioctl+0x190/0x200 [ 196.934026][ T8087] do_syscall_64+0xcd/0x250 [ 196.938509][ T8087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.944380][ T8087] RIP: 0033:0x7f834f785d19 [ 196.948788][ T8087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.968389][ T8087] RSP: 002b:00007f83505c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 196.976870][ T8087] RAX: ffffffffffffffda RBX: 00007f834f975fa0 RCX: 00007f834f785d19 [ 196.984842][ T8087] RDX: 0000000020000200 RSI: 00000000c02c564a RDI: 0000000000000003 [ 196.992793][ T8087] RBP: 00007f83505c2090 R08: 0000000000000000 R09: 0000000000000000 [ 197.000743][ T8087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.008703][ T8087] R13: 0000000000000000 R14: 00007f834f975fa0 R15: 00007fff4b2faf58 [ 197.016688][ T8087] [ 197.177184][ T5819] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 197.308003][ T5819] usb 6-1: device descriptor read/64, error -71 [ 197.727037][ T8] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 197.734664][ T5819] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 197.823897][ T8097] netlink: 56 bytes leftover after parsing attributes in process `syz.1.577'. [ 197.867275][ T5819] usb 6-1: device descriptor read/64, error -71 [ 197.888606][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.900752][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.911113][ T8] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 197.951735][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.977290][ T5819] usb usb6-port1: attempt power cycle [ 197.982953][ T29] audit: type=1800 audit(1734107600.965:475): pid=8100 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.579" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 197.991506][ T8100] netlink: 12 bytes leftover after parsing attributes in process `syz.3.579'. [ 198.013352][ T8] usb 5-1: config 0 descriptor?? [ 198.233257][ T8] hid (null): bogus close delimiter [ 198.252756][ T8] usb 5-1: string descriptor 0 read error: -71 [ 198.259914][ T8] uclogic 0003:256C:006D.0008: failed retrieving string descriptor #200: -71 [ 198.273830][ T8] uclogic 0003:256C:006D.0008: failed retrieving pen parameters: -71 [ 198.282085][ T8] uclogic 0003:256C:006D.0008: failed probing pen v2 parameters: -71 [ 198.298782][ T8] uclogic 0003:256C:006D.0008: failed probing parameters: -71 [ 198.306341][ T8] uclogic 0003:256C:006D.0008: probe with driver uclogic failed with error -71 [ 198.317002][ T970] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 198.337919][ T8] usb 5-1: USB disconnect, device number 14 [ 198.377742][ T5819] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 198.399022][ T5819] usb 6-1: device descriptor read/8, error -71 [ 198.470943][ T29] audit: type=1400 audit(1734107601.455:476): avc: denied { read } for pid=8112 comm="syz.4.583" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 198.494130][ T29] audit: type=1400 audit(1734107601.455:477): avc: denied { open } for pid=8112 comm="syz.4.583" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 198.497073][ T970] usb 4-1: Using ep0 maxpacket: 8 [ 198.554552][ T970] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 198.564197][ T970] usb 4-1: config 6 has no interface number 0 [ 198.570838][ T970] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 198.584259][ T970] usb 4-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 198.596747][ T970] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 198.608553][ T970] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 198.633209][ T970] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 198.643471][ T970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.654219][ T970] usb 4-1: Product: syz [ 198.660056][ T970] usb 4-1: Manufacturer: syz [ 198.665729][ T970] usb 4-1: SerialNumber: syz [ 198.674944][ T5819] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 198.739919][ T970] hso 4-1:6.2: Failed to find BULK IN ep [ 198.892467][ T5819] usb 6-1: device descriptor read/8, error -71 [ 199.035453][ T5819] usb usb6-port1: unable to enumerate USB device [ 199.124676][ T5869] usb 4-1: USB disconnect, device number 25 [ 199.346844][ T5819] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 199.359968][ T970] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 199.516924][ T5819] usb 5-1: Using ep0 maxpacket: 16 [ 199.522870][ T970] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 199.523438][ T5819] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 199.532151][ T970] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.544353][ T5819] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 199.561926][ T5819] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 14 [ 199.573993][ T5819] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 199.574189][ T970] usb 1-1: config 0 descriptor?? [ 199.587395][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.598477][ T5819] usb 5-1: Product: syz [ 199.600141][ T970] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 199.602648][ T5819] usb 5-1: Manufacturer: syz [ 199.614979][ T5819] usb 5-1: SerialNumber: syz [ 199.620979][ T5819] usb 5-1: config 0 descriptor?? [ 199.626611][ T8116] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 199.633975][ T5143] Bluetooth: hci0: command 0x0406 tx timeout [ 199.634428][ T8116] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 199.651404][ C0] port100 5-1:0.0: NFC: Urb failure (status -71) [ 199.657821][ C0] port100 5-1:0.0: NFC: Urb failure (status -71) [ 199.665627][ T5819] port100 5-1:0.0: NFC: Could not get supported command types [ 199.941394][ T5902] usb 5-1: USB disconnect, device number 15 [ 200.133672][ T29] audit: type=1400 audit(1734107603.115:478): avc: denied { ioctl } for pid=8131 comm="syz.5.589" path="socket:[17723]" dev="sockfs" ino=17723 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 200.159380][ C0] vkms_vblank_simulate: vblank timer overrun [ 200.226670][ T29] audit: type=1400 audit(1734107603.205:479): avc: denied { connect } for pid=8117 comm="syz.0.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 200.280659][ T970] gspca_cpia1: usb_control_msg 01, error -71 [ 200.288774][ T970] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 200.319272][ T970] usb 1-1: USB disconnect, device number 18 [ 200.787229][ T8146] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 202.188942][ T8161] overlayfs: conflicting lowerdir path [ 202.209667][ T8163] netlink: 20 bytes leftover after parsing attributes in process `syz.5.602'. [ 202.239950][ T29] audit: type=1400 audit(1734107605.226:480): avc: denied { ioctl } for pid=8159 comm="syz.1.601" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x6611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 202.705081][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 202.715480][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 202.803343][ T5819] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 203.209300][ T29] audit: type=1400 audit(1734107605.786:481): avc: denied { setopt } for pid=8171 comm="syz.0.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 203.233300][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 203.260837][ T5819] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.271642][ T5819] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 203.280899][ T5819] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.291817][ T5819] usb 6-1: config 0 descriptor?? [ 203.300050][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 203.313508][ T5827] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 203.323612][ T5827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 203.370382][ T5819] pwc: Askey VC010 type 2 USB webcam detected. [ 203.771730][ T29] audit: type=1400 audit(1734107606.706:482): avc: denied { map } for pid=8181 comm="syz.4.607" path="/dev/video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 204.150528][ T5819] pwc: recv_control_msg error -32 req 02 val 2b00 [ 204.177814][ T5819] pwc: recv_control_msg error -32 req 02 val 2700 [ 204.184849][ T5819] pwc: recv_control_msg error -32 req 02 val 2c00 [ 204.243670][ T5819] pwc: recv_control_msg error -32 req 04 val 1000 [ 204.388039][ T5819] pwc: recv_control_msg error -32 req 04 val 1300 [ 204.398782][ T8191] input: syz0 as /devices/virtual/input/input18 [ 204.826290][ T5819] pwc: recv_control_msg error -32 req 04 val 1400 [ 204.843088][ T5819] pwc: recv_control_msg error -32 req 02 val 2000 [ 204.879100][ T8174] chnl_net:caif_netlink_parms(): no params data found [ 204.891159][ T5819] pwc: recv_control_msg error -32 req 02 val 2100 [ 204.926212][ T5819] pwc: recv_control_msg error -32 req 04 val 1500 [ 204.938885][ T5819] pwc: recv_control_msg error -32 req 02 val 2500 [ 205.189225][ T5819] pwc: recv_control_msg error -71 req 02 val 2600 [ 205.199456][ T5819] pwc: recv_control_msg error -71 req 02 val 2900 [ 205.214699][ T8174] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.231616][ T5819] pwc: recv_control_msg error -71 req 02 val 2800 [ 205.238400][ T8174] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.255832][ T5819] pwc: recv_control_msg error -71 req 04 val 1100 [ 205.270115][ T8174] bridge_slave_0: entered allmulticast mode [ 205.284161][ T5819] pwc: recv_control_msg error -71 req 04 val 1200 [ 205.292189][ T8174] bridge_slave_0: entered promiscuous mode [ 205.316269][ T5819] pwc: Registered as video103. [ 205.321989][ T8174] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.386249][ T5143] Bluetooth: hci2: command tx timeout [ 205.498340][ T8174] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.528997][ T8214] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 205.646194][ T25] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 205.693045][ T8174] bridge_slave_1: entered allmulticast mode [ 205.859168][ T8174] bridge_slave_1: entered promiscuous mode [ 205.872212][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 205.899533][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.944139][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 205.995766][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 206.039841][ T25] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 206.101883][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 206.165902][ T25] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 206.193770][ T25] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 206.206594][ T5819] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input19 [ 206.232260][ T5819] usb 6-1: USB disconnect, device number 14 [ 206.279770][ T25] usb 1-1: Manufacturer: syz [ 206.287330][ T8174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.310802][ T25] usb 1-1: config 0 descriptor?? [ 206.414345][ T8222] netlink: 16 bytes leftover after parsing attributes in process `syz.5.618'. [ 206.434170][ T8224] nbd: must specify at least one socket [ 206.442426][ T8174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.586069][ T5143] Bluetooth: hci0: command 0x0406 tx timeout [ 206.704959][ T25] rc_core: IR keymap rc-hauppauge not found [ 206.711513][ T25] Registered IR keymap rc-empty [ 206.724428][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 206.747103][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 206.760449][ T8174] team0: Port device team_slave_0 added [ 206.766443][ T25] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 207.329391][ T25] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input20 [ 207.347603][ T8229] netlink: 28 bytes leftover after parsing attributes in process `syz.1.620'. [ 207.356618][ T8229] netlink: 28 bytes leftover after parsing attributes in process `syz.1.620'. [ 207.369741][ T8174] team0: Port device team_slave_1 added [ 207.397191][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 207.416091][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 207.468490][ T5143] Bluetooth: hci2: command tx timeout [ 207.575957][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 207.591478][ T8234] netlink: 12 bytes leftover after parsing attributes in process `syz.5.621'. [ 207.605954][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 207.635659][ T8239] netlink: 5 bytes leftover after parsing attributes in process `syz.4.622'. [ 207.645185][ T8174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.646164][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 207.663749][ T8174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.695982][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 207.719974][ T8240] netlink: 4 bytes leftover after parsing attributes in process `syz.5.621'. [ 207.732350][ T8174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.751052][ T8174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.753925][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 207.758319][ T8174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.791171][ C0] vkms_vblank_simulate: vblank timer overrun [ 207.826495][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 207.855877][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 207.857293][ T8174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.883163][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 207.906071][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 207.932504][ T8239] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 207.955147][ T25] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 207.971861][ T25] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 208.453138][ T8174] hsr_slave_0: entered promiscuous mode [ 208.496306][ T8174] hsr_slave_1: entered promiscuous mode [ 208.517852][ T8174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.541212][ T8174] Cannot create hsr debugfs directory [ 209.162934][ T8257] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 209.201959][ T25] usb 1-1: USB disconnect, device number 19 [ 209.257582][ T8263] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 209.264163][ T8263] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 209.349012][ T8263] vhci_hcd vhci_hcd.0: Device attached [ 209.585738][ T5143] Bluetooth: hci2: command tx timeout [ 209.605837][ T970] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 209.841076][ T8174] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.855597][ T8174] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.986708][ T8174] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.015525][ T8174] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.163057][ T8174] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.194015][ T8174] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.231637][ T29] audit: type=1400 audit(1734107613.216:483): avc: denied { write } for pid=8273 comm="syz.0.632" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 210.255613][ T29] audit: type=1400 audit(1734107613.216:484): avc: denied { map } for pid=8273 comm="syz.0.632" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 210.291784][ T29] audit: type=1400 audit(1734107613.216:485): avc: denied { execute } for pid=8273 comm="syz.0.632" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 210.345574][ T8264] vhci_hcd: connection reset by peer [ 210.351588][ T29] audit: type=1400 audit(1734107613.276:486): avc: denied { ioctl } for pid=8273 comm="syz.0.632" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 210.363117][ T7325] vhci_hcd: stop threads [ 210.375969][ C0] vkms_vblank_simulate: vblank timer overrun [ 210.394096][ T7325] vhci_hcd: release socket [ 210.394973][ T8174] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.410685][ T8174] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.423496][ T7325] vhci_hcd: disconnect device [ 211.115608][ T8174] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 211.178276][ T8174] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 211.242319][ T8174] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 211.278203][ T8174] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 211.365778][ T8296] netlink: 'syz.0.639': attribute type 10 has an invalid length. [ 211.391107][ T8296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.401406][ T8296] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 211.525392][ T5902] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 211.568066][ T8174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.603590][ T8174] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.614835][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.622065][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.629843][ T5143] Bluetooth: hci2: command tx timeout [ 211.746438][ T5902] usb 5-1: Using ep0 maxpacket: 8 [ 211.769762][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.778212][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.786780][ T5902] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.786806][ T5902] usb 5-1: config 0 has no interfaces? [ 211.894022][ T5902] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 211.894058][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.894076][ T5902] usb 5-1: Product: syz [ 211.894098][ T5902] usb 5-1: Manufacturer: syz [ 211.894113][ T5902] usb 5-1: SerialNumber: syz [ 211.919193][ T5902] usb 5-1: config 0 descriptor?? [ 212.139251][ T5902] usb 5-1: USB disconnect, device number 16 [ 212.139510][ T5143] Bluetooth: hci0: unexpected event for opcode 0xc16e [ 212.359929][ T8174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.412666][ T8174] veth0_vlan: entered promiscuous mode [ 212.428939][ T8174] veth1_vlan: entered promiscuous mode [ 212.458820][ T8174] veth0_macvtap: entered promiscuous mode [ 212.467076][ T8174] veth1_macvtap: entered promiscuous mode [ 212.496792][ T8174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.507427][ T8174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.518849][ T29] audit: type=1400 audit(1734107615.497:487): avc: denied { connect } for pid=8300 comm="syz.0.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 212.538785][ T8174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.550220][ T8174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.560536][ T8174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.571415][ T8174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.581685][ T8174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.151010][ T8174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.176771][ T8174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.188658][ T8174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.205145][ T8174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.215889][ T8174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.226878][ T8174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.237062][ T8174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.247648][ T8174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.257562][ T8174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.268426][ T8174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.278526][ T8174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.287707][ T8312] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8312 comm=syz.4.641 [ 213.289109][ T8174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.311168][ T8174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.321672][ T8174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.331627][ T8174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.342071][ T8174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.351952][ T8174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.362473][ T8174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.373602][ T8174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.504063][ T8174] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.514510][ T8174] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.523412][ T8174] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.532307][ T8174] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.741253][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.754215][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.841959][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.893498][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.996054][ T29] audit: type=1400 audit(1734107616.957:488): avc: denied { mounton } for pid=8174 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 214.233880][ T29] audit: type=1400 audit(1734107617.207:489): avc: denied { write } for pid=8326 comm="syz.5.647" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 214.750328][ T970] vhci_hcd: vhci_device speed not set [ 214.785138][ T29] audit: type=1400 audit(1734107617.767:490): avc: denied { create } for pid=8343 comm="syz.5.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 214.832248][ T29] audit: type=1400 audit(1734107617.777:491): avc: denied { ioctl } for pid=8343 comm="syz.5.650" path="socket:[19619]" dev="sockfs" ino=19619 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 214.859138][ T8345] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 214.866357][ T8349] rdma_op ffff888035fb41f0 conn xmit_rdma 0000000000000000 [ 214.962716][ T29] audit: type=1400 audit(1734107617.817:492): avc: denied { connect } for pid=8340 comm="syz.0.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 215.515776][ T8360] syzkaller0: entered promiscuous mode [ 215.521349][ T8360] syzkaller0: entered allmulticast mode [ 215.913259][ T8363] netlink: 80 bytes leftover after parsing attributes in process `syz.5.655'. [ 216.206390][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 216.206409][ T29] audit: type=1400 audit(1734107619.187:494): avc: denied { create } for pid=8369 comm="syz.4.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 216.332748][ T29] audit: type=1400 audit(1734107619.247:495): avc: denied { setopt } for pid=8369 comm="syz.4.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 216.516191][ T29] audit: type=1400 audit(1734107619.497:496): avc: denied { name_bind } for pid=8374 comm="syz.4.660" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 216.678028][ T8379] Lens B: ================= START STATUS ================= [ 216.701081][ T8379] Lens B: Focus, Absolute: 0 [ 217.790177][ T8379] Lens B: ================== END STATUS ================== [ 218.250840][ T5869] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 218.495803][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.518979][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.580610][ T5869] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 218.612694][ T8382] ebtables: ebtables: counters copy to user failed while replacing table [ 218.639499][ T5869] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 218.640689][ T8391] netlink: 28 bytes leftover after parsing attributes in process `syz.3.662'. [ 218.678658][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.724834][ T5869] usb 1-1: config 0 descriptor?? [ 218.743205][ T29] audit: type=1400 audit(1734107621.727:497): avc: denied { sqpoll } for pid=8394 comm="syz.1.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 218.981222][ T8421] batadv_slave_1: entered promiscuous mode [ 219.010478][ T8422] FAULT_INJECTION: forcing a failure. [ 219.010478][ T8422] name failslab, interval 1, probability 0, space 0, times 0 [ 219.023776][ T8422] CPU: 1 UID: 0 PID: 8422 Comm: syz.4.668 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 219.034391][ T8422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 219.044439][ T8422] Call Trace: [ 219.047702][ T8422] [ 219.050616][ T8422] dump_stack_lvl+0x16c/0x1f0 [ 219.055280][ T8422] should_fail_ex+0x497/0x5b0 [ 219.059953][ T8422] ? fs_reclaim_acquire+0xae/0x150 [ 219.065066][ T8422] should_failslab+0xc2/0x120 [ 219.069731][ T8422] __kmalloc_noprof+0xcb/0x510 [ 219.074486][ T8422] ? skcipher_recvmsg+0xb5/0x1020 [ 219.079551][ T8422] sock_kmalloc+0x111/0x170 [ 219.084048][ T8422] af_alg_alloc_areq+0xbc/0x2e0 [ 219.088884][ T8422] skcipher_recvmsg+0x326/0x1020 [ 219.093819][ T8422] ? lock_acquire+0x2f/0xb0 [ 219.098325][ T8422] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 219.103774][ T8422] sock_recvmsg+0x1f6/0x250 [ 219.108262][ T8422] __sys_recvfrom+0x204/0x310 [ 219.112945][ T8422] ? __pfx___sys_recvfrom+0x10/0x10 [ 219.118126][ T8422] ? reacquire_held_locks+0x20b/0x4c0 [ 219.123497][ T8422] ? do_user_addr_fault+0xdc7/0x13f0 [ 219.128787][ T8422] ? xfd_validate_state+0x5d/0x180 [ 219.133894][ T8422] ? rcu_is_watching+0x12/0xc0 [ 219.138648][ T8422] __x64_sys_recvfrom+0xe0/0x1c0 [ 219.143568][ T8422] ? do_syscall_64+0x91/0x250 [ 219.148235][ T8422] ? lockdep_hardirqs_on+0x7c/0x110 [ 219.153421][ T8422] do_syscall_64+0xcd/0x250 [ 219.157913][ T8422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.163829][ T8422] RIP: 0033:0x7f834f787ae4 [ 219.168232][ T8422] Code: 89 4c 24 1c e8 ed 5f 02 00 44 8b 54 24 1c 8b 3c 24 45 31 c9 89 c5 48 8b 54 24 10 48 8b 74 24 08 45 31 c0 b8 2d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 04 24 e8 39 60 02 00 48 8b 04 [ 219.187841][ T8422] RSP: 002b:00007f835059fed0 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 219.196261][ T8422] RAX: ffffffffffffffda RBX: 00007f835059ffc0 RCX: 00007f834f787ae4 [ 219.204242][ T8422] RDX: 0000000000001000 RSI: 00007f83505a0010 RDI: 0000000000000004 [ 219.212197][ T8422] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 219.220146][ T8422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 219.228100][ T8422] R13: 00007f835059ff68 R14: 00007f83505a0010 R15: 0000000000000000 [ 219.236071][ T8422] [ 219.294434][ T5902] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 219.295079][ T5869] pyra 0003:1E7D:2C24.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2c24] on usb-dummy_hcd.0-1/input0 [ 219.466135][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.484934][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.506628][ T5902] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 219.526534][ T8435] netlink: 112 bytes leftover after parsing attributes in process `syz.4.670'. [ 219.542411][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.559648][ T5902] usb 4-1: config 0 descriptor?? [ 219.671986][ T29] audit: type=1400 audit(1734107622.658:498): avc: denied { read } for pid=8439 comm="syz.5.671" lport=39494 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 220.004874][ T5902] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x0 [ 220.011740][ T5902] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x0 [ 220.026953][ T5902] arvo 0003:1E7D:30D4.000A: hidraw1: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 220.373637][ T29] audit: type=1400 audit(1734107623.128:499): avc: denied { ioctl } for pid=8443 comm="syz.1.672" path="socket:[21102]" dev="sockfs" ino=21102 ioctlcmd=0x8b19 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 220.881700][ T29] audit: type=1400 audit(1734107623.868:500): avc: denied { getopt } for pid=8420 comm="syz.3.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 220.924084][ T970] usb 1-1: USB disconnect, device number 20 [ 221.385940][ T8420] batadv_slave_1: left promiscuous mode [ 221.411804][ T5819] usb 4-1: USB disconnect, device number 26 [ 221.533376][ T8461] rdma_op ffff88805b5631f0 conn xmit_rdma 0000000000000000 [ 221.552778][ T8463] 9pnet_fd: Insufficient options for proto=fd [ 221.565600][ T29] audit: type=1400 audit(1734107624.538:501): avc: denied { write } for pid=8462 comm="syz.1.678" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 221.687389][ T8471] FAULT_INJECTION: forcing a failure. [ 221.687389][ T8471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.706455][ T8471] CPU: 0 UID: 0 PID: 8471 Comm: syz.0.680 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 221.717096][ T8471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 221.727170][ T8471] Call Trace: [ 221.730457][ T8471] [ 221.733391][ T8471] dump_stack_lvl+0x16c/0x1f0 [ 221.738077][ T8471] should_fail_ex+0x497/0x5b0 [ 221.742761][ T8471] _copy_to_user+0x32/0xd0 [ 221.747176][ T8471] drm_ioctl+0x5fe/0xc00 [ 221.751414][ T8471] ? __pfx_drm_mode_addfb2_ioctl+0x10/0x10 [ 221.757210][ T8471] ? __pfx_drm_ioctl+0x10/0x10 [ 221.761967][ T8471] ? __pfx_lock_release+0x10/0x10 [ 221.766993][ T8471] ? selinux_file_ioctl+0x180/0x270 [ 221.772195][ T8471] ? selinux_file_ioctl+0xb4/0x270 [ 221.777297][ T8471] ? __pfx_drm_ioctl+0x10/0x10 [ 221.782055][ T8471] __x64_sys_ioctl+0x190/0x200 [ 221.786831][ T8471] do_syscall_64+0xcd/0x250 [ 221.791327][ T8471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.797209][ T8471] RIP: 0033:0x7f3d82b85d19 [ 221.801612][ T8471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.821207][ T8471] RSP: 002b:00007f3d83a0e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 221.829608][ T8471] RAX: ffffffffffffffda RBX: 00007f3d82d75fa0 RCX: 00007f3d82b85d19 [ 221.837565][ T8471] RDX: 0000000020000580 RSI: 00000000c06864b8 RDI: 0000000000000003 [ 221.845524][ T8471] RBP: 00007f3d83a0e090 R08: 0000000000000000 R09: 0000000000000000 [ 221.853482][ T8471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.861440][ T8471] R13: 0000000000000000 R14: 00007f3d82d75fa0 R15: 00007fff8c522978 [ 221.869495][ T8471] [ 221.944617][ T970] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 222.014167][ T5902] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 222.058988][ T8479] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 222.106646][ T970] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.123689][ T970] usb 5-1: config 0 interface 0 has no altsetting 0 [ 222.131072][ T970] usb 5-1: New USB device found, idVendor=093a, idProduct=8001, bcdDevice= 0.00 [ 222.144924][ T970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.157447][ T970] usb 5-1: config 0 descriptor?? [ 222.164220][ T5902] usb 6-1: Using ep0 maxpacket: 16 [ 222.176537][ T5902] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 222.186438][ T5819] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 222.200092][ T5902] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 222.321626][ T5902] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 222.334140][ T5902] usb 6-1: config 0 interface 0 has no altsetting 0 [ 222.655023][ T5819] usb 1-1: unable to get BOS descriptor or descriptor too short [ 222.663420][ T5902] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 222.684551][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.698847][ T5819] usb 1-1: config 8 has an invalid interface number: 145 but max is 0 [ 222.707147][ T5902] usb 6-1: Product: syz [ 222.711312][ T5902] usb 6-1: Manufacturer: syz [ 222.724020][ T5819] usb 1-1: config 8 has no interface number 0 [ 222.734211][ T5819] usb 1-1: config 8 interface 145 has no altsetting 0 [ 222.742211][ T5902] usb 6-1: SerialNumber: syz [ 222.765986][ T5902] usb 6-1: config 0 descriptor?? [ 222.774403][ T8] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 222.794105][ T8486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.802722][ T8486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.934035][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 222.934493][ T970] usbhid 5-1:0.0: can't add hid device: -71 [ 222.958634][ T970] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 222.982594][ T5902] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input21 [ 223.001564][ T970] usb 5-1: USB disconnect, device number 17 [ 223.023145][ T8] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 223.063373][ T5177] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 223.083548][ T8] usb 4-1: config 179 has no interface number 0 [ 223.094893][ T5177] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 223.112004][ T5177] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 223.129508][ T8] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 223.149215][ T5177] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 223.159989][ T8] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 223.171742][ T8] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 223.183815][ T8] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 223.207591][ T5902] usb 6-1: USB disconnect, device number 15 [ 223.233946][ T8] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 223.244438][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.286416][ T8483] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 223.374786][ T8495] team0: Device ip6tnl1 is of different type [ 223.901842][ T29] audit: type=1400 audit(1734107626.888:502): avc: denied { write } for pid=8503 comm="syz.5.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 223.975137][ T29] audit: type=1400 audit(1734107626.888:503): avc: denied { nlmsg_read } for pid=8503 comm="syz.5.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 224.537499][ T29] audit: type=1400 audit(1734107627.528:504): avc: denied { accept } for pid=8512 comm="syz.4.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 224.774757][ T79] bridge_slave_1: left allmulticast mode [ 224.787228][ T79] bridge_slave_1: left promiscuous mode [ 224.799552][ T79] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.813469][ T79] bridge_slave_0: left allmulticast mode [ 224.829100][ T79] bridge_slave_0: left promiscuous mode [ 224.839844][ T79] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.853861][ T5902] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 224.974540][ T5819] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=83.cc [ 224.995511][ T5819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.007295][ T5902] usb 6-1: config 0 has an invalid interface number: 3 but max is 0 [ 225.017320][ T5902] usb 6-1: config 0 has no interface number 0 [ 225.017363][ T5902] usb 6-1: config 0 interface 3 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 225.017424][ T5902] usb 6-1: config 0 interface 3 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 225.017454][ T5902] usb 6-1: config 0 interface 3 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 225.017481][ T5902] usb 6-1: config 0 interface 3 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 225.017517][ T5902] usb 6-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 225.017573][ T5902] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.019739][ T5902] usb 6-1: config 0 descriptor?? [ 225.023235][ T5902] hub 6-1:0.3: bad descriptor, ignoring hub [ 225.023267][ T5902] hub 6-1:0.3: probe with driver hub failed with error -5 [ 225.024414][ T5902] sierra 6-1:0.3: Sierra USB modem converter detected [ 225.053584][ T5819] usb 1-1: can't set config #8, error -71 [ 225.057636][ T5819] usb 1-1: USB disconnect, device number 21 [ 225.244252][ T5902] usb 6-1: Sierra USB modem converter now attached to ttyUSB0 [ 225.250171][ T5902] usb 6-1: Sierra USB modem converter now attached to ttyUSB1 [ 225.292570][ T5902] usb 6-1: USB disconnect, device number 16 [ 225.327141][ T5902] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 225.346244][ T5902] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 225.360186][ T5902] sierra 6-1:0.3: device disconnected [ 225.461368][ T25] usb 4-1: USB disconnect, device number 27 [ 225.461424][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 225.475609][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 225.662530][ T8533] rdma_op ffff888068bf21f0 conn xmit_rdma 0000000000000000 [ 225.776440][ T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.896758][ T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.925641][ T29] audit: type=1400 audit(1734107628.918:505): avc: denied { create } for pid=8539 comm="syz.5.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 226.071301][ T79] bond0 (unregistering): Released all slaves [ 226.293749][ T29] audit: type=1400 audit(1734107629.168:506): avc: denied { getopt } for pid=8539 comm="syz.5.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 226.315929][ T8519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.694'. [ 226.999141][ T970] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 227.010178][ T29] audit: type=1400 audit(1734107629.998:507): avc: denied { connect } for pid=8553 comm="syz.1.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 227.703683][ T29] audit: type=1400 audit(1734107629.998:508): avc: denied { name_connect } for pid=8553 comm="syz.1.707" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 227.745955][ T970] usb 4-1: device descriptor read/64, error -71 [ 227.789583][ T29] audit: type=1400 audit(1734107629.998:509): avc: denied { write } for pid=8553 comm="syz.1.707" laddr=172.20.20.10 lport=42480 faddr=172.20.20.0 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 227.983437][ T970] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 227.991674][ T79] hsr_slave_0: left promiscuous mode [ 228.020277][ T79] hsr_slave_1: left promiscuous mode [ 228.030882][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.059229][ T79] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.091390][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.099062][ T5869] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 228.140532][ T79] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.149500][ T970] usb 4-1: device descriptor read/64, error -71 [ 228.194977][ T79] veth1_macvtap: left promiscuous mode [ 228.206698][ T79] veth0_macvtap: left promiscuous mode [ 228.214195][ T79] veth1_vlan: left promiscuous mode [ 228.220430][ T79] veth0_vlan: left promiscuous mode [ 228.268568][ T5869] usb 1-1: Using ep0 maxpacket: 8 [ 228.275499][ T970] usb usb4-port1: attempt power cycle [ 228.288446][ T5869] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.330250][ T5869] usb 1-1: config 0 has no interfaces? [ 228.341349][ T5869] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 228.354254][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.362384][ T5869] usb 1-1: Product: syz [ 228.372943][ T5869] usb 1-1: Manufacturer: syz [ 228.386098][ T5869] usb 1-1: SerialNumber: syz [ 228.410001][ T5869] usb 1-1: config 0 descriptor?? [ 228.629479][ T5869] usb 1-1: USB disconnect, device number 22 [ 228.635584][ T970] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 228.708895][ T970] usb 4-1: device descriptor read/8, error -71 [ 228.963328][ T970] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 229.021973][ T970] usb 4-1: device descriptor read/8, error -71 [ 229.090508][ T79] team0 (unregistering): Port device team_slave_1 removed [ 229.135285][ T970] usb usb4-port1: unable to enumerate USB device [ 229.145547][ T79] team0 (unregistering): Port device team_slave_0 removed [ 229.791819][ T8588] netlink: 'syz.3.718': attribute type 10 has an invalid length. [ 230.263201][ T970] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 230.292796][ T8594] FAULT_INJECTION: forcing a failure. [ 230.292796][ T8594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.339625][ T8594] CPU: 0 UID: 0 PID: 8594 Comm: syz.0.720 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 230.350271][ T8594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 230.360323][ T8594] Call Trace: [ 230.363602][ T8594] [ 230.366566][ T8594] dump_stack_lvl+0x16c/0x1f0 [ 230.371247][ T8594] should_fail_ex+0x497/0x5b0 [ 230.375923][ T8594] _copy_to_user+0x32/0xd0 [ 230.380341][ T8594] simple_read_from_buffer+0xd0/0x160 [ 230.385713][ T8594] proc_fail_nth_read+0x198/0x270 [ 230.390736][ T8594] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 230.396278][ T8594] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 230.401819][ T8594] vfs_read+0x1df/0xbe0 [ 230.405965][ T8594] ? __fget_files+0x1fc/0x3a0 [ 230.410634][ T8594] ? __pfx___mutex_lock+0x10/0x10 [ 230.415653][ T8594] ? __pfx_vfs_read+0x10/0x10 [ 230.420322][ T8594] ? __fget_files+0x206/0x3a0 [ 230.424992][ T8594] ksys_read+0x12b/0x250 [ 230.429221][ T8594] ? __pfx_ksys_read+0x10/0x10 [ 230.433976][ T8594] do_syscall_64+0xcd/0x250 [ 230.438473][ T8594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.444360][ T8594] RIP: 0033:0x7f3d82b8472c [ 230.448782][ T8594] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 230.468402][ T8594] RSP: 002b:00007f3d83a0e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 230.476806][ T8594] RAX: ffffffffffffffda RBX: 00007f3d82d75fa0 RCX: 00007f3d82b8472c [ 230.484787][ T8594] RDX: 000000000000000f RSI: 00007f3d83a0e0a0 RDI: 0000000000000003 [ 230.492747][ T8594] RBP: 00007f3d83a0e090 R08: 0000000000000000 R09: 0000000000000000 [ 230.500798][ T8594] R10: 000000000000000c R11: 0000000000000246 R12: 0000000000000002 [ 230.508780][ T8594] R13: 0000000000000000 R14: 00007f3d82d75fa0 R15: 00007fff8c522978 [ 230.516750][ T8594] [ 230.521757][ T970] usb 6-1: device descriptor read/64, error -71 [ 230.765295][ T970] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 230.933194][ T970] usb 6-1: device descriptor read/64, error -71 [ 230.990437][ T29] audit: type=1326 audit(1734107633.979:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8612 comm="syz.4.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f834f785d19 code=0x7ffc0000 [ 231.022779][ T29] audit: type=1326 audit(1734107633.979:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8612 comm="syz.4.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f834f785d19 code=0x7ffc0000 [ 231.084372][ T970] usb usb6-port1: attempt power cycle [ 231.102102][ T29] audit: type=1326 audit(1734107634.009:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8612 comm="syz.4.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7f834f785d19 code=0x7ffc0000 [ 231.126077][ T29] audit: type=1326 audit(1734107634.009:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8612 comm="syz.4.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f834f785d19 code=0x7ffc0000 [ 231.133120][ T5819] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 231.171387][ T29] audit: type=1326 audit(1734107634.009:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8612 comm="syz.4.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f834f785d19 code=0x7ffc0000 [ 231.273486][ T29] audit: type=1326 audit(1734107634.039:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8612 comm="syz.4.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f834f785d19 code=0x7ffc0000 [ 231.390998][ T29] audit: type=1400 audit(1734107634.299:516): avc: denied { watch } for pid=8622 comm="syz.4.730" path="/144" dev="tmpfs" ino=770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 231.430650][ T5819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.479822][ T5819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.505280][ T5819] usb 4-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 231.512995][ T970] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 231.518647][ T5819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.535299][ T970] usb 6-1: device descriptor read/8, error -71 [ 231.784613][ T970] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 231.952308][ T970] usb 6-1: device descriptor read/8, error -71 [ 232.087281][ T5819] usb 4-1: config 0 descriptor?? [ 232.213038][ T8] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 232.220995][ T970] usb usb6-port1: unable to enumerate USB device [ 232.373077][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 232.388175][ T8] usb 1-1: config 32 has an invalid interface number: 76 but max is 0 [ 232.398080][ T8] usb 1-1: config 32 has no interface number 0 [ 232.422333][ T8] usb 1-1: config 32 interface 76 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 232.433587][ T8] usb 1-1: config 32 interface 76 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 232.446817][ T8] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.e3 [ 232.456114][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.968625][ T8] usbtest 1-1:32.76: couldn't get endpoints, -22 [ 232.975489][ T8] usbtest 1-1:32.76: probe with driver usbtest failed with error -22 [ 233.226876][ T5819] dragonrise 0003:0079:0006.000B: item fetching failed at offset 3/5 [ 233.237000][ T5819] dragonrise 0003:0079:0006.000B: parse failed [ 233.243530][ T5819] dragonrise 0003:0079:0006.000B: probe with driver dragonrise failed with error -22 [ 233.367265][ T5819] usb 4-1: USB disconnect, device number 32 [ 233.551926][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 233.551944][ T29] audit: type=1400 audit(1734107636.539:518): avc: denied { connect } for pid=8642 comm="syz.4.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 233.583739][ T29] audit: type=1400 audit(1734107636.539:519): avc: denied { bind } for pid=8642 comm="syz.4.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 233.751056][ T8649] netlink: 'syz.5.738': attribute type 10 has an invalid length. [ 233.918993][ T5819] usb 1-1: USB disconnect, device number 23 [ 234.068743][ T29] audit: type=1400 audit(1734107637.049:520): avc: denied { getopt } for pid=8662 comm="syz.4.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 235.001734][ T8684] FAULT_INJECTION: forcing a failure. [ 235.001734][ T8684] name failslab, interval 1, probability 0, space 0, times 0 [ 235.014774][ T8684] CPU: 1 UID: 0 PID: 8684 Comm: syz.3.750 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 235.025374][ T8684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 235.035420][ T8684] Call Trace: [ 235.038700][ T8684] [ 235.041618][ T8684] dump_stack_lvl+0x16c/0x1f0 [ 235.046290][ T8684] should_fail_ex+0x497/0x5b0 [ 235.050960][ T8684] should_failslab+0xc2/0x120 [ 235.055626][ T8684] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 235.060985][ T8684] ? skb_clone+0x190/0x3f0 [ 235.065390][ T8684] skb_clone+0x190/0x3f0 [ 235.069619][ T8684] netlink_deliver_tap+0xabd/0xd30 [ 235.074732][ T8684] netlink_unicast+0x5e1/0x7f0 [ 235.079489][ T8684] ? __pfx_netlink_unicast+0x10/0x10 [ 235.084772][ T8684] netlink_sendmsg+0x8b8/0xd70 [ 235.089557][ T8684] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.094842][ T8684] ____sys_sendmsg+0xaaf/0xc90 [ 235.099597][ T8684] ? copy_msghdr_from_user+0x10b/0x160 [ 235.105053][ T8684] ? __pfx_____sys_sendmsg+0x10/0x10 [ 235.110336][ T8684] ___sys_sendmsg+0x135/0x1e0 [ 235.115010][ T8684] ? __pfx____sys_sendmsg+0x10/0x10 [ 235.120211][ T8684] ? __pfx_lock_release+0x10/0x10 [ 235.125226][ T8684] ? trace_lock_acquire+0x14e/0x1f0 [ 235.130427][ T8684] ? __fget_files+0x206/0x3a0 [ 235.135099][ T8684] __sys_sendmsg+0x16e/0x220 [ 235.139778][ T8684] ? __pfx___sys_sendmsg+0x10/0x10 [ 235.144899][ T8684] do_syscall_64+0xcd/0x250 [ 235.149406][ T8684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.155290][ T8684] RIP: 0033:0x7f2430985d19 [ 235.159750][ T8684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.179350][ T8684] RSP: 002b:00007f2431889038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 235.187771][ T8684] RAX: ffffffffffffffda RBX: 00007f2430b75fa0 RCX: 00007f2430985d19 [ 235.195733][ T8684] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 235.203694][ T8684] RBP: 00007f2431889090 R08: 0000000000000000 R09: 0000000000000000 [ 235.211655][ T8684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.219655][ T8684] R13: 0000000000000000 R14: 00007f2430b75fa0 R15: 00007fff2876d308 [ 235.227648][ T8684] [ 235.292570][ T5819] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 235.472645][ T5819] usb 1-1: Using ep0 maxpacket: 8 [ 235.479549][ T5819] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.490086][ T5819] usb 1-1: config 0 has no interfaces? [ 235.497297][ T5819] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 235.508244][ T5819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.524902][ T5819] usb 1-1: Product: syz [ 235.530739][ T5819] usb 1-1: Manufacturer: syz [ 235.539176][ T5819] usb 1-1: SerialNumber: syz [ 235.549068][ T5819] usb 1-1: config 0 descriptor?? [ 235.774344][ T5868] usb 1-1: USB disconnect, device number 24 [ 235.991611][ T29] audit: type=1400 audit(1734107638.980:521): avc: denied { append } for pid=8709 comm="syz.5.758" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 236.002154][ T8710] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 236.596100][ T8730] 9pnet: Could not find request transport: 0xffffffffffffffff [ 236.732446][ T8737] netlink: 80 bytes leftover after parsing attributes in process `syz.4.767'. [ 236.799653][ T8730] loop9: detected capacity change from 0 to 7 [ 236.823486][ T8730] Dev loop9: unable to read RDB block 7 [ 236.838508][ T8730] loop9: unable to read partition table [ 236.851091][ T8730] loop9: partition table beyond EOD, truncated [ 236.882616][ T8730] loop_reread_partitions: partition scan of loop9 (ўшЂЋxќŸбј щкЌЇНdЦЄДр–ƒнЁЏЈтЗћ [ 236.882616][ T8730] ) failed (rc=-5) [ 237.670843][ T29] audit: type=1400 audit(1734107640.660:522): avc: denied { ioctl } for pid=8742 comm="syz.5.769" path="socket:[21817]" dev="sockfs" ino=21817 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 237.815271][ T8740] Process accounting resumed [ 237.850602][ T29] audit: type=1326 audit(1734107640.840:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8742 comm="syz.5.769" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f934ff85d19 code=0x0 [ 237.968926][ T29] audit: type=1400 audit(1734107640.840:524): avc: denied { bind } for pid=8750 comm="syz.0.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 238.182398][ T29] audit: type=1400 audit(1734107640.950:525): avc: denied { shutdown } for pid=8754 comm="syz.4.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 238.212505][ T29] audit: type=1400 audit(1734107640.960:526): avc: denied { read } for pid=8754 comm="syz.4.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 238.258660][ T8759] FAULT_INJECTION: forcing a failure. [ 238.258660][ T8759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.283680][ T8759] CPU: 1 UID: 0 PID: 8759 Comm: syz.5.772 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 238.294326][ T8759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 238.304492][ T8759] Call Trace: [ 238.307791][ T8759] [ 238.310722][ T8759] dump_stack_lvl+0x16c/0x1f0 [ 238.315404][ T8759] should_fail_ex+0x497/0x5b0 [ 238.320066][ T8759] _copy_from_iter+0x2a1/0x1560 [ 238.324902][ T8759] ? trace_lock_acquire+0x14e/0x1f0 [ 238.330083][ T8759] ? __alloc_skb+0x1fe/0x380 [ 238.334672][ T8759] ? __pfx__copy_from_iter+0x10/0x10 [ 238.339956][ T8759] ? __virt_addr_valid+0x1a4/0x590 [ 238.345079][ T8759] ? __virt_addr_valid+0x5e/0x590 [ 238.350099][ T8759] ? __phys_addr_symbol+0x30/0x80 [ 238.355108][ T8759] ? __check_object_size+0x488/0x710 [ 238.360372][ T8759] netlink_sendmsg+0x813/0xd70 [ 238.365127][ T8759] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.370397][ T8759] ____sys_sendmsg+0xaaf/0xc90 [ 238.375153][ T8759] ? copy_msghdr_from_user+0x10b/0x160 [ 238.380593][ T8759] ? __pfx_____sys_sendmsg+0x10/0x10 [ 238.385870][ T8759] ___sys_sendmsg+0x135/0x1e0 [ 238.390528][ T8759] ? __pfx____sys_sendmsg+0x10/0x10 [ 238.395720][ T8759] ? __pfx_lock_release+0x10/0x10 [ 238.400720][ T8759] ? trace_lock_acquire+0x14e/0x1f0 [ 238.405917][ T8759] ? __fget_files+0x206/0x3a0 [ 238.410593][ T8759] __sys_sendmsg+0x16e/0x220 [ 238.415200][ T8759] ? __pfx___sys_sendmsg+0x10/0x10 [ 238.420340][ T8759] do_syscall_64+0xcd/0x250 [ 238.424854][ T8759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.430726][ T8759] RIP: 0033:0x7f934ff85d19 [ 238.435119][ T8759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.454732][ T8759] RSP: 002b:00007f9350dce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 238.463175][ T8759] RAX: ffffffffffffffda RBX: 00007f9350175fa0 RCX: 00007f934ff85d19 [ 238.471171][ T8759] RDX: 000000000000c000 RSI: 0000000020000000 RDI: 0000000000000003 [ 238.479133][ T8759] RBP: 00007f9350dce090 R08: 0000000000000000 R09: 0000000000000000 [ 238.487082][ T8759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.495030][ T8759] R13: 0000000000000000 R14: 00007f9350175fa0 R15: 00007ffcc8dbf668 [ 238.502995][ T8759] [ 238.663338][ T5143] Bluetooth: hci2: command tx timeout [ 238.802611][ T25] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 238.868660][ T8776] netlink: 56 bytes leftover after parsing attributes in process `syz.4.775'. [ 238.882028][ T29] audit: type=1400 audit(1734107641.870:527): avc: denied { search } for pid=5486 comm="dhcpcd" name="netdev:wlan2" dev="debugfs" ino=21785 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 238.904891][ C0] vkms_vblank_simulate: vblank timer overrun [ 238.980866][ T25] usb 6-1: device descriptor read/64, error -71 [ 238.993121][ T29] audit: type=1400 audit(1734107641.920:528): avc: denied { append } for pid=8777 comm="syz.0.774" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 239.222023][ T25] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 239.392324][ T25] usb 6-1: device descriptor read/64, error -71 [ 239.502555][ T25] usb usb6-port1: attempt power cycle [ 239.599345][ T29] audit: type=1400 audit(1734107642.590:529): avc: denied { name_bind } for pid=8815 comm="syz.4.781" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 239.701775][ T8819] netlink: 'syz.4.782': attribute type 21 has an invalid length. [ 239.715905][ T8819] IPv6: NLM_F_CREATE should be specified when creating new route [ 239.724432][ T8819] IPv6: Can't replace route, no match found [ 239.931992][ T25] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 240.270128][ T25] usb 6-1: device descriptor read/8, error -71 [ 240.417227][ T29] audit: type=1400 audit(1734107643.410:530): avc: denied { read write } for pid=8845 comm="syz.1.787" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 240.425998][ T8847] netlink: 'syz.1.787': attribute type 1 has an invalid length. [ 240.448831][ T5827] Bluetooth: hci1: Invalid handle: 0x3ecb > 0x0eff [ 240.452480][ T8847] netlink: 216 bytes leftover after parsing attributes in process `syz.1.787'. [ 240.470899][ T29] audit: type=1400 audit(1734107643.410:531): avc: denied { open } for pid=8845 comm="syz.1.787" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 240.512040][ T25] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 240.542634][ T25] usb 6-1: device descriptor read/8, error -71 [ 240.664615][ T25] usb usb6-port1: unable to enumerate USB device [ 241.619257][ T8862] xt_connbytes: Forcing CT accounting to be enabled [ 241.745924][ T8869] (syz.3.794,8869,1):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "пе~gžœ<+‹€( ™.Е1 1'ъЦ‰Ч" or missing value [ 241.803196][ T8869] (syz.3.794,8869,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 241.891680][ T29] audit: type=1400 audit(1734107644.850:532): avc: denied { read } for pid=8865 comm="syz.0.792" dev="sockfs" ino=22031 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 241.975876][ T8877] serio: Serial port ptm0 [ 242.219404][ T5820] Bluetooth: hci3: command 0x0406 tx timeout [ 242.464829][ T8881] ebt_among: src integrity fail: 30a [ 242.731893][ T5869] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 243.011985][ T5869] usb 5-1: Using ep0 maxpacket: 16 [ 243.022952][ T5869] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.039003][ T5869] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 243.057817][ T5869] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 243.067735][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.081854][ T5869] usb 5-1: config 0 descriptor?? [ 243.098951][ T5869] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 243.436873][ T29] audit: type=1400 audit(1734107646.420:533): avc: denied { append } for pid=8897 comm="syz.3.801" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 243.459700][ T5868] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 243.621638][ T5868] usb 1-1: Using ep0 maxpacket: 16 [ 243.629640][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 243.643745][ T5868] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 243.655874][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.664899][ T5868] usb 1-1: Product: syz [ 243.669172][ T5868] usb 1-1: Manufacturer: syz [ 243.678571][ T5868] usb 1-1: SerialNumber: syz [ 243.691970][ T5868] usb 1-1: config 0 descriptor?? [ 243.700870][ T5868] hub 1-1:0.0: bad descriptor, ignoring hub [ 243.707278][ T5868] hub 1-1:0.0: probe with driver hub failed with error -5 [ 243.721618][ T5868] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input23 [ 243.925739][ T29] audit: type=1400 audit(1734107646.911:534): avc: denied { connect } for pid=8907 comm="syz.3.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 243.969800][ T29] audit: type=1400 audit(1734107646.951:535): avc: denied { bind } for pid=8894 comm="syz.0.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 244.059319][ T8881] netlink: 20 bytes leftover after parsing attributes in process `syz.4.795'. [ 244.868807][ T8928] netlink: 'syz.3.810': attribute type 1 has an invalid length. [ 244.879944][ T8928] netlink: 224 bytes leftover after parsing attributes in process `syz.3.810'. [ 244.909070][ T29] audit: type=1400 audit(1734107647.901:536): avc: denied { mount } for pid=8929 comm="syz.1.811" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 244.944247][ T8930] overlayfs: conflicting lowerdir path [ 246.143773][ T8946] overlayfs: overlapping lowerdir path [ 246.414607][ T5869] usb 5-1: USB disconnect, device number 18 [ 247.076090][ T8939] netlink: 'syz.1.811': attribute type 1 has an invalid length. [ 247.083838][ T8939] netlink: 220 bytes leftover after parsing attributes in process `syz.1.811'. [ 249.821132][ T8995] No control pipe specified [ 249.836229][ T9005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.825'. [ 249.836255][ T9005] netlink: 44 bytes leftover after parsing attributes in process `syz.0.825'. [ 250.296704][ T5868] usb 1-1: USB disconnect, device number 25 [ 250.651613][ T29] audit: type=1400 audit(1734107653.631:537): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 250.962121][ T5868] usb 1-1: new low-speed USB device number 26 using dummy_hcd [ 251.609319][ T9039] FAULT_INJECTION: forcing a failure. [ 251.609319][ T9039] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.625648][ T9039] CPU: 1 UID: 0 PID: 9039 Comm: syz.5.831 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 251.636719][ T9039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 251.646796][ T9039] Call Trace: [ 251.650093][ T9039] [ 251.653034][ T9039] dump_stack_lvl+0x16c/0x1f0 [ 251.657730][ T9039] should_fail_ex+0x497/0x5b0 [ 251.662429][ T9039] _copy_from_user+0x2e/0xd0 [ 251.667043][ T9039] __sys_bpf+0x21c/0x49c0 [ 251.671393][ T9039] ? __pfx_lock_release+0x10/0x10 [ 251.676435][ T9039] ? __pfx___sys_bpf+0x10/0x10 [ 251.681217][ T9039] ? vfs_write+0x306/0x1150 [ 251.685723][ T9039] ? __mutex_unlock_slowpath+0x164/0x690 [ 251.691361][ T9039] ? fput+0x67/0x440 [ 251.695246][ T9039] ? ksys_write+0x1ba/0x250 [ 251.699735][ T9039] ? __pfx_ksys_write+0x10/0x10 [ 251.704577][ T9039] __x64_sys_bpf+0x78/0xc0 [ 251.708986][ T9039] ? lockdep_hardirqs_on+0x7c/0x110 [ 251.714175][ T9039] do_syscall_64+0xcd/0x250 [ 251.718679][ T9039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.724565][ T9039] RIP: 0033:0x7f934ff85d19 [ 251.728969][ T9039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.748565][ T9039] RSP: 002b:00007f9350dce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 251.756980][ T9039] RAX: ffffffffffffffda RBX: 00007f9350175fa0 RCX: 00007f934ff85d19 [ 251.764943][ T9039] RDX: 0000000000000094 RSI: 0000000020000200 RDI: 0000000000000005 [ 251.772902][ T9039] RBP: 00007f9350dce090 R08: 0000000000000000 R09: 0000000000000000 [ 251.780860][ T9039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.788817][ T9039] R13: 0000000000000000 R14: 00007f9350175fa0 R15: 00007ffcc8dbf668 [ 251.796790][ T9039] [ 252.322052][ T5868] usb 1-1: unable to get BOS descriptor or descriptor too short [ 252.349388][ T5868] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 252.362271][ T5868] usb 1-1: can't read configurations, error -71 [ 253.069405][ T8] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 253.350317][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.370496][ T8] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 253.423302][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 253.434039][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.450488][ T8] usb 5-1: Product: syz [ 253.454710][ T8] usb 5-1: Manufacturer: syz [ 253.474262][ T8] usb 5-1: SerialNumber: syz [ 253.683042][ T9046] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 254.113867][ T9103] rdma_op ffff88805ca211f0 conn xmit_rdma 0000000000000000 [ 254.299013][ T9046] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 254.619599][ T9116] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 255.106216][ T8] cdc_ncm 5-1:1.0: failed to get mac address [ 255.214586][ T9122] netlink: 20 bytes leftover after parsing attributes in process `syz.3.844'. [ 255.265445][ T8] cdc_ncm 5-1:1.0: bind() failure [ 255.274648][ T8] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 255.306684][ T8] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 255.353793][ T8] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 255.425828][ T8] usb 5-1: USB disconnect, device number 19 [ 255.465356][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.694972][ T9136] netlink: 'syz.3.848': attribute type 1 has an invalid length. [ 256.825334][ T9136] 8021q: adding VLAN 0 to HW filter on device bond1 [ 257.120397][ T9140] 8021q: adding VLAN 0 to HW filter on device bond1 [ 257.127258][ T9140] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 257.334973][ T9140] bond1: (slave ip6gre1): Error -95 calling set_mac_address [ 258.980345][ T9172] netlink: 'syz.1.853': attribute type 1 has an invalid length. [ 258.988005][ T9172] netlink: 'syz.1.853': attribute type 1 has an invalid length. [ 259.057651][ T9171] overlayfs: overlapping lowerdir path [ 259.601966][ T9172] ALSA: mixer_oss: invalid OSS volume 'DIЧIT' [ 259.669621][ T29] audit: type=1400 audit(1734107662.642:538): avc: denied { call } for pid=9168 comm="syz.1.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 259.749019][ T29] audit: type=1400 audit(1734107662.652:539): avc: denied { unmount } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 260.193781][ T29] audit: type=1400 audit(1734107663.182:540): avc: denied { ioctl } for pid=9162 comm="syz.3.857" path="socket:[23768]" dev="sockfs" ino=23768 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 260.854613][ T9207] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 260.873668][ T9207] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 261.049542][ T5902] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 261.279563][ T5902] usb 5-1: Using ep0 maxpacket: 16 [ 261.286723][ T5902] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.297062][ T5902] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 261.324360][ T5902] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 261.338498][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.346584][ T5902] usb 5-1: Product: syz [ 261.350903][ T5902] usb 5-1: Manufacturer: syz [ 261.355484][ T5902] usb 5-1: SerialNumber: syz [ 261.372490][ T5902] usb 5-1: config 0 descriptor?? [ 261.382160][ T5902] appledisplay 5-1:0.0: Could not find int-in endpoint [ 261.390347][ T5902] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 261.499409][ T970] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 261.609559][ T5902] usb 5-1: USB disconnect, device number 20 [ 261.649389][ T970] usb 6-1: Using ep0 maxpacket: 32 [ 261.656564][ T970] usb 6-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 261.669368][ T970] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.698685][ T970] usb 6-1: config 0 descriptor?? [ 261.717206][ T970] gspca_main: sq930x-2.14.0 probing 041e:403c [ 261.802969][ T9230] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 261.835360][ T9230] netlink: 36 bytes leftover after parsing attributes in process `syz.0.870'. [ 263.184475][ T9236] team0 (unregistering): Port device team_slave_0 removed [ 263.582460][ T9236] team0 (unregistering): Port device team_slave_1 removed [ 263.639150][ T970] gspca_sq930x: reg_w 0105 bf00 failed -110 [ 263.645218][ T970] sq930x 6-1:0.0: probe with driver sq930x failed with error -110 [ 264.395701][ T970] usb 6-1: USB disconnect, device number 25 [ 264.448995][ T5870] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 264.537555][ T9251] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 264.554751][ T9251] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 264.586688][ T29] audit: type=1326 audit(1734107667.573:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9252 comm="syz.1.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb61b85d19 code=0x7ffc0000 [ 264.622063][ T29] audit: type=1326 audit(1734107667.573:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9252 comm="syz.1.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffb61b85d19 code=0x7ffc0000 [ 264.645324][ C0] vkms_vblank_simulate: vblank timer overrun [ 264.651366][ T5870] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 264.655823][ T29] audit: type=1326 audit(1734107667.573:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9252 comm="syz.1.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb61b85d19 code=0x7ffc0000 [ 264.664544][ T5870] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 264.717791][ T29] audit: type=1326 audit(1734107667.573:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9252 comm="syz.1.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7ffb61b85d19 code=0x7ffc0000 [ 264.758991][ T5870] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 264.771030][ T29] audit: type=1326 audit(1734107667.573:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9252 comm="syz.1.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb61b85d19 code=0x7ffc0000 [ 264.784304][ T5870] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 264.794705][ C0] vkms_vblank_simulate: vblank timer overrun [ 264.868031][ T29] audit: type=1326 audit(1734107667.573:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9252 comm="syz.1.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffb61b85d19 code=0x7ffc0000 [ 264.888970][ T5870] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 264.955691][ T5870] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 264.965586][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 264.968905][ T29] audit: type=1326 audit(1734107667.573:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9252 comm="syz.1.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb61b85d19 code=0x7ffc0000 [ 265.014145][ T29] audit: type=1326 audit(1734107667.573:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9252 comm="syz.1.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ffb61b85d19 code=0x7ffc0000 [ 265.087803][ T9267] netlink: 12 bytes leftover after parsing attributes in process `syz.1.880'. [ 265.094332][ T5870] usb 4-1: SerialNumber: syz [ 265.100989][ T29] audit: type=1326 audit(1734107667.573:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9252 comm="syz.1.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb61b85d19 code=0x7ffc0000 [ 265.134352][ T29] audit: type=1326 audit(1734107667.573:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9252 comm="syz.1.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7ffb61b85d19 code=0x7ffc0000 [ 265.134395][ T29] audit: type=1400 audit(1734107667.573:551): avc: denied { write } for pid=9252 comm="syz.1.878" name="file0" dev="tmpfs" ino=988 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 265.134425][ T29] audit: type=1400 audit(1734107667.573:552): avc: denied { open } for pid=9252 comm="syz.1.878" path="/180/file0" dev="tmpfs" ino=988 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 265.134454][ T29] audit: type=1326 audit(1734107667.573:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9252 comm="syz.1.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb61b85d19 code=0x7ffc0000 [ 265.226085][ T970] libceph: connect (1)[c::]:6789 error -101 [ 265.226329][ T970] libceph: mon0 (1)[c::]:6789 connect error [ 265.228116][ T9244] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 265.234797][ T970] libceph: connect (1)[c::]:6789 error -101 [ 265.234906][ T970] libceph: mon0 (1)[c::]:6789 connect error [ 265.276246][ C0] vkms_vblank_simulate: vblank timer overrun [ 265.340892][ T9265] ceph: No mds server is up or the cluster is laggy [ 265.495832][ T25] libceph: connect (1)[c::]:6789 error -101 [ 265.503405][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 266.150706][ T970] libceph: connect (1)[c::]:6789 error -101 [ 266.156737][ T970] libceph: mon0 (1)[c::]:6789 connect error [ 266.251502][ T5870] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -12 [ 266.302046][ T5870] usb 4-1: USB disconnect, device number 33 [ 266.688753][ T5868] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 267.042163][ T9288] No control pipe specified [ 267.217017][ T9297] netlink: 1296 bytes leftover after parsing attributes in process `syz.5.890'. [ 267.619068][ T9298] hub 2-0:1.0: USB hub found [ 267.728660][ T9298] hub 2-0:1.0: 1 port detected [ 268.188650][ T9297] openvswitch: netlink: Flow key attr not present in new flow. [ 268.327471][ T9303] [U] RsЌИ‘"‡Цv [ 268.335373][ T9303] [U] їУё-ђE6ЪђхЮ{х$y$ђŒUРїЫјњwєьяАЛWАYT!j;Ыиж}Ј; й*с‰c§ЖPГЭѕCI1‰ЃђЎшЌАЎМуScGѓI”ъlš\›t‘ь [ 268.360644][ T9302] [U] SЎTc쇓Ё’§#ЪљKПм§ц‡Ry04аЩ6 [ 268.624782][ T5868] usb 5-1: Using ep0 maxpacket: 32 [ 268.781145][ T5868] usb 5-1: unable to get BOS descriptor or descriptor too short [ 268.789132][ T9315] rdma_op ffff8880781379f0 conn xmit_rdma 0000000000000000 [ 268.883923][ T5868] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 268.891714][ T5868] usb 5-1: can't read configurations, error -71 [ 269.711209][ T9333] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 270.476427][ T9346] netlink: 56 bytes leftover after parsing attributes in process `syz.4.904'. [ 270.766237][ T9356] No control pipe specified [ 271.327197][ T5819] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 271.335852][ T9366] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.911'. [ 272.138428][ T5870] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 272.299464][ T5143] Bluetooth: hci1: command 0x0406 tx timeout [ 272.390344][ T5819] usb 5-1: unable to get BOS descriptor or descriptor too short [ 272.399193][ T5819] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 272.418088][ T5819] usb 5-1: can't read configurations, error -71 [ 272.468088][ T5870] usb 2-1: Using ep0 maxpacket: 32 [ 272.479058][ T5870] usb 2-1: unable to get BOS descriptor or descriptor too short [ 272.497650][ T5870] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 272.517206][ T5870] usb 2-1: can't read configurations, error -71 [ 272.618428][ T5868] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 273.089102][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.101208][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.111139][ T5868] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 273.124240][ T5868] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 273.133480][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.164603][ T5868] usb 1-1: config 0 descriptor?? [ 273.293694][ T9391] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56895 sclass=netlink_route_socket pid=9391 comm=syz.4.919 [ 273.332224][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 273.332245][ T29] audit: type=1400 audit(1734107676.324:575): avc: denied { ioctl } for pid=9390 comm="syz.4.919" path="socket:[24796]" dev="sockfs" ino=24796 ioctlcmd=0x89e5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 273.434490][ T29] audit: type=1400 audit(1734107676.424:576): avc: denied { ioctl } for pid=9385 comm="syz.3.920" path="socket:[24798]" dev="sockfs" ino=24798 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 273.511639][ T9394] netlink: 96 bytes leftover after parsing attributes in process `syz.4.919'. [ 273.663089][ T5868] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 273.671861][ T5868] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 273.686978][ T5868] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 274.042437][ T9372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.051518][ T9372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.067247][ T9372] Bluetooth: hci0: load_link_keys: too big key_count value 5888 [ 274.103445][ T9372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.126595][ T9372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.154403][ T5870] usb 1-1: USB disconnect, device number 28 [ 275.196873][ T9413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.927'. [ 275.289845][ T9415] fuse: Unknown parameter 'U§ up_id' [ 275.323686][ T9420] netlink: 56 bytes leftover after parsing attributes in process `syz.0.930'. [ 275.547756][ T5819] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 275.587683][ T5868] usb 1-1: new low-speed USB device number 29 using dummy_hcd [ 275.697839][ T5819] usb 6-1: Using ep0 maxpacket: 32 [ 275.708002][ T5819] usb 6-1: unable to get BOS descriptor or descriptor too short [ 275.723224][ T5819] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 275.777784][ T5819] usb 6-1: can't read configurations, error -71 [ 275.907870][ T970] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 276.105244][ T5868] usb 1-1: unable to get BOS descriptor or descriptor too short [ 276.113595][ T5868] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 276.121584][ T5868] usb 1-1: can't read configurations, error -71 [ 276.190969][ T970] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.206354][ T970] usb 2-1: config 0 interface 0 has no altsetting 0 [ 276.230376][ T970] usb 2-1: New USB device found, idVendor=093a, idProduct=8001, bcdDevice= 0.00 [ 276.251789][ T970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.294695][ T970] usb 2-1: config 0 descriptor?? [ 276.483153][ T9439] fuse: Bad value for 'fd' [ 276.545527][ T29] audit: type=1400 audit(1734107679.474:577): avc: denied { mount } for pid=9437 comm="syz.3.936" name="/" dev="rpc_pipefs" ino=24180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 276.727559][ T5870] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 277.710129][ T9449] netlink: 'syz.0.940': attribute type 11 has an invalid length. [ 278.034110][ T5870] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 278.121962][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.206234][ T5870] usb 4-1: Product: syz [ 278.215035][ T5870] usb 4-1: Manufacturer: syz [ 278.219979][ T5870] usb 4-1: SerialNumber: syz [ 278.234588][ T5870] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 278.455032][ T25] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 278.797336][ T5902] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 279.067131][ T5902] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.093425][ T5902] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.121461][ T5902] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 279.154248][ T5902] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.208343][ T5902] usb 6-1: config 0 descriptor?? [ 279.419877][ T9461] netlink: 60 bytes leftover after parsing attributes in process `syz.5.944'. [ 279.442333][ T9461] unsupported nlmsg_type 40 [ 279.588785][ T5902] usbhid 6-1:0.0: can't add hid device: -71 [ 279.647423][ T5902] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 279.757033][ T5902] usb 6-1: USB disconnect, device number 28 [ 279.869630][ T29] audit: type=1400 audit(1734107682.865:578): avc: denied { unmount } for pid=8174 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 281.063270][ T9486] vim2m vim2m.0: vidioc_s_fmt queue busy [ 281.627558][ T25] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 281.634840][ T25] ath9k_htc: Failed to initialize the device [ 285.502370][ T5870] usb 4-1: USB disconnect, device number 34 [ 285.525888][ T5870] usb 4-1: ath9k_htc: USB layer deinitialized [ 285.555847][ T970] usbhid 2-1:0.0: can't add hid device: -71 [ 285.562060][ T970] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 285.770179][ T970] usb 2-1: USB disconnect, device number 16 [ 285.859473][ T29] audit: type=1400 audit(1734107688.786:579): avc: denied { append } for pid=9500 comm="syz.1.957" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 286.414545][ T5819] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 286.589249][ T5819] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 286.598473][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.611889][ T5819] usb 5-1: Product: syz [ 286.621239][ T5819] usb 5-1: Manufacturer: syz [ 286.628987][ T5819] usb 5-1: SerialNumber: syz [ 286.648555][ T5819] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 286.682793][ T5868] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 287.563199][ T25] usb 5-1: USB disconnect, device number 25 [ 288.267241][ T5868] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 288.278284][ T5868] ath9k_htc: Failed to initialize the device [ 288.285444][ T25] usb 5-1: ath9k_htc: USB layer deinitialized [ 288.335382][ T9541] No control pipe specified [ 288.616236][ T5870] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 288.625492][ T9560] 9pnet_fd: Insufficient options for proto=fd [ 288.786187][ T5870] usb 1-1: Using ep0 maxpacket: 32 [ 288.798389][ T5870] usb 1-1: config index 0 descriptor too short (expected 155, got 27) [ 288.964751][ T5870] usb 1-1: config 0 has an invalid descriptor of length 233, skipping remainder of the config [ 288.976103][ T5870] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 288.987705][ T5870] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 289.000520][ T5870] usb 1-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 289.008994][ T5870] usb 1-1: Product: syz [ 289.013200][ T5870] usb 1-1: Manufacturer: syz [ 289.021201][ T5870] usb 1-1: SerialNumber: syz [ 289.036447][ T5870] usb 1-1: config 0 descriptor?? [ 289.754248][ T9584] sctp: [Deprecated]: syz.1.980 (pid 9584) Use of int in max_burst socket option deprecated. [ 289.754248][ T9584] Use struct sctp_assoc_value instead [ 289.926734][ T5868] kernel read not supported for file /video7 (pid: 5868 comm: kworker/0:5) [ 290.535677][ T9596] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 290.857605][ T5870] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 291.129866][ T5870] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.150071][ T5870] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 291.159585][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.388462][ T5870] usb 2-1: config 0 descriptor?? [ 291.630514][ T5870] pwc: Askey VC010 type 2 USB webcam detected. [ 291.898398][ T29] audit: type=1326 audit(1734107694.896:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9598 comm="syz.1.982" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffb61b85d19 code=0x0 [ 292.209337][ T9622] netlink: 8 bytes leftover after parsing attributes in process `syz.5.989'. [ 293.571590][ T8] usb 1-1: USB disconnect, device number 31 [ 293.750421][ T9643] FAULT_INJECTION: forcing a failure. [ 293.750421][ T9643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.795602][ T9643] CPU: 1 UID: 0 PID: 9643 Comm: syz.0.994 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 293.806262][ T9643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 293.816342][ T9643] Call Trace: [ 293.819641][ T9643] [ 293.822586][ T9643] dump_stack_lvl+0x16c/0x1f0 [ 293.824385][ T9648] xt_NFQUEUE: number of queues (3) out of range (got 65536) [ 293.827272][ T9643] should_fail_ex+0x497/0x5b0 [ 293.827307][ T9643] _copy_from_user+0x2e/0xd0 [ 293.827332][ T9643] copy_msghdr_from_user+0x99/0x160 [ 293.827358][ T9643] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 293.827393][ T9643] ___sys_sendmsg+0xff/0x1e0 [ 293.827419][ T9643] ? __pfx____sys_sendmsg+0x10/0x10 [ 293.827451][ T9643] ? __pfx_lock_release+0x10/0x10 [ 293.827471][ T9643] ? trace_lock_acquire+0x14e/0x1f0 [ 293.827500][ T9643] ? __fget_files+0x206/0x3a0 [ 293.827523][ T9643] __sys_sendmsg+0x16e/0x220 [ 293.827552][ T9643] ? __pfx___sys_sendmsg+0x10/0x10 [ 293.889254][ T9643] do_syscall_64+0xcd/0x250 [ 293.893759][ T9643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.899651][ T9643] RIP: 0033:0x7f3d82b85d19 [ 293.904053][ T9643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.923648][ T9643] RSP: 002b:00007f3d83a0e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 293.932050][ T9643] RAX: ffffffffffffffda RBX: 00007f3d82d75fa0 RCX: 00007f3d82b85d19 [ 293.940008][ T9643] RDX: 000000000000c000 RSI: 0000000020000000 RDI: 0000000000000003 [ 293.947972][ T9643] RBP: 00007f3d83a0e090 R08: 0000000000000000 R09: 0000000000000000 [ 293.955932][ T9643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.963890][ T9643] R13: 0000000000000000 R14: 00007f3d82d75fa0 R15: 00007fff8c522978 [ 293.971858][ T9643] [ 294.035653][ T5870] pwc: recv_control_msg error -71 req 02 val 2b00 [ 294.054287][ T5870] pwc: recv_control_msg error -71 req 02 val 2700 [ 294.064363][ T9645] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 294.090739][ T5870] pwc: recv_control_msg error -71 req 02 val 2c00 [ 294.118010][ T5870] pwc: recv_control_msg error -71 req 04 val 1000 [ 294.143859][ T5870] pwc: recv_control_msg error -71 req 04 val 1300 [ 294.155478][ T5870] pwc: recv_control_msg error -71 req 04 val 1400 [ 294.203248][ T5870] pwc: recv_control_msg error -71 req 02 val 2000 [ 294.221969][ T29] audit: type=1400 audit(1734107697.217:581): avc: denied { name_bind } for pid=9654 comm="syz.5.999" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 294.259230][ T5870] pwc: recv_control_msg error -71 req 02 val 2100 [ 294.272901][ T9658] geneve2: entered promiscuous mode [ 294.272923][ T5870] pwc: recv_control_msg error -71 req 04 val 1500 [ 294.278816][ T9658] geneve2: entered allmulticast mode [ 294.291417][ T5870] pwc: recv_control_msg error -71 req 02 val 2500 [ 294.320220][ T5870] pwc: recv_control_msg error -71 req 02 val 2400 [ 294.376724][ T5870] pwc: recv_control_msg error -71 req 02 val 2600 [ 294.400751][ T5870] pwc: recv_control_msg error -71 req 02 val 2900 [ 294.423193][ T5870] pwc: recv_control_msg error -71 req 02 val 2800 [ 294.460701][ T5870] pwc: recv_control_msg error -71 req 04 val 1100 [ 294.485467][ T5870] pwc: recv_control_msg error -71 req 04 val 1200 [ 294.529833][ T5870] pwc: Registered as video103. [ 294.579311][ T5870] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input24 [ 294.712559][ T9676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1002'. [ 294.721627][ T9676] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.730152][ T9676] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.134401][ T29] audit: type=1400 audit(1734107697.677:582): avc: denied { setopt } for pid=9670 comm="syz.0.1002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 295.185427][ T29] audit: type=1400 audit(1734107697.687:583): avc: denied { ioctl } for pid=9670 comm="syz.0.1002" path="socket:[25430]" dev="sockfs" ino=25430 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 295.212357][ T9676] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.220610][ T9676] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.278067][ T9681] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 295.283640][ T5870] usb 2-1: USB disconnect, device number 17 [ 295.452519][ T9676] bond0: (slave batadv0): Releasing backup interface [ 295.521827][ T9690] sctp: [Deprecated]: syz.3.1008 (pid 9690) Use of int in maxseg socket option. [ 295.521827][ T9690] Use struct sctp_assoc_value instead [ 295.542621][ T9688] vlan2: entered promiscuous mode [ 295.554151][ T9688] syz_tun: entered promiscuous mode [ 295.622486][ T9692] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1011'. [ 296.025479][ T5870] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 296.147746][ T25] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 296.147771][ T5902] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 296.373793][ T25] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82 [ 296.473209][ T5902] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 296.480629][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 296.518012][ T25] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 296.529562][ T25] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 296.789622][ T25] usb 6-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 296.799331][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.808161][ T25] usb 6-1: Product: syz [ 296.813930][ T25] usb 6-1: Manufacturer: syz [ 296.822204][ T5902] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 296.822222][ T25] usb 6-1: SerialNumber: syz [ 296.842750][ T5902] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 296.854246][ T5902] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 296.868450][ T5902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.960997][ T5870] usb 2-1: unable to get BOS descriptor or descriptor too short [ 296.968609][ T9702] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 296.969328][ T25] usb 6-1: config 0 descriptor?? [ 296.983693][ T25] redrat3 6-1:0.0: Couldn't find all endpoints [ 296.988458][ T5902] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 296.993133][ T5870] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 297.007150][ T5870] usb 2-1: can't read configurations, error -71 [ 297.287376][ T9717] netlink: 'syz.5.1014': attribute type 21 has an invalid length. [ 297.295406][ T9717] IPv6: NLM_F_CREATE should be specified when creating new route [ 297.714192][ T5902] usb 6-1: USB disconnect, device number 29 [ 298.735977][ T9714] No control pipe specified [ 298.766906][ T29] audit: type=1400 audit(1734107701.767:584): avc: denied { ioctl } for pid=9721 comm="syz.5.1019" path="socket:[25670]" dev="sockfs" ino=25670 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 298.827166][ T29] audit: type=1400 audit(1734107701.797:585): avc: denied { execute } for pid=9721 comm="syz.5.1019" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=25676 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 300.013253][ T9736] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1024'. [ 300.112717][ T5868] usb 1-1: USB disconnect, device number 32 [ 300.244932][ T5902] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 300.403951][ T9749] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1030'. [ 300.413886][ T5902] usb 4-1: Using ep0 maxpacket: 16 [ 300.438849][ T5902] usb 4-1: New USB device found, idVendor=1b80, idProduct=c161, bcdDevice=ce.43 [ 300.460897][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.479597][ T5902] usb 4-1: Product: syz [ 300.483825][ T5902] usb 4-1: Manufacturer: syz [ 300.495209][ T5902] usb 4-1: SerialNumber: syz [ 300.501628][ T5902] usb 4-1: config 0 descriptor?? [ 300.705292][ T5868] usb 6-1: new low-speed USB device number 30 using dummy_hcd [ 300.792859][ T5902] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 300.811296][ T5902] dvb_usb_af9015 4-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 300.853637][ T5902] usb 4-1: USB disconnect, device number 35 [ 301.321585][ T5868] usb 6-1: unable to get BOS descriptor or descriptor too short [ 301.345664][ T5868] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 301.360437][ T5868] usb 6-1: can't read configurations, error -71 [ 301.608588][ T9777] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1036'. [ 301.655869][ T9782] 9p: Unknown access argument џђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџ [ 302.196190][ T9777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1036'. [ 302.287215][ C1] vkms_vblank_simulate: vblank timer overrun [ 302.304326][ T9777] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1036'. [ 302.709693][ T9794] overlayfs: missing 'lowerdir' [ 303.014453][ T29] audit: type=1400 audit(1734107705.998:586): avc: denied { map } for pid=9801 comm="syz.0.1042" path="socket:[26755]" dev="sockfs" ino=26755 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 303.037424][ C1] vkms_vblank_simulate: vblank timer overrun [ 303.105904][ T9806] netlink: 2716 bytes leftover after parsing attributes in process `syz.1.1045'. [ 303.124513][ T29] audit: type=1326 audit(1734107706.098:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9805 comm="syz.1.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb61b85d19 code=0x7ffc0000 [ 303.365004][ T29] audit: type=1326 audit(1734107706.098:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9805 comm="syz.1.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb61b85d19 code=0x7ffc0000 [ 303.388919][ T29] audit: type=1326 audit(1734107706.098:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9805 comm="syz.1.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffb61b85d19 code=0x7ffc0000 [ 303.412472][ T29] audit: type=1326 audit(1734107706.098:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9805 comm="syz.1.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb61b85d19 code=0x7ffc0000 [ 303.435783][ C1] vkms_vblank_simulate: vblank timer overrun [ 303.496830][ T29] audit: type=1326 audit(1734107706.108:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9805 comm="syz.1.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ffb61b85d19 code=0x7ffc0000 [ 303.520068][ C1] vkms_vblank_simulate: vblank timer overrun [ 303.655264][ T29] audit: type=1326 audit(1734107706.568:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9805 comm="syz.1.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb61b85d19 code=0x7ffc0000 [ 303.709303][ T29] audit: type=1326 audit(1734107706.568:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9805 comm="syz.1.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb61b85d19 code=0x7ffc0000 [ 304.063898][ T9821] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1049'. [ 304.234250][ T5902] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 304.334478][ T5868] usb 6-1: new low-speed USB device number 32 using dummy_hcd [ 304.384388][ T5902] usb 1-1: Using ep0 maxpacket: 32 [ 304.391664][ T5902] usb 1-1: config index 0 descriptor too short (expected 49410, got 36) [ 304.409227][ T5902] usb 1-1: config 12 has too many interfaces: 127, using maximum allowed: 32 [ 304.912575][ T5902] usb 1-1: config 12 contains an unexpected descriptor of type 0x2, skipping [ 304.922003][ T5902] usb 1-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 304.932448][ T5902] usb 1-1: config 12 has 0 interfaces, different from the descriptor's value: 127 [ 304.942811][ T5902] usb 1-1: config index 1 descriptor too short (expected 49410, got 36) [ 304.951367][ T5902] usb 1-1: config 12 has too many interfaces: 127, using maximum allowed: 32 [ 304.960259][ T5902] usb 1-1: config 12 contains an unexpected descriptor of type 0x2, skipping [ 304.969155][ T5902] usb 1-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 304.979484][ T5902] usb 1-1: config 12 has 0 interfaces, different from the descriptor's value: 127 [ 305.014622][ T5902] usb 1-1: config index 2 descriptor too short (expected 49410, got 36) [ 305.023041][ T5902] usb 1-1: config 12 has too many interfaces: 127, using maximum allowed: 32 [ 305.100175][ T5902] usb 1-1: config 12 contains an unexpected descriptor of type 0x2, skipping [ 305.109521][ T5902] usb 1-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 305.119951][ T5902] usb 1-1: config 12 has 0 interfaces, different from the descriptor's value: 127 [ 305.131726][ T5902] usb 1-1: config index 3 descriptor too short (expected 49410, got 36) [ 305.140719][ T5902] usb 1-1: config 12 has too many interfaces: 127, using maximum allowed: 32 [ 305.150312][ T5902] usb 1-1: config 12 contains an unexpected descriptor of type 0x2, skipping [ 305.161290][ T5902] usb 1-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 305.171695][ T5902] usb 1-1: config 12 has 0 interfaces, different from the descriptor's value: 127 [ 305.182538][ T5902] usb 1-1: New USB device found, idVendor=2c42, idProduct=0102, bcdDevice= 0.00 [ 305.524244][ T5902] usb 1-1: New USB device strings: Mfr=16, Product=0, SerialNumber=9 [ 305.542433][ T5868] usb 6-1: unable to get BOS descriptor or descriptor too short [ 305.567600][ T5868] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 305.595822][ T5902] usb 1-1: Manufacturer: syz [ 305.600478][ T5902] usb 1-1: SerialNumber: syz [ 305.624442][ T5868] usb 6-1: can't read configurations, error -71 [ 305.735631][ T9836] veth1_to_team: entered promiscuous mode [ 305.752660][ T9835] veth1_to_team: left promiscuous mode [ 411.073898][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 411.080880][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P990/1:b..l [ 411.089324][ C0] rcu: (detected by 0, t=10502 jiffies, g=29045, q=119 ncpus=2) [ 411.097041][ C0] task:kworker/u8:5 state:R running task stack:24080 pid:990 tgid:990 ppid:2 flags:0x00004000 [ 411.109650][ C0] Workqueue: bat_events batadv_nc_worker [ 411.115314][ C0] Call Trace: [ 411.118592][ C0] [ 411.121528][ C0] __schedule+0xe58/0x5ad0 [ 411.125950][ C0] ? __pfx_mark_lock+0x10/0x10 [ 411.130721][ C0] ? __pfx_mark_lock+0x10/0x10 [ 411.135486][ C0] ? hlock_class+0x4e/0x130 [ 411.140004][ C0] ? __pfx___schedule+0x10/0x10 [ 411.144865][ C0] ? mark_held_locks+0x9f/0xe0 [ 411.149639][ C0] preempt_schedule_irq+0x51/0x90 [ 411.154674][ C0] irqentry_exit+0x36/0x90 [ 411.159090][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 411.165073][ C0] RIP: 0010:lock_acquire.part.0+0x155/0x380 [ 411.170967][ C0] Code: b8 ff ff ff ff 65 0f c1 05 d0 d1 8b 7e 83 f8 01 0f 85 d0 01 00 00 9c 58 f6 c4 02 0f 85 e5 01 00 00 48 85 ed 0f 85 b6 01 00 00 <48> b8 00 00 00 00 00 fc ff df 48 01 c3 48 c7 03 00 00 00 00 48 c7 [ 411.190580][ C0] RSP: 0018:ffffc90003d8fa38 EFLAGS: 00000206 [ 411.196647][ C0] RAX: 0000000000000046 RBX: 1ffff920007b1f48 RCX: 0000000040e1fbc0 [ 411.204627][ C0] RDX: 0000000000000001 RSI: ffffffff8b6cdb60 RDI: ffffffff8bd1d340 [ 411.212599][ C0] RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff2dc9998 [ 411.220568][ C0] R10: ffffffff96e4ccc7 R11: 0000000000000002 R12: 0000000000000000 [ 411.228536][ C0] R13: ffffffff8e1bb500 R14: 0000000000000000 R15: 0000000000000000 [ 411.236521][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 411.242158][ C0] ? rcu_is_watching+0x12/0xc0 [ 411.246928][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 411.252135][ C0] ? mark_held_locks+0x9f/0xe0 [ 411.256897][ C0] ? batadv_nc_process_nc_paths.part.0+0xde/0x3e0 [ 411.263316][ C0] ? lock_acquire+0x2f/0xb0 [ 411.267820][ C0] ? batadv_nc_process_nc_paths.part.0+0xde/0x3e0 [ 411.274242][ C0] ? __pfx_batadv_nc_fwd_flush+0x10/0x10 [ 411.279875][ C0] batadv_nc_process_nc_paths.part.0+0xe4/0x3e0 [ 411.286118][ C0] ? batadv_nc_process_nc_paths.part.0+0xde/0x3e0 [ 411.292544][ C0] batadv_nc_worker+0xcc8/0x1060 [ 411.297494][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 411.302876][ C0] ? rcu_is_watching+0x12/0xc0 [ 411.307644][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 411.312852][ C0] ? process_one_work+0x921/0x1ba0 [ 411.317964][ C0] ? lock_acquire+0x2f/0xb0 [ 411.322468][ C0] ? process_one_work+0x921/0x1ba0 [ 411.327592][ C0] process_one_work+0x9c5/0x1ba0 [ 411.332538][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 411.337912][ C0] ? __pfx_process_one_work+0x10/0x10 [ 411.343284][ C0] ? rcu_is_watching+0x12/0xc0 [ 411.348065][ C0] ? assign_work+0x1a0/0x250 [ 411.352664][ C0] worker_thread+0x6c8/0xf00 [ 411.357260][ C0] ? __kthread_parkme+0x148/0x220 [ 411.362291][ C0] ? __pfx_worker_thread+0x10/0x10 [ 411.367401][ C0] kthread+0x2c1/0x3a0 [ 411.371473][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 411.376672][ C0] ? __pfx_kthread+0x10/0x10 [ 411.381269][ C0] ret_from_fork+0x45/0x80 [ 411.385687][ C0] ? __pfx_kthread+0x10/0x10 [ 411.390283][ C0] ret_from_fork_asm+0x1a/0x30 [ 411.395063][ C0] [ 411.398077][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g29045 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 411.409267][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 411.419227][ C0] rcu: RCU grace-period kthread stack dump: [ 411.425105][ C0] task:rcu_preempt state:R running task stack:27600 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 411.436855][ C0] Call Trace: [ 411.440129][ C0] [ 411.443063][ C0] __schedule+0xe58/0x5ad0 [ 411.447480][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 411.452693][ C0] ? __pfx___schedule+0x10/0x10 [ 411.457543][ C0] ? schedule+0x298/0x350 [ 411.461872][ C0] ? __pfx_lock_release+0x10/0x10 [ 411.466899][ C0] ? lock_acquire+0x2f/0xb0 [ 411.471401][ C0] ? schedule+0x1fd/0x350 [ 411.475733][ C0] schedule+0xe7/0x350 [ 411.479806][ C0] schedule_timeout+0x124/0x280 [ 411.484668][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 411.490045][ C0] ? __pfx_process_timeout+0x10/0x10 [ 411.495338][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 411.501141][ C0] ? prepare_to_swait_event+0xf3/0x470 [ 411.506605][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 411.511372][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 411.516660][ C0] ? rcu_gp_init+0xc82/0x1630 [ 411.521343][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 411.526554][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 411.532362][ C0] rcu_gp_kthread+0x271/0x380 [ 411.537041][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 411.542242][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 411.547441][ C0] ? __kthread_parkme+0x148/0x220 [ 411.552474][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 411.557679][ C0] kthread+0x2c1/0x3a0 [ 411.561750][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 411.566947][ C0] ? __pfx_kthread+0x10/0x10 [ 411.571548][ C0] ret_from_fork+0x45/0x80 [ 411.575962][ C0] ? __pfx_kthread+0x10/0x10 [ 411.580557][ C0] ret_from_fork_asm+0x1a/0x30 [ 411.585338][ C0] [ 411.588352][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 411.594675][ C0] CPU: 0 UID: 0 PID: 7204 Comm: kworker/u8:11 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 411.605623][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 411.615681][ C0] Workqueue: events_unbound toggle_allocation_gate [ 411.622190][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x18/0x70 [ 411.628345][ C0] Code: 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 48 8b 15 74 d5 69 7e 65 8b 05 75 d5 69 7e a9 00 01 ff 00 <48> 8b 34 24 74 1d f6 c4 01 74 43 a9 00 00 0f 00 75 3c a9 00 00 f0 [ 411.647949][ C0] RSP: 0018:ffffc90005967990 EFLAGS: 00000246 [ 411.654017][ C0] RAX: 0000000000000001 RBX: ffff8880b8744a40 RCX: ffffffff818df5fc [ 411.661985][ C0] RDX: ffff8880233c2440 RSI: 0000000000000000 RDI: 0000000000000005 [ 411.669953][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 411.677926][ C0] R10: 0000000000000001 R11: 0000000000000006 R12: ffffed10170e8949 [ 411.685893][ C0] R13: 0000000000000001 R14: ffff8880b8744a48 R15: ffff8880b863fe40 [ 411.693859][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 411.702805][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 411.709387][ C0] CR2: 00007fff4b2fa940 CR3: 000000000df7e000 CR4: 00000000003526f0 [ 411.717356][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 411.725323][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 411.733289][ C0] Call Trace: [ 411.736567][ C0] [ 411.739411][ C0] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 411.745748][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 411.750950][ C0] ? rcu_sched_clock_irq+0x247a/0x3310 [ 411.756425][ C0] ? timekeeping_advance+0x72e/0xa90 [ 411.761711][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 411.767351][ C0] ? __asan_memcpy+0x3c/0x60 [ 411.771954][ C0] ? rcu_is_watching+0x12/0xc0 [ 411.776725][ C0] ? update_process_times+0x178/0x2d0 [ 411.782100][ C0] ? __pfx_update_process_times+0x10/0x10 [ 411.787820][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 411.793284][ C0] ? update_wall_time+0x1c/0x40 [ 411.798139][ C0] ? tick_nohz_handler+0x376/0x530 [ 411.803255][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 411.808716][ C0] ? __hrtimer_run_queues+0x5fb/0xae0 [ 411.814097][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 411.819820][ C0] ? read_tsc+0x9/0x20 [ 411.823899][ C0] ? hrtimer_interrupt+0x392/0x8e0 [ 411.829024][ C0] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 411.835182][ C0] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 411.840987][ C0] [ 411.843913][ C0] [ 411.846841][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 411.853006][ C0] ? smp_call_function_many_cond+0x47c/0x1300 [ 411.859080][ C0] ? __sanitizer_cov_trace_pc+0x18/0x70 [ 411.864629][ C0] smp_call_function_many_cond+0x456/0x1300 [ 411.870530][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 411.875562][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 411.880595][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 411.885712][ C0] text_poke_bp_batch+0x22b/0x760 [ 411.890745][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 411.896553][ C0] ? __jump_label_patch+0x1db/0x400 [ 411.901759][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 411.908011][ C0] text_poke_finish+0x30/0x40 [ 411.912690][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 411.918677][ C0] jump_label_update+0x1d7/0x400 [ 411.923624][ C0] static_key_enable_cpuslocked+0x1b7/0x270 [ 411.929528][ C0] static_key_enable+0x1a/0x20 [ 411.934295][ C0] toggle_allocation_gate+0xfc/0x260 [ 411.939580][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 411.945471][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 411.950681][ C0] ? process_one_work+0x921/0x1ba0 [ 411.955791][ C0] ? lock_acquire+0x2f/0xb0 [ 411.960291][ C0] ? process_one_work+0x921/0x1ba0 [ 411.965405][ C0] process_one_work+0x9c5/0x1ba0 [ 411.970349][ C0] ? __pfx_wb_update_bandwidth_workfn+0x10/0x10 [ 411.976588][ C0] ? __pfx_process_one_work+0x10/0x10 [ 411.981959][ C0] ? rcu_is_watching+0x12/0xc0 [ 411.986734][ C0] ? assign_work+0x1a0/0x250 [ 411.991346][ C0] worker_thread+0x6c8/0xf00 [ 411.995979][ C0] ? __kthread_parkme+0x148/0x220 [ 412.001024][ C0] ? __pfx_worker_thread+0x10/0x10 [ 412.006136][ C0] kthread+0x2c1/0x3a0 [ 412.010207][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 412.015405][ C0] ? __pfx_kthread+0x10/0x10 [ 412.020001][ C0] ret_from_fork+0x45/0x80 [ 412.024416][ C0] ? __pfx_kthread+0x10/0x10 [ 412.029009][ C0] ret_from_fork_asm+0x1a/0x30 [ 412.033787][ C0]