last executing test programs: 10.090727747s ago: executing program 1 (id=394): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000001180)={0x6, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff000020"], 0x50) ioctl$RTC_UIE_ON(r1, 0x7003) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_SYNC_REGS(r4, 0x4068aea3, &(0x7f0000000080)) ioctl$KVM_SET_DEBUGREGS(r4, 0x4080aea2, &(0x7f0000000080)={[0x0, 0xffff1000, 0x2000], 0x16bc000000000000, 0x42, 0x9}) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x17, 0x3, 0xc8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$vsock_stream(0x28, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000140)) socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_io_uring_setup(0xd2, &(0x7f0000000500)={0x0, 0xb0b3, 0x0, 0x40000}, &(0x7f0000000040)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x2a, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0xa03e}, 0x1, {0x0, r9}}) io_uring_enter(r6, 0x47ba, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000400)={0x3, {{0x2, 0x4e23, @multicast1}}}, 0x90) r10 = syz_usb_connect(0x3, 0x3d2, &(0x7f0000000680)={{0x12, 0x1, 0x250, 0x1e, 0x4, 0x5d, 0x8, 0xaf7, 0x101, 0xfbb4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3c0, 0x1, 0x2, 0x2, 0x20, 0x8, [{{0x9, 0x4, 0x60, 0xfa, 0x6, 0x2, 0xf6, 0xae, 0x1, [@generic={0xf3, 0x5, "1e807c130df0dc5e227c11cdcf32f8c4d740df13e51e52232311aad2cccbb92d45a7a86feda991357c516a90482deca726ec041c0e644457af1ed08967f8b22effa618e60309a6bb89ce0ceeb80cab11b18d6c43adf043d4ca032768a6f5fd176e54dcd955470dfb8679c487341cf0671865cdd400af5091c1c54ffedaaa8f00a32a4d6c0ad2e21688471ba98628f4db60384a183872c84dbf072ac341cb61bc159391b08258d3ce16faa51b21083383fb7bfe1f7532330755b4cb0285ac2b133ad31514811bb5ae312acec6ee54eff43e39fc310159f130a30d448d366c9db30bba7a3f848e78a2035b3b040824d0d6a5"}, @generic={0x5a, 0x8, "d8859d7d98fd651da59444667a3e5cffe995a09b2cef1624bd74677d4ebaf8055f092cf9f60db829ba2523a17ad56aff14df1d0e74688a805474fd43134e8d439d9b28b68118ad4a80b449cea3578a6483adf212367856f3"}], [{{0x9, 0x5, 0x6, 0x1, 0x200, 0x9, 0xff, 0xc4, [@generic={0x102, 0xb, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0xb97}]}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x10, 0x5, 0x9, [@generic={0x58, 0xe, "469078519b673970123555fb08c607325ec92f235119c53d6931850985f3554c060a24f4c1f01b96b78239b5dd4702114a8082afcfef0676167ba4cd306df7bb2243b2dc972b73981fb8e0523226adfa7047cae985d7"}, @generic={0x1f, 0x21, "ca3c10444e5b9f326e6f542a628310236fd11cb89367d7a177eb2d6ad2"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0xd1, 0x0, 0xa, [@generic={0x22, 0x3a, "528fdeb55a68bfc421704b9dd7544ad8c06ba8a158ed7d810b9a9de3d55cdac6"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x4, 0x2, 0x3c, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x88}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x5, 0x1, 0x9c, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x8}]}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x0, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x95}, @generic={0x74, 0x23, "eeb0a13a16627bd5dc06b47f96ecace1618fb18c034bbe082e9f6d86ac03d69c99524c9d4bef347959d8a8e865800e2861be42b61f0a9721296f360c08371350c7d75c7b99e8393e0e302e014671a8e26c22233957166f090f11330558c4aedb01b13697320e18e568ac1efa02cf6aff89f5"}]}}]}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x310, 0x9, 0xf4, 0xff, 0x20, 0x1}, 0xf, &(0x7f0000000240)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xfc, 0x8, 0x3}]}, 0x1, [{0x93, &(0x7f0000000340)=@string={0x93, 0x3, "5d72ecf95340d03df6a25a4f07fb380f3ea2880e087911a105bba2e728eb630f241eb89d86e34b3782811e43776e93fa5b911c51e220fa95f2ac89296e3350090669f1eb58ab81b003e46803a4428d242fbe5627e780bfb9d3b0d10de11c3522220e932b49fbb48a8d4a4b39a60c9e565279067654d2b91d2ba6e46c806ac3523b60256c7803aa1cf96ae5efac1334d209"}}]}) syz_usb_disconnect(r10) unshare(0x60000) 7.711401819s ago: executing program 4 (id=402): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000ac0)='#mS\xb2j\xcb\xa18:.)\xc7\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd5\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T[\r&\xf0z\xde\xc0\xf3\xcd\x9a\xae\x00\x00\x00\x00(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ\x95|\xe5\xaa\x0e\xe7{\xd4T\x84\x83\x86\x9d', 0x0) mount$afs(&(0x7f0000000040)=ANY=[@ANYBLOB='#ayz1:'], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r3 = semget$private(0x0, 0x4000000009, 0x0) semop(r3, &(0x7f00000001c0)=[{0x4, 0x3}, {}, {0x0, 0xbc5e, 0x1000}, {0x2, 0x9, 0x1800}, {0x3, 0x4, 0x800}], 0x5) r4 = syz_open_dev$vim2m(&(0x7f0000000380), 0x7f, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x0, 0x0, 0x32315659, 0x0, 0x5, [{}, {0xd5bd}, {}, {}, {0x0, 0xfffffffd}], 0x0, 0x0, 0x2, 0x0, 0x1}}) semop(r3, &(0x7f0000000140)=[{0x0, 0xffff}], 0x1) semctl$GETZCNT(r3, 0x0, 0xf, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x1, 0x0, 0x0) setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f0000000080)=0x3, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x200, 0x0, r1, 0x570e, '\x00', 0x0, r1, 0x3, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x50) syz_open_dev$vcsn(&(0x7f0000000580), 0x8000, 0x80000) syz_usb_ep_read(0xffffffffffffffff, 0x7, 0xae, &(0x7f0000000380)=""/174) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfd85, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff03030018698cb89e40f086dd6000000e00002b00630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) 6.914999332s ago: executing program 3 (id=404): openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000088000/0x1000)=nil, 0x1000, 0xb635773f05ebbeef, 0x10, 0xffffffffffffffff, 0xbe3c5000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0xfffffffd) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @mcast2, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x50}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x4000, 0x0, @loopback}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2c102932ba6052cb23e9295683f5674b1aea299b79b1410f21c976c7607a009e865bd6311e807a86", 0x28}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) socket$inet6(0xa, 0x802, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000140)={0x0, "f1c492010165203d36a910000000004e010000000800f7ffffff00", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000100)={"9fcaa0504b38d5004b9277c079417ff857dc9b7ac770169aed764b4d2ada8bde", r5, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000080)={"fe0d1acce4a37ef94acd000200", r6, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r7, 0xc0383e04, &(0x7f0000002240)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)=[{}]}) 6.332390888s ago: executing program 2 (id=405): ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x6, 0x19ef, 0x40000, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x8, 0x802}, 0xd0, 0x7}}) 6.224455152s ago: executing program 4 (id=406): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x4, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000080)={0x0, 0x32344d59, 0x0, @stepwise}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'tunl0\x00'}]}]}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) 6.131601944s ago: executing program 3 (id=407): sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x1404, 0x1}, 0x10}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x222c01) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r0}) accept4$unix(r3, &(0x7f0000000280), &(0x7f0000000340)=0x6e, 0x800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c643c, &(0x7f0000000300)) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000005c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000040)={0x1d, r5, 0x2}, 0x18) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000044}, 0x40) sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3fb, 0x400, 0x70bd29, 0x25dfdbfc}, 0x10}}, 0x0) syz_usb_connect$printer(0x5, 0x0, 0x0, 0x0) close_range(r2, r2, 0x0) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000001580)={r7, @in={{0x2, 0x0, @empty}}, 0x0, 0x3, 0xa, 0xfffffffe, 0x0, 0x0, 0x4}, &(0x7f0000000540)=0x9c) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0x14, 0x4, 0xe6c, 0x1, r7}, &(0x7f0000000080)=0x10) 5.844550525s ago: executing program 4 (id=408): prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) syz_emit_ethernet(0xfe53, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000000)) r1 = socket(0x28, 0x3, 0x2) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000100)) 5.787043371s ago: executing program 2 (id=409): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r1, &(0x7f0000000280), 0x12) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x80000004, 0x10008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000001e00)=[{{&(0x7f0000000540)=@can, 0x80, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/33, 0x21}, {&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000001e80)=""/218, 0xda}], 0x3, &(0x7f00000005c0)=""/49, 0x31}, 0xfffffff7}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000a00)=""/66, 0x42}, {&(0x7f0000001c00)=""/214, 0xd6}], 0x3, &(0x7f0000001d80)=""/107, 0x6b}, 0x4}], 0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x18, r8, 0x325, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r6, @ANYBLOB="ea02000000000000280012800b00010062726964676500001800028005001900800000"], 0x48}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="c50f00000000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="2e372a0084219e67406aa790d163ba3f99da8c41b6fd5337cf21e28cca8b49fe055fa4603fc4844c5ca319ec5717bf34f71c20fec67e7ba7447d8224180cbb3584cce415b5"], 0x24}}, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8080}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x48819}, 0x2000c8c4) 5.714675864s ago: executing program 4 (id=410): openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000088000/0x1000)=nil, 0x1000, 0xb635773f05ebbeef, 0x10, 0xffffffffffffffff, 0xbe3c5000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0xfffffffd) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @mcast2, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x50}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x4000, 0x0, @loopback}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2c102932ba6052cb23e9295683f5674b1aea299b79b1410f21c976c7607a009e865bd6311e807a86", 0x28}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) socket$inet6(0xa, 0x802, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000140)={0x0, "f1c492010165203d36a910000000004e010000000800f7ffffff00", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000100)={"9fcaa0504b38d5004b9277c079417ff857dc9b7ac770169aed764b4d2ada8bde", r5}) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, &(0x7f0000002240)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)=[{}]}) 4.620419966s ago: executing program 4 (id=411): openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="780000000b060102000000000000000003000000090002617d67acd21ca8ce0ac60005000100070000004c0008800c00078007001a00242e0000757e669bd74d41404c9e9f4ce5100007800c0018400000000000000009100007800c001b4000000000000000100c00078008000a400000ffff100007800c0002000000000000000000"], 0x78}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) setresuid(0x0, r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x10, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x9, 0xc, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4.465003085s ago: executing program 4 (id=412): r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x60, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0xffff}, {0x6, 0x24, 0x1a, 0x0, 0x1}}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0xff}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x10, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000200)={0x100, r2}, 0x0) close(r1) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000080000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000002, 0xe, 0xfffffffffffffda9, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e3000000050000009e"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{r5}, &(0x7f0000000180), &(0x7f0000000680)='%pI4 \x00'}, 0x20) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x10, 0x40, 0xf9, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x7, 0x1, 0x1, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x197, 0x3, 0xa, 0x7}}}}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x110, 0xb, 0xfa, 0x5, 0xff, 0x3}, 0x19, &(0x7f0000000740)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0xfb, "15c3f65be927858fed192d5f386a7c5e"}]}, 0x3, [{0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x240a}}, {0xb7, &(0x7f00000007c0)=@string={0xb7, 0x3, "26b389ff39948feccc4905045d1eeeaf5bc72a12e25483c44afbe81585da75948c84f77307cf9b44ad9df6f8f134f31ccd53434918912d656f65268dc425c4d31704a7ac4b4185f2544d8f2f22b52cfadd78f46f4d74ca988886dd91bd8b237d4d3a6255c8f12f72cb19ba00599378bc9abdc5a4f76b8c7ba99e55a6e44a10b13cf9741d89dace6afc1c6f18ea9de07d0ac568101df813e01898aece03cf7bfb298adcaa29a3a287c90a62d357bb96de776f533842"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x1c09}}]}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x80, 0x1c, {0x8, 0xd, 0x0, 0xfffc, 0x87, 0x2, 0x0, 0x6, 0x800, 0xffff, 0x44, 0x2}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0xc0, 0x2, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x4, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x81, 0xf1}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x2, 0xc0, 0x1}}]}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x0, 0xb, 0x5, 0x0, 0x1}, 0x5, &(0x7f0000000640)={0x5, 0xf, 0x5}, 0x5, [{0x7b, &(0x7f0000000280)=@string={0x7b, 0x3, "9e96fb9b75742a8bff3a52631c86f283bacf8d379f8a47e9d3c7eaf46e43822d3812c33287d2094ce99f7949bfc8ef4754b8e177c0e322f7ffe4de89fce5631c07e20ffca7af79f22c0bc55868c8e07e372afd1d3f27584423bf650341e78a7207349faf549d288650d68ccf02164e6606183c8a0b707c4992"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x43e}}, {0xd1, &(0x7f00000003c0)=@string={0xd1, 0x3, "62f108b37bb280cf526133919fd54d242478e15bbfb7dbbe98f4ae79bc7b1b047f64b4c9c22f1b41c897da7bbe00bd7e5a1e3ad394bc4e6c51ca47fc10897830599a5d06a090145e2dfc75f75c68f1c139fe6c58995a69085642def40f49fa3799418d2efa6e06105dc0c74b5bc75bdae3962ade2300945d8cf2cbf991168634efa81f764e82a3775b8d10a032dea19cbd3d714c8f8ea7f38f12252528878442c3e1c68cc6f09a78390b65631cee40a1d2f73840ba72017ce19677580d22160999d3d68c7ef74c1c53f42a73b4e8d2"}}, {0x93, &(0x7f00000004c0)=@string={0x93, 0x3, "dcc2fe4fc5ccb21b7e794a47b5d5182f5a5da9d366f03a0262ebaf6681125e5f6468217d51684ed60b5af7c2fa295e75e96c1fa1652985676e00f4ba354d800fd680ab020dc9b79bd826fe9f8ffa2e65c96548d99db5e9c623723b8b411fa9db4d992b7a52fcf12843ccadc7465e0bb574b5829c29f82e98458d45aab518419114648290d14ec25bae19c52f6fcd289b2b"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0xf8ff}}]}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 4.172261606s ago: executing program 0 (id=414): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000faffffff0000000000000000850000002c000000850000000500000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$phonet(0x23, 0x2, 0x1) sendmsg(r2, &(0x7f0000001140)={&(0x7f0000000000)=@isdn, 0x80, 0x0}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000004c0)="eb8b075a2c42fc617eac8b07383be24abc84beae1ca0d6df6951a8b197c9acef8bb1627f54fda70d542dd64426b6447201fdaa3928731d95b8d8ac94e0d9235badd34c34f105209ee0c970e1b4e329b70eca0a1d43ebcb8ed6cbe727dc5edf95cf2401377b1a49ce293d9a6d456cb7ee85a444e45269c25850503a3ac6e105a9a5", 0x5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8fe00000000bfa200000000000007020000f8ffffffb7030c35eb7aa300b70400000000000085000000030000009500000000000000c881dc8763318a938e9d23e94973e53269d1ca846b22bff2ecd149b6bd89de734f06d72e5fb29213047d80dfa60181fd9dbf0dfe9c4ae652de1dfbe4243f48f713d74bba98779eb7a1af306bc1ee177343b1c6e64ef14bcfbe36da57b887df6a93ae2f84b9cf8ef3ba11909631ae40adf711aae956661c5237a7e342c9374d41ab73b4c32bb771f60a424aba9866944470c3bfcad15906852c6f3bd3129c5120a6bb6e727d1ab0c62c96851dc400"/261], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0x7, 0x0, &(0x7f0000000200)="63eced8e46dc3f", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00'}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r4) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r5, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8010) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f0000000400)={0x200, 0x5, 0x7, 0x2}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r6 = socket(0x10, 0x3, 0x0) setsockopt$sock_int(r6, 0x1, 0x10, &(0x7f0000000200)=0x1, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000003940), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r7, &(0x7f0000003bc0)={0x0, 0x0, &(0x7f0000003b80)={&(0x7f0000003980)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8], 0x58}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r10, 0x10d, 0xf, &(0x7f00001c9fff)="03", 0x1) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000040)={{'fd', 0x3d, r12}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r12, &(0x7f00000021c0)={0x2020}, 0x2020) 4.045675295s ago: executing program 3 (id=415): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socket$unix(0x1, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x38, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x10}]}]}, 0x38}}, 0x0) 3.941657801s ago: executing program 0 (id=416): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001800)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xffe0}, {}, {0x0, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8804}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010003b15001ef40c6bae537614ffff", @ANYRES32=r2, @ANYRES16, @ANYRES64=r1], 0x48}, 0x1, 0x0, 0x0, 0x280088c0}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x2, &(0x7f0000000240)=[{0x8, 0xf5, 0xc, 0x7}, {0x7, 0x40, 0x8, 0x9}]}) socket$unix(0x1, 0x5, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f00000000c0)=0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x732}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 3.930310375s ago: executing program 3 (id=417): bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$getown(r1, 0x3) capget(&(0x7f0000000100)={0x20071026, r2}, &(0x7f0000000140)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) getpid() syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) syz_open_dev$I2C(0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000340)=""/102392, 0x18ff8) shmctl$IPC_RMID(0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x7) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0xff) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43, 0x3}}, @common=@inet=@socket3={{0x28}, 0x51}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @local, @loopback}}}}, 0xfdef) 3.594008822s ago: executing program 1 (id=418): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001800)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xffe0}, {}, {0x0, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8804}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010003b15001ef40c6bae537614ffff", @ANYRES32=r2, @ANYRES16, @ANYRES64=r1], 0x48}, 0x1, 0x0, 0x0, 0x280088c0}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x2, &(0x7f0000000240)=[{0x8, 0xf5, 0xc, 0x7}, {0x7, 0x40, 0x8, 0x9}]}) socket$unix(0x1, 0x5, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f00000000c0)=0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x732}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 3.069515785s ago: executing program 0 (id=419): r0 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x6, 0x19ef, 0x40000, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x8, 0x802}, 0xd0, 0x7}}) 2.619834727s ago: executing program 1 (id=420): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', r4, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}}}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r6, @ANYBLOB="00000000000000002400128009000100626f6e640000100014000280080012"], 0x44}}, 0x0) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e22, 0x8, @loopback}, {0xa, 0x4e20, 0xbd, @mcast2, 0xa}, 0xffffffffffffffff, {[0x9, 0x8, 0x7, 0x4000, 0x400, 0xd, 0x80000001, 0x81]}}, 0x5c) 2.460295583s ago: executing program 0 (id=421): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0x465f}, 0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) setsockopt$inet6_int(r1, 0x29, 0x9, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x8800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}]}) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x31c9}, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x88c2}, 0x41) execveat(0xffffffffffffffff, &(0x7f00000001c0)='./bus/file0\x00', &(0x7f00000005c0)={[&(0x7f0000000280)='-+\x00', &(0x7f0000000380)='overlay\x00', &(0x7f0000000400)=')[[*^*&]\x00', &(0x7f0000000440)='overlay\x00']}, &(0x7f00000006c0)={[&(0x7f0000000640)='overlay\x00', &(0x7f0000000680)='overlay\x00']}, 0x400) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r8, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[], 0x40}}, 0x4000040) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, 0x0, 0x0) 2.447794621s ago: executing program 2 (id=422): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000100)=""/2, &(0x7f0000000300)=0x2) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket(0x2b, 0x1, 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$evdev(0x0, 0x1, 0x1e9880) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, 0x0, 0x0) r5 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x12, 0x0, 0x5, 0x0, 0x8fc3, 0x1, 0x20000, 0x0, 0xf}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) r6 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000002a40)=""/4096, 0x1000}], 0x1}, 0x7}], 0x2, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={&(0x7f0000000000)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x10000}, 0x80, &(0x7f0000000140)=[{&(0x7f00000004c0)="5ebda0cf06667e0dcdb70b8e824cd91ffba50c371523d44d740605c6c760e714d08bbe4f19d85acc50b58f596bb5ba43e833d6d832ffb4fa60aa86d6dde27c8d712e0e57564335bd256170fef17ab563e76bb9ecfa998d7f2ab04806660ad388d45d3da7ffb6ed355dfaa072c1273f6d516329f5ee38dc5f6fbe1de17b006fcdce7cf923cedc7da54dff34962a491b377067e1241d70d302047bb5c236d7021f7a002578adce81e236d9009ad3c1226ce4279df416c63d01ebad1dee1538b8d64e641562b6f4d3f47f7bd3b818f49b0ca27ea505957bc2721cd2efdd72e0b621d6fa8d7c1f5e1d815f01dcc6d118cdac5816", 0xf2}], 0x1, &(0x7f0000000080)=ANY=[@ANYRESHEX=r3], 0x420}, 0x4) 2.264455377s ago: executing program 1 (id=423): openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="780000000b060102000000000000000003000000090002617d67acd21ca8ce0ac60005000100070000004c0008800c00078007001a00242e0000757e669bd74d41404c9e9f4ce5100007800c0018400000000000000009100007800c001b4000000000000000100c00078008000a400000ffff100007800c0002000000000000000000"], 0x78}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x32) setresuid(0x0, r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x10, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x9, 0xc, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.231446055s ago: executing program 3 (id=424): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0800000004000000040000000800000000000000", @ANYRES32, @ANYRESDEC], 0x48) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0xc0880) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000400)='sched_switch\x00', r3, 0x0, 0x2}, 0xe) io_uring_setup(0x1fc2, 0x0) r5 = syz_open_procfs(r0, &(0x7f0000000040)='net/ip_vs\x00') pread64(r5, &(0x7f00000001c0)=""/73, 0x49, 0x400000000000000) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x2080) ioctl$KVM_SET_CPUID2(r5, 0x4048aecb, &(0x7f0000000240)=ANY=[@ANYRES16=r5]) ioctl$PIO_UNIMAPCLR(r5, 0x4b68, &(0x7f0000000040)={0x6, 0xf, 0x5}) ioctl$TUNGETFEATURES(r5, 0x800454cf, &(0x7f0000000040)) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/nbd8', 0x0, 0x43) connect$nfc_llcp(r6, &(0x7f0000000180)={0x27, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x8, "d7e46066301e642d2ea12bbec3c6ccf7b992a19a0ef34978f4f27560473e560419a62a4ac1ce8a24183ce2a5c8f1866dd891e0c67de27fabba9595fdec89eb", 0x1a}, 0x60) 1.168503323s ago: executing program 0 (id=425): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c000000070a01040000000000f9ff000200000009003d0073797a32000000000900010073797a3000000000"], 0x2c}}, 0x0) 1.128710805s ago: executing program 2 (id=426): openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x1}, 0x18) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, 0x0, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x90) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x4c) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYRESHEX=r1, @ANYRES16=r0, @ANYBLOB="000000faffffff0000000000000000000300", @ANYRES32=0x0, @ANYRES32], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r8, @ANYBLOB="200001"], 0x38}}, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) 1.105064012s ago: executing program 1 (id=427): r0 = io_uring_setup(0x175c, &(0x7f000009df80)) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="1f003300b0000000080211000001080211000000505050505050000030b72787960840aaf69b76c62a867ae87cf4623371c384ae2aa19ea734e6b922ab1e1269f1c9d083cfb78477fd3861162296752b9c5c71b8e48c5ed5ed7c8af1dbc9c48540d55f9991f5bd62153ddb5b921abbe1f58df1a6d31a014a5d51f86b9368b3c9438ea937c3ae5f4df8dd5676b0f9bb648b518d36544d03c6131bb004d29bf780673dc0e14a"], 0x3c}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x76, @string={0x76, 0x3, "a21b11366d863bdc66c56d4296fb0b67e64f4bdd3e6c52d6f5381aa124eb0a504f44f540e9c68987a232b39ee0aa46539a90df6e82289654001befdb3aaedc0add4fa4a7c0287dea180677f9d9ea8d96cf99e78a0967a146c9c17fe7fa6a06d24153228e39f1542938ba9ec7bcd10918358d44f9"}}, &(0x7f0000000000)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7f, 0x4, 0x9, 0x2, "00c40400", "02003900"}}, 0x0}, &(0x7f00000008c0)={0x84, &(0x7f0000000480)={0x20, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x5}, 0x0, 0x0, &(0x7f0000000700)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000840)={0x40, 0x1e, 0x1}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x8}}) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r3, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000100)={0x31, 0x6, 0x0, {0x1, 0x1, 0x8, 0x0, 'nl80211\x00'}}, 0x31) write$FUSE_INIT(r3, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 702.605737ms ago: executing program 0 (id=428): syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0xf9, 0x0, 0x413}}}, 0x7) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) syz_emit_vhci(&(0x7f0000000280)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x281c2, 0x0) fcntl$setlease(r5, 0x400, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_page_alloc\x00'}, 0x10) 413.639025ms ago: executing program 2 (id=429): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0) 328.62318ms ago: executing program 3 (id=430): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001800)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xffe0}, {}, {0x0, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8804}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010003b15001ef40c6bae537614ffff", @ANYRES32=r2, @ANYRES16, @ANYRES64=r1], 0x48}, 0x1, 0x0, 0x0, 0x280088c0}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x2, &(0x7f0000000240)=[{0x8, 0xf5, 0xc, 0x7}, {0x7, 0x40, 0x8, 0x9}]}) socket$unix(0x1, 0x5, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f00000000c0)=0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x732}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 1.054455ms ago: executing program 1 (id=431): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x18, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @multicast1}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x20, @in={0x2, 0x4e21, @local}}]}, 0x40}}, 0x0) 0s ago: executing program 2 (id=432): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r1, &(0x7f0000000280), 0x12) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x80000004, 0x10008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000001e00)=[{{&(0x7f0000000540)=@can, 0x80, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/33, 0x21}, {&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000001e80)=""/218, 0xda}], 0x3, &(0x7f00000005c0)=""/49, 0x31}, 0xfffffff7}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000a00)=""/66, 0x42}, {&(0x7f0000001c00)=""/214, 0xd6}], 0x3, &(0x7f0000001d80)=""/107, 0x6b}, 0x4}], 0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x18, r8, 0x325, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r6, @ANYBLOB="ea02000000000000280012800b00010062726964676500001800028005001900800000"], 0x48}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="c50f00000000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="2e372a0084219e67406aa790d163ba3f99da8c41b6fd5337cf21e28cca8b49fe055fa4603fc4844c5ca319ec5717bf34f71c20fec67e7ba7447d8224180cbb3584cce415b5"], 0x24}}, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8080}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x48819}, 0x2000c8c4) kernel console output (not intermixed with test programs): tes leftover after parsing attributes in process `syz.1.53'. [ 79.117234][ T29] audit: type=1400 audit(1734302958.912:373): avc: denied { execute } for pid=6118 comm="syz.3.55" path="/11/cpu.stat" dev="tmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 79.139678][ C1] vkms_vblank_simulate: vblank timer overrun [ 80.175418][ T6120] delete_channel: no stack [ 80.306557][ T29] audit: type=1400 audit(1734302959.459:374): avc: denied { create } for pid=6120 comm="syz.1.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 80.415170][ T29] audit: type=1400 audit(1734302959.469:375): avc: denied { bind } for pid=6120 comm="syz.1.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 80.445147][ T6136] tipc: Started in network mode [ 80.450432][ T6136] tipc: Node identity 4, cluster identity 4711 [ 80.456673][ T6136] tipc: Node number set to 4 [ 80.463561][ T29] audit: type=1400 audit(1734302959.469:376): avc: denied { read append } for pid=6120 comm="syz.1.56" name="sg0" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 80.528319][ T29] audit: type=1400 audit(1734302959.469:377): avc: denied { open } for pid=6120 comm="syz.1.56" path="/dev/sg0" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 80.556389][ T29] audit: type=1400 audit(1734302959.469:378): avc: denied { write } for pid=6120 comm="syz.1.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.576454][ T29] audit: type=1400 audit(1734302959.469:379): avc: denied { nlmsg_write } for pid=6120 comm="syz.1.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 81.835809][ T6164] netlink: 12 bytes leftover after parsing attributes in process `syz.2.66'. [ 81.839711][ T6165] loop6: detected capacity change from 0 to 524287999 [ 81.858547][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 81.867851][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 81.879369][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 81.888537][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 81.897183][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 81.904282][ T6157] CUSE: info not properly terminated [ 81.906350][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 81.912978][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 81.928948][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 81.938781][ T6164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.66'. [ 81.948569][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 81.957771][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 82.060244][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 82.069430][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 82.078286][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 82.087460][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 82.096173][ T8] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 82.106343][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 82.115528][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 82.123399][ T6165] ldm_validate_partition_table(): Disk read failed. [ 82.137220][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 82.146442][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 82.155186][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 82.164390][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 82.200392][ T6165] Dev loop6: unable to read RDB block 0 [ 82.248576][ T6165] loop6: unable to read partition table [ 82.254401][ T6165] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 82.329368][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 82.347050][ T8] usb 5-1: config 2 has an invalid interface number: 96 but max is 0 [ 82.369596][ T8] usb 5-1: config 2 has an invalid interface association descriptor of length 2, skipping [ 82.381284][ T6170] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.417114][ T6173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.68'. [ 82.437550][ T8] usb 5-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 82.446685][ T6166] ldm_validate_partition_table(): Disk read failed. [ 82.478764][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 82.478780][ T29] audit: type=1400 audit(1734302962.253:390): avc: denied { write } for pid=6171 comm="syz.2.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 82.495440][ T8] usb 5-1: config 2 has an invalid descriptor of length 1, skipping remainder of the config [ 82.516197][ T8] usb 5-1: config 2 has no interface number 0 [ 82.523426][ T8] usb 5-1: config 2 interface 96 altsetting 250 has an endpoint descriptor with address 0x1E, changing to 0xE [ 82.536094][ T8] usb 5-1: config 2 interface 96 altsetting 250 endpoint 0xE has invalid maxpacket 4988, setting to 64 [ 82.545533][ T6166] Dev loop6: unable to read RDB block 0 [ 82.548255][ T8] usb 5-1: config 2 interface 96 altsetting 250 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 82.567284][ T8] usb 5-1: config 2 interface 96 has no altsetting 0 [ 82.580350][ T29] audit: type=1400 audit(1734302962.253:391): avc: denied { connect } for pid=6171 comm="syz.2.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 82.601082][ T29] audit: type=1400 audit(1734302962.253:392): avc: denied { name_connect } for pid=6171 comm="syz.2.68" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 82.633359][ T29] audit: type=1400 audit(1734302962.263:393): avc: denied { shutdown } for pid=6171 comm="syz.2.68" lport=42351 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 82.655044][ T29] audit: type=1400 audit(1734302962.352:394): avc: denied { ioctl } for pid=6134 comm="syz.4.58" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 82.684583][ T8] usb 5-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=fb.b4 [ 82.697811][ T6175] binder: 6171:6175 ioctl c0306201 20000680 returned -22 [ 82.711205][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.719213][ T8] usb 5-1: Product: syz [ 82.761314][ T6166] loop6: unable to read partition table [ 82.762015][ T8] usb 5-1: Manufacturer: syz [ 82.779990][ T6166] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 82.789635][ T8] usb 5-1: SerialNumber: syz [ 83.988957][ T29] audit: type=1400 audit(1734302962.800:395): avc: denied { create } for pid=6172 comm="syz.0.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 85.096066][ T6172] delete_channel: no stack [ 85.192710][ T29] audit: type=1400 audit(1734302964.948:396): avc: denied { setopt } for pid=6188 comm="syz.2.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 85.280178][ T29] audit: type=1400 audit(1734302965.038:397): avc: denied { read } for pid=6188 comm="syz.2.72" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 85.903296][ T29] audit: type=1400 audit(1734302965.664:398): avc: denied { read write } for pid=6193 comm="syz.2.76" name="virtual_nci" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 86.006685][ T5192] ldm_validate_partition_table(): Disk read failed. [ 86.015062][ T5192] Dev loop6: unable to read RDB block 0 [ 86.022318][ T5192] loop6: unable to read partition table [ 86.049900][ T29] audit: type=1400 audit(1734302965.684:399): avc: denied { open } for pid=6193 comm="syz.2.76" path="/dev/virtual_nci" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 86.258043][ T8] usb 5-1: can't set config #2, error -71 [ 86.313376][ T8] usb 5-1: USB disconnect, device number 3 [ 86.626803][ T6213] bridge0: port 3(erspan0) entered blocking state [ 86.634035][ T6213] bridge0: port 3(erspan0) entered disabled state [ 86.640620][ T6213] erspan0: entered allmulticast mode [ 86.648011][ T6213] erspan0: entered promiscuous mode [ 86.654657][ T6213] bridge0: port 3(erspan0) entered blocking state [ 86.661844][ T6213] bridge0: port 3(erspan0) entered forwarding state [ 86.994322][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 87.189531][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short [ 87.236446][ T8] usb 2-1: config 1 has an invalid interface number: 20 but max is 0 [ 87.244682][ T5858] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 87.288391][ T6220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.81'. [ 87.305043][ T6220] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.320164][ T6220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.322049][ T8] usb 2-1: config 1 has no interface number 0 [ 87.356201][ T8] usb 2-1: config 1 interface 20 has no altsetting 0 [ 87.358791][ T6221] netlink: 40 bytes leftover after parsing attributes in process `syz.3.81'. [ 87.377823][ T8] usb 2-1: New USB device found, idVendor=0923, idProduct=010f, bcdDevice=b0.fa [ 87.396348][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.396753][ T6220] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.404338][ T8] usb 2-1: Product: syz [ 87.404359][ T8] usb 2-1: Manufacturer: syz [ 87.404376][ T8] usb 2-1: SerialNumber: syz [ 87.429723][ T5858] usb 3-1: Using ep0 maxpacket: 8 [ 87.486432][ T5858] usb 3-1: config 2 has an invalid interface number: 96 but max is 0 [ 87.494846][ T5858] usb 3-1: config 2 has an invalid interface association descriptor of length 2, skipping [ 87.525374][ T5858] usb 3-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 87.537436][ T6220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.557915][ T5858] usb 3-1: config 2 has an invalid descriptor of length 1, skipping remainder of the config [ 87.575679][ T5858] usb 3-1: config 2 has no interface number 0 [ 87.588438][ T5858] usb 3-1: config 2 interface 96 altsetting 250 has an endpoint descriptor with address 0x1E, changing to 0xE [ 87.642087][ T5858] usb 3-1: config 2 interface 96 altsetting 250 endpoint 0xE has invalid maxpacket 4988, setting to 64 [ 87.673104][ T5858] usb 3-1: config 2 interface 96 altsetting 250 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 87.732005][ T5858] usb 3-1: config 2 interface 96 has no altsetting 0 [ 87.773046][ T5858] usb 3-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=fb.b4 [ 87.806735][ T5858] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.842531][ T5858] usb 3-1: Product: syz [ 87.862006][ T5858] usb 3-1: Manufacturer: syz [ 88.051521][ T5858] usb 3-1: SerialNumber: syz [ 88.762598][ T6225] delete_channel: no stack [ 88.914142][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 88.914157][ T29] audit: type=1400 audit(1734302968.609:413): avc: denied { write } for pid=6227 comm="syz.3.84" name="ip_tables_targets" dev="proc" ino=4026533495 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 89.322959][ T6232] netlink: 'syz.3.84': attribute type 2 has an invalid length. [ 89.362545][ T6232] Tq€: entered promiscuous mode [ 89.656907][ T6231] process 'syz.3.84' launched './file1' with NULL argv: empty string added [ 89.672509][ T29] audit: type=1400 audit(1734302969.415:414): avc: denied { execute_no_trans } for pid=6227 comm="syz.3.84" path="/16/file1" dev="tmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 89.701738][ T5858] flexcop_usb: set interface failed. [ 89.711869][ T5858] b2c2_flexcop_usb 3-1:2.96: probe with driver b2c2_flexcop_usb failed with error -22 [ 89.742130][ T5858] usb 3-1: USB disconnect, device number 4 [ 90.002568][ T8] gspca_main: tv8532-2.14.0 probing 0923:010f [ 90.160459][ T8] usb 2-1: USB disconnect, device number 3 [ 91.014472][ T29] audit: type=1400 audit(1734302970.659:415): avc: denied { mount } for pid=6249 comm="syz.4.90" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 91.036103][ C0] vkms_vblank_simulate: vblank timer overrun [ 91.226658][ T6253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.91'. [ 91.259561][ T6253] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.269128][ T25] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 91.310694][ T6257] netlink: 40 bytes leftover after parsing attributes in process `syz.0.91'. [ 91.331497][ T6253] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.354754][ T6253] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.370274][ T6253] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.636742][ T6262] xt_policy: neither incoming nor outgoing policy selected [ 91.881515][ T6264] syzkaller0: entered promiscuous mode [ 91.891368][ T6264] syzkaller0: entered allmulticast mode [ 91.959910][ T6264] 9pnet_fd: Insufficient options for proto=fd [ 92.336524][ T6266] fuse: Unknown parameter 'rootmxde' [ 92.705975][ T25] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 92.810792][ T25] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 92.839992][ T25] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 92.863501][ T25] usb 4-1: string descriptor 0 read error: -22 [ 92.869753][ T25] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 92.891463][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.930485][ T25] adutux 4-1:168.0: interrupt endpoints not found [ 93.162060][ T5858] usb 4-1: USB disconnect, device number 4 [ 93.365064][ T25] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 93.434456][ T6276] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 93.437964][ T6278] FAULT_INJECTION: forcing a failure. [ 93.437964][ T6278] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 93.465569][ T6278] CPU: 1 UID: 0 PID: 6278 Comm: syz.4.99 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 93.476095][ T6278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 93.486144][ T6278] Call Trace: [ 93.489409][ T6278] [ 93.492328][ T6278] dump_stack_lvl+0x16c/0x1f0 [ 93.497001][ T6278] should_fail_ex+0x497/0x5b0 [ 93.501695][ T6278] _copy_to_user+0x32/0xd0 [ 93.506109][ T6278] simple_read_from_buffer+0xd0/0x160 [ 93.511486][ T6278] proc_fail_nth_read+0x198/0x270 [ 93.516531][ T6278] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 93.522091][ T6278] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 93.527650][ T6278] vfs_read+0x1df/0xbe0 [ 93.531812][ T6278] ? __fget_files+0x1fc/0x3a0 [ 93.536483][ T6278] ? __pfx___mutex_lock+0x10/0x10 [ 93.541493][ T6278] ? __pfx_vfs_read+0x10/0x10 [ 93.546156][ T6278] ? __fget_files+0x206/0x3a0 [ 93.550819][ T6278] ksys_read+0x12b/0x250 [ 93.555063][ T6278] ? __pfx_ksys_read+0x10/0x10 [ 93.559815][ T6278] do_syscall_64+0xcd/0x250 [ 93.564335][ T6278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.570221][ T6278] RIP: 0033:0x7f77d618472c [ 93.574628][ T6278] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 93.594242][ T6278] RSP: 002b:00007f77d7099030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 93.602637][ T6278] RAX: ffffffffffffffda RBX: 00007f77d6375fa0 RCX: 00007f77d618472c [ 93.610598][ T6278] RDX: 000000000000000f RSI: 00007f77d70990a0 RDI: 0000000000000004 [ 93.618568][ T6278] RBP: 00007f77d7099090 R08: 0000000000000000 R09: 0000000000000000 [ 93.626539][ T6278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.634499][ T6278] R13: 0000000000000000 R14: 00007f77d6375fa0 R15: 00007fff67318198 [ 93.642465][ T6278] [ 93.675872][ T29] audit: type=1400 audit(1734302973.396:416): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 93.735650][ T25] usb 2-1: config 0 has an invalid interface number: 222 but max is 0 [ 93.744147][ T25] usb 2-1: config 0 has no interface number 0 [ 93.770047][ T25] usb 2-1: config 0 interface 222 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.782451][ T25] usb 2-1: config 0 interface 222 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.793604][ T25] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 93.804731][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.885646][ T25] usb 2-1: config 0 descriptor?? [ 93.889893][ T6283] netlink: 56 bytes leftover after parsing attributes in process `syz.4.100'. [ 94.473338][ T29] audit: type=1400 audit(1734302974.182:417): avc: denied { read write } for pid=6288 comm="syz.3.101" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 94.516364][ T29] audit: type=1400 audit(1734302974.182:418): avc: denied { open } for pid=6288 comm="syz.3.101" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 94.562200][ T29] audit: type=1400 audit(1734302974.242:419): avc: denied { search } for pid=5174 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.584094][ C0] vkms_vblank_simulate: vblank timer overrun [ 94.973252][ T25] usbhid 2-1:0.222: can't add hid device: -71 [ 94.982372][ T25] usbhid 2-1:0.222: probe with driver usbhid failed with error -71 [ 95.048250][ T29] audit: type=1400 audit(1734302974.760:420): avc: denied { mounton } for pid=6291 comm="syz.2.102" path="/17/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 95.070475][ C0] vkms_vblank_simulate: vblank timer overrun [ 95.080648][ T25] usb 2-1: USB disconnect, device number 4 [ 95.117497][ T29] audit: type=1400 audit(1734302974.829:421): avc: denied { mount } for pid=6291 comm="syz.2.102" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 95.139471][ C0] vkms_vblank_simulate: vblank timer overrun [ 95.288642][ T29] audit: type=1400 audit(1734302974.998:422): avc: denied { mounton } for pid=6299 comm="syz.4.105" path="/22/file0" dev="tmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 95.367429][ T29] audit: type=1400 audit(1734302975.028:423): avc: denied { getopt } for pid=6299 comm="syz.4.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 95.399254][ T29] audit: type=1400 audit(1734302975.028:424): avc: denied { mounton } for pid=6299 comm="syz.4.105" path="/22/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 95.524005][ T29] audit: type=1400 audit(1734302975.217:425): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 95.881349][ T29] audit: type=1400 audit(1734302975.556:426): avc: denied { bind } for pid=6302 comm="syz.3.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 96.098123][ T6314] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.106198][ T6314] bond0: (slave bond1): Enslaving as an active interface with an up link [ 96.991228][ T25] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 97.194978][ T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 97.198161][ T25] usb 1-1: New USB device found, idVendor=0bda, idProduct=0139, bcdDevice=b4.99 [ 97.251874][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.280514][ T25] usb 1-1: Product: syz [ 97.291137][ T25] usb 1-1: Manufacturer: syz [ 97.331517][ T25] usb 1-1: SerialNumber: syz [ 97.377747][ T25] usb 1-1: config 0 descriptor?? [ 97.391727][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 97.469520][ T8] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 97.482532][ T8] usb 4-1: config 0 has no interface number 0 [ 97.516451][ T6353] syz.1.114: attempt to access beyond end of device [ 97.516451][ T6353] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 97.519362][ T25] rtsx_usb 1-1:0.0: probe with driver rtsx_usb failed with error -22 [ 97.666483][ T8] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 97.669282][ T6327] team0 (unregistering): Port device team_slave_0 removed [ 97.729772][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.742527][ T6327] team0 (unregistering): Port device team_slave_1 removed [ 97.758698][ T8] usb 4-1: Product: syz [ 97.765071][ T8] usb 4-1: Manufacturer: syz [ 97.769686][ T8] usb 4-1: SerialNumber: syz [ 97.800201][ T8] usb 4-1: config 0 descriptor?? [ 97.815646][ T6350] netlink: 20 bytes leftover after parsing attributes in process `syz.4.108'. [ 97.853569][ T6350] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 97.854618][ T6350] block (null): Could not allocate knbd recv work queue. [ 97.966571][ T6350] nbd: failed to add new device [ 98.077616][ T6367] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6367 comm=syz.1.116 [ 98.101006][ T6327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.136972][ T6327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.190369][ T6373] xt_NFQUEUE: number of total queues is 0 [ 98.261156][ T6374] veth1_macvtap: left promiscuous mode [ 98.285136][ T6374] macsec0: entered allmulticast mode [ 98.331592][ T6376] netlink: 'syz.4.118': attribute type 10 has an invalid length. [ 98.349880][ T8] usbhid 4-1:0.128: couldn't find an input interrupt endpoint [ 98.382193][ T8] usb 4-1: USB disconnect, device number 5 [ 98.389474][ T6376] syz_tun: entered promiscuous mode [ 98.414803][ T5862] usb 1-1: USB disconnect, device number 4 [ 98.431816][ T6376] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 98.463277][ T6381] netlink: 24 bytes leftover after parsing attributes in process `syz.2.121'. [ 98.517032][ T6381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.121'. [ 98.866974][ T6394] netlink: 12 bytes leftover after parsing attributes in process `syz.1.120'. [ 98.878642][ T6394] bridge0: port 3(erspan0) entered disabled state [ 98.885957][ T6394] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.893962][ T6394] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.904890][ T6394] bridge0: entered allmulticast mode [ 98.960550][ T8] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 99.098869][ T6395] mmap: syz.3.126 (6395): VmData 37728256 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 99.192425][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 99.202559][ T8] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 99.212754][ T8] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 99.228772][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 99.274097][ T8] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 99.302815][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.312287][ T8] usb 3-1: Product: syz [ 99.561505][ T8] usb 3-1: Manufacturer: syz [ 99.567166][ T8] usb 3-1: SerialNumber: syz [ 99.631366][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 99.631381][ T29] audit: type=1400 audit(1734302979.319:454): avc: denied { map } for pid=6402 comm="syz.4.129" path="socket:[11393]" dev="sockfs" ino=11393 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 99.674236][ T6405] tipc: Started in network mode [ 99.679560][ T6405] tipc: Node identity ac1414aa, cluster identity 4711 [ 99.681816][ T29] audit: type=1400 audit(1734302979.359:455): avc: denied { read } for pid=6402 comm="syz.4.129" path="socket:[11393]" dev="sockfs" ino=11393 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 99.700765][ T6405] tipc: Enabled bearer , priority 10 [ 99.746019][ T29] audit: type=1400 audit(1734302979.429:456): avc: denied { map } for pid=6402 comm="syz.4.129" path="/dev/video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 99.984990][ T5862] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 100.658663][ T29] audit: type=1400 audit(1734302979.738:457): avc: denied { append } for pid=6407 comm="syz.1.131" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 100.777622][ T29] audit: type=1400 audit(1734302980.395:458): avc: denied { watch watch_reads } for pid=6404 comm="syz.3.130" path="/25" dev="tmpfs" ino=149 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 100.800259][ C1] vkms_vblank_simulate: vblank timer overrun [ 100.807791][ T29] audit: type=1400 audit(1734302980.445:459): avc: denied { read write } for pid=6391 comm="syz.2.125" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 100.829000][ T29] audit: type=1400 audit(1734302980.455:460): avc: denied { open } for pid=6391 comm="syz.2.125" path="/25/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 100.829073][ T9] tipc: Node number set to 2886997162 [ 100.850868][ C1] vkms_vblank_simulate: vblank timer overrun [ 100.874864][ T8] usb 3-1: 0:2 : does not exist [ 100.938324][ T5862] usb 1-1: Using ep0 maxpacket: 32 [ 100.951070][ T5862] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.964123][ T5862] usb 1-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00 [ 101.007845][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.126786][ T8] usb 3-1: USB disconnect, device number 5 [ 101.130277][ T5862] usb 1-1: config 0 descriptor?? [ 101.237598][ T29] audit: type=1400 audit(1734302980.923:461): avc: denied { write } for pid=6415 comm="syz.3.132" name="sg0" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 101.271480][ T6416] program syz.3.132 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.287841][ T29] audit: type=1400 audit(1734302980.972:462): avc: denied { ioctl } for pid=6415 comm="syz.3.132" path="/dev/sg0" dev="devtmpfs" ino=746 ioctlcmd=0x1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 101.324757][ T29] audit: type=1400 audit(1734302981.012:463): avc: denied { getopt } for pid=6417 comm="syz.4.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 101.399129][ T6421] FAULT_INJECTION: forcing a failure. [ 101.399129][ T6421] name failslab, interval 1, probability 0, space 0, times 1 [ 101.412634][ T6421] CPU: 1 UID: 0 PID: 6421 Comm: syz.3.134 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 101.423234][ T6421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 101.433283][ T6421] Call Trace: [ 101.436552][ T6421] [ 101.439472][ T6421] dump_stack_lvl+0x16c/0x1f0 [ 101.444150][ T6421] should_fail_ex+0x497/0x5b0 [ 101.448832][ T6421] ? fs_reclaim_acquire+0xae/0x150 [ 101.453947][ T6421] should_failslab+0xc2/0x120 [ 101.458622][ T6421] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 101.464431][ T6421] ? __alloc_skb+0x2b1/0x380 [ 101.469028][ T6421] __alloc_skb+0x2b1/0x380 [ 101.473441][ T6421] ? __pfx___alloc_skb+0x10/0x10 [ 101.478377][ T6421] ? rcu_is_watching+0x12/0xc0 [ 101.483152][ T6421] ? trace_kmem_cache_alloc+0x2d/0xd0 [ 101.488532][ T6421] ? kmem_cache_alloc_noprof+0x279/0x3d0 [ 101.494168][ T6421] ? audit_log_start+0x2bc/0x7e0 [ 101.499117][ T6421] audit_log_start+0x2e1/0x7e0 [ 101.503879][ T6421] ? __pfx_audit_log_start+0x10/0x10 [ 101.509185][ T6421] ? __pfx_lock_release+0x10/0x10 [ 101.514205][ T6421] ? migrate_enable+0x1ef/0x260 [ 101.519059][ T6421] ? __pfx_migrate_enable+0x10/0x10 [ 101.524278][ T6421] audit_seccomp+0x61/0x280 [ 101.528784][ T6421] __seccomp_filter+0x816/0xf40 [ 101.533673][ T6421] ? __pfx___seccomp_filter+0x10/0x10 [ 101.539047][ T6421] ? fput+0x67/0x440 [ 101.542942][ T6421] ? ksys_write+0x1ba/0x250 [ 101.547443][ T6421] __secure_computing+0x26c/0x3f0 [ 101.552462][ T6421] syscall_trace_enter+0x8b/0x260 [ 101.557486][ T6421] do_syscall_64+0x1ee/0x250 [ 101.562075][ T6421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.567972][ T6421] RIP: 0033:0x7f5fd1d85d19 [ 101.572381][ T6421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.591990][ T6421] RSP: 002b:00007f5fd2b8c038 EFLAGS: 00000246 ORIG_RAX: 000000000000011f [ 101.600395][ T6421] RAX: ffffffffffffffda RBX: 00007f5fd1f75fa0 RCX: 00007f5fd1d85d19 [ 101.608404][ T6421] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 101.616378][ T6421] RBP: 00007f5fd2b8c090 R08: 0000000000000000 R09: 0000000000000000 [ 101.624347][ T6421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.632309][ T6421] R13: 0000000000000000 R14: 00007f5fd1f75fa0 R15: 00007ffd26bb7e18 [ 101.640285][ T6421] [ 101.643307][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.873657][ T6401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.888670][ T6401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.900803][ T6401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.923244][ T6401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.949131][ T6401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.960154][ T6401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.008607][ T5862] usbhid 1-1:0.0: can't add hid device: -71 [ 102.014671][ T5862] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 102.113242][ T5862] usb 1-1: USB disconnect, device number 5 [ 102.389838][ T6458] infiniband sz1: set active [ 102.396495][ T5895] lo speed is unknown, defaulting to 1000 [ 102.492947][ T6435] nci: nci_rsp_packet: unknown rsp opcode 0x128 [ 102.573974][ T6467] netlink: 12 bytes leftover after parsing attributes in process `syz.1.141'. [ 102.616045][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 102.746258][ T8] usb 3-1: device descriptor read/64, error -71 [ 102.989532][ T8] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 103.129081][ T8] usb 3-1: device descriptor read/64, error -71 [ 103.275659][ T8] usb usb3-port1: attempt power cycle [ 103.797545][ T8] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 104.432408][ T46] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 104.437350][ T8] usb 3-1: device descriptor read/8, error -71 [ 104.455896][ T6487] netlink: 16 bytes leftover after parsing attributes in process `syz.0.149'. [ 104.615221][ T46] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 104.634830][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.658341][ T8] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 105.684775][ T8] usb 3-1: device descriptor read/8, error -71 [ 105.800803][ T8] usb usb3-port1: unable to enumerate USB device [ 106.177612][ T46] usb 5-1: config 0 descriptor?? [ 106.226802][ T46] cp210x 5-1:0.0: cp210x converter detected [ 106.274563][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 106.274578][ T29] audit: type=1400 audit(1734302985.943:486): avc: denied { create } for pid=6500 comm="syz.0.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 106.621435][ T46] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 106.628959][ T46] cp210x 5-1:0.0: querying part number failed [ 106.639863][ T46] usb 5-1: cp210x converter now attached to ttyUSB0 [ 106.650930][ T46] usb 5-1: USB disconnect, device number 4 [ 107.195534][ T46] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 107.203981][ T46] cp210x 5-1:0.0: device disconnected [ 107.241666][ T6507] delete_channel: no stack [ 107.298159][ T5862] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 107.363489][ T25] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 107.473937][ T5862] usb 2-1: Using ep0 maxpacket: 8 [ 107.492271][ T5862] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 11 [ 107.507885][ T5862] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 107.529241][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.537470][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 107.548576][ T25] usb 3-1: unable to get BOS descriptor or descriptor too short [ 107.557386][ T25] usb 3-1: config 1 has an invalid interface number: 153 but max is 0 [ 107.574271][ T25] usb 3-1: config 1 has no interface number 0 [ 107.583185][ T5862] usb 2-1: config 0 descriptor?? [ 107.588242][ T25] usb 3-1: config 1 interface 153 has no altsetting 0 [ 107.613078][ T25] usb 3-1: New USB device found, idVendor=105b, idProduct=6a59, bcdDevice=e9.68 [ 107.623357][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.643793][ T25] usb 3-1: Product: syz [ 107.652822][ T25] usb 3-1: Manufacturer: syz [ 107.662984][ T25] usb 3-1: SerialNumber: syz [ 107.892971][ T29] audit: type=1400 audit(1734302987.547:487): avc: denied { setopt } for pid=6505 comm="syz.2.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 107.898852][ T6522] netlink: 12 bytes leftover after parsing attributes in process `syz.0.158'. [ 107.943139][ T6522] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.951459][ T6522] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.988641][ T6522] bridge0: entered allmulticast mode [ 108.206203][ T5862] aquacomputer_d5next 0003:0C70:F00E.0002: unknown main item tag 0xd [ 108.221605][ T5862] aquacomputer_d5next 0003:0C70:F00E.0002: item fetching failed at offset 10/11 [ 108.241395][ T6525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.250146][ T6525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.293100][ T5862] aquacomputer_d5next 0003:0C70:F00E.0002: probe with driver aquacomputer_d5next failed with error -22 [ 108.410814][ T5862] usb 2-1: USB disconnect, device number 5 [ 108.531204][ T8] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 108.539754][ T5861] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 108.709576][ T5861] usb 5-1: Using ep0 maxpacket: 8 [ 108.718066][ T8] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 108.745610][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 108.755787][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 108.766787][ T8] usb 4-1: SerialNumber: syz [ 108.772890][ T5861] usb 5-1: config 2 has an invalid interface number: 96 but max is 0 [ 108.786332][ T5861] usb 5-1: config 2 has an invalid interface association descriptor of length 2, skipping [ 108.798138][ T5861] usb 5-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 108.810513][ T5861] usb 5-1: config 2 has an invalid descriptor of length 1, skipping remainder of the config [ 108.820681][ T5861] usb 5-1: config 2 has no interface number 0 [ 108.827124][ T5861] usb 5-1: config 2 interface 96 altsetting 250 has an endpoint descriptor with address 0x1E, changing to 0xE [ 108.839936][ T5861] usb 5-1: config 2 interface 96 altsetting 250 endpoint 0xE has invalid maxpacket 4988, setting to 64 [ 108.855364][ T5861] usb 5-1: config 2 interface 96 altsetting 250 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 108.869750][ T5861] usb 5-1: config 2 interface 96 has no altsetting 0 [ 108.878489][ T5861] usb 5-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=fb.b4 [ 108.889337][ T5861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.897608][ T5861] usb 5-1: Product: syz [ 108.917454][ T5861] usb 5-1: Manufacturer: syz [ 108.923090][ T5861] usb 5-1: SerialNumber: syz [ 109.511648][ T5862] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 109.733636][ T25] usb 3-1: USB disconnect, device number 10 [ 109.810525][ T6542] FAULT_INJECTION: forcing a failure. [ 109.810525][ T6542] name failslab, interval 1, probability 0, space 0, times 0 [ 109.823502][ T6542] CPU: 1 UID: 0 PID: 6542 Comm: syz.2.163 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 109.834104][ T6542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 109.844167][ T6542] Call Trace: [ 109.847454][ T6542] [ 109.850397][ T6542] dump_stack_lvl+0x16c/0x1f0 [ 109.855095][ T6542] should_fail_ex+0x497/0x5b0 [ 109.859792][ T6542] ? local_lock_acquire+0x10/0x150 [ 109.864925][ T6542] should_failslab+0xc2/0x120 [ 109.869619][ T6542] __kmalloc_node_noprof+0xd1/0x510 [ 109.874829][ T6542] ? alloc_slab_obj_exts+0x41/0xa0 [ 109.879953][ T6542] alloc_slab_obj_exts+0x41/0xa0 [ 109.884901][ T6542] __memcg_slab_post_alloc_hook+0x2a7/0x9b0 [ 109.890814][ T6542] ? kasan_save_track+0x14/0x30 [ 109.895677][ T6542] kmem_cache_alloc_noprof+0x366/0x3d0 [ 109.901148][ T6542] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 109.906791][ T6542] ? dst_alloc+0x99/0x1a0 [ 109.911138][ T6542] ? __pfx_ip6_dst_gc+0x10/0x10 [ 109.915997][ T6542] dst_alloc+0x99/0x1a0 [ 109.920166][ T6542] ip6_dst_alloc+0x2c/0x90 [ 109.924595][ T6542] ip6_pol_route+0x956/0x1120 [ 109.929286][ T6542] ? __pfx_ip6_pol_route+0x10/0x10 [ 109.934405][ T6542] ? ip6t_do_table+0xd50/0x1d40 [ 109.939282][ T6542] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 109.944927][ T6542] fib6_rule_lookup+0x536/0x720 [ 109.949785][ T6542] ? ip6t_do_table+0xd50/0x1d40 [ 109.954649][ T6542] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 109.960034][ T6542] ? nf_nat_ipv6_fn+0x103/0x2e0 [ 109.964904][ T6542] ? inet6_ehashfn+0x89/0x510 [ 109.969607][ T6542] ? __pfx_inet6_ehashfn+0x10/0x10 [ 109.974746][ T6542] ip6_route_input+0x663/0xc10 [ 109.979525][ T6542] ? __pfx_ip6_route_input+0x10/0x10 [ 109.984827][ T6542] ? __pfx_lock_release+0x10/0x10 [ 109.989869][ T6542] ? __pfx___inet6_lookup_established+0x10/0x10 [ 109.996137][ T6542] ? tcp_v6_early_demux+0x40a/0xb40 [ 110.001354][ T6542] ip6_rcv_finish_core.constprop.0+0x1a0/0x5d0 [ 110.007529][ T6542] ipv6_rcv+0x1e4/0x680 [ 110.011701][ T6542] ? __pfx_ipv6_rcv+0x10/0x10 [ 110.016391][ T6542] __netif_receive_skb_one_core+0x12e/0x1e0 [ 110.022300][ T6542] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 110.028728][ T6542] ? rcu_is_watching+0x12/0xc0 [ 110.033508][ T6542] ? ktime_get_with_offset+0x273/0x3a0 [ 110.038980][ T6542] ? lockdep_hardirqs_on+0x7c/0x110 [ 110.044189][ T6542] ? netif_receive_skb+0x109/0x7b0 [ 110.049321][ T6542] __netif_receive_skb+0x1d/0x160 [ 110.054360][ T6542] netif_receive_skb+0x13f/0x7b0 [ 110.059317][ T6542] ? __pfx_netif_receive_skb+0x10/0x10 [ 110.064793][ T6542] ? __pfx___lock_acquire+0x10/0x10 [ 110.070017][ T6542] tun_rx_batched.isra.0+0x3eb/0x730 [ 110.075325][ T6542] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 110.081152][ T6542] ? tun_get_user+0x13e6/0x3e40 [ 110.086021][ T6542] ? lock_acquire+0x2f/0xb0 [ 110.090537][ T6542] ? tun_get_user+0x13e6/0x3e40 [ 110.095405][ T6542] tun_get_user+0x2a16/0x3e40 [ 110.100105][ T6542] ? find_held_lock+0x2d/0x110 [ 110.104886][ T6542] ? __pfx_tun_get_user+0x10/0x10 [ 110.109929][ T6542] ? find_held_lock+0x2d/0x110 [ 110.114715][ T6542] ? __pfx_lock_release+0x10/0x10 [ 110.117739][ T8] cdc_ether 4-1:1.0 eth1: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 110.119762][ T6542] tun_chr_write_iter+0xdc/0x210 [ 110.136153][ T6542] vfs_write+0x5ae/0x1150 [ 110.140498][ T6542] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 110.146078][ T6542] ? __pfx_vfs_write+0x10/0x10 [ 110.150853][ T6542] ? __fget_files+0x40/0x3a0 [ 110.155470][ T6542] ksys_write+0x12b/0x250 [ 110.159815][ T6542] ? __pfx_ksys_write+0x10/0x10 [ 110.164687][ T6542] do_syscall_64+0xcd/0x250 [ 110.169210][ T6542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.175121][ T6542] RIP: 0033:0x7f81a87847cf [ 110.179547][ T6542] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 110.199163][ T6542] RSP: 002b:00007f81a965b000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 110.207588][ T6542] RAX: ffffffffffffffda RBX: 00007f81a8975fa0 RCX: 00007f81a87847cf [ 110.215569][ T6542] RDX: 000000000000004a RSI: 00000000200000c0 RDI: 00000000000000c8 [ 110.223547][ T6542] RBP: 00007f81a965b090 R08: 0000000000000000 R09: 0000000000000000 [ 110.231529][ T6542] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000001 [ 110.239504][ T6542] R13: 0000000000000000 R14: 00007f81a8975fa0 R15: 00007fff488a98a8 [ 110.247505][ T6542] [ 110.386291][ T5862] usb 2-1: config 1 interface 0 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 8 [ 110.416616][ T5862] usb 2-1: config 1 interface 0 altsetting 4 bulk endpoint 0x3 has invalid maxpacket 16 [ 110.467312][ T5862] usb 2-1: config 1 interface 0 has no altsetting 0 [ 110.498141][ T5862] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 110.519920][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.551128][ T29] audit: type=1400 audit(1734302990.197:488): avc: denied { create } for pid=6546 comm="syz.2.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 110.581179][ T5862] usb 2-1: Product: syz [ 110.599548][ T5862] usb 2-1: Manufacturer: syz [ 110.628632][ T5862] usb 2-1: SerialNumber: syz [ 110.643687][ T29] audit: type=1400 audit(1734302990.237:489): avc: denied { bind } for pid=6546 comm="syz.2.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 110.681652][ T6540] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 110.710546][ T6540] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 110.741404][ T8] usb 4-1: USB disconnect, device number 6 [ 110.749394][ T8] cdc_ether 4-1:1.0 eth1: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 110.769880][ T6549] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.932617][ T6549] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.965700][ T29] audit: type=1400 audit(1734302990.615:490): avc: denied { read } for pid=6537 comm="syz.1.162" path="socket:[11657]" dev="sockfs" ino=11657 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 111.100479][ T5862] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 111.135762][ T5862] usb 2-1: USB disconnect, device number 6 [ 111.699064][ T6550] delete_channel: no stack [ 111.835384][ T6549] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.962465][ T6549] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.171774][ T6549] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.266763][ T6549] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.402881][ T6549] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.461056][ T6549] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.245151][ T29] audit: type=1400 audit(1734302992.877:491): avc: denied { ioctl } for pid=6563 comm="syz.3.172" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 113.568858][ T6557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.169'. [ 113.620997][ T6571] netlink: 20 bytes leftover after parsing attributes in process `syz.0.173'. [ 113.660353][ T6571] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.668836][ T6571] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.677176][ T6571] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.685357][ T6571] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.999294][ T6557] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.006858][ T6557] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.011071][ T5861] flexcop_usb: set interface failed. [ 114.052488][ T5861] b2c2_flexcop_usb 5-1:2.96: probe with driver b2c2_flexcop_usb failed with error -22 [ 114.069282][ T5861] usb 5-1: USB disconnect, device number 5 [ 114.080775][ T6557] bridge0: entered allmulticast mode [ 114.223443][ T6515] syz.4.156 (6515) used greatest stack depth: 21360 bytes left [ 115.120911][ T29] audit: type=1400 audit(1734302994.721:492): avc: denied { write } for pid=6577 comm="syz.0.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 115.143425][ T29] audit: type=1400 audit(1734302994.721:493): avc: denied { bind } for pid=6577 comm="syz.0.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 115.921390][ T6598] warning: `syz.0.180' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 115.953760][ T6598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.180'. [ 116.389294][ T5862] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 116.852664][ T5858] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 116.877205][ T5862] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 116.885843][ T5862] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.895335][ T29] audit: type=1400 audit(1734302996.515:494): avc: denied { read } for pid=6601 comm="syz.4.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 116.914501][ T5862] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.925455][ T5862] usb 3-1: config 0 interface 0 has no altsetting 0 [ 116.929995][ T29] audit: type=1400 audit(1734302996.515:495): avc: denied { watch watch_reads } for pid=6601 comm="syz.4.182" path="/35/file0" dev="tmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 116.951808][ T5862] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.964193][ T5862] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.975142][ T5862] usb 3-1: config 0 interface 0 has no altsetting 0 [ 117.029074][ T5862] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 117.038107][ T5862] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 117.049789][ T5862] usb 3-1: config 0 interface 0 has no altsetting 0 [ 117.059559][ T5858] usb 4-1: Using ep0 maxpacket: 16 [ 117.065689][ T5862] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 117.074836][ T5862] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 117.085777][ T5862] usb 3-1: config 0 interface 0 has no altsetting 0 [ 117.098591][ T8] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 117.116083][ T5858] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 117.125287][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.134130][ T5862] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 117.143278][ T5862] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 117.154908][ T5862] usb 3-1: config 0 interface 0 has no altsetting 0 [ 117.164197][ T5858] usb 4-1: config 0 descriptor?? [ 117.172061][ T5858] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 117.178685][ T5862] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 117.187774][ T5862] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 117.198740][ T5862] usb 3-1: config 0 interface 0 has no altsetting 0 [ 117.207422][ T5862] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 117.216608][ T5862] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 117.227554][ T5862] usb 3-1: config 0 interface 0 has no altsetting 0 [ 117.235274][ T5862] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 117.244330][ T5862] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 117.256263][ T5862] usb 3-1: config 0 interface 0 has no altsetting 0 [ 117.264782][ T5862] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 117.274121][ T5862] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 117.275117][ T8] usb 1-1: config 0 has an invalid interface number: 120 but max is 0 [ 117.282534][ T5862] usb 3-1: Product: syz [ 117.282553][ T5862] usb 3-1: Manufacturer: syz [ 117.282570][ T5862] usb 3-1: SerialNumber: syz [ 117.308418][ T5862] usb 3-1: config 0 descriptor?? [ 117.313550][ T8] usb 1-1: config 0 has no interface number 0 [ 117.322473][ T8] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 255, changing to 11 [ 117.322582][ T5816] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 117.333859][ T8] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid maxpacket 59391, setting to 1024 [ 117.333900][ T8] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 117.333925][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.345717][ T5816] Bluetooth: hci2: Injecting HCI hardware error event [ 117.357435][ T8] usb 1-1: config 0 descriptor?? [ 117.369376][ T5816] Bluetooth: hci2: hardware error 0x00 [ 117.396237][ T6600] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 117.412570][ T8] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.120/input/input7 [ 117.603865][ T5862] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 117.745699][ T5862] usb 3-1: USB disconnect, device number 11 [ 117.770746][ T5862] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 118.166915][ T6590] netlink: zone id is out of range [ 118.193757][ T29] audit: type=1400 audit(1734302997.632:496): avc: denied { setopt } for pid=6599 comm="syz.0.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 118.216574][ T6590] netlink: zone id is out of range [ 118.216587][ T6590] netlink: zone id is out of range [ 118.216596][ T6590] netlink: zone id is out of range [ 118.216604][ T6590] netlink: zone id is out of range [ 118.216612][ T6590] netlink: zone id is out of range [ 118.222649][ T29] audit: type=1400 audit(1734302997.642:497): avc: denied { ioctl } for pid=6599 comm="syz.0.181" path="socket:[12551]" dev="sockfs" ino=12551 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 118.222681][ T29] audit: type=1400 audit(1734302997.701:498): avc: denied { read } for pid=6615 comm="syz.1.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 118.345705][ T5858] gspca_sonixj: reg_r err -110 [ 118.345755][ T5858] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 118.674333][ T29] audit: type=1400 audit(1734302998.280:499): avc: denied { mount } for pid=6630 comm="syz.1.189" name="/" dev="ramfs" ino=12640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 118.712575][ T29] audit: type=1400 audit(1734302998.310:500): avc: denied { execute } for pid=6630 comm="syz.1.189" path="/32/file0/bus" dev="ramfs" ino=12641 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 118.741856][ T5858] usb 4-1: USB disconnect, device number 7 [ 119.597752][ T5816] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 119.627192][ T29] audit: type=1400 audit(1734302999.247:501): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 119.678579][ T6634] delete_channel: no stack [ 120.004048][ T25] usb 1-1: USB disconnect, device number 6 [ 120.014506][ T29] audit: type=1400 audit(1734302999.625:502): avc: denied { getopt } for pid=6644 comm="syz.3.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 120.109282][ T6641] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.116722][ T6641] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.148905][ T6641] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 120.948634][ T29] audit: type=1400 audit(1734303000.563:503): avc: denied { connect } for pid=6651 comm="syz.3.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 121.022628][ T29] audit: type=1400 audit(1734303000.632:504): avc: denied { ioctl } for pid=6651 comm="syz.3.196" path="socket:[12700]" dev="sockfs" ino=12700 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 121.671684][ T25] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 121.742095][ T5862] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 121.792075][ T6687] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117.87.150326315.2007.15776.1 [ 121.805025][ T6687] PKCS7: Only support pkcs7_signedData type [ 121.833511][ T25] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 121.841762][ T25] usb 4-1: config 0 has no interface number 0 [ 121.851558][ T25] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 121.861074][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.880187][ T25] usb 4-1: Product: syz [ 121.884606][ T25] usb 4-1: Manufacturer: syz [ 121.889213][ T25] usb 4-1: SerialNumber: syz [ 121.897643][ T5862] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 121.907003][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.916110][ T5862] usb 2-1: Product: syz [ 121.921197][ T25] usb 4-1: config 0 descriptor?? [ 121.926458][ T5862] usb 2-1: Manufacturer: syz [ 121.931900][ T5862] usb 2-1: SerialNumber: syz [ 121.940971][ T5862] usb 2-1: config 0 descriptor?? [ 122.133564][ T969] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 122.164438][ T5862] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 122.177869][ T6678] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 122.197899][ T5862] dvb_usb_af9035 2-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 122.300681][ T969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.328878][ T969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.343841][ T969] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 122.353072][ T969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.386568][ T969] usb 3-1: config 0 descriptor?? [ 122.746876][ T25] i2c-tiny-usb 4-1:0.2: version 6d.cc found at bus 004 address 008 [ 122.754992][ T5862] usb 2-1: USB disconnect, device number 7 [ 122.761937][ T25] (null): failure setting delay to 10us [ 122.767682][ T25] i2c-tiny-usb 4-1:0.2: probe with driver i2c-tiny-usb failed with error -5 [ 122.782527][ T25] usb 4-1: USB disconnect, device number 8 [ 122.955234][ T29] audit: type=1400 audit(1734303002.557:505): avc: denied { sqpoll } for pid=6697 comm="syz.1.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 122.956025][ T6699] random: crng reseeded on system resumption [ 122.975424][ T29] audit: type=1400 audit(1734303002.567:506): avc: denied { write } for pid=6697 comm="syz.1.207" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 123.004716][ T29] audit: type=1400 audit(1734303002.567:507): avc: denied { open } for pid=6697 comm="syz.1.207" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 123.044140][ T29] audit: type=1400 audit(1734303002.636:508): avc: denied { map } for pid=6696 comm="syz.4.206" path="/proc/151/net/tcp" dev="proc" ino=4026533307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 123.191633][ T969] hid-steam 0003:28DE:1142.0003: unexpected long global item [ 123.200212][ T969] hid-steam 0003:28DE:1142.0003: steam_probe:parse of hid interface failed [ 123.209814][ T969] hid-steam 0003:28DE:1142.0003: probe with driver hid-steam failed with error -22 [ 123.961514][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 123.961549][ T29] audit: type=1400 audit(1734303003.334:510): avc: denied { write } for pid=6704 comm="syz.4.209" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 124.036515][ T29] audit: type=1400 audit(1734303003.334:511): avc: denied { ioctl } for pid=6704 comm="syz.4.209" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 124.296969][ T5859] usb 3-1: USB disconnect, device number 12 [ 124.372909][ T29] audit: type=1400 audit(1734303003.544:512): avc: denied { bind } for pid=6702 comm="syz.3.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 124.428993][ T29] audit: type=1400 audit(1734303003.544:513): avc: denied { write } for pid=6702 comm="syz.3.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 124.449546][ T29] audit: type=1400 audit(1734303003.544:514): avc: denied { read } for pid=6702 comm="syz.3.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 124.722851][ T29] audit: type=1400 audit(1734303004.331:515): avc: denied { create } for pid=6721 comm="syz.4.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 125.648969][ T29] audit: type=1400 audit(1734303004.680:516): avc: denied { name_bind } for pid=6721 comm="syz.4.212" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 125.684167][ T6726] syz.1.213: attempt to access beyond end of device [ 125.684167][ T6726] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 125.723148][ T6726] vxfs: unable to read disk superblock at 1 [ 125.771158][ T29] audit: type=1400 audit(1734303004.680:517): avc: denied { node_bind } for pid=6721 comm="syz.4.212" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 125.793268][ T6726] syz.1.213: attempt to access beyond end of device [ 125.793268][ T6726] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 125.840787][ T6726] vxfs: unable to read disk superblock at 8 [ 125.862768][ T6726] vxfs: can't find superblock. [ 125.869603][ T29] audit: type=1400 audit(1734303005.428:518): avc: denied { write } for pid=6729 comm="syz.2.214" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 125.963806][ T29] audit: type=1400 audit(1734303005.428:519): avc: denied { open } for pid=6729 comm="syz.2.214" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 125.987815][ C1] vkms_vblank_simulate: vblank timer overrun [ 126.335108][ T5859] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 126.375208][ T25] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 126.487973][ T5859] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.508955][ T5859] usb 3-1: New USB device found, idVendor=056a, idProduct=037a, bcdDevice= 0.00 [ 126.527773][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.542853][ T5859] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.555214][ T25] usb 2-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 126.580204][ T5859] usb 3-1: config 0 descriptor?? [ 126.585222][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.617017][ T25] usb 2-1: config 0 descriptor?? [ 127.061966][ T25] elecom 0003:056E:00FB.0004: unknown main item tag 0x0 [ 127.092999][ T25] elecom 0003:056E:00FB.0004: unknown main item tag 0x0 [ 127.107272][ T25] elecom 0003:056E:00FB.0004: unknown main item tag 0x0 [ 127.115871][ T25] elecom 0003:056E:00FB.0004: unknown main item tag 0x0 [ 127.137312][ T25] elecom 0003:056E:00FB.0004: unknown main item tag 0x0 [ 127.488823][ T25] elecom 0003:056E:00FB.0004: hidraw0: USB HID v0.00 Device [HID 056e:00fb] on usb-dummy_hcd.1-1/input0 [ 127.528453][ T25] usb 2-1: USB disconnect, device number 8 [ 127.591739][ T5859] wacom 0003:056A:037A.0005: unknown main item tag 0x0 [ 127.635283][ T5859] wacom 0003:056A:037A.0005: unknown main item tag 0x0 [ 127.660954][ T5859] wacom 0003:056A:037A.0005: item fetching failed at offset 4/11 [ 127.691662][ T5859] wacom 0003:056A:037A.0005: parse failed [ 127.710548][ T5859] wacom 0003:056A:037A.0005: probe with driver wacom failed with error -22 [ 127.977980][ T5859] usb 3-1: USB disconnect, device number 13 [ 128.061429][ T6740] ubi6: attaching mtd0 [ 128.070476][ T6740] ubi6: scanning is finished [ 128.075115][ T6740] ubi6: empty MTD device detected [ 128.124553][ T6741] x_tables: ip_tables: osf match: only valid for protocol 6 [ 128.674446][ T6740] ubi6 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt6d", error -4 [ 128.827810][ T6749] random: crng reseeded on system resumption [ 128.975226][ T6758] netlink: 4 bytes leftover after parsing attributes in process `syz.3.223'. [ 129.380799][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 129.380816][ T29] audit: type=1400 audit(1734303008.969:524): avc: denied { getopt } for pid=6759 comm="syz.0.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 129.669405][ T29] audit: type=1400 audit(1734303009.258:525): avc: denied { bind } for pid=6763 comm="syz.1.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 129.693066][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 129.736736][ T6773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.226'. [ 129.745686][ T6773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.753093][ T6773] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.761677][ T6773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.769679][ T6773] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.801677][ T6777] netlink: 40 bytes leftover after parsing attributes in process `syz.4.226'. [ 131.249859][ T5895] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 131.944547][ T5895] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 131.967063][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 131.988619][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 132.012071][ T5895] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 132.038080][ T5895] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 132.057927][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.072417][ T5895] usb 3-1: config 0 descriptor?? [ 132.080079][ T6798] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 132.108387][ T29] audit: type=1400 audit(1734303011.692:526): avc: denied { bind } for pid=6793 comm="syz.0.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 132.447470][ T6798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.480742][ T6798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.600135][ T6816] netlink: 20 bytes leftover after parsing attributes in process `syz.3.239'. [ 132.697832][ T5895] plantronics 0003:047F:FFFF.0006: unknown main item tag 0xd [ 132.707741][ T5895] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 132.745412][ T5895] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 132.883133][ T29] audit: type=1400 audit(1734303012.460:527): avc: denied { setopt } for pid=6835 comm="syz.4.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 133.047423][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.059477][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.358820][ T6842] netlink: 20 bytes leftover after parsing attributes in process `syz.3.247'. [ 133.386891][ T6798] Illegal XDP return value 4294967274 on prog (id 50) dev N/A, expect packet loss! [ 133.406822][ T6842] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.415579][ T6842] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.424289][ T6842] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.432971][ T6842] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.564346][ T29] audit: type=1400 audit(1734303013.138:528): avc: denied { write } for pid=6851 comm="syz.4.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 133.620831][ T29] audit: type=1400 audit(1734303013.138:529): avc: denied { nlmsg_read } for pid=6851 comm="syz.4.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 133.679734][ T5858] usb 3-1: USB disconnect, device number 14 [ 133.971709][ T29] audit: type=1400 audit(1734303013.497:530): avc: denied { ioctl } for pid=6862 comm="syz.3.251" path="socket:[12168]" dev="sockfs" ino=12168 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 136.572240][ T1137] bond0: (slave bond_slave_0): interface is now down [ 136.595290][ T1137] bond0: (slave bond_slave_1): interface is now down [ 136.607616][ T6891] xt_CT: No such helper "syz1" [ 136.644507][ T1137] bond0: now running without any active interface! [ 136.671666][ T29] audit: type=1400 audit(1734303016.161:531): avc: denied { setopt } for pid=6890 comm="syz.2.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 136.993536][ T5895] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 137.056141][ T6902] bridge_slave_1: left allmulticast mode [ 137.063128][ T6902] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.092971][ T5858] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 137.104825][ T6902] netlink: 'syz.0.261': attribute type 2 has an invalid length. [ 137.119143][ T6902] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 137.401463][ T5858] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 137.433888][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.473592][ T5858] usb 4-1: config 0 descriptor?? [ 137.513900][ T6910] cgroup2: Unknown parameter 'net_prio' [ 137.533055][ T5858] cp210x 4-1:0.0: cp210x converter detected [ 137.931289][ T5858] cp210x 4-1:0.0: failed to get vendor val 0x370c size 13: -121 [ 137.950602][ T5858] cp210x 4-1:0.0: GPIO initialisation failed: -121 [ 137.995798][ T5895] usb 5-1: Using ep0 maxpacket: 8 [ 138.013627][ T5895] usb 5-1: config 2 has an invalid interface number: 96 but max is 0 [ 138.030366][ T5858] usb 4-1: cp210x converter now attached to ttyUSB0 [ 138.035862][ T8] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 138.054772][ T5895] usb 5-1: config 2 has an invalid interface association descriptor of length 2, skipping [ 138.084971][ T5895] usb 5-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 138.093901][ T5895] usb 5-1: config 2 has an invalid descriptor of length 1, skipping remainder of the config [ 138.108137][ T5895] usb 5-1: config 2 has no interface number 0 [ 138.109886][ T6918] bond_slave_0: entered promiscuous mode [ 138.114222][ T5895] usb 5-1: config 2 interface 96 altsetting 250 has an endpoint descriptor with address 0x1E, changing to 0xE [ 138.114253][ T5895] usb 5-1: config 2 interface 96 altsetting 250 endpoint 0xE has invalid maxpacket 4988, setting to 64 [ 138.121124][ T6918] bond_slave_1: entered promiscuous mode [ 138.165157][ T5895] usb 5-1: config 2 interface 96 altsetting 250 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 138.196471][ T6918] bond_slave_0: left promiscuous mode [ 138.202173][ T6918] bond_slave_1: left promiscuous mode [ 138.214138][ T5895] usb 5-1: config 2 interface 96 has no altsetting 0 [ 138.222046][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 138.236572][ T8] usb 3-1: too many endpoints for config 0 interface 0 altsetting 80: 255, using maximum allowed: 30 [ 138.250734][ T8] usb 3-1: config 0 interface 0 altsetting 80 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.274935][ T5895] usb 5-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=fb.b4 [ 138.297693][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.315652][ T8] usb 3-1: config 0 interface 0 altsetting 80 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.326541][ T5895] usb 5-1: Product: syz [ 138.330719][ T5895] usb 5-1: Manufacturer: syz [ 138.335316][ T5895] usb 5-1: SerialNumber: syz [ 138.346482][ T8] usb 3-1: config 0 interface 0 altsetting 80 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 138.376398][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 138.383028][ T8] usb 3-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 138.416669][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.737967][ T8] usb 3-1: config 0 descriptor?? [ 138.743167][ T29] audit: type=1400 audit(1734303018.246:532): avc: denied { getopt } for pid=6924 comm="syz.0.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 138.855853][ T6929] x_tables: duplicate entry at hook 2 [ 139.020824][ T5895] flexcop_usb: set interface failed. [ 139.026196][ T5895] b2c2_flexcop_usb 5-1:2.96: probe with driver b2c2_flexcop_usb failed with error -22 [ 139.150554][ T5895] usb 5-1: USB disconnect, device number 6 [ 139.842314][ T5861] usb 4-1: USB disconnect, device number 9 [ 139.850127][ T5861] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 139.850419][ T5861] cp210x 4-1:0.0: device disconnected [ 139.881219][ T6934] tty tty23: ldisc open failed (-12), clearing slot 22 [ 139.992147][ T8] logitech 0003:046D:C626.0007: report_id 0 is invalid [ 139.999033][ T8] logitech 0003:046D:C626.0007: item 0 1 1 8 parsing failed [ 140.029253][ T8] logitech 0003:046D:C626.0007: parse failed [ 140.053535][ T8] logitech 0003:046D:C626.0007: probe with driver logitech failed with error -22 [ 140.096547][ T6945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.273'. [ 140.110176][ T6941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.274'. [ 140.127990][ T6941] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.146644][ T6941] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.177924][ T6949] netlink: 40 bytes leftover after parsing attributes in process `syz.1.274'. [ 140.198463][ T6943] netlink: 40 bytes leftover after parsing attributes in process `syz.3.273'. [ 141.416881][ T29] audit: type=1326 audit(1734303020.979:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6960 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc21385d19 code=0x7ffc0000 [ 141.469356][ T29] audit: type=1326 audit(1734303021.009:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6960 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc21385d19 code=0x7ffc0000 [ 141.492579][ C0] vkms_vblank_simulate: vblank timer overrun [ 141.566949][ T29] audit: type=1326 audit(1734303021.009:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6960 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc21385d19 code=0x7ffc0000 [ 141.647454][ T29] audit: type=1326 audit(1734303021.009:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6960 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc21385d19 code=0x7ffc0000 [ 141.725660][ T29] audit: type=1326 audit(1734303021.009:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6960 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc21385d19 code=0x7ffc0000 [ 141.808725][ T29] audit: type=1326 audit(1734303021.009:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6960 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fdc21385d19 code=0x7ffc0000 [ 141.859614][ T29] audit: type=1326 audit(1734303021.009:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6960 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc21385d19 code=0x7ffc0000 [ 141.900087][ T6970] netlink: 24 bytes leftover after parsing attributes in process `syz.0.280'. [ 141.911444][ T29] audit: type=1326 audit(1734303021.009:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6960 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdc21385d19 code=0x7ffc0000 [ 141.935967][ T6970] netlink: 264 bytes leftover after parsing attributes in process `syz.0.280'. [ 141.950834][ T6970] netlink: 64 bytes leftover after parsing attributes in process `syz.0.280'. [ 141.963882][ T29] audit: type=1326 audit(1734303021.009:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6960 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc21385d19 code=0x7ffc0000 [ 142.014871][ T5861] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 142.030809][ T29] audit: type=1326 audit(1734303021.009:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6960 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdc21384680 code=0x7ffc0000 [ 142.083491][ T29] audit: type=1326 audit(1734303021.009:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6960 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fdc21387547 code=0x7ffc0000 [ 142.172967][ T29] audit: type=1326 audit(1734303021.009:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6960 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdc21385d19 code=0x7ffc0000 [ 142.196087][ C0] vkms_vblank_simulate: vblank timer overrun [ 142.221626][ T5861] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 142.241897][ T5861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.306585][ T29] audit: type=1326 audit(1734303021.009:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6960 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fdc21387547 code=0x7ffc0000 [ 142.329774][ C0] vkms_vblank_simulate: vblank timer overrun [ 142.346612][ T6975] random: crng reseeded on system resumption [ 142.442114][ T5861] usb 2-1: config 0 descriptor?? [ 142.472546][ T5861] cp210x 2-1:0.0: cp210x converter detected [ 142.561953][ T29] audit: type=1326 audit(1734303021.009:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6960 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fdc2138497a code=0x7ffc0000 [ 142.908828][ T5895] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 142.921565][ T6968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.930813][ T6968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.947459][ T5861] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 142.955442][ T5861] cp210x 2-1:0.0: failed to get vendor val 0x3711 size 2: -121 [ 142.969621][ T5861] cp210x 2-1:0.0: GPIO initialisation failed: -121 [ 142.979510][ T5861] usb 2-1: cp210x converter now attached to ttyUSB0 [ 143.086245][ T5895] usb 1-1: Using ep0 maxpacket: 8 [ 143.093102][ T5895] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 143.102181][ T5895] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 143.113086][ T5895] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 143.129577][ T5895] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 143.139387][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.148782][ T5895] usb 1-1: Product: syz [ 143.153114][ T5895] usb 1-1: Manufacturer: syz [ 143.158313][ T5895] usb 1-1: SerialNumber: syz [ 143.177491][ T8] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 143.327246][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 143.334785][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.346176][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.356578][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 143.370302][ T8] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 143.380862][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.394112][ T6972] trusted_key: syz.0.281 sent an empty control message without MSG_MORE. [ 143.454142][ T5895] usb 1-1: 0:2 : does not exist [ 143.460127][ T8] usb 4-1: config 0 descriptor?? [ 143.476478][ T5895] usb 1-1: USB disconnect, device number 7 [ 143.522650][ T5859] usb 3-1: USB disconnect, device number 15 [ 143.657112][ T6989] dvmrp0: entered allmulticast mode [ 143.676886][ T6989] input: syz0 as /devices/virtual/input/input9 [ 144.003442][ T6994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.288'. [ 144.015477][ T6994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.288'. [ 144.049158][ T5895] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 144.093957][ T6999] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 144.199144][ T5895] usb 5-1: Using ep0 maxpacket: 32 [ 144.211519][ T5895] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 144.222859][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.231633][ T5895] usb 5-1: Product: syz [ 144.236268][ T5895] usb 5-1: Manufacturer: syz [ 144.241726][ T5895] usb 5-1: SerialNumber: syz [ 144.251659][ T5895] usb 5-1: config 0 descriptor?? [ 144.309343][ T7002] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 144.315576][ T7002] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 144.332311][ T7002] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 144.338294][ T7002] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 144.349969][ T7002] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 144.356457][ T7002] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 144.367640][ T7002] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 144.374132][ T7002] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 144.466128][ T5895] pvrusb2: Hardware description: Terratec Grabster AV400 [ 144.474195][ T5895] pvrusb2: ********** [ 144.478226][ T5895] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 144.489742][ T5895] pvrusb2: Important functionality might not be entirely working. [ 144.497576][ T5895] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 144.509890][ T5895] pvrusb2: ********** [ 144.515975][ T2327] pvrusb2: Invalid write control endpoint [ 144.517146][ T5895] usb 5-1: USB disconnect, device number 7 [ 144.555465][ T2327] pvrusb2: Invalid write control endpoint [ 144.566768][ T2327] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 144.582648][ T2327] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 144.591356][ T2327] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 144.601514][ T2327] pvrusb2: Device being rendered inoperable [ 144.610132][ T2327] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 144.618350][ T2327] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 144.629299][ T2327] pvrusb2: Attached sub-driver cx25840 [ 144.635073][ T2327] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 144.645394][ T2327] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 144.871817][ T5895] usb 2-1: USB disconnect, device number 9 [ 144.892142][ T5895] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 144.921873][ T5895] cp210x 2-1:0.0: device disconnected [ 144.931552][ T7010] evm: overlay not supported [ 144.983507][ T7013] input: syz0 as /devices/virtual/input/input10 [ 145.012882][ T7013] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=7013 comm=syz.1.294 [ 145.050944][ T7013] netlink: 44 bytes leftover after parsing attributes in process `syz.1.294'. [ 145.178102][ T7023] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 145.340938][ T5859] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 145.362826][ T5895] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 145.531296][ T5859] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.532362][ T5895] usb 1-1: Using ep0 maxpacket: 8 [ 145.542202][ T5859] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.542245][ T5859] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 145.542271][ T5859] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.543927][ T5859] usb 5-1: config 0 descriptor?? [ 145.585184][ T5895] usb 1-1: config 2 has an invalid interface number: 96 but max is 0 [ 145.595233][ T5895] usb 1-1: config 2 has an invalid interface association descriptor of length 2, skipping [ 145.610441][ T5895] usb 1-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 145.623019][ T5895] usb 1-1: config 2 has an invalid descriptor of length 1, skipping remainder of the config [ 145.635661][ T5895] usb 1-1: config 2 has no interface number 0 [ 145.649079][ T5895] usb 1-1: config 2 interface 96 altsetting 250 has an endpoint descriptor with address 0x1E, changing to 0xE [ 145.662782][ T5895] usb 1-1: config 2 interface 96 altsetting 250 endpoint 0xE has invalid maxpacket 4988, setting to 64 [ 145.676898][ T5895] usb 1-1: config 2 interface 96 altsetting 250 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 145.696749][ T5895] usb 1-1: config 2 interface 96 has no altsetting 0 [ 145.710151][ T5895] usb 1-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=fb.b4 [ 145.730528][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.739216][ T5895] usb 1-1: Product: syz [ 145.743810][ T5895] usb 1-1: Manufacturer: syz [ 145.748543][ T5895] usb 1-1: SerialNumber: syz [ 145.811227][ T8] usbhid 4-1:0.0: can't add hid device: -71 [ 145.848152][ T8] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 145.890628][ T8] usb 4-1: USB disconnect, device number 10 [ 145.993127][ T5895] flexcop_usb: set interface failed. [ 145.998857][ T5895] b2c2_flexcop_usb 1-1:2.96: probe with driver b2c2_flexcop_usb failed with error -22 [ 146.168819][ T5859] hid-steam 0003:28DE:1142.0008: unexpected long global item [ 146.177623][ T5859] hid-steam 0003:28DE:1142.0008: steam_probe:parse of hid interface failed [ 146.196547][ T5859] hid-steam 0003:28DE:1142.0008: probe with driver hid-steam failed with error -22 [ 146.249069][ T5895] usb 1-1: USB disconnect, device number 8 [ 146.434774][ T5859] usb 5-1: USB disconnect, device number 8 [ 146.864135][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 146.864154][ T29] audit: type=1326 audit(1734303026.408:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7033 comm="syz.2.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f81a8785d19 code=0x7ffc0000 [ 148.291393][ T29] audit: type=1400 audit(1734303027.576:654): avc: denied { map } for pid=7042 comm="syz.4.303" path="socket:[14454]" dev="sockfs" ino=14454 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 148.699938][ T7047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.303'. [ 148.708786][ T7047] netlink: 40 bytes leftover after parsing attributes in process `syz.4.303'. [ 150.291561][ T7051] xt_socket: unknown flags 0x50 [ 150.791589][ T7056] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 150.798438][ T7056] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 150.806937][ T7056] vhci_hcd vhci_hcd.0: Device attached [ 150.815799][ T7057] vhci_hcd: connection closed [ 150.818034][ T6442] vhci_hcd: stop threads [ 150.834397][ T6442] vhci_hcd: release socket [ 150.845688][ T6442] vhci_hcd: disconnect device [ 151.334047][ T8] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 151.676049][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.688255][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.699207][ T8] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 151.709531][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.725087][ T8] usb 4-1: config 0 descriptor?? [ 151.730342][ T29] audit: type=1400 audit(1734303031.269:655): avc: denied { ioctl } for pid=7065 comm="syz.1.308" path="socket:[14048]" dev="sockfs" ino=14048 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 152.043443][ T7073] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 152.239216][ T8] hid-steam 0003:28DE:1142.0009: unexpected long global item [ 152.247273][ T8] hid-steam 0003:28DE:1142.0009: steam_probe:parse of hid interface failed [ 152.257241][ T8] hid-steam 0003:28DE:1142.0009: probe with driver hid-steam failed with error -22 [ 152.297568][ T7082] netlink: 4 bytes leftover after parsing attributes in process `syz.4.313'. [ 152.360280][ T7078] netlink: 40 bytes leftover after parsing attributes in process `syz.4.313'. [ 152.639066][ T29] audit: type=1400 audit(1734303032.177:656): avc: denied { read } for pid=7083 comm="syz.0.315" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 152.662409][ T8] usb 4-1: USB disconnect, device number 11 [ 152.664716][ T29] audit: type=1400 audit(1734303032.197:657): avc: denied { name_connect } for pid=7089 comm="syz.4.317" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 153.116781][ T7093] loop2: detected capacity change from 0 to 7 [ 153.136508][ T29] audit: type=1400 audit(1734303032.217:658): avc: denied { listen } for pid=7089 comm="syz.4.317" lport=40958 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 153.230548][ T7093] Dev loop2: unable to read RDB block 7 [ 153.236238][ T7093] loop2: unable to read partition table [ 153.242656][ T7093] loop2: partition table beyond EOD, truncated [ 153.248979][ T7093] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 153.380733][ T29] audit: type=1400 audit(1734303032.646:659): avc: denied { getopt } for pid=7084 comm="syz.2.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 153.459514][ T29] audit: type=1400 audit(1734303032.905:660): avc: denied { accept } for pid=7089 comm="syz.4.317" lport=40958 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 153.524290][ T29] audit: type=1400 audit(1734303033.055:661): avc: denied { name_connect } for pid=7102 comm="syz.2.318" dest=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 153.566566][ T29] audit: type=1400 audit(1734303033.105:662): avc: denied { getopt } for pid=7105 comm="syz.0.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 153.734234][ T5859] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 153.867406][ T25] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 153.916005][ T7115] netlink: 20 bytes leftover after parsing attributes in process `syz.2.321'. [ 153.939214][ T7115] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.947959][ T7115] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.956657][ T7115] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.965410][ T7115] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.129803][ T5859] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt [ 154.238181][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 154.248104][ T5859] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x3 is Bulk; changing to Interrupt [ 154.295446][ T25] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 154.342487][ T5859] usb 5-1: config 1 interface 0 has no altsetting 0 [ 154.349198][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.361288][ T5859] usb 5-1: string descriptor 0 read error: -22 [ 154.368036][ T5859] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 154.369408][ T8] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 154.378736][ T25] usb 2-1: config 0 descriptor?? [ 154.390835][ T5859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.416860][ T7101] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 154.424412][ T7101] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 154.530288][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 154.537114][ T8] usb 1-1: config 6 has an invalid interface number: 1 but max is 0 [ 154.547050][ T8] usb 1-1: config 6 has no interface number 0 [ 154.554705][ T5859] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 154.579637][ T8] usb 1-1: config 6 interface 1 has no altsetting 0 [ 154.593156][ T8] usb 1-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=ef.14 [ 154.607466][ T25] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 154.617784][ T1137] tipc: Subscription rejected, illegal request [ 154.625116][ T29] audit: type=1400 audit(1734303034.143:663): avc: denied { connect } for pid=7107 comm="syz.1.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 154.625194][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.647929][ T25] asix 2-1:0.0: probe with driver asix failed with error -32 [ 154.679948][ T29] audit: type=1400 audit(1734303034.153:664): avc: denied { write } for pid=7107 comm="syz.1.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 154.719196][ T8] usb 1-1: Product: syz [ 154.723382][ T8] usb 1-1: Manufacturer: syz [ 154.727987][ T8] usb 1-1: SerialNumber: syz [ 154.739843][ T29] audit: type=1400 audit(1734303034.153:665): avc: denied { read } for pid=7107 comm="syz.1.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 154.743280][ T25] usb 5-1: USB disconnect, device number 9 [ 154.982744][ T7112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.322'. [ 155.012841][ T8] usb 1-1: selecting invalid altsetting 1 [ 155.019335][ T8] snd-usb-us122l 1-1:6.1: usb_set_interface error [ 155.041886][ T8] snd-usb-us122l 1-1:6.1: probe with driver snd-usb-us122l failed with error -22 [ 155.057629][ T8] usb 1-1: USB disconnect, device number 9 [ 155.082253][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 155.249914][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 155.272779][ T9] usb 3-1: config 2 has an invalid interface number: 96 but max is 0 [ 155.301632][ T9] usb 3-1: config 2 has an invalid interface association descriptor of length 2, skipping [ 155.331257][ T9] usb 3-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 155.361377][ T9] usb 3-1: config 2 has an invalid descriptor of length 1, skipping remainder of the config [ 155.382168][ T9] usb 3-1: config 2 has no interface number 0 [ 155.388335][ T9] usb 3-1: config 2 interface 96 altsetting 250 has an endpoint descriptor with address 0x1E, changing to 0xE [ 155.409787][ T7132] syzkaller1: entered promiscuous mode [ 155.415998][ T7132] syzkaller1: entered allmulticast mode [ 155.421065][ T9] usb 3-1: config 2 interface 96 altsetting 250 endpoint 0xE has invalid maxpacket 4988, setting to 64 [ 155.444928][ T9] usb 3-1: config 2 interface 96 altsetting 250 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 155.461078][ T9] usb 3-1: config 2 interface 96 has no altsetting 0 [ 155.473972][ T9] usb 3-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=fb.b4 [ 155.488778][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.502963][ T9] usb 3-1: Product: syz [ 155.507243][ T9] usb 3-1: Manufacturer: syz [ 155.513662][ T9] usb 3-1: SerialNumber: syz [ 155.804466][ T9] flexcop_usb: set interface failed. [ 155.820032][ T9] b2c2_flexcop_usb 3-1:2.96: probe with driver b2c2_flexcop_usb failed with error -22 [ 155.844898][ T9] usb 3-1: USB disconnect, device number 16 [ 156.665315][ T9] usb 2-1: USB disconnect, device number 10 [ 158.927984][ T7167] mmap: syz.3.339 (7167) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 159.090831][ T7165] netlink: 12 bytes leftover after parsing attributes in process `syz.0.333'. [ 159.107558][ T7165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.333'. [ 159.140831][ T7171] netlink: 32 bytes leftover after parsing attributes in process `syz.1.338'. [ 159.151825][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 159.151840][ T29] audit: type=1400 audit(1734303038.675:670): avc: denied { create } for pid=7159 comm="syz.1.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 159.250025][ T29] audit: type=1400 audit(1734303038.675:671): avc: denied { write } for pid=7159 comm="syz.1.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 159.327851][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 159.438957][ T29] audit: type=1400 audit(1734303038.965:672): avc: denied { ioctl } for pid=7175 comm="syz.4.342" path="socket:[15433]" dev="sockfs" ino=15433 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 159.497258][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 159.536151][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 159.573216][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 159.625568][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 159.667294][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.708343][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 159.722498][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.788486][ T29] audit: type=1326 audit(1734303039.314:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7196 comm="syz.2.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81a8785d19 code=0x7ffc0000 [ 159.832029][ T29] audit: type=1326 audit(1734303039.314:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7196 comm="syz.2.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81a8785d19 code=0x7ffc0000 [ 159.855268][ C0] vkms_vblank_simulate: vblank timer overrun [ 159.875348][ T29] audit: type=1326 audit(1734303039.354:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7196 comm="syz.2.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f81a8785d19 code=0x7ffc0000 [ 159.909880][ T7200] FAULT_INJECTION: forcing a failure. [ 159.909880][ T7200] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.917804][ T29] audit: type=1326 audit(1734303039.354:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7196 comm="syz.2.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81a8785d19 code=0x7ffc0000 [ 159.945746][ T7200] CPU: 0 UID: 0 PID: 7200 Comm: syz.0.348 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 159.956879][ T7200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 159.966941][ T7200] Call Trace: [ 159.970225][ T7200] [ 159.973162][ T7200] dump_stack_lvl+0x16c/0x1f0 [ 159.977857][ T7200] should_fail_ex+0x497/0x5b0 [ 159.981472][ T29] audit: type=1326 audit(1734303039.354:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7196 comm="syz.2.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81a8785d19 code=0x7ffc0000 [ 159.982537][ T7200] _copy_from_user+0x2e/0xd0 [ 160.010275][ T7200] restore_altstack+0x94/0x170 [ 160.015058][ T7200] ? __pfx_restore_altstack+0x10/0x10 [ 160.020447][ T7200] ? _raw_spin_unlock_irq+0x23/0x50 [ 160.022961][ T29] audit: type=1326 audit(1734303039.354:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7196 comm="syz.2.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f81a8785d19 code=0x7ffc0000 [ 160.025638][ T7200] ? lockdep_hardirqs_on+0x7c/0x110 [ 160.048916][ T29] audit: type=1326 audit(1734303039.354:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7196 comm="syz.2.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81a8785d19 code=0x7ffc0000 [ 160.053942][ T7200] ? _raw_spin_unlock_irq+0x2e/0x50 [ 160.053965][ T7200] ? set_current_blocked+0xdd/0x120 [ 160.053988][ T7200] __do_sys_rt_sigreturn+0x13d/0x240 [ 160.054015][ T7200] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 160.054050][ T7200] do_syscall_64+0xcd/0x250 [ 160.054077][ T7200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.054103][ T7200] RIP: 0033:0x7f467fd21f29 [ 160.054121][ T7200] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 160.054150][ T7200] RSP: 002b:00007f4680ae1340 EFLAGS: 00000206 ORIG_RAX: 000000000000000f [ 160.054171][ T7200] RAX: ffffffffffffffda RBX: 00007f467ff75fa0 RCX: 00007f467fd21f29 [ 160.054186][ T7200] RDX: 00007f4680ae1340 RSI: 00007f4680ae1470 RDI: 0000000000000021 [ 160.054199][ T7200] RBP: 00007f4680ae2090 R08: 0000000000000000 R09: 0000000000000000 [ 160.054213][ T7200] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 160.054226][ T7200] R13: 0000000000000000 R14: 00007f467ff75fa0 R15: 00007ffd5a735a38 [ 160.054253][ T7200] [ 160.054341][ C0] vkms_vblank_simulate: vblank timer overrun [ 160.079112][ T9] usb 4-1: usb_control_msg returned -71 [ 160.476714][ T9] usbtmc 4-1:16.0: can't read capabilities [ 160.489911][ T9] usb 4-1: USB disconnect, device number 12 [ 161.406509][ T7224] FAULT_INJECTION: forcing a failure. [ 161.406509][ T7224] name failslab, interval 1, probability 0, space 0, times 0 [ 161.421225][ T7224] CPU: 0 UID: 0 PID: 7224 Comm: syz.0.353 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 161.431839][ T7224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 161.441906][ T7224] Call Trace: [ 161.445204][ T7224] [ 161.448119][ T7224] dump_stack_lvl+0x16c/0x1f0 [ 161.452785][ T7224] should_fail_ex+0x497/0x5b0 [ 161.457488][ T7224] should_failslab+0xc2/0x120 [ 161.462157][ T7224] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 161.467514][ T7224] ? skb_clone+0x190/0x3f0 [ 161.471923][ T7224] skb_clone+0x190/0x3f0 [ 161.476163][ T7224] netlink_deliver_tap+0xabd/0xd30 [ 161.481280][ T7224] netlink_unicast+0x5e1/0x7f0 [ 161.486052][ T7224] ? __pfx_netlink_unicast+0x10/0x10 [ 161.491347][ T7224] netlink_sendmsg+0x8b8/0xd70 [ 161.496118][ T7224] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.501412][ T7224] sock_write_iter+0x4fe/0x5b0 [ 161.506175][ T7224] ? __pfx_sock_write_iter+0x10/0x10 [ 161.511466][ T7224] ? bpf_lsm_file_permission+0x9/0x10 [ 161.516846][ T7224] ? security_file_permission+0x71/0x210 [ 161.522487][ T7224] vfs_write+0x5ae/0x1150 [ 161.526830][ T7224] ? __pfx_sock_write_iter+0x10/0x10 [ 161.532116][ T7224] ? __pfx_vfs_write+0x10/0x10 [ 161.536872][ T7224] ? __fget_files+0x40/0x3a0 [ 161.541468][ T7224] ksys_write+0x207/0x250 [ 161.545802][ T7224] ? __pfx_ksys_write+0x10/0x10 [ 161.550653][ T7224] do_syscall_64+0xcd/0x250 [ 161.555153][ T7224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.561046][ T7224] RIP: 0033:0x7f467fd85d19 [ 161.565461][ T7224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.585066][ T7224] RSP: 002b:00007f467dbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 161.593477][ T7224] RAX: ffffffffffffffda RBX: 00007f467ff76080 RCX: 00007f467fd85d19 [ 161.601439][ T7224] RDX: 000000000000001c RSI: 0000000020000000 RDI: 0000000000000007 [ 161.609401][ T7224] RBP: 00007f467dbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 161.617365][ T7224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.625326][ T7224] R13: 0000000000000000 R14: 00007f467ff76080 R15: 00007ffd5a735a38 [ 161.633302][ T7224] [ 161.636471][ C0] vkms_vblank_simulate: vblank timer overrun [ 162.222570][ T5895] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 162.259284][ T7230] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 162.441147][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.495268][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.550274][ T7234] netlink: 816 bytes leftover after parsing attributes in process `syz.1.358'. [ 162.576700][ T5895] usb 5-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 162.704456][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.835628][ T5895] usb 5-1: config 0 descriptor?? [ 163.409842][ T7245] Trying to write to read-only block-device nullb0 [ 163.554507][ T5895] usbhid 5-1:0.0: can't add hid device: -71 [ 163.560523][ T5895] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 163.588133][ T5895] usb 5-1: USB disconnect, device number 10 [ 163.657838][ T7253] ALSA: mixer_oss: invalid OSS volume '' [ 164.622400][ T7250] vivid-007: ================= START STATUS ================= [ 164.631930][ T7250] vivid-007: Enable Output Cropping: true [ 164.637944][ T7250] vivid-007: Enable Output Composing: true [ 164.645124][ T7250] vivid-007: Enable Output Scaler: true [ 164.705500][ T7260] netlink: 20 bytes leftover after parsing attributes in process `syz.4.365'. [ 164.736157][ T7260] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.744889][ T7260] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.753653][ T7260] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.762412][ T7260] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.796556][ T7250] vivid-007: Tx RGB Quantization Range: Automatic [ 164.803035][ T7250] vivid-007: Transmit Mode: HDMI [ 164.809065][ T7250] vivid-007: Hotplug Present: 0x00000000 [ 164.814735][ T7250] vivid-007: RxSense Present: 0x00000000 [ 164.821555][ T7250] vivid-007: EDID Present: 0x00000000 [ 164.889485][ T7250] vivid-007: ================== END STATUS ================== [ 166.393353][ T7272] netlink: 'syz.1.367': attribute type 10 has an invalid length. [ 166.761253][ T7272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.769264][ T7272] team0: Port device bond0 added [ 166.868875][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 166.868912][ T29] audit: type=1400 audit(1734303046.343:726): avc: denied { write } for pid=7270 comm="syz.4.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 167.016348][ T29] audit: type=1326 audit(1734303046.433:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7275 comm="syz.3.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd1d85d19 code=0x7ffc0000 [ 167.040836][ T29] audit: type=1326 audit(1734303046.433:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7275 comm="syz.3.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd1d85d19 code=0x7ffc0000 [ 167.066440][ T29] audit: type=1326 audit(1734303046.453:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7275 comm="syz.3.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5fd1d85d19 code=0x7ffc0000 [ 167.095618][ T29] audit: type=1326 audit(1734303046.453:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7275 comm="syz.3.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd1d85d19 code=0x7ffc0000 [ 167.167119][ T29] audit: type=1326 audit(1734303046.463:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7275 comm="syz.3.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd1d85d19 code=0x7ffc0000 [ 167.191442][ T29] audit: type=1326 audit(1734303046.463:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7275 comm="syz.3.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5fd1d85d19 code=0x7ffc0000 [ 167.215729][ T29] audit: type=1326 audit(1734303046.473:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7275 comm="syz.3.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd1d85d19 code=0x7ffc0000 [ 167.240078][ T29] audit: type=1326 audit(1734303046.473:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7275 comm="syz.3.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd1d85d19 code=0x7ffc0000 [ 167.264782][ T29] audit: type=1326 audit(1734303046.473:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7275 comm="syz.3.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f5fd1d85d19 code=0x7ffc0000 [ 169.483127][ T7287] capability: warning: `syz.1.372' uses 32-bit capabilities (legacy support in use) [ 169.494915][ T7287] netlink: 16 bytes leftover after parsing attributes in process `syz.1.372'. [ 169.566119][ T7308] netlink: 'syz.0.378': attribute type 10 has an invalid length. [ 169.673657][ T5861] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 169.885781][ T5861] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 169.932266][ T5861] usb 4-1: config 0 has no interface number 0 [ 169.942395][ T5861] usb 4-1: config 0 interface 12 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 169.962761][ T5861] usb 4-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 169.975862][ T5861] usb 4-1: config 0 interface 12 has no altsetting 0 [ 170.001348][ T5861] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 170.011579][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.026184][ T7323] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 170.034158][ T5861] usb 4-1: Product: syz [ 170.048597][ T5861] usb 4-1: Manufacturer: syz [ 170.054270][ T5861] usb 4-1: SerialNumber: syz [ 170.069781][ T5861] usb 4-1: config 0 descriptor?? [ 170.081737][ T7304] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 170.091586][ T5861] f81534 4-1:0.12: unsupported endpoint max packet size [ 170.503725][ T7328] syz.4.384: attempt to access beyond end of device [ 170.503725][ T7328] nbd4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 170.694144][ T5862] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 170.866300][ T5862] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.896735][ T5862] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.930457][ T5862] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 170.949133][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.969580][ T5862] usb 1-1: config 0 descriptor?? [ 171.267947][ T7346] netlink: 20 bytes leftover after parsing attributes in process `syz.4.387'. [ 171.714771][ T25] usb 4-1: USB disconnect, device number 13 [ 171.787542][ T5862] hid-steam 0003:28DE:1142.000A: unexpected long global item [ 171.809434][ T5862] hid-steam 0003:28DE:1142.000A: steam_probe:parse of hid interface failed [ 171.838614][ T5862] hid-steam 0003:28DE:1142.000A: probe with driver hid-steam failed with error -22 [ 172.143045][ T25] usb 1-1: USB disconnect, device number 10 [ 172.346300][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 172.354176][ T7354] syz.1.390: attempt to access beyond end of device [ 172.354176][ T7354] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 172.447482][ T29] audit: type=1400 audit(1734303051.846:760): avc: denied { create } for pid=7353 comm="syz.1.390" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 172.472747][ T7354] FAT-fs (loop3): unable to read boot sector [ 172.500529][ T29] audit: type=1400 audit(1734303051.866:761): avc: denied { mounton } for pid=7353 comm="syz.1.390" path="/73/file0" dev="tmpfs" ino=401 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 172.557045][ T7359] netlink: 'syz.4.392': attribute type 4 has an invalid length. [ 172.604401][ T29] audit: type=1400 audit(1734303052.115:762): avc: denied { unlink } for pid=5817 comm="syz-executor" name="file0" dev="tmpfs" ino=401 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 172.650855][ T7359] infiniband sz1: set down [ 172.729114][ T25] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 172.760900][ T7362] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 172.781500][ T7364] netlink: 'syz.4.392': attribute type 4 has an invalid length. [ 172.790038][ T5859] lo speed is unknown, defaulting to 1000 [ 172.796238][ T5859] lo speed is unknown, defaulting to 1000 [ 172.846224][ T7364] infiniband sz1: set active [ 172.869332][ T5862] lo speed is unknown, defaulting to 1000 [ 172.876526][ T5862] lo speed is unknown, defaulting to 1000 [ 172.921640][ T7364] syz.4.392 (7364) used greatest stack depth: 21024 bytes left [ 172.931453][ T25] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 172.947392][ T7352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.388'. [ 172.977576][ T25] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 172.997297][ T25] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 173.006352][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.016732][ T7373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.388'. [ 173.037053][ T7352] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.044467][ T7352] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.052289][ T7352] bridge0: entered allmulticast mode [ 173.077373][ T25] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 173.086182][ T25] usb 3-1: invalid MIDI out EP 0 [ 173.195541][ T25] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 173.820101][ T7357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.391'. [ 173.848575][ T7357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.391'. [ 173.920281][ T5861] usb 3-1: USB disconnect, device number 17 [ 173.975137][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 174.165173][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 174.193734][ T9] usb 2-1: config 2 has an invalid interface number: 96 but max is 0 [ 174.202881][ T9] usb 2-1: config 2 has an invalid interface association descriptor of length 2, skipping [ 174.230019][ T9] usb 2-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 174.238726][ T9] usb 2-1: config 2 has an invalid descriptor of length 1, skipping remainder of the config [ 174.294992][ T9] usb 2-1: config 2 has no interface number 0 [ 174.305144][ T9] usb 2-1: config 2 interface 96 altsetting 250 has an endpoint descriptor with address 0x1E, changing to 0xE [ 174.339964][ T9] usb 2-1: config 2 interface 96 altsetting 250 endpoint 0xE has invalid maxpacket 4988, setting to 64 [ 174.360035][ T9] usb 2-1: config 2 interface 96 altsetting 250 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 174.385127][ T9] usb 2-1: config 2 interface 96 has no altsetting 0 [ 174.410642][ T9] usb 2-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=fb.b4 [ 174.419760][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.427753][ T9] usb 2-1: Product: syz [ 174.450128][ T9] usb 2-1: Manufacturer: syz [ 174.460140][ T9] usb 2-1: SerialNumber: syz [ 174.582664][ T29] audit: type=1400 audit(1734303054.093:763): avc: denied { ioctl } for pid=7390 comm="syz.2.400" path="socket:[15907]" dev="sockfs" ino=15907 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 174.640458][ T29] audit: type=1400 audit(1734303054.143:764): avc: denied { ioctl } for pid=7390 comm="syz.2.400" path="socket:[15905]" dev="sockfs" ino=15905 ioctlcmd=0x4800 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 174.691807][ T9] flexcop_usb: set interface failed. [ 174.697268][ T9] b2c2_flexcop_usb 2-1:2.96: probe with driver b2c2_flexcop_usb failed with error -22 [ 174.807751][ T7395] FAULT_INJECTION: forcing a failure. [ 174.807751][ T7395] name failslab, interval 1, probability 0, space 0, times 0 [ 174.827019][ T9] usb 2-1: USB disconnect, device number 11 [ 174.865557][ T7395] CPU: 1 UID: 0 PID: 7395 Comm: syz.2.401 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 174.876183][ T7395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 174.886247][ T7395] Call Trace: [ 174.889529][ T7395] [ 174.892462][ T7395] dump_stack_lvl+0x16c/0x1f0 [ 174.897164][ T7395] should_fail_ex+0x497/0x5b0 [ 174.901864][ T7395] ? fs_reclaim_acquire+0xae/0x150 [ 174.906997][ T7395] should_failslab+0xc2/0x120 [ 174.911690][ T7395] __kmalloc_noprof+0xcb/0x510 [ 174.916466][ T7395] ? d_absolute_path+0x137/0x1b0 [ 174.921417][ T7395] ? rcu_is_watching+0x12/0xc0 [ 174.926203][ T7395] tomoyo_encode2+0x100/0x3e0 [ 174.930898][ T7395] tomoyo_encode+0x29/0x50 [ 174.935325][ T7395] tomoyo_realpath_from_path+0x19d/0x720 [ 174.940982][ T7395] tomoyo_path_number_perm+0x248/0x590 [ 174.946449][ T7395] ? tomoyo_path_number_perm+0x235/0x590 [ 174.952093][ T7395] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 174.958117][ T7395] ? __pfx_lock_release+0x10/0x10 [ 174.963175][ T7395] ? trace_lock_acquire+0x14e/0x1f0 [ 174.968394][ T7395] ? lock_acquire+0x2f/0xb0 [ 174.972906][ T7395] ? __fget_files+0x40/0x3a0 [ 174.977510][ T7395] ? __fget_files+0x206/0x3a0 [ 174.982203][ T7395] security_file_ioctl+0x9b/0x240 [ 174.987246][ T7395] __x64_sys_ioctl+0xb7/0x200 [ 174.991943][ T7395] do_syscall_64+0xcd/0x250 [ 174.996460][ T7395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.002380][ T7395] RIP: 0033:0x7f81a8785d19 [ 175.006800][ T7395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.026419][ T7395] RSP: 002b:00007f81a965b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 175.034845][ T7395] RAX: ffffffffffffffda RBX: 00007f81a8975fa0 RCX: 00007f81a8785d19 [ 175.042824][ T7395] RDX: 00000000200006c0 RSI: 0000000000005412 RDI: 0000000000000003 [ 175.050801][ T7395] RBP: 00007f81a965b090 R08: 0000000000000000 R09: 0000000000000000 [ 175.058779][ T7395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.066754][ T7395] R13: 0000000000000000 R14: 00007f81a8975fa0 R15: 00007fff488a98a8 [ 175.074747][ T7395] [ 175.121201][ T7395] ERROR: Out of memory at tomoyo_realpath_from_path. [ 178.464336][ T29] audit: type=1400 audit(1734303057.948:765): avc: denied { name_bind } for pid=7431 comm="syz.0.413" src=19996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 178.517590][ T29] audit: type=1400 audit(1734303057.948:766): avc: denied { node_bind } for pid=7431 comm="syz.0.413" saddr=224.0.0.2 src=19996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 178.674581][ T5862] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 178.686514][ T29] audit: type=1400 audit(1734303058.187:767): avc: denied { setopt } for pid=7433 comm="syz.0.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 179.047882][ T7445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.416'. [ 179.131097][ T7445] netlink: 40 bytes leftover after parsing attributes in process `syz.0.416'. [ 179.146379][ T5862] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 179.157618][ T5862] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 179.168620][ T5862] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 179.273464][ T7443] xt_socket: unknown flags 0x50 [ 179.400543][ T7450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.418'. [ 179.498702][ T5862] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 179.556378][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.574798][ T5862] usb 5-1: Product: syz [ 179.592605][ T7443] syzkaller1: entered promiscuous mode [ 179.595628][ T5862] usb 5-1: Manufacturer: syz [ 179.599270][ T7443] syzkaller1: entered allmulticast mode [ 179.613058][ T5862] usb 5-1: SerialNumber: syz [ 180.133643][ T7430] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 180.176851][ T7430] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 180.237430][ T7456] netlink: 'syz.1.420': attribute type 1 has an invalid length. [ 180.252112][ T7456] netlink: 224 bytes leftover after parsing attributes in process `syz.1.420'. [ 180.311757][ T7458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.420'. [ 180.525312][ T7462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.534897][ T7462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.613536][ T7464] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 181.912528][ T29] audit: type=1400 audit(1734303061.414:768): avc: denied { connect } for pid=7469 comm="syz.3.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 181.945374][ T7430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.963645][ T7430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.981358][ T7430] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 181.995738][ T7430] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 182.565035][ T7493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.430'. [ 182.567059][ T5862] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 182.669487][ T5862] cdc_ncm 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 182.676976][ T5862] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 182.683077][ T5862] cdc_ncm 5-1:1.0: setting tx_max = 32 [ 182.697662][ T5862] cdc_ncm 5-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 182.729812][ T5862] usb 5-1: USB disconnect, device number 11 [ 182.736511][ T5862] cdc_ncm 5-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 182.762953][ T7493] netlink: 40 bytes leftover after parsing attributes in process `syz.3.430'. [ 182.930954][ T5862] ------------[ cut here ]------------ [ 182.936447][ T5862] ODEBUG: free active (active state 0) object: ffff888028bfd260 object type: work_struct hint: usbnet_deferred_kevent+0x0/0xe90 [ 183.033504][ T5862] WARNING: CPU: 1 PID: 5862 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 [ 183.043051][ T5862] Modules linked in: [ 183.046951][ T5862] CPU: 1 UID: 0 PID: 5862 Comm: kworker/1:7 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 183.057754][ T5862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 183.067815][ T5862] Workqueue: usb_hub_wq hub_event [ 183.072952][ T5862] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 183.078752][ T5862] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 48 8b 14 dd 40 f9 d1 8b 41 56 4c 89 e6 48 c7 c7 c0 ed d1 8b e8 3f 4a b5 fc 90 <0f> 0b 90 90 58 83 05 d6 5a ba 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 183.098406][ T5862] RSP: 0018:ffffc900043ef458 EFLAGS: 00010282 [ 183.104580][ T5862] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffc90018a11000 [ 183.112609][ T5862] RDX: 0000000000100000 RSI: ffffffff815a5086 RDI: 0000000000000001 [ 183.120600][ T5862] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 183.129009][ T5862] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8bd1f460 [ 183.137527][ T5862] R13: ffffffff8b6bede0 R14: ffffffff86d17270 R15: ffffc900043ef568 [ 183.145538][ T5862] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 183.154481][ T5862] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 183.161078][ T5862] CR2: 000000002001d000 CR3: 000000005238a000 CR4: 00000000003526f0 [ 183.169039][ T5862] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 183.177064][ T5862] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 183.185085][ T5862] Call Trace: [ 183.188375][ T5862] [ 183.191362][ T5862] ? __warn+0xea/0x3c0 [ 183.195456][ T5862] ? debug_print_object+0x1a2/0x2b0 [ 183.200702][ T5862] ? report_bug+0x3c0/0x580 [ 183.205216][ T5862] ? handle_bug+0x54/0xa0 [ 183.209532][ T5862] ? exc_invalid_op+0x17/0x50 [ 183.214227][ T5862] ? asm_exc_invalid_op+0x1a/0x20 [ 183.219238][ T5862] ? __pfx_usbnet_deferred_kevent+0x10/0x10 [ 183.225156][ T5862] ? __warn_printk+0x1a6/0x350 [ 183.230326][ T5862] ? debug_print_object+0x1a2/0x2b0 [ 183.235511][ T5862] ? debug_print_object+0x1a1/0x2b0 [ 183.241145][ T5862] ? __pfx_usbnet_deferred_kevent+0x10/0x10 [ 183.247031][ T5862] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 183.252865][ T5862] debug_check_no_obj_freed+0x4b7/0x600 [ 183.258402][ T5862] ? __pfx_mark_lock+0x10/0x10 [ 183.263174][ T5862] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 183.269224][ T5862] ? lockdep_hardirqs_on+0x7c/0x110 [ 183.274444][ T5862] kfree+0x2b3/0x4b0 [ 183.278321][ T5862] ? rcu_is_watching+0x12/0xc0 [ 183.283137][ T5862] ? kvfree+0x47/0x50 [ 183.287106][ T5862] kvfree+0x47/0x50 [ 183.290943][ T5862] ? __pfx_netdev_release+0x10/0x10 [ 183.296126][ T5862] device_release+0xa1/0x240 [ 183.300741][ T5862] kobject_put+0x1e4/0x5a0 [ 183.305170][ T5862] put_device+0x1f/0x30 [ 183.309317][ T5862] free_netdev+0x4f1/0x6c0 [ 183.313770][ T5862] usbnet_disconnect+0x25c/0x500 [ 183.318705][ T5862] usb_unbind_interface+0x1e2/0x960 [ 183.323905][ T5862] ? kernfs_find_ns+0x2ee/0x3f0 [ 183.329209][ T5862] ? __pfx_usb_unbind_interface+0x10/0x10 [ 183.335324][ T5862] device_remove+0x122/0x170 [ 183.339900][ T5862] device_release_driver_internal+0x44a/0x610 [ 183.345979][ T5862] bus_remove_device+0x22f/0x420 [ 183.350962][ T5862] device_del+0x396/0x9f0 [ 183.355285][ T5862] ? __pfx_device_del+0x10/0x10 [ 183.360148][ T5862] ? kobject_put+0x210/0x5a0 [ 183.364746][ T5862] usb_disable_device+0x36c/0x7f0 [ 183.369764][ T5862] usb_disconnect+0x2e1/0x920 [ 183.374492][ T5862] hub_event+0x1da5/0x4e10 [ 183.378904][ T5862] ? lock_acquire+0x2f/0xb0 [ 183.383412][ T5862] ? __pfx_hub_event+0x10/0x10 [ 183.388157][ T5862] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 183.393825][ T5862] ? rcu_is_watching+0x12/0xc0 [ 183.398596][ T5862] ? trace_lock_acquire+0x14e/0x1f0 [ 183.403837][ T5862] ? process_one_work+0x921/0x1ba0 [ 183.408946][ T5862] ? lock_acquire+0x2f/0xb0 [ 183.413485][ T5862] ? process_one_work+0x921/0x1ba0 [ 183.418582][ T5862] process_one_work+0x9c5/0x1ba0 [ 183.423530][ T5862] ? __pfx_hub_event+0x10/0x10 [ 183.428280][ T5862] ? __pfx_process_one_work+0x10/0x10 [ 183.434154][ T5862] ? rcu_is_watching+0x12/0xc0 [ 183.438918][ T5862] ? assign_work+0x1a0/0x250 [ 183.443921][ T5862] worker_thread+0x6c8/0xf00 [ 183.448506][ T5862] ? __kthread_parkme+0x148/0x220 [ 183.453559][ T5862] ? __pfx_worker_thread+0x10/0x10 [ 183.458656][ T5862] kthread+0x2c1/0x3a0 [ 183.462784][ T5862] ? _raw_spin_unlock_irq+0x23/0x50 [ 183.467990][ T5862] ? __pfx_kthread+0x10/0x10 [ 183.472598][ T5862] ret_from_fork+0x45/0x80 [ 183.477016][ T5862] ? __pfx_kthread+0x10/0x10 [ 183.481612][ T5862] ret_from_fork_asm+0x1a/0x30 [ 183.486373][ T5862] [ 183.489375][ T5862] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 183.496629][ T5862] CPU: 1 UID: 0 PID: 5862 Comm: kworker/1:7 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 183.507363][ T5862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 183.517404][ T5862] Workqueue: usb_hub_wq hub_event [ 183.522415][ T5862] Call Trace: [ 183.525685][ T5862] [ 183.528611][ T5862] dump_stack_lvl+0x3d/0x1f0 [ 183.533189][ T5862] panic+0x71d/0x800 [ 183.537075][ T5862] ? __pfx_panic+0x10/0x10 [ 183.541481][ T5862] ? show_trace_log_lvl+0x29d/0x3d0 [ 183.546666][ T5862] ? debug_print_object+0x1a2/0x2b0 [ 183.551871][ T5862] check_panic_on_warn+0xab/0xb0 [ 183.556789][ T5862] __warn+0xf6/0x3c0 [ 183.560760][ T5862] ? debug_print_object+0x1a2/0x2b0 [ 183.565958][ T5862] report_bug+0x3c0/0x580 [ 183.570292][ T5862] handle_bug+0x54/0xa0 [ 183.574449][ T5862] exc_invalid_op+0x17/0x50 [ 183.578942][ T5862] asm_exc_invalid_op+0x1a/0x20 [ 183.583779][ T5862] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 183.589573][ T5862] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 48 8b 14 dd 40 f9 d1 8b 41 56 4c 89 e6 48 c7 c7 c0 ed d1 8b e8 3f 4a b5 fc 90 <0f> 0b 90 90 58 83 05 d6 5a ba 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 183.609171][ T5862] RSP: 0018:ffffc900043ef458 EFLAGS: 00010282 [ 183.615224][ T5862] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffc90018a11000 [ 183.623176][ T5862] RDX: 0000000000100000 RSI: ffffffff815a5086 RDI: 0000000000000001 [ 183.631132][ T5862] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 183.639100][ T5862] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8bd1f460 [ 183.647067][ T5862] R13: ffffffff8b6bede0 R14: ffffffff86d17270 R15: ffffc900043ef568 [ 183.655022][ T5862] ? __pfx_usbnet_deferred_kevent+0x10/0x10 [ 183.660918][ T5862] ? __warn_printk+0x1a6/0x350 [ 183.665687][ T5862] ? debug_print_object+0x1a1/0x2b0 [ 183.670869][ T5862] ? __pfx_usbnet_deferred_kevent+0x10/0x10 [ 183.676762][ T5862] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 183.682554][ T5862] debug_check_no_obj_freed+0x4b7/0x600 [ 183.688078][ T5862] ? __pfx_mark_lock+0x10/0x10 [ 183.692836][ T5862] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 183.698883][ T5862] ? lockdep_hardirqs_on+0x7c/0x110 [ 183.704069][ T5862] kfree+0x2b3/0x4b0 [ 183.707950][ T5862] ? rcu_is_watching+0x12/0xc0 [ 183.712698][ T5862] ? kvfree+0x47/0x50 [ 183.716657][ T5862] kvfree+0x47/0x50 [ 183.720447][ T5862] ? __pfx_netdev_release+0x10/0x10 [ 183.725646][ T5862] device_release+0xa1/0x240 [ 183.730223][ T5862] kobject_put+0x1e4/0x5a0 [ 183.734623][ T5862] put_device+0x1f/0x30 [ 183.738769][ T5862] free_netdev+0x4f1/0x6c0 [ 183.743190][ T5862] usbnet_disconnect+0x25c/0x500 [ 183.748117][ T5862] usb_unbind_interface+0x1e2/0x960 [ 183.753292][ T5862] ? kernfs_find_ns+0x2ee/0x3f0 [ 183.758120][ T5862] ? __pfx_usb_unbind_interface+0x10/0x10 [ 183.763818][ T5862] device_remove+0x122/0x170 [ 183.768385][ T5862] device_release_driver_internal+0x44a/0x610 [ 183.774435][ T5862] bus_remove_device+0x22f/0x420 [ 183.779349][ T5862] device_del+0x396/0x9f0 [ 183.783660][ T5862] ? __pfx_device_del+0x10/0x10 [ 183.788490][ T5862] ? kobject_put+0x210/0x5a0 [ 183.793070][ T5862] usb_disable_device+0x36c/0x7f0 [ 183.798092][ T5862] usb_disconnect+0x2e1/0x920 [ 183.802763][ T5862] hub_event+0x1da5/0x4e10 [ 183.807167][ T5862] ? lock_acquire+0x2f/0xb0 [ 183.811653][ T5862] ? __pfx_hub_event+0x10/0x10 [ 183.816396][ T5862] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 183.822009][ T5862] ? rcu_is_watching+0x12/0xc0 [ 183.826754][ T5862] ? trace_lock_acquire+0x14e/0x1f0 [ 183.831936][ T5862] ? process_one_work+0x921/0x1ba0 [ 183.837026][ T5862] ? lock_acquire+0x2f/0xb0 [ 183.841529][ T5862] ? process_one_work+0x921/0x1ba0 [ 183.846647][ T5862] process_one_work+0x9c5/0x1ba0 [ 183.851576][ T5862] ? __pfx_hub_event+0x10/0x10 [ 183.856314][ T5862] ? __pfx_process_one_work+0x10/0x10 [ 183.861663][ T5862] ? rcu_is_watching+0x12/0xc0 [ 183.866419][ T5862] ? assign_work+0x1a0/0x250 [ 183.870998][ T5862] worker_thread+0x6c8/0xf00 [ 183.875586][ T5862] ? __kthread_parkme+0x148/0x220 [ 183.880602][ T5862] ? __pfx_worker_thread+0x10/0x10 [ 183.885721][ T5862] kthread+0x2c1/0x3a0 [ 183.889781][ T5862] ? _raw_spin_unlock_irq+0x23/0x50 [ 183.894963][ T5862] ? __pfx_kthread+0x10/0x10 [ 183.899535][ T5862] ret_from_fork+0x45/0x80 [ 183.903931][ T5862] ? __pfx_kthread+0x10/0x10 [ 183.908518][ T5862] ret_from_fork_asm+0x1a/0x30 [ 183.913277][ T5862] [ 183.916603][ T5862] Kernel Offset: disabled [ 183.920980][ T5862] Rebooting in 86400 seconds..