last executing test programs: 10m32.862930134s ago: executing program 3 (id=609): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffe) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000980)="ba4100ec0fde390f01cf0f00980008f2a40f01bd32a30f20d86635080000000f22d8b8f5000f00d0b85b008ec066b98804000066b8fb87000066ba000000000f30", 0x41}], 0x1, 0x42, 0x0, 0x0) sendmsg(r2, &(0x7f0000000680)={&(0x7f00000002c0)=@pppoe={0x18, 0x0, {0x3, @random="ad7701000002", 'bridge_slave_1\x00'}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)="a9c1ea61b7a1cda59509e3b28797c16f528d35faab835456d4f339b0208bd6a0012957764bc058eda750cb9c96e13b781a6fe4c75a60d8541037806e781b747413e13f33bedac2a7f390f09623d9d7ce92936f799a29b87694af41eaf07c3bf69fe6cca9f018e166af568f1d35b412f5050476ca864356e8fa20f068ccd161513f149080d2c4c19e77f5329a668f3758703f31f26110cf8798167f076a9bca54841841e07e794ca8c4cbc4ca44b622c50fdf3e9145e6a97a89f828ab9e9c04d165bee42cbd2e51", 0xc7}, {&(0x7f0000000440)="c7fce0db0b746eb3b18a1baccf13e30f32574b23001bfb8e466dce7b90ee01d0cb59eb98e2efb8151d8e151f77e170a0e27817f18547fc5ac133014286be4a30a60dcdb5f1da9133ee18595ae6cd8979f00a2640c1c7ef050a73de30ec2a1c2c6cf26bd107bb88a76559d7d9d92fb1d71f9b01793463f45e04a1cfb21652d786cfd847770ae31616e950d2bb4e934d2d8d84bbaf67fbf279c06d16fb9de7430000f0c54b742b13c20d64465dbce18a2b8d289b281b49dde458d7", 0xba}, {&(0x7f0000000500)="4bb59bc137173c8b4b583affa308452f214aeeecd3035673086d90ebe76df928999a9621480b6ef7e0aa1d4e2a715ad9e12ca84ffb8ef10c1a2d5a7f0a01bdd9b3477e21e54398050bde11de19cf294ec9a9cac1138b4cf2064c3223adcb133e65e1acb1cd09d984fcd2274a53a628afdcb99551be8a05e2a007", 0x7a}, {&(0x7f0000000580)="73521884d18684513a60b1d29b6315c49b1d8c1fe4d12e063ef05a125ceefb91a32b2a6d81c5106dad63464ca88aee80d177d05ba14b064eaf27ee1d53ebc472b37e7c2972d1e511c0e4edd3e7bb31dc5bfe683ff707486c714c3eb3a40177a1f1a061e49c31df151c7d1fb98827746cf16b5272b4c7e1967c9beb76546a3855259e4b643156c72409d6a036b8c2acb23810398a8235093a538cb19e2c976ebe7ecbec22b23a8410acdb24059cdd098611256fbd48db8012c4476596c776c73e4353c08837bcc684b0a0e7111ea324054e57a5d3d437e6edb7a5ea451f6e91b1de91c7", 0xe3}, {&(0x7f0000000740)="6527a3c2a462457e2485be9a9ad77c60b41b69d32e08141308c9cdf3d073a77d5f9674adcaf27f462a96ca1ccda27cf93123ee3f3116917f90d3f2ed010fdaabce0fe24a64c9c60d78173d733ef71377a3a321b4f841daeef7bdfc6265d22c6ca5f1e69216a733707ada922b5fedca554afc02462be92d8eee321ee1bdb3709e1515226327d0e69319d1fbd86dea5e8d3b0656dd440fbf939b529cde956e9e20b94d688357741eb9c4102ffecefc3c51f1c99d3d399594bc637b654e631011520d51b15d6fc8b516e74179cd5e3a5040be40bf14d6167e5d4a1f81ae", 0xdc}], 0x5}, 0x8000) epoll_create(0x10000e9) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_open_dev$video4linux(&(0x7f0000000040), 0x200000000, 0x800) syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101100, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae01, 0x7) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd28, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xe}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xff, [0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffb]}}]}}]}, 0x8c}}, 0x0) syz_io_uring_setup(0x7d36, &(0x7f0000000240)={0x0, 0xcc68, 0x20, 0x2, 0x34e, 0x0, r3}, &(0x7f0000000100), &(0x7f00000001c0)) r8 = syz_io_uring_setup(0x24fa, &(0x7f00000006c0)={0x0, 0xe926, 0x10, 0x3, 0x1c5}, &(0x7f0000000940)=0x0, &(0x7f0000000180)=0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r11, &(0x7f0000000040)=ANY=[@ANYRES64=r8], 0x118) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/reserved_size', 0xa00, 0xf0) read$msr(r12, &(0x7f0000000040)=""/227, 0xe3) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r11, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x24844}) io_uring_enter(r8, 0x2d3e, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000008c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000900)=0x18) 10m29.592469382s ago: executing program 3 (id=622): timer_create(0x6, &(0x7f00000001c0)={0x0, 0x7, 0x2, @thr={&(0x7f0000000000)='\f', 0x0}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x48}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x11000) r5 = epoll_create(0xad) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0x10}) read$FUSE(r3, &(0x7f00000062c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)=0xb) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_lsm={0x9, 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r6], &(0x7f00000002c0)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) r8 = socket$nl_route(0x10, 0x3, 0x0) close(0x3) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r8, 0x28, 0x12, 0x0, 0x0) preadv(r7, &(0x7f0000001b00)=[{&(0x7f0000000180)=""/244, 0xf4}], 0x1, 0x10, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) 10m27.089808857s ago: executing program 3 (id=625): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x22020400) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, &(0x7f00000001c0)) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x4, 0x0) ioctl$EVIOCGLED(r1, 0x40284504, &(0x7f0000000000)=""/56) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='sessionid\x00') read$FUSE(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x2b, 0x80000, 0x13528) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x9) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/rt_acct\x00') read$char_usb(r4, &(0x7f00000003c0)=""/164, 0xa4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000280), 0x9) r7 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r9, &(0x7f00000000c0), 0x12) 10m26.833855199s ago: executing program 3 (id=629): syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x3) mkdir(&(0x7f0000005740)='./file0\x00', 0x3b) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) chdir(&(0x7f00000000c0)='./file0\x00') mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) 10m26.437240007s ago: executing program 3 (id=631): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r2 = accept(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000680)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564099e4c397614090d1a6e12edf1767f157000000000000", 0x18}], 0x1, &(0x7f0000000480)=[@op={0x18}], 0x18}, {0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)="e1f8b2a05bd9954449", 0x9}, {&(0x7f0000000140)="e53e91c8fa9ae5d05f52a4f9ed3367e13460e8950f69ce9129027bcdca0eb7939b75429921fc27d356", 0x29}, {&(0x7f0000000180)="c11e73aa3fdcfc236392bfc187bc9059fa7e00b467817af526ce35d3eb724f5f148a732f59", 0x25}, {&(0x7f00000015c0)="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", 0x1000}, {&(0x7f0000000380)="d259d78b25e4ccfb2ea50866bc0ef218131007dde2277c8eebada8a2fd48ec137e818dda84dfa4ff820210afc624a1bd91ec580cae8e49f6eb54ca1adf56e967dbf1f0abaa9540122ccd0d0a3d14b9c669fc7398a7fcbbc943f3a7e146beeea2e32c77b601daec50c29816661b6d52b57b1e2b9b4ad76570f5ec452d301dbce8d58dabc6cc3e32d2507dd1815833296b4d68a5ef9d3c28c6aeebe80c1b02b8143bc5093a95826a121af73ce1ea7d1e08269cfafcc191821cb30340f94558995c4f1f5fba6a59b69b7514295ca890a6c12238cf133ab0a0d80564465c6a", 0xdd}, {&(0x7f0000000300)="2d346a824d657dfa3de004212e5c4a48306ef6577125c36a1b6c370057d4b470cb380ca70f7424a6ee", 0x29}, {&(0x7f0000004d40)="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", 0x10ba}, {&(0x7f0000000500)="573df84ced57af3846171e51f26c218a88e040eaab31d02579e4df69728d09fcda511ac937121cb0e098e1d78507ee87074b37269acc2c4f463778a14b22fc0544747414d9532c0b78ffb5e12396e81b92132e9a3c9eb601b82b2a8b39a498999416069f995bb7b62b2d05461c832faf78d41d5b8238d5044f867852", 0x7c}], 0x8, 0x0, 0x0, 0x40000}], 0x2, 0x0) r3 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) read(r3, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xf}, {0xa, 0xa}, {0x6}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x8, 0x4, 0x0, 0x7}, 0xf0, 0x1, 0x31a, 0x3, 0xa8a, 0xd, 0x8e, 0x1f, 0x3, 0xff, {0x4415, 0x2, 0x800, 0x5, 0x0, 0x5}}}}]}, 0x78}}, 0x4000) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="829f79ecfe3ffcd51c43c56f986f280000000000", @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b0000000000"], 0x28}}, 0x0) recvmsg(r2, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) 10m25.008190124s ago: executing program 3 (id=639): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000440)=""/130, &(0x7f0000000240)=0x82) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000400)={'ipvlan1\x00', &(0x7f0000000300)=@ethtool_drvinfo={0x3, "cfae1e8610332aaf073c8d7e23e24149747696f72937d0eaa72f3f6db551129c", "88525cd14f8eed12a8efcbb486d5f94e1f7192a907767ee928726d8541593048", "94ed2609f31e59a9041429955c25747ddc5a9aa68b65f79d739539ff50fe6bbc", "e6ece6330b875a499a782bbd0bde05326e338adc8f3a60c5212b04fb64fff642", "a4e30583baf6fdc385302137f3f6b686903632a36dd691e2f0de22424c816b2b", "69dcedab10ae79d6206beff9", 0x7fffffff, 0x0, 0x4, 0x0, 0x1000}}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1}) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r5) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7c030000", @ANYRES16=r6, @ANYBLOB="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"], 0x37c}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a7", 0x13}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000500)=@gcm_256={{0x6c45c3d9f4d2ba7}, "4fcc70c9a62891a3", "b47b0a9a28c957a867645d2e536c602b4cdfbaaa6ac41b2e9de15e2e4f3cfaea", "0b12c5bb", "ac81aa273c23344e"}, 0x38) msgrcv(0x0, 0x0, 0x0, 0x5, 0x4c00) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_cache\x00') 10m23.688922812s ago: executing program 32 (id=639): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000440)=""/130, &(0x7f0000000240)=0x82) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000400)={'ipvlan1\x00', &(0x7f0000000300)=@ethtool_drvinfo={0x3, "cfae1e8610332aaf073c8d7e23e24149747696f72937d0eaa72f3f6db551129c", "88525cd14f8eed12a8efcbb486d5f94e1f7192a907767ee928726d8541593048", "94ed2609f31e59a9041429955c25747ddc5a9aa68b65f79d739539ff50fe6bbc", "e6ece6330b875a499a782bbd0bde05326e338adc8f3a60c5212b04fb64fff642", "a4e30583baf6fdc385302137f3f6b686903632a36dd691e2f0de22424c816b2b", "69dcedab10ae79d6206beff9", 0x7fffffff, 0x0, 0x4, 0x0, 0x1000}}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1}) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r5) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7c030000", @ANYRES16=r6, @ANYBLOB="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"], 0x37c}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a7", 0x13}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000500)=@gcm_256={{0x6c45c3d9f4d2ba7}, "4fcc70c9a62891a3", "b47b0a9a28c957a867645d2e536c602b4cdfbaaa6ac41b2e9de15e2e4f3cfaea", "0b12c5bb", "ac81aa273c23344e"}, 0x38) msgrcv(0x0, 0x0, 0x0, 0x5, 0x4c00) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_cache\x00') 10.788522703s ago: executing program 5 (id=2851): gettid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0f000000040000000400000015"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) recvmsg$unix(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000840)=""/170, 0xaa}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000000), &(0x7f00000000c0)=r1}, 0x20) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0xaad82, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) 9.474952844s ago: executing program 5 (id=2856): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getxattr(0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff990908", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f0000000080)=""/13, 0xd) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) syz_open_dev$loop(&(0x7f0000000100), 0xdf6, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb}, 0x18) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x1, 0x5e, 0xfffffffffffffffc}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9, 0xfffffffffffffffd}) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_names\x00') r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) connect$rxrpc(r4, &(0x7f0000000080)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e1f, 0x4, @empty, 0xf141}}, 0x24) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 9.409851407s ago: executing program 4 (id=2857): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x9}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={0x0, 0x0, 0x26, 0x0, 0x1, 0x1}, 0x28) syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) accept(0xffffffffffffffff, &(0x7f0000002080)=@l2tp6, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x3, 0x10000}, 0x28) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da98", 0x34}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/69, 0x45}], 0x2}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000e00)=@phonet={0x23, 0x0, 0x0, 0x33}, 0x22, &(0x7f0000000100)=[{&(0x7f0000000180)="27050200590200000600002fb96dbcf706e105000700810000008100accb", 0x1e}, {&(0x7f00000002c0), 0x1a000}], 0x2}, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r7 = fanotify_init(0xf00, 0x1000) fanotify_mark(r7, 0x105, 0x5000003a, r6, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 8.364061602s ago: executing program 0 (id=2860): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@caif=@rfm={0x25, 0x5, "cdfaaf7254f4ef6249f068fcdd7e1cbd"}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000300)="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", 0x163}, {&(0x7f0000000480)="1c393502dda1a67d93b1ceccbe972c4fef9c33ecf2d824f3a33513f45f472bbdc8e3a2275f2587f0da0b3ae419bed996116448f90d113ce98aa985f379d729430858f5cb9a668a1800bf2354b33cdff83033de518580a3080d7f4cc2406e071138439e1566dd17983ee153ab672f362d3292034a9952f18ec3d8b37bb3391096c1d4442a754899299321c03cbcfb98a26994b2a072c2b9d9c70d619545e5f61b050e40166d2ff57dcc008f24fd5339e7bc21e25863f80d2487c30b6bf781608a31d68e9319ab1712d8f5bdde849c040417c864cbfd3923dcb9fc6bdc2ea53334184b03efcb631dc68f0a7b6e13eea4b80d4237120e32932ca4e2b50bad0a35496d36a191d91f03b477b9587bc0ba489932e34f819fa1524ebad53a3d94b46c6aeff4f42fa067729fbb2862c09d337a75e0c8429d4bfe0dee2e1e23e8c22787178600ecca135623731e4701f35bd4e7c936a8ee274120e7662328a5aba1161b05889b045696721c79bff0547efe051f3c5de77fdd3c77afd41a1a7747a982b7efb013c9d6bac7d3ad1f9b7c3a5a1448b35696f03bca1c875e346edc55b7a271c3e5f3c0df72c8e4d7cccfa2e9b598f0ae06efbc1a5d5bd91aed6b32deccf7755cef50fab72633c802533b9d94f17f9be978f2514c47671575ee528fbdddc6194328e605e4d10e293756d20eb8a545f2bfe48df5d1d98a270458392a0a57647dcb8e35c0245b618452612d0429b9b9957a695c3289b4a59469691115e6ba204181708b9d1ae47418ed594b8128f20c100f5485a84e60d73ab818da73fab78caf42afd1f89cdb29dfdd6676c55ea00d35321bc4878170c62b056b4e03ae556ac804026cabcbc8e79e7a18f2f56442cd650aa2bc88f62ebb65bfafd3e5b4c62ac2e720ff0fdf03c46889df55ff91058319c953f90cd6e7f7b15d56a58ff6128357510c4c61fae925f3147ee3e72c8aa25434881d58c39092969ba1f7c444465f16d1f2561991e357bda928f2a50422f774f318fb41169a0d0324a8efd19b940a17c28cda06b750cd02155dbdbd1dc695e190a997ae8f4bb8766983d8db8678a78ae8f044b868549e9c60f7ce2925a36300ce07f304e75d285e914b3aec703969df969b2736dd99fcab1944c751f8ef4c34cbb86d5f27ef9982be245949d5579b540750d1eac428b0cd2541295b577573b27e9ecac3934987e85b44bc85e6e307cf6f5683bf1c817369d556a368bc5560a1737aa2bec3cac4689e04fbe851ed4b6c1a355950522f8918af3855fe97ec285da15a20e8119483e7419fa2b0639d5add10b396a8033ec2b98d9a9fca3fc4202d0a6bcfa55798eacacc78cb5c8b4f26222883707b61fa4c8efafb73a2ab89bb58b0c20364a6ad9c233dfb1bdbb87b8f91e3ab9790e876f906107183419aa7480e327388c01dc5f2d5bcb8a7565cddc4e1275741116416b66bf3adf9e7e31c3fc518740446ed2a394e7699baf9408c62b4c0e7a11dec8f4a67e78a3f00bedae9f55f36c52a1fd4ee3a8be7285f9ca898ee63d3718a7c4603bcb9a24537b34a41a6c0eee4cc609b014d3f4fb928aa7e3fa7a4f97dcef5c0e526b650284ffeda82f603ed9ea1eb6627d29d8bcd6c7e6fe128b1c4463b2cfe50c0ff9a46090635dde4b4d4a984e5a91f7486856cd2bf85088fa4b97b219628be8cdba7e54d00985a73fb5b0b4b0f96844e73a8ff7884bdee1a0d6e62decfeebfb56351c135e6580fd61ea806ee5592fe4ffba5c73b8a4a04d44aa52645320cb73fe0c5f14a971d3b3f64c85f5ebaab5e1a061f5186050230286331048e43368e45cfc88e8f4d0d3b1b86b64d5394bc68c2b754389b3c18a45c1edb0496dd88cb3113bbdf1a0f127eb8cd52caf8da95b83d0decad3775b2f2e43776d0d32d447cdd0b267b32775e3473f51a233f8c91a4c07ad669da1844f3d9554f399d43ca1eda29c5c761b3936f845f0c4d1c6a56b8b34b5ab3291e06cd86de6116fc3236a11343d6f4ad02199717054ac1f15471c5a2b8efe67bd4bea33c0ca36e2c4209026849de21c1da1057f353dc824947d75119e4501b98cb9e621d0644e3f4a75353093557afcee7da41ad368fe1cbb426922772b9b262a861fbce9ae86d6e8c5a8de6a1e8f03456c0a354277a2f3ff46a62b6d6cdee4febf23e2350f94b47a05a4d0e7da37a2e97b899d92ca1f3bd1cded5588593e8bb99b9dce0731fa1174de14b63be2bf7e424f870551f213fab437aac092c2e9798959fa3616465e2b36fd49cc9af902d47debec02558c036ed991f1a3895b37cd70f3c405cca362c885542fd976e73be4cf7580a0c4d5a9527c77c189573e3be07ed15472f6b012939abb5be9f3e8a5b720307fb2dbca48b35d121702cfb6b3690559b08fbeb77d53d37582d7f44fe269ac51665632bf070cfc7445741b70306cb3f19b7fbecd19a78092dfd086a0da019734d95660ba4e5ce5bcf25f09403c32e3ec902f3717cca0eca05e791c2b8c2b8988645afa2446d5218abce136c0db9afb95e4f4727a29cc567b3f73d5dbc1aeee746653a7f5c445add24a9c1b67d1bfeec85d2a6478e80c3acdb9439aa46c8cf14a98ffa89790ef7a94b3146088566812e28ccbafb466772b7fbb98dcf1e792eb6d0de0829c3c49c5ecdeea3e80017324a0fe724565c4e7a242764e9012442cae44b57c7121889c044be05b5eca70efb649bb528e751f072af93ae2c5053fdce196cce158136f904cf64f2cb8becc2d024f5ec32a38d78b87a4dfe7c53769dadef890efd160eb662cedb18a756aed83edfb9efbbb3648eb399e61f80077e64b95eae9d17083aed05cfc2e148621e36be1f41d373c721a11804fce269c688b0c647d6e1083e336d1f7f90a7a080a83397773cc351531070af5c1a1418f28dce95c01052a314a9ebe39cb9cddb8e7855e58c4a636b7f6250ecad312ede18664c03d92e330935295a35ea3e0306f25ca971300f782ae2f6e79a513732d22ef9b9bc41d17df3352a855cdd19b18f5abd6e6420f4f42f01750a64f6acdb6b46622fafebe3e913c64a1a6a59f980e97deae0dc83c12ccae6b430d7a28f21c3e0e38b32f3d5f1d44927fc34ed5c9ddb5be8eb936dbdcd327b63ea69d86c2da15cb834a18ee51a44f2da7b11d79486942fd04eade92fe5d93342970ca4cc73861b15facf97e9c53c15488c5630b17b9364c58652cfa6de0918327498ba8d6120d3be9139c51a6e9017525772397529ddd4fd1905614fd1cc7f1370a577ad10ec9ea742f9aedc9fee42c3df38f4b35cdfd70fd677bcd396b37c60e439693dcb1cf8590eaf770b3f74af21f5119ac238e82e92c83321b06f106530abbbd321c3e1dc948accdc21a586ff37253ad1d0c5bfb51541f876be1b6e4f490046204b9edfe9a9721b9019a495d1efed10d4570f4c75ac8b46cfe8899f6d92e862611b35be8931a2460dc646ed332b3046baf48613bbb543f4abda22d3d62a484665ba5bbf8fec1bb199b430a6e96cfad417a1644cc5f7f640004836c60f15a174eb7eb1750a71a141549f393c7d88b8729a33f841f7f8f2bd03dccaaa825f2e29105f6b4c11ac8e06bb3be9dfdecce66294a0be9dbc5f40123644fcac59ed0c968eb62fb14d111e900ad1c038f17d5471ab088f704de7db35753f818f55669a76e621b29d975253d177791e1434644a81b2b8bc4c8e147961b4f1b7f3e225571fecb10906957791b27d35a89e3ce84c91a2dc60aee460d8f41eb7b5e171516ef34d8c7dbbc8122cdeffa51b5a393d2cae7f69826d342d4d85b58ca7ddb0e688a15b39a00ef1aed5db337d1ab87e06f835663a496857fb6320e5ee9086f42588d9b8ea04ff3d9eac2b8ffd1155a504230103a68bd8b3c416a10d76cee236442a68393896587bc66c01a5f7f411325578d023d7619a89d0bcbbacae99b925fb72994e1ef4240cddad2294a56bec6d6243b95b04345c215bd48a3aa89786ba39b4d2f5015d8bd038c32a7b0eb02a4eb5a640371d9b4af540eb99a1e26547cc214da21e9538754a802972411a0bf416707b95457d0b77daac9bdf27a82b9aa7992ad1d3815f9a56a746eefa6f7e1913b6e3e859b2cc7797adcae825b7aad17c11e66597042c327a6473489a9664c5ce0ff8b1ecfb691daa0bd50c17f4597826553686bc2ee08eaca8dd6f77c626691699141a698e5b517e02130587ee503c7b5f638cbf32166b0d4ebe9222b6c9d50fb3db9d1ab060c31aabeef52cd51e5cf485eecc741e37a47c4996068f1d4b25f182b9d7bee4bec5cb070d3cea2f9762a41bb8d9ec5896ebcb2b17ca82f29bcce456412d8ed531afda50d259fcb7794216b6a9a873b6c3c4493c0c6d3e6a4f81f3b40dcc745a4e2383c678c472b1d5bf3ff02992bfe893a5bc96824039da1ee3cf8593e7d616d62f6e3c3e2c4e0cc58d5445998cf5b1c91c2468b2571b118709668efbbe72911f1bfa96b97c32f71cd7071f4c729e88631a89b53dd4bae6ef9c4ed082916e267479195599e9871b26b92c6885ded29f990070fddc4d8535088ddc70d6e83f797b6fa2260a92602eb9098e6db801cb7394f0c90fb5913b2f8d8d24c8f1056920e1facbe643dd49d8983b277da7282a986c28d5468aed9a4730579a20346d35f78b6bd2cacb4b9237fbfb0b7a2314105ff3b074a0e340b904e715e99c501e1435c15eaa262893c2883c90f26d2ff91792d46e4d867b62570e0c1e4739b8ac4fff8f778960de1ae40d4c85c51e1c60040bb2caeaf0c71dbb67c30715b8c14d6921831d7678522eeed29444df421ee206ca3be20d1b5fd2d2baf832f097fef590290eea77f8f3ed00b39841421b61f1c0d01def54bec0348be2216a8dad60838f3ad3595a", 0xd78}], 0x2}, 0x800) 8.25606476s ago: executing program 4 (id=2861): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[], 0x114}], 0x1}, 0x0) 8.151150467s ago: executing program 0 (id=2863): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x20ca83, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x24, 0x0, &(0x7f00000004c0)=[@enter_looper, @increfs_done={0x40106308, 0x2}, @enter_looper, @acquire], 0x98, 0x0, &(0x7f00000005c0)="bee641933cbdc44bfb35bff4f7fa8d78eac93e6ca8668cf45e9be69af0172f2056322aba35ffd3fff24cac8be49cbf158666a8c168383941c0c2517f001a0e65328edffed2c3f6f8ee1a510827b9ff890ebbc9910f191930d7f860ee1b3e8b8bb132ed40d5feaaa3274ea396442370337e821e79effd4259b5201e1c8bae1d106ebe4df62bbad35d2c6da353983fc9e1dec840b370e9f265"}) listen(r0, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @mcast2, 0xcd}}, 0x0, 0x0, 0x43, 0x0, "0aaa8ff5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed3"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, 0x40c89}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0xf}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0xe3}}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x11}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg$inet(r5, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x3, 0xa6, 0xe058, 0x8d, 0xffffffffffffffff, 0x9, '\x00', r7, r1, 0x3, 0x6, 0x4, 0x8}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="00000000000000b09921e29d2e9bc100b7030000000000000200000000000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70200000000000085000000860000008500000050000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r10}, 0x10) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = syz_open_dev$hidraw(&(0x7f0000000000), 0x9, 0x92500) write$hidraw(r12, &(0x7f0000000040)="b7cf9765dabc306eabbfacabbaf62d734927c8552db77639f51f3295005f5b5f", 0x20) listen(r11, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) 8.077033809s ago: executing program 4 (id=2864): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x400000000000000, 0x0, 0x0) recvfrom$inet(r0, &(0x7f00000001c0)=""/4, 0x4, 0x0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket(0x2, 0x80805, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000280)={r4, 0x7}, 0x8) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0xfc, {"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", 0xffffffffffffff34}}, 0x1006) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={r4, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x8, 0x8}, 0x90) 7.692362451s ago: executing program 0 (id=2866): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x17, 0x6, 0x1, 0x0, 0x2000, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000f5dbdf253700000008000300", @ANYRESOCT=r1, @ANYBLOB="08005700df002000080026"], 0x34}, 0x1, 0x0, 0x0, 0x4000814}, 0x10) 7.096806145s ago: executing program 0 (id=2869): connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x10) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000000)={0x8a55, 0x1, 0x7, 0x80001000, &(0x7f00000000c0)=[{}]}) gettid() openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000002"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) signalfd(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 7.04966961s ago: executing program 2 (id=2870): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_emit_ethernet(0x1e, &(0x7f00000002c0)=ANY=[], 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000300)={0x2, @pix_mp={0x7e, 0x0, 0x34324152, 0x4, 0x0, [{0x0, 0xf}, {0x20010}, {}, {0x1000000}, {0x3}, {0x2fe}, {0x0, 0x7ff}], 0xf, 0x0, 0x0, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast1, 0x0, 0x0, 'fo\x00', 0x0, 0x0, 0xfffffffc}, 0x2c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x4, 0x1, 0x1, 0x93}, 0x10) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) symlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000004540)='./file0\x00') r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xe168, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x40, 0x0, r4, 0x0, &(0x7f0000000040)='./file0\x00', 0x160, 0x80, 0x0, {0x0, r8}}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000100), 0xfffffffffffffd9f) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 7.048283069s ago: executing program 1 (id=2871): r0 = syz_open_dev$dri(&(0x7f0000000040), 0xb, 0x2e200) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r2 = dup3(r1, r0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) 6.497713099s ago: executing program 1 (id=2872): sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000170a018859f822340177a0942cdc01000000000000000000000006ebe5d09fd9a7731ec389ac24f755126bfd514e572052dfc126613030b622d5a68e6c0f278deb71cbfd640f633ff71653eea9726e0fbe9269c138b1299a6e1a01bc8d3165bc71c0a07d26946c5e1c2cdc5f7731533856d6c56afe93f584302342b0d80c386c1b1b1bd371"], 0x14}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000000) syz_open_dev$audion(&(0x7f0000000000), 0x0, 0x230200) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) setrlimit(0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="ee61d15b176da8ea8abe33a2ac1a58bde11db6411b4864916c5ac483163a894aaee52e9e377fc5bab5055d789da66a7a70863f889aad1335f04ee4450038b9778f4d5ec530dd982feea0da048265c0ac677634f7f8a03936495e01ad2391429afd94e82dd69e1e130ee96890732fd2607f206484a26cd5fb3c25cedbf3e614e91913ecc6cb885d6634e642a4663fb173c97df34d038205965db55ba937f12ef8ec0905e1cd0aae11db41a3046e273aeecf2fe24cbdb77f0b7aaf43983b50874a6dd6bf1a1b37c155a4d520a4f14573abd041057b027c698396e651d92fa6"], &(0x7f0000000380)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0xbe55d000) syz_open_dev$usbfs(0x0, 0x76, 0x101b01) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x400000001, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, {0xa, 0x0, 0xfffffffe, @empty, 0x200000}, r6}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000780), r6, 0x2}}, 0x18) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x101001, 0x0) syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x100) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c8000006800e97800000400000000000a0003002000001004000400"], 0x1c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x4040054}, 0x0) 6.496745709s ago: executing program 4 (id=2873): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@caif=@rfm={0x25, 0x5, "cdfaaf7254f4ef6249f068fcdd7e1cbd"}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000300)="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", 0x163}, {&(0x7f0000000480)="1c393502dda1a67d93b1ceccbe972c4fef9c33ecf2d824f3a33513f45f472bbdc8e3a2275f2587f0da0b3ae419bed996116448f90d113ce98aa985f379d729430858f5cb9a668a1800bf2354b33cdff83033de518580a3080d7f4cc2406e071138439e1566dd17983ee153ab672f362d3292034a9952f18ec3d8b37bb3391096c1d4442a754899299321c03cbcfb98a26994b2a072c2b9d9c70d619545e5f61b050e40166d2ff57dcc008f24fd5339e7bc21e25863f80d2487c30b6bf781608a31d68e9319ab1712d8f5bdde849c040417c864cbfd3923dcb9fc6bdc2ea53334184b03efcb631dc68f0a7b6e13eea4b80d4237120e32932ca4e2b50bad0a35496d36a191d91f03b477b9587bc0ba489932e34f819fa1524ebad53a3d94b46c6aeff4f42fa067729fbb2862c09d337a75e0c8429d4bfe0dee2e1e23e8c22787178600ecca135623731e4701f35bd4e7c936a8ee274120e7662328a5aba1161b05889b045696721c79bff0547efe051f3c5de77fdd3c77afd41a1a7747a982b7efb013c9d6bac7d3ad1f9b7c3a5a1448b35696f03bca1c875e346edc55b7a271c3e5f3c0df72c8e4d7cccfa2e9b598f0ae06efbc1a5d5bd91aed6b32deccf7755cef50fab72633c802533b9d94f17f9be978f2514c47671575ee528fbdddc6194328e605e4d10e293756d20eb8a545f2bfe48df5d1d98a270458392a0a57647dcb8e35c0245b618452612d0429b9b9957a695c3289b4a59469691115e6ba204181708b9d1ae47418ed594b8128f20c100f5485a84e60d73ab818da73fab78caf42afd1f89cdb29dfdd6676c55ea00d35321bc4878170c62b056b4e03ae556ac804026cabcbc8e79e7a18f2f56442cd650aa2bc88f62ebb65bfafd3e5b4c62ac2e720ff0fdf03c46889df55ff91058319c953f90cd6e7f7b15d56a58ff6128357510c4c61fae925f3147ee3e72c8aa25434881d58c39092969ba1f7c444465f16d1f2561991e357bda928f2a50422f774f318fb41169a0d0324a8efd19b940a17c28cda06b750cd02155dbdbd1dc695e190a997ae8f4bb8766983d8db8678a78ae8f044b868549e9c60f7ce2925a36300ce07f304e75d285e914b3aec703969df969b2736dd99fcab1944c751f8ef4c34cbb86d5f27ef9982be245949d5579b540750d1eac428b0cd2541295b577573b27e9ecac3934987e85b44bc85e6e307cf6f5683bf1c817369d556a368bc5560a1737aa2bec3cac4689e04fbe851ed4b6c1a355950522f8918af3855fe97ec285da15a20e8119483e7419fa2b0639d5add10b396a8033ec2b98d9a9fca3fc4202d0a6bcfa55798eacacc78cb5c8b4f26222883707b61fa4c8efafb73a2ab89bb58b0c20364a6ad9c233dfb1bdbb87b8f91e3ab9790e876f906107183419aa7480e327388c01dc5f2d5bcb8a7565cddc4e1275741116416b66bf3adf9e7e31c3fc518740446ed2a394e7699baf9408c62b4c0e7a11dec8f4a67e78a3f00bedae9f55f36c52a1fd4ee3a8be7285f9ca898ee63d3718a7c4603bcb9a24537b34a41a6c0eee4cc609b014d3f4fb928aa7e3fa7a4f97dcef5c0e526b650284ffeda82f603ed9ea1eb6627d29d8bcd6c7e6fe128b1c4463b2cfe50c0ff9a46090635dde4b4d4a984e5a91f7486856cd2bf85088fa4b97b219628be8cdba7e54d00985a73fb5b0b4b0f96844e73a8ff7884bdee1a0d6e62decfeebfb56351c135e6580fd61ea806ee5592fe4ffba5c73b8a4a04d44aa52645320cb73fe0c5f14a971d3b3f64c85f5ebaab5e1a061f5186050230286331048e43368e45cfc88e8f4d0d3b1b86b64d5394bc68c2b754389b3c18a45c1edb0496dd88cb3113bbdf1a0f127eb8cd52caf8da95b83d0decad3775b2f2e43776d0d32d447cdd0b267b32775e3473f51a233f8c91a4c07ad669da1844f3d9554f399d43ca1eda29c5c761b3936f845f0c4d1c6a56b8b34b5ab3291e06cd86de6116fc3236a11343d6f4ad02199717054ac1f15471c5a2b8efe67bd4bea33c0ca36e2c4209026849de21c1da1057f353dc824947d75119e4501b98cb9e621d0644e3f4a75353093557afcee7da41ad368fe1cbb426922772b9b262a861fbce9ae86d6e8c5a8de6a1e8f03456c0a354277a2f3ff46a62b6d6cdee4febf23e2350f94b47a05a4d0e7da37a2e97b899d92ca1f3bd1cded5588593e8bb99b9dce0731fa1174de14b63be2bf7e424f870551f213fab437aac092c2e9798959fa3616465e2b36fd49cc9af902d47debec02558c036ed991f1a3895b37cd70f3c405cca362c885542fd976e73be4cf7580a0c4d5a9527c77c189573e3be07ed15472f6b012939abb5be9f3e8a5b720307fb2dbca48b35d121702cfb6b3690559b08fbeb77d53d37582d7f44fe269ac51665632bf070cfc7445741b70306cb3f19b7fbecd19a78092dfd086a0da019734d95660ba4e5ce5bcf25f09403c32e3ec902f3717cca0eca05e791c2b8c2b8988645afa2446d5218abce136c0db9afb95e4f4727a29cc567b3f73d5dbc1aeee746653a7f5c445add24a9c1b67d1bfeec85d2a6478e80c3acdb9439aa46c8cf14a98ffa89790ef7a94b3146088566812e28ccbafb466772b7fbb98dcf1e792eb6d0de0829c3c49c5ecdeea3e80017324a0fe724565c4e7a242764e9012442cae44b57c7121889c044be05b5eca70efb649bb528e751f072af93ae2c5053fdce196cce158136f904cf64f2cb8becc2d024f5ec32a38d78b87a4dfe7c53769dadef890efd160eb662cedb18a756aed83edfb9efbbb3648eb399e61f80077e64b95eae9d17083aed05cfc2e148621e36be1f41d373c721a11804fce269c688b0c647d6e1083e336d1f7f90a7a080a83397773cc351531070af5c1a1418f28dce95c01052a314a9ebe39cb9cddb8e7855e58c4a636b7f6250ecad312ede18664c03d92e330935295a35ea3e0306f25ca971300f782ae2f6e79a513732d22ef9b9bc41d17df3352a855cdd19b18f5abd6e6420f4f42f01750a64f6acdb6b46622fafebe3e913c64a1a6a59f980e97deae0dc83c12ccae6b430d7a28f21c3e0e38b32f3d5f1d44927fc34ed5c9ddb5be8eb936dbdcd327b63ea69d86c2da15cb834a18ee51a44f2da7b11d79486942fd04eade92fe5d93342970ca4cc73861b15facf97e9c53c15488c5630b17b9364c58652cfa6de0918327498ba8d6120d3be9139c51a6e9017525772397529ddd4fd1905614fd1cc7f1370a577ad10ec9ea742f9aedc9fee42c3df38f4b35cdfd70fd677bcd396b37c60e439693dcb1cf8590eaf770b3f74af21f5119ac238e82e92c83321b06f106530abbbd321c3e1dc948accdc21a586ff37253ad1d0c5bfb51541f876be1b6e4f490046204b9edfe9a9721b9019a495d1efed10d4570f4c75ac8b46cfe8899f6d92e862611b35be8931a2460dc646ed332b3046baf48613bbb543f4abda22d3d62a484665ba5bbf8fec1bb199b430a6e96cfad417a1644cc5f7f640004836c60f15a174eb7eb1750a71a141549f393c7d88b8729a33f841f7f8f2bd03dccaaa825f2e29105f6b4c11ac8e06bb3be9dfdecce66294a0be9dbc5f40123644fcac59ed0c968eb62fb14d111e900ad1c038f17d5471ab088f704de7db35753f818f55669a76e621b29d975253d177791e1434644a81b2b8bc4c8e147961b4f1b7f3e225571fecb10906957791b27d35a89e3ce84c91a2dc60aee460d8f41eb7b5e171516ef34d8c7dbbc8122cdeffa51b5a393d2cae7f69826d342d4d85b58ca7ddb0e688a15b39a00ef1aed5db337d1ab87e06f835663a496857fb6320e5ee9086f42588d9b8ea04ff3d9eac2b8ffd1155a504230103a68bd8b3c416a10d76cee236442a68393896587bc66c01a5f7f411325578d023d7619a89d0bcbbacae99b925fb72994e1ef4240cddad2294a56bec6d6243b95b04345c215bd48a3aa89786ba39b4d2f5015d8bd038c32a7b0eb02a4eb5a640371d9b4af540eb99a1e26547cc214da21e9538754a802972411a0bf416707b95457d0b77daac9bdf27a82b9aa7992ad1d3815f9a56a746eefa6f7e1913b6e3e859b2cc7797adcae825b7aad17c11e66597042c327a6473489a9664c5ce0ff8b1ecfb691daa0bd50c17f4597826553686bc2ee08eaca8dd6f77c626691699141a698e5b517e02130587ee503c7b5f638cbf32166b0d4ebe9222b6c9d50fb3db9d1ab060c31aabeef52cd51e5cf485eecc741e37a47c4996068f1d4b25f182b9d7bee4bec5cb070d3cea2f9762a41bb8d9ec5896ebcb2b17ca82f29bcce456412d8ed531afda50d259fcb7794216b6a9a873b6c3c4493c0c6d3e6a4f81f3b40dcc745a4e2383c678c472b1d5bf3ff02992bfe893a5bc96824039da1ee3cf8593e7d616d62f6e3c3e2c4e0cc58d5445998cf5b1c91c2468b2571b118709668efbbe72911f1bfa96b97c32f71cd7071f4c729e88631a89b53dd4bae6ef9c4ed082916e267479195599e9871b26b92c6885ded29f990070fddc4d8535088ddc70d6e83f797b6fa2260a92602eb9098e6db801cb7394f0c90fb5913b2f8d8d24c8f1056920e1facbe643dd49d8983b277da7282a986c28d5468aed9a4730579a20346d35f78b6bd2cacb4b9237fbfb0b7a2314105ff3b074a0e340b904e715e99c501e1435c15eaa262893c2883c90f26d2ff91792d46e4d867b62570e0c1e4739b8ac4fff8f778960de1ae40d4c85c51e1c60040bb2caeaf0c71dbb67c30715b8c14d6921831d7678522eeed29444df421ee206ca3be20d1b5fd2d2baf832f097fef590290eea77f8f3ed00b39841421b61f1c0d01def54bec0348be2216a8dad60838f3ad3595a", 0xd78}], 0x2}, 0x800) 6.383325965s ago: executing program 5 (id=2874): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) syz_emit_ethernet(0x52, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x71d0b8801b5f1c98) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) pipe(&(0x7f0000000080)) prlimit64(0x0, 0xe, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = getpgrp(0xffffffffffffffff) ptrace$setopts(0x4206, r2, 0x0, 0x20004f) socket$alg(0x26, 0x5, 0x0) mremap(&(0x7f00000ab000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 5.528656534s ago: executing program 2 (id=2875): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, r3, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x400}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xff}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x48}}, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, &(0x7f00000001c0)=0x8000000000000001, 0x9, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r7, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000000)=""/180, 0xb4}], 0x1}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x6}], 0x3, 0x20, 0x0) 5.435451857s ago: executing program 1 (id=2876): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6(0xa, 0x5, 0x80) socket$unix(0x1, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/147, 0x93}], 0x1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x0, 0x0, 0x180000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x6000, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0xfffffffffffffed9, &(0x7f0000000180)={&(0x7f0000001180)=ANY=[@ANYRES32], 0x8c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000002000/0x2000)=nil) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, &(0x7f0000001080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001240)=@newtaction={0x18, 0x30, 0x51b, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) read$hiddev(0xffffffffffffffff, &(0x7f0000000000)=""/4118, 0x1016) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_DQEVENT(r9, 0xc0506107, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) epoll_create(0x802) 4.742549529s ago: executing program 5 (id=2877): r0 = gettid() r1 = socket(0x10, 0x80002, 0x0) socket(0x200000000000011, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080), 0x4) sched_setscheduler(0x0, 0x2, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) r4 = shmat(r3, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmdt(r4) shmdt(r4) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000000000001000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0500"/12], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) mmap$binder(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x1, 0x11, 0xffffffffffffffff, 0xffffffffffffff5f) sendmsg$inet(r5, 0x0, 0x3) r9 = eventfd(0x0) keyctl$dh_compute(0x10, &(0x7f0000000100), 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r9, &(0x7f00000000c0)={0xffffffffffffffff, r9}) 4.666794736s ago: executing program 4 (id=2878): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, 0x0) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpu.idle\x00', 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000400)='syscall\x00') lseek(r3, 0x8, 0x100000000000000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 4.447187826s ago: executing program 2 (id=2879): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r0, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0xb40, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x10002) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f000000000000000000000000000034461ae4"], 0x38}, 0x1, 0x0, 0x0, 0x408d4}, 0x20040800) r7 = socket$alg(0x26, 0x5, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000005130a4a04e5221657b07d616e94cc1d006baba3bc5dda1e67a8c2995fae7817f2c11cf7b8e291d2e074c4769", @ANYRES16=0x0, @ANYBLOB="200026bd7000fcdbdf2505000000"], 0xfebe}}, 0x200040d1) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x2000000000000283, &(0x7f0000000580)=ANY=[@ANYBLOB="180003000200000000000000f800000065600900f0ffffff8520000003000000185200001000000000000000000000009500000000000095000000000000009500000000000000"], &(0x7f0000000640)='syzkaller\x00', 0xfffffff6, 0x71, &(0x7f0000000680)=""/113, 0x41100, 0x20}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0xbfa35000) 3.38903309s ago: executing program 2 (id=2880): socket$nl_crypto(0x10, 0x3, 0x15) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2}, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x5cb, @dev={0xfe, 0x80, '\x00', 0x1b}}}}, 0x32) getpeername(r1, 0x0, &(0x7f0000000000)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$dsp(r3, &(0x7f0000000100)=""/86, 0x56) ioctl$SNDCTL_DSP_STEREO(r3, 0xc0045003, &(0x7f0000000080)=0x1) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010017"], 0x1c}}, 0x0) 2.672352195s ago: executing program 0 (id=2881): connect$netrom(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84242, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x4000, {0x0, 0x0, 0x0, 0x8002ead, 0x7fff, 0x0, 0x0, 0x19, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d34717deb7ba193b3e7772fd29f35239d200", "24431a1e77a68e174ff10000000000000010e200"}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) rseq(&(0x7f00000006c0)={0x0, 0x300, 0x0, 0x1}, 0x20, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0xffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 2.655635023s ago: executing program 2 (id=2882): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000c80)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8900f9", 0x20, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x9, 0x0, 0x0, {[@mptcp=@mp_join={0x1e, 0x3, 0xf}, @mptcp=@ack={0x1e, 0x9, 0x76a, 0x4, "b0282dc626"}]}}}}}}}}, 0x0) socket(0x40000000015, 0x5, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x29, 0x0, &(0x7f0000000000)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$read(0xb, 0x0, 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020a000207000000ffe9ffffffff160005001a"], 0x38}}, 0x1400c0d4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) socket(0x40000000015, 0x5, 0x0) 1.624274923s ago: executing program 2 (id=2883): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e3", 0x33, 0x840, 0x0, 0x0) r1 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="020300020c00000000000000000000000200080008000000d700000000000000030006003c00000002"], 0x60}, 0x1, 0x7}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xfffffffffffffddf, &(0x7f00000000c0)=ANY=[@ANYRES64=r1, @ANYRES64=r0, @ANYRES32=r3, @ANYRES32=r0, @ANYRESOCT=r1, @ANYRES64=r0]) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f0000000000)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 1.426764044s ago: executing program 0 (id=2884): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getxattr(0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff990908", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f0000000080)=""/13, 0xd) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) syz_open_dev$loop(&(0x7f0000000100), 0xdf6, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb}, 0x18) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x1, 0x5e, 0xfffffffffffffffc}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9, 0xfffffffffffffffd}) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_names\x00') r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) connect$rxrpc(r4, &(0x7f0000000080)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e1f, 0x4, @empty, 0xf141}}, 0x24) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 1.334753995s ago: executing program 1 (id=2885): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz0\x00', {0x5, 0x8, 0x9, 0xfffd}, 0x50, [0x2, 0x2, 0x6, 0xaa70, 0x0, 0x829, 0x520, 0x1, 0x9, 0x8, 0x3, 0x9, 0xf337, 0x1, 0x3, 0xfffffffb, 0xfffffffa, 0x6, 0x4, 0x8, 0x1, 0xffffca2b, 0x9, 0x7fff, 0x63, 0xfffffff6, 0x4, 0x8, 0x0, 0x357d, 0x9, 0x1, 0x2, 0x80000001, 0x3, 0x7, 0xfdd, 0x200, 0x7ff, 0x3, 0x4, 0x4, 0x7, 0xffff, 0x2, 0x5, 0x101, 0x5, 0x9, 0x200, 0x60000, 0x8, 0x4, 0x3, 0x4, 0x4, 0x4, 0xd, 0x7, 0x1, 0x80000000, 0x78, 0x7, 0xfffffffe], [0x0, 0x6, 0xb, 0x4, 0x6, 0xd87, 0x6, 0xa8c, 0x100, 0x7, 0x8, 0x7, 0xf, 0x80000001, 0x4, 0x2, 0x3c30, 0x8, 0x3, 0x909, 0x1, 0x401, 0x81, 0x3ff, 0x6, 0xac3a, 0x6, 0x6606, 0xfff, 0x80000000, 0x6, 0x7b, 0x101, 0x7c, 0xfffffffa, 0xffff, 0x5, 0x8000, 0x7, 0x9, 0xe, 0x1, 0xf298, 0x7, 0x2, 0x8f3, 0x3c00, 0xb54a, 0x6, 0x9, 0x8, 0x9, 0x30, 0x2, 0x8, 0x0, 0x8, 0x4, 0x1ae, 0x40, 0x9, 0x1, 0x6300, 0x3], [0xb, 0x8, 0x3ff, 0x40, 0x70a, 0x8, 0x7fffffff, 0x5, 0x51, 0x86, 0x8, 0x9, 0x10000, 0x80, 0x3, 0x8, 0x0, 0x9de, 0x7, 0x2, 0x6, 0x9e, 0x4d83, 0x1ff, 0x8000, 0x6, 0x3, 0x4, 0x9, 0x0, 0x3ff, 0x3d, 0x2, 0x1, 0x401, 0x2, 0x81, 0x0, 0x2458, 0x2, 0xb, 0x7842, 0x1ff, 0x6, 0x1, 0xa, 0x904e, 0x10, 0x8, 0xcbb0, 0x2a0, 0x40, 0xfffffffa, 0x9, 0x8, 0xffff, 0x6, 0xefd, 0x8, 0x0, 0xb9, 0x0, 0xb], [0x4c47, 0x80b7, 0x40, 0x10000, 0x9, 0x3, 0x8000000, 0x7, 0x3, 0x3ff, 0x9, 0xf7, 0x2, 0xb, 0x6, 0x0, 0x7, 0x4, 0x7fffffff, 0x6, 0x3, 0x9, 0x4, 0x7, 0x3, 0x4, 0x3, 0x0, 0x80000000, 0xfffffe00, 0x9, 0x2, 0x5, 0x6, 0x6, 0x0, 0x4, 0xc, 0x5, 0x7, 0x70cabf62, 0xfffffff8, 0x6, 0x4, 0x40000, 0x8, 0x10001, 0x0, 0x8, 0x0, 0x100, 0x9, 0xa, 0x9, 0xae, 0xb, 0x0, 0x6, 0x3ff, 0xe, 0x9, 0xfffffffc, 0x5af6, 0x1]}, 0x45c) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@perf_event={0x4}}, 0x18) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000c40)) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000002c0)={0x1, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) 882.586417ms ago: executing program 5 (id=2886): openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000240), 0x108001, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r1, 0x80304d65, &(0x7f0000000280)) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x8000000) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000002b40), &(0x7f0000002b80)=0x30) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r3, 0x0, 0x0) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x4c, 0x4, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x9}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000006f80)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 813.648711ms ago: executing program 4 (id=2887): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0xe9) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0xe9) fchdir(0xffffffffffffffff) syz_usb_control_io(r3, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x5, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="df16540000004e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, &(0x7f00000001c0)={0x14, &(0x7f0000000640)=ANY=[@ANYBLOB="000d300000003004e9ee4dc4237cbbac6684fd1a439a7d53824b2238f20fa7cf4180a3a163fade3db1fce09d67545f344b64f56051dcaac950d745ddb00edfae"], &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x0, 0xc, 0xd5, "a4598cbc81fb932ddb4577744c00cca4b3e611b4fee1eab4a19ab9e6a482da14d260a6d9475fe83ede0c64a658b7daa141ce84432c371423962e0aaaaffd93e4c4de655212e684cbda103eea285af10e9d8b6fc4b12bcc13510d2e7b3e08781854a4133bbe4cbc1fab49e6503a8f03a93451b3f9bed3ae155f74afadb606426105ef15780dd41a0873542af6887d185ac22481880e277537695dea6e9a20104d19eacf8129624fb6e31323c7dd3adb61a707daea8af69be2047d59d3700a5d4f532a0f5255243bffabee251c7772d1e769ba5ae15e"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000440)={0x20, 0x80, 0x1c, {0x1, 0x27, 0x2, 0x209, 0x200, 0x6, 0x4, 0xfffffff8, 0x2000, 0xfff8, 0x7, 0xff81}}, &(0x7f0000000480)={0x20, 0x85, 0x4}, &(0x7f00000004c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000500)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000000540)={0x20, 0x89, 0x2, 0x38}}) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) 320.393565ms ago: executing program 5 (id=2888): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={r1, 0x7ff, 0x6, 0x2, 0x6}, 0x14) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x80, &(0x7f00000000c0)=0x4, 0x0, 0x4) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x480) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x7, 0x40000) ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f0000000140)=0x50007) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f00000001c0)=@ctrl_frame=@rts={{}, {0x8}, @device_b, @broadcast}, 0x10) 83.176244ms ago: executing program 1 (id=2889): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@caif=@rfm={0x25, 0x5, "cdfaaf7254f4ef6249f068fcdd7e1cbd"}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000300)="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", 0x163}, {&(0x7f0000000480)="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", 0xdb0}], 0x2}, 0x800) 0s ago: executing program 1 (id=2890): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x89}, 0x0) syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d0502002723010203010902"], 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0), 0x4) r0 = socket(0x840000000002, 0x3, 0xff) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40440c2}, 0x4014) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="38ddffff05d74b0400007a000000000000000000", @ANYRES32=0x0, @ANYBLOB="00060000000000001800128008000100707070000c00028008000100", @ANYRES32=r0, @ANYBLOB], 0x38}}, 0x2404c005) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x30, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dc58c", 0x28, 0x6, 0x0, @local, @local, {[], {{0xfffa, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0xb, 0x0, 0x0, {[@md5sig={0x13, 0x12, "3d6a6d02b2381c6ba36074fb64088827"}]}}}}}}}}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000f, 0x4002012, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8008b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f0000000500)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x4, 0xc3, &(0x7f0000000400)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r3 = syz_open_pts(0xffffffffffffffff, 0x191200) dup3(r3, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): b 3-1: can't read configurations, error -71 [ 749.392616][ T6326] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 749.857634][T14702] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2371'. [ 751.242789][ T6000] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 752.096305][ T30] audit: type=1326 audit(1752032118.118:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14725 comm="syz.0.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ddc98e929 code=0x7ffc0000 [ 752.119705][ C0] vkms_vblank_simulate: vblank timer overrun [ 752.144248][ T30] audit: type=1326 audit(1752032118.118:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14725 comm="syz.0.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f7ddc98e929 code=0x7ffc0000 [ 752.189670][ T30] audit: type=1326 audit(1752032118.118:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14725 comm="syz.0.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ddc98e929 code=0x7ffc0000 [ 752.540948][ T30] audit: type=1326 audit(1752032118.118:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14725 comm="syz.0.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ddc98e929 code=0x7ffc0000 [ 752.607747][ T30] audit: type=1326 audit(1752032118.118:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14725 comm="syz.0.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7ddc98d290 code=0x7ffc0000 [ 752.917434][ T30] audit: type=1326 audit(1752032118.118:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14725 comm="syz.0.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ddc98e929 code=0x7ffc0000 [ 752.965587][ T30] audit: type=1326 audit(1752032118.118:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14725 comm="syz.0.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ddc98e929 code=0x7ffc0000 [ 753.128563][ T30] audit: type=1326 audit(1752032118.128:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14725 comm="syz.0.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7ddc98d290 code=0x7ffc0000 [ 753.189632][T14743] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (aio_iiro_16) [ 753.255431][T14743] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (aio_iiro_16) [ 753.317597][T14741] ALSA: mixer_oss: invalid OSS volume '' [ 753.581076][ T30] audit: type=1326 audit(1752032118.128:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14725 comm="syz.0.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ddc98e929 code=0x7ffc0000 [ 753.604810][ T30] audit: type=1326 audit(1752032118.128:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14725 comm="syz.0.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ddc98e929 code=0x7ffc0000 [ 753.608480][T14741] ALSA: mixer_oss: invalid OSS volume '=xF}TwxiT' [ 753.660600][T14741] ALSA: mixer_oss: invalid OSS volume '-l#Y|ح6U(qe?oO+Pg' [ 754.379891][T14741] ALSA: mixer_oss: invalid OSS volume 'NgUHٕ`҉43cs%' [ 754.388036][T14741] ALSA: mixer_oss: invalid OSS volume '@6DYuera' [ 754.396491][T14741] ALSA: mixer_oss: invalid OSS volume 'uB)ҔG:Vܢ\' [ 754.403512][T14741] ALSA: mixer_oss: invalid OSS volume '&qS4+UY=vB:1M>A' [ 754.411882][T14741] ALSA: mixer_oss: invalid OSS volume 'W)eY锽*G{E*F9:n߇' [ 754.956654][T14768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2391'. [ 754.970814][T14768] FAULT_INJECTION: forcing a failure. [ 754.970814][T14768] name failslab, interval 1, probability 0, space 0, times 0 [ 754.983964][T14768] CPU: 0 UID: 0 PID: 14768 Comm: syz.1.2391 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 754.983990][T14768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 754.984001][T14768] Call Trace: [ 754.984008][T14768] [ 754.984015][T14768] dump_stack_lvl+0x16c/0x1f0 [ 754.984045][T14768] should_fail_ex+0x512/0x640 [ 754.984068][T14768] ? fs_reclaim_acquire+0xae/0x150 [ 754.984089][T14768] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 754.984114][T14768] should_failslab+0xc2/0x120 [ 754.984141][T14768] __kmalloc_noprof+0xd2/0x510 [ 754.984169][T14768] tomoyo_realpath_from_path+0xc2/0x6e0 [ 754.984196][T14768] ? tomoyo_profile+0x47/0x60 [ 754.984226][T14768] tomoyo_path_number_perm+0x245/0x580 [ 754.984247][T14768] ? tomoyo_path_number_perm+0x237/0x580 [ 754.984271][T14768] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 754.984294][T14768] ? find_held_lock+0x2b/0x80 [ 754.984342][T14768] ? __pfx___schedule+0x10/0x10 [ 754.984363][T14768] ? hook_file_ioctl_common+0x145/0x410 [ 754.984394][T14768] security_file_ioctl+0x9b/0x240 [ 754.984421][T14768] __x64_sys_ioctl+0xb7/0x210 [ 754.984443][T14768] do_syscall_64+0xcd/0x4c0 [ 754.984471][T14768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.984489][T14768] RIP: 0033:0x7fe60098e929 [ 754.984505][T14768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 754.984522][T14768] RSP: 002b:00007fe60180b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 754.984540][T14768] RAX: ffffffffffffffda RBX: 00007fe600bb6080 RCX: 00007fe60098e929 [ 754.984553][T14768] RDX: 0000200000000340 RSI: 00000000c0306201 RDI: 000000000000000d [ 754.984564][T14768] RBP: 00007fe60180b090 R08: 0000000000000000 R09: 0000000000000000 [ 754.984576][T14768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 754.984586][T14768] R13: 0000000000000000 R14: 00007fe600bb6080 R15: 00007ffe98e692e8 [ 754.984611][T14768] [ 754.984623][T14768] ERROR: Out of memory at tomoyo_realpath_from_path. [ 755.193016][T14768] binder: 14764:14768 unknown command 645560691 [ 755.199361][T14768] binder: 14764:14768 ioctl c0306201 200000000340 returned -22 [ 755.226006][ T1148] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 755.975355][T14773] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2392'. [ 755.998797][T14773] CIFS mount error: No usable UNC path provided in device string! [ 755.998797][T14773] [ 756.009000][T14773] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 756.586579][T14778] evm: overlay not supported [ 757.141994][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 757.871137][T14794] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2398'. [ 758.570147][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 758.570160][ T30] audit: type=1400 audit(1752032124.598:898): avc: denied { getopt } for pid=14806 comm="syz.4.2404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 758.658399][T14810] netlink: 'syz.5.2405': attribute type 1 has an invalid length. [ 758.666928][T14810] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2405'. [ 758.958371][T14818] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2408'. [ 759.400779][ T973] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 759.622076][ T973] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 759.830127][ T973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 759.897308][ T973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 759.942235][ T973] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 759.973318][ T973] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 759.982617][ T973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.007097][ T973] usb 5-1: config 0 descriptor?? [ 760.018678][T14814] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 760.233643][T14837] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2414'. [ 760.565250][T14839] netlink: 'syz.2.2416': attribute type 1 has an invalid length. [ 760.620613][ T2149] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 760.714781][ T973] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 760.722455][ T973] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 760.729826][ T973] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 760.737219][ T973] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 760.744668][ T973] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 760.758344][ T973] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 761.135780][ T973] usb 5-1: USB disconnect, device number 58 [ 761.304966][ T2149] usb 6-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 761.314087][ T2149] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.322196][ T2149] usb 6-1: Product: syz [ 761.326358][ T2149] usb 6-1: Manufacturer: syz [ 761.338485][ T2149] usb 6-1: SerialNumber: syz [ 761.352714][ T2149] usb 6-1: config 0 descriptor?? [ 761.492929][ T6326] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 761.825805][T14842] fido_id[14842]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 762.409469][ T66] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 763.030471][T14863] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2972 sclass=netlink_route_socket pid=14863 comm=syz.4.2423 [ 763.101950][ T30] audit: type=1400 audit(1752032129.138:899): avc: denied { unmount } for pid=5834 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 763.141286][ T30] audit: type=1800 audit(1752032129.178:900): pid=14870 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2425" name="SYSV00000000" dev="tmpfs" ino=16 res=0 errno=0 [ 763.404795][T14870] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2425'. [ 763.994045][ T2149] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 764.010399][ T2149] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 764.024269][ T2149] asix 6-1:0.0: probe with driver asix failed with error -71 [ 764.046970][ T2149] usb 6-1: USB disconnect, device number 33 [ 764.983230][T14885] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2430'. [ 765.346720][T14895] lo speed is unknown, defaulting to 1000 [ 766.336286][T14901] trusted_key: encrypted_key: insufficient parameters specified [ 766.410900][T14903] FAULT_INJECTION: forcing a failure. [ 766.410900][T14903] name failslab, interval 1, probability 0, space 0, times 0 [ 766.423797][T14903] CPU: 0 UID: 0 PID: 14903 Comm: syz.4.2433 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 766.423828][T14903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 766.423840][T14903] Call Trace: [ 766.423846][T14903] [ 766.423853][T14903] dump_stack_lvl+0x16c/0x1f0 [ 766.423883][T14903] should_fail_ex+0x512/0x640 [ 766.423910][T14903] should_failslab+0xc2/0x120 [ 766.423941][T14903] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 766.423967][T14903] ? netlink_deliver_tap+0x6a0/0xd30 [ 766.423992][T14903] ? skb_clone+0x190/0x3f0 [ 766.424019][T14903] skb_clone+0x190/0x3f0 [ 766.424043][T14903] netlink_deliver_tap+0xabd/0xd30 [ 766.424075][T14903] netlink_unicast+0x5df/0x7f0 [ 766.424102][T14903] ? __pfx_netlink_unicast+0x10/0x10 [ 766.424132][T14903] netlink_sendmsg+0x8d1/0xdd0 [ 766.424153][T14903] ? __pfx_netlink_sendmsg+0x10/0x10 [ 766.424174][T14903] ? __pfx_netlink_sendmsg+0x10/0x10 [ 766.424195][T14903] ____sys_sendmsg+0xa95/0xc70 [ 766.424214][T14903] ? copy_msghdr_from_user+0x10a/0x160 [ 766.424236][T14903] ? __pfx_____sys_sendmsg+0x10/0x10 [ 766.424251][T14903] ? trace_sched_exit_tp+0xde/0x130 [ 766.424289][T14903] ___sys_sendmsg+0x134/0x1d0 [ 766.424315][T14903] ? __pfx____sys_sendmsg+0x10/0x10 [ 766.424353][T14903] ? find_held_lock+0x2b/0x80 [ 766.424397][T14903] __sys_sendmmsg+0x200/0x420 [ 766.424425][T14903] ? __pfx___sys_sendmmsg+0x10/0x10 [ 766.424471][T14903] ? fput+0x70/0xf0 [ 766.424487][T14903] ? ksys_write+0x1ac/0x250 [ 766.424508][T14903] ? __pfx_ksys_write+0x10/0x10 [ 766.424535][T14903] __x64_sys_sendmmsg+0x9c/0x100 [ 766.424557][T14903] ? lockdep_hardirqs_on+0x7c/0x110 [ 766.424580][T14903] do_syscall_64+0xcd/0x4c0 [ 766.424607][T14903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.424624][T14903] RIP: 0033:0x7f78ecd8e929 [ 766.424639][T14903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 766.424655][T14903] RSP: 002b:00007f78edba9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 766.424671][T14903] RAX: ffffffffffffffda RBX: 00007f78ecfb6160 RCX: 00007f78ecd8e929 [ 766.424683][T14903] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000006 [ 766.424694][T14903] RBP: 00007f78edba9090 R08: 0000000000000000 R09: 0000000000000000 [ 766.424704][T14903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 766.424714][T14903] R13: 0000000000000000 R14: 00007f78ecfb6160 R15: 00007ffe627ad408 [ 766.424739][T14903] [ 766.767599][ T6326] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 767.034804][T10692] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 767.061222][T14893] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2431'. [ 767.064118][T10692] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 767.079309][T10692] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 767.083085][T14893] unsupported nlmsg_type 40 [ 767.110674][T10692] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 767.120394][T10692] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 767.158897][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 767.173785][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 767.183829][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 767.193193][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 767.200945][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 767.495375][T14915] xt_hashlimit: max too large, truncated to 1048576 [ 767.503478][T14915] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 767.966681][ T8947] syz_tun (unregistering): left allmulticast mode [ 767.983893][T14905] lo speed is unknown, defaulting to 1000 [ 768.323221][T14905] chnl_net:caif_netlink_parms(): no params data found [ 768.401050][T14926] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (aio_iiro_16) [ 768.750460][T14905] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.758552][T14905] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.766039][T14905] bridge_slave_0: entered allmulticast mode [ 768.784504][T14905] bridge_slave_0: entered promiscuous mode [ 768.801661][T14905] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.813273][T14905] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.822958][T14905] bridge_slave_1: entered allmulticast mode [ 768.830204][T14905] bridge_slave_1: entered promiscuous mode [ 769.169764][T14938] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 769.480117][ T5841] Bluetooth: hci5: command tx timeout [ 769.856448][T14949] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2441'. [ 770.305855][T14953] FAULT_INJECTION: forcing a failure. [ 770.305855][T14953] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 770.347959][T14953] CPU: 1 UID: 0 PID: 14953 Comm: syz.5.2443 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 770.347987][T14953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 770.347998][T14953] Call Trace: [ 770.348004][T14953] [ 770.348012][T14953] dump_stack_lvl+0x16c/0x1f0 [ 770.348041][T14953] should_fail_ex+0x512/0x640 [ 770.348068][T14953] _copy_to_user+0x32/0xd0 [ 770.348099][T14953] simple_read_from_buffer+0xcb/0x170 [ 770.348125][T14953] proc_fail_nth_read+0x197/0x270 [ 770.348149][T14953] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 770.348174][T14953] ? rw_verify_area+0xcf/0x680 [ 770.348194][T14953] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 770.348217][T14953] vfs_read+0x1e1/0xc60 [ 770.348243][T14953] ? __pfx___mutex_lock+0x10/0x10 [ 770.348268][T14953] ? __pfx_vfs_read+0x10/0x10 [ 770.348297][T14953] ? __fget_files+0x20e/0x3c0 [ 770.348327][T14953] ksys_read+0x12a/0x250 [ 770.348348][T14953] ? __pfx_ksys_read+0x10/0x10 [ 770.348377][T14953] do_syscall_64+0xcd/0x4c0 [ 770.348404][T14953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.348421][T14953] RIP: 0033:0x7fcb3a38d33c [ 770.348435][T14953] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 770.348452][T14953] RSP: 002b:00007fcb3b1c5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 770.348469][T14953] RAX: ffffffffffffffda RBX: 00007fcb3a5b5fa0 RCX: 00007fcb3a38d33c [ 770.348481][T14953] RDX: 000000000000000f RSI: 00007fcb3b1c50a0 RDI: 0000000000000005 [ 770.348492][T14953] RBP: 00007fcb3b1c5090 R08: 0000000000000000 R09: 0000000000000000 [ 770.348502][T14953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 770.348513][T14953] R13: 0000000000000000 R14: 00007fcb3a5b5fa0 R15: 00007ffe43761fd8 [ 770.348536][T14953] [ 770.967493][T14966] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2442'. [ 771.050665][ T5954] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 771.571702][ T5841] Bluetooth: hci5: command tx timeout [ 771.742352][ T1148] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 771.770838][ T5954] usb 3-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice= 3.90 [ 771.812087][ T5954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.847990][ T5954] usb 3-1: config 0 descriptor?? [ 771.866019][ T5954] bfusb 3-1:0.0: probe with driver bfusb failed with error -5 [ 771.922582][ T30] audit: type=1400 audit(1752032137.958:901): avc: denied { getopt } for pid=14971 comm="syz.1.2446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 771.943947][T14972] tmpfs: Invalid uid '0x00000000ffffffff' [ 771.956126][T14972] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 772.366482][ T6326] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 772.549615][ T1336] bond0 (unregistering): Released all slaves [ 772.860448][T14974] netlink: 'syz.5.2448': attribute type 2 has an invalid length. [ 772.896645][T14905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 772.916809][ T1336] : left promiscuous mode [ 773.007387][T14996] trusted_key: encrypted_key: insufficient parameters specified [ 773.258330][T14905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 773.664184][ T5841] Bluetooth: hci5: command tx timeout [ 773.831623][ T1336] IPVS: stopping master sync thread 6601 ... [ 773.910114][ T5954] usb 3-1: USB disconnect, device number 71 [ 774.103594][T14905] team0: Port device team_slave_0 added [ 774.127540][T15009] /dev/nullb0: Can't open blockdev [ 774.280176][T14905] team0: Port device team_slave_1 added [ 774.753881][T15011] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2454'. [ 774.960727][T14998] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 775.007581][T14998] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 775.302562][T14998] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 775.393476][T14905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 775.410599][T14905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 775.571898][ T5954] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 775.613318][T14905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 775.715833][T15023] lo speed is unknown, defaulting to 1000 [ 775.811088][T14905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 775.818056][T14905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 775.890769][T14905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 775.949051][ T5954] usb 3-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 775.971861][ T973] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 776.067344][ T5841] Bluetooth: hci5: command 0x0c1a tx timeout [ 776.249693][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.259720][ T973] usb 6-1: Using ep0 maxpacket: 16 [ 776.319118][ T973] usb 6-1: unable to get BOS descriptor or descriptor too short [ 776.335824][ T5954] usb 3-1: Product: syz [ 776.339983][ T5954] usb 3-1: Manufacturer: syz [ 776.357123][T14905] hsr_slave_0: entered promiscuous mode [ 776.358168][ T973] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 102, changing to 7 [ 776.441778][T14905] hsr_slave_1: entered promiscuous mode [ 776.444039][ T5954] usb 3-1: SerialNumber: syz [ 776.471001][ T973] usb 6-1: config 1 interface 1 has no altsetting 0 [ 776.471164][T14905] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 776.486679][ T973] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 776.510796][ T5954] usb 3-1: config 0 descriptor?? [ 776.546180][ T973] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.550360][T14905] Cannot create hsr debugfs directory [ 776.557973][ T973] usb 6-1: Product: syz [ 776.574868][ T5954] gm12u320 3-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22 [ 776.590274][ T973] usb 6-1: Manufacturer: syz [ 776.600439][ T5954] gm12u320 3-1:0.0: probe with driver gm12u320 failed with error -5 [ 776.616901][ T973] usb 6-1: SerialNumber: syz [ 776.626295][ T5954] usb-storage 3-1:0.0: USB Mass Storage device detected [ 776.649160][ T5954] usb-storage 3-1:0.0: device ignored [ 776.720567][ T2149] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 776.838771][T12860] usb 3-1: USB disconnect, device number 72 [ 776.880815][ T2149] usb 2-1: Using ep0 maxpacket: 8 [ 776.955908][ T2149] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 776.959868][ T973] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 776.965956][ T2149] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 777.066656][ T2149] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 777.121343][ T2149] usb 2-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 777.161752][ T2149] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 777.189653][ T973] usb 6-1: USB disconnect, device number 34 [ 777.205831][ T2149] usb 2-1: config 168 interface 0 has no altsetting 0 [ 777.233217][ T2149] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 777.241548][ T2149] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 777.255410][ T2149] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 777.275961][ T2149] usb 2-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 777.282380][ T7103] udevd[7103]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 777.302835][ T2149] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 777.302870][ T2149] usb 2-1: config 168 interface 0 has no altsetting 0 [ 777.327045][ T2149] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 777.336970][ T2149] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 777.354095][ T2149] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 777.365873][ T2149] usb 2-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 777.377394][ T2149] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 777.391370][ T2149] usb 2-1: config 168 interface 0 has no altsetting 0 [ 777.418590][ T2149] usb 2-1: string descriptor 0 read error: -22 [ 777.425214][ T2149] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 777.450208][ T2149] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.679042][ T6000] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 777.771114][ T2149] adutux 2-1:168.0: interrupt endpoints not found [ 777.914816][T15064] /dev/nullb0: Can't open blockdev [ 778.090327][ T1336] hsr_slave_0: left promiscuous mode [ 778.349027][T15066] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2466'. [ 778.365709][ T5841] Bluetooth: hci5: command 0x0c1a tx timeout [ 778.372148][ T6000] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 778.398381][ T973] usb 2-1: USB disconnect, device number 53 [ 778.414859][ T1336] hsr_slave_1: left promiscuous mode [ 779.782936][ T30] audit: type=1400 audit(1752032145.808:902): avc: denied { read } for pid=15113 comm="syz.1.2475" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 779.807295][ T30] audit: type=1400 audit(1752032145.808:903): avc: denied { open } for pid=15113 comm="syz.1.2475" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 780.440783][ T5841] Bluetooth: hci5: command 0x0c1a tx timeout [ 780.541391][T15084] tipc: Enabling of bearer rejected, failed to enable media [ 780.631712][T15095] lo speed is unknown, defaulting to 1000 [ 786.466456][ T6000] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 786.466881][ T1140] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 786.785336][T15128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2478'. [ 787.001846][ T973] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 787.198151][ T973] usb 6-1: config 9 has an invalid interface number: 69 but max is 0 [ 787.219552][ T973] usb 6-1: config 9 has an invalid descriptor of length 36, skipping remainder of the config [ 787.231859][T14905] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 787.239897][ T973] usb 6-1: config 9 has no interface number 0 [ 787.265912][ T973] usb 6-1: config 9 interface 69 has no altsetting 0 [ 787.268783][T14905] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 787.288143][ T973] usb 6-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=37.72 [ 787.297419][ T5954] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 787.315860][T14905] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 787.325630][ T973] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.334298][ T973] usb 6-1: Product: syz [ 787.340162][ T973] usb 6-1: Manufacturer: syz [ 787.355526][T14905] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 787.357864][ T973] usb 6-1: SerialNumber: syz [ 787.477962][ T5954] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 787.596307][ T5954] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 787.598124][T15163] /dev/nullb0: Can't open blockdev [ 787.760738][ T5954] usb 5-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 787.772603][ T973] usb 6-1: selecting invalid altsetting 0 [ 787.803137][ T5954] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.888785][T14905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 787.900241][ T5954] usb 5-1: config 0 descriptor?? [ 788.370726][ T973] usb 6-1: USB disconnect, device number 35 [ 788.405482][ T5954] usbhid 5-1:0.0: can't add hid device: -22 [ 788.446332][T14905] 8021q: adding VLAN 0 to HW filter on device team0 [ 788.502449][ T5954] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 788.535614][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 788.542699][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 788.612851][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.620018][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 788.652906][T15173] random: crng reseeded on system resumption [ 788.695703][ T30] audit: type=1400 audit(1752032154.688:904): avc: denied { append } for pid=15172 comm="syz.2.2488" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 788.774229][ T30] audit: type=1400 audit(1752032154.718:905): avc: denied { connect } for pid=15124 comm="syz.4.2478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 789.191759][T15188] trusted_key: encrypted_key: insufficient parameters specified [ 789.720983][ T973] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 790.144515][ T973] usb 6-1: config 1 has an invalid descriptor of length 124, skipping remainder of the config [ 790.168658][T14905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 790.175710][ T973] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 790.220610][ T973] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 790.268483][ T973] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 790.297015][ T973] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 790.333224][ T973] usb 6-1: SerialNumber: syz [ 790.335870][T14905] veth0_vlan: entered promiscuous mode [ 790.384454][ T973] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 790.387037][T14905] veth1_vlan: entered promiscuous mode [ 790.403919][ T973] cdc_acm 6-1:1.0: This needs exactly 3 endpoints [ 790.422309][ T973] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -22 [ 790.499577][T14905] veth0_macvtap: entered promiscuous mode [ 790.514742][ T973] usb 5-1: USB disconnect, device number 59 [ 790.543862][T14905] veth1_macvtap: entered promiscuous mode [ 790.580592][ T5949] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 790.593335][T14905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 790.625724][T14905] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 790.675258][T14905] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.702065][T14905] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.720252][T14905] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.760973][ T5949] usb 2-1: Using ep0 maxpacket: 8 [ 790.767042][T14905] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.779652][ T5949] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 790.800608][ T5949] usb 2-1: config 179 has no interface number 0 [ 790.811280][ T5949] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 790.824947][ T973] usb 6-1: USB disconnect, device number 36 [ 790.860073][ T5949] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 790.899409][ T5949] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 790.923757][ T5949] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 790.949545][ T5949] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 790.995748][ T5949] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 791.016630][ T5949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.051147][T15205] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 791.076844][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 791.115477][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 791.206069][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 791.225096][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 791.315666][ T5949] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input87 [ 791.424342][T15233] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2429'. [ 791.460592][ T2149] usb 5-1: new low-speed USB device number 60 using dummy_hcd [ 791.504381][T15236] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2498'. [ 791.610596][ T2149] usb 5-1: device descriptor read/64, error -71 [ 791.656543][ T5949] usb 2-1: USB disconnect, device number 54 [ 791.656582][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 791.656606][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 792.021432][ T2149] usb 5-1: new low-speed USB device number 61 using dummy_hcd [ 792.190637][ T2149] usb 5-1: device descriptor read/64, error -71 [ 792.250847][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 792.252012][ T1140] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 792.599564][T15259] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 792.608321][T15259] batadv_slave_0: entered promiscuous mode [ 792.763333][ T5841] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 792.818004][ T2149] usb usb5-port1: attempt power cycle [ 793.260679][ T2149] usb 5-1: new low-speed USB device number 62 using dummy_hcd [ 793.390576][ T2149] usb 5-1: device descriptor read/8, error -71 [ 794.220638][ T2149] usb 5-1: new low-speed USB device number 63 using dummy_hcd [ 794.456871][ T30] audit: type=1400 audit(1752032160.488:906): avc: denied { read } for pid=15268 comm="syz.5.2504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 794.552664][ T2149] usb 5-1: device descriptor read/8, error -71 [ 794.782463][ T2149] usb usb5-port1: unable to enumerate USB device [ 795.507114][T15298] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2511'. [ 795.583332][T15291] netlink: 'syz.4.2510': attribute type 12 has an invalid length. [ 795.591223][T15291] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.2510'. [ 796.698818][ T30] audit: type=1400 audit(1752032162.688:907): avc: denied { read } for pid=15314 comm="syz.2.2514" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 797.900552][ T5841] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 797.909273][ T5841] Bluetooth: hci5: Injecting HCI hardware error event [ 797.919356][ T5841] Bluetooth: hci5: hardware error 0x00 [ 797.961333][ T6326] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 797.964871][ T1336] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 798.043645][ T30] audit: type=1400 audit(1752032164.078:908): avc: denied { mounton } for pid=15327 comm="syz.2.2517" path="/468/file0" dev="tmpfs" ino=2472 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 798.896319][T15352] FAULT_INJECTION: forcing a failure. [ 798.896319][T15352] name failslab, interval 1, probability 0, space 0, times 0 [ 798.910920][T12860] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 798.920211][T15352] CPU: 0 UID: 0 PID: 15352 Comm: syz.0.2522 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 798.920236][T15352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 798.920247][T15352] Call Trace: [ 798.920253][T15352] [ 798.920259][T15352] dump_stack_lvl+0x16c/0x1f0 [ 798.920288][T15352] should_fail_ex+0x512/0x640 [ 798.920312][T15352] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 798.920340][T15352] should_failslab+0xc2/0x120 [ 798.920364][T15352] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 798.920386][T15352] ? __alloc_skb+0x2b2/0x380 [ 798.920411][T15352] __alloc_skb+0x2b2/0x380 [ 798.920432][T15352] ? __pfx___alloc_skb+0x10/0x10 [ 798.920456][T15352] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 798.920491][T15352] netlink_alloc_large_skb+0x69/0x130 [ 798.920510][T15352] netlink_sendmsg+0x6a1/0xdd0 [ 798.920530][T15352] ? __pfx_netlink_sendmsg+0x10/0x10 [ 798.920556][T15352] ____sys_sendmsg+0xa95/0xc70 [ 798.920574][T15352] ? copy_msghdr_from_user+0x10a/0x160 [ 798.920603][T15352] ? __pfx_____sys_sendmsg+0x10/0x10 [ 798.920632][T15352] ___sys_sendmsg+0x134/0x1d0 [ 798.920657][T15352] ? __pfx____sys_sendmsg+0x10/0x10 [ 798.920678][T15352] ? __lock_acquire+0x622/0x1c90 [ 798.920726][T15352] __sys_sendmsg+0x16d/0x220 [ 798.920750][T15352] ? __pfx___sys_sendmsg+0x10/0x10 [ 798.920789][T15352] do_syscall_64+0xcd/0x4c0 [ 798.920815][T15352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.920832][T15352] RIP: 0033:0x7f48a2f8e929 [ 798.920847][T15352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 798.920864][T15352] RSP: 002b:00007f48a3e1a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 798.920881][T15352] RAX: ffffffffffffffda RBX: 00007f48a31b5fa0 RCX: 00007f48a2f8e929 [ 798.920892][T15352] RDX: 0000000000000084 RSI: 0000200000000000 RDI: 0000000000000009 [ 798.920903][T15352] RBP: 00007f48a3e1a090 R08: 0000000000000000 R09: 0000000000000000 [ 798.920914][T15352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 798.920925][T15352] R13: 0000000000000000 R14: 00007f48a31b5fa0 R15: 00007ffca8e62228 [ 798.920949][T15352] [ 799.238581][T12860] usb 2-1: Using ep0 maxpacket: 8 [ 799.531584][T12860] usb 2-1: unable to get BOS descriptor or descriptor too short [ 799.577588][T12860] usb 2-1: config 8 has an invalid interface number: 174 but max is 0 [ 799.596068][T12860] usb 2-1: config 8 has no interface number 0 [ 799.693700][T12860] usb 2-1: config 8 interface 174 has no altsetting 0 [ 799.704288][T12860] usb 2-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=4d.47 [ 799.715908][T12860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.729736][T12860] usb 2-1: Product: syz [ 799.734791][T12860] usb 2-1: Manufacturer: syz [ 799.740525][T12860] usb 2-1: SerialNumber: syz [ 799.934406][T15365] lo speed is unknown, defaulting to 1000 [ 800.065855][ T5841] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 800.211467][ T5898] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 800.421732][T12860] s2255 2-1:8.174: Could not find bulk-in endpoint [ 800.437770][T12860] Sensoray 2255 driver load failed: 0xfffffff4 [ 800.451567][T12860] s2255 2-1:8.174: probe with driver s2255 failed with error -12 [ 800.471481][T12860] usb 2-1: USB disconnect, device number 55 [ 800.530990][ T5898] usb 3-1: Using ep0 maxpacket: 16 [ 800.539837][ T5898] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 222 [ 800.554557][ T5898] usb 3-1: can't read configurations, error -22 [ 800.700668][ T5898] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 801.801187][ T5898] usb 3-1: Using ep0 maxpacket: 16 [ 801.817730][ T5898] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 222 [ 801.886137][ T5898] usb 3-1: can't read configurations, error -22 [ 802.050056][ T5898] usb usb3-port1: attempt power cycle [ 802.511091][ T5898] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 802.576143][T15400] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2536'. [ 802.613410][ T5898] usb 3-1: Using ep0 maxpacket: 16 [ 802.676574][ T5898] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 222 [ 802.844271][ T5898] usb 3-1: can't read configurations, error -22 [ 802.915154][ T30] audit: type=1400 audit(1752032168.948:909): avc: denied { map } for pid=15398 comm="syz.1.2536" path="socket:[47934]" dev="sockfs" ino=47934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 803.332698][ T30] audit: type=1400 audit(1752032168.948:910): avc: denied { read } for pid=15398 comm="syz.1.2536" path="socket:[47934]" dev="sockfs" ino=47934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 803.726708][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 803.726985][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 804.384577][ T30] audit: type=1400 audit(1752032170.018:911): avc: denied { append } for pid=15414 comm="syz.4.2541" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 804.420702][ T2149] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 804.436347][ T30] audit: type=1400 audit(1752032170.028:912): avc: denied { listen } for pid=15414 comm="syz.4.2541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 804.456626][ T5949] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 804.583256][ T2149] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 804.599066][ T2149] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 804.609027][ T2149] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 804.619518][ T2149] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.644003][ T5949] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 804.652541][ T5949] usb 5-1: config 0 has no interface number 0 [ 804.656184][ T2149] usb 6-1: config 0 descriptor?? [ 804.661556][ T5949] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 804.680298][ T5949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.689775][ T5949] usb 5-1: Product: syz [ 804.697164][ T5949] usb 5-1: Manufacturer: syz [ 804.703753][ T5949] usb 5-1: SerialNumber: syz [ 804.717204][ T5949] usb 5-1: config 0 descriptor?? [ 804.722415][ T9] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 804.880619][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 804.888191][T15421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 804.898514][T15421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 804.901861][ T9] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 804.925120][ T9] usb 3-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 804.947378][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 804.955191][ T9] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00 [ 804.965451][T15421] 9pnet_fd: Insufficient options for proto=fd [ 804.970570][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.993154][ T9] usb 3-1: config 0 descriptor?? [ 805.067771][ T5954] usb 6-1: USB disconnect, device number 37 [ 805.347057][ T5949] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 805.357633][ T5949] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -32 [ 805.371183][ T5949] asix 5-1:0.251: probe with driver asix failed with error -32 [ 805.445788][ T9] corsair 0003:1B1C:1B34.0026: hidraw0: USB HID v0.05 Device [HID 1b1c:1b34] on usb-dummy_hcd.2-1/input0 [ 805.868014][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x6 [ 805.898729][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 805.938098][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 805.949732][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 805.957304][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 805.969446][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 805.996418][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 806.023340][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 806.040218][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 806.089476][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 806.121437][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 806.159341][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 806.500260][ T5949] usb 5-1: USB disconnect, device number 64 [ 806.527432][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 806.681129][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 806.832659][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 806.855604][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 806.884844][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 806.913788][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 806.922614][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 806.949144][T15462] pim6reg: entered allmulticast mode [ 807.029962][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 807.038491][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 807.047762][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 807.070506][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 807.077965][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 807.085540][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 807.092989][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 807.100405][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 807.110572][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 807.118260][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 807.125703][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 807.137910][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 807.145480][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 807.155151][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 807.162877][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 807.172289][T15464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2554'. [ 807.184713][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 807.202322][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 807.302646][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 807.310180][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 807.320550][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 807.328543][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 807.337060][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 807.360278][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 808.204218][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.211004][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.251282][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 808.259815][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 808.267308][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 808.294870][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 808.386957][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 808.489495][T15473] netlink: 'syz.1.2556': attribute type 12 has an invalid length. [ 808.497963][T15473] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.2556'. [ 808.759435][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 808.789603][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 808.798359][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 808.810276][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 808.822032][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 808.839585][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 808.857096][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 808.870139][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 808.889133][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 808.909235][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 808.919338][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 808.928619][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 808.956204][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 808.993900][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 809.001901][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 809.045027][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 809.084583][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 809.113120][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 809.122330][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 809.129940][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 809.139147][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 809.147728][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 809.156823][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 809.165138][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 809.201891][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 809.242936][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 809.288210][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 809.308929][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 809.360132][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 809.375045][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 809.402917][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 809.410417][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 809.524478][ T6326] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 809.541782][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 809.549224][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 809.587255][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 809.596522][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 809.604977][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 809.613775][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 810.206142][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 810.324496][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 810.379509][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 810.720601][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 811.005812][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 811.014934][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 811.028163][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 811.040566][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 811.077654][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 811.087524][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 811.372747][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 811.383286][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 811.410922][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 811.447018][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 811.507018][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 811.529026][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 811.550726][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 811.559711][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 811.578945][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 811.586705][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 811.597549][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 811.606061][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 811.613831][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 811.770797][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 811.788112][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 812.088385][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 812.118272][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 812.130923][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 812.138866][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 812.147999][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 812.157043][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 812.169129][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 812.282857][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 812.290651][ T5954] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 812.299392][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 812.307070][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 812.314841][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 812.323494][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 812.332714][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 812.340285][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 812.347972][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 812.355639][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 812.403920][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 812.432306][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 812.444959][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 812.456093][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 812.480765][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 812.488551][ T5954] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 812.499234][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 812.512599][ T5954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.521159][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 812.528532][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 812.542306][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 812.557522][ T5954] usb 1-1: config 0 descriptor?? [ 812.600666][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 812.608413][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 812.640604][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 812.659358][ T9] hid-generic 03A0:0902:0080.0027: unknown main item tag 0x0 [ 812.677116][ T9] hid-generic 03A0:0902:0080.0027: hidraw1: HID v0.06 Device [syz1] on syz1 [ 812.708786][T15532] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2573'. [ 812.718089][T15530] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 812.805607][ T9] usb 3-1: USB disconnect, device number 77 [ 813.101304][T15533] fido_id[15533]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 813.136405][ T5954] cp2112 0003:10C4:EA90.0028: unknown main item tag 0x0 [ 813.186751][ T5954] cp2112 0003:10C4:EA90.0028: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 813.335174][ T5954] cp2112 0003:10C4:EA90.0028: Part Number: 0x82 Device Version: 0xFE [ 813.428450][T15530] dvmrp0: entered allmulticast mode [ 813.500640][ T9] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 813.640744][ T973] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 813.653672][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 813.661529][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 813.678293][ T9] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 813.694767][ T9] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 813.707168][ T9] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 813.758031][ T9] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 813.772419][ T9] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 813.786900][ T9] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 813.804062][ T9] usb 3-1: config 168 interface 0 has no altsetting 0 [ 813.920560][ T973] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 814.100594][ T5954] cp2112 0003:10C4:EA90.0028: error setting SMBus config [ 814.108476][ T973] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 814.123272][ T6326] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 814.123723][ T973] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 814.159680][ T5954] cp2112 0003:10C4:EA90.0028: probe with driver cp2112 failed with error -71 [ 814.169035][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 814.180953][ T9] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 814.203377][ T5954] usb 1-1: USB disconnect, device number 14 [ 814.210560][ T973] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 814.219634][ T9] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 814.237838][ T973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.250404][ T9] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 814.269669][T15542] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 814.278770][ T9] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 814.306012][ T973] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 814.334332][ T9] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 814.479085][ T9] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 814.496091][ T9] usb 3-1: config 168 interface 0 has no altsetting 0 [ 814.513725][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 814.530583][ T9] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 815.544168][ T6326] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 815.603481][ T9] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 815.704080][T15554] xt_hashlimit: max too large, truncated to 1048576 [ 815.712408][T15554] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 815.777014][ T9] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 815.795287][ T9] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 815.809618][ T9] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 815.824942][ T30] audit: type=1400 audit(1752032181.838:913): avc: denied { create } for pid=15541 comm="syz.4.2576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 815.861031][ T9] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 815.885156][ T9] usb 3-1: config 168 interface 0 has no altsetting 0 [ 815.896301][ T9] usb 3-1: string descriptor 0 read error: -22 [ 815.902789][ T9] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 815.930550][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.034825][ T9] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 816.815162][ T9] usb 3-1: USB disconnect, device number 78 [ 817.049663][ T2149] usb 5-1: USB disconnect, device number 65 [ 817.176901][T15578] /dev/nullb0: Can't open blockdev [ 818.358831][T15604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2597'. [ 819.620572][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 820.372093][ T1148] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 820.490741][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 821.371130][ T1148] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 821.399351][ T9] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 821.421310][T15613] tmpfs: Bad value for 'uid' [ 821.435125][ T9] usb 1-1: string descriptor 0 read error: -71 [ 821.441172][T15613] tmpfs: Bad value for 'uid' [ 821.446098][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 821.742117][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.755021][ T9] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 821.764639][ T9] usb 1-1: no configuration chosen from 1 choice [ 821.780726][ T9] usb 1-1: USB disconnect, device number 15 [ 822.142494][T15628] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2603'. [ 822.606540][T15635] trusted_key: syz.4.2601 sent an empty control message without MSG_MORE. [ 823.110750][ T973] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 823.470582][ T973] usb 3-1: Using ep0 maxpacket: 8 [ 823.493684][ T973] usb 3-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 823.503117][ T973] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 823.530927][ T973] usb 3-1: Product: syz [ 823.544001][ T973] usb 3-1: Manufacturer: syz [ 823.554144][ T973] usb 3-1: SerialNumber: syz [ 823.583747][ T973] usb 3-1: config 0 descriptor?? [ 824.042898][T15654] Dead loop on virtual device ip6_vti0, fix it urgently! [ 824.670025][T15668] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2615'. [ 826.278439][ T5875] usb 3-1: USB disconnect, device number 79 [ 826.820331][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 826.832515][ T6000] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 829.178600][T15706] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2626'. [ 829.199395][ T30] audit: type=1400 audit(1752032195.228:914): avc: denied { listen } for pid=15704 comm="syz.1.2625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 829.199686][T15708] ./file0: Can't lookup blockdev [ 829.686550][T15718] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2629'. [ 829.823019][T15716] sp0: Synchronizing with TNC [ 829.829479][T15720] sp0: Found TNC [ 831.606364][ T30] audit: type=1400 audit(1752032197.608:915): avc: denied { read } for pid=15731 comm="syz.4.2632" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 831.880728][ T30] audit: type=1400 audit(1752032197.608:916): avc: denied { open } for pid=15731 comm="syz.4.2632" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 831.961351][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 832.149615][T15748] xt_TCPMSS: Only works on TCP SYN packets [ 832.537180][T15748] /dev/nullb0: Can't open blockdev [ 832.554781][ T6326] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 832.626114][T15759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2640'. [ 832.887068][T15766] netlink: 'syz.2.2642': attribute type 12 has an invalid length. [ 832.895114][T15766] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.2642'. [ 833.180891][ T9] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 833.383245][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 833.524625][ T9] usb 2-1: config 0 has no interface number 0 [ 833.585768][ T9] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 833.606081][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.645092][ T9] usb 2-1: config 0 descriptor?? [ 833.658964][ T9] usb 2-1: selecting invalid altsetting 1 [ 833.666729][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 833.674718][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 833.710570][ T973] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 833.799109][ T9] DVB: Unable to find symbol cx22700_attach() [ 833.880563][ T973] usb 3-1: device descriptor read/64, error -71 [ 834.170644][ T9] DVB: Unable to find symbol tda10046_attach() [ 834.187540][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 834.239339][ T9] usb 2-1: USB disconnect, device number 56 [ 834.250628][ T973] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 834.390753][ T973] usb 3-1: device descriptor read/64, error -71 [ 834.559405][ T973] usb usb3-port1: attempt power cycle [ 835.186687][ T973] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 835.238388][ T973] usb 3-1: device descriptor read/8, error -71 [ 836.070603][ T973] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 836.121554][ T973] usb 3-1: device descriptor read/8, error -71 [ 836.240969][ T973] usb usb3-port1: unable to enumerate USB device [ 837.236661][ T30] audit: type=1400 audit(1752032202.698:917): avc: denied { node_bind } for pid=15826 comm="syz.0.2660" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 837.950871][ T2149] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 838.173010][ T1161] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 838.211783][ T2149] usb 1-1: Using ep0 maxpacket: 16 [ 838.460806][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 838.482963][ T2149] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 838.514248][ T2149] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.612704][T15852] netlink: 'syz.5.2667': attribute type 12 has an invalid length. [ 838.620839][T15852] netlink: 9472 bytes leftover after parsing attributes in process `syz.5.2667'. [ 839.177252][ T2149] usb 1-1: config 0 descriptor?? [ 839.248021][ T2149] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 839.472840][T15865] netlink: 'syz.1.2672': attribute type 8 has an invalid length. [ 839.518087][ T30] audit: type=1400 audit(1752032205.548:918): avc: denied { write } for pid=15864 comm="syz.1.2672" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 839.591135][ T30] audit: type=1400 audit(1752032205.578:919): avc: denied { open } for pid=15864 comm="syz.1.2672" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 839.646044][ T30] audit: type=1400 audit(1752032205.598:920): avc: denied { read append } for pid=15864 comm="syz.1.2672" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 839.717349][ T30] audit: type=1800 audit(1752032205.748:921): pid=15865 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.2672" name="/" dev="9p" ino=2 res=0 errno=0 [ 839.773255][ T30] audit: type=1400 audit(1752032205.798:922): avc: denied { unmount } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 839.962733][ T2149] gspca_sonixj: reg_r err -110 [ 839.979895][ T2149] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 840.053559][T15876] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 840.057201][ T30] audit: type=1400 audit(1752032206.088:923): avc: denied { bind } for pid=15872 comm="syz.5.2676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 840.062079][ T30] audit: type=1400 audit(1752032206.088:924): avc: denied { connect } for pid=15872 comm="syz.5.2676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 840.689508][ T9] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 841.134550][ T5875] usb 1-1: USB disconnect, device number 16 [ 841.473455][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 841.490622][ T9] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 841.530586][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 841.530636][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 841.773280][T15893] netlink: 'syz.2.2680': attribute type 12 has an invalid length. [ 841.781361][T15893] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.2680'. [ 841.889482][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 841.904924][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 841.914442][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 841.925631][ T9] usb 2-1: Product: syz [ 841.949986][ T9] usb 2-1: Manufacturer: syz [ 842.256272][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 842.270832][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 842.276994][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 842.289817][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 842.401677][T15907] xt_socket: unknown flags 0xc [ 843.550883][ T9] usb 2-1: USB disconnect, device number 57 [ 843.979718][T15926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2689'. [ 844.534750][ T1140] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 844.544855][T12296] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 844.591070][ T2149] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 844.730605][ T2149] usb 3-1: device descriptor read/64, error -71 [ 844.971879][ T2149] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 845.160609][ T2149] usb 3-1: device descriptor read/64, error -71 [ 845.275081][ T2149] usb usb3-port1: attempt power cycle [ 845.526340][T15941] netlink: 'syz.1.2694': attribute type 12 has an invalid length. [ 845.534316][T15941] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.2694'. [ 845.566503][ T5954] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 845.730634][ T2149] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 845.920652][ T5954] usb 6-1: Using ep0 maxpacket: 8 [ 845.929448][ T5954] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 845.942634][ T2149] usb 3-1: device descriptor read/8, error -71 [ 846.000029][ T5954] usb 6-1: config 179 has no interface number 0 [ 846.012701][T15947] netlink: 'syz.0.2695': attribute type 12 has an invalid length. [ 846.021761][T15947] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.2695'. [ 846.035364][ T5954] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 846.109067][ T5954] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 846.120766][T15955] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2698'. [ 846.155959][ T5954] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 846.210731][ T2149] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 846.361445][ T5954] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 846.374624][ T5954] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 846.400887][ T5954] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 846.409906][ T5954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.490593][T15938] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 846.553571][ T2149] usb 3-1: device descriptor read/8, error -71 [ 846.725728][ T2149] usb usb3-port1: unable to enumerate USB device [ 847.024047][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input96 [ 847.245241][ T2149] usb 6-1: USB disconnect, device number 38 [ 847.245260][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 847.259999][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 847.594181][ T9] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 847.682196][T15974] SELinux: ebitmap: truncated map [ 847.692070][T15974] SELinux: failed to load policy [ 847.770058][ T9] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 847.787843][T15983] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2705'. [ 847.790542][ T9] usb 5-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 847.815456][ T9] usb 5-1: config 2 interface 0 has no altsetting 0 [ 847.824297][ T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 847.834541][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.844690][ T9] usb 5-1: Product: syz [ 847.848874][ T9] usb 5-1: Manufacturer: syz [ 847.856242][ T9] usb 5-1: SerialNumber: syz [ 848.295508][ T30] audit: type=1400 audit(1752032214.330:925): avc: denied { listen } for pid=15967 comm="syz.4.2702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 848.323274][ T9] ims_pcu 5-1:2.0: Missing CDC union descriptor [ 848.338721][ T9] ims_pcu 5-1:2.0: probe with driver ims_pcu failed with error -22 [ 848.357311][ T9] usb 5-1: USB disconnect, device number 66 [ 850.006766][ T1161] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 850.434930][ T2149] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 850.462736][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 850.641518][ T2149] usb 3-1: Using ep0 maxpacket: 32 [ 850.654438][ T2149] usb 3-1: config 0 has an invalid interface number: 4 but max is 0 [ 850.674171][ T2149] usb 3-1: config 0 has no interface number 0 [ 850.680711][ T2149] usb 3-1: config 0 interface 4 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 850.739157][ T2149] usb 3-1: Dual-Role OTG device on HNP port [ 850.811926][ T2149] usb 3-1: New USB device found, idVendor=0424, idProduct=4913, bcdDevice=84.04 [ 851.011127][ T2149] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.030772][ T5954] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 851.040068][ T2149] usb 3-1: config 0 descriptor?? [ 851.056179][ T2149] hub 3-1:0.4: bad descriptor, ignoring hub [ 851.069853][ T2149] hub 3-1:0.4: probe with driver hub failed with error -5 [ 851.240705][ T5954] usb 6-1: Using ep0 maxpacket: 8 [ 851.294929][ T5954] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 851.890193][ T5954] usb 6-1: config 179 has no interface number 0 [ 851.916437][ T5954] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 851.927644][ T5954] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 852.762318][ T5954] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 852.773564][ T5954] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 852.787063][ T5954] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 852.802468][ T5954] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 852.811580][ T5954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.834051][ T30] audit: type=1400 audit(1752032218.870:926): avc: denied { relabelfrom } for pid=16037 comm="syz.4.2721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 852.834281][T16039] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 852.863859][T16020] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 852.881717][ T30] audit: type=1400 audit(1752032218.870:927): avc: denied { relabelto } for pid=16037 comm="syz.4.2721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 853.308661][ T5954] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input98 [ 853.421709][ T973] usb 3-1: USB disconnect, device number 88 [ 853.455813][ T2149] usb 6-1: USB disconnect, device number 39 [ 853.455823][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 853.455961][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 853.792525][T15525] udevd[15525]: setting mode of /dev/input/js0 to 020664 failed: No such file or directory [ 853.841019][T15525] udevd[15525]: setting owner of /dev/input/js0 to uid=0, gid=104 failed: No such file or directory [ 854.596436][T16068] netlink: 'syz.4.2725': attribute type 12 has an invalid length. [ 854.609390][T16068] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.2725'. [ 854.870119][T16067] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2724'. [ 855.685521][ T6326] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 855.697648][ T1140] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 855.771606][T16091] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2732'. [ 857.537142][T16108] FAULT_INJECTION: forcing a failure. [ 857.537142][T16108] name failslab, interval 1, probability 0, space 0, times 0 [ 857.549779][T16108] CPU: 1 UID: 0 PID: 16108 Comm: syz.2.2736 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 857.549794][T16108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 857.549801][T16108] Call Trace: [ 857.549805][T16108] [ 857.549809][T16108] dump_stack_lvl+0x16c/0x1f0 [ 857.549829][T16108] should_fail_ex+0x512/0x640 [ 857.549844][T16108] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 857.549861][T16108] should_failslab+0xc2/0x120 [ 857.549877][T16108] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 857.549892][T16108] ? __alloc_skb+0x2b2/0x380 [ 857.549908][T16108] __alloc_skb+0x2b2/0x380 [ 857.549922][T16108] ? __pfx___alloc_skb+0x10/0x10 [ 857.549934][T16108] ? __lock_acquire+0x622/0x1c90 [ 857.549947][T16108] ? process_measurement+0x4a6/0x23e0 [ 857.549962][T16108] ? down_write+0x14d/0x200 [ 857.549980][T16108] alloc_skb_with_frags+0xe0/0x860 [ 857.549998][T16108] ? find_held_lock+0x2b/0x80 [ 857.550013][T16108] sock_alloc_send_pskb+0x7fb/0x990 [ 857.550032][T16108] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 857.550044][T16108] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 857.550059][T16108] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 857.550079][T16108] unix_dgram_sendmsg+0x41a/0x1840 [ 857.550097][T16108] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 857.550114][T16108] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 857.550140][T16108] ____sys_sendmsg+0xa95/0xc70 [ 857.550151][T16108] ? copy_msghdr_from_user+0x10a/0x160 [ 857.550166][T16108] ? __pfx_____sys_sendmsg+0x10/0x10 [ 857.550179][T16108] ? __pfx__kstrtoull+0x10/0x10 [ 857.550193][T16108] ___sys_sendmsg+0x134/0x1d0 [ 857.550209][T16108] ? __pfx____sys_sendmsg+0x10/0x10 [ 857.550230][T16108] ? find_held_lock+0x2b/0x80 [ 857.550252][T16108] __sys_sendmmsg+0x200/0x420 [ 857.550268][T16108] ? __pfx___sys_sendmmsg+0x10/0x10 [ 857.550288][T16108] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 857.550309][T16108] ? fput+0x70/0xf0 [ 857.550319][T16108] ? ksys_write+0x1ac/0x250 [ 857.550333][T16108] ? __pfx_ksys_write+0x10/0x10 [ 857.550349][T16108] __x64_sys_sendmmsg+0x9c/0x100 [ 857.550363][T16108] ? lockdep_hardirqs_on+0x7c/0x110 [ 857.550378][T16108] do_syscall_64+0xcd/0x4c0 [ 857.550395][T16108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.550406][T16108] RIP: 0033:0x7f808678e929 [ 857.550416][T16108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 857.550426][T16108] RSP: 002b:00007f80875aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 857.550437][T16108] RAX: ffffffffffffffda RBX: 00007f80869b5fa0 RCX: 00007f808678e929 [ 857.550448][T16108] RDX: 0000000000000651 RSI: 0000200000000000 RDI: 0000000000000006 [ 857.550459][T16108] RBP: 00007f80875aa090 R08: 0000000000000000 R09: 0000000000000000 [ 857.550470][T16108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 857.550480][T16108] R13: 0000000000000000 R14: 00007f80869b5fa0 R15: 00007ffec10b44c8 [ 857.550505][T16108] [ 857.897096][T16109] comedi comedi0: ni_at_a2150: I/O port conflict (0xf2,28) [ 857.985122][ T30] audit: type=1400 audit(1752032224.020:928): avc: denied { connect } for pid=16101 comm="syz.0.2735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 858.330640][ T30] audit: type=1400 audit(1752032224.020:929): avc: denied { write } for pid=16101 comm="syz.0.2735" laddr=172.20.20.170 lport=7 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 861.334053][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 861.345307][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 861.518732][T16156] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2750'. [ 861.692060][T16155] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2749'. [ 863.918731][T16184] netlink: 'syz.2.2757': attribute type 12 has an invalid length. [ 863.926751][T16184] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.2757'. [ 864.640999][ T5875] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 864.740396][T16204] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2763'. [ 864.931948][ T5875] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 864.932007][ T5954] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 865.023514][ T5875] usb 2-1: config 0 has no interfaces? [ 865.045595][ T5875] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 865.060558][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.163582][ T5954] usb 5-1: device descriptor read/64, error -71 [ 865.278401][ T5875] usb 2-1: config 0 descriptor?? [ 865.410635][ T5954] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 866.442060][T12296] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 866.542214][ T5954] usb 5-1: device descriptor read/64, error -71 [ 866.629856][T16220] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2768'. [ 866.661362][ T5954] usb usb5-port1: attempt power cycle [ 867.094365][ T6326] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 867.700932][ T5954] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 867.910540][ T5954] usb 5-1: device not accepting address 69, error -71 [ 868.100089][ T5875] usb 2-1: USB disconnect, device number 58 [ 869.701211][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.707564][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.810697][ T5875] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 869.828959][T16265] QAT: failed to copy from user cfg_data. [ 869.992312][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 870.010182][ T5875] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 0.00 [ 870.021123][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.036577][ T5875] usb 5-1: config 0 descriptor?? [ 870.100341][ T5875] xbox_remote_probe: Unexpected endpoint_in [ 870.124471][ T5875] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 870.181267][ T5954] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 870.343868][ T9] usb 5-1: USB disconnect, device number 71 [ 870.725329][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 870.757592][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 870.788964][ T5954] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 870.808568][ T5954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.835228][ T5954] usb 1-1: config 0 descriptor?? [ 871.004816][T16280] netlink: 'syz.1.2783': attribute type 12 has an invalid length. [ 871.013340][T16280] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.2783'. [ 871.275336][T16282] xt_socket: unknown flags 0xc [ 872.632219][ T66] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 872.846431][T12296] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 872.935088][ T5954] usbhid 1-1:0.0: can't add hid device: -71 [ 872.958989][ T5954] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 872.997305][ T5954] usb 1-1: USB disconnect, device number 17 [ 873.255819][T16293] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2786'. [ 873.265020][T16293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2786'. [ 875.181578][ T30] audit: type=1400 audit(1752032241.220:930): avc: denied { ioctl } for pid=16320 comm="syz.4.2794" path="socket:[53568]" dev="sockfs" ino=53568 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 875.207007][ C0] vkms_vblank_simulate: vblank timer overrun [ 875.667249][T15215] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 875.685536][T16325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2794'. [ 876.005935][T15215] usb 3-1: Using ep0 maxpacket: 16 [ 876.046368][T15215] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 226, changing to 11 [ 876.070564][T15215] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1405, setting to 1024 [ 876.081758][T15215] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 876.103591][T15215] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 876.115341][T15215] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.134671][T15215] usb 3-1: config 0 descriptor?? [ 876.164107][T16313] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 876.351002][T16341] netlink: 'syz.0.2798': attribute type 12 has an invalid length. [ 876.359123][T16341] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.2798'. [ 876.512655][ T30] audit: type=1400 audit(1752032242.550:931): avc: denied { accept } for pid=16310 comm="syz.2.2791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 876.676620][ T30] audit: type=1400 audit(1752032242.550:932): avc: denied { setopt } for pid=16310 comm="syz.2.2791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 876.770018][ T30] audit: type=1800 audit(1752032242.620:933): pid=16336 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.5.2797" name="/newroot/428/file0" dev="tmpfs" ino=2290 res=0 errno=0 [ 876.906063][T15215] microsoft 0003:045E:07DA.0029: unknown main item tag 0x0 [ 876.914161][T15215] microsoft 0003:045E:07DA.0029: unknown main item tag 0x0 [ 876.936633][T15215] microsoft 0003:045E:07DA.0029: unknown main item tag 0x0 [ 876.964209][T15215] microsoft 0003:045E:07DA.0029: ignoring exceeding usage max [ 876.986513][T15215] microsoft 0003:045E:07DA.0029: unknown main item tag 0x6 [ 876.993953][T15215] microsoft 0003:045E:07DA.0029: unknown main item tag 0x4 [ 877.009677][T15215] microsoft 0003:045E:07DA.0029: unknown main item tag 0x5 [ 877.020595][T15215] microsoft 0003:045E:07DA.0029: unbalanced collection at end of report description [ 877.038017][T15215] microsoft 0003:045E:07DA.0029: parse failed [ 877.044349][T15215] microsoft 0003:045E:07DA.0029: probe with driver microsoft failed with error -22 [ 877.368452][T16356] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2801'. [ 877.378166][T16356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2801'. [ 877.533606][T16359] /dev/nullb0: Can't open blockdev [ 877.700594][ T5875] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 878.184904][ T1140] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 878.270707][ T5875] usb 5-1: Using ep0 maxpacket: 32 [ 878.327219][ T5875] usb 5-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 878.450771][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.468802][ T5875] usb 5-1: config 0 descriptor?? [ 878.940867][ T1336] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 879.373121][ T5954] usb 3-1: USB disconnect, device number 89 [ 879.578501][ T5875] lenovo 0003:17EF:6067.002A: unknown main item tag 0x0 [ 879.697441][ T5875] lenovo 0003:17EF:6067.002A: item fetching failed at offset 3/5 [ 879.724109][ T5875] lenovo 0003:17EF:6067.002A: hid_parse failed [ 879.730352][ T5875] lenovo 0003:17EF:6067.002A: probe with driver lenovo failed with error -22 [ 879.856569][T16385] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 881.027879][T16393] lo speed is unknown, defaulting to 1000 [ 882.225165][T15215] usb 5-1: USB disconnect, device number 72 [ 883.149211][ T30] audit: type=1400 audit(1752032248.980:934): avc: denied { remount } for pid=16402 comm="syz.2.2812" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 883.731160][ T1140] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 884.216436][ T5954] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 884.238528][T12296] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 884.280789][T15215] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 884.405375][ T5954] usb 1-1: Using ep0 maxpacket: 8 [ 884.560505][T15215] usb 2-1: Using ep0 maxpacket: 32 [ 884.638701][ T5954] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 884.729634][ T5954] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 884.810745][T15215] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 884.917964][T15215] usb 2-1: config 0 has no interface number 0 [ 884.928550][ T5954] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 884.940419][T15215] usb 2-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 884.955806][T16425] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (aio_iiro_16) [ 884.965875][ T5954] usb 1-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 884.981915][T15215] usb 2-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 884.993590][ T5954] usb 1-1: config 168 interface 0 has no altsetting 0 [ 885.001057][T15215] usb 2-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 885.011613][T15215] usb 2-1: config 0 interface 219 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 885.022734][T15215] usb 2-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 885.033300][ T5954] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 885.058729][T15215] usb 2-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 885.070497][T15215] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.080579][ T5954] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 885.095876][T15215] usb 2-1: Product: syz [ 885.106000][T15215] usb 2-1: Manufacturer: syz [ 885.111544][ T5954] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 885.132943][T15215] usb 2-1: SerialNumber: syz [ 885.139469][ T5954] usb 1-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 885.159630][T15215] usb 2-1: config 0 descriptor?? [ 885.166338][T16412] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 885.210767][ T30] audit: type=1326 audit(1752032251.230:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16430 comm="syz.2.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808678e929 code=0x7ffc0000 [ 885.578423][ T30] audit: type=1326 audit(1752032251.230:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16430 comm="syz.2.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808678e929 code=0x7ffc0000 [ 885.610579][ T5954] usb 1-1: config 168 interface 0 has no altsetting 0 [ 885.618219][T15215] etas_es58x 2-1:0.219: Starting syz syz (Serial Number syz) [ 885.626758][ T30] audit: type=1326 audit(1752032251.230:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16430 comm="syz.2.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7f808678e929 code=0x7ffc0000 [ 885.650784][ T5954] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 885.691126][ T5954] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 885.715958][ T5954] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 885.735362][ T30] audit: type=1326 audit(1752032251.230:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16430 comm="syz.2.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808678e929 code=0x7ffc0000 [ 885.857660][ T5954] usb 1-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 885.879401][T15215] etas_es58x 2-1:0.219: could not parse product info: 'У' [ 885.896972][ T5954] usb 1-1: config 168 interface 0 has no altsetting 0 [ 885.904024][ T9] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 885.932755][ T30] audit: type=1326 audit(1752032251.230:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16430 comm="syz.2.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f808678e929 code=0x7ffc0000 [ 885.956154][ C1] vkms_vblank_simulate: vblank timer overrun [ 886.406074][ T30] audit: type=1326 audit(1752032251.230:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16430 comm="syz.2.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808678e929 code=0x7ffc0000 [ 886.433357][ T5954] usb 1-1: string descriptor 0 read error: -22 [ 886.439616][ T5954] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 886.470654][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 886.478133][ T5954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.487657][ T9] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 886.502856][ T9] usb 3-1: config 0 has no interface number 0 [ 886.514580][ T2149] usb 2-1: USB disconnect, device number 59 [ 886.597707][ T9] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 886.615560][ T2149] etas_es58x 2-1:0.219: Disconnecting syz syz [ 886.619879][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.636318][ T30] audit: type=1326 audit(1752032251.230:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16430 comm="syz.2.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808678e929 code=0x7ffc0000 [ 886.659705][ C1] vkms_vblank_simulate: vblank timer overrun [ 886.687249][ T9] usb 3-1: Product: syz [ 886.692373][ T5954] usb 1-1: can't set config #168, error -71 [ 886.713214][ T30] audit: type=1326 audit(1752032251.230:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16430 comm="syz.2.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f808678e929 code=0x7ffc0000 [ 886.721919][ T9] usb 3-1: Manufacturer: syz [ 886.749321][ T5954] usb 1-1: USB disconnect, device number 18 [ 886.753730][ T30] audit: type=1326 audit(1752032251.230:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16430 comm="syz.2.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808678e929 code=0x7ffc0000 [ 886.778560][ C1] vkms_vblank_simulate: vblank timer overrun [ 886.783899][T16442] bond0: entered promiscuous mode [ 886.819708][ T9] usb 3-1: SerialNumber: syz [ 886.824709][T16442] bond_slave_0: entered promiscuous mode [ 886.851587][T16442] bond_slave_1: entered promiscuous mode [ 886.900939][ T9] usb 3-1: config 0 descriptor?? [ 886.928114][ T9] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 887.198200][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 887.525589][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 887.923121][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 887.923414][ T5875] usb 3-1: USB disconnect, device number 90 [ 887.963388][T16448] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (aio_iiro_16) [ 887.989992][ T5875] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 888.094414][T16463] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2830'. [ 888.137440][ T5875] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 888.235248][ T5875] quatech2 3-1:0.51: device disconnected [ 888.612832][T16471] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2831'. [ 889.178977][T16481] loop2: detected capacity change from 0 to 7 [ 889.188147][T16481] Dev loop2: unable to read RDB block 7 [ 889.211440][T16481] loop2: unable to read partition table [ 889.368586][T16481] loop2: partition table beyond EOD, truncated [ 889.585645][T16481] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 890.057140][ T9] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 890.154411][T12296] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 890.250605][ T2149] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 890.467668][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 890.467683][ T30] audit: type=1400 audit(1752032256.498:1009): avc: denied { mount } for pid=16503 comm="syz.0.2838" name="/" dev="configfs" ino=1125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 890.510876][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 890.575479][ T2149] usb 5-1: Using ep0 maxpacket: 8 [ 890.582086][ T9] usb 2-1: config 8 has an invalid interface number: 206 but max is 0 [ 890.587505][ T2149] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 890.604006][ T9] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 890.622268][ T2149] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 890.757891][ T2149] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 890.841102][ T9] usb 2-1: config 8 has no interface number 0 [ 890.876662][ T2149] usb 5-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 890.890335][ T30] audit: type=1400 audit(1752032256.498:1010): avc: denied { search } for pid=16503 comm="syz.0.2838" name="/" dev="configfs" ino=1125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 890.926033][ T9] usb 2-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 890.930962][ T2149] usb 5-1: config 168 interface 0 has no altsetting 0 [ 890.970511][ T9] usb 2-1: config 8 interface 206 altsetting 1 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 891.009112][ T30] audit: type=1400 audit(1752032256.498:1011): avc: denied { search } for pid=16503 comm="syz.0.2838" name="/" dev="configfs" ino=1125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 891.012002][ T2149] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 891.035455][ T9] usb 2-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 891.074274][ T9] usb 2-1: config 8 interface 206 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 891.076745][ T2149] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 891.086296][T16516] netlink: 304 bytes leftover after parsing attributes in process `syz.0.2840'. [ 891.111869][ T9] usb 2-1: config 8 interface 206 has no altsetting 0 [ 891.118848][ T30] audit: type=1400 audit(1752032256.498:1012): avc: denied { read open } for pid=16503 comm="syz.0.2838" path="/" dev="configfs" ino=1125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 891.136829][ T2149] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 891.149073][T16516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2840'. [ 891.171428][ T9] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 891.188760][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.192983][T16495] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (aio_iiro_16) [ 891.196983][ T30] audit: type=1400 audit(1752032256.508:1013): avc: denied { setattr } for pid=16503 comm="syz.0.2838" name="/" dev="configfs" ino=1125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 891.230118][ T9] usb 2-1: Product: syz [ 891.234489][ T9] usb 2-1: Manufacturer: syz [ 891.239127][ T9] usb 2-1: SerialNumber: syz [ 891.241692][ T2149] usb 5-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 891.308293][T16495] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (aio_iiro_16) [ 891.309638][ T2149] usb 5-1: config 168 interface 0 has no altsetting 0 [ 891.393845][T16495] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2836'. [ 891.430684][ T5954] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 891.502975][ T2149] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 891.519930][ T2149] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 891.538111][ T2149] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 891.550112][ T2149] usb 5-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 891.573773][ T2149] usb 5-1: config 168 interface 0 has no altsetting 0 [ 891.600060][ T30] audit: type=1400 audit(1752032257.608:1014): avc: denied { setopt } for pid=16487 comm="syz.1.2834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 891.629581][ T5954] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 891.652497][ T2149] usb 5-1: string descriptor 0 read error: -22 [ 891.658577][ T5954] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 891.659863][ T2149] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 891.681248][ T5954] usb 1-1: config 220 has no interface number 2 [ 891.703987][ T5954] usb 1-1: config 220 interface 1 altsetting 5 has an endpoint descriptor with address 0x6F, changing to 0xF [ 891.722637][ T5954] usb 1-1: config 220 interface 1 altsetting 5 endpoint 0xF has invalid wMaxPacketSize 0 [ 891.757664][ T2149] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.765324][ T5954] usb 1-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 891.771228][ T2149] adutux 5-1:168.0: interrupt endpoints not found [ 892.264249][ T5954] usb 1-1: config 220 interface 0 has no altsetting 0 [ 892.307057][ T5954] usb 1-1: config 220 interface 76 has no altsetting 0 [ 892.329193][T15215] usb 5-1: USB disconnect, device number 73 [ 892.443352][ T5954] usb 1-1: config 220 interface 1 has no altsetting 0 [ 892.502562][ T5954] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 892.512734][ T5954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.521386][ T5954] usb 1-1: Product: syz [ 892.526689][ T5954] usb 1-1: Manufacturer: syz [ 892.542008][ T5954] usb 1-1: SerialNumber: syz [ 892.598394][ T9] garmin_gps 2-1:8.206: Garmin GPS usb/tty converter detected [ 892.682125][ T9] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 893.090755][ T9] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 893.156241][ T9] usb 2-1: USB disconnect, device number 60 [ 893.217826][ T9] garmin_gps 2-1:8.206: device disconnected [ 893.340677][ T5875] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 893.445867][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 893.612185][ T5875] usb 3-1: device descriptor read/64, error -71 [ 893.637046][ T5954] usb 1-1: selecting invalid altsetting 0 [ 893.801925][ T5954] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 893.838601][T16554] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (aio_iiro_16) [ 893.984170][ T5954] usb 1-1: No valid video chain found. [ 893.997288][ T5954] usb 1-1: selecting invalid altsetting 0 [ 894.003487][ T5954] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 894.018011][ T5954] usb 1-1: USB disconnect, device number 19 [ 894.045317][ T5875] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 894.190670][ T5875] usb 3-1: device descriptor read/64, error -71 [ 894.311946][ T5875] usb usb3-port1: attempt power cycle [ 894.819924][ T5875] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 894.864210][ T5875] usb 3-1: device descriptor read/8, error -71 [ 895.490820][ T5875] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 895.571212][ T5875] usb 3-1: device descriptor read/8, error -71 [ 895.680977][ T5875] usb usb3-port1: unable to enumerate USB device [ 896.468994][ T5954] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 896.469018][ T30] audit: type=1400 audit(1752032262.138:1015): avc: denied { watch_sb } for pid=16583 comm="syz.4.2857" path="/553/file0" dev="tmpfs" ino=2949 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 896.751749][ T5954] usb 6-1: Using ep0 maxpacket: 8 [ 896.899596][ T5954] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 896.907230][ T5954] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 896.950549][ T5954] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 897.033178][ T5954] usb 6-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 897.052383][ T5954] usb 6-1: config 168 interface 0 has no altsetting 0 [ 897.061969][ T5954] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 897.069546][ T5954] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 897.112668][ T5954] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 897.147564][ T5954] usb 6-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 897.166269][ T5954] usb 6-1: config 168 interface 0 has no altsetting 0 [ 897.178713][ T5954] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 897.186751][ T5954] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 897.198418][ T5954] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 897.200008][T16601] FAULT_INJECTION: forcing a failure. [ 897.200008][T16601] name failslab, interval 1, probability 0, space 0, times 0 [ 897.220743][ T5954] usb 6-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 897.236035][T16601] CPU: 0 UID: 0 PID: 16601 Comm: syz.2.2862 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 897.236052][T16601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 897.236059][T16601] Call Trace: [ 897.236063][T16601] [ 897.236068][T16601] dump_stack_lvl+0x16c/0x1f0 [ 897.236088][T16601] should_fail_ex+0x512/0x640 [ 897.236103][T16601] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 897.236120][T16601] should_failslab+0xc2/0x120 [ 897.236137][T16601] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 897.236151][T16601] ? __alloc_skb+0x2b2/0x380 [ 897.236167][T16601] __alloc_skb+0x2b2/0x380 [ 897.236181][T16601] ? __pfx___alloc_skb+0x10/0x10 [ 897.236196][T16601] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 897.236217][T16601] netlink_alloc_large_skb+0x69/0x130 [ 897.236229][T16601] netlink_sendmsg+0x6a1/0xdd0 [ 897.236242][T16601] ? __pfx_netlink_sendmsg+0x10/0x10 [ 897.236258][T16601] sock_write_iter+0x4ff/0x5b0 [ 897.236269][T16601] ? __pfx_sock_write_iter+0x10/0x10 [ 897.236286][T16601] ? __pfx_file_has_perm+0x10/0x10 [ 897.236300][T16601] do_iter_readv_writev+0x654/0x950 [ 897.236314][T16601] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 897.236327][T16601] ? selinux_file_permission+0x126/0x660 [ 897.236343][T16601] ? bpf_lsm_file_permission+0x9/0x10 [ 897.236361][T16601] ? security_file_permission+0x71/0x210 [ 897.236377][T16601] ? rw_verify_area+0xcf/0x680 [ 897.236390][T16601] vfs_writev+0x35f/0xde0 [ 897.236407][T16601] ? __pfx_vfs_writev+0x10/0x10 [ 897.236429][T16601] ? __fget_files+0x20e/0x3c0 [ 897.236443][T16601] ? __fget_files+0x1d0/0x3c0 [ 897.236461][T16601] ? do_writev+0x28c/0x340 [ 897.236472][T16601] do_writev+0x28c/0x340 [ 897.236485][T16601] ? __pfx_do_writev+0x10/0x10 [ 897.236502][T16601] do_syscall_64+0xcd/0x4c0 [ 897.236518][T16601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.236530][T16601] RIP: 0033:0x7f808678e929 [ 897.236540][T16601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 897.236551][T16601] RSP: 002b:00007f80875aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 897.236562][T16601] RAX: ffffffffffffffda RBX: 00007f80869b5fa0 RCX: 00007f808678e929 [ 897.236569][T16601] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000009 [ 897.236575][T16601] RBP: 00007f80875aa090 R08: 0000000000000000 R09: 0000000000000000 [ 897.236582][T16601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 897.236588][T16601] R13: 0000000000000000 R14: 00007f80869b5fa0 R15: 00007ffec10b44c8 [ 897.236602][T16601] [ 897.500605][ T5954] usb 6-1: config 168 interface 0 has no altsetting 0 [ 897.597967][ T5954] usb 6-1: string descriptor 0 read error: -22 [ 897.604316][ T5954] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 897.613487][ T5954] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.637580][ T5954] adutux 6-1:168.0: interrupt endpoints not found [ 897.943142][T16612] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2866'. [ 898.006261][T16617] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 898.016200][T16617] overlayfs: missing 'lowerdir' [ 898.164792][ T9] usb 6-1: USB disconnect, device number 40 [ 898.312564][ T30] audit: type=1326 audit(1752032264.348:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16625 comm="syz.2.2870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808678e929 code=0x7ffc0000 [ 898.645192][ T5954] IPVS: starting estimator thread 0... [ 898.652881][ T30] audit: type=1326 audit(1752032264.348:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16625 comm="syz.2.2870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808678e929 code=0x7ffc0000 [ 898.653069][ T30] audit: type=1326 audit(1752032264.368:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16625 comm="syz.2.2870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f808678d3df code=0x7ffc0000 [ 898.676466][ C1] vkms_vblank_simulate: vblank timer overrun [ 898.830702][T16630] IPVS: using max 76 ests per chain, 182400 per kthread [ 898.944976][ T30] audit: type=1326 audit(1752032264.368:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16625 comm="syz.2.2870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808678e929 code=0x7ffc0000 [ 899.725649][ T1161] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 899.835427][ T30] audit: type=1326 audit(1752032264.368:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16625 comm="syz.2.2870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f808678e929 code=0x7ffc0000 [ 899.858821][ C1] vkms_vblank_simulate: vblank timer overrun [ 900.003224][T16645] netlink: 'syz.1.2876': attribute type 1 has an invalid length. [ 900.020617][T16645] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2876'. [ 900.541874][ T30] audit: type=1326 audit(1752032264.368:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16625 comm="syz.2.2870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808678e929 code=0x7ffc0000 [ 900.608071][ T30] audit: type=1326 audit(1752032264.368:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16625 comm="syz.2.2870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808678e929 code=0x7ffc0000 [ 900.641441][ T30] audit: type=1326 audit(1752032264.368:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16625 comm="syz.2.2870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f808678e929 code=0x7ffc0000 [ 900.823193][ T30] audit: type=1326 audit(1752032264.368:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16625 comm="syz.2.2870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808678e929 code=0x7ffc0000 [ 901.143722][T16659] siw: device registration error -23 [ 903.550713][T16670] loop6: detected capacity change from 0 to 63 [ 903.567312][T16193] buffer_io_error: 1070 callbacks suppressed [ 903.567328][T16193] Buffer I/O error on dev loop6, logical block 0, async page read [ 903.592267][T16193] Buffer I/O error on dev loop6, logical block 0, async page read [ 903.607325][T16193] Buffer I/O error on dev loop6, logical block 0, async page read [ 903.685365][T16193] Buffer I/O error on dev loop6, logical block 0, async page read [ 903.727446][T16193] Buffer I/O error on dev loop6, logical block 0, async page read [ 903.960798][ T9] usb 3-1: new full-speed USB device number 95 using dummy_hcd [ 904.180805][ T2149] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 904.285331][ T9] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 904.293941][ T9] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 904.310540][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 904.319507][ T9] usb 3-1: config 1 has no interface number 0 [ 904.378466][ T9] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 904.399908][ T9] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 904.437858][ T9] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 904.459344][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.520819][ T2149] usb 1-1: Using ep0 maxpacket: 8 [ 904.535543][ T2149] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 904.537363][T16686] netlink: 'syz.5.2886': attribute type 12 has an invalid length. [ 904.550501][ T2149] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 904.562338][T16686] netlink: 9472 bytes leftover after parsing attributes in process `syz.5.2886'. [ 904.818519][ T9] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 904.825809][ T2149] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 904.871180][ T2149] usb 1-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 904.929570][ T2149] usb 1-1: config 168 interface 0 has no altsetting 0 [ 904.940864][ T5954] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 905.022678][ T2149] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 905.030237][ T2149] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 905.043886][ T2149] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 905.055423][ T2149] usb 1-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 905.079330][ T2149] usb 1-1: config 168 interface 0 has no altsetting 0 [ 905.097381][ T2149] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 905.106589][ T2149] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 905.118301][ T2149] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 905.122043][ T5954] usb 5-1: config 0 has no interfaces? [ 905.129869][ T2149] usb 1-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 905.158375][ T2149] usb 1-1: config 168 interface 0 has no altsetting 0 [ 905.168765][ T2149] usb 1-1: string descriptor 0 read error: -22 [ 905.175120][ T2149] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 905.176568][ T5954] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 905.184448][ T2149] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.188303][ T2149] adutux 1-1:168.0: interrupt endpoints not found [ 905.228063][ T5954] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 905.236898][ T5954] usb 5-1: Product: syz [ 905.241337][ T5954] usb 5-1: Manufacturer: syz [ 905.256088][ T5954] usb 5-1: config 0 descriptor?? [ 905.404577][T15215] usb 1-1: USB disconnect, device number 20 [ 905.476770][T16685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 905.486510][T12296] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 905.487063][T16685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 905.510092][T16685] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (aio_iiro_16) [ 905.518882][ T5954] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 905.519918][T16685] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (aio_iiro_16) [ 905.560133][T16685] sp0: Synchronizing with TNC [ 905.569251][ C1] Oops: divide error: 0000 [#1] SMP KASAN NOPTI [ 905.575512][ C1] CPU: 1 UID: 0 PID: 16685 Comm: syz.4.2887 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 905.587615][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 905.597657][ C1] RIP: 0010:comedi_inc_scan_progress+0x1cc/0x340 [ 905.603977][ C1] Code: 00 00 00 03 43 2c 48 ba 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 14 11 84 d2 74 09 80 fa 03 0f 8e 53 01 00 00 31 d2 b3 80 00 00 00 89 53 2c e8 a6 76 cd f8 48 8d 7b 34 48 b8 00 00 [ 905.623573][ C1] RSP: 0018:ffffc90000a08da0 EFLAGS: 00010046 [ 905.629625][ C1] RAX: 0000000000000001 RBX: ffff88807a2ee200 RCX: 1ffff1100f45dc50 [ 905.637582][ C1] RDX: 0000000000000000 RSI: ffffffff88ee7f98 RDI: ffff88807a2ee280 [ 905.645536][ C1] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 905.653491][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000004 [ 905.661444][ C1] R13: 0000000000000000 R14: 0000000000000002 R15: 0000000010000000 [ 905.669395][ C1] FS: 00007f78edbeb6c0(0000) GS:ffff888124816000(0000) knlGS:0000000000000000 [ 905.678336][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 905.684913][ C1] CR2: 0000556a8bf57000 CR3: 0000000030b9e000 CR4: 00000000003526f0 [ 905.692877][ C1] Call Trace: [ 905.696142][ C1] [ 905.698973][ C1] comedi_buf_write_samples+0x406/0x640 [ 905.704515][ C1] aio_iiro_16_cos+0x132/0x160 [ 905.709266][ C1] ? __pfx_aio_iiro_16_cos+0x10/0x10 [ 905.714544][ C1] ? __pfx_aio_iiro_16_cos+0x10/0x10 [ 905.719818][ C1] __handle_irq_event_percpu+0x22c/0x7d0 [ 905.725439][ C1] handle_irq_event+0xab/0x1e0 [ 905.730186][ C1] handle_edge_irq+0x28e/0xab0 [ 905.734935][ C1] __common_interrupt+0xe2/0x250 [ 905.739857][ C1] common_interrupt+0xba/0xe0 [ 905.744539][ C1] [ 905.747453][ C1] [ 905.750365][ C1] asm_common_interrupt+0x26/0x40 [ 905.755372][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 905.761776][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 86 c1 0d f6 48 89 df e8 6e 15 0e f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 05 33 fe f5 65 8b 05 9e d9 45 08 85 c0 74 16 5b [ 905.781366][ C1] RSP: 0018:ffffc9000c7ffbb0 EFLAGS: 00000246 [ 905.787412][ C1] RAX: 0000000000000002 RBX: ffffffff9b0c4da0 RCX: 0000000000000006 [ 905.795381][ C1] RDX: 0000000000000000 RSI: ffffffff8de3251e RDI: ffffffff8c158f60 [ 905.803343][ C1] RBP: 0000000000000283 R08: 0000000000000001 R09: 0000000000000001 [ 905.811303][ C1] R10: ffffffff90a97f57 R11: 0000000000000001 R12: 0000000000000001 [ 905.819259][ C1] R13: ffffffff9b0c4ea8 R14: 0000000000000000 R15: 0000000000000003 [ 905.827217][ C1] uart_write+0x2a4/0xb30 [ 905.831547][ C1] sixpack_open+0x860/0xa40 [ 905.836042][ C1] ? __pfx_sixpack_open+0x10/0x10 [ 905.841052][ C1] ? tty_set_ldisc+0x2c8/0x780 [ 905.845801][ C1] ? down_write+0x14d/0x200 [ 905.850293][ C1] ? __pfx_sixpack_open+0x10/0x10 [ 905.855302][ C1] tty_ldisc_open+0x9c/0x120 [ 905.859880][ C1] tty_set_ldisc+0x32b/0x780 [ 905.864453][ C1] tty_ioctl+0xc2e/0x1640 [ 905.868768][ C1] ? __pfx_tty_ioctl+0x10/0x10 [ 905.873519][ C1] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 905.880359][ C1] ? hook_file_ioctl_common+0x145/0x410 [ 905.885888][ C1] ? selinux_file_ioctl+0x180/0x270 [ 905.891072][ C1] ? selinux_file_ioctl+0xb4/0x270 [ 905.896166][ C1] ? __pfx_tty_ioctl+0x10/0x10 [ 905.900916][ C1] __x64_sys_ioctl+0x18e/0x210 [ 905.905665][ C1] do_syscall_64+0xcd/0x4c0 [ 905.910155][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.916043][ C1] RIP: 0033:0x7f78ecd8e929 [ 905.920441][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 905.940039][ C1] RSP: 002b:00007f78edbeb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 905.948452][ C1] RAX: ffffffffffffffda RBX: 00007f78ecfb5fa0 RCX: 00007f78ecd8e929 [ 905.956417][ C1] RDX: 00002000000000c0 RSI: 0000000000005423 RDI: 0000000000000008 [ 905.964385][ C1] RBP: 00007f78ece10b39 R08: 0000000000000000 R09: 0000000000000000 [ 905.972346][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 905.980300][ C1] R13: 0000000000000000 R14: 00007f78ecfb5fa0 R15: 00007ffe627ad408 [ 905.988258][ C1] [ 905.991258][ C1] Modules linked in: [ 905.995137][ C1] ---[ end trace 0000000000000000 ]--- [ 906.000572][ C1] RIP: 0010:comedi_inc_scan_progress+0x1cc/0x340 [ 906.006892][ C1] Code: 00 00 00 03 43 2c 48 ba 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 14 11 84 d2 74 09 80 fa 03 0f 8e 53 01 00 00 31 d2 b3 80 00 00 00 89 53 2c e8 a6 76 cd f8 48 8d 7b 34 48 b8 00 00 [ 906.026480][ C1] RSP: 0018:ffffc90000a08da0 EFLAGS: 00010046 [ 906.032527][ C1] RAX: 0000000000000001 RBX: ffff88807a2ee200 RCX: 1ffff1100f45dc50 [ 906.040488][ C1] RDX: 0000000000000000 RSI: ffffffff88ee7f98 RDI: ffff88807a2ee280 [ 906.048439][ C1] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 906.056391][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000004 [ 906.064356][ C1] R13: 0000000000000000 R14: 0000000000000002 R15: 0000000010000000 [ 906.072316][ C1] FS: 00007f78edbeb6c0(0000) GS:ffff888124816000(0000) knlGS:0000000000000000 [ 906.081234][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 906.087804][ C1] CR2: 0000556a8bf57000 CR3: 0000000030b9e000 CR4: 00000000003526f0 [ 906.095775][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 906.103164][ C1] Kernel Offset: disabled [ 906.107492][ C1] Rebooting in 86400 seconds..