last executing test programs: 3m41.53339958s ago: executing program 1 (id=766): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0x10012, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0}], 0x1, 0x0, 0x0) close(0xffffffffffffffff) r1 = socket$qrtr(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffff, 0xffff3fff}, 0xc) write(r1, 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000000)=0x8) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000100)) r6 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x4, 0x1}) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x100000000000000) 3m40.55438018s ago: executing program 1 (id=769): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) rmdir(&(0x7f00000001c0)='./file1\x00') r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) r1 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') pread64(r3, &(0x7f0000002180)=""/4105, 0x1009, 0x0) 3m38.73313458s ago: executing program 1 (id=777): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_clone3(&(0x7f0000000700)={0x2000c000, 0x0, 0x0, &(0x7f0000000280), {0x8}, &(0x7f0000000240)=""/37, 0x25, 0x0, &(0x7f00000003c0)}, 0x58) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000300)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, r2}) writev(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x2) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001300)=""/234, 0xea}], 0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000500)={0x0, 0x0, r7, r8, 0x0, 0x0, 0x0, 0x3, {0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcad, 0x0, 0x0, 0xffffffff, 0x0, "7783df00000800000000000000000001000000000000000000004b72cd0900"}}) read$FUSE(0xffffffffffffffff, &(0x7f0000003480)={0x2020}, 0x2020) 3m38.225766689s ago: executing program 1 (id=778): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, 0x0) sched_setaffinity(0x0, 0xfffffe60, &(0x7f00000002c0)=0x400001000000002) r0 = socket$inet(0x2, 0x80001, 0x84) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r1, 0x3) bind$inet(r0, &(0x7f0000000180)={0x2, 0xc620, @local}, 0x10) listen(r0, 0x3) r2 = socket$inet(0x2, 0x1, 0xc) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0xce1f, @local}, 0x10) listen(r2, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240), 0x82049d, &(0x7f0000000100)=ANY=[]) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5309, 0x0) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000000300)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007908ef1b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e800000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0xffffffffffffffeb, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) 3m37.141332922s ago: executing program 1 (id=786): openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file1\x00', 0x16) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1607010, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x87}, './file0\x00'}) ioctl$RTC_PIE_ON(r0, 0x7005) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x23, 0x805, 0x0) r3 = syz_io_uring_setup(0x16c2, &(0x7f0000000480)={0x0, 0xbd12, 0x10100, 0x1, 0x327}, &(0x7f0000000300)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x3}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000000c0)={0x88, @multicast2, 0x4e21, 0x2, 'dh\x00', 0x38, 0xfffffdbd, 0x5d}, 0x2c) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfef, 0x0) 3m35.710264103s ago: executing program 1 (id=791): r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x92902, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) sendto$packet(r2, &(0x7f0000000180)="0b031407e0ff25000200", 0xa, 0x1, 0x0, 0x0) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(r3, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, 0xc, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4051}, 0x40000) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000002240)=@raw={'raw\x00', 0x8, 0x3, 0x2f8, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6, 0x0, 0x5}, 0x0, 0xd8, 0x138, 0x0, {0x0, 0x4c00}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x8, 0x2, 0x4}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [0xff000000, 0xff, 0xffffff00, 0xff], 0x4e23, 0x4e23, 0x4e21, 0x4e22, 0x6, 0xff81, 0x4, 0x7fff}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, 'veth1_to_batadv\x00', {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) setrlimit(0x0, &(0x7f0000000080)={0x7fffffffffffffff, 0xa04}) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x14}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000220000080003400000000a14000000110001"], 0x64}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000000200000000000000000000090300000000000000000000010500000008ffff0f0000000000000003000000000200"], 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x41, 0x3, 0x288, 0x0, 0x19, 0x0, 0x0, 0x0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x3, 0x0, {[{{@ip={@remote, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'veth1_to_bridge\x00', {}, {}, 0x8}, 0x0, 0xd0, 0x110, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@cluster={{0x30}, {0x7f}}, @common=@ah={{0x30}, {[0x8, 0x95]}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "72b9e2e0113eaa913531d376bcdacb87f768e3aa4b791c389a4d8b799055"}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e8) 3m19.845036284s ago: executing program 32 (id=791): r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x92902, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) sendto$packet(r2, &(0x7f0000000180)="0b031407e0ff25000200", 0xa, 0x1, 0x0, 0x0) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(r3, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, 0xc, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4051}, 0x40000) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000002240)=@raw={'raw\x00', 0x8, 0x3, 0x2f8, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6, 0x0, 0x5}, 0x0, 0xd8, 0x138, 0x0, {0x0, 0x4c00}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x8, 0x2, 0x4}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [0xff000000, 0xff, 0xffffff00, 0xff], 0x4e23, 0x4e23, 0x4e21, 0x4e22, 0x6, 0xff81, 0x4, 0x7fff}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, 'veth1_to_batadv\x00', {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) setrlimit(0x0, &(0x7f0000000080)={0x7fffffffffffffff, 0xa04}) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x14}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000220000080003400000000a14000000110001"], 0x64}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000000200000000000000000000090300000000000000000000010500000008ffff0f0000000000000003000000000200"], 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x41, 0x3, 0x288, 0x0, 0x19, 0x0, 0x0, 0x0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x3, 0x0, {[{{@ip={@remote, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'veth1_to_bridge\x00', {}, {}, 0x8}, 0x0, 0xd0, 0x110, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@cluster={{0x30}, {0x7f}}, @common=@ah={{0x30}, {[0x8, 0x95]}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "72b9e2e0113eaa913531d376bcdacb87f768e3aa4b791c389a4d8b799055"}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e8) 3m17.881209155s ago: executing program 0 (id=843): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000060000fffffffffffffff90902000000040000000000000700000000000000005f"], 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 3m16.886400439s ago: executing program 0 (id=846): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000004f00)=ANY=[@ANYBLOB="782200002cfd0100000000000000000004000080642211806022eb808c043a80564bf62caba8994630de60b12c2a9bc856205838b365b4c498c6a705ee067b2c97422515a74a7ae9e4fc782b10e150c561"], 0x2278}], 0x1}, 0x0) 3m16.822351334s ago: executing program 0 (id=847): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00063f03000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) 3m16.472092524s ago: executing program 0 (id=850): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) umount2(&(0x7f00000000c0)='./file0/file0\x00', 0x8) r4 = socket$rds(0x15, 0x5, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000a80)={0x0, 0x6, 0x6, 0x1}) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000e80)={r5, "408a3458d50c777039df1683b85c042f"}) bind$rds(r4, &(0x7f0000000300)={0x2, 0x4e20, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, 0x0, 0x0, &(0x7f0000000a00)=[@mask_cswp={0x58, 0x114, 0x9, {{0x5, 0xed740561}, 0x0, 0x0, 0x8, 0x401, 0x9, 0x1, 0x10, 0x8}}], 0x58, 0xc000}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000140)={0x8, '\x00', {'veth1_to_hsr\x00'}, 0x42}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0xffffff8c}, 0x1, 0x0, 0x0, 0x4000}, 0x4048800) sendmsg$alg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4004800) 3m14.711785319s ago: executing program 0 (id=852): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'gretap0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x7}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = syz_pidfd_open(0x0, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000000140)={0x0, 0x0, 0xd2000000}, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) getpid() fsync(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000020000009500000000000000bfe5383110ad4a830b3eb504a1bac545969069f3f7e3bf58d1f15dbc6a5962b9f9"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x48000) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 3m14.250043207s ago: executing program 0 (id=858): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000ffff000000007200ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100003f08000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) 3m13.573679788s ago: executing program 33 (id=858): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000ffff000000007200ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100003f08000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) 12.242323891s ago: executing program 5 (id=1535): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x44e200, 0x90) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat(0xffffffffffffff9c, 0x0, 0x101001, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000015c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001540), &(0x7f0000001580)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001700)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f00000016c0)}, 0x20) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001780)={0xffffffffffffffff, 0x101, 0x28}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000003000085000000a800000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000040000850000008200000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x18, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1f922cb9, 0x0, 0x0, 0x0, 0x5f}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x8}, @generic={0x3, 0xc, 0x2, 0xffff, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x3}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x3, 0x1, &(0x7f0000000280)=""/1, 0x40f00, 0xe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001500)={0x3, 0x4, 0x2, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001800)=[r3, r4, 0x1, r0, r5, r6, 0xffffffffffffffff, r9], 0x0, 0x10, 0xb, @void, @value}, 0x94) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x40, 0xa, 0x401, 0x40000004, 0x10}) bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) 9.339959203s ago: executing program 5 (id=1539): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x5}) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0x9b0000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0905, 0xfffffff7, '\x00', @p_u32=&(0x7f0000000000)=0x5}}) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0d, &(0x7f0000000040)) syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000044e22008d31324320dcb0102030109021200010400441a88659f69c34ce3d11ed920000904e700002001d656"], 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x4) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r5, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000280)={0x84, @empty, 0x0, 0x0, 'sed\x00'}, 0x2c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100), 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000012c0)={@in={{0x2, 0x4e20, @local}}, 0x0, 0x0, 0x30, 0x0, "8c3422dd6888df120bde79f04103c458187eb46c2d996aff287154e786455261c4c6590e08c5987ea86205399ad5bd35f21907c7988d130000000000008000"}, 0xd8) futex(0x0, 0x100, 0x800009, 0x0, 0x0, 0x101) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @private1}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) 9.210600316s ago: executing program 6 (id=1540): r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r5, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=r6, @ANYBLOB="070000000000071400000000000000febcdd2f0000000000402d2f5c260d802d0000000000000080000000000000000017000000000000002f3ecd492d9068a6fd3357e12b14c7e20d762ff060679807"], 0x60) capset(&(0x7f0000000000)={0x20080522}, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r7, 0xc01064bd, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004041, 0x0, 0x0) close(0xffffffffffffffff) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000002240)={'wg2\x00', 0x0}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000002340)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002300)={&(0x7f0000002280)={0x70, r8, 0x400, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7b}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040010}, 0x40) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000100)={0x14, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 6.518085285s ago: executing program 3 (id=1547): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000ffff000000007200ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100400000000c00023f700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) 6.243338991s ago: executing program 3 (id=1550): socket$packet(0x11, 0x3, 0x300) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0xfffffffc, 0x2}}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$sysctl(r5, &(0x7f0000000000)='4\x00', 0x2) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) r7 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000000003e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) r8 = socket$inet6(0xa, 0x2, 0x9) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x2, @dev, 0x101}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0xc0) r9 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r7, &(0x7f00000003c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r10, {0x7, 0x29, 0x401, 0x80, 0x0, 0x1, 0xfffffffb, 0x7, 0x0, 0x0, 0x40, 0xfff}}, 0x50) ioctl$IOCTL_VMCI_VERSION2(r9, 0x7a7, 0x0) 6.199677301s ago: executing program 4 (id=1551): r0 = fsopen(&(0x7f0000005880)='zonefs\x00', 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_usb_connect(0x2, 0x51, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x9, 0x94, 0x73, 0x8, 0x1199, 0x6821, 0x9859, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x3, 0x0, 0x5, 0x37, 0x5d, 0xd2, 0x0, [], [{{0x9, 0x5, 0x6, 0x3, 0x40, 0x7, 0xe, 0x5}}, {{0x9, 0x5, 0x7, 0x0, 0x0, 0x4, 0x2, 0x3}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0x4, 0xfe, 0x7}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x3, 0x2, 0x4}}, {{0x9, 0x5, 0xa, 0x1c, 0x3ff, 0x1, 0xac, 0x8}}]}}]}}]}}, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.113500942s ago: executing program 6 (id=1552): syz_io_uring_setup(0x236, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) listen(r0, 0x0) accept$ax25(r0, 0x0, 0x0) 5.214265672s ago: executing program 5 (id=1553): io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0x21b0, 0x1000, 0x0, 0x2a5}) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000580)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x42, 0x0, "bd1c790806ed6dcd18899f9ea77ca9fb5184ff0ba54b7dfe784d2f6b7dcd9474d9b295588ac0b991d5c66461eca3f1ff5543acc6c970d0ad22d692e84d692972368e64c272da633a217b45fcc8b1ff3b"}, 0xd8) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000340)=0x2, 0xa2) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (rerun: 32) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0xffffffff, 0x20, 0x0, @void, @value, @void, @value}, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (rerun: 64) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb929"], 0xfdef) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x4044040, &(0x7f0000000240)={0x11, 0x19, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, 0x14) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000800000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) (async) sendmsg$can_bcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000000080800"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}}, 0x24) (async) close(r5) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f000000e0c0), 0x10010) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000200)=@ccm_128={{0x304}, '\x00', "bdd8de174108063a7ee1988a586f506d", "f24dc982", "e6f3626a7cb0473a"}, 0x28) 5.213818424s ago: executing program 2 (id=1554): r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x92902, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) sendto$packet(r2, &(0x7f0000000180)="0b031407e0ff25000200", 0xa, 0x1, 0x0, 0x0) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(r3, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, 0xc, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4051}, 0x40000) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000002240)=@raw={'raw\x00', 0x8, 0x3, 0x2f8, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6, 0x0, 0x5}, 0x0, 0xd8, 0x138, 0x0, {0x0, 0x4c00}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x8, 0x2, 0x4}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [0xff000000, 0xff, 0xffffff00, 0xff], 0x4e23, 0x4e23, 0x4e21, 0x4e22, 0x6, 0xff81, 0x4, 0x7fff}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, 'veth1_to_batadv\x00', {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) setrlimit(0x0, &(0x7f0000000080)={0x7fffffffffffffff, 0xa04}) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x14}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000220000080003400000000a14000000110001"], 0x64}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c000000020000000000000000000009030000000000000000000001050000000800000000000000ffffff03000000000200"], 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x41, 0x3, 0x288, 0x0, 0x19, 0x0, 0x0, 0x0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x3, 0x0, {[{{@ip={@remote, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'veth1_to_bridge\x00', {}, {}, 0x8}, 0x0, 0xd0, 0x110, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@cluster={{0x30}, {0x7f}}, @common=@ah={{0x30}, {[0x8, 0x95]}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "72b9e2e0113eaa913531d376bcdacb87f768e3aa4b791c389a4d8b799055"}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e8) 5.146682367s ago: executing program 3 (id=1555): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) sched_setattr(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340", @ANYRES32], 0xec}}, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./control\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r2, @ANYRESOCT=0x0]) read$FUSE(r5, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x0) mount$afs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{}]}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) r9 = syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000100), &(0x7f0000000080)) close(0x3) socket(0x1d, 0x2, 0x6) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}}) write$tcp_congestion(r7, &(0x7f00000000c0)='lp\x00', 0xfffffdef) 4.735992957s ago: executing program 6 (id=1556): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b05, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x540e, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$xdp(0x2c, 0x3, 0x0) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x201000, 0x1000}, 0x20) msgsnd(0x0, &(0x7f0000000280)={0x2}, 0x8, 0x800) sendmmsg(r2, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) r4 = syz_io_uring_setup(0xec7, &(0x7f00000003c0)={0x0, 0x4bb6}, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd_index, 0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x7, 0x1}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffb7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) chdir(&(0x7f00000002c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r7, &(0x7f0000006a80)={0x0, 0x0, &(0x7f0000006a40)={&(0x7f0000006a00)={0x1c, r8, 0x1, 0x70bd29, 0x25dfdbfc}, 0x1c}}, 0xc000) io_uring_enter(r4, 0x47fa, 0x0, 0x0, 0x0, 0x0) dup2(r2, r1) sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="c08113c4f0b085a4cfa4a6a85bf8eb4c84cb9a1bfb1fc6ef88954c98e65384219e5525720aaf6a8714375a085f36c5141ceb329c3d87ca17d25ac1b60f7def1f9a15e8e7fd37498f75371aae21d6ae81b8b3af6a0a6932f59c144e2999901858eb24b75e6839503f2ebdf1b33c6042ce0da1a447ac5022e7ca9202123b1ef73952a2c0", 0x83}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e22, 0x4, @private2, 0xffffff91}, 0x5, &(0x7f0000000900)=[{&(0x7f0000000380)="2adcf4aa7dd5a0fcebaebfdcecd7ca91c2fea597d32274ac46057eb3d88e0b99bc2387722156c9caa27515863c03997a00ef70991442ee67f8924c581c9af65c947745ee762dc4fd77c5cd9442bd2c9680d263660e88e8f7c1ef11166a41e70ee3a13dbd0affb1cc4949f840e82513c39ffcf1a046c1aa508a41e823186a1bf5f47ec9654aff9422", 0x88}, {&(0x7f00000004c0)="36dde3dee2909418a61fbdc141254372e9aa50162a265e136d8c86590ca10a93c0940aed530a7b5789a893e4de5f02c41f7b62011a3bd021f4c97ab767c48a4b243362af3926df85b9acb5b46e76be2d6815ac6a41d51700b6ac0d682eb12913937132e20ec0de7292a02010c93bc811091c001bd2515785c9665dfe424213e9e0256914373ce6dc97911ecfe6e065f541a414b5f96f29ca3d1bb0ea2b60bcdcf644746437b2b41b57a28878282f1a2e641d75062ef55f01d1ab9ff3b1cb8f05724f9436555aac8ad56e6aa8238b6413dc4e91deef8bbabd5dcabbf9eb4d63182f9b4622fcda7b3e8c02cb10baead5d9aa60cd797817", 0xf6}, {&(0x7f0000000640)="62adccb2942765267517b37e07e8e6ef38f832fa0f9be4dc087c3f65a276a2e91b0d0643a66688ba3305aa90922062bcf04d086dd092ba186564af93fc667343d52c5f7ff95b228b0f03f74eb22123a51667cfdcd9ce39b6ab489a0a4186164bcdc9a1e70bb446f77fe7072bf8e495f0d546235015af605c23e669fdbde2b4211359d3bf34453243ffb91469fcebe79e225281b6a1aa4c3920532605eb78461e659fbf732d8db517296ea7b80bab47c1766e52aabe87ee", 0xb7}, {&(0x7f0000000700)="0161749c85e57072330c46f1d7b4e91fddb575bff85be94be31afea1fa8e04601c61324e5608aa0e6793d14a4100b31922a1ee315291803f6740f1cc17f0bda6dfde2061ee60", 0x46}, {&(0x7f0000000780)="b330005c15adf9477a68885648fa5115c444e07f81c06c7347f54dd75d1cfcf6aabfdc3026993413c03705dcb1710405c832b87cf3fb1b148e32cfde6cbba21a51b6c8d2a33d78284e8fed06ba05807ceac0e27e3bf52af8eccc7b876ea5aa8a8c15d00517998a2a2a9e5a2d36088e0bc62a7d9df04895122d890c5222762f53c55ba96ff567103a7379156c5db5f73733c1f865ae", 0x95}, {&(0x7f00000009c0)="4f391ee0b118daba4640ecce809cd08c4de57031f2d41a0e35325bf6cbc493b07cd00c61f3cfdf9c03d3d21a60fc9a55c23fe72e2605803c6ed557faf4b404f22f0cfa885fb8e78d262ee8821ff8199858480ee6e82679f548f9c78ce515681292cab86f6e416b6ac7fccdc25b6422de92923bb891e85bf4c5ce5e65798ab4283cda6a5902e8ed03e1544a52cf16f7c1cef3802245c8c420810ed3b87fb778249f7af563a76c6af0522b4be718391d17ee0a705be037cc5c042690733271b7f13f0cc4a56968d13211112508f452a9a800d5b3", 0xd3}], 0x6, &(0x7f0000000ac0)=[@dstopts_2292={{0x70, 0x29, 0x4, {0x3a, 0xa, '\x00', [@calipso={0x7, 0x50, {0x1, 0x12, 0x7, 0x15d, [0x1, 0x0, 0x0, 0xffffffff, 0x80000000, 0x240000000, 0x17, 0x7, 0x1]}}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xf371}}], 0x88}}], 0x2, 0x4001c00) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10700, 0x1, 0x0, 0x3}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2}, 0x0) 3.023114644s ago: executing program 2 (id=1557): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000006000000000000000000000f02000000040000000000000700000000000000005f"], 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 3.022501361s ago: executing program 3 (id=1558): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x18, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sendmsg(r2, &(0x7f0000000800)={&(0x7f0000000180)=@ethernet={0x306, @random="7f9c9e92a9a6"}, 0x80, 0x0}, 0x5) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r3, 0x0, 0x0, 0xc040c10, &(0x7f0000000800)={0xa, 0x0, 0x4, @loopback, 0xfffff000}, 0x20) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1008020, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(0x0, 0x90a, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) io_setup(0x5, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1000000000000120}}], 0x1, 0x24044001) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x8) bind$bt_hci(r4, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="3b000000010001", 0x7) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000340)={0x14, &(0x7f0000000880)={0x0, 0x3, 0x65, {0x65, 0x3, "d44b39b621a58c7b23e19289e02f1cba2fe2d925499293f6c968c71f30bcef0c3d309be438d5703248e82b1210597925993fe5189e4888decb11dcc68f0c5b0123d5c161398d6bcf86656cd00b4e7af88562e50226584738f1f5b96512b5f252da553f"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000580)={0x1c, &(0x7f0000000440)={0x0, 0x15, 0xf8, "76c9bc27981dc6662b4ef3d1e8cae126c5e1e44fefc17c964bcdd35ed61865d44bda787552cc5e706fa3b98eb6f1c323c77f445c68c5210a5dc51c5467e52d2c300d06c237add1265aafe67591af2e8712bc049310e1137f3e92d39103de01b1ad237feb19520516f43ec099a512341638fd08b2e382e5310c33499a92ed6b37d3baa5051fdc1ef961376a6345d0346faa475e17a3d5669389855a041c862a63fc94998f32ee1c90d24921ac5ba40b285fc8047cccdba773bae41a1ff695a37339eee406751f2e67d9a3fe11f61e67cc6092486505388d4a52f092cc99a170440adabb840710320997af89f2d49fb9bd240ff56d6ed73c6a"}, 0x0, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x2}}) getpeername(r0, 0x0, &(0x7f0000000080)) syz_open_dev$media(&(0x7f0000000040), 0x9, 0x400000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 2.922398829s ago: executing program 5 (id=1559): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'gretap0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x7}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = syz_open_dev$dri(&(0x7f0000000480), 0xf2ef, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000100)="41c2b1", 0x3}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000380)={&(0x7f0000000240)='E?O', 0x3}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x246000, 0x0) dup2(r2, r1) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)) r3 = syz_pidfd_open(0x0, 0x0) pidfd_send_signal(r3, 0x0, &(0x7f0000000140)={0x0, 0x0, 0xd2000000}, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) getpid() fsync(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = syz_open_dev$ndb(0x0, 0x0, 0x48000) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) 2.861193347s ago: executing program 2 (id=1560): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000004c0)=ANY=[@ANYBLOB="090000000000000004000000000000000000000002000000040080000e0000000800f4000000000d010000000000000000000000060000000000000000000000414d4469"]) 2.850248723s ago: executing program 6 (id=1561): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000001680)}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000340)={0x0, 0x9007}, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000, 0x1}) ioctl$KVM_NMI(r5, 0xae9a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) getsockname$packet(r4, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@ifindex, 0x33, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_RUN(r5, 0xae80, 0x0) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) connect$inet(r0, 0x0, 0x0) openat$cgroup_ro(r4, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) 2.765843763s ago: executing program 4 (id=1562): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002004000b7080000000000007b8af8ff00000000b708000000020000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x40, 0x0, 0xcc}, &(0x7f0000000580), &(0x7f0000000280)) openat$binder_debug(0xffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = io_uring_setup(0x79ae, &(0x7f0000000340)={0x0, 0x1}) r1 = socket$inet6(0xa, 0x40000080806, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) listen(r1, 0x20000005) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0xffff) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000071d900"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0f000000040000000800000008000000000000004888ebf5afe2e9e052568df03495be900de53b4f131417b8310cb68ffcdc33f778facc9bba2bef088e048ffea63a46cf87e461c99695a7721c2eb1381a9f153372b65348cb3982527999548287e919dce6970149", @ANYRES32, @ANYRES16=r1, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="000000000000000004000000000000"], 0x48) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x200481, 0x0) 1.643274593s ago: executing program 5 (id=1563): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x5c}}, 0x900000000000000) 1.595555335s ago: executing program 2 (id=1564): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={0x1, @null, @netrom={'nr', 0x0}, 0x5, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7ff, 0x8, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) sendfile(r0, r0, &(0x7f00000000c0)=0xffff, 0x8434) fallocate(r0, 0x14, 0x7, 0x20) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x40000) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={'batadv0\x00', {0x2, 0x4e23, @empty}}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x6) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$SNDCTL_SYNTH_MEMAVL(r5, 0xc004510e, &(0x7f00000001c0)=0x7fff) sendmmsg(r1, &(0x7f0000000480)=[{{&(0x7f0000000200)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000280)="2c796cfb2440ff0d1876ee8653a24538b6ceb0960e5eab9f2c9c0b81f07efa5e10fe56c1869063496f3fca5ebedc98c41a696fa54cc46fc53c8695e6f681bf7ef31cb93c70e03c6c76fc74c4587b94feee63dda406d5c794", 0x58}, {&(0x7f0000000300)="235748a4139240e35238de7a3ab399ff43cc3540940615fd34ca294172818cd303b4a5fe46e87c6439b4a6c9b62d2da2fe7ccc391781182e62a58650e4ea26fa52d93b72ff8148355d5bdd6efd0f623f78512f5c8bf3444e98943539341bcd81a8c469bafd714f9a29a2ec0076c7ca6498fc658c78d90c7f2fd93fdcdc2efe2312b01c2447b0", 0x86}, {&(0x7f00000003c0)="516d4c352a53d4d97c596d30e2c66306827a98d544b9be9486079acafbf26de6e26dc7e0d758833315cd7058aadabb5cd900ae4489b317ec374a4c80fe0b50b4c1fbd9f6a5d1764d5eb9fb2e4bb11c5ecfa263ed974f8f", 0x57}], 0x3}}], 0x1, 0x24040010) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x0, &(0x7f00000004c0)) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r4, 0x7af, &(0x7f0000000500)={@host, 0x2}) getsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000540)=0xfd, &(0x7f0000000580)=0x4) write$char_usb(r4, &(0x7f00000005c0)="a8d18b890183a223e017e9591173f823ce49f9a2eddb0f01efe58140ee9491e17133e194425489d8fa434e", 0x2b) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/crypto\x00', 0x0, 0x0) ioctl$VIDIOC_G_FBUF(r2, 0x8030560a, &(0x7f0000000680)={0x2, 0x20, &(0x7f0000000640)="9dab1b0e354c59c05f1eade9dac44a742c4c4047be5e1c14ba3bf5230b4936516eea3377721fcbc397e49b95", {0x909b, 0x42, 0x39565559, 0x2, 0xffffffff, 0x0, 0x6, 0x80000000}}) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x7) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000001040)=@broute={'broute\x00', 0x20, 0x5, 0x92e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0x7ffffffffffffffe, 0x2, [{0x11, 0x12, 0x1b, 'pim6reg\x00', 'veth1_vlan\x00', 'wg1\x00', 'xfrm0\x00', @random="2a91097c1d3d", [0x0, 0x0, 0x0, 0xff, 0xff], @empty, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xde, 0x146, 0x17e, [@connbytes={{'connbytes\x00', 0x0, 0x18}, {{[{0x6}, {0x100000001}], 0x2}}}, @pkttype={{'pkttype\x00', 0x0, 0x8}, {{0x1}}}], [@common=@mark={'mark\x00', 0x10, {{0xffffffd0, 0x1}}}, @common=@AUDIT={'AUDIT\x00', 0x8}], @common=@dnat={'dnat\x00', 0x10, {{@local}}}}, {0x9, 0x65, 0x8809, 'ip6_vti0\x00', 'pimreg0\x00', 'veth0_virt_wifi\x00', 'ipvlan1\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff], @local, [0xff, 0xff, 0xff, 0x0, 0xff], 0xee, 0xee, 0x11e, [@cpu={{'cpu\x00', 0x0, 0x8}, {{0x4}}}, @nfacct={{'nfacct\x00', 0x0, 0x28}, {{'syz1\x00', 0x7f}}}], [], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x5}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x11, 0x2, 0x7, 'wlan1\x00', 'veth0_to_batadv\x00', 'pim6reg0\x00', 'veth1_to_team\x00', @broadcast, [0xff, 0x0, 0x0, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], 0x9e, 0xee, 0x13e, [@m802_3={{'802_3\x00', 0x0, 0x8}, {{0x8e, 0x4, 0x1, 0x2}}}], [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x4bd9, 'syz1\x00', {0x9}}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x32670398, 'syz0\x00', {0x4}}}}}, {0x3, 0x20, 0x9100, 'veth0_to_bridge\x00', 'vxcan1\x00', '\x00', 'syzkaller1\x00', @multicast, [0xff, 0xff, 0xff, 0xff], @broadcast, [0x0, 0xff, 0x0, 0x0, 0xff], 0x2a6, 0x2ee, 0x366, [@bpf0={{'bpf\x00', 0x0, 0x210}, {{0x2c, [{0x6, 0x5, 0x6, 0xcf75}, {0xfffa, 0xff, 0x9, 0x3}, {0x0, 0xfc, 0x9}, {0x7f, 0x3d, 0xeb, 0x3ff}, {0x200, 0x3, 0x5, 0x78}, {0x3000, 0xb, 0x7, 0xffffffff}, {0x984, 0x4, 0x5, 0x3}, {0x0, 0x9, 0x9, 0xfffffff8}, {0x400, 0x4, 0x1, 0x7}, {0x9, 0x7f, 0x6, 0x20000}, {0x4, 0xf, 0x0, 0x3}, {0x4, 0x5f, 0xb1, 0x4}, {0x40, 0x4, 0x9, 0x8}, {0x3, 0xdf, 0x9c, 0x100}, {0x9, 0x8, 0x1, 0x6}, {0x9, 0xf7, 0x1, 0xe79}, {0x0, 0x6, 0x3, 0x5}, {0x7603, 0x3b, 0x0, 0x4}, {0x2, 0xe, 0x4d, 0x6}, {0x9, 0x3, 0x0, 0x8}, {0x100, 0x7, 0xc, 0x3}, {0x3, 0x87, 0x0, 0xffffce44}, {0x7, 0x2, 0x3, 0x6}, {0x200, 0xf, 0x3, 0x3}, {0x1000, 0x0, 0x5f}, {0x2, 0x5, 0x6, 0xfffffff7}, {0x0, 0xf8, 0x3, 0x1}, {0x4df, 0x1, 0x0, 0x5}, {0x76, 0x5, 0xdb, 0x24d8}, {0x8, 0x2, 0x1, 0x22}, {0x5, 0xff, 0x2, 0x3ff}, {0xb8f, 0x5, 0x9, 0x43b6}, {0x1, 0x5, 0x1, 0x8}, {0x1, 0x6, 0xa1, 0x200}, {0x1, 0x4, 0x9, 0x4}, {0x6d1, 0x0, 0x1, 0x7f}, {0x5, 0x1, 0x8, 0x1}, {0x0, 0xa, 0x28, 0x2}, {0x4, 0x3, 0x42, 0x8}, {0x5b, 0x2, 0x6, 0x4}, {0x8001, 0x9, 0xf7, 0x6}, {0x3, 0x8, 0x0, 0x5}, {0xfff7, 0x8, 0x30, 0x36c}, {0x3, 0xff, 0xe, 0x80000001}, {0x4, 0xa2, 0x9, 0x5}, {0xabd, 0xe3, 0xf}, {0x10, 0x7, 0x0, 0x2}, {0x1, 0x54, 0x5, 0x1}, {0x0, 0x1, 0x4, 0x1}, {0x7f, 0x7, 0x7, 0x48b4}, {0xfffa, 0x1, 0xe9, 0x9}, {0x6e6e, 0x9, 0x10, 0x3}, {0x8, 0xc2, 0x6, 0x7}, {0x4, 0x1, 0x2, 0x6}, {0x6, 0x3, 0x80, 0x2a}, {0x6, 0x7, 0x6c, 0x3}, {0x1, 0x3, 0x0, 0x6}, {0x2e, 0xea, 0x19, 0x8}, {0x9, 0x5, 0x8, 0xab1}, {0x1, 0x40, 0x80, 0x18000000}, {0x32, 0x3, 0x80, 0xa}, {0x6, 0x5, 0x8}, {0x2, 0x0, 0x1, 0x6}, {0x70, 0x81, 0x7, 0x4}], {0x10}}}}], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3c, 0x5a, {0x9e9}}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0xeed, 0xace4, 0x3, 0x1, 0x0, "76d275147e589319e968e2d5223a6e76d86d7adc85535295e6b3cdf87c7ac464d7f6f05566d75c03b2b83d3d23ea94fd934cbcb8b095c541c77397dbb70937ef"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x1, [{0x1e, 0x8, 0x6004, 'netdevsim0\x00', 'ipvlan1\x00', 'netpci0\x00', '\x00', @random="6b6f86bac8bd", [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], @remote, [0x0, 0x0, 0x0, 0x0, 0xff], 0x6e, 0xf6, 0x12e, [], [@common=@log={'log\x00', 0x28, {{0x6, "f1c2ba108ae1beeff910fdeea0d36aa311b525cbb0e00c64d0965fbdd986", 0x8}}}, @common=@mark={'mark\x00', 0x10, {{0xfffffff0}}}], @common=@mark={'mark\x00', 0x10, {{0xffffffe0, 0xffffffffffffffff}}}}]}]}, 0x9a6) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000001140), 0x224242, 0x0) ioctl$NS_GET_OWNER_UID(r6, 0xb704, &(0x7f0000001180)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f00000011c0)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff}}, './file0\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000001200)={{{@in6=@mcast1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f0000001300)=0xe8) getresuid(&(0x7f0000001340), &(0x7f0000001380)=0x0, &(0x7f00000013c0)) mount$9p_fd(0x0, &(0x7f00000010c0)='./file0\x00', &(0x7f0000001100), 0x10, &(0x7f0000001400)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@loose}, {@access_user}, {@mmap}, {@afid={'afid', 0x3d, 0x3}}, {@access_client}, {@nodevmap}, {@mmap}, {@version_L}, {@cache_readahead}, {@mmap}], [{@fowner_gt={'fowner>', r9}}, {@uid_gt={'uid>', r10}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@smackfsdef={'smackfsdef', 0x3d, 'ip6_vti0\x00'}}, {@euid_gt={'euid>', r11}}, {@euid_eq={'euid', 0x3d, r12}}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.470365717s ago: executing program 6 (id=1565): syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time\x00') socket$inet6(0xa, 0x3, 0x7) socket$can_bcm(0x1d, 0x2, 0x2) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x202040, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES64=r0], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff1, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/timer_list\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000200), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r6, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080), 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x10, 0x2000, @fd_index=0x8000000, 0x2, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x3f70, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000ec0)) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_io_uring_setup(0x6440, &(0x7f0000000600)={0x0, 0x49cb, 0x10100, 0x1, 0x329}, &(0x7f0000000300), &(0x7f0000000540)) 1.442594597s ago: executing program 5 (id=1566): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) syz_usb_connect(0x2, 0x24, &(0x7f0000000a40)={{0x12, 0x1, 0x0, 0x40, 0xd0, 0x7d, 0x40, 0x1286, 0x1fa4, 0xfb16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x70, 0x0, 0x0, 0xee, 0x67, 0x8}}]}}]}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) rmdir(0x0) r1 = open(0x0, 0x0, 0x0) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) r2 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETBE(r4, 0x400454de, &(0x7f0000000080)=0x1) write$tun(r4, &(0x7f0000001280)={@void, @val={0x0, 0x3, 0x200, 0xd, 0x9, 0x100}, @mpls={[{0x6}], @llc={@snap={0x1ff, 0xaa, 'z', "ea8630", 0x7, "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"}}}}, 0x90e) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x4, 0x800, 0x0, 0x10000, 0x10, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x50) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') pread64(r5, &(0x7f0000002180)=""/4105, 0x1009, 0x0) 1.219064926s ago: executing program 2 (id=1567): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000001aaff02000000000000000000000000000106"], 0xffe) 1.218648585s ago: executing program 4 (id=1568): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="b40000000000000069109f0000000000040000000000000095000000000000007220abb1b364768c328613d20a4d2451a69f9642"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="463363095853364ef511fc32b939d917cdbae8725bf903f3fd0be4d5c35fc2b4aa8bad877389dd2c4838803b722eae0258891a43c9", 0x35}, {&(0x7f0000000040)="462e815d7f66b8587e031bb294278133f693c56c586db95ec069f2c24a7b224696e273ceaa0d330dffb9d3b237c72a89", 0x30}, {&(0x7f00000000c0)="7312dd84791cab80dde30733657884a6abc6e42ad61c7c", 0x17}, {&(0x7f0000000100)="b36bbd04324f3ba58fd41ca9fe1e950eac540a94e2352c8f55cd918730f1b08c1121794bc67b66c8ecaca81b53bb87d96ad0631cf20c541daeca6a0e4fe9899d944415091b61a7442ae5dbee448189a611ae8343bd1000aba84dc0627ba452ce0706524e13529a4115ffcc1d6c4f434e", 0x70}, {&(0x7f0000000180)="05ffe98f2f9934d60f8739e900b5d5306c091f27850c6baa22ffee0e70200c8fb9b1a9655e80c0082ae6fb89ac83a3d51ac08173d68fa24fca9ea085149e48cc31ae3fb14e5cd8e36aac991cfd20587dadfaba0f60c1d5f18a8237ca8677f401e573a49e503a209d16d9e477df1d4367a71b3ed6e9cd40b05121dc5bf759e72e52f340465236d703db276c39e61cc9b0d876bc3890618cf7bfb0502d247338cf19f3eb1cb787480a7a71c33ac4727aff141e7462da", 0xb5}], 0x5) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000300)) 1.0022666s ago: executing program 4 (id=1569): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz1\x00', {0x1b10, 0x0, 0x1, 0x2}, 0x2f, [0x2, 0x4, 0x704d, 0x1, 0x5, 0x1, 0x2, 0x7db, 0x4, 0xfffffc01, 0xfffffffb, 0x8, 0x1, 0x4100, 0xfe, 0x48, 0x7, 0x5, 0x2ca, 0x5, 0x76, 0x8, 0x0, 0x81, 0x40, 0x19b1, 0x8000, 0x10000007, 0x7fff, 0x4000000, 0x7, 0x3, 0xe, 0x7, 0x1, 0x1, 0x5, 0xf, 0x7, 0xfffd, 0x9, 0x7f, 0x8, 0x6, 0xb, 0x5, 0x6, 0x40, 0x7f, 0x9, 0x1, 0x6, 0x7, 0x2284919, 0x4, 0x5643fa73, 0xfffeffff, 0x6, 0x800, 0x2, 0x8a, 0x6, 0x1, 0x6], [0xffffffd2, 0x7fffffff, 0xffff, 0x8, 0xe62, 0x3, 0x0, 0x9, 0xc33, 0x3, 0x7, 0x800, 0x6c368000, 0x4, 0x7, 0x0, 0x10, 0x5, 0x8, 0x2, 0x3, 0x62f, 0x9, 0x0, 0x484d, 0x3ff, 0x7, 0x8, 0x40, 0xc0f, 0x80000001, 0x3, 0x3, 0x3, 0x7, 0x8, 0x8, 0x7, 0x4, 0xb, 0x5, 0x3, 0x2, 0x0, 0x0, 0x11e, 0xa4, 0x4, 0x5, 0xd69, 0x9, 0xf404, 0xf1, 0x3, 0x3, 0x1, 0x6, 0x5, 0x0, 0x6, 0x8, 0x6, 0x4, 0x68], [0x3, 0x1, 0x4, 0xfffffffc, 0x0, 0x7fff, 0x401, 0xfffffff7, 0x2, 0x1000, 0x7, 0x4, 0xd, 0x7, 0x6, 0xa, 0x6, 0x7, 0x5, 0x5, 0x2, 0x30000000, 0x37, 0x802, 0xfffffffd, 0x7, 0x5, 0x1ff, 0x7ff, 0xd, 0x400, 0xf, 0x41, 0x81, 0xc99, 0x25a, 0x200002, 0x0, 0x2, 0x5d9fffa, 0xffff2c0f, 0xff, 0x40, 0x8, 0x10000, 0xe7, 0x200, 0x7af5, 0x2, 0xb, 0x0, 0xffff, 0x7, 0x6, 0x2, 0x3, 0x8, 0x2, 0x7, 0x100, 0x8, 0x0, 0x6, 0x10], [0x3, 0xd5800000, 0xffffffff, 0x4, 0x2, 0x62a, 0x3, 0x7, 0xb343, 0x4, 0x1, 0x8, 0x8000, 0x8, 0xffffff81, 0x80000000, 0x5, 0x3, 0x200, 0xfff, 0x3, 0xfffffffd, 0x4, 0x7, 0x6, 0xe6, 0xffffffff, 0x3, 0x2, 0x7, 0x1, 0x7, 0x7, 0x8, 0x1, 0xf, 0x9, 0x17ce, 0x0, 0x3, 0x6fe, 0xe, 0x7, 0x13a, 0x7, 0x1, 0xb756, 0x2, 0xb9, 0x4, 0x4f, 0x8c1, 0x0, 0x5, 0x4, 0xf, 0x4, 0x400, 0x9, 0x7fff, 0x3, 0xfffffffb, 0xc, 0x2]}, 0x45c) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000001340)={'syz0\x00', {0x5, 0xb, 0x1, 0x6}, 0x1d, [0x800, 0x3, 0xdf4, 0xfffffffe, 0x400, 0x3, 0x9, 0x7, 0x100, 0x7, 0xf0, 0x6, 0x7fffffff, 0x85, 0x1, 0x9, 0xee20, 0x1, 0x10000, 0x0, 0x3, 0x2, 0x297, 0x1, 0x44, 0x400, 0x5, 0x3, 0x7fffffff, 0x5, 0x0, 0xffffff73, 0x80000, 0x5, 0x1, 0x9, 0xe000000, 0xf, 0xe, 0x101, 0xffffffff, 0x2, 0x4, 0x1e, 0x4, 0xcda, 0x101, 0x6, 0x7fff, 0x5, 0x1, 0x1, 0x20000c, 0xffffffc0, 0x2, 0x5, 0xade8, 0xec, 0x4fa, 0xff, 0x5, 0x81, 0xfffffeff, 0x3], [0x2, 0x4, 0xb, 0x88b, 0x8001, 0x80, 0x854, 0x7, 0x55, 0x80000008, 0x68, 0xf, 0x80007f, 0x3, 0x2, 0x0, 0x0, 0xd, 0x4, 0xa, 0x20008000, 0x7f, 0x4, 0xe84, 0xfffffff8, 0x4, 0x200000, 0xa, 0x94, 0x0, 0xfee7, 0x0, 0xf, 0x2, 0x6aac, 0x847, 0x3, 0xffffffff, 0x1, 0xa40, 0x8, 0x600000, 0x0, 0x8, 0x16, 0x2c6, 0x2f, 0x400ef, 0x2, 0x89, 0x2, 0xfffffff8, 0x7, 0x5, 0x3, 0x7, 0x0, 0xd, 0x3, 0x6, 0xa, 0x401, 0x2, 0x1], [0x3, 0xd4, 0x8, 0x2, 0x7fff, 0x3, 0xf, 0xfff, 0x0, 0xfffffbff, 0x1ff, 0x7, 0x1000, 0x2, 0x7, 0xfffffffd, 0x1, 0x503, 0x22d, 0x7a6, 0x8, 0x46, 0x1, 0xc415, 0x400004, 0x5, 0x0, 0x6, 0xfff, 0x3, 0x4, 0xff, 0xfffffff0, 0x109, 0x0, 0x1, 0xd, 0x8, 0x7, 0x5, 0x97f, 0xfffffffd, 0x6, 0x8, 0x2, 0xb62, 0x2000004, 0x2, 0xe26c, 0x81, 0x80, 0x7, 0x73f0, 0x9, 0x2, 0xffffffff, 0x8, 0xffffffff, 0x7fff, 0x7, 0x81, 0x4a4, 0xfffffff8, 0x8], [0xfedc, 0xe, 0x7, 0xc3ba, 0x3, 0xffff6aca, 0x7, 0x2, 0x7ff, 0x1, 0x180000, 0x0, 0xfffffffc, 0x8, 0x54, 0x0, 0x0, 0x3, 0x1, 0x2, 0x8d9, 0x9, 0x8, 0x6d09ab3d, 0x800000, 0x8000, 0x5, 0x23f, 0x2, 0xffffbffa, 0x6, 0xfffffffb, 0x8bf9, 0x7f, 0x10000, 0x8, 0x6, 0x7, 0xffff, 0x6, 0x7, 0x10000, 0x10, 0x6, 0xfffffff8, 0xfc, 0x4, 0x0, 0x2, 0x80000000, 0x8, 0x55, 0x400, 0x0, 0x6, 0x936d, 0x6, 0x0, 0x1, 0xfff, 0xfffff000, 0x4, 0x6, 0x5]}, 0x45c) 1.001633795s ago: executing program 6 (id=1570): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fsopen(&(0x7f0000000000)='autofs\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) flistxattr(r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4}) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@getstat={0xe0, 0x15, 0x10, 0x70bd28, 0x25dfdbff, {{'drbg_nopr_sha256\x00'}, '\x00', '\x00', 0x400, 0x2000}}, 0xe0}}, 0x40000) sendmsg$nl_crypto(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000130003"], 0xf0}}, 0x0) ioctl$IOMMU_DESTROY$stdev(r3, 0x3b80, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xf8f, 0x0, 0x0, 0x0, 0x0, 0x2}) 795.170259ms ago: executing program 3 (id=1571): syz_open_dev$loop(0x0, 0x7, 0x2480) (async) syz_open_dev$loop(0x0, 0x7, 0x2480) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet(0x2, 0x2, 0x0) (async) socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)="7109004fd2f7f7", 0x7}, 0x1, 0x0, 0x0, 0x4458623dd61ccf20}, 0x0) recvmmsg(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x40000000000019e, 0x142, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) getsockopt$packet_buf(r1, 0x107, 0x6, 0x0, &(0x7f0000000300)) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x424002, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r5, 0x8010500c, &(0x7f0000000100)) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) (async) socket$kcm(0x2, 0x922000000001, 0x106) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000400)={0xc}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000200)={0x15}) (async) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000200)={0x15}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r6, 0x3b87, &(0x7f0000000040)={0x18, 0x0, 0x1}) socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 766.798088ms ago: executing program 2 (id=1572): r0 = fsopen(&(0x7f0000005880)='zonefs\x00', 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_usb_connect(0x2, 0x51, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x9, 0x94, 0x73, 0x8, 0x1199, 0x6821, 0x9859, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x3, 0x0, 0x5, 0x37, 0x5d, 0xd2, 0x0, [], [{{0x9, 0x5, 0x6, 0x3, 0x40, 0x7, 0xe, 0x5}}, {{0x9, 0x5, 0x7, 0x0, 0x0, 0x4, 0x2, 0x3}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0x4, 0xfe, 0x7}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x3, 0x2, 0x4}}, {{0x9, 0x5, 0xa, 0x1c, 0x3ff, 0x1, 0xac, 0x8}}]}}]}}]}}, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 362.458713ms ago: executing program 4 (id=1573): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="08010000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000080001000000000014000480050003000000000405000300000000000800020001000000d00008800c0007800800060000000000240007800800050000000000050006"], 0x108}}, 0x0) 94.024361ms ago: executing program 4 (id=1574): socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SG_BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r3, &(0x7f00000003c0)='./file0\x00', 0x200, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="38008c73d9f4f85a6dc47000fcdbdf250900020073797a32000000000800410073697700140033006c6f0000000000000000000000000000a6bfb239bc03f90e488e94ecc7d89e3d00cfaa2a29e01737984b560cf1292f770275cfac0668beed95b431da7181476f41329d177358"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) r6 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ifreq(r6, 0x8923, &(0x7f0000000040)={'lo\x00', @ifru_hwaddr=@multicast}) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) 0s ago: executing program 3 (id=1575): openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) syz_open_procfs(0x0, 0x0) r0 = fanotify_init(0x0, 0x400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_GET_NO_NEW_PRIVS(0x3d) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0xb40, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fedbdf2501"], 0x34}}, 0x0) kernel console output (not intermixed with test programs): ferent from the descriptor's value: 66 [ 335.623554][ T51] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 335.637318][ T51] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 335.700174][ T51] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 335.743527][T10213] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 335.763276][ T51] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 335.785555][T10213] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 335.794566][ T51] usb 5-1: Product: syz [ 335.798805][ T51] usb 5-1: Manufacturer: syz [ 335.828167][ T51] cdc_wdm 5-1:1.0: skipping garbage [ 335.864550][ T51] cdc_wdm 5-1:1.0: skipping garbage [ 336.670103][T10411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.684786][ T51] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 336.690716][ T51] cdc_wdm 5-1:1.0: Unknown control protocol [ 336.713937][T10411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.760676][T10302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.785306][ T51] usb 5-1: USB disconnect, device number 34 [ 336.806144][T10302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.849100][T10302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.867080][T10213] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 336.894305][T10302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.917743][T10302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.959593][T10302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.051409][T10302] hsr_slave_0: entered promiscuous mode [ 337.058602][T10302] hsr_slave_1: entered promiscuous mode [ 337.065131][T10302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 337.072744][T10302] Cannot create hsr debugfs directory [ 337.084759][ T865] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 337.168496][ T6099] erspan0: left allmulticast mode [ 337.173691][ T6099] erspan0: left promiscuous mode [ 337.179438][ T6099] bridge0: port 3(erspan0) entered disabled state [ 337.187770][ T6099] bridge_slave_1: left allmulticast mode [ 337.193438][ T6099] bridge_slave_1: left promiscuous mode [ 337.199766][ T6099] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.210034][ T6099] bridge_slave_0: left allmulticast mode [ 337.215784][ T6099] bridge_slave_0: left promiscuous mode [ 337.221484][ T6099] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.254787][ T5864] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 337.255331][ T865] usb 3-1: Using ep0 maxpacket: 8 [ 337.280736][ T865] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 337.301396][ T865] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 337.312827][ T865] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 337.332264][ T865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.404680][ T5864] usb 4-1: Using ep0 maxpacket: 8 [ 337.416103][ T5864] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 337.427618][ T5864] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 337.438076][ T5864] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 337.447683][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.913323][T10446] netlink: 'syz.2.892': attribute type 2 has an invalid length. [ 338.497281][T10448] netlink: 'syz.3.893': attribute type 2 has an invalid length. [ 339.188672][ T6099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.208127][ T6099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.223810][ T6099] bond0 (unregistering): (slave bond1): Releasing backup interface [ 339.240173][ T6099] bond0 (unregistering): Released all slaves [ 339.883107][ T6099] bond1 (unregistering): Released all slaves [ 339.905966][ T6099] bond2 (unregistering): Released all slaves [ 339.951992][ T865] usb 3-1: string descriptor 0 read error: -71 [ 339.999071][ T865] hub 3-1:32.0: USB hub found [ 340.019385][ T865] hub 3-1:32.0: config failed, can't read hub descriptor (err -22) [ 340.123332][ T5864] usb 4-1: string descriptor 0 read error: -71 [ 340.172760][ T5864] hub 4-1:32.0: USB hub found [ 340.176691][ T865] usb 3-1: USB disconnect, device number 37 [ 340.212039][ T5864] hub 4-1:32.0: config failed, can't read hub descriptor (err -22) [ 340.355617][ T5864] usb 4-1: USB disconnect, device number 36 [ 340.398043][ T5818] udevd[5818]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 340.728320][T10213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.603729][T10213] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.737042][ T7294] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.744190][ T7294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.780056][ T7294] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.787258][ T7294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.832380][ T6099] hsr_slave_0: left promiscuous mode [ 342.859023][ T6099] hsr_slave_1: left promiscuous mode [ 342.865413][ T6099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.882623][ T6099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.936272][ T25] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 343.104595][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 343.133705][T10508] serio: Serial port ptm0 [ 343.150237][ T25] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 343.261754][ T25] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 343.383326][ T25] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 343.475131][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.205915][T10514] netlink: 'syz.2.904': attribute type 2 has an invalid length. [ 345.334240][ T6263] udevd[6263]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 345.370669][T10302] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 345.416776][T10302] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 345.452471][T10302] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 345.504626][T10302] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 345.665658][T10302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.714546][ T5904] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 345.777291][ T25] usb 3-1: string descriptor 0 read error: -71 [ 345.782167][T10302] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.783789][ T25] hub 3-1:32.0: USB hub found [ 345.796267][ T25] hub 3-1:32.0: config failed, can't read hub descriptor (err -22) [ 345.845055][ T25] usb 3-1: USB disconnect, device number 38 [ 345.851985][ T7289] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.859216][ T7289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.884610][ T5904] usb 4-1: Using ep0 maxpacket: 16 [ 345.893209][ T5904] usb 4-1: too many configurations: 112, using maximum allowed: 8 [ 345.911324][ T7294] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.918512][ T7294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.930766][ T5904] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 345.990166][ T5904] usb 4-1: can't read configurations, error -61 [ 346.001756][T10532] ebt_among: dst integrity fail: 100 [ 346.119385][ T5818] udevd[5818]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 346.580930][T10213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.668531][ T5904] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 346.865185][ T5904] usb 4-1: Using ep0 maxpacket: 16 [ 347.187032][ T5904] usb 4-1: too many configurations: 112, using maximum allowed: 8 [ 347.249539][T10302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.264592][ T5904] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 347.285043][T10533] netlink: 16 bytes leftover after parsing attributes in process `syz.4.909'. [ 347.295831][ T29] audit: type=1400 audit(1735378299.148:564): avc: denied { accept } for pid=10529 comm="syz.4.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 347.302912][ T5904] usb 4-1: can't read configurations, error -61 [ 347.364869][ T5904] usb usb4-port1: attempt power cycle [ 347.386963][ T29] audit: type=1400 audit(1735378299.168:565): avc: denied { nlmsg_read } for pid=10529 comm="syz.4.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 347.407434][ C0] vkms_vblank_simulate: vblank timer overrun [ 347.739208][T10213] veth0_vlan: entered promiscuous mode [ 347.821777][T10560] Invalid ELF header magic: != ELF [ 347.832680][T10560] ntfs3(nullb0): Primary boot signature is not NTFS. [ 347.839815][T10560] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 348.319924][ T5904] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 348.344969][ T5904] usb 4-1: Using ep0 maxpacket: 16 [ 348.354257][T10213] veth1_vlan: entered promiscuous mode [ 348.363147][ T5904] usb 4-1: too many configurations: 112, using maximum allowed: 8 [ 348.401746][ T5904] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 348.414026][ T5904] usb 4-1: can't read configurations, error -61 [ 348.563941][T10213] veth0_macvtap: entered promiscuous mode [ 348.595132][T10213] veth1_macvtap: entered promiscuous mode [ 348.605693][T10302] veth0_vlan: entered promiscuous mode [ 348.616535][T10302] veth1_vlan: entered promiscuous mode [ 348.730568][T10213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.744303][T10213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.758989][T10213] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.774633][ T865] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 349.392538][T10213] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.401667][T10213] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.410748][T10213] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.479375][ T865] usb 3-1: Using ep0 maxpacket: 32 [ 349.492341][ T865] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 349.502519][ T865] usb 3-1: config 0 has no interface number 0 [ 349.512024][T10302] veth0_macvtap: entered promiscuous mode [ 349.528476][ T865] usb 3-1: config 0 interface 184 has no altsetting 0 [ 349.543942][ T865] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 349.556545][ T865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.558926][T10302] veth1_macvtap: entered promiscuous mode [ 349.570666][ T865] usb 3-1: Product: syz [ 349.575579][ T865] usb 3-1: Manufacturer: syz [ 349.580211][ T865] usb 3-1: SerialNumber: syz [ 349.615310][ T865] usb 3-1: config 0 descriptor?? [ 349.622152][ T865] smsc75xx v1.0.0 [ 349.653459][T10302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.670733][T10302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.681635][T10302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.698530][ T6099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.725051][ T6099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.809710][T10302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.829368][T10302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.840787][T10302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.264379][T10302] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.297865][T10302] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.306763][T10302] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.315704][T10302] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.329706][ T7287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.358973][ T7287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.392921][ T29] audit: type=1400 audit(1735378302.238:566): avc: denied { mounton } for pid=10213 comm="syz-executor" path="/root/syzkaller.6CM0s6/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 350.421104][ T7287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.440000][ T29] audit: type=1400 audit(1735378302.288:567): avc: denied { mount } for pid=10213 comm="syz-executor" name="/" dev="gadgetfs" ino=6646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 350.442537][ T7287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.492717][ T7292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.500784][ T25] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 350.510278][ T7292] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.534941][ T29] audit: type=1400 audit(1735378302.288:568): avc: denied { mounton } for pid=10213 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 350.576375][ T51] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 350.623453][T10579] can: request_module (can-proto-3) failed. [ 350.709628][ T29] audit: type=1326 audit(1735378302.558:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10581 comm="syz.6.859" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f83e7385d29 code=0x0 [ 350.739531][ T29] audit: type=1326 audit(1735378302.578:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10581 comm="syz.6.859" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f83e7385d29 code=0x0 [ 350.764256][ T51] usb 4-1: Using ep0 maxpacket: 8 [ 350.770068][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.786684][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.798222][ T51] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 350.809910][ T51] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 350.825416][ T25] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 350.844498][ T25] usb 5-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 350.852764][ T51] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 350.867588][ T25] usb 5-1: Product: syz [ 350.872608][ T51] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.895070][ T6784] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 350.905952][ T25] usb 5-1: config 0 descriptor?? [ 351.044933][ T6784] usb 6-1: Invalid ep0 maxpacket: 16 [ 351.175774][ T6784] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 351.288940][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 351.312066][T10590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.323043][ T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 351.406587][T10593] netlink: 'syz.3.917': attribute type 2 has an invalid length. [ 351.444842][ T6784] usb 6-1: Invalid ep0 maxpacket: 16 [ 351.552879][T10590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.598917][ T6784] usb usb6-port1: attempt power cycle [ 351.715503][ T25] usb 5-1: USB disconnect, device number 35 [ 352.114888][ T6784] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 352.175238][ T6784] usb 6-1: Invalid ep0 maxpacket: 16 [ 352.305146][ T6784] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 352.342712][ T865] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 352.355940][ T865] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 352.366065][ T865] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 352.378295][ T6784] usb 6-1: Invalid ep0 maxpacket: 16 [ 352.384293][ T865] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 353.106536][ T6784] usb usb6-port1: unable to enumerate USB device [ 353.119732][ T865] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 353.133095][ T865] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 353.146282][ T865] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 353.187178][ T865] usb 3-1: USB disconnect, device number 39 [ 353.403986][ T51] usb 4-1: string descriptor 0 read error: -71 [ 353.439462][ T51] hub 4-1:32.0: USB hub found [ 354.084909][ T51] hub 4-1:32.0: config failed, can't read hub descriptor (err -22) [ 354.164303][T10630] netlink: 'syz.3.925': attribute type 10 has an invalid length. [ 354.374373][ T51] usb 4-1: USB disconnect, device number 41 [ 354.609776][T10640] serio: Serial port ptm0 [ 355.086510][ T5818] udevd[5818]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 355.875080][T10652] netlink: 'syz.5.929': attribute type 27 has an invalid length. [ 355.975924][T10651] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 355.983233][T10651] IPv6: NLM_F_CREATE should be set when creating new route [ 356.146893][ T29] audit: type=1400 audit(1735378307.998:571): avc: denied { setopt } for pid=10659 comm="syz.4.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 356.221170][ T29] audit: type=1400 audit(1735378308.058:572): avc: denied { listen } for pid=10659 comm="syz.4.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 356.241830][ C1] vkms_vblank_simulate: vblank timer overrun [ 356.258252][T10652] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.265855][T10652] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.399061][T10676] netlink: 20 bytes leftover after parsing attributes in process `syz.3.934'. [ 356.401883][ T29] audit: type=1400 audit(1735378308.058:573): avc: denied { ioctl } for pid=10659 comm="syz.4.932" path="socket:[28284]" dev="sockfs" ino=28284 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 356.452120][T10652] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.468241][T10652] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.533897][T10652] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.543260][T10652] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.553031][T10652] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.562134][T10652] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.666431][T10677] pim6reg1: entered promiscuous mode [ 356.671850][T10677] pim6reg1: entered allmulticast mode [ 356.821042][T10688] Bluetooth: MGMT ver 1.23 [ 357.475093][T10696] Invalid ELF header magic: != ELF [ 357.485876][T10696] ntfs3(nullb0): Primary boot signature is not NTFS. [ 357.493071][T10696] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 358.434505][ T8] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 358.525274][T10718] netlink: 156 bytes leftover after parsing attributes in process `syz.2.944'. [ 358.525348][T10720] netlink: 4 bytes leftover after parsing attributes in process `syz.6.943'. [ 358.546572][T10718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.944'. [ 358.594500][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 358.612219][ T8] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 358.643800][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 358.673974][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 358.694902][ T8] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 358.718272][ T8] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 358.742849][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.011564][ T8] usb 5-1: GET_CAPABILITIES returned 0 [ 359.042832][ T8] usbtmc 5-1:16.0: can't read capabilities [ 359.549153][ T51] usb 5-1: USB disconnect, device number 36 [ 359.597086][T10745] netlink: 'syz.3.951': attribute type 10 has an invalid length. [ 359.874309][T10755] Invalid ELF header magic: != ELF [ 359.884981][T10755] ntfs3(nullb0): Primary boot signature is not NTFS. [ 359.892202][T10755] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 360.277541][T10757] netlink: 156 bytes leftover after parsing attributes in process `syz.3.954'. [ 360.379359][T10757] netlink: 'syz.3.954': attribute type 6 has an invalid length. [ 360.434503][ T6784] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 360.724090][ T6784] usb 6-1: Using ep0 maxpacket: 32 [ 360.740749][ T6784] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.026796][ T6784] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.189572][ T6784] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 361.279475][ T6784] usb 6-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 361.346236][ T6784] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.369933][ T6784] usb 6-1: config 0 descriptor?? [ 361.546986][T10766] team0 (unregistering): Port device team_slave_0 removed [ 361.584994][T10766] team0 (unregistering): Port device team_slave_1 removed [ 361.945057][T10797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.978099][T10797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.113739][T10797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.204979][T10797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.374059][ T29] audit: type=1400 audit(1735378314.218:574): avc: denied { append } for pid=10825 comm="syz.4.962" name="sg0" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 362.724496][ T5904] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 362.875293][ T5904] usb 5-1: Using ep0 maxpacket: 16 [ 362.891334][ T5904] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 362.914567][ T865] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 362.927664][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.946053][ T5904] usb 5-1: Product: syz [ 362.965202][ T5904] usb 5-1: Manufacturer: syz [ 362.977904][ T5904] usb 5-1: SerialNumber: syz [ 363.006094][ T5904] r8152-cfgselector 5-1: Unknown version 0x0000 [ 363.018453][ T5904] r8152-cfgselector 5-1: config 0 descriptor?? [ 363.171308][ T865] usb 4-1: device descriptor read/64, error -71 [ 363.350116][ T6784] usbhid 6-1:0.0: can't add hid device: -71 [ 363.372834][ T6784] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 363.433946][T10858] input: syz1 as /devices/virtual/input/input21 [ 363.440824][ T865] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 363.454519][ T6784] usb 6-1: USB disconnect, device number 6 [ 363.503271][T10827] overlayfs: missing 'lowerdir' [ 363.625042][ T865] usb 4-1: device descriptor read/64, error -71 [ 363.737699][ T865] usb usb4-port1: attempt power cycle [ 364.118842][ T29] audit: type=1400 audit(1735378315.968:575): avc: denied { listen } for pid=10865 comm="syz.5.969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 364.145740][ T865] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 364.173637][T10866] overlayfs: missing 'workdir' [ 364.210430][ T5904] r8152-cfgselector 5-1: USB disconnect, device number 37 [ 364.234322][ T865] usb 4-1: device descriptor read/8, error -71 [ 364.375120][T10873] netlink: 'syz.5.971': attribute type 10 has an invalid length. [ 364.515274][ T865] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 364.539155][T10873] team0: Port device wlan1 added [ 364.700799][ T865] usb 4-1: device descriptor read/8, error -71 [ 364.944721][ T865] usb usb4-port1: unable to enumerate USB device [ 366.090060][T10895] netlink: 308 bytes leftover after parsing attributes in process `syz.4.975'. [ 366.165159][ T865] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 366.338129][ T865] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.382027][ T865] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.400007][ T865] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 366.412949][ T865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.485807][ T865] usb 6-1: config 0 descriptor?? [ 366.589797][T10896] team0 (unregistering): Port device team_slave_0 removed [ 366.606012][T10896] team0 (unregistering): Port device team_slave_1 removed [ 366.917630][ T865] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 366.932335][T10925] dlm: no locking on control device [ 366.955496][T10928] input: syz1 as /devices/virtual/input/input22 [ 366.979694][T10925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.984'. [ 366.991070][ T865] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 367.031753][T10925] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 367.144028][ T865] cp2112 0003:10C4:EA90.0004: Part Number: 0x82 Device Version: 0xFE [ 367.185834][ T29] audit: type=1400 audit(1735378319.028:576): avc: denied { read } for pid=10937 comm="syz.2.986" name="mouse0" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 367.298921][ T29] audit: type=1400 audit(1735378319.028:577): avc: denied { open } for pid=10937 comm="syz.2.986" path="/dev/input/mouse0" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 367.890088][ T29] audit: type=1400 audit(1735378319.608:578): avc: denied { write } for pid=10944 comm="syz.6.989" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 368.392904][ T6784] usb 6-1: reset high-speed USB device number 7 using dummy_hcd [ 368.840077][T10959] netlink: 'syz.6.990': attribute type 30 has an invalid length. [ 368.848065][T10959] netlink: 8 bytes leftover after parsing attributes in process `syz.6.990'. [ 368.861611][T10959] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.538039][ T865] usb 6-1: USB disconnect, device number 7 [ 369.998819][T10995] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1001'. [ 370.078220][ T51] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 370.294652][ T51] usb 5-1: Using ep0 maxpacket: 8 [ 370.371410][ T51] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 370.420308][ T51] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 370.430857][ T51] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 370.454503][ T51] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.868499][T11015] netlink: 'syz.4.998': attribute type 2 has an invalid length. [ 371.930705][T11011] serio: Serial port ptm2 [ 373.484507][ T51] usb 5-1: string descriptor 0 read error: -71 [ 373.549824][ T51] hub 5-1:32.0: USB hub found [ 373.594483][ T51] hub 5-1:32.0: config failed, can't read hub descriptor (err -22) [ 373.748046][T11037] netlink: 'syz.3.1009': attribute type 27 has an invalid length. [ 374.120168][ T51] usb 5-1: USB disconnect, device number 38 [ 374.254898][ T29] audit: type=1400 audit(1735378326.098:579): avc: denied { create } for pid=11043 comm="syz.3.1012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 374.300879][ T5818] udevd[5818]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 374.364665][ T29] audit: type=1400 audit(1735378326.148:580): avc: denied { connect } for pid=11043 comm="syz.3.1012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 374.526035][ T29] audit: type=1400 audit(1735378326.188:581): avc: denied { create } for pid=11049 comm="syz.5.1014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 374.558482][T11056] ax25_connect(): syz.5.1014 uses autobind, please contact jreuter@yaina.de [ 376.947595][T11077] ebt_among: dst integrity fail: 100 [ 377.004249][T11070] serio: Serial port ptm0 [ 377.629822][ T5904] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 378.564570][ T5904] usb 5-1: Using ep0 maxpacket: 8 [ 378.578145][ T5904] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 378.635973][ T5904] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 378.711377][ T5904] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 378.736865][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.857498][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.857598][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.980534][ T29] audit: type=1400 audit(1735378330.748:582): avc: denied { read write } for pid=11105 comm="syz.3.1025" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 378.980677][ T29] audit: type=1400 audit(1735378330.748:583): avc: denied { open } for pid=11105 comm="syz.3.1025" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 378.980771][ T29] audit: type=1400 audit(1735378330.818:584): avc: denied { ioctl } for pid=11105 comm="syz.3.1025" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x4593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 379.109271][ C1] vkms_vblank_simulate: vblank timer overrun [ 379.354904][ T51] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 379.581185][ T51] usb 4-1: device descriptor read/64, error -71 [ 379.701876][T11130] netlink: 'syz.4.1021': attribute type 2 has an invalid length. [ 379.854617][ T51] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 380.394478][ T51] usb 4-1: device descriptor read/64, error -71 [ 380.519036][ T51] usb usb4-port1: attempt power cycle [ 380.856806][ T29] audit: type=1400 audit(1735378332.708:585): avc: denied { ioctl } for pid=11152 comm="syz.5.1032" path="pid:[4026533125]" dev="nsfs" ino=4026533125 ioctlcmd=0xb709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 380.888887][ T51] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 380.935025][ T51] usb 4-1: device descriptor read/8, error -71 [ 381.196522][ T51] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 381.284151][ T5904] usb 5-1: string descriptor 0 read error: -71 [ 381.308572][ T51] usb 4-1: device descriptor read/8, error -71 [ 381.479374][ T5904] hub 5-1:32.0: USB hub found [ 381.489636][ T5904] hub 5-1:32.0: config failed, can't read hub descriptor (err -22) [ 381.498172][ T51] usb usb4-port1: unable to enumerate USB device [ 382.099998][ T5904] usb 5-1: USB disconnect, device number 39 [ 382.401871][ T5818] udevd[5818]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 383.280456][ T29] audit: type=1400 audit(1735378335.128:586): avc: denied { create } for pid=11214 comm="syz.6.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 383.621778][T11226] netlink: 'syz.5.1051': attribute type 27 has an invalid length. [ 385.297768][T11261] xt_nat: multiple ranges no longer supported [ 385.316088][T11261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1058'. [ 385.924556][T11264] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 388.849117][T11312] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1069'. [ 388.875147][T11312] netlink: 'syz.2.1069': attribute type 6 has an invalid length. [ 389.065924][T11321] input: syz1 as /devices/virtual/input/input23 [ 389.398957][T11340] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 389.442004][T11337] netlink: 'syz.5.1075': attribute type 10 has an invalid length. [ 389.749542][T11351] serio: Serial port ptm0 [ 390.465834][T11357] netlink: 'syz.5.1078': attribute type 10 has an invalid length. [ 390.474676][T11357] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 390.485118][T11357] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 390.498026][T11357] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 390.685906][ T29] audit: type=1400 audit(1735378342.002:587): avc: denied { setopt } for pid=11345 comm="syz.2.1077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 391.569368][ T29] audit: type=1326 audit(1735378342.161:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11345 comm="syz.2.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df2785d29 code=0x7ffc0000 [ 391.624172][ T29] audit: type=1326 audit(1735378342.161:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11345 comm="syz.2.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df2785d29 code=0x7ffc0000 [ 392.284182][ T29] audit: type=1326 audit(1735378342.881:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11345 comm="syz.2.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2df2785d29 code=0x7ffc0000 [ 392.327224][ T29] audit: type=1326 audit(1735378342.881:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11345 comm="syz.2.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df2785d29 code=0x7ffc0000 [ 393.060843][ T29] audit: type=1326 audit(1735378342.881:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11345 comm="syz.2.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df2785d29 code=0x7ffc0000 [ 393.084268][ C1] vkms_vblank_simulate: vblank timer overrun [ 394.432181][ T29] audit: type=1400 audit(1735378345.528:593): avc: denied { bind } for pid=11399 comm="syz.6.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 394.451409][ C1] vkms_vblank_simulate: vblank timer overrun [ 394.516154][T11405] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1088'. [ 394.530506][ T29] audit: type=1400 audit(1735378345.528:594): avc: denied { connect } for pid=11399 comm="syz.6.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 394.982729][T11416] serio: Serial port ptm0 [ 395.637714][T11410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1089'. [ 395.724812][T11423] netlink: 'syz.5.1084': attribute type 10 has an invalid length. [ 395.914011][T11423] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 395.949018][T11423] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 395.971397][T11423] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 396.074334][ T8] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 396.268138][ T8] usb 3-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 396.308798][T11447] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=11447 comm=syz.3.1098 [ 396.329580][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.383702][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 396.414297][ T8] usb 3-1: config 0 descriptor?? [ 396.462350][ T8] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 396.587299][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 396.628582][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 396.648722][ T9] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1c07, bcdDevice= 0.00 [ 396.894956][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.532230][ T8] gspca_sn9c2028: read1 error -110 [ 397.538344][ T8] gspca_sn9c2028: read1 error -32 [ 397.543704][ T8] gspca_sn9c2028: read1 error -32 [ 397.548881][ T8] sn9c2028 3-1:0.0: probe with driver sn9c2028 failed with error -32 [ 397.557720][ T9] usb 6-1: config 0 descriptor?? [ 397.658288][ T8] usb 3-1: USB disconnect, device number 40 [ 398.779208][ T9] hid (null): unknown global tag 0x3e [ 398.830176][ T9] corsair-psu 0003:1B1C:1C07.0005: unexpected long global item [ 398.916804][ T9] corsair-psu 0003:1B1C:1C07.0005: probe with driver corsair-psu failed with error -22 [ 399.014485][T11482] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1103'. [ 399.056756][T11482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1103'. [ 399.079332][ T51] usb 6-1: USB disconnect, device number 8 [ 399.409085][ T29] audit: type=1400 audit(1735378350.214:595): avc: denied { mount } for pid=11488 comm="syz.2.1106" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 399.538284][ T865] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 399.740724][ T865] usb 4-1: Using ep0 maxpacket: 8 [ 399.855159][ T865] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 399.943695][ T865] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 399.969666][ T865] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 399.989865][ T865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.181433][ T29] audit: type=1400 audit(1735378350.925:596): avc: denied { read write } for pid=11521 comm="syz.4.1112" name="usbmon9" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 400.272241][ T29] audit: type=1400 audit(1735378350.925:597): avc: denied { open } for pid=11521 comm="syz.4.1112" path="/dev/usbmon9" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 400.539956][T11526] netlink: 'syz.3.1105': attribute type 2 has an invalid length. [ 400.959419][ T29] audit: type=1400 audit(1735378351.608:598): avc: denied { bind } for pid=11521 comm="syz.4.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 401.398451][ T29] audit: type=1400 audit(1735378352.085:599): avc: denied { read } for pid=11528 comm="syz.5.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 401.417692][ C1] vkms_vblank_simulate: vblank timer overrun [ 402.566515][T11559] CUSE: info not properly terminated [ 402.762019][ T865] usb 4-1: string descriptor 0 read error: -71 [ 402.795997][ T865] hub 4-1:32.0: USB hub found [ 403.010610][ T865] hub 4-1:32.0: config failed, can't read hub descriptor (err -22) [ 403.262725][ T865] usb 4-1: USB disconnect, device number 50 [ 404.155751][T11594] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1125'. [ 404.197553][T11594] nbd: illegal input index 196672 [ 404.281924][T11599] ebt_among: dst integrity fail: 100 [ 404.952776][ T29] audit: type=1400 audit(1735378355.369:600): avc: denied { bind } for pid=11596 comm="syz.6.1127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 404.988578][ T29] audit: type=1400 audit(1735378355.369:601): avc: denied { name_bind } for pid=11596 comm="syz.6.1127" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 405.235891][ T29] audit: type=1400 audit(1735378355.369:602): avc: denied { node_bind } for pid=11596 comm="syz.6.1127" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 405.345005][ T29] audit: type=1400 audit(1735378355.387:603): avc: denied { listen } for pid=11596 comm="syz.6.1127" laddr=::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 405.367037][ T29] audit: type=1400 audit(1735378355.387:604): avc: denied { connect } for pid=11596 comm="syz.6.1127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 405.417880][ T29] audit: type=1400 audit(1735378355.387:605): avc: denied { name_connect } for pid=11596 comm="syz.6.1127" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 405.459935][ T865] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 405.635064][T11616] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 406.043033][ T6784] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 406.070337][ T865] usb 3-1: Using ep0 maxpacket: 16 [ 406.078643][ T865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.124479][ T865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.127886][ T29] audit: type=1400 audit(1735378355.397:606): avc: denied { accept } for pid=11596 comm="syz.6.1127" laddr=::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 406.137518][T11616] overlayfs: missing 'lowerdir' [ 406.171026][ T865] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 406.213484][ T865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.221694][ T6784] usb 6-1: Using ep0 maxpacket: 8 [ 406.249097][ T6784] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 406.277116][ T865] usb 3-1: config 0 descriptor?? [ 406.287367][ T6784] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 406.333542][ T6784] usb 6-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 406.443559][ T6784] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.916948][ T865] hid-multitouch 0003:1FD2:6007.0006: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 407.598313][T11650] netlink: 'syz.5.1129': attribute type 2 has an invalid length. [ 408.104928][T11652] FAULT_INJECTION: forcing a failure. [ 408.104928][T11652] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 408.119754][T11652] CPU: 1 UID: 0 PID: 11652 Comm: syz.4.1139 Not tainted 6.13.0-rc4-syzkaller-00069-g8379578b11d5 #0 [ 408.130565][T11652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 408.140621][T11652] Call Trace: [ 408.143894][T11652] [ 408.146862][T11652] dump_stack_lvl+0x16c/0x1f0 [ 408.151566][T11652] should_fail_ex+0x497/0x5b0 [ 408.156273][T11652] _copy_to_user+0x32/0xd0 [ 408.160710][T11652] simple_read_from_buffer+0xd0/0x160 [ 408.166105][T11652] proc_fail_nth_read+0x198/0x270 [ 408.171139][T11652] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 408.176711][T11652] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 408.182284][T11652] vfs_read+0x1df/0xbe0 [ 408.186464][T11652] ? __fget_files+0x1fc/0x3a0 [ 408.191154][T11652] ? __pfx___mutex_lock+0x10/0x10 [ 408.196204][T11652] ? __pfx_vfs_read+0x10/0x10 [ 408.200909][T11652] ? __fget_files+0x206/0x3a0 [ 408.205581][T11652] ksys_read+0x12b/0x250 [ 408.209806][T11652] ? __pfx_ksys_read+0x10/0x10 [ 408.214566][T11652] do_syscall_64+0xcd/0x250 [ 408.219109][T11652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.225031][T11652] RIP: 0033:0x7f081198473c [ 408.229469][T11652] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 408.249091][T11652] RSP: 002b:00007f0812863030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 408.257509][T11652] RAX: ffffffffffffffda RBX: 00007f0811b75fa0 RCX: 00007f081198473c [ 408.265501][T11652] RDX: 000000000000000f RSI: 00007f08128630a0 RDI: 0000000000000004 [ 408.273515][T11652] RBP: 00007f0812863090 R08: 0000000000000000 R09: 0000000000000000 [ 408.281509][T11652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.289491][T11652] R13: 0000000000000000 R14: 00007f0811b75fa0 R15: 00007fff40dbe328 [ 408.297462][T11652] [ 408.300571][ C1] vkms_vblank_simulate: vblank timer overrun [ 408.317557][ T865] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 408.420506][ T5940] usb 3-1: USB disconnect, device number 41 [ 408.524580][ T865] usb 4-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 408.585406][T11670] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1142'. [ 408.685951][ T865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.704978][ T865] usb 4-1: Product: syz [ 408.719700][ T865] usb 4-1: Manufacturer: syz [ 408.726111][ T865] usb 4-1: SerialNumber: syz [ 408.736053][ T865] usb 4-1: config 0 descriptor?? [ 408.760414][ T865] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 409.331665][ T6784] usb 6-1: string descriptor 0 read error: -71 [ 409.338166][ T6784] hub 6-1:32.0: USB hub found [ 409.342965][ T865] sonixb 4-1:0.0: Error reading register 00: -110 [ 409.353091][ T6784] hub 6-1:32.0: config failed, can't read hub descriptor (err -22) [ 409.509709][T11679] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1143'. [ 409.555979][T11679] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1143'. [ 409.568391][ T6784] usb 6-1: USB disconnect, device number 9 [ 409.907810][T11695] xt_nat: multiple ranges no longer supported [ 409.921048][T11695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1146'. [ 410.909540][ T9] usb 4-1: USB disconnect, device number 51 [ 411.028420][ T29] audit: type=1400 audit(1735378361.093:607): avc: denied { create } for pid=11706 comm="syz.2.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 411.286998][ T9] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 411.329125][ T8] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 411.460818][ T9] usb 4-1: config 0 has an invalid interface number: 3 but max is 0 [ 411.484518][ T9] usb 4-1: config 0 has no interface number 0 [ 411.501222][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 411.510120][ T9] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 411.525835][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.536468][ T8] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 411.552962][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 411.563836][ T9] usb 4-1: config 0 descriptor?? [ 411.578615][ T9] cp210x 4-1:0.3: cp210x converter detected [ 411.590597][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 411.617755][ T8] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 411.637016][ T8] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 411.649568][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.871016][T11750] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 411.895307][ T8] usb 3-1: GET_CAPABILITIES returned 0 [ 411.901321][ T8] usbtmc 3-1:16.0: can't read capabilities [ 412.103548][ T9] cp210x 4-1:0.3: failed to get vendor val 0x000e size 3: -32 [ 412.191954][ T6784] usb 3-1: USB disconnect, device number 42 [ 412.390559][ T9] cp210x 4-1:0.3: failed to get vendor val 0x370c size 15: -121 [ 412.537991][ T9] cp210x 4-1:0.3: GPIO initialisation failed: -121 [ 412.548750][ T9] usb 4-1: cp210x converter now attached to ttyUSB0 [ 414.427463][ T9] usb 4-1: USB disconnect, device number 52 [ 414.450855][T11798] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1171'. [ 414.462583][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 414.470636][ T9] cp210x 4-1:0.3: device disconnected [ 414.691963][T11807] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1174'. [ 414.701132][T11807] netlink: 'syz.5.1174': attribute type 6 has an invalid length. [ 415.403799][T11833] xt_limit: Overflow, try lower: 0/0 [ 415.701817][ T9] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 415.851319][ T6784] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 415.887590][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 415.920945][ T9] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 415.926465][T11858] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 415.949750][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.968884][ T9] usb 3-1: Product: syz [ 415.969219][ T5940] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 415.973173][ T9] usb 3-1: Manufacturer: syz [ 415.994006][ T9] usb 3-1: SerialNumber: syz [ 416.021026][ T9] usb 3-1: config 0 descriptor?? [ 416.065156][ T6784] usb 4-1: Using ep0 maxpacket: 8 [ 416.072247][ T29] audit: type=1400 audit(1735378365.798:608): avc: denied { read } for pid=11859 comm="syz.5.1186" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 416.073807][ T9] gspca_main: sq930x-2.14.0 probing 2770:930c [ 416.132233][ T6784] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 416.164676][ T6784] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 416.185710][ T5940] usb 5-1: Using ep0 maxpacket: 8 [ 416.192848][ T6784] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 416.237769][ T5940] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 416.266928][ T6784] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.278810][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.297036][ T5940] usb 5-1: Product: syz [ 416.554905][ T5940] usb 5-1: Manufacturer: syz [ 416.696807][ T5940] usb 5-1: SerialNumber: syz [ 416.735729][ T5940] usb 5-1: config 0 descriptor?? [ 417.129590][ T5940] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 417.649321][T11879] netlink: 'syz.3.1182': attribute type 2 has an invalid length. [ 418.034109][ T29] audit: type=1400 audit(1735378367.650:609): avc: denied { mount } for pid=11876 comm="syz.6.1189" name="/" dev="configfs" ino=1120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 418.117727][ T29] audit: type=1400 audit(1735378367.650:610): avc: denied { search } for pid=11876 comm="syz.6.1189" name="/" dev="configfs" ino=1120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 418.256417][ T29] audit: type=1400 audit(1735378367.650:611): avc: denied { read } for pid=11876 comm="syz.6.1189" name="/" dev="configfs" ino=1120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 418.428167][ T5940] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 418.655256][ T9] gspca_sq930x: ucbus_write failed -110 [ 418.716407][ T29] audit: type=1400 audit(1735378367.650:612): avc: denied { open } for pid=11876 comm="syz.6.1189" path="/" dev="configfs" ino=1120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 418.909023][ T9] gspca_sq930x: Sensor ov9630 not yet treated [ 418.915185][ T9] sq930x 3-1:0.0: probe with driver sq930x failed with error -22 [ 419.219192][ T6784] usb 4-1: string descriptor 0 read error: -71 [ 419.245054][ T6784] hub 4-1:32.0: USB hub found [ 419.811883][ T6784] hub 4-1:32.0: config failed, can't read hub descriptor (err -22) [ 419.850660][ T6784] usb 4-1: USB disconnect, device number 53 [ 419.949352][ T5864] usb 3-1: USB disconnect, device number 43 [ 420.020766][ T5940] usb 5-1: USB disconnect, device number 40 [ 420.108907][ T5818] udevd[5818]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 420.619074][T11941] input: syz1 as /devices/virtual/input/input24 [ 420.835487][T11956] FAULT_INJECTION: forcing a failure. [ 420.835487][T11956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.849526][T11956] CPU: 1 UID: 0 PID: 11956 Comm: syz.4.1204 Not tainted 6.13.0-rc4-syzkaller-00069-g8379578b11d5 #0 [ 420.860323][T11956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 420.870390][T11956] Call Trace: [ 420.873680][T11956] [ 420.876625][T11956] dump_stack_lvl+0x16c/0x1f0 [ 420.881319][T11956] should_fail_ex+0x497/0x5b0 [ 420.886021][T11956] _copy_from_user+0x2e/0xd0 [ 420.890633][T11956] copy_msghdr_from_user+0x99/0x160 [ 420.895846][T11956] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 420.901671][T11956] ___sys_sendmsg+0xff/0x1e0 [ 420.906254][T11956] ? __pfx____sys_sendmsg+0x10/0x10 [ 420.911470][T11956] ? __pfx_lock_release+0x10/0x10 [ 420.916481][T11956] ? trace_lock_acquire+0x14e/0x1f0 [ 420.921679][T11956] ? __fget_files+0x206/0x3a0 [ 420.926346][T11956] __sys_sendmsg+0x16e/0x220 [ 420.930923][T11956] ? __pfx___sys_sendmsg+0x10/0x10 [ 420.936032][T11956] do_syscall_64+0xcd/0x250 [ 420.940530][T11956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.946414][T11956] RIP: 0033:0x7f0811985d29 [ 420.950816][T11956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.970411][T11956] RSP: 002b:00007f0812863038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 420.978809][T11956] RAX: ffffffffffffffda RBX: 00007f0811b75fa0 RCX: 00007f0811985d29 [ 420.986764][T11956] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000003 [ 420.994719][T11956] RBP: 00007f0812863090 R08: 0000000000000000 R09: 0000000000000000 [ 421.002672][T11956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.010625][T11956] R13: 0000000000000000 R14: 00007f0811b75fa0 R15: 00007fff40dbe328 [ 421.018594][T11956] [ 421.021660][ C1] vkms_vblank_simulate: vblank timer overrun [ 421.028848][ T5129] Bluetooth: hci2: command 0x0406 tx timeout [ 421.525237][T11961] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1205'. [ 421.595337][T11961] evm: overlay not supported [ 421.816857][ T6784] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 422.126838][ T9] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 422.259996][T11974] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 422.267263][T11974] IPv6: NLM_F_CREATE should be set when creating new route [ 422.281370][T11974] netlink: 'syz.6.1210': attribute type 27 has an invalid length. [ 422.316534][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 422.316722][ T6784] usb 4-1: Using ep0 maxpacket: 8 [ 422.375193][ T6784] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 422.376814][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 422.390941][ T6784] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.556933][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 422.596484][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 422.605841][ T6784] usb 4-1: config 0 has no interface number 0 [ 422.612902][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.631861][ T6784] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 422.633295][ T9] usb 5-1: Product: syz [ 422.650117][ T9] usb 5-1: Manufacturer: syz [ 422.658490][ T9] usb 5-1: SerialNumber: syz [ 422.667111][T11974] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.701342][ T6784] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 32768, setting to 1024 [ 422.715362][ T6784] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 422.730692][ T6784] usb 4-1: config 0 interface 52 has no altsetting 0 [ 422.769828][T11974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 422.778227][ T29] audit: type=1400 audit(1735378372.075:613): avc: denied { connect } for pid=11979 comm="syz.5.1213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 422.798387][T11980] xt_hashlimit: size too large, truncated to 1048576 [ 422.807286][T11974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.859303][T11974] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.869261][T11974] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.878485][T11974] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.887390][T11974] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.912227][ T9] usb 5-1: 0:2 : does not exist [ 422.914550][ T6784] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 422.929980][ T6784] usb 4-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 422.938288][ T6784] usb 4-1: Product: syz [ 422.943406][ T6784] usb 4-1: SerialNumber: syz [ 422.953318][ T6784] usb 4-1: config 0 descriptor?? [ 422.971987][ T9] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 423.004438][T11986] : renamed from bond0 [ 423.020636][ T9] usb 5-1: 5:0: cannot get min/max values for control 4 (id 5) [ 423.100043][ T9] usb 5-1: USB disconnect, device number 41 [ 423.175682][ T6784] input: syz (Stick) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input25 [ 423.303713][ T6263] udevd[6263]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 423.455760][T11995] ebt_among: dst integrity fail: 100 [ 423.973281][ T9] usb 4-1: USB disconnect, device number 54 [ 425.280892][T12016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1224'. [ 425.400101][T12019] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=12019 comm=syz.2.1224 [ 426.460202][T12025] input: syz1 as /devices/virtual/input/input26 [ 427.025143][ T29] audit: type=1400 audit(1735378375.975:614): avc: denied { setopt } for pid=12028 comm="syz.3.1228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 427.346707][ T8] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 427.507919][ T29] audit: type=1400 audit(1735378376.078:615): avc: denied { execmem } for pid=12032 comm="syz.2.1230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 427.527130][ C0] vkms_vblank_simulate: vblank timer overrun [ 427.578840][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 427.628574][ T8] usb 4-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 427.675536][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.683565][ T8] usb 4-1: Product: syz [ 427.807957][ T8] usb 4-1: Manufacturer: syz [ 427.825016][ T8] usb 4-1: SerialNumber: syz [ 427.866933][ T8] usb 4-1: config 0 descriptor?? [ 427.896219][ T8] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 427.917286][T12045] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1232'. [ 427.927432][T12045] nbd: illegal input index 4194368 [ 429.430932][ T29] audit: type=1400 audit(1735378378.211:616): avc: denied { map } for pid=12066 comm="syz.2.1237" path="/dev/video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 429.454268][ C0] vkms_vblank_simulate: vblank timer overrun [ 430.036256][ T8] gspca_m5602: Failed to find a sensor [ 430.057018][ T8] ALi m5602 4-1:0.0: ALi m5602 webcam failed [ 430.086891][ T8] usb 4-1: USB disconnect, device number 55 [ 430.183239][ T29] audit: type=1400 audit(1735378379.006:617): avc: denied { map } for pid=12087 comm="syz.4.1241" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 430.406623][T12091] xt_hashlimit: max too large, truncated to 1048576 [ 431.288695][ T865] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 431.569578][ T865] usb 4-1: device descriptor read/64, error -71 [ 432.141741][ T865] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 432.430144][ T865] usb 4-1: device descriptor read/64, error -71 [ 433.117647][ T865] usb usb4-port1: attempt power cycle [ 433.565646][ T865] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 433.689609][ T865] usb 4-1: device descriptor read/8, error -71 [ 434.592114][T12148] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1253'. [ 434.645617][T12148] nbd: illegal input index 7343936 [ 435.741461][T12172] ebt_among: dst integrity fail: 100 [ 436.905412][T12188] program syz.5.1263 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 437.123222][ T865] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 437.373583][ T865] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 437.417197][ T865] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 437.513162][ T865] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 437.525077][ T865] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 437.538573][ T865] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 437.563860][ T865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.588049][ T865] usb 5-1: Product: syz [ 437.718015][ T865] usb 5-1: Manufacturer: syz [ 437.724288][ T865] usb 5-1: SerialNumber: syz [ 437.832981][T12206] xt_nat: multiple ranges no longer supported [ 437.849255][T12206] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1267'. [ 438.388324][T12208] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1268'. [ 438.409176][T12208] netlink: 'syz.3.1268': attribute type 6 has an invalid length. [ 438.546797][ T865] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 438.563397][ T865] usb 5-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 438.724855][ T865] usb 5-1: found format II with max.bitrate = 128, frame size=0 [ 438.786219][ T865] usb 5-1: 2:1: All rates were zero [ 438.976500][ T865] usb 5-1: USB disconnect, device number 42 [ 438.999327][T12221] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1272'. [ 439.034721][T12221] nbd: illegal input index 4128832 [ 439.143358][T12224] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1271'. [ 439.226990][ T5818] udevd[5818]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 439.460677][T12228] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=33153 sclass=netlink_route_socket pid=12228 comm=syz.5.1273 [ 439.778942][T12234] CUSE: info not properly terminated [ 441.070588][ T6784] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 441.277613][ T6784] usb 3-1: Using ep0 maxpacket: 8 [ 441.301256][ T6784] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.334113][ T6784] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.349912][ T6784] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 441.396641][ T6784] usb 3-1: New USB device found, idVendor=056a, idProduct=00b5, bcdDevice= 0.00 [ 441.427266][ T6784] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.444082][ T6784] usb 3-1: config 0 descriptor?? [ 442.065061][ T6784] wacom 0003:056A:00B5.0007: item 0 4 0 8 parsing failed [ 442.091039][ T6784] wacom 0003:056A:00B5.0007: parse failed [ 442.203904][ T6784] wacom 0003:056A:00B5.0007: probe with driver wacom failed with error -22 [ 442.855544][ T6784] usb 3-1: USB disconnect, device number 44 [ 443.046202][T12296] serio: Serial port ptm0 [ 444.246587][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.255271][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.331646][T12320] Invalid ELF header magic: != ELF [ 444.340436][T12320] ntfs3(nullb0): Primary boot signature is not NTFS. [ 444.347569][T12320] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 447.237914][T12350] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1294'. [ 447.257670][T12350] nbd: illegal input index 50331712 [ 447.449454][T12365] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1299'. [ 447.664088][T12371] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1301'. [ 447.940702][T12380] lo speed is unknown, defaulting to 1000 [ 447.962787][T12380] lo speed is unknown, defaulting to 1000 [ 447.975805][T12380] lo speed is unknown, defaulting to 1000 [ 448.369343][T12380] infiniband sz1: set down [ 448.374547][T12380] infiniband sz1: added lo [ 448.387162][T12377] : renamed from lo [ 448.452484][T12380] RDS/IB: sz1: added [ 448.457747][T12380] smc: adding ib device sz1 with port count 1 [ 448.464304][T12380] smc: ib device sz1 port 1 has pnetid [ 448.479612][ T865] speed is unknown, defaulting to 1000 [ 448.489002][T12380] speed is unknown, defaulting to 1000 [ 448.501451][ T865] speed is unknown, defaulting to 1000 [ 449.054191][T12395] CUSE: info not properly terminated [ 449.099254][T12380] speed is unknown, defaulting to 1000 [ 449.931509][T12380] speed is unknown, defaulting to 1000 [ 450.370955][T12380] speed is unknown, defaulting to 1000 [ 450.634380][T12414] ebt_among: dst integrity fail: 100 [ 451.250491][T12380] speed is unknown, defaulting to 1000 [ 451.452889][T12403] speed is unknown, defaulting to 1000 [ 451.921389][ T5129] Bluetooth: hci5: command 0x0406 tx timeout [ 452.024204][T12421] bond0: entered promiscuous mode [ 452.029337][T12421] bond0: entered allmulticast mode [ 452.035630][T12421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.740013][ T5864] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 453.796952][ T29] audit: type=1400 audit(1735378401.100:618): avc: denied { setattr } for pid=12458 comm="syz.4.1322" name="smaps" dev="proc" ino=34592 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 453.961366][ T5864] usb 6-1: config 0 has an invalid interface number: 3 but max is 0 [ 453.990252][ T5864] usb 6-1: config 0 has no interface number 0 [ 454.000477][ T5864] usb 6-1: config 0 interface 3 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 454.013304][ T5864] usb 6-1: config 0 interface 3 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 454.038743][ T5864] usb 6-1: config 0 interface 3 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 454.054009][ T5864] usb 6-1: config 0 interface 3 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 454.065679][ T5864] usb 6-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 454.085879][ T5864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.122905][ T5864] usb 6-1: config 0 descriptor?? [ 454.144780][ T5864] hub 6-1:0.3: bad descriptor, ignoring hub [ 454.159827][ T5864] hub 6-1:0.3: probe with driver hub failed with error -5 [ 454.862719][ T5864] sierra 6-1:0.3: Sierra USB modem converter detected [ 455.322797][ T8] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 455.424377][T12482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1327'. [ 455.713194][ T5864] usb 6-1: Sierra USB modem converter now attached to ttyUSB0 [ 455.752473][ T8] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 455.770256][ T5864] usb 6-1: Sierra USB modem converter now attached to ttyUSB1 [ 455.778417][ T8] usb 3-1: config 0 has no interface number 0 [ 455.804770][ T8] usb 3-1: config 0 interface 3 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 455.815739][ T8] usb 3-1: config 0 interface 3 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 455.838568][ T5864] usb 6-1: USB disconnect, device number 10 [ 455.897713][ T5864] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 455.909579][ T8] usb 3-1: config 0 interface 3 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 455.950357][ T8] usb 3-1: config 0 interface 3 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 455.963412][ T5864] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 455.972767][ T5864] sierra 6-1:0.3: device disconnected [ 456.000851][ T8] usb 3-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 456.035210][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.056431][ T8] usb 3-1: config 0 descriptor?? [ 456.075062][ T8] hub 3-1:0.3: bad descriptor, ignoring hub [ 456.084734][ T8] hub 3-1:0.3: probe with driver hub failed with error -5 [ 456.093431][ T8] sierra 3-1:0.3: Sierra USB modem converter detected [ 456.388823][ T8] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 456.406617][ T8] usb 3-1: Sierra USB modem converter now attached to ttyUSB1 [ 456.449459][ T8] usb 3-1: USB disconnect, device number 45 [ 456.652723][ T8] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 456.691968][ T8] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 456.711776][ T865] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 456.727435][ T8] sierra 3-1:0.3: device disconnected [ 456.853810][T12517] SELinux: Context unconfined is not valid (left unmapped). [ 456.872140][ T29] audit: type=1400 audit(1735378403.972:619): avc: denied { relabelto } for pid=12515 comm="syz.6.1333" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="unconfined" [ 457.069454][T12517] 9pnet_fd: Insufficient options for proto=fd [ 457.187862][ T5129] Bluetooth: hci0: unexpected event for opcode 0xc10c [ 457.251835][ T29] audit: type=1400 audit(1735378403.981:620): avc: denied { associate } for pid=12515 comm="syz.6.1333" name="msr" dev="devtmpfs" ino=87 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="unconfined" [ 457.302544][ T865] usb 5-1: config 0 has an invalid interface number: 3 but max is 0 [ 457.320147][ T865] usb 5-1: config 0 has no interface number 0 [ 457.337143][ T865] usb 5-1: config 0 interface 3 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 457.390430][ T865] usb 5-1: config 0 interface 3 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 457.401029][ T29] audit: type=1400 audit(1735378404.430:621): avc: denied { bind } for pid=12526 comm="syz.6.1334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 457.448545][ T865] usb 5-1: config 0 interface 3 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 457.496988][ T865] usb 5-1: config 0 interface 3 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 457.544149][T12541] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1339'. [ 457.564394][ T865] usb 5-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 457.612946][ T865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.651290][ T865] usb 5-1: config 0 descriptor?? [ 457.670273][ T865] hub 5-1:0.3: bad descriptor, ignoring hub [ 457.677241][ T865] hub 5-1:0.3: probe with driver hub failed with error -5 [ 457.685763][ T865] sierra 5-1:0.3: Sierra USB modem converter detected [ 457.742721][ T29] audit: type=1400 audit(1735378404.786:622): avc: denied { read } for pid=12547 comm="syz.5.1341" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="unconfined" [ 458.164841][ T865] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 458.176436][ T29] audit: type=1400 audit(1735378404.786:623): avc: denied { open } for pid=12547 comm="syz.5.1341" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="unconfined" [ 458.211760][ T865] usb 5-1: Sierra USB modem converter now attached to ttyUSB1 [ 458.305393][ T865] usb 5-1: USB disconnect, device number 43 [ 458.361427][ T865] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 458.379439][T12560] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1344'. [ 458.391628][T12560] netlink: 'syz.3.1344': attribute type 6 has an invalid length. [ 458.393436][ T865] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 458.459766][ T865] sierra 5-1:0.3: device disconnected [ 458.931522][ T8] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 458.969167][T12577] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1347'. [ 459.233841][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 459.248777][ T8] usb 4-1: config 64 has an invalid interface number: 89 but max is 0 [ 459.268277][ T8] usb 4-1: config 64 has no interface number 0 [ 459.285538][ T8] usb 4-1: too many endpoints for config 64 interface 89 altsetting 115: 104, using maximum allowed: 30 [ 459.302715][ T8] usb 4-1: config 64 interface 89 altsetting 115 has 0 endpoint descriptors, different from the interface descriptor's value: 104 [ 459.377481][ T8] usb 4-1: config 64 interface 89 has no altsetting 0 [ 459.411560][ T8] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 459.422755][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.454757][ T8] usb 4-1: Product: syz [ 459.487127][ T8] usb 4-1: Manufacturer: syz [ 459.508143][ T8] usb 4-1: SerialNumber: syz [ 459.640521][T12597] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 460.135115][ T8] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 460.142120][ T8] gspca_stk1135: reg_w 0x2 err -71 [ 460.160528][T12581] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 460.177678][T12581] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 460.178816][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 460.193207][ T8] gspca_stk1135: Sensor write failed [ 460.202229][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 460.229620][T12581] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 460.233877][T12615] sctp: [Deprecated]: syz.3.1356 (pid 12615) Use of struct sctp_assoc_value in delayed_ack socket option. [ 460.233877][T12615] Use struct sctp_sack_info instead [ 460.235544][T12581] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 460.236233][T12581] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 460.252877][ T8] gspca_stk1135: Sensor write failed [ 460.272066][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 460.287313][ T8] gspca_stk1135: Sensor read failed [ 460.294735][T12617] fuse: Unknown parameter '0x0000000000000009' [ 460.328418][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 460.364857][T12581] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 460.365624][ T8] gspca_stk1135: Sensor read failed [ 460.481407][T12624] serio: Serial port ptm0 [ 460.679637][ T2919] kworker/u8:7 (2919) used greatest stack depth: 20416 bytes left [ 461.380771][ T8] gspca_stk1135: Detected sensor type unknown (0x0) [ 461.387517][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 461.393873][ T8] gspca_stk1135: Sensor read failed [ 461.399093][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 461.406535][ T8] gspca_stk1135: Sensor read failed [ 461.411767][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 461.581378][T12635] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1362'. [ 461.590796][ T8] gspca_stk1135: Sensor write failed [ 461.600593][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 461.607763][ T8] gspca_stk1135: Sensor write failed [ 461.613189][ T8] stk1135 4-1:64.89: probe with driver stk1135 failed with error -71 [ 461.630296][ T8] usb 4-1: USB disconnect, device number 60 [ 462.688141][T12650] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 462.936644][T12665] random: crng reseeded on system resumption [ 462.937040][ T29] audit: type=1400 audit(1735378409.650:624): avc: denied { write } for pid=12662 comm="syz.3.1367" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 464.369383][T12581] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 464.394060][T12581] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 464.488740][T12581] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 464.499465][T12581] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 465.409467][T12709] serio: Serial port ptm0 [ 465.518275][ T29] audit: type=1326 audit(1735378412.063:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12704 comm="syz.3.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd45c185d29 code=0x7ffc0000 [ 466.300252][ T29] audit: type=1326 audit(1735378412.091:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12704 comm="syz.3.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd45c185d29 code=0x7ffc0000 [ 466.326832][ T29] audit: type=1326 audit(1735378412.110:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12704 comm="syz.3.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fd45c185d29 code=0x7ffc0000 [ 466.553818][ T29] audit: type=1326 audit(1735378412.110:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12704 comm="syz.3.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd45c185d29 code=0x7ffc0000 [ 466.577552][ T29] audit: type=1326 audit(1735378412.110:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12704 comm="syz.3.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd45c185d29 code=0x7ffc0000 [ 466.698992][ T29] audit: type=1326 audit(1735378412.147:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12704 comm="syz.3.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd45c185d29 code=0x7ffc0000 [ 466.732188][ T29] audit: type=1326 audit(1735378412.157:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12704 comm="syz.3.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd45c185d29 code=0x7ffc0000 [ 466.808587][ T29] audit: type=1326 audit(1735378412.157:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12704 comm="syz.3.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd45c185d29 code=0x7ffc0000 [ 466.832021][ C1] vkms_vblank_simulate: vblank timer overrun [ 467.319289][T12742] netlink: 'syz.4.1376': attribute type 27 has an invalid length. [ 467.397671][T12738] bond4: entered promiscuous mode [ 467.403213][T12738] bond4: entered allmulticast mode [ 467.417317][T12738] 8021q: adding VLAN 0 to HW filter on device bond4 [ 467.426878][ T29] audit: type=1326 audit(1735378412.203:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12704 comm="syz.3.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fd45c185d29 code=0x7ffc0000 [ 467.477486][T12742] bond2: left promiscuous mode [ 467.482338][T12742] bond2: left allmulticast mode [ 467.990450][T12760] bond3: entered promiscuous mode [ 467.995893][T12760] bond3: entered allmulticast mode [ 468.006455][T12760] 8021q: adding VLAN 0 to HW filter on device bond3 [ 468.544564][T12778] FAULT_INJECTION: forcing a failure. [ 468.544564][T12778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 468.558209][T12778] CPU: 0 UID: 0 PID: 12778 Comm: syz.5.1383 Not tainted 6.13.0-rc4-syzkaller-00069-g8379578b11d5 #0 [ 468.568975][T12778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 468.579057][T12778] Call Trace: [ 468.582336][T12778] [ 468.585252][T12778] dump_stack_lvl+0x16c/0x1f0 [ 468.589970][T12778] should_fail_ex+0x497/0x5b0 [ 468.594682][T12778] _copy_to_iter+0x465/0x1560 [ 468.599381][T12778] ? __pfx__copy_to_iter+0x10/0x10 [ 468.604497][T12778] ? __virt_addr_valid+0x1a4/0x590 [ 468.609622][T12778] ? __virt_addr_valid+0x5e/0x590 [ 468.614673][T12778] ? __phys_addr_symbol+0x30/0x80 [ 468.619754][T12778] ? __check_object_size+0x488/0x710 [ 468.625049][T12778] seq_read_iter+0xd00/0x12b0 [ 468.629744][T12778] seq_read+0x39f/0x4e0 [ 468.633897][T12778] ? __pfx_seq_read+0x10/0x10 [ 468.638565][T12778] ? inode_security+0x101/0x130 [ 468.643415][T12778] ? avc_policy_seqno+0x9/0x20 [ 468.648248][T12778] ? __pfx_seq_read+0x10/0x10 [ 468.652943][T12778] vfs_read+0x1df/0xbe0 [ 468.657096][T12778] ? __fget_files+0x1fc/0x3a0 [ 468.661757][T12778] ? __pfx_lock_release+0x10/0x10 [ 468.666780][T12778] ? __pfx_vfs_read+0x10/0x10 [ 468.671441][T12778] ? lock_acquire+0x2f/0xb0 [ 468.675941][T12778] ? __fget_files+0x40/0x3a0 [ 468.680600][T12778] ? __fget_files+0x206/0x3a0 [ 468.685307][T12778] __x64_sys_pread64+0x1f6/0x250 [ 468.690249][T12778] ? __pfx___x64_sys_pread64+0x10/0x10 [ 468.695723][T12778] do_syscall_64+0xcd/0x250 [ 468.700231][T12778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.706138][T12778] RIP: 0033:0x7fa02af85d29 [ 468.710554][T12778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.730157][T12778] RSP: 002b:00007fa02bd11038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 468.738571][T12778] RAX: ffffffffffffffda RBX: 00007fa02b176080 RCX: 00007fa02af85d29 [ 468.746537][T12778] RDX: 0000000000001009 RSI: 0000000020002180 RDI: 0000000000000004 [ 468.754505][T12778] RBP: 00007fa02bd11090 R08: 0000000000000000 R09: 0000000000000000 [ 468.762464][T12778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.770491][T12778] R13: 0000000000000000 R14: 00007fa02b176080 R15: 00007ffd1fdb2758 [ 468.778482][T12778] [ 468.793494][T12781] input: syz1 as /devices/virtual/input/input27 [ 469.026203][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 469.026237][ T29] audit: type=1400 audit(1735378415.337:659): avc: denied { setopt } for pid=12784 comm="syz.3.1385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 469.245660][T12791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1386'. [ 470.126247][T12798] rdma_rxe: rxe_newlink: failed to add lo [ 470.537459][ T865] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 470.706056][ T865] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 470.808756][ T865] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 470.840078][ T865] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 470.892708][ T865] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 470.979427][ T865] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 471.046900][ T865] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 471.054433][ T865] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 471.133412][ T865] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 471.142344][ T865] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 471.171628][ T865] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 471.215540][ T865] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 471.331213][ T865] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 471.389395][ T865] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 471.581573][ T865] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 471.612147][ T865] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 471.679688][ T865] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 471.687646][ T865] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 471.700766][ T865] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 471.725226][ T865] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 471.807820][ T865] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 471.848998][ T51] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 471.890803][ T865] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 471.930479][ T865] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 471.969395][ T865] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 471.993796][ T865] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 472.010315][ T865] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 472.018479][ T865] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 472.030252][ T51] usb 4-1: Using ep0 maxpacket: 8 [ 472.045808][ T51] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 472.069094][ T51] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.094829][ T6784] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 472.145649][ T865] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 472.156712][ T51] usb 4-1: config 0 has no interface number 0 [ 472.173184][ T51] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 472.215443][ T51] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 32768, setting to 1024 [ 472.308145][T12857] speed is unknown, defaulting to 1000 [ 472.319597][ T6784] usb 6-1: Using ep0 maxpacket: 8 [ 472.325180][ T51] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 472.351614][ T6784] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 472.359920][ T6784] usb 6-1: config 0 has no interface number 0 [ 472.372459][ T51] usb 4-1: config 0 interface 52 has no altsetting 0 [ 472.395195][ T51] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 472.414143][ T6784] usb 6-1: config 0 interface 132 altsetting 213 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 472.447404][ T51] usb 4-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 472.455731][ T51] usb 4-1: Product: syz [ 472.460871][ T6784] usb 6-1: config 0 interface 132 has no altsetting 0 [ 472.467774][ T6784] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=37.c2 [ 472.487426][ T51] usb 4-1: SerialNumber: syz [ 472.494479][ T51] usb 4-1: config 0 descriptor?? [ 472.511489][ T6784] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.544734][ T6784] usb 6-1: config 0 descriptor?? [ 472.616980][T12865] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 472.641497][T12865] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1399'. [ 472.721069][ T51] input: syz (Stick) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input28 [ 472.815015][ T6784] usb 6-1: string descriptor 0 read error: -71 [ 472.822566][ T6784] usbtest 6-1:0.132: couldn't get endpoints, -22 [ 472.832854][ T6784] usbtest 6-1:0.132: probe with driver usbtest failed with error -22 [ 472.855143][ T6784] usb 6-1: USB disconnect, device number 11 [ 473.125362][ T51] usb 4-1: USB disconnect, device number 61 [ 474.532512][T12901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1407'. [ 474.769181][ T8] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 474.949370][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 474.972791][ T8] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 475.010015][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.030082][ T8] usb 4-1: Product: syz [ 475.042655][ T8] usb 4-1: Manufacturer: syz [ 475.053373][ T8] usb 4-1: SerialNumber: syz [ 475.068478][ T8] usb 4-1: config 0 descriptor?? [ 475.347225][ T8] peak_usb 4-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 475.385711][ T8] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 475.423734][ T8] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 476.139748][ T8] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -22 [ 476.196268][ T8] usb 4-1: USB disconnect, device number 62 [ 476.576257][T12946] rdma_rxe: rxe_newlink: failed to add lo [ 477.979919][ T8] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 478.178037][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 478.187816][ T8] usb 4-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 1023 [ 478.204682][ T8] usb 4-1: config 1 interface 0 has no altsetting 0 [ 478.222921][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 478.233496][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.277330][ T8] usb 4-1: Product: Ⰺ [ 478.289251][ T8] usb 4-1: Manufacturer: ࠐ [ 478.301399][ T8] usb 4-1: SerialNumber: 斗珒ᜃ藒䮌銨ᲇᣰ髜≳码麦잍阄홅ꢋ᏾堊瘨嶑숏츫ኵ㪖괂ﱹ鉻工䶇츱⬾롐ŕ뭢ޤ긍녋큑촾慳欛⛇妒戽즄䐔ޙ뮆碦麬熂參监줪͎π䆫㷏즌 [ 478.340503][T12956] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 478.980197][T12956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.013308][T12956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.073133][T12956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.091411][T12956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.119340][T12956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.142847][T12956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.258259][ T5864] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 479.811182][ T5864] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 479.963019][ T5864] usb 3-1: config 0 has no interface number 0 [ 479.974045][ T5864] usb 3-1: config 0 interface 3 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 479.988706][T12999] rdma_rxe: rxe_newlink: failed to add lo [ 480.018183][ T5864] usb 3-1: config 0 interface 3 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 480.044954][ T5864] usb 3-1: config 0 interface 3 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 480.056345][ T5864] usb 3-1: config 0 interface 3 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 480.085881][ T8] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 63 if 0 alt 7 proto 2 vid 0x0525 pid 0xA4A8 [ 480.166027][ T5864] usb 3-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 480.295273][T13004] FAULT_INJECTION: forcing a failure. [ 480.295273][T13004] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 480.308672][T13004] CPU: 0 UID: 0 PID: 13004 Comm: syz.5.1428 Not tainted 6.13.0-rc4-syzkaller-00069-g8379578b11d5 #0 [ 480.319446][T13004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 480.329525][T13004] Call Trace: [ 480.332814][T13004] [ 480.335745][T13004] dump_stack_lvl+0x16c/0x1f0 [ 480.340435][T13004] should_fail_ex+0x497/0x5b0 [ 480.345115][T13004] _copy_to_user+0x32/0xd0 [ 480.349519][T13004] simple_read_from_buffer+0xd0/0x160 [ 480.354880][T13004] proc_fail_nth_read+0x198/0x270 [ 480.359939][T13004] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 480.365483][T13004] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 480.371027][T13004] vfs_read+0x1df/0xbe0 [ 480.375199][T13004] ? __fget_files+0x1fc/0x3a0 [ 480.379908][T13004] ? __pfx___mutex_lock+0x10/0x10 [ 480.384965][T13004] ? __pfx_vfs_read+0x10/0x10 [ 480.389642][T13004] ? __fget_files+0x206/0x3a0 [ 480.394314][T13004] ksys_read+0x12b/0x250 [ 480.398545][T13004] ? __pfx_ksys_read+0x10/0x10 [ 480.403308][T13004] do_syscall_64+0xcd/0x250 [ 480.407817][T13004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.413708][T13004] RIP: 0033:0x7fa02af8473c [ 480.418112][T13004] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 480.437737][T13004] RSP: 002b:00007fa02bcf0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 480.446150][T13004] RAX: ffffffffffffffda RBX: 00007fa02b176160 RCX: 00007fa02af8473c [ 480.454108][T13004] RDX: 000000000000000f RSI: 00007fa02bcf00a0 RDI: 0000000000000004 [ 480.462069][T13004] RBP: 00007fa02bcf0090 R08: 0000000000000000 R09: 0000000000000000 [ 480.470029][T13004] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 480.478077][T13004] R13: 0000000000000001 R14: 00007fa02b176160 R15: 00007ffd1fdb2758 [ 480.486050][T13004] [ 480.593995][ T8] usb 4-1: USB disconnect, device number 63 [ 480.604898][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.711260][ T5864] usb 3-1: config 0 descriptor?? [ 480.750515][ T8] usblp0: removed [ 480.782364][T13007] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 480.793900][ T5864] hub 3-1:0.3: bad descriptor, ignoring hub [ 480.804729][ T5864] hub 3-1:0.3: probe with driver hub failed with error -5 [ 480.828456][ T5864] sierra 3-1:0.3: Sierra USB modem converter detected [ 480.995214][ T5864] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 481.018765][ T5864] usb 3-1: Sierra USB modem converter now attached to ttyUSB1 [ 481.076112][ T5864] usb 3-1: USB disconnect, device number 46 [ 481.131419][ T5864] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 481.175906][ T5864] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 481.213402][ T5864] sierra 3-1:0.3: device disconnected [ 481.302891][T13028] ebt_among: dst integrity fail: 100 [ 482.259410][ T29] audit: type=1400 audit(1735378427.722:660): avc: denied { bind } for pid=13042 comm="syz.6.1438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 482.359719][T13051] ebt_among: dst integrity fail: 100 [ 482.699270][ T29] audit: type=1400 audit(1735378427.722:661): avc: denied { name_bind } for pid=13042 comm="syz.6.1438" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 482.851501][ T29] audit: type=1400 audit(1735378427.722:662): avc: denied { node_bind } for pid=13042 comm="syz.6.1438" saddr=fe80::aa src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 482.893175][ T29] audit: type=1400 audit(1735378427.750:663): avc: denied { write } for pid=13042 comm="syz.6.1438" name="icmp6" dev="proc" ino=4026534248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 482.961090][ T29] audit: type=1400 audit(1735378428.377:664): avc: denied { append } for pid=13047 comm="syz.2.1442" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 483.205066][T13059] netlink: 'syz.4.1444': attribute type 27 has an invalid length. [ 483.238527][T13059] bond3: left promiscuous mode [ 483.243494][T13059] bond3: left allmulticast mode [ 483.355627][ T51] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 483.484198][T13064] overlayfs: failed to resolve './file0': -2 [ 483.597956][ T51] usb 4-1: device descriptor read/64, error -71 [ 483.740171][T13073] xt_nat: multiple ranges no longer supported [ 483.758520][T13073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1446'. [ 484.643422][ T865] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 484.651520][ T51] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 484.724495][T13088] Invalid ELF header magic: != ELF [ 484.730966][T13088] ntfs3(nullb0): Primary boot signature is not NTFS. [ 484.737780][T13088] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 484.947301][ T51] usb 4-1: device descriptor read/64, error -71 [ 484.977057][ T865] usb 5-1: Using ep0 maxpacket: 8 [ 484.990162][ T865] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 485.003041][ T865] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.013726][ T865] usb 5-1: config 0 has no interface number 0 [ 485.020288][ T865] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 485.032211][ T865] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 32768, setting to 1024 [ 485.048066][ T865] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 485.067441][ T865] usb 5-1: config 0 interface 52 has no altsetting 0 [ 485.074848][ T51] usb usb4-port1: attempt power cycle [ 485.089901][ T865] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 485.120912][ T865] usb 5-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 485.132453][ T865] usb 5-1: Product: syz [ 485.136717][ T865] usb 5-1: SerialNumber: syz [ 485.147578][ T865] usb 5-1: config 0 descriptor?? [ 485.376756][ T865] input: syz (Stick) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.52/input/input29 [ 485.447340][ T51] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 485.457798][ T5864] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 485.504357][ T51] usb 4-1: device descriptor read/8, error -71 [ 485.562729][ T29] audit: type=1400 audit(1735378430.809:665): avc: denied { create } for pid=13127 comm="syz.3.1452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 485.587561][ T29] audit: type=1400 audit(1735378430.827:666): avc: denied { listen } for pid=13127 comm="syz.3.1452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 485.610981][ T29] audit: type=1400 audit(1735378430.827:667): avc: denied { accept } for pid=13127 comm="syz.3.1452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 485.653250][ T5864] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 485.668084][ T865] usb 5-1: USB disconnect, device number 44 [ 485.681355][ T5864] usb 3-1: config 0 has no interface number 0 [ 485.713369][ T5864] usb 3-1: config 0 interface 3 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 485.752643][ T5864] usb 3-1: config 0 interface 3 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 485.768870][ T5864] usb 3-1: config 0 interface 3 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 485.780742][ T5864] usb 3-1: config 0 interface 3 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 485.805256][ T5864] usb 3-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 485.814991][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.834955][ T5864] usb 3-1: config 0 descriptor?? [ 485.848906][ T5864] hub 3-1:0.3: bad descriptor, ignoring hub [ 485.855788][ T5864] hub 3-1:0.3: probe with driver hub failed with error -5 [ 485.870531][ T5864] sierra 3-1:0.3: Sierra USB modem converter detected [ 485.917462][ C0] hrtimer: interrupt took 58241 ns [ 486.073472][ T5864] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 486.084264][ T5864] usb 3-1: Sierra USB modem converter now attached to ttyUSB1 [ 486.112485][ T5864] usb 3-1: USB disconnect, device number 47 [ 486.153705][ T5864] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 486.186340][ T5864] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 486.209539][ T5864] sierra 3-1:0.3: device disconnected [ 486.323747][ T51] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 486.380980][ T51] usb 4-1: Using ep0 maxpacket: 16 [ 486.405023][ T51] usb 4-1: config 0 interface 0 has no altsetting 0 [ 486.431307][ T51] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c07, bcdDevice= 0.00 [ 486.615398][ T51] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.645725][ T51] usb 4-1: config 0 descriptor?? [ 488.334277][ T51] hid (null): unknown global tag 0x3e [ 488.392557][ T51] corsair-psu 0003:1B1C:1C07.0009: unexpected long global item [ 488.403526][T13178] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1458'. [ 488.417762][ T51] corsair-psu 0003:1B1C:1C07.0009: probe with driver corsair-psu failed with error -22 [ 488.540691][ T5864] usb 4-1: USB disconnect, device number 67 [ 488.740112][T13202] can: request_module (can-proto-3) failed. [ 489.263824][ T5864] usb 3-1: new low-speed USB device number 48 using dummy_hcd [ 489.573089][ T5864] usb 3-1: Invalid ep0 maxpacket: 16 [ 489.704485][T13223] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1469'. [ 489.717533][ T29] audit: type=1400 audit(1735378434.690:668): avc: denied { map } for pid=13217 comm="syz.3.1468" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 489.766196][ T5864] usb 3-1: new low-speed USB device number 49 using dummy_hcd [ 489.926544][ T5864] usb 3-1: Invalid ep0 maxpacket: 16 [ 489.926820][ T5864] usb usb3-port1: attempt power cycle [ 490.395083][ T5864] usb 3-1: new low-speed USB device number 50 using dummy_hcd [ 490.418747][ T5864] usb 3-1: Invalid ep0 maxpacket: 16 [ 490.568516][ T5864] usb 3-1: new low-speed USB device number 51 using dummy_hcd [ 491.062172][ T5864] usb 3-1: Invalid ep0 maxpacket: 16 [ 491.084561][ T5864] usb usb3-port1: unable to enumerate USB device [ 491.380543][ T29] audit: type=1400 audit(1735378436.253:669): avc: denied { append } for pid=13250 comm="syz.3.1474" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 491.927179][ T865] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 492.095759][T13269] netlink: 'syz.5.1477': attribute type 10 has an invalid length. [ 492.110631][T13269] : (slave hsr0): The slave device specified does not support setting the MAC address [ 492.135941][T13269] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 492.159231][T13269] : (slave hsr0): Error -22 calling dev_set_mtu [ 492.197111][ T865] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 492.266017][ T865] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 492.300318][ T865] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 492.322872][ T865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.365284][T13248] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 492.381334][ T865] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 492.637159][T13293] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1485'. [ 492.668153][T13293] hsr0: entered promiscuous mode [ 492.690184][T13270] netlink: 1256 bytes leftover after parsing attributes in process `syz.6.1478'. [ 492.706610][T13296] random: crng reseeded on system resumption [ 492.714975][ T29] audit: type=1400 audit(1735378437.497:670): avc: denied { append } for pid=13295 comm="syz.3.1486" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 492.727553][T13270] openvswitch: netlink: Unexpected mask (mask=4, allowed=10048) [ 493.194463][ T29] audit: type=1400 audit(1735378437.918:671): avc: denied { getopt } for pid=13287 comm="syz.2.1483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 493.214384][ C0] vkms_vblank_simulate: vblank timer overrun [ 493.370296][ T29] audit: type=1400 audit(1735378437.918:672): avc: denied { write } for pid=13287 comm="syz.2.1483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 493.484577][ T29] audit: type=1400 audit(1735378437.918:673): avc: denied { nlmsg_write } for pid=13287 comm="syz.2.1483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 493.733543][ T865] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 493.758212][T13317] can: request_module (can-proto-3) failed. [ 493.875695][T13326] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1491'. [ 493.935301][ T865] usb 6-1: config 0 has an invalid interface number: 3 but max is 0 [ 493.992658][ T865] usb 6-1: config 0 has no interface number 0 [ 494.010506][ T51] usb 3-1: new low-speed USB device number 52 using dummy_hcd [ 494.067346][ T865] usb 6-1: config 0 interface 3 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 494.138809][ T865] usb 6-1: config 0 interface 3 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 494.201028][ T865] usb 6-1: config 0 interface 3 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 494.267270][ T51] usb 3-1: Invalid ep0 maxpacket: 16 [ 494.273344][ T865] usb 6-1: config 0 interface 3 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 494.296343][ T865] usb 6-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 494.337069][ T865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.359916][ T865] usb 6-1: config 0 descriptor?? [ 494.376699][ T865] hub 6-1:0.3: bad descriptor, ignoring hub [ 494.388007][ T865] hub 6-1:0.3: probe with driver hub failed with error -5 [ 494.426037][ T865] sierra 6-1:0.3: Sierra USB modem converter detected [ 494.433453][ T51] usb 3-1: new low-speed USB device number 53 using dummy_hcd [ 494.484125][ T5864] usb 5-1: USB disconnect, device number 45 [ 494.604926][ T51] usb 3-1: Invalid ep0 maxpacket: 16 [ 494.626678][ T865] usb 6-1: Sierra USB modem converter now attached to ttyUSB0 [ 494.636818][ T51] usb usb3-port1: attempt power cycle [ 494.646036][T13331] xt_CT: No such helper "syz0" [ 494.661507][ T865] usb 6-1: Sierra USB modem converter now attached to ttyUSB1 [ 494.668539][T13337] netlink: set zone limit has 4 unknown bytes [ 494.845153][T13342] speed is unknown, defaulting to 1000 [ 495.043037][T13352] ebt_among: dst integrity fail: 100 [ 495.136131][ T51] usb 3-1: new low-speed USB device number 54 using dummy_hcd [ 495.164010][ T865] usb 6-1: USB disconnect, device number 12 [ 495.504447][ T51] usb 3-1: Invalid ep0 maxpacket: 16 [ 495.595628][ T865] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 495.628700][ T865] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 495.657162][T13357] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1498'. [ 495.669129][ T865] sierra 6-1:0.3: device disconnected [ 495.741750][ T51] usb 3-1: new low-speed USB device number 55 using dummy_hcd [ 495.764966][ T51] usb 3-1: Invalid ep0 maxpacket: 16 [ 495.774713][ T51] usb usb3-port1: unable to enumerate USB device [ 496.405305][T13376] Cannot find map_set index 0 as target [ 496.654642][T13383] CUSE: info not properly terminated [ 497.762802][ T5904] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 497.877895][T13403] ebt_limit: overflow, try lower: 570423552/2483027968 [ 497.933960][ T5904] usb 5-1: Using ep0 maxpacket: 8 [ 497.942441][ T5904] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 497.951882][ T5904] usb 5-1: config 0 has no interface number 0 [ 498.053197][ T5904] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 498.071606][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.080205][ T5904] usb 5-1: Product: syz [ 498.088717][ T5904] usb 5-1: Manufacturer: syz [ 498.093525][ T5904] usb 5-1: SerialNumber: syz [ 498.100671][ T5904] usb 5-1: config 0 descriptor?? [ 498.106021][ T8] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 498.123886][ T5904] usb 5-1: selecting invalid altsetting 1 [ 498.134238][ T5904] dvb_ttusb_budget: ttusb_init_controller: error [ 498.144478][ T5904] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 498.146453][ T29] audit: type=1400 audit(1735378442.585:674): avc: denied { map } for pid=13404 comm="syz.5.1510" path="socket:[39492]" dev="sockfs" ino=39492 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 498.179418][ T29] audit: type=1400 audit(1735378442.585:675): avc: denied { read accept } for pid=13404 comm="syz.5.1510" path="socket:[39492]" dev="sockfs" ino=39492 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 498.235361][ T5904] DVB: Unable to find symbol stv0299_attach() [ 498.244199][T13418] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1510'. [ 498.272114][ T5904] DVB: Unable to find symbol tda8083_attach() [ 498.279826][ T5904] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 498.288268][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 498.297988][ T8] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 498.318757][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 498.341212][ T8] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 498.358474][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 498.384629][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 498.415212][ T8] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 498.425345][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 498.453968][ T8] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 498.485058][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 498.525634][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 498.551966][ T8] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 498.555417][ T865] usb 5-1: USB disconnect, device number 46 [ 498.574616][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 498.612835][ T8] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 498.629854][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 498.655971][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 498.675700][ T8] usb 4-1: string descriptor 0 read error: -22 [ 498.682221][ T8] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 498.691362][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.710179][ T8] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 498.860508][T13442] 9pnet: Found fid 0 not clunked [ 499.069580][T13452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.100568][T13453] ebt_among: dst integrity fail: 100 [ 499.220008][T13452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.575499][ T865] usb 4-1: USB disconnect, device number 68 [ 499.585117][T13450] usb 4-1: Couldn't submit interrupt_out_urb -19 [ 499.736277][ T29] audit: type=1400 audit(1735378444.073:676): avc: denied { getopt } for pid=13461 comm="syz.4.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 501.697202][T13483] rdma_rxe: rxe_newlink: failed to add lo [ 501.912098][T13483] : renamed from lo [ 501.958333][ T865] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 502.287213][T13492] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 503.625644][ T29] audit: type=1400 audit(1735378447.608:677): avc: denied { shutdown } for pid=13497 comm="syz.5.1522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 503.839524][ T29] audit: type=1400 audit(1735378447.908:678): avc: denied { ioctl } for pid=13510 comm="syz.6.1525" path="socket:[40169]" dev="sockfs" ino=40169 ioctlcmd=0x9421 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 503.990307][T13517] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1525'. [ 506.180402][T13566] rdma_rxe: rxe_newlink: failed to add lo [ 506.711252][T13566] : renamed from lo [ 507.285804][ T8] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 507.484062][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 507.498033][ T8] usb 4-1: config 0 has an invalid interface number: 9 but max is 0 [ 507.534500][ T8] usb 4-1: config 0 has no interface number 0 [ 507.586398][ T8] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 507.614860][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.626356][ T8] usb 4-1: Product: syz [ 507.633352][ T8] usb 4-1: Manufacturer: syz [ 507.638234][ T8] usb 4-1: SerialNumber: syz [ 507.648556][ T8] usb 4-1: config 0 descriptor?? [ 508.881277][ T51] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 509.734912][ T29] audit: type=1400 audit(1735378453.417:679): avc: denied { write } for pid=13581 comm="syz.5.1535" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="unconfined" [ 509.855436][T13593] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1530'. [ 509.881216][T13593] speed is unknown, defaulting to 1000 [ 510.333331][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 510.392752][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 510.527611][T13591] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 510.553444][ T51] usb 5-1: config 0 has an invalid interface number: 3 but max is 0 [ 510.573689][ T51] usb 5-1: config 0 has no interface number 0 [ 510.579872][ T51] usb 5-1: config 0 interface 3 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 510.672181][ T51] usb 5-1: config 0 interface 3 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 510.710890][ T51] usb 5-1: config 0 interface 3 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 510.751611][ T51] usb 5-1: config 0 interface 3 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 510.800626][ T51] usb 5-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 510.869109][ T51] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.933164][ T51] usb 5-1: config 0 descriptor?? [ 510.964330][ T51] usb 5-1: can't set config #0, error -71 [ 510.995036][ T51] usb 5-1: USB disconnect, device number 47 [ 511.026500][T13607] CUSE: info not properly terminated [ 511.202417][ T8] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 511.211341][ T8] gspca_topro: reg_w err -71 [ 511.223362][ T865] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 511.243792][ T8] gspca_topro: Sensor soi763a [ 511.280963][ T8] usb 4-1: USB disconnect, device number 70 [ 511.620929][ T865] usb 3-1: Using ep0 maxpacket: 16 [ 511.766573][ T865] usb 3-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=e8.cf [ 511.810422][ T865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.882241][ T865] usb 3-1: Product: syz [ 511.901444][ T865] usb 3-1: Manufacturer: syz [ 511.906131][ T865] usb 3-1: SerialNumber: syz [ 512.020357][ T865] usb 3-1: config 0 descriptor?? [ 512.068330][ T865] cypress_cy7c63 3-1:0.0: Cypress CY7C63xxx device now attached [ 512.248761][ T5904] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 512.419509][ T5904] usb 6-1: Using ep0 maxpacket: 8 [ 512.438484][ T5904] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 512.507248][ T5904] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 512.519401][ T5904] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 512.535078][ T5904] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 512.647742][T13622] rdma_rxe: rxe_newlink: failed to add lo [ 512.660534][T13622] : renamed from lo [ 513.078122][ T5904] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 513.087331][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.318365][ T5904] usb 6-1: GET_CAPABILITIES returned 0 [ 513.367833][ T5904] usbtmc 6-1:16.0: can't read capabilities [ 513.437939][T13627] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1547'. [ 513.466973][T13627] nbd: must specify a size in bytes for the device [ 513.558314][ C1] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 513.582673][T13616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.644495][T13616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.677406][ T51] usb 6-1: USB disconnect, device number 13 [ 513.780498][ T29] audit: type=1400 audit(1735378457.177:680): avc: denied { listen } for pid=13634 comm="syz.6.1552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 513.800619][ T29] audit: type=1400 audit(1735378457.177:681): avc: denied { accept } for pid=13634 comm="syz.6.1552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 514.058555][ T5904] usb 3-1: USB disconnect, device number 56 [ 514.221264][ T5904] cypress_cy7c63 3-1:0.0: Cypress CY7C63xxx device now disconnected [ 514.450960][ T865] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 514.692215][ T865] usb 5-1: config 0 has an invalid interface number: 3 but max is 0 [ 514.971952][T13645] bond5: entered promiscuous mode [ 514.984530][T13645] bond5: entered allmulticast mode [ 514.992542][T13645] 8021q: adding VLAN 0 to HW filter on device bond5 [ 515.003135][ T865] usb 5-1: config 0 has no interface number 0 [ 515.045981][ T865] usb 5-1: config 0 interface 3 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 515.179408][ T865] usb 5-1: config 0 interface 3 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 515.294716][T13656] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1555'. [ 515.303995][T13656] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1555'. [ 516.237283][ T865] usb 5-1: config 0 interface 3 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 516.276180][ T865] usb 5-1: config 0 interface 3 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 516.676608][ T865] usb 5-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 516.695907][ T865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.717560][ T865] usb 5-1: config 0 descriptor?? [ 516.737771][ T865] hub 5-1:0.3: bad descriptor, ignoring hub [ 516.749263][ T865] hub 5-1:0.3: probe with driver hub failed with error -5 [ 516.757357][ T865] sierra 5-1:0.3: Sierra USB modem converter detected [ 516.937061][ T865] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 517.103452][ T865] usb 5-1: Sierra USB modem converter now attached to ttyUSB1 [ 517.337479][ T865] usb 5-1: USB disconnect, device number 48 [ 517.373165][ T865] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 517.403912][ T865] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 517.448684][ T865] sierra 5-1:0.3: device disconnected [ 518.738655][ T865] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 518.797972][T13700] input: syz1 as /devices/virtual/input/input30 [ 518.931490][ T865] usb 6-1: config 0 has an invalid interface number: 112 but max is 0 [ 518.965279][ T865] usb 6-1: config 0 has no interface number 0 [ 518.968269][T13704] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 519.015315][ T865] usb 6-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 519.093120][ T865] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.097066][T13704] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1570'. [ 519.132067][ T29] audit: type=1400 audit(1735378462.201:682): avc: denied { read } for pid=13709 comm="syz.3.1571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 519.151961][ C0] vkms_vblank_simulate: vblank timer overrun [ 519.388507][ T865] usb 6-1: Product: syz [ 519.426419][ T865] usb 6-1: Manufacturer: syz [ 519.451484][ T865] usb 6-1: SerialNumber: syz [ 519.483405][ T865] usb 6-1: config 0 descriptor?? [ 519.498418][T13719] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1573'. [ 519.544093][T13719] netlink: 'syz.4.1573': attribute type 6 has an invalid length. [ 519.557672][ T865] mvusb_mdio 6-1:0.112: probe with driver mvusb_mdio failed with error -5 [ 519.676930][ T6784] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 520.369144][ T6784] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 520.403785][ T5955] [ 520.406150][ T5955] ============================= [ 520.410971][ T5955] [ BUG: Invalid wait context ] [ 520.415794][ T5955] 6.13.0-rc4-syzkaller-00069-g8379578b11d5 #0 Not tainted [ 520.422875][ T5955] ----------------------------- [ 520.427691][ T5955] udevd/5955 is trying to lock: [ 520.432559][ T5955] ffff8880252d1bd8 (&sighand->siglock){-.-.}-{3:3}, at: __lock_task_sighand+0xc2/0x340 [ 520.442223][ T5955] other info that might help us debug this: [ 520.448093][ T5955] context-{5:5} [ 520.451534][ T5955] 5 locks held by udevd/5955: [ 520.456197][ T5955] #0: ffff888140ad6420 (sb_writers){.+.+}-{0:0}, at: filename_setxattr+0xbc/0x1d0 [ 520.465475][ T5955] #1: ffff8880360bc418 (&sb->s_type->i_mutex_key#4){+.+.}-{4:4}, at: vfs_setxattr+0x123/0x360 [ 520.475797][ T5955] #2: ffff88801c2a8890 (&sbinfo->stat_lock){+.+.}-{2:2}, at: shmem_xattr_handler_set+0x27f/0x3b0 [ 520.486376][ T5955] #3: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x1c2/0x590 [ 520.495735][ T5955] #4: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: __lock_task_sighand+0x3f/0x340 [ 520.505446][ T5955] stack backtrace: [ 520.509136][ T5955] CPU: 0 UID: 0 PID: 5955 Comm: udevd Not tainted 6.13.0-rc4-syzkaller-00069-g8379578b11d5 #0 [ 520.519365][ T5955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 520.529395][ T5955] Call Trace: [ 520.532657][ T5955] [ 520.535574][ T5955] dump_stack_lvl+0x116/0x1f0 [ 520.540260][ T5955] __lock_acquire+0x878/0x3c40 [ 520.545098][ T5955] ? __pfx___lock_acquire+0x10/0x10 [ 520.550270][ T5955] ? __pfx___lock_acquire+0x10/0x10 [ 520.555446][ T5955] lock_acquire.part.0+0x11b/0x380 [ 520.560540][ T5955] ? __lock_task_sighand+0xc2/0x340 [ 520.565722][ T5955] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 520.571346][ T5955] ? rcu_is_watching+0x12/0xc0 [ 520.576092][ T5955] ? trace_lock_acquire+0x14e/0x1f0 [ 520.581278][ T5955] ? trace_lock_acquire+0x14e/0x1f0 [ 520.586459][ T5955] ? __lock_task_sighand+0xc2/0x340 [ 520.591643][ T5955] ? lock_acquire+0x2f/0xb0 [ 520.596127][ T5955] ? __lock_task_sighand+0xc2/0x340 [ 520.601311][ T5955] _raw_spin_lock_irqsave+0x3a/0x60 [ 520.606486][ T5955] ? __lock_task_sighand+0xc2/0x340 [ 520.611658][ T5955] __lock_task_sighand+0xc2/0x340 [ 520.616674][ T5955] group_send_sig_info+0x290/0x300 [ 520.621780][ T5955] ? __pfx_group_send_sig_info+0x10/0x10 [ 520.627501][ T5955] ? __pfx___lock_acquire+0x10/0x10 [ 520.632705][ T5955] ? hlock_class+0x4e/0x130 [ 520.637198][ T5955] ? mark_lock+0xb5/0xc60 [ 520.641509][ T5955] bpf_send_signal_common+0x3d3/0x530 [ 520.646857][ T5955] ? __pfx_bpf_send_signal_common+0x10/0x10 [ 520.652724][ T5955] ? trace_lock_acquire+0x14e/0x1f0 [ 520.657919][ T5955] ? bpf_trace_run2+0x1c2/0x590 [ 520.662757][ T5955] bpf_send_signal+0x1d/0x30 [ 520.667345][ T5955] bpf_prog_631417f49dd64198+0x25/0x48 [ 520.672793][ T5955] bpf_trace_run2+0x231/0x590 [ 520.677463][ T5955] ? __pfx_bpf_trace_run2+0x10/0x10 [ 520.682646][ T5955] __bpf_trace_contention_end+0xca/0x110 [ 520.688265][ T5955] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 520.694489][ T5955] ? hlock_class+0x4e/0x130 [ 520.698997][ T5955] ? __lock_acquire+0x15a9/0x3c40 [ 520.704023][ T5955] trace_contention_end.constprop.0+0xf0/0x170 [ 520.710173][ T5955] __pv_queued_spin_lock_slowpath+0x27e/0xc90 [ 520.716222][ T5955] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 520.722788][ T5955] ? lock_acquire.part.0+0x11b/0x380 [ 520.728051][ T5955] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 520.733662][ T5955] do_raw_spin_lock+0x210/0x2c0 [ 520.738491][ T5955] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 520.743838][ T5955] ? lock_acquire+0x2f/0xb0 [ 520.748318][ T5955] ? shmem_xattr_handler_set+0x27f/0x3b0 [ 520.753925][ T5955] shmem_xattr_handler_set+0x27f/0x3b0 [ 520.759360][ T5955] ? __pfx_shmem_xattr_handler_set+0x10/0x10 [ 520.765317][ T5955] __vfs_setxattr+0x173/0x1e0 [ 520.769970][ T5955] ? __pfx___vfs_setxattr+0x10/0x10 [ 520.775140][ T5955] ? __pfx_make_vfsgid+0x10/0x10 [ 520.780057][ T5955] ? trace_lock_acquire+0x14e/0x1f0 [ 520.785248][ T5955] __vfs_setxattr_noperm+0x127/0x660 [ 520.790516][ T5955] __vfs_setxattr_locked+0x182/0x260 [ 520.795785][ T5955] vfs_setxattr+0x146/0x360 [ 520.800267][ T5955] ? __pfx_lock_release+0x10/0x10 [ 520.805279][ T5955] ? __pfx_vfs_setxattr+0x10/0x10 [ 520.810284][ T5955] ? mnt_get_write_access+0x6a/0x300 [ 520.815558][ T5955] ? mnt_get_write_access+0x6a/0x300 [ 520.820828][ T5955] do_setxattr+0x142/0x170 [ 520.825221][ T5955] filename_setxattr+0x16d/0x1d0 [ 520.830136][ T5955] ? __pfx_filename_setxattr+0x10/0x10 [ 520.835589][ T5955] ? getname_flags.part.0+0x1c5/0x550 [ 520.840941][ T5955] path_setxattrat+0x1e0/0x290 [ 520.845681][ T5955] ? __pfx_path_setxattrat+0x10/0x10 [ 520.850941][ T5955] ? putname+0x13c/0x180 [ 520.855167][ T5955] __x64_sys_lsetxattr+0xc9/0x140 [ 520.860167][ T5955] ? do_syscall_64+0x91/0x250 [ 520.864824][ T5955] ? lockdep_hardirqs_on+0x7c/0x110 [ 520.870548][ T5955] do_syscall_64+0xcd/0x250 [ 520.875041][ T5955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.880921][ T5955] RIP: 0033:0x7f5664f1fc1a [ 520.885314][ T5955] Code: 48 8b 0d 11 12 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 bd 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d de 11 0d 00 f7 d8 64 89 01 48 [ 520.904902][ T5955] RSP: 002b:00007ffe72e83698 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 520.913292][ T5955] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5664f1fc1a [ 520.921256][ T5955] RDX: 000055d2a56cde80 RSI: 00007f5665308638 RDI: 00007ffe72e841c8 [ 520.929248][ T5955] RBP: 000055d2a56cde80 R08: 0000000000000000 R09: 33e0243e42107a09 [ 520.937203][ T5955] R10: 000000000000001b R11: 0000000000000246 R12: 00000000ffffffff [ 520.945153][ T5955] R13: 0000000000000001 R14: 00007ffe72e841c8 R15: 00007ffe72e841d6 [ 520.953109][ T5955] [ 520.956180][ C0] vkms_vblank_simulate: vblank timer overrun [ 520.986224][ T6784] usb 3-1: config 0 has no interface number 0 [ 520.992381][ T6784] usb 3-1: config 0 interface 3 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 521.002094][ T6784] usb 3-1: config 0 interface 3 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 521.013173][ T6784] usb 3-1: config 0 interface 3 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 521.024056][ T6784] usb 3-1: config 0 interface 3 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 521.034882][ T6784] usb 3-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 521.044196][ T6784] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.084865][ T6784] usb 3-1: config 0 descriptor?? [ 521.103190][ T6784] hub 3-1:0.3: bad descriptor, ignoring hub [ 521.121725][ T6784] hub 3-1:0.3: probe with driver hub failed with error -5 [ 521.159916][ T6784] sierra 3-1:0.3: Sierra USB modem converter detected [ 521.362647][ T6784] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 521.386143][ T6784] usb 3-1: Sierra USB modem converter now attached to ttyUSB1 [ 521.725940][ T5864] usb 6-1: USB disconnect, device number 14 [ 521.742932][ T6784] usb 3-1: USB disconnect, device number 57 [ 521.766653][ T6784] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 521.781567][ T6784] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 521.793143][ T6784] sierra 3-1:0.3: device disconnected