last executing test programs: 14m30.33312621s ago: executing program 2 (id=6): r0 = syz_open_dev$media(&(0x7f00000001c0), 0x2c26, 0x82543) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0x7c80, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r9 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r9, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB], 0xc0) sendmmsg$inet6(r9, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x30, r3, 0x2d, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000000}, 0x48000) 14m29.36851785s ago: executing program 2 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) chdir(&(0x7f0000000240)='./file0\x00') pipe2$watch_queue(&(0x7f0000000000), 0x80) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='ocfs2\x00', 0x0, &(0x7f0000000140)='grpquota') r0 = socket(0x10, 0x803, 0x0) connect$bt_rfcomm(r0, &(0x7f0000000200)={0x1f, @any, 0x10}, 0xa) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x400) open(&(0x7f0000000040)='./file0\x00', 0x80, 0x82) 14m29.098890746s ago: executing program 2 (id=8): socket$kcm(0x10, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x10) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850", 0x4, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ebffffffffffffff280012800b0001"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, {0xa, 0x4e24, 0x0, @local, 0x7}, 0xffffffffffffffff, {[0x6, 0x8, 0x1ff, 0x2e, 0x40, 0xffffffff, 0x2, 0x81]}}, 0x5c) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 14m27.841210259s ago: executing program 2 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) umount2(&(0x7f0000000080)='./file0\x00', 0x9) 14m27.487498599s ago: executing program 2 (id=13): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fc00101}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000000)={0x0, 0x3, 0xffffffffffffffff, 0x5}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x12, r1, 0x47492000) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x260080, 0x4c, 0x14}, 0x18) renameat2(r1, &(0x7f0000000080)='./file0\x00', r2, &(0x7f00000005c0)='./file0\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) listen(r5, 0x0) recvmmsg(r3, &(0x7f0000001800)=[{{&(0x7f0000000600)=@sco={0x1f, @none}, 0x80, &(0x7f0000002a00)=[{&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/68, 0x44}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/1, 0x1}, {&(0x7f00000017c0)=""/54, 0x36}, {&(0x7f0000003b00)=""/70, 0x46}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/175, 0xaf}, {&(0x7f0000002900)=""/252, 0xfc}], 0x9, &(0x7f0000003b80)=""/4106, 0x100a}}], 0x1, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x7c}}, 0x50) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r7, &(0x7f0000000140)=""/56, 0x38) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20000000) r8 = socket$inet6(0xa, 0x3, 0x81) connect$inet6(r8, 0x0, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x1c0, 0x43, 0xa0, 0x0, 0x98, 0x360, 0x178, 0x178, 0x360, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@connbytes={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x168, 0x1a0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@multicast1, [], @ipv6=@loopback, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [], @ipv4=@multicast1}}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x468) 14m26.79850814s ago: executing program 2 (id=15): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x10) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850", 0x4, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ebffffffffffffff28001280"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, {0xa, 0x4e24, 0x0, @local, 0x7}, 0xffffffffffffffff, {[0x6, 0x8, 0x1ff, 0x2e, 0x40, 0xffffffff, 0x2, 0x81]}}, 0x5c) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x5, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 14m26.5268054s ago: executing program 32 (id=15): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x10) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850", 0x4, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ebffffffffffffff28001280"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, {0xa, 0x4e24, 0x0, @local, 0x7}, 0xffffffffffffffff, {[0x6, 0x8, 0x1ff, 0x2e, 0x40, 0xffffffff, 0x2, 0x81]}}, 0x5c) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x5, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 14.101135393s ago: executing program 4 (id=2753): ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) (async) r0 = syz_usb_connect$uac1(0x0, 0xad, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9b, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0xff}, [@extension_unit={0x9, 0x24, 0x8, 0x0, 0x0, 0x0, 'LX'}, @mixer_unit={0x6, 0x24, 0x4, 0x5, 0x0, 'R'}, @selector_unit={0x7, 0x24, 0x5, 0x0, 0x0, "53f1"}, @selector_unit={0xb, 0x24, 0x5, 0x0, 0x0, "133b9bda531c"}, @selector_unit={0x9, 0x24, 0x5, 0x0, 0x5, "96efc359"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x0, 0x1, "8b7e", "8e"}, @as_header={0x7, 0x24, 0x1, 0x0, 0xc}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x81}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) (async) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0xfff4}}]}}]}, 0x40}}, 0x4000) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f0000002080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12.295441137s ago: executing program 4 (id=2762): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r1) (async) close(r1) inotify_init1(0x800) ioctl$sock_qrtr_TIOCINQ(r1, 0x541b, &(0x7f0000000080)) (async) ioctl$sock_qrtr_TIOCINQ(r1, 0x541b, &(0x7f0000000080)) ioctl$sock_inet_SIOCGARP(r0, 0x8954, 0x0) 12.12060334s ago: executing program 4 (id=2763): pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000300)=ANY=[@ANYRES64=r2, @ANYRES64=r2]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRES16], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x2d, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$inet6(0xa, 0x4, 0x0) sendmmsg$inet(r5, &(0x7f0000002ec0), 0x0, 0x4000854) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x2000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x20000014) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f00000006c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x1f, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 11.339248348s ago: executing program 4 (id=2764): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x13ec, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x6d, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x200, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x5, 0x4}}}}}]}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x6, 0xa4, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x2, 0x1, 0x7, 0x90, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "ebb9dbd8cc"}, {0x5, 0x24, 0x0, 0xad3}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x3, 0x7f72, 0x5f}, {0x6, 0x24, 0x1a, 0xd86d, 0x13}, [@obex={0x5, 0x24, 0x15, 0xc000}, @country_functional={0x6, 0x24, 0x7, 0x2, 0x7}, @obex={0x5, 0x24, 0x15, 0x3}, @mbim={0xc, 0x24, 0x1b, 0x5, 0x1, 0x4, 0x1, 0x7ff}, @mdlm={0x15, 0x24, 0x12, 0xffff}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0x1, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x3, 0xb, 0x9a}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x3, 0x4, 0xfa}}}}}}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x1, 0x7, 0x81, 0x20, 0x5}, 0x1b6, &(0x7f0000000440)={0x5, 0xf, 0x1b6, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3a04026cf5cc3248, 0x2, 0x2, 0xefb5}, @ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x3, 0x3, 0x1, 0xf00f, 0x8, [0x7e00, 0xff0f, 0xf]}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "a241e294bc31ad6bed26f0c458f4a87a"}, @generic={0x9c, 0x10, 0xb, "0146f56699e0e7e24848aa3c48edb1d959cf81ad4908d43279d0ba665814421a1b983aa13a1b5a0382d4458e6122d71d7a70315c08e00d09a8ac35b8fae9a46202705a14c9a8be12287dffe10110f9f33355a7c18f98b4b4f9dffb22972398c2f4bd3e8e539da5f45e88bd0b6851d42f284e51a4e2df29528df495ec5f41607fc9e030fa53602bd3825b76b87cf486d3c44985c2e0c77c4ce7"}, @generic={0xdc, 0x10, 0x1, "c6c89b3671a923faac0c529042609c471a00329f4653026e323da224ee20c7555afa82ac83b6748d42197a9a996844735eb419798fe0288ad487d048d5df264975cf5f775e723411833ef71a1febd722cd77b6076f47ee0abe645c4546ff168b9963dc7e33cc745005f61e9919204cf07875c2d4fa3965f5a19516956028c27ae02b7bc7d19ae47fd38eb26dc6439a82b7a13787b42edfcb3be3da4b2e532c25c25040dd6c8ab180a07403e84f03d5b9af77f11c722bba14778e6454adff62db6806abc259499ab59c5927df40f64ddf74c4de666019a071ae"}]}, 0x7, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x240a}}, {0xe0, &(0x7f0000000600)=@string={0xe0, 0x3, "02afed5133ea1ea3d172ad2780487f5c168105299971a3979de97a1e75d94966f314fd18f733d15f91082c1186e89030796bd0fd943d55bcc4f2fcad97a6acf937e2891c55e07389f6d873014ab7777976208aa8dba277230f1586b4c05e21db6097ecbc25cee0b5cd9311a184a6717f2a5e30650d5cb2911e4663e7f8baf661b2bfaab5a839051fc230e3f034c5b2c1deb5f08896adcd619eb9ab6eae050508c823f56f7ec4afe0fe73ed52ee936204b361eee43134b550a6729db65ce1f02135d121aecfa00bf89941521687a83485e767aed53c5981d3ea051bae1610"}}, {0xff, &(0x7f0000000700)=@string={0xff, 0x3, "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"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x82c}}, {0x63, &(0x7f0000000800)=@string={0x63, 0x3, "9070eb0b0c694a1598d549377ac801395dd8dd214e7a0b96f92270787fbcddc987519db328a12fd6599087600678da0bc857a5d43956054bcf26f27dd798be845af958bb1cf882b68e695f4882fe673945cda15dba98d0894c2019cf4eb800fa8a"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x459}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000200)={0x0, 0x24, 0x5, {0x5, 0x8, "926bf9"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, &(0x7f0000000980)={0x20, 0x22, 0x40, {0x40, 0x4, "e5c00718b12560f5a2e82faebdf547e0c1cceb918673229f7a0d5a62052a13f809c591382ced3d47c8cb561efe5b19d495ea5abe88c014d3ac7a55554c2c"}}, &(0x7f0000000a00)={0x0, 0x3, 0xdf, @string={0xdf, 0x3, "f57d1d101d4b1f7b672218e96d6323e51b33682af3898edd71e78bb038ce63c502f7baf438be1035a93bf2150f7ba4c7bbb6eac00352c137105bcb492c9675f3d42f5eb9935c842a36eeb55428f03be1d4af69efc82dd8c11ef15a94256941bfe8f9c2dea6fa9b80fa47cbf192718b2abba004db8829a7c568ddb36d9a6bcb5c1090fb406a65bc65d0db30c44f968138e97e03408cfe5b3b2a609e1a118942c89e3a4c4dc1f7d0ca47a5a9e72008cb8c7c32e15c1f38ddeb5dc829be2382ddb9686d24582db0f4a07a042694d2d956be2205a51e9a84fa5351348260e7"}}, &(0x7f0000000b00)={0x0, 0x22, 0x1d, {[@main=@item_4={0x3, 0x0, 0x8, 'EOFx'}, @global=@item_012={0x1, 0x1, 0x5, "fc"}, @main=@item_4={0x3, 0x0, 0x9, "8da7b704"}, @global=@item_4={0x3, 0x1, 0x1, "3c7ae346"}, @main=@item_4={0x3, 0x0, 0xb, "9d7cf126"}, @main=@item_4={0x3, 0x0, 0x8, "27a10bd8"}, @global=@item_012={0x1, 0x1, 0x9, "a2"}]}}, &(0x7f0000000b40)={0x0, 0x21, 0x9, {0x9, 0x21, 0x13, 0x2, 0x1, {0x22, 0x9a5}}}}, &(0x7f0000000d80)={0x2c, &(0x7f0000000bc0)={0x0, 0xdd1d145bc34df66b, 0xef, "f85af614317ed772068ee2101a9a9495cc158079e9e8316e0189ba79cf288947e9bbe0a78f1f2281e3984e8d24f30da9cf5d9b49e5435b44dd8576d7c55aa69316b39c362dd2158d9d2cb7cfb3f414fc63fd76daf80829266bae3d6b69ce10a5dd4957d74222b0713ec5dc05e2817eb08212b6b5831b4c83b87b3df9b2ea23b2c28cf9779fe13d6c6173361157f38ef23fb453480b522f0ca9eef4e5d9a8ed3e1faa2f656816a7e7954d69162116120f176e53dde615c6f0eb916cdbb2fada19337a197660bf1b801efd82fcf8509e712f101d169139e45cb2f3140cc4fb63dd1fefeb8aa735ec41f88f6108da1761"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x8e}, &(0x7f0000000e00)={0x20, 0x1, 0xa7, "3f89ee440ae84ee97a5722d94237452618d55d36496845d62973fe4383c4871e5bf3f26175986a3d644fbc71891dc206faf089e2823432fd885f09440eb411fb9195aca5b08d88db53794a0723133aef9bded325e3263e7ed80e8c7e1ce4dd2a3cbe95cc529c4f90ad6d25642bacb7a079ca521e0d1343e2caef98a5e65d06da29d71e933788e6ef84d74d8aad2b8d187ef2c953d0a68c02e2ac20905a341af09aef7da8aa6d40"}, &(0x7f0000000d40)={0x20, 0x3, 0x1}}) r1 = io_uring_setup(0x5b70, &(0x7f0000000040)={0x0, 0x6b, 0x2000, 0x2, 0x2bb}) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x7, 0x0, 0x3, "0062ba7d820000a75e0000000000fcff00"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x44) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3, 0x9}, &(0x7f0000000080)="00000102", 0xfffff, r2) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000100)={0xf, r1, 'id1\x00'}) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r6, 0xbe) io_uring_enter(r1, 0x37b7, 0x4b50, 0x6d, &(0x7f00000000c0)={[0x23e403cb]}, 0x8) 10.592554862s ago: executing program 0 (id=2765): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000700)=[@cpuid={0x2, 0x18, {0xffffffff}}, @code={0x1, 0x68, {"c44215dc8c5300900000c442eaf7b277e7dfb92e400f79611066430f3880b442004000000f001966baf80cb84cadae88ef66bafc0ced3ef3f0096dd6c4c3650a2600b8010000000f01c1440f20c03501000000440f22c0"}}, @cpuid={0x2, 0x18, {0x0, 0x33c}}, @uexit={0x0, 0x18, 0x2}, @uexit={0x0, 0x18, 0x5}, @code={0x1, 0x5c, {"66660f38801d0a0000000f20c035000004000f22c00f01dfb9351001c0b800000000ba000000000f3066ba2100b800000000ef36410fc73166ba4200edf30f09b8010000000f01c10f0137"}}, @cpuid={0x2, 0x18, {0x0, 0x7}}, @code={0x1, 0x79, {"403d36d6fd90c48261bbab00700000c744240000300000c744240243d8a150c7442406000000000f01142466440f75e666ba4300b800600000efb9800000c00f3235000800000f303e410f37c744240014000000c744240225ffffffff2c240f3accd5000f017b00"}}, @cpuid={0x2, 0x18, {0xee66, 0xfb6}}, @cpuid={0x2, 0x18, {0x9, 0x5}}, @uexit={0x0, 0x18, 0x8}, @code={0x1, 0x61, {"66baa000b08aeec4e1c1541265f30fc734f0650f060fdd4e000fc75b00440f20c03509000000440f22c0c443b50c1b080fc76a00c74424000ff90000c74424020e000000c7442406000000000f011424"}}, @cpuid={0x2, 0x18, {0x3, 0x6}}, @uexit={0x0, 0x18, 0x7fffffff}, @cpuid={0x2, 0x18, {0x7, 0x7}}, @code={0x1, 0x92, {"b9800000c00f3235001000000f30642e410f060f01d13e26430ff3dfb805000000b992a419800f01d966ba410066edc744240005000000c744240200900000c7442406000000000f01142448b807000000000000000f23d80f21f835400000c00f23f8c402f5475b0048b861440000000000000f23c80f21f835040080000f23f8"}}], 0x338}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) poll(&(0x7f0000000440)=[{r2, 0x1}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x8}]}}, 0x0}, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x4, 0x0, 0x3, 0x1d, 0x100, &(0x7f00000000c0)="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"}) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 7.753713586s ago: executing program 5 (id=2767): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140), 0xa}, {&(0x7f0000000300)=""/225, 0xd4d5}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0xfffffffffffffe63, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 7.48457049s ago: executing program 5 (id=2769): openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x56202) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) socket(0x1d, 0x2, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000840)=ANY=[@ANYBLOB="b0000000daffffff", @ANYRES64=0x3, @ANYBLOB="040000000000000000000000000000000000000000000080040000000000000000000000ff000000010000000000f900060000000000000005000000000000009c0000000000000081000000000000007e000000000000000000000007000000", @ANYRES32, @ANYRES32, @ANYBLOB="040000008100000000000000000000000000000002000000000000000100000007000000000000"], 0xb0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r6, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001ac0)=@delchain={0x4c, 0x65, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xb}, {0xd, 0x7}, {0xfff1, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_IP_TOS={0x5, 0x49, 0x8}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e23}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x60f6}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0xc050) recvmsg$can_raw(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000ac0)=""/4091, 0x1000}, {&(0x7f0000000380)=""/251}]}, 0x42) 7.293070608s ago: executing program 0 (id=2770): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r0, 0x2007ffc) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fchdir(0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x800000009) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'sit0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000940)={'syztnl2\x00', 0x0}) accept$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 6.231529914s ago: executing program 4 (id=2775): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x9c}, 0x1, 0x0, 0x0, 0x24000800}, 0x801) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f00000000c0)={@dev}, 0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000180)=""/66, 0x42}, {&(0x7f0000000240)=""/225, 0xe1}], 0x2, 0x0, 0x3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendto$packet(r3, 0x0, 0x0, 0x4004013, 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000001c0)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000000400)=""/102400, 0x19000) openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) 6.015179689s ago: executing program 1 (id=2777): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xbd, 0x2, 0xc4, 0x40, 0x856, 0xac31, 0x931e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd2, 0xc8, 0x7f}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x10000008, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r5 = add_key$user(&(0x7f0000000200), &(0x7f0000000580)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000040)={r5}, &(0x7f0000000480)=""/250, 0xfa, &(0x7f00000001c0)={&(0x7f0000000600)={'sha1-generic\x00'}}) prctl$PR_SET_NAME(0xf, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, 0x0, 0x68c01, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r7, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 5.789405396s ago: executing program 0 (id=2778): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) close(0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r2 = accept4(r1, 0x0, 0x0, 0x80000) r3 = dup(r2) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)='Y', 0x1}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0xba0f, @rand_addr=' \x01\x00', 0x200}]}, &(0x7f0000000140)=0x10) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020020008500000082"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) (async) write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz0\x00', {0xf155, 0xa, 0xfc9, 0x3}, 0x53, [0x4, 0x8, 0x5, 0x7ff, 0x9, 0xfffffffd, 0x10001, 0x6, 0x2, 0x5, 0x7, 0x384, 0x5, 0x39, 0xb3, 0x68e, 0x4, 0x0, 0xfffffffc, 0x4, 0x4, 0xf6, 0x4, 0x0, 0x7, 0x8, 0x5, 0x6, 0x6, 0xdc4f, 0x101, 0xa, 0x7, 0x5, 0x2f9, 0xfffffffd, 0xd, 0x5, 0x6, 0x4, 0x9, 0x9, 0x3, 0x800, 0x3, 0x6d8, 0xd1, 0x551, 0x9, 0xfffffffa, 0x800, 0x7fff, 0x1, 0xa00, 0xffffffff, 0x0, 0x1, 0x2, 0x7, 0x401, 0x1, 0x1, 0x3, 0xffffffff], [0x8, 0x1, 0xf0c5, 0x2, 0x4574, 0xdd, 0x404, 0x4, 0x800, 0x4, 0x1, 0x8, 0x4, 0x2, 0x6, 0x2, 0x100, 0x5, 0x0, 0x3, 0x5, 0x8, 0x0, 0x8, 0x7, 0x7fff, 0xf6a7, 0xe, 0x3, 0xffffffbb, 0x4, 0x6, 0xf, 0xffffffff, 0x639, 0x7, 0xe7, 0x8001, 0x5, 0x7, 0x80000001, 0x5, 0x9, 0x0, 0x80000000, 0xe, 0x6, 0x7fffffff, 0x40, 0x7, 0x3, 0x101, 0xe65e, 0x6, 0x0, 0xfffffff9, 0x800, 0x3, 0xefb0, 0x80000001, 0x6, 0x7, 0x5ca2, 0x40], [0x1, 0xffffffff, 0xbc, 0xffffffff, 0x80000000, 0xfffff801, 0x7, 0x8, 0x6, 0x7, 0x4, 0x0, 0x4, 0x7, 0x8, 0x6, 0xf, 0x3, 0x5, 0x6, 0xfffffffe, 0x9, 0x9, 0x0, 0x5, 0x2, 0x0, 0x4, 0x8c, 0x9, 0x1, 0x7, 0x2a0, 0x1, 0x3ff, 0x40, 0x7, 0x1, 0x0, 0x19, 0x10, 0x0, 0x2, 0x8e30b97, 0x8, 0x1, 0x3, 0x0, 0x4, 0xb, 0x0, 0x2, 0x4, 0x2, 0x8, 0x100, 0x1, 0x7, 0x8, 0x3, 0xb890, 0x0, 0xffff0000, 0x6], [0x2, 0x4b000000, 0x7, 0x2, 0x4, 0x7fffffff, 0xffff, 0x2, 0x6, 0x1, 0x800, 0xd, 0xfffffff1, 0x3, 0x8, 0x2, 0xffffb309, 0x7ff, 0x6, 0x0, 0x0, 0x1ff, 0x4, 0x10, 0x7, 0xeb, 0x400, 0x0, 0xfff, 0x0, 0x4, 0x9, 0x101, 0xa, 0x7, 0x341, 0x400, 0xe78, 0x7ff, 0xda7d, 0x4, 0x0, 0x401, 0xc3, 0x3, 0x6, 0x6, 0x1, 0x5, 0xff, 0x3, 0x269a2548, 0x7, 0x5b90, 0x8, 0x6, 0x1, 0x8, 0x4, 0x1, 0xaf85, 0x4, 0x10000000]}, 0x45c) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) close(0x3) (async) sendmsg$inet(r9, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001e80)=[{&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x223, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x9}, 0x1c, &(0x7f0000001ac0)=[{&(0x7f0000000080)=' ', 0x1}], 0x1, &(0x7f0000000100)=[@sndinfo={0x20, 0x84, 0x2, {0x10, 0x2, 0x4, 0x2, r10}}], 0x20, 0x8000}], 0x1, 0x40004) 5.051834347s ago: executing program 0 (id=2781): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000700)=[@cpuid={0x2, 0x18, {0xffffffff}}, @code={0x1, 0x68, {"c44215dc8c5300900000c442eaf7b277e7dfb92e400f79611066430f3880b442004000000f001966baf80cb84cadae88ef66bafc0ced3ef3f0096dd6c4c3650a2600b8010000000f01c1440f20c03501000000440f22c0"}}, @cpuid={0x2, 0x18, {0x0, 0x33c}}, @uexit={0x0, 0x18, 0x2}, @uexit={0x0, 0x18, 0x5}, @code={0x1, 0x5c, {"66660f38801d0a0000000f20c035000004000f22c00f01dfb9351001c0b800000000ba000000000f3066ba2100b800000000ef36410fc73166ba4200edf30f09b8010000000f01c10f0137"}}, @cpuid={0x2, 0x18, {0x0, 0x7}}, @code={0x1, 0x79, {"403d36d6fd90c48261bbab00700000c744240000300000c744240243d8a150c7442406000000000f01142466440f75e666ba4300b800600000efb9800000c00f3235000800000f303e410f37c744240014000000c744240225ffffffff2c240f3accd5000f017b00"}}, @cpuid={0x2, 0x18, {0xee66, 0xfb6}}, @cpuid={0x2, 0x18, {0x9, 0x5}}, @uexit={0x0, 0x18, 0x8}, @code={0x1, 0x61, {"66baa000b08aeec4e1c1541265f30fc734f0650f060fdd4e000fc75b00440f20c03509000000440f22c0c443b50c1b080fc76a00c74424000ff90000c74424020e000000c7442406000000000f011424"}}, @cpuid={0x2, 0x18, {0x3, 0x6}}, @uexit={0x0, 0x18, 0x7fffffff}, @cpuid={0x2, 0x18, {0x7, 0x7}}, @code={0x1, 0x92, {"b9800000c00f3235001000000f30642e410f060f01d13e26430ff3dfb805000000b992a419800f01d966ba410066edc744240005000000c744240200900000c7442406000000000f01142448b807000000000000000f23d80f21f835400000c00f23f8c402f5475b0048b861440000000000000f23c80f21f835040080000f23f8"}}], 0x338}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) poll(&(0x7f0000000440)=[{r2, 0x1}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x8}]}}, 0x0}, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x4, 0x0, 0x3, 0x1d, 0x100, &(0x7f00000000c0)="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"}) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 4.442132453s ago: executing program 3 (id=2782): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) 3.70517766s ago: executing program 3 (id=2783): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setreuid(0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r2, &(0x7f0000000600), 0xfec8) recvmmsg(r2, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140), 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0xfffffffffffffe63, 0x200ff8d}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 3.527591562s ago: executing program 4 (id=2784): r0 = syz_usbip_server_init(0x2) syz_usbip_server_init(0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="3a9aeda12998", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fa0008", 0x18, 0x3a, 0x0, @remote, @loopback, {[], @mld={0x83, 0x0, 0x0, 0x9, 0xc034, @mcast1}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x5, 0xffffffffe95bf9a6, 0xffffffffff, 0x3, 0xfffffffffffffffc, 0x2, 0x9, 0x100}) msgrcv(0x0, &(0x7f0000000340)={0x0, ""/20}, 0x1c, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') r4 = socket(0x15, 0x5, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201fd0b24019f3a010203015ec0c1c74b69cbff0902240001040000000000000002c55bef000905ad16000000000000cb6a9929299bfa1c76f19d2f3a384695083d4ff2f5176b19b54f579e2cf3b5944832bc1e6485731613aac685cb300a5ea44c17a217df93bb9b6d4618529c85c68cc3767dfcd66bca43bfd6e298327f9d10262537d1dceb1bb1ba4f203e33618ac256"], 0x0) connect$netrom(r4, &(0x7f00000000c0)={{0xa, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) getsockname$tipc(r4, 0x0, &(0x7f0000000080)) r5 = epoll_create1(0x0) io_uring_enter(r1, 0x7c7c, 0xea05, 0x4, &(0x7f00000002c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000040)) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0xd0060, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r6, 0x100000000) syz_clone3(&(0x7f0000002340)={0x828080, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x6b, 0xbe, &(0x7f0000000000)="893698aeffcc14c7e6329ce1d1042bf69b28be44a46f2d75a3edf365179a0a7f67887684914d0db083a75f6802af007f252ab32b1a391e46c1f965864ff6be322b896bd8d61ca60976319403ed72d963b5ba11c9a96e9df442f2eb71ea4f40bfb25c45f0f68039cae3ed57", &(0x7f0000000080)=""/190, 0x9, 0x0, 0x11, 0x88, &(0x7f0000000140)="25a78363993ed6d4f1160034b3c85cc250", &(0x7f0000000180)="fd716f2345765373ba60ef5de897ace9f95820394b4b3e21ea1ead1be516829f8ff0d29518dfe426acc83db258d7d0b9aed1a22db62e97084f57fc8159842b754423b19f1387d8177ec7164e8d907fa15e2760c550b8b15854082feccb8b8c9615b529e7fc61b97dde0a520771e43d6946bf1e1db1d63f676b733bc3bae4be5c67411548931548bd", 0x0, 0x0, 0x2}, 0x50) write$usbip_server(r0, &(0x7f000000a100)=@ret_unlink={{0x4, 0x7, 0x0, 0x0, 0x80e}, {0x905}}, 0x30) 2.847136367s ago: executing program 1 (id=2785): syz_open_dev$sg(&(0x7f0000000000), 0x8, 0x20000) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) (async) sendmsg$inet6(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x3}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000bc0)="8dca5db19589f4a6b054d3bd379c482b1074c7ae9e5ad4a27575d5fec4bc4e5a2eaeab67c1b1f05bceed3b086b6db8e6ee5920e42971ac1de082139a3f6d1ca5f1cde56fe7835f2b1c62f28fb68f2349da16be5dc50da5939d9e6ace7a5435db679cbbaedf6cd1082688a1979d076294002dc28bb78ba1bf9bd0ef2262a9a3067becb34c59697c427cc2334340386f481d4818c9b6e67d1cd436806e60dc1b0251964e75ef4f1173cc7f6459108aa57fcf67213f0560183c873e0345c021b87cd97d152701247eb4378c64c9839d5ceabe39a3f6ffb8e593e5c747e5d2bdeae351e6d395343b1a0fc4a39eb734b2ccfc2c927f7ff1f2b710d85f21c6d01f9fc2fbc6394d63340d709066142319771c8dbd518162ade7cded11664eecc94830d4947a77f2a4bc1ec86d21bda84818da9bddc35ea75ef5b666a8ac50424fc82bcc913832a93bee23a1dc899eb9854ad05946921f0fa1849d56f750afab37d7e90f09cbf9c689e9c2d75c3a74601a65c590fbf9ae6ed9b0a6289d733d9794b0d043f17128c66f4ef6eaefa4970ec416448fc4adcee2c89ac38db5c61413f0032e7952a90789f4f13e05e3a51ce6f88178c348cc2421744b76c8363119a28ddd0ab65a7831ab9685b62385d0402ce4ca1f77af4f867e103536084f44f39b1aa4814b60e346572de498cf9cf0e53732d1a0a160febe259f9c32ffc5e843cb4432dc67f3893f56990aaccb77a0065b5e7295717742e270f83f36fbbb038b69180b2e79210a5b4744291e6e2cc2076967cd030ad0299a9153498c434798058c2900ff1d4846c7f09e4552a3e47cd8452ab364412e8cfa04082630ceb82baafc906bf65d24a343b498962a4eaaca0de7488002fa84d17a98215e8b384c3239381d68bff43ea7606f1fc90c7515d87ca9054c97be9c115652371c6cd66d033ed77ce1bb355da91db56628c5dff0a856cba3134c088f1106cc969a84dba44d74973a2d5de05f037b048e46539c51d7c8b7a9ef720ae31d03e837384451f475f3a2d688d09a63639ce0e88c78b3ca838834d489ec9e9478adfc3dab006d061c5f46144dd3f238af74ad74b010fe7f29425456e9b2acce15c844b6b24733097be6c67d16ef6eee8c6ae39477f36e8820cd0e0774f6ecb2c5015b002abd043573a8da2652b055f1a3becfcd6d5850e6e550393ef5fc2bb0c8c6b8e356562b020642a964ca765f0868da5e391696c134cc4ec473acf8b3aea505f19b65833cb4f9b6d62f78549774fbc31e544026f9590ada8151f8049db79c4ebf65d530b421661bcb72301929f7ceba92405bbd48600bbcc4214d3a02c77cb8be39037fbc309f548da28c2356d489d88fb55971e11618ae8ffc00bd58d90e7154b5346ef1108e6f5c677933637c0be373362d2234f68b83b7b91a1894483246647aac1a2e7adf96783702023f489b02a2ed7cb0e413230357c78c101cbe5dd1e8f8eb79472f99cbcf31609f0d24ffc05eca6dd5cc044aa7cb919c8e9fbe750b7a19cb7f43b27cbbe8b388c056d0f81d2f3f99fa59f51babdaabc7f31154afc85d6cff6d1e382ab1946c1a5df0b4ef1e60c39021cdcb0862a01cfa3beda2ebd8d39d6f1252c5c03667d0a12519be0aec4a1ab9d4afffbc621da3338324c00f8c1767e1836e925e97048150154ce47f8ded04b7781531f9ac467fd67247b5f1d3c3b8712976730b074c2f17ab5ea60b30515564512a873d879c0ea487a8274e21f9ee4191be144f51ccf8bcf5fbff3a7e901ec1a984ca8c3874a9ff38cf75d35e1a8fa2048f3735620098754f753e65e7ac8d408b0ad6d0aa398c840b92504e68993c7258543188ba3e85246d701f3a615f2e4c87ca1ff85075bfa36a832a27e8f8960fbfc942f7ed7d536136f2025a55f307917f49c63bb08f719f2754cf7df55bda400600765461bf277fb92cc0c85d3d0e7cfdec477a7e077d1fc62c057c34d5120ac42b48b1cfdfb70b692a790ccf6d4a91dd9b7292cf3ddcc68ed7dfc066ec74d8be0a23a797896f548975c77ede5985c0316a54e298d5fa7e7bc614aa3871435ae27b1b73a31110f5367bb090500cda4f325d42c2d07af827cb5a04abfcccb7d8a106233d14b615623bfca3eb6c7639153aeac9efd1a2c4fc59ac984ef9e3664f76cbeae558aaa5c3282f9e30659e764deb659bf3f9844dd37717f2f72421b00cfdbbaa2a5e4cc6b0dadf1c28de1df2ae546e6de017b63e427d467e918e16949d3d98598e55b8eef207e78f0d9b1e26b944b555c5aea6986cf67f2448bfd09f22bff9295db3e89274de6ff0d120e2d78b241a2379ac294b389b788991b1562988c42c85134ab0671d2deb2cc6dbff43e8d7c876f07d607b45aa279f8587e938cad490172d7b82c69c1d5ecffcf0a5866e32b326ce8143506365dd2490dc4a58f2de6a94057605f0586e30b6330afc016428ad847d13bf0b4ce3d8668864ee7ceca1f71e7829a11c1d418964f0f517858c88a0c3865bb8ea9986fc0b3002d457bd83cc4960f353f3da493d2c263bfe9adf64a7c4962bd780170bde2171f41e0f9fc35f71a340289bf8321d2223497986013684f931c76cf14d58022e3d22cc5f836d68bebead0f72343e7d81fd22add83d2108249102ffb727c27cbaed282ac12b487bebb8c6471be8e235e50cf44d102b2c96cad3973f6c9e072fbe586a5c552fe056a2deb7324db9a8bbb2eaf1e0a2b153e324d6880a54d2a0571314be710e03b219c0636ed0c2b237ac81f4798f7bb8149bcbc8bded21edf1ecdcc557cbe68c6ea807878da9c2099026a582ceebc755df26e5130df425b78474adea091d07c590715f535dcbca74765de535f5ae7f5988138aedb50567aaf4204acadd6af04496ab475a10cb0c730e4e7aea8987948927d8afe236eed26fa05ee764977e597c5a801b67a83ccdb692bb6f717ece6d42fd0621411d384f665236c91fef005227085ac10de8ddcf2d4afbee9ab45ce1996d36579061710bcce1d7cb7be088fc4f080ced7d3ca7c2e05660ad208b9e78ad90e46fe43c131b93ffd42d092ea4590ee7d6c129205eef477e23589c765c0ba99e4d37b995f675cb00274c4101857de049ac717a8e77fc5bb92f65ae33e42a52b908df6f0a063db9315cf441c418b13bb23df97eb05061005de1befca72f560ba79222b4b0d9e15e8119b856d8f8738b8264392fc3741252a3b03a88ea4d06de8d0662ddb4d811749b15e26d1f2e7954ea9f41056f7ba28509c41d3a7063d822f7bc7ac99d602e725032df5735e27a73f4bcde25e72746409f5692f26098e3812adefe2e27b388b18ff943d35ffabb0e391b7e4be23a5691f0b727bf36758cdac7cbe11dc5d2765529552bf16f0c1a6566b7964be3544c55090dfd07797a6761f7cda31954bcbfcdbf78d2a13f9b3e3b0c0287b00cd80c4db022f77682b4a69092e008889611ab474aac617a69d5e078125d0ce4c9072ab34881246eeedac39ee96e3e7479459ebfd8741d8dd9f51073cea4c0a5b626ee1fef1668e98ed544ded17c1090be1def692f1b3a2859fd5e36624970d9e6fe92891a3404a9367ba9c76ea73ac2391746b2aab6c4f9faf950b9f84e69d0ae768a48211d0a5bfd9ae68df0b567fff290699371e589750557f046cbff440872606abe98f6b5ae42fc385999d9cfeb1a0ddfcab54d419b10685d73f38a325bfaf128ff0e752f3982df544322c40834504ae44bb23a82042926b922860f26f1e8d24584a4a33fb5780496413e1599cd39b5c4edb3f1729486d3f7c2e112354b56227352892ee9516fadde3c422e44a5e85c3e5e837a41e677d4dbaeeb54eef066653ff543384716d74b6f4eaf69ed6d56d4d40b8a14fd04f7ea29cbabd6eb7a1b3b26f5208595a92c51a2a0573e88fdb9d1b9eef41c1f968de8e32bb593a631eeae656d8d87b8b08564a6fd84990305cf5bca93b16675062eb35cf274e021c9393673ffe20f65f8de244c09c1d7bd74d6eb30bca5165fcf74afd599cae934184f5490c7752fe131a45c6298d8edb3f5e153beecd8504c8ea6b688bbbed308935f2c60827befd52ce81646eb7a5567e6340b65c414f0e24e68fb333ee263c978b0f2cfed0fcf75f3680149b0df00d8c452164496b784fb7598f3778afe1c3b81f47ff6634445e4d32d695521a1df415cfeded3034bcd01494c2abb1758c07926df3eed2f16aa39775c03afa37acd71b3c3dcbb684b6f29b622f1b0d60545b4d0c2a32add19881c777f5f4b20994ef03f37da09e56df227d4446b8dafa2dfee95d5c51f6a10ec93a24b3478760cbd1c3d439af6af19ef02218665ddb85a907ecc0dfa0f1314d5d563e0f1524560b2549b0fd7f54c74009d3eedee981bad827c739ac50a1fd20dffeda5b88da716db7af2353ebec0e3af583b2e0392c4e249c79af474ddd820dcfa83094f7df762f99542aba5df0a3840e8cf2539d03e39e425155dbe5487e11f4cdfe84f8823f44a62bc09198641d399447a4a594815af23084a24bcd5dd8c6c323d72d04c1163cd07558fd34aabb086e1f43b8add48acd33b3b4d26dee1787a068428a16ddddc61f5ca71c4899f6a98af639e152636b2a1be59860960600c8b25a2bab933eeec9f12ee868690decf8b1ca24a76212c32cf994662ab2c93145744968122a8cfdee684d7f11424a3e452d30a7726e364cafaae82a382903ae76105d96cf5b48c2248fed4a1e106992711dacc4d09bdfd1c4c2d6fd735cc15d209a9ca90908ef059367f364553b4ff3cf2a48dd588e4423abc0c68a19aab4b479b5fdd9fd500175ee54e97f6be078f3f95e228376642f1d784c2ce791ea5c21a9e38c6f471439116f658fc008d7af99d40eec08ebde8520d2863b2119ae1fb70b5cbe8d6adf121026318ea9ee3a8ad2ed9fad9f4fa8c0be46c616782ef55c69b86b2ca0b8176579e13b96f46b3eaf2d25ac86e7f5ce05041a6d9a5bc41b2996fdf8b1864e7c506368b651170ca9f17e40700bd953243310b2820066d7cead423b35f490c9f97c20c732b982535ae786016a091c13d3a0090570d6415df443a4d1eca2f0d27ca5e313cae725e5feadca9111728ca1dccb9d2d618c077ccbf1f224489592c992a574c0d8c654ae01b3908f9deee361e3f31cf48cb55fb65bec5ebcf95efc14efff10056fa5003974ac53b4abde5437d8d5ba7dcb25b9205d11c6415f9c31a8aaca3a42c1fd1a56f6b19c2b8dd26b48d8cf014936af2c20bad4d079c2e93791c65fe2e871b99f0cf5ac4aac8f0faec6972d36acafd0c5f7cbcc88a285c042871f2ef0479af0c0d61f98e068356d804dbc0b03bc329172d9b3bcc121f3ab1bd0780d49ba362e2bf43828533b359d671adfc75293fd68acd46a82c841745728ee243a6ff127eafdab8289b5b05a89ad4eae8449647ae79bf031727f2669ac9322f1b176186227f289f7faed3fd816844345d7dfff095347bbebff767ceb3d2e1fe0bb858e4c49f4708aa8eab3ee6d3d04dc65c26e553ee1177742f904d8f6011deee1e18531fbd6a1f08a317bed90c16a5b2c9ebafd89dd294d13127412329dbf709b0a3a5b1543d989ff92e3fe147ccd887c8efd19cf70772843d236b826eb6437de62794c9b046760be93fab29031c5e5f9fba3bf0bc349c1ba25f0aa690cfec80d0b9b961f4cb670bfb5e6d51936a6b63ca73c747282bb323142c3f4a4b4a476dd6a794c02aa4a894d80d00dfc96fa65a8dfcfe55737ca03ef33afe9c308363ceffd8422a756d75f3d6057ef0396d1aee27126079009f2f7ec3220d", 0x1000}, {&(0x7f0000000100)="4b41865750b6f52daaf6e982bbd51926127f5cbd3a2bdfc1da39ee8d", 0x1c}, {&(0x7f00000005c0)="500a3a9308650106ff1bd6a4fe678c4904252f17e079eb321c32ddce420b88f2726810d2d0527e7923c0efd44531de519d4bde7f7526b7359cae5a56c1e1eee733e003e406992136fcbd707b423f69ee46a7b1dc86bc662820fcb8c13db7990de0f62fd3d57b37e6d822ac8d360159b98df6754c2ef2e9c415053bf6b9d49beb511b4f5ff5b58bf3547e6256ec1cefea0d5d4727ad6b14f3f99c83701057306b1d170e07f69398ed9796cde5cc0a66ffd8d637826a1187833652f69c743b9459e5d4a4891417974643d765e8bc2bf88899f53639cad64f89f12a3e7efe628319aa6009f3a1c2", 0xe6}, {&(0x7f0000000180)="98be854778e6d48fddfb7d4a8167e49168760808bc6c9321a6e61a001f1deb2243606ca2e73587934d7f64d3dff0ce4ca7475abb44da1a2c48cb2e295e29c6eb44ce38d3eaa55ddc5baca71a7fcb3d7d3be7e23bdffb1080b962400598a6e0d51c5c", 0x62}, {&(0x7f0000000300)="4a321c905e03d59bce9df5bcb4d74af6114bec52600ac14b5bae30ca8b6300248b695ba65356b92969485e4c513ddac6626a977b148da04eb054e41da853b593e1b190", 0x43}, {&(0x7f0000000200)="0ece525d8826b089971046cbe2170deacd5ebf528c9996b2aff29efd44a5dffed9928a9f601cd3f0514f781c4256bd5f1633c2cefa413b35489e3e", 0x3b}, {&(0x7f0000000500)="735fc405d3cbe35e79c4f263bbc8751ac6f0f22cca1af1fc259dec4ff5ee840d2a7dbae9ea973a85adebc592c4301bfdb4a2120bab0c8d26408409e886db397b33e21956", 0x44}], 0x7, &(0x7f0000000740)=[@dstopts={{0x98, 0x29, 0x37, {0x2c, 0xf, '\x00', [@ra={0x5, 0x2, 0x311a}, @generic={0x80, 0x1a, "70de8fa35fc8f66a08f046a39dc2a81ee103f7d074f9e7742569"}, @calipso={0x7, 0x30, {0x2, 0xa, 0x80, 0x8, [0xd, 0x93, 0x4, 0x3, 0x1]}}, @jumbo={0xc2, 0x4, 0x80}, @calipso={0x7, 0x18, {0x1, 0x4, 0x10, 0x9, [0x4, 0x9]}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}], 0xb0}, 0x18010) listen(r0, 0x0) rename(&(0x7f00000020c0)='./file1\x00', &(0x7f0000002100)='./file0/file0\x00') (async, rerun: 64) r1 = socket(0x28, 0x2, 0x0) (rerun: 64) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000f230727962c20caa0af2aa0805df4e445bd469ec02030109022400010000100009040c0202c17f8a90cc070000002b00"/63], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) (async) setuid(0xee01) (async) r4 = getpid() prlimit64(r4, 0xb, 0x0, 0x0) (async) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000b80)={0x34, &(0x7f00000009c0)={0x40, 0x11, 0x1, '$'}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r3, 0x0, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, 0x0) (async, rerun: 64) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x9}, 0x8) (async) close(r1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000100000300", @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e0000000004000280080040"], 0x3c}}, 0x0) 2.623151597s ago: executing program 3 (id=2786): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000040)="ceca5b1b45", 0x5}, {&(0x7f0000000080)="3265a7b894db605ec76fb0be6d47eb5a1f8c9f02fadc582cd098b7956cc94584677b239f927d14856f7659160b9dc7e3d2894ef7068b52636421369a27c644bf7c1f59ee634629f97a97d8bed31c61bc37f061e029544399d4e67953391b4ea31ac3f399ace26822706fe86accfed513b9ae8c0ec8e63a1bf3660fa2502ed60229f1f558dd70bd9ee98527a7b1b7cd900c5078e76f6dab0fa23d96f1238b21aba04266e39f210e12f34ce2baf1a81c5ab3b9bc3cfc1d013c5f0ec8f26064e047ea0ea46df614d6f8f973d59ce0b0cadfc794abce", 0xd4}, {&(0x7f0000000180)="c45e5def4d5cdfa7d215b5213899b3773472491a67cca50ca3dff4cb69a412cffaa397a29f512c16878d80307cf5ea67cde8258eea3c4b2f8d98", 0x3a}, {&(0x7f00000001c0)="41dea52e76927e9da8e8b73a8db6737f695a74c69f522e3ec12068967a0d60e345489d1a6b5ca4b64ab8f554427a7f26a627a478c5544e686f6f7ac225d875650faf1beb649852ddc698cfed39f6e69ce00a3884e0f3b40920dcf0044447cd553ec3a52596634afe15b318697a85b04f", 0x70}, {&(0x7f0000000240)="5daa8a66fabec7bdb5fe39aa89112062fbbc03c3972f314bbcfd791f1e852aec24ae9c4a2f502f48b0febeb97444a554420614a820e7a34b61bfb2e0f7339efaaefa6be7c75b44dbee41629c4740b8eaf109e32e4fde07", 0x57}], 0x5}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000340)="fe4c4fc5cecd20b13c6770ef863df643b2f9208c14c8484398784fe726e3504c01a3e2", 0x23}], 0x1, &(0x7f00000003c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x97}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffe}}, @ip_retopts={{0x50, 0x0, 0x7, {[@ssrr={0x89, 0x17, 0xf5, [@initdev={0xac, 0x1e, 0x9, 0x0}, @multicast1, @multicast2, @multicast1, @private=0xa010101]}, @timestamp_prespec={0x44, 0x14, 0x6a, 0x3, 0xd, [{@private=0xa010101, 0xff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}, @timestamp_addr={0x44, 0x14, 0xa4, 0x1, 0x2, [{@multicast2, 0x26}, {@broadcast, 0x2}]}, @end]}}}], 0x80}}], 0x2, 0x200000a0) shutdown(r0, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000004c0)='macsec0\x00', 0x10) ppoll(&(0x7f0000000500)=[{r0, 0x200}, {r0, 0x10}, {r0, 0x1}, {r0, 0xa124}, {r0, 0x480}], 0x5, &(0x7f0000000540)={0x0, 0x989680}, &(0x7f0000000580)={[0x8]}, 0x8) r1 = accept$inet6(r0, &(0x7f00000005c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000600)=0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000640)={'batadv_slave_0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000680)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) connect$pppl2tp(r2, &(0x7f00000006c0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3, 0x2, 0x3, 0x4}}, 0x26) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r2}, &(0x7f0000000700), &(0x7f0000000740)=r2}, 0x20) syz_open_dev$video4linux(&(0x7f00000007c0), 0x0, 0x81) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000800)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$inet(r2, &(0x7f0000000840)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f0000000880)='lo\x00') mount(&(0x7f00000008c0)=@sr0, &(0x7f0000000900)='./file0\x00', &(0x7f0000000940)='sockfs\x00', 0x2, 0x0) inotify_init() r5 = add_key$user(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, &(0x7f0000000a00)="9a1af913d73ac9b91152689566d9be47b044f3bc8ad78b1020f483e5c76bcaae826c95cc011590b75d3cc1b2dfe99b967e68fc386ed82bfdc0a54266a1445319292728277662b093f611c62dba4ed897784f2ab1f30add47e88635fea256295c1cd3fb68913bd5085f73e836c502f9da822716a3ad8ba4769a708e2cb8616c3a26c6a0ba2ea7519ed3f7ab9281c024defaaec56cccc518cf3bae40fe627713bc0a4516723457a162f50064d9004252af3a04490918dc328502cdf8453671b567840cf403fd8060215741e8ef7a", 0xcd, 0xfffffffffffffff9) keyctl$read(0xb, r5, &(0x7f0000000b00), 0x0) r6 = openat$incfs(r2, &(0x7f0000000b40)='.log\x00', 0x6d80, 0x1b5) bind$rds(r6, &(0x7f0000000b80)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) io_uring_enter(r6, 0x69fe, 0x519f, 0x20, &(0x7f0000000bc0)={[0x5]}, 0x8) getresuid(&(0x7f0000000c00)=0x0, &(0x7f0000000c40), &(0x7f0000000c80)) fchown(r3, r7, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r6, 0xc0a85352, &(0x7f0000000cc0)={{0x5c, 0x4a}, 'port1\x00', 0x4, 0xa0000, 0x4, 0x1d, 0x5, 0x6, 0x0, 0x0, 0x5, 0x8}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000d80)={'wlan0\x00'}) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r6, 0x2, &(0x7f0000000dc0)={0x2, 0x1}, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r8, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x1c, 0x1402, 0x200, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4040) 2.567597663s ago: executing program 5 (id=2787): syz_open_dev$radio(0x0, 0x2, 0x2) syz_open_dev$radio(0x0, 0x2, 0x2) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x30900, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x1, r2, 0x0, 0xfffffffffffffffd, 0x3}) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0x98f900, 0x800}) 2.478748985s ago: executing program 3 (id=2788): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$inet6(0xa, 0x6, 0xe8) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x5}}, 0xffffffffffffff0b) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {0x0, r3, 0x1b}}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f00005dc000/0x2000)=nil, 0x2000, 0x4) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) socket$inet(0xa, 0x801, 0x84) r6 = fsopen(&(0x7f00000001c0)='proc\x00', 0x1) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x8001) fsmount(r6, 0x0, 0x0) fchdir(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) 2.383985421s ago: executing program 5 (id=2789): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setreuid(0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write$cgroup_int(r1, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r3, &(0x7f0000000600), 0xfec8) recvmmsg(r3, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140), 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0xfffffffffffffe63, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 2.364460797s ago: executing program 1 (id=2790): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140), 0xa}, {&(0x7f0000000300)=""/225, 0xd4d5}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0xfffffffffffffe63, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 2.273438765s ago: executing program 1 (id=2791): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2f) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6tnl0\x00', r1, 0x4, 0xc, 0x3, 0x6, 0x0, @local, @mcast1, 0x10, 0x17810, 0xfffffff8, 0x9}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000002060500"/20], 0x50}}, 0x0) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'veth0_to_team\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x0, 0xffbfffff}, 0x10) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xc}, {0xfff3}}}, 0x24}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000005c0)={0x56c, r2, 0x100, 0x70bd26, 0x25dfdbfb, {}, [{{0x8, 0x1, r1}, {0x1e8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x71}}, {0x8, 0x6, r1}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r7}, {0x1f0, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x45}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r1}, {0x4}}, {{0x8, 0x1, r1}, {0x4}}, {{0x8, 0x1, r1}, {0x150, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x56c}, 0x1, 0x0, 0x0, 0x4060}, 0x4000000) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r1}) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r11, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r10}) 2.145274516s ago: executing program 0 (id=2792): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'macsec0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xd, 0x3, &(0x7f0000000480)=ANY=[@ANYRES32=r0], &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x5b, '\x00', r1, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102384, 0x18ff0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x40000000015, 0x5, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r5, 0x82307202, &(0x7f0000000b80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010008000300", @ANYRES32=r8, @ANYBLOB="050034006e00000008000c0008000000"], 0x2c}}, 0x200000d0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30}, [@alu={0x4, 0x0, 0x9, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x28, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x83}]}, 0x10) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) syz_usb_connect(0x4, 0x36, &(0x7f0000000480)=ANY=[@ANYRESDEC, @ANYBLOB="b5174f"], 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) 1.868076667s ago: executing program 5 (id=2793): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) 1.606232858s ago: executing program 5 (id=2794): syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000a13de30840205029f1850102030109022d0002000000000904210001d553e5000905060500000000000904000001f238b50009050102f7"], 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8112, 0x80801) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@security={'security\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x1d8, 0x1d8, 0x1d8, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0xffffff00, 0xffffffff, 'veth1_to_batadv\x00', 'veth0_to_bridge\x00', {}, {}, 0x16, 0x2, 0x60}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x7, 0x1, 0x9ea}}}, {{@uncond, 0x0, 0xe0, 0x140, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x1, 0x4, 0x8, 0x1], 0x0, 0x1}}}, @common=@addrtype={{0x30}, {0x8, 0x14c, 0x1, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x6, 0x4, 0x4, 0x5, 0x1, 0x1], 0x6, 0x5}, {0x3, [0x0, 0x2, 0x2, 0xa, 0x1, 0x1], 0x6, 0x3}}}}, {{@ip={@empty, @remote, 0xffffffff, 0x0, 'pimreg0\x00', 'ipvlan1\x00', {0xff}, {0xff}, 0x2, 0x1, 0x2}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@addrtype={{0x30}, {0x1, 0x400, 0x0, 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xfffffe01, 0x8f, 0x1, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) 1.352300934s ago: executing program 3 (id=2795): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1a", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) capset(0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1.135620093s ago: executing program 3 (id=2796): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x3232, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x80, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xf5, 0x5, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xb, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000440)={0x2c, &(0x7f0000000900)=ANY=[@ANYBLOB="200f41000000410e23fb651129b5236a8e052afe2a523f93fa4745a3a3de98a9f20d81926efee9acdf76e7e40f1a0c2995c64f1987f8ef4f434a84c266eddf82b2bd89a901bf6ddd80be4fd00050b49a"], 0x0, 0x0, 0x0, 0x0}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r2 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000002140)=[{{&(0x7f00000005c0)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000640)="4d0713f9053c446dc3c605c83298a2b052d308ec703696f924d519", 0x1b}, {&(0x7f0000000680)="e7f711faf4891ddf1420ea25f4a6e6435c5e79035bcac1135a4e3c39fe6565ba7d7695f0aebd8e58ce505e97d41de43f7550ad797944cee131657ad05c3bec622fdeb8c2960b461831e9f1a5efd02a6b93cbf99a603e03b29187134f776f7c39380ed02c540d95bf10281747831322e2f0974bebcbb6e6274a98a5bef71dbc899cca397f1c2377fb66ebac6a9ab8", 0x8e}], 0x2, 0x0, 0x0, 0x40080c0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000780)="c6c73382c2fe863d4c2aca7be4678660839de3ffa54054906760ac281f05ea904387a41b13c82b2f3cbfc598f72adb10bdc4bda4a9751e87019990c27abbef2968371e8dbec19bb2f206b27bc8bc706abe2fd2ebfc781b6df508b6cff7a113", 0x5f}, {&(0x7f0000000800)="6ea4f0d173486a9c5b837a154f7a5dda6a77db3725f6bb9a7f806e7b34ed06db72664f440f85f305d4217d13dfd0c7b7b466bea8eac01cca8556ad71159b6386609726ffc73b9a7827fafc46094303458861dd744da116d938c2b4ebe8f646eabd4f49254aaacfe9294fbad5d55fce4e57f09c963463fd1d62da4acabed1dd90d5ed5ccc94201ab31a6deab9c5", 0x8d}, {&(0x7f0000000e40)="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", 0x1000}], 0x3, &(0x7f0000000980)=[@cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x40}}, {{&(0x7f0000000b00)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000000d80)=[{&(0x7f0000000b80)="68dd47496c4ccc17c509", 0xa}, {&(0x7f0000000bc0)="df4552ede64d8d63dae8dd065437aa079e8293246430ebc9eda38ec9f632fdf8a50bf2946a3ae8ea5f43f464925494673150f7040920dac9356ed5f97723e512da0faef0b4630628509e7fce4a9b581d0f23811655a665b6e9509da98f7e19f0c3d59995004b0fde2145c8effd996d7affdb8abcb89539ac4eb62f2ff907c1b124504f2189b34b", 0x87}, {&(0x7f0000000c80)="7867ff33a4af7943ae575078f0180d0ff8b1153add06367c9263a0faa744a44e03704d4e4bad7f03d02981cb51477c4a89134d183d6e3fb9f9945eb8665a8ead08e9a3355837a0d86adc9ac5e862c9e0f749eff3dfdb67b4b41bf702d1a75e6843c0b13514894fb27a23975013fea6a226142b5c6649fe98", 0x78}, {&(0x7f0000000d00)="0a2b39cc0d9ab48eae75ae6cfcdb6d850b09931dae9468bbf477e92d178c11cbc07101d6d764c28328b30725bff9b1910e71a480ee40a44fbe09659ab2c336fd89e72eca1ff474fa74873c06080e486430ea7fca9f38192fcbec4798147bae4f5313c76ebd5c45229ca2e0574a1757e2de467f00e35d146dae9d04656d", 0x7d}, {&(0x7f0000000a00)="9e3a22d22ffaa744850872ffbce2934bc9417845f363736ebcd09975469855530cc9d2c10e70043d90109f57b836ad488cdc292f728f2a6981489af62d69700bbb72a4359534812441df6fd7483652fce73ad2ae49056dbc565d1de9fb8fd33f49c0a4d4961dea7610b3c1497bd56b8f988c1caf9cac88f77e98afd19ef868935f938899d795", 0x86}], 0x5, &(0x7f0000001e40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000001001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r2, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r4, @ANYRES16=r5, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32=r5, @ANYRES32=r5, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0xf8, 0x80}}], 0x3, 0x4000041) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000080000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2$watch_queue(&(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r9 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r9, r7, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) r11 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r11, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r11, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x7ffc, 0x0, 0x7, 0x100000000, 0x0, 0x4, 0x8, 0x0, 0x0, 0x7f, 0x3cb7, 0x0, 0x8000000, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000000, 0x100000000, 0xffffffffffffffff, 0x0, 0x100000000, 0x4, 0x4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x6, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xdf9cd8e, 0x8000000, 0x6, 0x2, 0x0, 0x0, 0x0, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7ffffffd, 0x0, 0x0, 0xffffffffffff2328, 0xffffffffffffffff, 0x3, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0xb, 0x1, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800]}) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r12, 0x8982, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0x1}, 0x2b1}) 1.120620211s ago: executing program 1 (id=2797): mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x9) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000540)={0xc}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca90000c000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020}, 0xcb0a) 163.864931ms ago: executing program 1 (id=2798): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000200)={{0x33, @empty, 0x4e24, 0x4, 'none\x00', 0x2, 0x7ff, 0x23}, {@loopback, 0x4e20, 0x2, 0x8, 0x2, 0xfffffff8}}, 0x44) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000040)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x0, 0x2}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r6, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)={0x28, r8, 0x1, 0x0, 0x4, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x6, 0x4e8d0, 0x107b9c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000004c0)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x8, 0x20cc7a, 0x60cd2}) 0s ago: executing program 0 (id=2799): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x200088}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) kernel console output (not intermixed with test programs): r parsing attributes in process `syz.4.2316'. [ 792.471722][T15320] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2316'. [ 792.491267][ T10] usb 1-1: USB disconnect, device number 100 [ 793.086109][ T5874] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 793.344612][ T5874] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 793.831136][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.845373][ T5874] usb 5-1: Product: syz [ 793.850053][ T5874] usb 5-1: Manufacturer: syz [ 793.854784][ T5874] usb 5-1: SerialNumber: syz [ 793.861953][ T5874] usb 5-1: config 0 descriptor?? [ 793.873948][ T5874] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 795.117893][ T30] audit: type=1400 audit(1750616959.880:1332): avc: denied { listen } for pid=15345 comm="syz.0.2323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 795.143191][ T5874] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 795.162463][ T5874] sq905c 5-1:0.0: Get version command failed [ 795.172983][ T5874] sq905c 5-1:0.0: probe with driver sq905c failed with error -110 [ 795.437771][ T5875] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 796.026134][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 796.318737][ T5875] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 796.441755][ T5889] usb 5-1: USB disconnect, device number 102 [ 796.455866][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.478995][ T5875] usb 4-1: config 0 descriptor?? [ 796.553405][ T974] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 796.703340][ T974] usb 2-1: Using ep0 maxpacket: 8 [ 796.714936][ T974] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 796.723190][ T974] usb 2-1: config 179 has no interface number 0 [ 796.733873][ T974] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 796.745155][ T974] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 796.758822][ T974] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 102, changing to 10 [ 796.770358][ T974] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24624, setting to 1024 [ 796.786069][ T974] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 796.799751][ T974] usb 2-1: config 179 interface 65 has no altsetting 0 [ 796.808470][ T974] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 796.825399][ T974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.848684][ T974] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input104 [ 796.898741][ T5875] keytouch 0003:0926:3333.0047: fixing up Keytouch IEC report descriptor [ 796.922315][ T5875] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0047/input/input105 [ 796.963603][ T5172] input input104: unable to receive magic message: -110 [ 796.971483][ T5172] input input104: unable to receive magic message: -32 [ 796.984566][ T5172] input input104: unable to receive magic message: -32 [ 797.019981][ T5889] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 797.035879][ T5172] input input104: unable to receive magic message: -32 [ 797.044167][ T5172] input input104: unable to receive magic message: -32 [ 797.071568][T15356] input input104: unable to receive magic message: -32 [ 797.082363][ T5172] input input104: unable to receive magic message: -32 [ 797.183592][ T5889] usb 5-1: Using ep0 maxpacket: 32 [ 797.205811][ T5889] usb 5-1: unable to get BOS descriptor or descriptor too short [ 797.266344][ T5889] usb 5-1: config 12 has an invalid interface number: 184 but max is 0 [ 797.318894][ T5889] usb 5-1: config 12 has no interface number 0 [ 797.331986][ T5889] usb 5-1: config 12 interface 184 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 797.360128][ T5889] usb 5-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 797.375974][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.390320][ T5889] usb 5-1: Product: syz [ 797.399184][ T5889] usb 5-1: Manufacturer: syz [ 797.407350][ T5889] usb 5-1: SerialNumber: syz [ 797.512475][ T5875] keytouch 0003:0926:3333.0047: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 797.654309][ T5875] usb 4-1: USB disconnect, device number 84 [ 797.798981][T15367] befs: (nullb0): No write support. Marking filesystem read-only [ 797.810821][T15367] befs: (nullb0): invalid magic header [ 797.913952][ T5854] kworker/1:3 (5854) used greatest stack depth: 18200 bytes left [ 798.140696][ T5889] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 798.186600][ T5889] usb 5-1: USB disconnect, device number 103 [ 798.780415][ T5875] usb 2-1: USB disconnect, device number 105 [ 798.780414][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 798.831858][ T5875] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 798.987668][ T30] audit: type=1400 audit(1750616964.500:1333): avc: denied { read } for pid=15397 comm="syz.1.2339" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 799.014976][ T30] audit: type=1400 audit(1750616964.530:1334): avc: denied { open } for pid=15397 comm="syz.1.2339" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 799.734055][ T5889] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 799.754202][ T30] audit: type=1400 audit(1750616965.270:1335): avc: denied { write } for pid=15407 comm="syz.4.2342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 799.775916][ T30] audit: type=1400 audit(1750616965.270:1336): avc: denied { ioctl } for pid=15407 comm="syz.4.2342" path="socket:[48586]" dev="sockfs" ino=48586 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 800.325126][ T5889] usb 4-1: Using ep0 maxpacket: 16 [ 800.397208][ T30] audit: type=1400 audit(1750616965.880:1337): avc: denied { bind } for pid=15408 comm="syz.1.2341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 800.556307][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 800.694433][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 800.727983][ T5889] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 800.742616][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.791607][T15417] Bluetooth: MGMT ver 1.23 [ 800.877137][ T5889] usb 4-1: config 0 descriptor?? [ 802.127971][ T5889] playstation 0003:054C:05C4.0048: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.3-1/input0 [ 802.157854][T15430] netlink: 'syz.0.2348': attribute type 10 has an invalid length. [ 802.183656][T15430] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2348'. [ 802.316625][ T5889] playstation 0003:054C:05C4.0048: Invalid byte count transferred, expected 16 got 0 [ 802.336949][ T5889] playstation 0003:054C:05C4.0048: Failed to retrieve DualShock4 pairing info: -22 [ 802.354509][ T5889] playstation 0003:054C:05C4.0048: Failed to get MAC address from DualShock4 [ 802.365176][ T5889] playstation 0003:054C:05C4.0048: Failed to create dualshock4. [ 803.022902][ T5889] playstation 0003:054C:05C4.0048: probe with driver playstation failed with error -22 [ 803.049678][ T5889] usb 4-1: USB disconnect, device number 85 [ 805.129828][T15455] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 805.623465][ T117] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 805.803632][ T5875] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 805.811347][ T117] usb 2-1: device descriptor read/64, error -71 [ 806.033894][ T5875] usb 4-1: Using ep0 maxpacket: 32 [ 806.109635][ T5875] usb 4-1: unable to get BOS descriptor or descriptor too short [ 806.119922][ T5875] usb 4-1: config 12 has an invalid interface number: 184 but max is 0 [ 806.130842][ T5875] usb 4-1: config 12 has no interface number 0 [ 806.138671][ T5875] usb 4-1: config 12 interface 184 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 806.193981][ T117] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 806.219018][ T5875] usb 4-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 806.228826][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.252511][ T5875] usb 4-1: Product: syz [ 806.266520][ T5875] usb 4-1: Manufacturer: syz [ 806.271296][ T5875] usb 4-1: SerialNumber: syz [ 806.323384][ T5889] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 806.344692][ T117] usb 2-1: device descriptor read/64, error -71 [ 806.454435][ T117] usb usb2-port1: attempt power cycle [ 806.493966][ T5889] usb 1-1: Using ep0 maxpacket: 32 [ 806.514353][ T5889] usb 1-1: unable to get BOS descriptor or descriptor too short [ 806.533529][ T5889] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 806.564878][ T5889] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 806.582847][T15468] befs: (nullb0): No write support. Marking filesystem read-only [ 806.591998][T15468] befs: (nullb0): invalid magic header [ 806.607154][T15468] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=20 sclass=netlink_audit_socket pid=15468 comm=syz.3.2355 [ 806.898602][ T10] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 806.908715][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.929227][ T5889] usb 1-1: Product: syz [ 806.930956][ T5875] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 806.955188][ T5889] usb 1-1: Manufacturer: syz [ 806.955876][ T117] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 806.959816][ T5889] usb 1-1: SerialNumber: syz [ 806.996239][ T117] usb 2-1: device descriptor read/8, error -71 [ 807.030303][ T5875] usb 4-1: USB disconnect, device number 86 [ 807.115186][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 807.126644][ T10] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 807.136325][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.156017][ T10] usb 5-1: config 0 descriptor?? [ 807.205147][ T5889] usb 1-1: Limiting number of CPorts to U8_MAX [ 807.216238][ T5889] usb 1-1: Not enough endpoints found in device, aborting! [ 807.263736][ T117] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 807.284035][ T117] usb 2-1: device descriptor read/8, error -71 [ 807.992555][ T117] usb usb2-port1: unable to enumerate USB device [ 808.005721][ T5889] usb 1-1: USB disconnect, device number 101 [ 808.147262][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.245886][ T10] keytouch 0003:0926:3333.0049: fixing up Keytouch IEC report descriptor [ 808.261360][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0049/input/input106 [ 808.794916][ T10] keytouch 0003:0926:3333.0049: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 808.981051][T13999] usb 5-1: USB disconnect, device number 104 [ 809.661776][ T10] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 809.714933][T15508] netlink: 'syz.1.2368': attribute type 10 has an invalid length. [ 809.725383][T15508] bond0: (slave wlan1): Opening slave failed [ 809.968991][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 809.980937][ T10] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 809.996266][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.018991][ T10] usb 1-1: Product: syz [ 810.040924][ T10] usb 1-1: Manufacturer: syz [ 810.062471][ T10] usb 1-1: SerialNumber: syz [ 810.093190][ T10] usb 1-1: config 0 descriptor?? [ 810.253416][ T117] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 810.336665][T13999] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 810.413642][ T117] usb 2-1: Using ep0 maxpacket: 8 [ 810.495058][T13999] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 810.549986][ T117] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 810.558377][ T117] usb 2-1: config 179 has no interface number 0 [ 810.564943][ T117] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 810.780520][ T117] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 811.237398][T13999] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 811.237519][ T10] dvb_usb_dtv5100 1-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 811.300599][T13999] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.313851][T13999] usb 5-1: config 0 descriptor?? [ 811.337850][ T117] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 102, changing to 10 [ 811.353974][ T10] usb 1-1: USB disconnect, device number 102 [ 811.411214][ T117] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24624, setting to 1024 [ 811.463136][ T117] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 811.548800][ T117] usb 2-1: config 179 interface 65 has no altsetting 0 [ 811.707057][ T30] audit: type=1400 audit(1750616977.090:1338): avc: denied { mount } for pid=15537 comm="syz.3.2376" name="/" dev="rpc_pipefs" ino=49010 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 811.852269][T15545] netlink: 'syz.0.2378': attribute type 10 has an invalid length. [ 811.929368][T13999] keytouch 0003:0926:3333.004A: fixing up Keytouch IEC report descriptor [ 811.933370][ T117] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 811.951660][ T117] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.953438][T15545] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2378'. [ 811.994865][ T117] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input107 [ 812.008723][T13999] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.004A/input/input108 [ 812.077138][ T5172] input input107: unable to receive magic message: -110 [ 812.118069][ T5172] input input107: unable to receive magic message: -32 [ 812.209474][T13999] keytouch 0003:0926:3333.004A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 812.879936][ T30] audit: type=1400 audit(1750616978.390:1339): avc: denied { listen } for pid=15555 comm="syz.3.2379" lport=47491 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 813.022963][T13999] usb 5-1: USB disconnect, device number 105 [ 813.034926][ T30] audit: type=1400 audit(1750616978.420:1340): avc: denied { accept } for pid=15555 comm="syz.3.2379" lport=47491 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 813.099104][ T30] audit: type=1400 audit(1750616978.420:1341): avc: denied { write } for pid=15555 comm="syz.3.2379" lport=47491 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 813.155169][ T30] audit: type=1400 audit(1750616978.420:1342): avc: denied { setopt } for pid=15555 comm="syz.3.2379" lport=47491 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 813.176475][T15559] netlink: 'syz.0.2380': attribute type 10 has an invalid length. [ 813.197340][T15559] bond0: (slave wlan1): Opening slave failed [ 813.764756][T15568] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2377'. [ 813.870460][ T5935] usb 2-1: USB disconnect, device number 110 [ 813.876521][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 813.900073][ T5935] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 814.754161][ T5889] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 814.882832][ T117] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 814.986890][T15590] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 815.519575][ T117] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 815.693419][ T117] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 815.754817][ T5889] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 815.764034][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.772021][ T5889] usb 5-1: Product: syz [ 815.792306][ T5889] usb 5-1: Manufacturer: syz [ 815.807013][ T5889] usb 5-1: SerialNumber: syz [ 815.875591][ T117] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 815.893137][ T5889] usb 5-1: config 0 descriptor?? [ 815.893311][ T117] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.924146][ T117] usb 4-1: Product: syz [ 815.928334][ T117] usb 4-1: Manufacturer: syz [ 815.932921][ T117] usb 4-1: SerialNumber: syz [ 816.225854][T15582] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 817.197344][T15616] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 817.204822][T15616] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 817.368938][T15618] netlink: 'syz.0.2393': attribute type 10 has an invalid length. [ 817.390762][T15618] bond0: (slave wlan1): Opening slave failed [ 817.578532][ T117] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 817.588613][ T117] cdc_ncm 4-1:1.0: bind() failure [ 817.598524][ T117] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 817.607536][ T117] cdc_ncm 4-1:1.1: bind() failure [ 817.618821][T15627] /dev/nullb0: Can't lookup blockdev [ 818.376604][ T5889] mos7840 5-1:0.0: required endpoints missing [ 818.411362][ T5889] usb 5-1: USB disconnect, device number 106 [ 818.719157][T11302] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 818.964457][T11302] usb 1-1: Using ep0 maxpacket: 16 [ 818.971100][T11302] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 818.982653][T11302] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 818.995438][T11302] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 819.004566][T11302] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.012575][T11302] usb 1-1: Product: syz [ 819.016780][T11302] usb 1-1: Manufacturer: syz [ 819.021386][T11302] usb 1-1: SerialNumber: syz [ 819.027572][T11302] usb 1-1: config 0 descriptor?? [ 819.035819][T11302] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 819.045252][T11302] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 819.163413][ T5889] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 819.198439][ T117] usb 4-1: USB disconnect, device number 87 [ 819.365242][ T5889] usb 2-1: Using ep0 maxpacket: 32 [ 819.378269][ T5889] usb 2-1: unable to get BOS descriptor or descriptor too short [ 819.395364][ T5889] usb 2-1: config 12 has an invalid interface number: 184 but max is 0 [ 819.408020][ T5889] usb 2-1: config 12 has no interface number 0 [ 819.414505][ T5889] usb 2-1: config 12 interface 184 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 819.537586][ T5889] usb 2-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 819.559858][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.575380][ T5889] usb 2-1: Product: syz [ 819.579688][ T5889] usb 2-1: Manufacturer: syz [ 819.996265][ T5889] usb 2-1: SerialNumber: syz [ 820.001164][T11302] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 820.020943][T11302] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 820.359225][T15648] befs: (nullb0): No write support. Marking filesystem read-only [ 820.374339][T15648] befs: (nullb0): invalid magic header [ 820.681854][ T5889] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 820.743760][ T5889] usb 2-1: USB disconnect, device number 111 [ 820.783407][ T5875] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 821.451028][ T5875] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 821.460649][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.522158][ T5875] usb 5-1: Product: syz [ 821.559048][ T5875] usb 5-1: Manufacturer: syz [ 821.874907][T11302] em28xx 1-1:0.0: AC97 vendor ID = 0x00fc00fe [ 821.881133][ T5875] usb 5-1: SerialNumber: syz [ 821.893724][ T5875] usb 5-1: config 0 descriptor?? [ 822.003406][ T5874] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 822.077896][T11302] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 822.099189][T11302] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 822.112445][T11302] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 822.120802][T11302] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 822.128457][T11302] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 822.135800][T11302] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 822.148543][T11302] usb 1-1: USB disconnect, device number 103 [ 822.156827][ T5874] usb 4-1: Using ep0 maxpacket: 8 [ 822.169167][ T5874] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 822.712707][ T5874] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 822.724504][ T5874] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 822.734368][ T5874] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 822.744679][ T5874] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 822.757716][ T5874] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 822.766843][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.813631][ T9] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 822.966670][ T9] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 822.975984][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.991547][ T9] usb 2-1: Product: syz [ 822.996924][ T9] usb 2-1: Manufacturer: syz [ 823.001770][ T9] usb 2-1: SerialNumber: syz [ 823.012496][ T9] usb 2-1: config 0 descriptor?? [ 823.040011][ T5874] usb 4-1: GET_CAPABILITIES returned 0 [ 823.052893][ T5874] usbtmc 4-1:16.0: can't read capabilities [ 824.059326][ T5875] mos7840 5-1:0.0: required endpoints missing [ 824.429002][ T5889] usb 4-1: USB disconnect, device number 88 [ 824.441537][ T5875] usb 5-1: USB disconnect, device number 107 [ 824.589398][T15698] netlink: 'syz.4.2416': attribute type 10 has an invalid length. [ 824.597454][T15698] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2416'. [ 824.617245][T15701] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 825.580452][ T9] mos7840 2-1:0.0: required endpoints missing [ 825.631289][ T9] usb 2-1: USB disconnect, device number 112 [ 827.357815][T15728] fuse: Bad value for 'fd' [ 827.603320][ T5875] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 827.687138][T15741] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 827.740278][T15741] CIFS mount error: No usable UNC path provided in device string! [ 827.740278][T15741] [ 827.771270][T15741] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 827.792367][T15741] CIFS mount error: No usable UNC path provided in device string! [ 827.792367][T15741] [ 827.818265][T15741] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 827.827170][ T5875] usb 4-1: Using ep0 maxpacket: 32 [ 827.839253][ T5875] usb 4-1: unable to get BOS descriptor or descriptor too short [ 827.850014][T15741] CIFS mount error: No usable UNC path provided in device string! [ 827.850014][T15741] [ 827.861193][ T5875] usb 4-1: config 12 has an invalid interface number: 184 but max is 0 [ 827.869955][ T5875] usb 4-1: config 12 has no interface number 0 [ 827.886321][ T5875] usb 4-1: config 12 interface 184 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 827.898787][T15741] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 827.911412][T15741] CIFS mount error: No usable UNC path provided in device string! [ 827.911412][T15741] [ 827.936887][ T5875] usb 4-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 827.967875][T15741] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 827.977097][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.993596][ T5875] usb 4-1: Product: syz [ 827.998142][T15741] CIFS mount error: No usable UNC path provided in device string! [ 827.998142][T15741] [ 828.016222][ T5875] usb 4-1: Manufacturer: syz [ 828.026053][ T5875] usb 4-1: SerialNumber: syz [ 828.127530][T15741] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 828.140422][T15741] CIFS mount error: No usable UNC path provided in device string! [ 828.140422][T15741] [ 828.152175][T15741] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 828.161334][T15741] CIFS mount error: No usable UNC path provided in device string! [ 828.161334][T15741] [ 828.513428][T15741] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 828.540537][T15722] befs: (nullb0): No write support. Marking filesystem read-only [ 828.548568][T15722] befs: (nullb0): invalid magic header [ 828.556870][T15741] CIFS mount error: No usable UNC path provided in device string! [ 828.556870][T15741] [ 828.572630][ T5875] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 828.582116][T15741] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 828.608128][ T5875] usb 4-1: USB disconnect, device number 89 [ 828.694141][ T117] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 828.906744][ T117] usb 1-1: Using ep0 maxpacket: 8 [ 828.924957][ T117] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 828.952222][ T117] usb 1-1: config 179 has no interface number 0 [ 828.961846][ T117] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 828.982120][ T117] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 829.011040][ T117] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 102, changing to 10 [ 829.030775][ T117] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24624, setting to 1024 [ 829.043376][ T117] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 829.057527][ T5874] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 829.073409][ T117] usb 1-1: config 179 interface 65 has no altsetting 0 [ 829.082619][ T117] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 829.098535][ T117] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.146785][ T117] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input109 [ 829.214501][ T5172] input input109: unable to receive magic message: -110 [ 829.224102][ T5172] input input109: unable to receive magic message: -32 [ 829.237286][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 829.251010][ T5172] input input109: unable to receive magic message: -32 [ 829.362916][ T5874] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 829.503197][T15783] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 829.791795][ T5172] input input109: unable to receive magic message: -32 [ 829.826603][ T5172] input input109: unable to receive magic message: -32 [ 829.833716][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.852176][ T5874] usb 5-1: config 0 descriptor?? [ 830.220317][T15792] fuse: Bad value for 'fd' [ 830.291710][ T5874] keytouch 0003:0926:3333.004B: fixing up Keytouch IEC report descriptor [ 830.330799][ T5874] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.004B/input/input110 [ 830.565676][ T30] audit: type=1800 audit(1750616995.990:1343): pid=15795 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2433" name="bus" dev="overlay" ino=2584 res=0 errno=0 [ 831.521498][ T5874] keytouch 0003:0926:3333.004B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 831.631020][ T5889] usb 1-1: USB disconnect, device number 104 [ 831.631152][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 831.645358][ T5889] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 832.353478][ T9] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 832.512294][T15814] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2430'. [ 832.535203][ T5889] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 832.636597][ T5935] usb 5-1: USB disconnect, device number 108 [ 832.705317][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 832.725216][ T5889] usb 1-1: config 1 has an invalid descriptor of length 254, skipping remainder of the config [ 832.743778][ T5889] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 832.753503][ T5889] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 832.772360][ T9] usb 2-1: config index 0 descriptor too short (expected 33810, got 18) [ 832.777062][T15822] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2442'. [ 832.794158][ T9] usb 2-1: config 54 has too many interfaces: 138, using maximum allowed: 32 [ 832.803176][ T9] usb 2-1: config 54 has an invalid descriptor of length 235, skipping remainder of the config [ 832.815746][ T9] usb 2-1: config 54 has 0 interfaces, different from the descriptor's value: 138 [ 832.831649][ T5889] usb 1-1: New USB device found, idVendor=0525, idProduct=a5a1, bcdDevice= 0.40 [ 832.840528][T15825] fuse: Bad value for 'fd' [ 832.842602][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.850384][T15826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2442'. [ 832.853701][ T5889] usb 1-1: Product: syz [ 832.869223][ T9] usb 2-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 832.883321][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.891322][ T9] usb 2-1: Product: syz [ 832.903353][ T5889] usb 1-1: Manufacturer: syz [ 832.907969][ T5889] usb 1-1: SerialNumber: syz [ 832.914938][ T9] usb 2-1: Manufacturer: syz [ 833.015821][ T9] usb 2-1: SerialNumber: syz [ 833.022837][ T5889] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 833.121692][ T5889] cdc_ncm 1-1:1.0: bind() failure [ 833.252240][T15832] overlayfs: failed to clone lowerpath [ 834.191018][ T5874] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 834.319629][T15843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 834.338065][T15843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 834.613221][ T5874] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 835.401519][T13999] usb 1-1: USB disconnect, device number 105 [ 835.638111][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.652356][ T9] usb 2-1: USB disconnect, device number 113 [ 835.702711][ T5874] usb 5-1: Product: syz [ 835.715279][ T5874] usb 5-1: Manufacturer: syz [ 835.864039][ T5874] usb 5-1: SerialNumber: syz [ 835.918842][ T30] audit: type=1400 audit(1750617001.430:1344): avc: denied { listen } for pid=15853 comm="syz.0.2451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 836.267865][ T5874] usb 5-1: config 0 descriptor?? [ 836.329699][ T5874] mos7840 5-1:0.0: required endpoints missing [ 836.358552][ T5874] usb 5-1: USB disconnect, device number 109 [ 836.543354][ T9] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 837.413378][ T9] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 837.432638][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.442726][ T9] usb 2-1: Product: syz [ 837.544060][ T9] usb 2-1: Manufacturer: syz [ 837.548690][ T9] usb 2-1: SerialNumber: syz [ 837.568575][ T9] usb 2-1: config 0 descriptor?? [ 838.793600][ T5935] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 839.073635][ T5935] usb 1-1: Using ep0 maxpacket: 32 [ 839.222540][ T9] mos7840 2-1:0.0: required endpoints missing [ 839.236298][ T5935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 839.258017][ T9] usb 2-1: USB disconnect, device number 114 [ 839.261464][ T5935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 839.276881][ T5935] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 839.302829][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.332777][ T5935] usb 1-1: config 0 descriptor?? [ 839.535796][T15922] block nbd3: shutting down sockets [ 840.068010][ T5935] usbhid 1-1:0.0: can't add hid device: -71 [ 840.092175][ T5935] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 840.117328][ T5935] usb 1-1: USB disconnect, device number 106 [ 840.159739][T15938] syz.0.2474 (15938) used obsolete PPPIOCDETACH ioctl [ 840.387136][T15947] FAULT_INJECTION: forcing a failure. [ 840.387136][T15947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 840.400610][T15947] CPU: 0 UID: 0 PID: 15947 Comm: syz.1.2477 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 840.400633][T15947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 840.400643][T15947] Call Trace: [ 840.400650][T15947] [ 840.400657][T15947] dump_stack_lvl+0x16c/0x1f0 [ 840.400686][T15947] should_fail_ex+0x512/0x640 [ 840.400712][T15947] _copy_from_user+0x2e/0xd0 [ 840.400737][T15947] get_timespec64+0x8b/0x240 [ 840.400761][T15947] ? __pfx_get_timespec64+0x10/0x10 [ 840.400783][T15947] ? __fget_files+0x20e/0x3c0 [ 840.400812][T15947] __x64_sys_recvmmsg+0x166/0x280 [ 840.400840][T15947] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 840.400872][T15947] do_syscall_64+0xcd/0x4c0 [ 840.400900][T15947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.400917][T15947] RIP: 0033:0x7f5e2f78e929 [ 840.400930][T15947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 840.400947][T15947] RSP: 002b:00007f5e3060f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 840.400964][T15947] RAX: ffffffffffffffda RBX: 00007f5e2f9b6080 RCX: 00007f5e2f78e929 [ 840.400975][T15947] RDX: 0000000000000002 RSI: 00002000000008c0 RDI: 0000000000000008 [ 840.400986][T15947] RBP: 00007f5e3060f090 R08: 0000200000008000 R09: 0000000000000000 [ 840.400996][T15947] R10: 00000000000000cb R11: 0000000000000246 R12: 0000000000000001 [ 840.401007][T15947] R13: 0000000000000000 R14: 00007f5e2f9b6080 R15: 00007ffcbcbe1d98 [ 840.401030][T15947] [ 840.553611][ C0] vkms_vblank_simulate: vblank timer overrun [ 841.100863][ T5935] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 841.770388][ T5935] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 841.777655][T15956] vlan2: entered allmulticast mode [ 841.785982][T15956] dummy0: entered allmulticast mode [ 841.790826][ T5935] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 841.814137][ T5935] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 841.824835][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.866117][ T5935] usb 1-1: Product: syz [ 841.872394][ T5935] usb 1-1: Manufacturer: syz [ 841.877504][ T5935] usb 1-1: SerialNumber: syz [ 842.526615][ T5935] usb 1-1: bad CDC descriptors [ 842.532731][T15961] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 842.540918][ T5874] libceph: connect (1)[c::]:6789 error -101 [ 842.547524][ T5874] libceph: mon0 (1)[c::]:6789 connect error [ 842.688910][T15961] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 842.701303][T15962] ceph: No mds server is up or the cluster is laggy [ 842.845198][T15958] netlink: 'syz.1.2480': attribute type 10 has an invalid length. [ 842.874214][T15958] bond0: (slave wlan1): Opening slave failed [ 843.668203][T15990] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 844.053812][ T5935] usb 1-1: USB disconnect, device number 107 [ 844.423426][ T5935] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 844.458206][ T30] audit: type=1400 audit(1750617009.970:1345): avc: denied { unmount } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 844.941314][T16022] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 845.006001][ T5935] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 845.019316][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.044591][ T5935] usb 1-1: Product: syz [ 845.055061][ T5935] usb 1-1: Manufacturer: syz [ 845.067203][ T5935] usb 1-1: SerialNumber: syz [ 845.086083][ T5935] usb 1-1: config 0 descriptor?? [ 847.440405][T16033] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 847.462929][T16037] netlink: 'syz.5.2497': attribute type 10 has an invalid length. [ 847.528064][T16037] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2497'. [ 847.640436][ T30] audit: type=1400 audit(1750617013.130:1346): avc: denied { setopt } for pid=16028 comm="syz.3.2495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 848.456779][ T5935] mos7840 1-1:0.0: required endpoints missing [ 848.667509][T16045] kernel profiling enabled (shift: 17) [ 848.817752][ T5935] usb 1-1: USB disconnect, device number 108 [ 849.430316][ T10] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 849.603449][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 849.658483][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 849.686191][ T10] usb 2-1: config 12 has an invalid interface number: 184 but max is 0 [ 849.710249][ T10] usb 2-1: config 12 has no interface number 0 [ 849.717844][ T10] usb 2-1: config 12 interface 184 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 849.733174][ T10] usb 2-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 849.745681][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.754763][ T10] usb 2-1: Product: syz [ 849.759069][ T10] usb 2-1: Manufacturer: syz [ 849.767102][ T10] usb 2-1: SerialNumber: syz [ 849.833481][ T5935] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 850.433349][ T5935] usb 1-1: Using ep0 maxpacket: 8 [ 850.445541][ T5935] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 850.488213][ T5935] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 850.541790][T16052] befs: (nullb0): No write support. Marking filesystem read-only [ 850.551692][T16052] befs: (nullb0): invalid magic header [ 850.888090][ T5935] usb 1-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 850.924122][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.958389][ T5935] usb 1-1: Product: syz [ 850.965978][ T5935] usb 1-1: Manufacturer: syz [ 850.990488][ T5935] usb 1-1: SerialNumber: syz [ 850.996055][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 851.007395][ T5935] usb 1-1: config 0 descriptor?? [ 851.083781][ T10] usb 2-1: USB disconnect, device number 115 [ 851.139696][ T5803] udevd[5803]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:12.184/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 851.522632][ T9] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 851.862577][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 852.149477][ T9] usb 5-1: config 1 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 852.162861][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 852.173643][ T117] usb 1-1: USB disconnect, device number 109 [ 852.196376][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 852.205597][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.217157][ T9] usb 5-1: Product: syz [ 852.221342][ T9] usb 5-1: Manufacturer: syz [ 852.250210][ T9] usb 5-1: SerialNumber: syz [ 852.267041][T16081] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 852.273568][T16081] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 852.285009][T16081] vhci_hcd vhci_hcd.0: Device attached [ 852.321133][T16085] overlayfs: failed to clone upperpath [ 852.375156][T13999] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 852.474353][ T5935] vhci_hcd: vhci_device speed not set [ 852.479008][ T9] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 110 if 0 alt 16 proto 1 vid 0x0525 pid 0xA4A8 [ 852.488982][T16096] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2514'. [ 852.500375][T16096] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2514'. [ 852.509387][ T9] usb 5-1: USB disconnect, device number 110 [ 852.527836][ T9] usblp0: removed [ 852.537077][T13999] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 852.548288][ T5935] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 852.558399][ T5875] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 852.561434][T13999] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 852.598800][T13999] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.673622][T13999] usb 4-1: config 0 descriptor?? [ 853.146610][ T5875] usb 2-1: config 0 has no interfaces? [ 853.152127][ T5875] usb 2-1: New USB device found, idVendor=0de5, idProduct=0056, bcdDevice= 5.b5 [ 853.163353][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.175211][ T5875] usb 2-1: config 0 descriptor?? [ 853.195567][ T30] audit: type=1400 audit(1750617018.710:1347): avc: denied { bind } for pid=16101 comm="syz.0.2516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 853.272322][T16104] netlink: 'syz.0.2517': attribute type 10 has an invalid length. [ 853.280513][T16104] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2517'. [ 853.329757][T13999] keytouch 0003:0926:3333.004C: fixing up Keytouch IEC report descriptor [ 853.367292][T13999] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.004C/input/input112 [ 853.502431][T16082] usbip_core: unknown command [ 853.522521][ T5875] usb 2-1: USB disconnect, device number 116 [ 853.609200][T16082] vhci_hcd: unknown pdu 7360301 [ 853.650164][T16082] usbip_core: unknown command [ 853.763838][T12171] vhci_hcd: stop threads [ 853.768467][T12171] vhci_hcd: release socket [ 853.798982][T12171] vhci_hcd: disconnect device [ 854.041992][T16110] trusted_key: encrypted_key: insufficient parameters specified [ 854.055302][T13999] keytouch 0003:0926:3333.004C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 854.073440][ T5874] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 854.098278][T13999] usb 4-1: USB disconnect, device number 90 [ 854.156001][T16111] fido_id[16111]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 854.273362][ T5874] usb 5-1: Using ep0 maxpacket: 8 [ 854.313734][ T5874] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 854.332986][ T5874] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 854.433396][ T30] audit: type=1400 audit(1750617019.933:1348): avc: denied { create } for pid=16121 comm="syz.5.2524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 854.454200][ C0] vkms_vblank_simulate: vblank timer overrun [ 854.454574][ T5874] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 854.480019][ T5874] usb 5-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 854.501745][ T5874] usb 5-1: Product: syz [ 854.511702][ T30] audit: type=1400 audit(1750617019.933:1349): avc: denied { setopt } for pid=16121 comm="syz.5.2524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 854.528836][ T5874] usb 5-1: Manufacturer: syz [ 854.570088][ T5874] usb 5-1: config 0 descriptor?? [ 854.690055][ T30] audit: type=1400 audit(1750617020.203:1350): avc: denied { mounton } for pid=16126 comm="syz.1.2526" path="/proc/1741/task" dev="proc" ino=51224 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 854.732625][ T30] audit: type=1804 audit(1750617020.243:1351): pid=16131 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.2527" name="/newroot/502/bus/bus" dev="overlay" ino=2696 res=1 errno=0 [ 854.739922][T16131] netlink: 'syz.3.2527': attribute type 8 has an invalid length. [ 855.000212][ T30] audit: type=1400 audit(1750617020.503:1352): avc: denied { associate } for pid=16126 comm="syz.1.2526" name="file0" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 855.101267][T16138] mac80211_hwsim hwsim9 syzkaller0: Caught tx_queue_len zero misconfig [ 856.015593][T16139] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 856.051345][T16127] vxcan1 speed is unknown, defaulting to 1000 [ 856.584632][T16140] netlink: 'syz.1.2526': attribute type 2 has an invalid length. [ 856.871730][T16148] /dev/nullb0: Can't lookup blockdev [ 856.934207][T16127] lo speed is unknown, defaulting to 1000 [ 857.448970][T13999] usb 5-1: USB disconnect, device number 111 [ 858.453354][ T5935] vhci_hcd: vhci_device speed not set [ 858.954187][T16179] netlink: 'syz.0.2533': attribute type 10 has an invalid length. [ 858.962101][T16179] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2533'. [ 860.653420][T13999] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 860.769964][T16192] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=16192 comm=syz.0.2538 [ 860.903362][T13999] usb 2-1: Using ep0 maxpacket: 16 [ 860.916419][T13999] usb 2-1: config 5 has an invalid interface number: 105 but max is 0 [ 860.939223][T13999] usb 2-1: config 5 has no interface number 0 [ 861.023600][T13999] usb 2-1: config 5 interface 105 altsetting 4 endpoint 0x8 has an invalid bInterval 154, changing to 11 [ 861.043309][T13999] usb 2-1: config 5 interface 105 has no altsetting 0 [ 861.059900][T13999] usb 2-1: New USB device found, idVendor=046d, idProduct=c291, bcdDevice=60.eb [ 861.112647][T13999] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.612948][ T9] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=9 comm=kworker/0:0 [ 861.814353][T13999] usb 2-1: string descriptor 0 read error: -71 [ 861.862090][T13999] usb 2-1: USB disconnect, device number 117 [ 862.065222][ T974] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 862.463360][ T974] usb 4-1: Using ep0 maxpacket: 32 [ 862.983616][ T974] usb 4-1: unable to get BOS descriptor or descriptor too short [ 863.008967][ T974] usb 4-1: config 12 has an invalid interface number: 184 but max is 0 [ 863.037672][ T974] usb 4-1: config 12 has no interface number 0 [ 863.059359][ T974] usb 4-1: config 12 interface 184 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 863.097930][ T974] usb 4-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 863.148355][ T974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.203140][ T974] usb 4-1: Product: syz [ 863.212353][ T974] usb 4-1: Manufacturer: syz [ 863.223446][ T974] usb 4-1: SerialNumber: syz [ 863.433378][ T5935] usb 1-1: new full-speed USB device number 110 using dummy_hcd [ 863.512440][T16220] befs: (nullb0): No write support. Marking filesystem read-only [ 863.521131][T16220] befs: (nullb0): invalid magic header [ 863.553406][ T5875] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 863.774965][ T5935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 863.799830][ T5935] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 863.820424][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=4 [ 863.848238][ T5935] usb 1-1: SerialNumber: syz [ 863.858133][ T974] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 863.869930][ T5935] usb 1-1: config 0 descriptor?? [ 863.891448][ T5935] usb 1-1: Found UVC 0.00 device (10c4:ea90) [ 863.900572][ T5935] usb 1-1: No valid video chain found. [ 863.912839][ T974] usb 4-1: USB disconnect, device number 91 [ 863.925038][ T5875] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 863.944390][ T5875] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 863.977710][ T6378] udevd[6378]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:12.184/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 863.993023][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.017151][ T5875] usb 2-1: config 0 descriptor?? [ 864.161452][T16253] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 864.168761][T16253] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 864.244577][ T10] usb 1-1: USB disconnect, device number 110 [ 864.460732][ T5875] keytouch 0003:0926:3333.004D: fixing up Keytouch IEC report descriptor [ 865.246892][ T5875] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.004D/input/input113 [ 865.739629][T16268] /dev/nullb0: Can't lookup blockdev [ 865.830811][ T5875] keytouch 0003:0926:3333.004D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 865.879564][T16271] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 865.896857][T16271] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 865.920664][ T5875] usb 2-1: USB disconnect, device number 118 [ 865.992325][T16271] netlink: 'syz.4.2555': attribute type 10 has an invalid length. [ 866.003947][T16272] fido_id[16272]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 866.016165][T16271] bond0: (slave wlan1): Opening slave failed [ 867.203434][T13999] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 868.120189][T13999] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 868.132277][T13999] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 868.160291][T13999] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.184622][T13999] usb 1-1: config 0 descriptor?? [ 869.053544][T13999] usb 1-1: USB disconnect, device number 111 [ 869.320218][T16317] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2568'. [ 869.384436][T16320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2568'. [ 869.453339][T11302] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 869.693900][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.013120][T16325] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 870.131153][T11302] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 870.152850][T11302] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 870.631468][T11302] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.647541][T16331] FAULT_INJECTION: forcing a failure. [ 870.647541][T16331] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 870.661717][T16331] CPU: 1 UID: 0 PID: 16331 Comm: syz.1.2571 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 870.661741][T16331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 870.661751][T16331] Call Trace: [ 870.661757][T16331] [ 870.661764][T16331] dump_stack_lvl+0x16c/0x1f0 [ 870.661794][T16331] should_fail_ex+0x512/0x640 [ 870.661828][T16331] should_fail_alloc_page+0xe7/0x130 [ 870.661855][T16331] prepare_alloc_pages+0x3c2/0x610 [ 870.661873][T16331] ? __lock_acquire+0xb8a/0x1c90 [ 870.661903][T16331] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 870.661927][T16331] ? arch_scale_cpu_capacity+0x15/0xb0 [ 870.661954][T16331] ? dl_scaled_delta_exec+0xdb/0x2e0 [ 870.661983][T16331] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 870.662012][T16331] ? rcu_is_watching+0x12/0xc0 [ 870.662037][T16331] ? __schedule+0x1181/0x5de0 [ 870.662066][T16331] ? __lock_acquire+0xb8a/0x1c90 [ 870.662090][T16331] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 870.662113][T16331] ? policy_nodemask+0xea/0x4e0 [ 870.662140][T16331] alloc_pages_mpol+0x1fb/0x550 [ 870.662167][T16331] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 870.662202][T16331] folio_alloc_mpol_noprof+0x36/0x2f0 [ 870.662232][T16331] vma_alloc_folio_noprof+0xed/0x1e0 [ 870.662259][T16331] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 870.662287][T16331] ? rcu_read_unlock+0x2d/0xb0 [ 870.662315][T16331] do_wp_page+0x1136/0x4f20 [ 870.662352][T16331] ? __pfx_do_wp_page+0x10/0x10 [ 870.662383][T16331] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 870.662411][T16331] __handle_mm_fault+0x2223/0x5490 [ 870.662441][T16331] ? __pfx___handle_mm_fault+0x10/0x10 [ 870.662462][T16331] ? __pte_offset_map_lock+0x174/0x310 [ 870.662487][T16331] ? vm_normal_page+0x152/0x2e0 [ 870.662511][T16331] ? find_held_lock+0x2b/0x80 [ 870.662530][T16331] ? find_held_lock+0x2b/0x80 [ 870.662559][T16331] ? follow_page_pte+0x3af/0x14c0 [ 870.662584][T16331] handle_mm_fault+0x589/0xd10 [ 870.662612][T16331] __get_user_pages+0x589/0x3b80 [ 870.662643][T16331] ? __pfx___get_user_pages+0x10/0x10 [ 870.662660][T16331] ? __pfx_down_read_killable+0x10/0x10 [ 870.662689][T16331] __gup_longterm_locked+0x20d/0x1850 [ 870.662714][T16331] ? irqentry_exit+0x3b/0x90 [ 870.662738][T16331] ? __pfx___gup_longterm_locked+0x10/0x10 [ 870.662764][T16331] ? sanity_check_pinned_pages+0x3bf/0x1200 [ 870.662797][T16331] gup_fast_fallback+0x1ab3/0x29e0 [ 870.662845][T16331] ? __pfx_gup_fast_fallback+0x10/0x10 [ 870.662863][T16331] ? find_held_lock+0x2b/0x80 [ 870.662884][T16331] ? is_bpf_text_address+0x8a/0x1a0 [ 870.662908][T16331] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 870.662932][T16331] ? is_bpf_text_address+0x94/0x1a0 [ 870.662958][T16331] pin_user_pages_fast+0xa7/0xf0 [ 870.662975][T16331] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 870.662994][T16331] ? iov_iter_advance+0x1e3/0x6c0 [ 870.663022][T16331] iov_iter_extract_pages+0x3a2/0x1ed0 [ 870.663051][T16331] ? stack_depot_save_flags+0x28/0xa40 [ 870.663080][T16331] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 870.663103][T16331] ? sock_kmalloc+0x111/0x170 [ 870.663118][T16331] ? kasan_save_stack+0x42/0x60 [ 870.663138][T16331] ? kasan_save_stack+0x33/0x60 [ 870.663157][T16331] ? kasan_save_track+0x14/0x30 [ 870.663177][T16331] ? __kasan_kmalloc+0xaa/0xb0 [ 870.663196][T16331] ? __kmalloc_noprof+0x223/0x510 [ 870.663216][T16331] ? sock_kmalloc+0x111/0x170 [ 870.663230][T16331] ? af_alg_alloc_areq+0xbc/0x2e0 [ 870.663253][T16331] ? aead_recvmsg+0x42e/0x16d0 [ 870.663267][T16331] ? sock_recvmsg+0x1f9/0x250 [ 870.663283][T16331] ? ____sys_recvmsg+0x218/0x6b0 [ 870.663297][T16331] ? ___sys_recvmsg+0x114/0x1a0 [ 870.663317][T16331] ? do_recvmmsg+0x2fe/0x750 [ 870.663338][T16331] ? __x64_sys_recvmmsg+0x199/0x280 [ 870.663361][T16331] ? do_syscall_64+0xcd/0x4c0 [ 870.663384][T16331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.663413][T16331] extract_iter_to_sg+0xf6e/0x20c0 [ 870.663447][T16331] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 870.663491][T16331] af_alg_get_rsgl+0x2b8/0x7f0 [ 870.663529][T16331] aead_recvmsg+0x474/0x16d0 [ 870.663549][T16331] ? lockdep_hardirqs_on+0x7c/0x110 [ 870.663583][T16331] ? __pfx_aead_recvmsg+0x10/0x10 [ 870.663600][T16331] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 870.663628][T16331] sock_recvmsg+0x1f9/0x250 [ 870.663647][T16331] ____sys_recvmsg+0x218/0x6b0 [ 870.663672][T16331] ? __pfx_____sys_recvmsg+0x10/0x10 [ 870.663704][T16331] ? __lock_acquire+0x622/0x1c90 [ 870.663736][T16331] ___sys_recvmsg+0x114/0x1a0 [ 870.663761][T16331] ? __pfx____sys_recvmsg+0x10/0x10 [ 870.663789][T16331] ? find_held_lock+0x2b/0x80 [ 870.663832][T16331] do_recvmmsg+0x2fe/0x750 [ 870.663860][T16331] ? __pfx_do_recvmmsg+0x10/0x10 [ 870.663882][T16331] ? find_held_lock+0x2b/0x80 [ 870.663901][T16331] ? __might_fault+0xe3/0x190 [ 870.663922][T16331] ? __might_fault+0x13b/0x190 [ 870.663956][T16331] ? __pfx_get_timespec64+0x10/0x10 [ 870.663978][T16331] ? __fget_files+0x20e/0x3c0 [ 870.664008][T16331] __x64_sys_recvmmsg+0x199/0x280 [ 870.664034][T16331] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 870.664068][T16331] do_syscall_64+0xcd/0x4c0 [ 870.664095][T16331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.664112][T16331] RIP: 0033:0x7f5e2f78e929 [ 870.664127][T16331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 870.664144][T16331] RSP: 002b:00007f5e3060f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 870.664161][T16331] RAX: ffffffffffffffda RBX: 00007f5e2f9b6080 RCX: 00007f5e2f78e929 [ 870.664172][T16331] RDX: 0000000000000002 RSI: 00002000000008c0 RDI: 0000000000000008 [ 870.664182][T16331] RBP: 00007f5e3060f090 R08: 0000200000008000 R09: 0000000000000000 [ 870.664193][T16331] R10: 00000000000000cb R11: 0000000000000246 R12: 0000000000000001 [ 870.664203][T16331] R13: 0000000000000000 R14: 00007f5e2f9b6080 R15: 00007ffcbcbe1d98 [ 870.664228][T16331] [ 871.389230][T16336] fuse: Bad value for 'fd' [ 871.434547][T11302] usb 4-1: config 0 descriptor?? [ 871.896369][ T5875] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 871.906339][T11302] keytouch 0003:0926:3333.004E: fixing up Keytouch IEC report descriptor [ 871.933970][T11302] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.004E/input/input114 [ 872.488643][ T5875] usb 2-1: Using ep0 maxpacket: 32 [ 872.496553][ T5875] usb 2-1: unable to get BOS descriptor or descriptor too short [ 872.516436][ T5875] usb 2-1: config 12 has an invalid interface number: 184 but max is 0 [ 872.525363][ T5875] usb 2-1: config 12 has no interface number 0 [ 872.532779][ T5875] usb 2-1: config 12 interface 184 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 872.551199][ T5875] usb 2-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 872.607632][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.658097][ T5875] usb 2-1: Product: syz [ 873.310055][ T5875] usb 2-1: Manufacturer: syz [ 873.374907][ T5875] usb 2-1: SerialNumber: syz [ 873.384102][T11302] keytouch 0003:0926:3333.004E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 873.408689][T11302] usb 4-1: USB disconnect, device number 92 [ 873.486389][T16362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2580'. [ 873.527183][T16365] fido_id[16365]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 873.675311][T16341] befs: (nullb0): No write support. Marking filesystem read-only [ 873.684988][T16341] befs: (nullb0): invalid magic header [ 873.743034][T16372] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2582'. [ 873.924258][T16373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2582'. [ 874.011826][ T5875] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 874.080944][ T5875] usb 2-1: USB disconnect, device number 119 [ 874.224195][ T5803] udevd[5803]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:12.184/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 874.736603][ T30] audit: type=1400 audit(1750617040.253:1353): avc: denied { getopt } for pid=16381 comm="syz.3.2585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 875.029624][T16386] fuse: Bad value for 'fd' [ 875.428482][T16397] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 876.047695][ T10] usb 5-1: new full-speed USB device number 112 using dummy_hcd [ 876.094876][ T30] audit: type=1400 audit(1750617041.593:1354): avc: denied { write } for pid=16404 comm="syz.3.2591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 876.111777][T16408] team0: Port device gtp0 added [ 876.711245][ T10] usb 5-1: config 1 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 876.742831][ T10] usb 5-1: config 1 interface 0 has no altsetting 0 [ 876.757629][ T10] usb 5-1: language id specifier not provided by device, defaulting to English [ 876.799071][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.40 [ 876.809124][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.817586][ T10] usb 5-1: Product: syz [ 876.821868][ T10] usb 5-1: Manufacturer: 懻ម莡伞仵뿊传ᛘஅ哵휽폚轢㭸ႛ勒뗕脨ꔃ込蔥锪梈㯅롌⹎杄넑䬼ꄵ䑯羢櫣Ꮮ峨缾ᥜ⸱떩 [ 876.839678][ T10] usb 5-1: SerialNumber: syz [ 877.068584][ T974] usb 1-1: new full-speed USB device number 112 using dummy_hcd [ 877.123357][T13999] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 877.171507][ T10] usbhid 5-1:1.0: can't add hid device: -71 [ 877.190510][ T10] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 877.235822][T16424] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 877.243734][ T10] usb 5-1: USB disconnect, device number 112 [ 877.253088][T16424] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 877.265642][T16424] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 877.276851][ T974] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 877.288645][T16424] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 877.306447][T16424] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 877.314150][T13999] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 877.340638][ T974] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 877.363117][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 877.370603][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 877.378735][T13999] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 877.389023][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 877.406641][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 877.414116][ T974] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 877.429257][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 877.438257][T13999] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.451338][ T30] audit: type=1400 audit(1750617042.973:1355): avc: denied { mounton } for pid=16422 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 877.455043][ T974] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 877.484748][T13999] usb 4-1: config 0 descriptor?? [ 877.495624][ T974] usb 1-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 877.512055][ T974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.520156][ T974] usb 1-1: Product: syz [ 877.526307][ T974] usb 1-1: Manufacturer: syz [ 877.530934][ T974] usb 1-1: SerialNumber: syz [ 877.559413][ T974] usb 1-1: config 0 descriptor?? [ 877.568491][T16417] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 877.582134][T16422] vxcan1 speed is unknown, defaulting to 1000 [ 877.783756][ T974] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 877.869134][ T974] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input115 [ 877.881068][T16422] lo speed is unknown, defaulting to 1000 [ 877.894855][ C0] powermate: config urb returned -71 [ 877.900436][ C0] powermate: config urb returned -71 [ 877.906048][ C0] powermate: config urb returned -71 [ 877.913350][ C0] powermate: config urb returned -71 [ 878.503507][ T30] audit: type=1400 audit(1750617043.973:1356): avc: denied { write } for pid=16426 comm="syz.1.2596" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 878.654503][T16432] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nbd1": -EINTR [ 878.847811][T13999] keytouch 0003:0926:3333.004F: fixing up Keytouch IEC report descriptor [ 878.877936][ T974] usb 1-1: USB disconnect, device number 112 [ 878.883973][ C0] powermate 1-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 879.031718][T16443] fuse: Bad value for 'fd' [ 879.070144][T13999] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.004F/input/input116 [ 879.092897][T16445] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2599'. [ 879.176235][T16449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2599'. [ 879.250201][T13999] keytouch 0003:0926:3333.004F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 879.272780][T16454] netlink: 'syz.1.2601': attribute type 10 has an invalid length. [ 879.290461][T16454] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2601'. [ 879.436857][T13999] usb 4-1: USB disconnect, device number 93 [ 879.503425][T16424] Bluetooth: hci5: command tx timeout [ 880.901692][T16422] chnl_net:caif_netlink_parms(): no params data found [ 880.983943][T16471] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 881.005170][T16471] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 881.013490][T16471] kvm: requested 50285 ns i8254 timer period limited to 200000 ns [ 881.606218][T16424] Bluetooth: hci5: command tx timeout [ 881.751588][T16479] netlink: 'syz.4.2605': attribute type 1 has an invalid length. [ 881.760546][T16479] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2605'. [ 882.733424][ T5875] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 882.752229][ T30] audit: type=1400 audit(1750617048.263:1357): avc: denied { append } for pid=16484 comm="syz.1.2607" name="sg0" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 882.837053][T12183] bond0 (unregistering): Released all slaves [ 882.923662][ T5875] usb 5-1: Using ep0 maxpacket: 16 [ 882.937866][ T5875] usb 5-1: unable to get BOS descriptor or descriptor too short [ 882.951727][ T5875] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 882.959488][ T5875] usb 5-1: can't read configurations, error -71 [ 882.967289][T12183] bond1 (unregistering): Released all slaves [ 882.977851][T12183] bond2 (unregistering): Released all slaves [ 883.151644][T12183] bond3 (unregistering): Released all slaves [ 883.223349][T16485] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2607'. [ 883.673437][T16424] Bluetooth: hci5: command tx timeout [ 883.809599][T12183] : left promiscuous mode [ 884.544843][T16422] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.575239][T16422] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.600032][T16422] bridge_slave_0: entered allmulticast mode [ 884.610585][T16422] bridge_slave_0: entered promiscuous mode [ 884.677248][T16518] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2614'. [ 884.756016][T16523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2614'. [ 884.943420][T13999] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 885.062359][T16422] bridge0: port 2(bridge_slave_1) entered blocking state [ 885.072505][T16422] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.080235][T16422] bridge_slave_1: entered allmulticast mode [ 885.087960][T16422] bridge_slave_1: entered promiscuous mode [ 885.213490][T13999] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 885.224670][ T30] audit: type=1400 audit(1750617050.723:1358): avc: denied { ioctl } for pid=16534 comm="syz.1.2617" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 885.250293][T13999] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 885.265558][T13999] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.284205][T13999] usb 1-1: config 0 descriptor?? [ 885.287141][T16422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 885.297209][T16538] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2618'. [ 885.309149][T16538] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 885.370821][T16422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 885.537733][ T30] audit: type=1400 audit(1750617051.043:1359): avc: denied { read } for pid=16541 comm="syz.3.2620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 885.572985][T16546] overlayfs: overlapping lowerdir path [ 885.711348][T16521] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2615'. [ 885.746511][T16424] Bluetooth: hci5: command tx timeout [ 885.800996][T16422] team0: Port device team_slave_0 added [ 886.010421][T16422] team0: Port device team_slave_1 added [ 886.388435][T13999] usbhid 1-1:0.0: can't add hid device: -71 [ 886.394497][T13999] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 886.410554][T13999] usb 1-1: USB disconnect, device number 113 [ 886.567166][T12183] hsr_slave_0: left promiscuous mode [ 886.572872][T12183] hsr_slave_1: left promiscuous mode [ 886.579242][T12183] dummy0: left allmulticast mode [ 886.586478][T12183] veth1_macvtap: left allmulticast mode [ 886.623358][ T974] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 886.633409][ T117] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 886.977927][T16563] overlayfs: missing 'lowerdir' [ 887.180222][T16565] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 887.247850][T16553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 887.258432][ T974] usb 2-1: Using ep0 maxpacket: 8 [ 887.289574][T16553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 887.299432][ T974] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 887.310513][ T974] usb 2-1: config 179 has no interface number 0 [ 887.320292][T16553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 887.328927][ T974] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 887.345973][T16553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 887.354057][ T974] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 887.373093][ T974] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 887.410455][ T974] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 887.419387][ T117] usb 4-1: unable to get BOS descriptor or descriptor too short [ 887.444086][ T974] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 887.456729][ T117] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 887.468435][ T117] usb 4-1: can't read configurations, error -71 [ 887.485800][ T974] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 887.505137][ T974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.587266][T16551] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 888.330019][T11302] usb 2-1: USB disconnect, device number 120 [ 888.330083][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 888.344935][ C0] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 888.459615][ T30] audit: type=1400 audit(1750617053.973:1360): avc: denied { setopt } for pid=16583 comm="syz.3.2628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 888.482824][ T30] audit: type=1400 audit(1750617054.003:1361): avc: denied { override_creds } for pid=16583 comm="syz.3.2628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 888.630883][T16422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 888.638413][T16422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 888.667794][T16422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 888.679874][T16422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 888.699026][T16422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 888.728847][T16422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 889.749967][T16422] hsr_slave_0: entered promiscuous mode [ 889.762929][T16422] hsr_slave_1: entered promiscuous mode [ 889.769968][T16422] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 889.778441][T16422] Cannot create hsr debugfs directory [ 889.887232][T16597] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2632'. [ 889.950677][T16601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2632'. [ 890.032398][T16598] netlink: 'syz.1.2630': attribute type 10 has an invalid length. [ 890.130010][T16598] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 890.850465][T16607] tipc: Resetting bearer [ 891.115677][ T5875] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 891.613457][ T117] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 891.650347][ T5875] usb 4-1: Using ep0 maxpacket: 16 [ 891.721683][ T5875] usb 4-1: New USB device found, idVendor=05ac, idProduct=abdf, bcdDevice=3d.49 [ 891.821360][ T117] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 891.860334][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.901497][ T117] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 891.922934][ T5875] usb 4-1: Product: syz [ 891.950485][T13999] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 891.959932][ T5875] usb 4-1: Manufacturer: syz [ 891.973420][ T5875] usb 4-1: SerialNumber: syz [ 891.978048][ T117] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.989962][ T5875] usb 4-1: config 0 descriptor?? [ 892.042200][ T5875] ipheth 4-1:0.0: Unable to find alternate settings interface [ 892.072005][ T117] usb 2-1: config 0 descriptor?? [ 892.123571][T13999] usb 5-1: Using ep0 maxpacket: 8 [ 892.137430][T13999] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 892.156992][T13999] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 892.183380][T13999] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 892.203671][T13999] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 892.232502][T13999] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 892.250978][ T974] usb 4-1: USB disconnect, device number 96 [ 892.261519][T16422] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 892.275223][T13999] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 892.301168][T16422] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 892.311597][T13999] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.323240][T16422] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 892.346623][T16422] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 892.543046][T13999] usb 5-1: GET_CAPABILITIES returned 0 [ 892.553000][T13999] usbtmc 5-1:16.0: can't read capabilities [ 892.562697][ T117] keytouch 0003:0926:3333.0050: fixing up Keytouch IEC report descriptor [ 892.575160][ T117] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0050/input/input117 [ 892.684773][ T117] keytouch 0003:0926:3333.0050: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 892.790440][T16422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 892.848065][T16422] 8021q: adding VLAN 0 to HW filter on device team0 [ 892.866566][T12181] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.866724][T12181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 892.875006][T12176] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.896323][T12176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 893.077654][T13999] usb 2-1: USB disconnect, device number 121 [ 893.580191][ T30] audit: type=1400 audit(1750617059.083:1362): avc: denied { read } for pid=16674 comm="syz.0.2641" path="socket:[53012]" dev="sockfs" ino=53012 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 893.832068][T16688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2643'. [ 893.944751][T16422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 894.186588][ T117] usb 5-1: USB disconnect, device number 115 [ 895.529499][T16422] veth0_vlan: entered promiscuous mode [ 895.553573][T16422] veth1_vlan: entered promiscuous mode [ 895.628835][T16422] veth0_macvtap: entered promiscuous mode [ 895.659567][T16422] veth1_macvtap: entered promiscuous mode [ 895.706969][T16422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 895.722234][ T30] audit: type=1400 audit(1750617061.223:1363): avc: denied { connect } for pid=16726 comm="syz.3.2651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 895.737774][T16422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 895.785933][T16422] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.797609][T16422] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.809422][T16422] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.822614][T16422] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.915548][ T9] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 896.130285][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 896.167048][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 896.185108][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 896.208287][ T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 896.231073][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.244832][ T9] usb 2-1: config 0 descriptor?? [ 896.373394][T12184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 896.386102][T12184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 896.401456][ T30] audit: type=1400 audit(1750617061.913:1364): avc: denied { mounton } for pid=16422 comm="syz-executor" path="/root/syzkaller.JshqTC/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 896.763972][ T30] audit: type=1400 audit(1750617061.963:1365): avc: denied { mounton } for pid=16422 comm="syz-executor" path="/root/syzkaller.JshqTC/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 897.003328][ T30] audit: type=1400 audit(1750617062.263:1366): avc: denied { mounton } for pid=16422 comm="syz-executor" path="/root/syzkaller.JshqTC/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=54447 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 897.030979][ C0] vkms_vblank_simulate: vblank timer overrun [ 897.110485][ T30] audit: type=1400 audit(1750617062.593:1367): avc: denied { mounton } for pid=16422 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 897.151359][ T30] audit: type=1400 audit(1750617062.593:1368): avc: denied { mount } for pid=16422 comm="syz-executor" name="/" dev="gadgetfs" ino=6640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 897.200655][ T30] audit: type=1400 audit(1750617062.593:1369): avc: denied { mounton } for pid=16422 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 897.312980][ T9] keytouch 0003:0926:3333.0051: fixing up Keytouch IEC report descriptor [ 897.330465][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0051/input/input118 [ 897.757918][ T9] keytouch 0003:0926:3333.0051: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 897.939708][ T9] usb 2-1: USB disconnect, device number 122 [ 899.103768][T11302] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 899.423681][T11302] usb 6-1: Using ep0 maxpacket: 8 [ 899.613546][T11302] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 899.683412][ T9] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 899.721390][T11302] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 899.827420][T11302] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 899.977166][T11302] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 899.992516][T11302] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 900.018991][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 900.527985][T11302] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 900.539567][T11302] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.551096][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 900.578523][ T9] usb 5-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 900.605495][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.629892][ T9] usb 5-1: config 0 descriptor?? [ 900.645771][ T30] audit: type=1400 audit(1750617066.163:1370): avc: denied { read append } for pid=16799 comm="syz.0.2667" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 900.823331][ T5935] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 900.847140][T11302] usb 6-1: GET_CAPABILITIES returned 0 [ 900.870529][T11302] usbtmc 6-1:16.0: can't read capabilities [ 901.008259][ T5935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 901.038508][ T5935] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 901.051603][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.090129][ T5935] usb 4-1: config 0 descriptor?? [ 901.128511][T16783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 901.131623][ T9] ortek 0003:1223:3F07.0052: unknown main item tag 0x6 [ 901.146485][ T9] ortek 0003:1223:3F07.0052: bogus close delimiter [ 901.153738][ T9] ortek 0003:1223:3F07.0052: item 0 0 2 10 parsing failed [ 901.157787][T16783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 901.170322][ T9] ortek 0003:1223:3F07.0052: probe with driver ortek failed with error -22 [ 901.220138][ T30] audit: type=1326 audit(1750617066.733:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16821 comm="syz.0.2669" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f39ff78e929 code=0x0 [ 901.313333][ T5889] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 901.346545][T11302] usb 5-1: USB disconnect, device number 116 [ 901.473321][ T5889] usb 2-1: Using ep0 maxpacket: 32 [ 901.480069][ T5889] usb 2-1: unable to get BOS descriptor or descriptor too short [ 901.489337][ T5889] usb 2-1: config 12 has an invalid interface number: 184 but max is 0 [ 901.497681][ T5889] usb 2-1: config 12 has no interface number 0 [ 901.504343][ T5889] usb 2-1: config 12 interface 184 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 901.517313][ T5889] usb 2-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 901.526479][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.534636][ T5889] usb 2-1: Product: syz [ 901.538847][ T5889] usb 2-1: Manufacturer: syz [ 901.542306][ T5935] keytouch 0003:0926:3333.0053: fixing up Keytouch IEC report descriptor [ 901.546480][ T5889] usb 2-1: SerialNumber: syz [ 901.567341][ T5935] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0053/input/input119 [ 901.662355][ T5935] keytouch 0003:0926:3333.0053: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 901.785365][T16817] befs: (nullb0): No write support. Marking filesystem read-only [ 901.785632][T16817] befs: (nullb0): invalid magic header [ 901.937831][ T5889] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 902.011076][ T5889] usb 2-1: USB disconnect, device number 123 [ 902.022693][ T30] audit: type=1400 audit(1750617067.523:1372): avc: denied { read } for pid=16826 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 902.124384][ T5935] usb 6-1: USB disconnect, device number 41 [ 902.478231][T11302] usb 4-1: USB disconnect, device number 97 [ 903.062351][ T30] audit: type=1400 audit(1750617068.573:1373): avc: denied { read } for pid=16840 comm="syz.4.2674" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 903.152144][ T30] audit: type=1400 audit(1750617068.623:1374): avc: denied { open } for pid=16840 comm="syz.4.2674" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 903.226079][ T30] audit: type=1400 audit(1750617068.623:1375): avc: denied { ioctl } for pid=16840 comm="syz.4.2674" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 903.259685][ T5935] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 903.313489][T16846] netlink: 'syz.3.2675': attribute type 10 has an invalid length. [ 903.352348][T16846] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2675'. [ 903.413968][T16846] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 903.543361][ T5935] usb 6-1: Using ep0 maxpacket: 16 [ 903.554062][ T5935] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 903.572899][ T5935] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 903.620171][ T5935] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 903.986997][ T5935] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 904.071203][ T5935] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.203643][ T5935] usb 6-1: Product: syz [ 904.249006][ T5935] usb 6-1: Manufacturer: syz [ 904.287270][ T5935] usb 6-1: SerialNumber: syz [ 904.587097][T16839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 904.596101][T16839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 904.616533][ T5935] usb 6-1: 0:2 : does not exist [ 904.662045][ T5935] usb 6-1: USB disconnect, device number 42 [ 904.770847][ T974] IPVS: starting estimator thread 0... [ 904.871046][T16870] IPVS: using max 36 ests per chain, 86400 per kthread [ 905.517489][ T30] audit: type=1400 audit(1750617071.033:1376): avc: denied { ioctl } for pid=16883 comm="syz.5.2685" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 905.541559][ C0] vkms_vblank_simulate: vblank timer overrun [ 906.453430][ T5935] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 906.643484][ T5935] usb 6-1: Using ep0 maxpacket: 32 [ 906.666231][T16900] netlink: 'syz.0.2691': attribute type 10 has an invalid length. [ 906.670250][ T5935] usb 6-1: config 0 has an invalid interface number: 247 but max is 0 [ 906.696070][T16900] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2691'. [ 906.704740][ T5935] usb 6-1: config 0 has no interface number 0 [ 906.803165][ T5935] usb 6-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice= 1.9b [ 906.813520][ T5935] usb 6-1: New USB device strings: Mfr=128, Product=0, SerialNumber=0 [ 906.939841][ T5935] usb 6-1: Manufacturer: syz [ 907.023656][ T5935] usb 6-1: config 0 descriptor?? [ 908.200306][T11302] usb 6-1: USB disconnect, device number 43 [ 908.426068][ T30] audit: type=1400 audit(1750617073.913:1377): avc: denied { map } for pid=16934 comm="syz.1.2701" path="/dev/video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 908.742282][T16954] netlink: 'syz.5.2706': attribute type 1 has an invalid length. [ 908.754701][ T30] audit: type=1400 audit(1750617074.273:1378): avc: denied { create } for pid=16952 comm="syz.5.2706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 908.782684][ T30] audit: type=1400 audit(1750617074.293:1379): avc: denied { write } for pid=16952 comm="syz.5.2706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 908.811995][ T5935] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 908.978322][ T5935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 909.016092][ T5935] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 909.029565][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.051662][ T5935] usb 4-1: config 0 descriptor?? [ 909.631444][ T30] audit: type=1400 audit(1750617075.143:1380): avc: denied { bind } for pid=16970 comm="syz.0.2712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 909.673706][ T5935] keytouch 0003:0926:3333.0054: fixing up Keytouch IEC report descriptor [ 909.762997][ T5935] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0054/input/input120 [ 910.859902][T16948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 911.148616][ T5935] keytouch 0003:0926:3333.0054: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 911.186038][T16948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 911.380946][T16993] netlink: 'syz.1.2717': attribute type 10 has an invalid length. [ 911.414408][T16985] bond0: (slave wlan1): Releasing backup interface [ 911.557433][T16995] tipc: Resetting bearer [ 911.628930][T17001] netlink: 'syz.0.2716': attribute type 10 has an invalid length. [ 911.705888][ T5889] usb 4-1: USB disconnect, device number 98 [ 912.474560][T16993] bond0: (slave wlan1): Opening slave failed [ 912.563969][T17001] bond0: (slave wlan1): Opening slave failed [ 912.821016][T17012] fuse: Bad value for 'fd' [ 912.922337][ T30] audit: type=1400 audit(1750617078.433:1381): avc: denied { ioctl } for pid=17006 comm="syz.4.2721" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 913.041027][ T30] audit: type=1400 audit(1750617078.553:1382): avc: denied { name_bind } for pid=17021 comm="syz.1.2725" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 913.103375][ T5935] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 913.133781][ T30] audit: type=1400 audit(1750617078.553:1383): avc: denied { connect } for pid=17021 comm="syz.1.2725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 913.875654][ T5935] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 913.893326][ T5935] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 913.924585][T17035] FAULT_INJECTION: forcing a failure. [ 913.924585][T17035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 913.963346][T17035] CPU: 0 UID: 0 PID: 17035 Comm: syz.0.2727 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 913.963374][T17035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 913.963384][T17035] Call Trace: [ 913.963390][T17035] [ 913.963397][T17035] dump_stack_lvl+0x16c/0x1f0 [ 913.963427][T17035] should_fail_ex+0x512/0x640 [ 913.963454][T17035] _copy_from_user+0x2e/0xd0 [ 913.963479][T17035] copy_msghdr_from_user+0x98/0x160 [ 913.963504][T17035] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 913.963541][T17035] ___sys_sendmsg+0xfe/0x1d0 [ 913.963566][T17035] ? __pfx____sys_sendmsg+0x10/0x10 [ 913.963592][T17035] ? __lock_acquire+0x622/0x1c90 [ 913.963659][T17035] __sys_sendmsg+0x16d/0x220 [ 913.963685][T17035] ? __pfx___sys_sendmsg+0x10/0x10 [ 913.963731][T17035] do_syscall_64+0xcd/0x4c0 [ 913.963759][T17035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.963777][T17035] RIP: 0033:0x7f39ff78e929 [ 913.963792][T17035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 913.963809][T17035] RSP: 002b:00007f3a00604038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 913.963826][T17035] RAX: ffffffffffffffda RBX: 00007f39ff9b5fa0 RCX: 00007f39ff78e929 [ 913.963838][T17035] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 913.963849][T17035] RBP: 00007f3a00604090 R08: 0000000000000000 R09: 0000000000000000 [ 913.963858][T17035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 913.963868][T17035] R13: 0000000000000000 R14: 00007f39ff9b5fa0 R15: 00007ffcaec22248 [ 913.963895][T17035] [ 914.188838][ T5935] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 914.198040][ T5935] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.213292][ T5935] usb 6-1: Product: syz [ 914.221663][ T5935] usb 6-1: Manufacturer: syz [ 914.229857][ T5935] usb 6-1: SerialNumber: syz [ 914.564791][T17046] ieee802154 phy0 wpan0: encryption failed: -22 [ 914.623836][T16424] Bluetooth: hci5: command tx timeout [ 914.874985][T17012] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 915.670102][ T5935] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 915.693399][ T5935] cdc_ncm 6-1:1.0: bind() failure [ 915.726829][ T5935] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 915.762881][T17063] netlink: 'syz.1.2734': attribute type 10 has an invalid length. [ 915.772094][T17063] bond0: (slave wlan1): Opening slave failed [ 915.795724][ T5935] cdc_ncm 6-1:1.1: bind() failure [ 915.812491][ T30] audit: type=1400 audit(1750617081.323:1384): avc: denied { read write } for pid=17057 comm="ip" path="/dev/console" dev="rootfs" ino=62 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 915.918045][T17065] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 916.653347][ T974] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 916.707855][T17083] netlink: 'syz.1.2737': attribute type 10 has an invalid length. [ 916.729374][T17083] bond0: (slave wlan1): Opening slave failed [ 916.809878][ T5889] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 916.831472][ T974] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 916.853337][ T974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.861347][ T974] usb 4-1: Product: syz [ 916.872603][ T974] usb 4-1: Manufacturer: syz [ 916.888934][ T974] usb 4-1: SerialNumber: syz [ 916.959005][T17094] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2740'. [ 916.969870][T17094] netlink: zone id is out of range [ 916.989036][T17094] netlink: get zone limit has 8 unknown bytes [ 917.035375][ T974] usb 4-1: config 0 descriptor?? [ 917.103541][ T5889] usb 5-1: Using ep0 maxpacket: 16 [ 917.113680][ T5889] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 917.121732][ T5889] usb 5-1: config 0 has no interface number 0 [ 917.138578][ T5889] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 917.375425][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.490258][ T5889] usb 5-1: Product: syz [ 917.497317][ T5889] usb 5-1: Manufacturer: syz [ 917.502141][ T5889] usb 5-1: SerialNumber: syz [ 917.502802][ T30] audit: type=1400 audit(1750617083.013:1385): avc: denied { read write } for pid=17101 comm="iptables" path="/dev/console" dev="rootfs" ino=62 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 917.689604][ T5935] usb 6-1: USB disconnect, device number 44 [ 918.005042][T17097] ceph: No mds server is up or the cluster is laggy [ 918.044535][ T5889] usb 5-1: config 0 descriptor?? [ 918.536590][ T5889] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 918.679811][ T30] audit: type=1400 audit(1750617083.573:1386): avc: denied { search } for pid=17101 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 918.702422][ T30] audit: type=1400 audit(1750617083.573:1387): avc: denied { search } for pid=17101 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 918.753442][ T30] audit: type=1400 audit(1750617083.573:1388): avc: denied { add_name } for pid=17101 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 918.817519][ T30] audit: type=1400 audit(1750617083.583:1389): avc: denied { create } for pid=17101 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 918.879147][ T30] audit: type=1400 audit(1750617083.583:1390): avc: denied { read open } for pid=17101 comm="iptables" path="/run/xtables.lock" dev="tmpfs" ino=11638 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 919.021009][ T30] audit: type=1400 audit(1750617083.583:1391): avc: denied { lock } for pid=17101 comm="iptables" path="/run/xtables.lock" dev="tmpfs" ino=11638 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 919.045098][ T30] audit: type=1400 audit(1750617084.453:1392): avc: denied { create } for pid=17119 comm="syz.0.2744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 919.066620][ T30] audit: type=1400 audit(1750617084.463:1393): avc: denied { write } for pid=17119 comm="syz.0.2744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 919.812091][ T974] mos7840 4-1:0.0: required endpoints missing [ 919.883743][ T5889] gspca_spca1528: reg_w err -110 [ 919.909418][ T974] usb 4-1: USB disconnect, device number 99 [ 919.917451][ T5889] spca1528 5-1:0.1: probe with driver spca1528 failed with error -110 [ 923.048596][ T5889] usb 5-1: USB disconnect, device number 117 [ 923.324192][T16424] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 923.334537][T16424] Bluetooth: hci5: Injecting HCI hardware error event [ 923.345334][ T51] Bluetooth: hci5: hardware error 0x00 [ 923.525000][ T117] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 923.587427][T17163] netlink: 'syz.5.2754': attribute type 2 has an invalid length. [ 923.595413][T17163] netlink: 'syz.5.2754': attribute type 1 has an invalid length. [ 923.707747][ T117] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 923.865520][ T117] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 923.875798][ T117] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.885965][ T117] usb 1-1: config 0 descriptor?? [ 923.923516][ T5935] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 924.395117][ T5935] usb 5-1: Using ep0 maxpacket: 16 [ 924.402421][ T5935] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 924.404705][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 924.404717][ T30] audit: type=1400 audit(1750617089.903:1396): avc: denied { ioctl } for pid=17172 comm="syz.1.2757" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 924.426432][ T5935] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 924.463930][ T5935] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 924.474165][ T5935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.480683][T17177] IPVS: set_ctl: invalid protocol: 1 10.1.1.1:20001 [ 924.482232][ T5935] usb 5-1: Product: syz [ 924.494326][ T5935] usb 5-1: Manufacturer: syz [ 924.499009][ T5935] usb 5-1: SerialNumber: syz [ 924.641176][ T30] audit: type=1400 audit(1750617090.143:1397): avc: denied { sys_module } for pid=17172 comm="syz.1.2757" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 924.665706][ T117] keytouch 0003:0926:3333.0055: fixing up Keytouch IEC report descriptor [ 924.701040][ T117] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0055/input/input121 [ 924.830008][ T5935] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 924.855952][ T5935] usb 5-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 924.941509][ T117] keytouch 0003:0926:3333.0055: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 924.974845][ T5935] usb 5-1: USB disconnect, device number 118 [ 925.013342][ T5875] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 925.021075][ T5874] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 925.173520][ T117] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 925.209416][ T5874] usb 6-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 925.220268][ T5875] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 925.270406][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.288529][ T5874] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.372309][ T5875] usb 4-1: Product: syz [ 925.381035][ T5874] usb 6-1: Product: syz [ 925.419639][ T5874] usb 6-1: Manufacturer: syz [ 925.419788][ T5875] usb 4-1: Manufacturer: syz [ 925.434577][ T5874] usb 6-1: SerialNumber: syz [ 925.508583][ T117] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 925.533151][ T5875] usb 4-1: SerialNumber: syz [ 925.584334][ T51] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 925.585265][ T5874] usb 6-1: config 0 descriptor?? [ 925.644185][T13999] usb 1-1: USB disconnect, device number 114 [ 925.655337][ T5875] usb 4-1: config 0 descriptor?? [ 925.661174][ T117] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 925.712392][ T117] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 925.738372][ T117] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.766406][T17196] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 925.830739][ T117] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 926.285293][T17220] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 926.303157][T17220] syzkaller0: entered promiscuous mode [ 926.309711][T17220] syzkaller0: entered allmulticast mode [ 926.610414][T17202] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 927.107654][T17202] usb 5-1: Using ep0 maxpacket: 8 [ 927.108413][T17229] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 927.119283][T17229] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 927.127063][T17229] vhci_hcd vhci_hcd.0: Device attached [ 927.144036][T17202] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 927.161969][T17202] usb 5-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 927.196670][ T974] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 927.219246][T17202] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.263204][T17202] usb 5-1: config 0 descriptor?? [ 927.375473][ T974] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 927.387635][T13999] usb 35-1: new high-speed USB device number 3 using vhci_hcd [ 927.408069][ T974] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 927.417576][ T974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.435886][ T974] usb 1-1: config 0 descriptor?? [ 927.703697][T17202] zydacron 0003:13EC:0006.0056: hidraw0: USB HID v2.00 Device [HID 13ec:0006] on usb-dummy_hcd.4-1/input0 [ 927.872938][ T974] keytouch 0003:0926:3333.0057: fixing up Keytouch IEC report descriptor [ 927.905044][ T974] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0057/input/input122 [ 927.906942][ T30] audit: type=1400 audit(1750617093.423:1398): avc: denied { remove_name } for pid=5172 comm="acpid" name="acpid.pid" dev="tmpfs" ino=8 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 927.957704][ T30] audit: type=1400 audit(1750617093.423:1399): avc: denied { unlink } for pid=5172 comm="acpid" name="acpid.pid" dev="tmpfs" ino=8 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 928.018537][ T30] audit: type=1400 audit(1750617093.463:1400): avc: denied { unlink } for pid=5482 comm="dhcpcd" name="sock" dev="tmpfs" ino=1834 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 [ 928.044652][ T30] audit: type=1400 audit(1750617093.543:1401): avc: denied { unlink } for pid=5482 comm="dhcpcd" name="pid" dev="tmpfs" ino=1833 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 929.193685][ T974] keytouch 0003:0926:3333.0057: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 929.227633][T17233] vhci_hcd: connection reset by peer [ 929.251221][T12184] vhci_hcd: stop threads [ 929.277130][T12184] vhci_hcd: release socket [ 929.284324][T12184] vhci_hcd: disconnect device [ 929.293011][T17202] usb 1-1: USB disconnect, device number 115 [ 929.323869][ T5875] mos7840 4-1:0.0: required endpoints missing [ 929.351509][ T117] usb 2-1: USB disconnect, device number 124 [ 929.363655][ T5874] mos7840 6-1:0.0: required endpoints missing [ 929.389663][ T5875] usb 4-1: USB disconnect, device number 100 [ 929.426566][ T5874] usb 6-1: USB disconnect, device number 45 [ 929.486415][ T30] audit: type=1400 audit(1750617095.003:1402): avc: denied { write } for pid=17254 comm="syz.3.2766" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 929.520138][T17255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 929.567106][T17261] FAULT_INJECTION: forcing a failure. [ 929.567106][T17261] name failslab, interval 1, probability 0, space 0, times 0 [ 929.580047][T17261] CPU: 1 UID: 0 PID: 17261 Comm: syz.1.2768 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 929.580071][T17261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 929.580082][T17261] Call Trace: [ 929.580088][T17261] [ 929.580095][T17261] dump_stack_lvl+0x16c/0x1f0 [ 929.580125][T17261] should_fail_ex+0x512/0x640 [ 929.580156][T17261] should_failslab+0xc2/0x120 [ 929.580181][T17261] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 929.580205][T17261] ? skb_clone+0x190/0x3f0 [ 929.580232][T17261] skb_clone+0x190/0x3f0 [ 929.580258][T17261] netlink_deliver_tap+0xabd/0xd30 [ 929.580291][T17261] netlink_unicast+0x5df/0x7f0 [ 929.580312][T17261] ? __pfx_netlink_unicast+0x10/0x10 [ 929.580328][T17261] ? __build_skb_around+0x278/0x3b0 [ 929.580353][T17261] netlink_sendmsg+0x8d1/0xdd0 [ 929.580376][T17261] ? __pfx_netlink_sendmsg+0x10/0x10 [ 929.580403][T17261] ____sys_sendmsg+0xa98/0xc70 [ 929.580422][T17261] ? copy_msghdr_from_user+0x10a/0x160 [ 929.580446][T17261] ? __pfx_____sys_sendmsg+0x10/0x10 [ 929.580476][T17261] ___sys_sendmsg+0x134/0x1d0 [ 929.580502][T17261] ? __pfx____sys_sendmsg+0x10/0x10 [ 929.580523][T17261] ? __lock_acquire+0x622/0x1c90 [ 929.580581][T17261] __sys_sendmsg+0x16d/0x220 [ 929.580605][T17261] ? __pfx___sys_sendmsg+0x10/0x10 [ 929.580645][T17261] do_syscall_64+0xcd/0x4c0 [ 929.580673][T17261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.580689][T17261] RIP: 0033:0x7f5e2f78e929 [ 929.580704][T17261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 929.580720][T17261] RSP: 002b:00007f5e30630038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 929.580736][T17261] RAX: ffffffffffffffda RBX: 00007f5e2f9b5fa0 RCX: 00007f5e2f78e929 [ 929.580747][T17261] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 929.580758][T17261] RBP: 00007f5e30630090 R08: 0000000000000000 R09: 0000000000000000 [ 929.580768][T17261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 929.580778][T17261] R13: 0000000000000000 R14: 00007f5e2f9b5fa0 R15: 00007ffcbcbe1d98 [ 929.580801][T17261] [ 929.580829][T17261] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2768'. [ 929.809635][T17261] netlink: zone id is out of range [ 929.814820][T17261] netlink: get zone limit has 8 unknown bytes [ 929.918126][ T30] audit: type=1400 audit(1750617095.433:1403): avc: denied { mount } for pid=17269 comm="syz.0.2770" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 930.895443][T17283] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2773'. [ 930.918273][ T5889] usb 5-1: USB disconnect, device number 119 [ 930.934360][T17283] netlink: zone id is out of range [ 930.958307][T17283] netlink: get zone limit has 8 unknown bytes [ 930.981356][ T30] audit: type=1400 audit(1750617096.493:1404): avc: denied { execute } for pid=17281 comm="syz.3.2774" path=2F6D656D66643A0B656DDA9952406DFCFE9B232AFFD81645112DFD10898DCC6250148977EF901DC902EB0156FB6D868AC12E6DD0A2A4C9073B280AC0221FE41D85B395ECBB9B0185FF78F2070C3DD1CFECB8210B9538BF15622D92D6B5BFE292C2A37DD03BD196868A1BE177F9B0D2ABC98A190AC56F1E132FE4917FA5F1DD57DB98CD94FC90A02E2F66696C6530202864656C6574656429 dev="tmpfs" ino=1672 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 931.035509][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.358890][ T30] audit: type=1400 audit(1750617096.873:1405): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 931.450502][T17294] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2776'. [ 931.786720][ T30] audit: type=1400 audit(1750617096.873:1406): avc: denied { read write } for pid=17291 comm="syz.1.2777" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 931.810413][ T30] audit: type=1400 audit(1750617096.873:1407): avc: denied { open } for pid=17291 comm="syz.1.2777" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 931.903359][ T5889] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 931.921590][ T30] audit: type=1400 audit(1750617096.873:1408): avc: denied { ioctl } for pid=17291 comm="syz.1.2777" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 932.012986][ T30] audit: type=1400 audit(1750617097.523:1409): avc: denied { getopt } for pid=17299 comm="syz.0.2778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 932.133600][ T5889] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 932.142829][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.166579][ T5889] usb 2-1: Product: syz [ 932.170758][ T5889] usb 2-1: Manufacturer: syz [ 932.189145][ T5889] usb 2-1: SerialNumber: syz [ 932.206667][ T5889] usb 2-1: config 0 descriptor?? [ 932.333501][ T974] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 932.532301][T17311] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 932.539838][T17311] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 933.058304][T13999] vhci_hcd: vhci_device speed not set [ 933.064506][ T974] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 933.076210][ T974] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 933.085331][ T974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.095711][ T974] usb 1-1: config 0 descriptor?? [ 933.539565][ T974] keytouch 0003:0926:3333.0058: fixing up Keytouch IEC report descriptor [ 933.559939][ T974] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0058/input/input123 [ 934.302140][ T5889] mos7840 2-1:0.0: required endpoints missing [ 934.535617][ T5889] usb 2-1: USB disconnect, device number 125 [ 934.602461][ T30] audit: type=1400 audit(1750617100.113:1410): avc: denied { bind } for pid=17322 comm="syz.1.2785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 934.634374][ T974] keytouch 0003:0926:3333.0058: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 934.649086][ T974] usb 1-1: USB disconnect, device number 116 [ 934.672599][T17326] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 934.679124][T17326] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 934.686515][T17321] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 934.693040][T17321] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 934.730171][ T30] audit: type=1400 audit(1750617100.113:1411): avc: denied { write } for pid=17322 comm="syz.1.2785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 934.845433][T17326] vhci_hcd vhci_hcd.0: Device attached [ 934.926179][T17344] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2791'. [ 935.012863][T17348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2791'. [ 935.025412][T17321] vhci_hcd vhci_hcd.0: Device attached [ 935.043325][ T5889] vhci_hcd: vhci_device speed not set [ 935.115531][ T5889] usb 41-2: new full-speed USB device number 2 using vhci_hcd [ 935.386590][ T30] audit: type=1400 audit(1750617100.903:1412): avc: denied { create } for pid=17351 comm="syz.0.2792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 935.450780][ T30] audit: type=1400 audit(1750617100.933:1413): avc: denied { ioctl } for pid=17351 comm="syz.0.2792" path="socket:[57727]" dev="sockfs" ino=57727 ioctlcmd=0x7202 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 935.480577][T17354] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2792'. [ 935.752710][ T30] audit: type=1400 audit(1750617101.013:1414): avc: denied { setopt } for pid=17351 comm="syz.0.2792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 935.885410][T17361] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2795'. [ 935.941932][T17361] netlink: zone id is out of range [ 935.951586][T17361] netlink: get zone limit has 8 unknown bytes [ 935.973440][T17202] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 935.983628][ T9] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 936.193483][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 936.201110][T17202] usb 5-1: device descriptor read/64, error -71 [ 936.353471][ T5875] usb 4-1: new full-speed USB device number 101 using dummy_hcd [ 936.695590][ T9] usb 6-1: config 0 has an invalid interface number: 33 but max is 1 [ 936.713292][ T9] usb 6-1: config 0 has no interface number 1 [ 936.719412][ T9] usb 6-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 936.763293][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 936.813550][T17202] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 936.827175][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 936.839991][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.854618][ T5875] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 936.863358][ T9] usb 6-1: Product: syz [ 936.867792][ T9] usb 6-1: Manufacturer: syz [ 936.875793][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.894460][ T5875] usb 4-1: config 0 descriptor?? [ 936.921625][ T9] usb 6-1: SerialNumber: syz [ 936.997723][ T9] usb 6-1: config 0 descriptor?? [ 937.019356][ T9] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 937.043327][T17202] usb 5-1: device descriptor read/64, error -71 [ 937.193331][ T30] audit: type=1400 audit(1750617102.653:1415): avc: denied { write } for pid=5800 comm="syz-executor" path="pipe:[4393]" dev="pipefs" ino=4393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 937.223442][T17202] usb usb5-port1: attempt power cycle Connection to 10.128.0.67 closed by remote host. [ 937.269762][ T5875] usbhid 4-1:0.0: can't add hid device: -71 [ 937.269824][ T5875] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 937.280971][ T9] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 937.286463][ T5875] usb 4-1: USB disconnect, device number 101 [ 937.298779][ T2336] pvrusb2: Failed to submit write-control URB status=-2 [ 937.300094][ T2336] usb 6-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 937.300481][ T2336] usb 6-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 937.322036][ T9] usb 6-1: USB disconnect, device number 46 [ 937.510228][ T30] audit: type=1400 audit(1750617102.813:1416): avc: denied { firmware_load } for pid=2336 comm="pvrusb2-context" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 938.029796][T17202] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 938.051572][T17327] vhci_hcd: connection reset by peer [ 938.061315][T17202] usb 5-1: device descriptor read/8, error -71 [ 938.063368][T12181] vhci_hcd: stop threads [ 938.121114][T17325] vhci_hcd: connection closed [ 938.253641][T12181] vhci_hcd: release socket [ 938.313270][T12181] vhci_hcd: disconnect device [ 938.343448][T12181] vhci_hcd: stop threads [ 938.347714][T12181] vhci_hcd: release socket [ 938.373354][T12181] vhci_hcd: disconnect device [ 939.195850][T12181] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.300949][T12181] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.365693][T12181] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.445440][T12181] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.647609][T12181] team0: Port device gtp0 removed [ 939.794881][T12181] bond0 (unregistering): Released all slaves [ 939.806036][T12181] bond1 (unregistering): Released all slaves [ 940.081451][T12181] hsr_slave_0: left promiscuous mode [ 940.096224][T12181] hsr_slave_1: left promiscuous mode [ 940.111521][T12181] veth1_macvtap: left allmulticast mode [ 940.117229][T12181] veth1_macvtap: left promiscuous mode [ 940.123513][T12181] veth0_macvtap: left promiscuous mode [ 940.129042][T12181] veth1_vlan: left promiscuous mode [ 940.134737][T12181] veth0_vlan: left promiscuous mode [ 940.216718][ T5889] vhci_hcd: vhci_device speed not set [ 940.332984][T17372] smc: removing ib device syz2 [ 940.333848][ T2336] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 940.358386][ T2336] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 940.367464][ T2336] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-29xxx-01.fw [ 940.377669][ T2336] pvrusb2: Failure uploading firmware1 [ 940.383138][ T2336] pvrusb2: Device initialization was not successful. [ 940.390119][ T2336] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 940.399367][ T2336] pvrusb2: Failed to submit write-control URB status=-19 [ 940.399432][ T9] pvrusb2: Device being rendered inoperable [ 940.407679][ T2336] usb 6-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 940.422551][ T2336] usb 6-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 940.432556][ T2336] ------------[ cut here ]------------ [ 940.438049][ T2336] WARNING: CPU: 1 PID: 2336 at drivers/base/firmware_loader/fallback.c:148 firmware_fallback_sysfs+0x6d3/0xbe0 [ 940.449793][ T2336] Modules linked in: [ 940.453840][ T2336] CPU: 1 UID: 0 PID: 2336 Comm: pvrusb2-context Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 940.466274][ T2336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 940.476427][ T2336] RIP: 0010:firmware_fallback_sysfs+0x6d3/0xbe0 [ 940.482649][ T2336] Code: 88 fb e9 da f9 ff ff e8 7b 0d aa fb e8 86 34 70 fb 31 ff 89 c3 89 c6 e8 ab 08 aa fb 85 db 0f 84 17 fb ff ff e8 5e 0d aa fb 90 <0f> 0b 90 48 c7 c6 c0 ab 42 8c 4c 89 e2 4c 89 f7 e8 68 28 f9 ff e9 [ 940.502314][ T2336] RSP: 0018:ffffc9000550f8e0 EFLAGS: 00010293 [ 940.508380][ T2336] RAX: 0000000000000000 RBX: 00000000fffffff5 RCX: ffffffff86120ee5 [ 940.516348][ T2336] RDX: ffff88802b974880 RSI: ffffffff86120ef2 RDI: 0000000000000005 [ 940.524335][ T2336] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 940.532295][ T2336] R10: 00000000fffffff5 R11: 0000000000002c00 R12: ffffffff8ca92520 [ 940.540270][ T2336] R13: ffff888074c0e900 R14: ffff88803472e0b0 R15: 0000000000001770 [ 940.548264][ T2336] FS: 0000000000000000(0000) GS:ffff888124853000(0000) knlGS:0000000000000000 [ 940.558250][ T2336] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 940.564853][ T2336] CR2: 0000555592a45588 CR3: 0000000031676000 CR4: 00000000003526f0 [ 940.572822][ T2336] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 940.580787][ T2336] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 940.588762][ T2336] Call Trace: [ 940.592030][ T2336] [ 940.594953][ T2336] _request_firmware+0xfe9/0x1470 [ 940.599967][ T2336] ? __pfx__request_firmware+0x10/0x10 [ 940.605427][ T2336] ? lockdep_init_map_type+0x5c/0x280 [ 940.610803][ T2336] request_firmware+0x35/0x50 [ 940.615472][ T2336] pvr2_locate_firmware+0x8f/0x520 [ 940.620559][ T2336] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 940.626204][ T2336] pvr2_upload_firmware1+0x1c5/0xa00 [ 940.631478][ T2336] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 940.637467][ T2336] ? __pfx_pvr2_upload_firmware1+0x10/0x10 [ 940.643272][ T2336] ? __mutex_trylock_common+0xe9/0x250 [ 940.648730][ T2336] ? __pfx___mutex_trylock_common+0x10/0x10 [ 940.654640][ T2336] pvr2_hdw_initialize+0x3e6/0x4510 [ 940.659816][ T2336] ? find_held_lock+0x2b/0x80 [ 940.664502][ T2336] ? pvr2_context_set_notify+0x2b0/0x310 [ 940.670138][ T2336] ? __pfx_pvr2_hdw_initialize+0x10/0x10 [ 940.675776][ T2336] ? __pfx___schedule+0x10/0x10 [ 940.680623][ T2336] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 940.686613][ T2336] ? find_held_lock+0x2b/0x80 [ 940.691267][ T2336] ? schedule+0x2d7/0x3a0 [ 940.695609][ T2336] pvr2_context_thread_func+0x253/0x9b0 [ 940.701146][ T2336] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 940.707203][ T2336] ? __pfx_autoremove_wake_function+0x10/0x10 [ 940.713282][ T2336] ? lockdep_hardirqs_on+0x7c/0x110 [ 940.718484][ T2336] ? __kthread_parkme+0x19e/0x250 [ 940.723515][ T2336] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 940.729571][ T2336] kthread+0x3c2/0x780 [ 940.733649][ T2336] ? __pfx_kthread+0x10/0x10 [ 940.738227][ T2336] ? rcu_is_watching+0x12/0xc0 [ 940.742969][ T2336] ? __pfx_kthread+0x10/0x10 [ 940.747551][ T2336] ret_from_fork+0x5d4/0x6f0 [ 940.752127][ T2336] ? __pfx_kthread+0x10/0x10 [ 940.756709][ T2336] ret_from_fork_asm+0x1a/0x30 [ 940.761454][ T2336] [ 940.764477][ T2336] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 940.771741][ T2336] CPU: 1 UID: 0 PID: 2336 Comm: pvrusb2-context Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 940.784132][ T2336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 940.794173][ T2336] Call Trace: [ 940.797426][ T2336] [ 940.800333][ T2336] dump_stack_lvl+0x3d/0x1f0 [ 940.804907][ T2336] panic+0x71c/0x800 [ 940.808794][ T2336] ? __pfx_panic+0x10/0x10 [ 940.813202][ T2336] ? show_trace_log_lvl+0x29b/0x3e0 [ 940.818398][ T2336] ? check_panic_on_warn+0x1f/0xb0 [ 940.823499][ T2336] ? firmware_fallback_sysfs+0x6d3/0xbe0 [ 940.829116][ T2336] check_panic_on_warn+0xab/0xb0 [ 940.834045][ T2336] __warn+0xf6/0x3c0 [ 940.837929][ T2336] ? firmware_fallback_sysfs+0x6d3/0xbe0 [ 940.843550][ T2336] report_bug+0x3c3/0x580 [ 940.847867][ T2336] ? firmware_fallback_sysfs+0x6d3/0xbe0 [ 940.853486][ T2336] handle_bug+0x184/0x210 [ 940.857796][ T2336] exc_invalid_op+0x17/0x50 [ 940.862282][ T2336] asm_exc_invalid_op+0x1a/0x20 [ 940.867114][ T2336] RIP: 0010:firmware_fallback_sysfs+0x6d3/0xbe0 [ 940.873339][ T2336] Code: 88 fb e9 da f9 ff ff e8 7b 0d aa fb e8 86 34 70 fb 31 ff 89 c3 89 c6 e8 ab 08 aa fb 85 db 0f 84 17 fb ff ff e8 5e 0d aa fb 90 <0f> 0b 90 48 c7 c6 c0 ab 42 8c 4c 89 e2 4c 89 f7 e8 68 28 f9 ff e9 [ 940.892928][ T2336] RSP: 0018:ffffc9000550f8e0 EFLAGS: 00010293 [ 940.898983][ T2336] RAX: 0000000000000000 RBX: 00000000fffffff5 RCX: ffffffff86120ee5 [ 940.906936][ T2336] RDX: ffff88802b974880 RSI: ffffffff86120ef2 RDI: 0000000000000005 [ 940.914895][ T2336] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 940.922847][ T2336] R10: 00000000fffffff5 R11: 0000000000002c00 R12: ffffffff8ca92520 [ 940.930799][ T2336] R13: ffff888074c0e900 R14: ffff88803472e0b0 R15: 0000000000001770 [ 940.938758][ T2336] ? firmware_fallback_sysfs+0x6c5/0xbe0 [ 940.944375][ T2336] ? firmware_fallback_sysfs+0x6d2/0xbe0 [ 940.950015][ T2336] _request_firmware+0xfe9/0x1470 [ 940.955033][ T2336] ? __pfx__request_firmware+0x10/0x10 [ 940.960475][ T2336] ? lockdep_init_map_type+0x5c/0x280 [ 940.965842][ T2336] request_firmware+0x35/0x50 [ 940.970503][ T2336] pvr2_locate_firmware+0x8f/0x520 [ 940.975601][ T2336] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 940.981225][ T2336] pvr2_upload_firmware1+0x1c5/0xa00 [ 940.986495][ T2336] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 940.992464][ T2336] ? __pfx_pvr2_upload_firmware1+0x10/0x10 [ 940.998254][ T2336] ? __mutex_trylock_common+0xe9/0x250 [ 941.003703][ T2336] ? __pfx___mutex_trylock_common+0x10/0x10 [ 941.009588][ T2336] pvr2_hdw_initialize+0x3e6/0x4510 [ 941.014768][ T2336] ? find_held_lock+0x2b/0x80 [ 941.019428][ T2336] ? pvr2_context_set_notify+0x2b0/0x310 [ 941.025052][ T2336] ? __pfx_pvr2_hdw_initialize+0x10/0x10 [ 941.030665][ T2336] ? __pfx___schedule+0x10/0x10 [ 941.035510][ T2336] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 941.041487][ T2336] ? find_held_lock+0x2b/0x80 [ 941.046156][ T2336] ? schedule+0x2d7/0x3a0 [ 941.050486][ T2336] pvr2_context_thread_func+0x253/0x9b0 [ 941.056027][ T2336] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 941.062089][ T2336] ? __pfx_autoremove_wake_function+0x10/0x10 [ 941.068150][ T2336] ? lockdep_hardirqs_on+0x7c/0x110 [ 941.073339][ T2336] ? __kthread_parkme+0x19e/0x250 [ 941.078351][ T2336] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 941.084400][ T2336] kthread+0x3c2/0x780 [ 941.088450][ T2336] ? __pfx_kthread+0x10/0x10 [ 941.093021][ T2336] ? rcu_is_watching+0x12/0xc0 [ 941.097770][ T2336] ? __pfx_kthread+0x10/0x10 [ 941.102340][ T2336] ret_from_fork+0x5d4/0x6f0 [ 941.106917][ T2336] ? __pfx_kthread+0x10/0x10 [ 941.111487][ T2336] ret_from_fork_asm+0x1a/0x30 [ 941.116244][ T2336] [ 941.119424][ T2336] Kernel Offset: disabled [ 941.123726][ T2336] Rebooting in 86400 seconds..