last executing test programs: 14m46.625608547s ago: executing program 3 (id=483): openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) r1 = openat$cgroup_ro(r0, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) pipe2(&(0x7f0000000600), 0x4000) socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) wait4(r4, 0x0, 0x20000000, &(0x7f0000000240)) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES8, @ANYRES16=r1, @ANYRES16=r5], 0x0) 14m45.237468105s ago: executing program 1 (id=487): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r1, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 14m45.124332194s ago: executing program 1 (id=489): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x1}], 0x1, 0x0, 0x0, 0x0) write$P9_RSTATu(r0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x458) 14m45.019262691s ago: executing program 3 (id=490): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @multicast}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 14m44.854392863s ago: executing program 3 (id=491): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r1, &(0x7f0000002fc0)={0x2020}, 0x209) 14m44.813542878s ago: executing program 3 (id=492): sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)='GA', 0x2}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r0, 0x0, 0x0) 14m44.615109975s ago: executing program 3 (id=493): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = getpid() mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, 0x0, 0x1000008, 0x20010, r2, 0x0) r4 = syz_pidfd_open(r3, 0x0) prlimit64(r3, 0xc, &(0x7f0000000140)={0x40000000000000, 0x88}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0xc9ca]}, 0x8) fcntl$setownex(r6, 0xf, 0x0) faccessat2(r6, &(0x7f0000000100)='.\x00', 0x20, 0x600) setpgid(0x0, r5) mount$9p_fd(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000240), 0x10000, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c77660600000000e1ffff06d04b255c8e0debc8e3efa49c8ffc7327c549849b5b690a5330", @ANYRESHEX=r4, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) 14m44.266306107s ago: executing program 3 (id=494): socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x3) r6 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x7, @none, 0x0, 0x2}, 0xfffffffffffffd65) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, 0x0) 14m44.13022432s ago: executing program 1 (id=495): openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0x109000, 0x0) close(0x3) syz_emit_ethernet(0x7e, 0x0, 0x0) getpid() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}}, 0x14}}, 0x20040000) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8, &(0x7f0000000100)={[{0x4, 0x4e00, "0c40dec2"}]}) socket$nl_route(0x10, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) fchdir(r2) r3 = openat(r2, &(0x7f0000000780)='./file0\x00', 0x0, 0x10) getdents(r3, &(0x7f0000000980)=""/143, 0x8f) r4 = gettid() r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r5, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000000)='\x00', 0x1) write$rfkill(r5, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) 14m42.194568217s ago: executing program 1 (id=503): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101", @ANYRESHEX=0x0, @ANYRES64=r0], 0x0) 14m40.884559876s ago: executing program 1 (id=509): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = getpid() mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, 0x0, 0x1000008, 0x20010, r2, 0x0) r4 = syz_pidfd_open(r3, 0x0) prlimit64(r3, 0xc, &(0x7f0000000140)={0x40000000000000, 0x88}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0xc9ca]}, 0x8) fcntl$setownex(r6, 0xf, 0x0) faccessat2(r6, &(0x7f0000000100)='.\x00', 0x20, 0x600) setpgid(0x0, r5) mount$9p_fd(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000240), 0x10000, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c77660600000000e1ffff06d04b255c8e0debc8e3efa49c8ffc7327c549849b5b690a5330", @ANYRESHEX=r4, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) 14m40.827589552s ago: executing program 1 (id=510): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, 0x0, 0x0, 0x8008801) sendmmsg$inet6(r0, &(0x7f0000019880)=[{{0x0, 0x0, &(0x7f0000019740)=[{&(0x7f0000019940)='i', 0x1}], 0x1}}], 0x1, 0x2604082c) 14m28.958463014s ago: executing program 32 (id=494): socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x3) r6 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x7, @none, 0x0, 0x2}, 0xfffffffffffffd65) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, 0x0) 14m25.766436446s ago: executing program 33 (id=510): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, 0x0, 0x0, 0x8008801) sendmmsg$inet6(r0, &(0x7f0000019880)=[{{0x0, 0x0, &(0x7f0000019740)=[{&(0x7f0000019940)='i', 0x1}], 0x1}}], 0x1, 0x2604082c) 7m32.78156743s ago: executing program 0 (id=2615): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x34, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x488c0}, 0x4c044) 7m31.583284209s ago: executing program 0 (id=2621): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x1, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='trusted.overlay.upper\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x36, &(0x7f0000000280)=[{0x2, 0xa6, 0x2, 0x3}, {0x2, 0x8, 0x8, 0xfffc}, {0xaee, 0x2, 0xac, 0x1000}, {0x40, 0xaf, 0x5, 0x2}, {0x6, 0x80, 0x0, 0x2}, {0x0, 0x3, 0x5, 0x9}]}, 0x10) 7m30.503867688s ago: executing program 0 (id=2624): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640), 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffff", @ANYBLOB="0000000000000000b705000000000000850000002d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES32], 0x30}}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7m29.143394232s ago: executing program 0 (id=2627): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0x0, r2, r3, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x1e1) write$tcp_congestion(r4, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r4, r0) 7m28.229221611s ago: executing program 0 (id=2630): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = getpid() mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, 0x0, 0x1000008, 0x20010, r2, 0x0) r4 = syz_pidfd_open(r3, 0x0) prlimit64(r3, 0xc, &(0x7f0000000140)={0x40000000000000, 0x88}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0xc9ca]}, 0x8) fcntl$setownex(r6, 0xf, 0x0) faccessat2(r6, &(0x7f0000000100)='.\x00', 0x20, 0x600) setpgid(r5, 0x0) setpgid(0x0, r5) mount$9p_fd(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000240), 0x10000, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c77660600000000e1ffff06d04b255c8e0debc8e3efa49c8ffc7327c549849b5b690a5330", @ANYRESHEX=r4]) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, 0x0, &(0x7f0000000180), 0x48004, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000000100bd97d0900ba242b5222838900004b9905c8548a7e822931c858725b7461419c6f56dd8d605c21120683bf71e814beb178a53846734b1681c4f720a964c46de1b57d7d7860bf95e9483415704678e24cbb01fc12ae3f5bbfc79b98d93a4f9935", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f00000000c0)='./file0/file0\x00', r7}, 0x18) mlockall(0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000440)='./file0/file0\x00'}, 0x14) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) r8 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x800000000000001) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000340)=ANY=[@ANYBLOB="05000000000000e672000040"]) 7m27.865749295s ago: executing program 0 (id=2634): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x1, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='trusted.overlay.upper\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100), 0x6) 7m12.834430588s ago: executing program 34 (id=2634): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x1, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='trusted.overlay.upper\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100), 0x6) 3m27.595636053s ago: executing program 2 (id=3397): openat$tun(0xffffffffffffff9c, 0x0, 0x10800, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) r1 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r1, 0x0, 0x0) sendmsg$can_bcm(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m27.369573235s ago: executing program 2 (id=3399): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000002080)=0x64, 0x23b) 3m27.162660045s ago: executing program 2 (id=3403): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8101, 0x0, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x3}, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) 3m24.409387749s ago: executing program 2 (id=3412): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x80000, 0x10}, 0x18) mkdirat(r0, &(0x7f0000000100)='./file0/file0\x00', 0x80) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000f00)={{0x12, 0x1, 0x0, 0x7c, 0xe7, 0xc8, 0x10, 0x4d8, 0xa30, 0xce47, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xd, 0xe6, 0x7a, 0x0, [], [{{0x9, 0x5, 0x4, 0x2}}]}}]}}]}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0xc00000000000018, &(0x7f00000008c0)=ANY=[@ANYBLOB='\r\x00\x00\x00', @ANYRES32, @ANYBLOB="1e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001100"/28], 0x48) r3 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x5, {0x7ffd, 0x1000, 0x4, 0x6}}) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet(r4, &(0x7f0000000880)=[{{&(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, 0x0}}], 0x1, 0x20048014) syz_emit_ethernet(0xf6, &(0x7f0000000980)=ANY=[], 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x9, 0x7, 0x80000000, 0x34524742, [0x1000, 0x7], [0x9, 0xfff], 0x108}}) 3m19.362477128s ago: executing program 2 (id=3428): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getresuid(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x5e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newsa={0xf0, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}}, 0xf0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xdp_devmap_xmit\x00'}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 3m16.275588724s ago: executing program 2 (id=3436): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x7}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x2404c8c0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000) 3m0.792619666s ago: executing program 35 (id=3436): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x7}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x2404c8c0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000) 15.735646761s ago: executing program 5 (id=4019): openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0xa8202, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9, 0x40) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0xe97, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x180, 0x0, 0x200, 0x0, 0x0, 0x250, 0x2e8, 0x2e8, 0x250, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@ipv6={@local, @empty, [], [], 'ip6_vti0\x00', 'veth0\x00', {}, {}, 0x21}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) 10.644353776s ago: executing program 5 (id=4037): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x0) syz_emit_ethernet(0x43a, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = userfaultfd(0x801) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000180), 0xc06620, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) 8.269609868s ago: executing program 8 (id=4050): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delqdisc={0x24, 0x25, 0x2, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x1}, {0xfff1, 0xd}, {0x0, 0x1}}}, 0x24}}, 0x20008050) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000003800010700e9ffffffffffff07"], 0x14}, 0x1, 0x0, 0x0, 0x48011}, 0x4040080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 8.255225823s ago: executing program 4 (id=4051): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb000000}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 7.265540921s ago: executing program 8 (id=4053): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000000)={0x7, 0x1, 0x8, 0xff, 0x881}) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x1400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x81082, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000300)={0x2}) setgroups(0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB], 0x24}], 0x1}, 0x0) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000440)='.\x00', 0x12000021) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xc, 0x3, 0x0, &(0x7f0000000480)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r6, r6, &(0x7f0000000000)=0x7, 0x4) 7.113578924s ago: executing program 4 (id=4055): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000001400)={0x83, 0xfffffffd, 0xffffffff}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000004a00010000000000000000000a000000", @ANYBLOB="0000007ab5"], 0x24}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) 7.0498158s ago: executing program 7 (id=4056): openat$ptmx(0xffffffffffffff9c, 0x0, 0x20000, 0x0) gettid() r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = getuid() quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x86) mount$fuse(0x0, 0x0, 0x0, 0x1930bd, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, 0x0) setpgid(0x0, r5) statfs(&(0x7f0000001140)='./file0\x00', 0x0) 6.060863761s ago: executing program 8 (id=4057): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000001c0)=0x3) 6.049892826s ago: executing program 6 (id=4058): setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x22080, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000080)=ANY=[]) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0xc048aeca, &(0x7f0000000280)) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x10, 0x4, 0x3, 0xf}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f00000001c0), 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) 5.116071527s ago: executing program 8 (id=4059): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') read$dsp(r2, &(0x7f0000001a00)=""/4107, 0x100b) 4.947579217s ago: executing program 6 (id=4060): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x4, 0x22a02) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r2, r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000880)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semop(0x0, &(0x7f0000000340)=[{0x2, 0x2, 0x1000}], 0x1f4) 4.459701882s ago: executing program 5 (id=4061): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x15, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x50) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000380)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x8, 0x17, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [@printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x76}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0}, 0x94) 3.485400497s ago: executing program 6 (id=4062): ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x7) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000100)={{0x100, 0x9, 0xe, 0x1}, 'syz1\x00', 0x2}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 3.410726306s ago: executing program 5 (id=4063): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988ca", 0xe}], 0x1) 3.376104899s ago: executing program 6 (id=4064): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000700000035da084f"], 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001380)={{0x12, 0x1, 0xe38693bc18896dfd, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x2, 0xd0, 0x1, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x7, 0x1, 0x2, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x7bf, 0x6, 0x6, 0x1}}}}}]}}]}}, &(0x7f00000018c0)={0x0, 0x0, 0x5, &(0x7f0000001400)={0x5, 0xf, 0x5}}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000300)={0x7, 0xeeee0000, 0x0, r3}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x8000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x2000, 0x1}) ioctl$KVM_RUN(r5, 0xae80, 0x0) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)}, 0x1f00) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x54, r7, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'ip6gretap0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "21375f872dac0c3fedd41365a3e631562a2e1afb57c398a3"}]]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x4) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x10}, 0x10) 3.34080152s ago: executing program 8 (id=4065): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}) 3.244816206s ago: executing program 5 (id=4066): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000040)={0x18, r1, 0xd2, 0x0, 0x0}) 3.244424706s ago: executing program 4 (id=4067): syz_open_dev$vim2m(0x0, 0xfffffffffffffffe, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x23, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, &(0x7f0000000740)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) setpriority(0x0, 0x1, 0xa7a8) io_setup(0x3f, &(0x7f0000000140)=0x0) r6 = timerfd_create(0x0, 0x0) io_submit(r5, 0x1, &(0x7f0000000500)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f00000002c0)={'veth1_to_batadv\x00', {0x2, 0x4e21, @broadcast}}) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000200), 0x10c820, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) pwritev(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000300)="e7", 0x1}], 0x1, 0x100, 0xf3) write$UHID_INPUT(r8, &(0x7f0000001040)={0xc, {"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", 0xd0}}, 0x1006) 3.243749944s ago: executing program 7 (id=4068): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x3}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket(0x28, 0x5, 0x0) socket(0x10, 0x802, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x40000000000001}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000040)={0x2, 0x0, 0x1, 0x0, 0x0, [{{r3}, 0x1}]}) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)) 2.131674775s ago: executing program 8 (id=4069): openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0xa8202, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9, 0x40) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0xe97, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x180, 0x0, 0x200, 0x0, 0x0, 0x250, 0x2e8, 0x2e8, 0x250, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@ipv6={@local, @empty, [], [], 'ip6_vti0\x00', 'veth0\x00', {}, {}, 0x21}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) 1.896496675s ago: executing program 5 (id=4070): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$inet6(0xa, 0x1, 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x5, &(0x7f0000000280)=[{0x2, 0xa6, 0x2, 0x3}, {0xaee, 0x2, 0xac, 0x1000}, {0x40, 0xaf, 0x5, 0x2}, {0x6, 0x80, 0x0, 0x2}, {0x0, 0x3, 0x5, 0x9}]}, 0x10) write$binfmt_misc(r0, &(0x7f0000000100), 0x6) 1.432210822s ago: executing program 7 (id=4071): syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040282f4322acb7101aaaaaa1e3f66602e39800fdd840bbec951b29064"], 0x12) fallocate(0xffffffffffffffff, 0x10, 0x0, 0xbc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) close_range(r1, r1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) clock_adjtime(0x0, &(0x7f0000000380)={0x3ff, 0x3, 0x4100, 0xd, 0x0, 0x3, 0x400000000, 0x800000000006, 0x0, 0x100, 0x3, 0x0, 0x7, 0x0, 0x9f, 0x2, 0x0, 0x0, 0x300000000000, 0x9, 0x8001, 0x3, 0x0, 0x3, 0x0, 0xe}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000240)={0x20, 0x30, 0xf0, 0x640, 0x0, 0x1f, 0x32, 0x0, {0xfffffffe}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x200}, {}, 0x0, 0x40, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000600)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) iopl(0x5) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x14) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x19) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) symlink(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f00000002c0)='.\x02\x00') r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000700)={{0x1, 0x0, 0x0, 0x0, 0x0, 0xac, 0x9}, 0x4, 0x2, 0xd56, 0x1, 0x0, r4, 0x26}) ptrace(0x10, r4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r4, 0x101, 0x0) 1.300861399s ago: executing program 4 (id=4072): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6}]}, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x301, 0x0, 0x1000000, {0x0, 0x0, 0x0, r3, {0xfff2}}}, 0x24}}, 0x0) 353.605955ms ago: executing program 7 (id=4073): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f95"]) 258.478295ms ago: executing program 6 (id=4074): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) lsm_set_self_attr(0x66, 0x0, 0x20, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x13, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 248.956472ms ago: executing program 4 (id=4075): r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x7) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x100, 0x9, 0xe, 0x1}, 'syz1\x00', 0x2}) ioctl$UI_DEV_CREATE(r0, 0x5501) 145.368262ms ago: executing program 7 (id=4076): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r0, 0x0, 0x0) 117.322837ms ago: executing program 4 (id=4077): r0 = socket$inet(0x2b, 0x801, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000001c0)={'broute\x00', 0x0, 0x4, 0x0, [0xffffffff, 0x2, 0x5, 0x0, 0x92, 0x1e], 0x0, 0x0, 0x0}, &(0x7f0000000040)=0x78) 101.830658ms ago: executing program 6 (id=4078): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) 0s ago: executing program 7 (id=4079): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xae}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) rseq(0x0, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) clock_settime(0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) rseq(&(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x1000, 0x100000000, 0x859}, 0x2}, 0x20, 0x0, 0x0) ioperm(0x0, 0x6, 0x2da3b9f3) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) kernel console output (not intermixed with test programs): ][T14321] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.776271][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.783444][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 754.794864][T14321] usb 7-1: Product: syz [ 754.823384][T16020] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.830484][T16020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 754.841596][T14321] usb 7-1: Manufacturer: syz [ 754.846234][T14321] usb 7-1: SerialNumber: syz [ 754.931767][ T3690] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 754.973089][T14321] usb 7-1: config 0 descriptor?? [ 754.987883][T14321] ch341 7-1:0.0: ch341-uart converter detected [ 755.186020][ T3690] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 755.277917][ T3690] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.282090][T14321] usb 7-1: failed to receive control message: -121 [ 755.341137][ T3690] usb 5-1: Product: syz [ 755.352299][ T3690] usb 5-1: Manufacturer: syz [ 755.370893][T14321] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 755.385846][ T3690] usb 5-1: SerialNumber: syz [ 755.485119][ T3690] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 755.522800][ T5929] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 755.917890][T17452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 756.084701][T17452] veth0_vlan: entered promiscuous mode [ 756.092374][T17669] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 756.099369][T17452] veth1_vlan: entered promiscuous mode [ 756.099392][T17669] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 756.179013][T17452] veth0_macvtap: entered promiscuous mode [ 756.212640][T17452] veth1_macvtap: entered promiscuous mode [ 756.221704][T14321] usb 5-1: USB disconnect, device number 43 [ 756.258587][T17452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 756.294443][T17452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 756.329382][T17452] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.349277][T17452] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.375620][T17452] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.393790][T17452] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.605968][ T5929] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 756.748655][ T5929] ath9k_htc: Failed to initialize the device [ 756.768866][T16020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 756.817808][T16020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 757.286280][T14321] usb 5-1: ath9k_htc: USB layer deinitialized [ 757.306058][ T5872] usb 7-1: USB disconnect, device number 99 [ 757.325149][ T5872] ch341 7-1:0.0: device disconnected [ 757.400286][ T6258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 757.446930][ T6258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 758.115781][T17747] syzkaller0: entered promiscuous mode [ 758.123566][T17747] syzkaller0: entered allmulticast mode [ 758.325575][T17752] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3137'. [ 758.538849][T17759] input: syz0 as /devices/virtual/input/input56 [ 758.691072][T17763] binder: BINDER_SET_CONTEXT_MGR already set [ 758.697586][T17763] binder: 17762:17763 ioctl 4018620d 200000000040 returned -16 [ 759.801763][ T5871] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 759.997531][ T5871] usb 3-1: device descriptor read/64, error -71 [ 760.241417][ T5871] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 760.371351][ T5871] usb 3-1: device descriptor read/64, error -71 [ 760.523068][ T5871] usb usb3-port1: attempt power cycle [ 760.851320][ T5929] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 760.901385][ T5871] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 761.012871][ T5871] usb 3-1: device descriptor read/8, error -71 [ 761.102998][ T5929] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 761.118600][ T5929] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 761.128058][ T5929] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 761.139321][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.195851][ T5929] usb 5-1: config 0 descriptor?? [ 761.210506][ T5929] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 761.220267][ T5929] dvb-usb: bulk message failed: -22 (3/0) [ 761.287578][ T5929] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 761.303961][ T5929] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 761.318850][ T5929] usb 5-1: media controller created [ 761.331520][ T5871] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 761.345715][ T5929] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 761.367583][ T5871] usb 3-1: device descriptor read/8, error -71 [ 761.389965][ T5929] dvb-usb: bulk message failed: -22 (6/0) [ 761.396628][ T5929] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 761.551088][ T5871] usb usb3-port1: unable to enumerate USB device [ 761.561797][ T5929] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input57 [ 761.585219][ T5929] dvb-usb: schedule remote query interval to 150 msecs. [ 761.598748][ T5929] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 761.633274][T17790] dvb-usb: bulk message failed: -22 (2/0) [ 761.767335][ T5929] dvb-usb: bulk message failed: -22 (1/0) [ 761.782280][ T5929] dvb-usb: error while querying for an remote control event. [ 762.009643][T17800] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3149'. [ 762.042282][ T5929] dvb-usb: bulk message failed: -22 (1/0) [ 762.048245][ T5929] dvb-usb: error while querying for an remote control event. [ 762.222922][ T5929] dvb-usb: bulk message failed: -22 (1/0) [ 762.228679][ T5929] dvb-usb: error while querying for an remote control event. [ 762.402342][ T5929] dvb-usb: bulk message failed: -22 (1/0) [ 762.408923][ T5929] dvb-usb: error while querying for an remote control event. [ 762.575727][ T5929] dvb-usb: bulk message failed: -22 (1/0) [ 762.581571][ T5929] dvb-usb: error while querying for an remote control event. [ 762.741393][ T5929] dvb-usb: bulk message failed: -22 (1/0) [ 762.748782][ T5929] dvb-usb: error while querying for an remote control event. [ 762.985639][ T5929] dvb-usb: bulk message failed: -22 (1/0) [ 762.991816][ T5929] dvb-usb: error while querying for an remote control event. [ 763.154068][ T5871] dvb-usb: bulk message failed: -22 (1/0) [ 763.160026][ T5871] dvb-usb: error while querying for an remote control event. [ 763.291801][ T5929] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 763.348516][ T5871] dvb-usb: bulk message failed: -22 (1/0) [ 763.354390][ T5871] dvb-usb: error while querying for an remote control event. [ 763.384983][T12969] usb 5-1: USB disconnect, device number 44 [ 763.448146][T12969] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 763.471505][ T5929] usb 3-1: Using ep0 maxpacket: 16 [ 763.483879][ T5929] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 763.502989][ T5929] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 763.537125][ T5929] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 763.747704][ T5929] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 763.819844][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.838353][ T5929] usb 3-1: Product: syz [ 763.844684][ T5929] usb 3-1: Manufacturer: syz [ 763.859448][ T5929] usb 3-1: SerialNumber: syz [ 764.105391][ T5929] usb 3-1: 0:2 : does not exist [ 764.123960][ T5929] usb 3-1: USB disconnect, device number 125 [ 766.325504][T17837] can0: slcan on ttyS3. [ 767.061351][ T10] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 767.315663][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 767.323356][ T10] usb 7-1: no configurations [ 767.327974][ T10] usb 7-1: can't read configurations, error -22 [ 767.504845][ T10] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 768.611491][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 768.634378][ T10] usb 7-1: no configurations [ 768.639014][ T10] usb 7-1: can't read configurations, error -22 [ 768.656492][ T10] usb usb7-port1: attempt power cycle [ 768.962398][ T5872] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 769.122887][ T10] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 769.151287][ T5872] usb 5-1: Using ep0 maxpacket: 16 [ 769.165879][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 769.197931][ T5872] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 769.208739][ T10] usb 7-1: no configurations [ 769.215143][ T10] usb 7-1: can't read configurations, error -22 [ 769.225736][ T5872] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 769.241717][ T5872] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 769.292662][ T5872] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 769.368798][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.377195][ T10] usb 7-1: new high-speed USB device number 103 using dummy_hcd [ 769.479949][ T5872] usb 5-1: Product: syz [ 769.537906][ T5872] usb 5-1: Manufacturer: syz [ 769.612490][ T5872] usb 5-1: SerialNumber: syz [ 769.626120][ T10] usb 7-1: device descriptor read/8, error -71 [ 769.722626][T17837] can0 (unregistered): slcan off ttyS3. [ 769.741585][ T10] usb usb7-port1: unable to enumerate USB device [ 769.899915][ T5872] usb 5-1: 0:2 : does not exist [ 769.967719][ T5872] usb 5-1: USB disconnect, device number 45 [ 770.475430][T17908] input: syz0 as /devices/virtual/input/input58 [ 772.771584][ T30] audit: type=1400 audit(1751467597.595:5413): avc: denied { read write } for pid=17921 comm="syz.6.3176" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 772.898315][ T30] audit: type=1400 audit(1751467597.595:5414): avc: denied { open } for pid=17921 comm="syz.6.3176" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 773.551672][T17944] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3181'. [ 774.621307][ T10] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 775.031308][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 775.059247][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 775.088136][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.121076][T17982] input: syz0 as /devices/virtual/input/input59 [ 775.211355][ T10] usb 3-1: Product: syz [ 775.215561][ T10] usb 3-1: Manufacturer: syz [ 775.247477][ T10] usb 3-1: SerialNumber: syz [ 775.391188][ T10] usb 3-1: config 0 descriptor?? [ 775.617809][ T10] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 776.401699][ T10] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 776.873463][ T10] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 777.131799][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 777.217282][ T10] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 777.317398][ T10] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 777.329577][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 777.339832][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 777.352954][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 777.365225][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 777.380590][ T10] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 777.382120][T12969] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 777.391492][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.419990][ T10] usb 5-1: config 0 descriptor?? [ 777.732999][ T5872] usb 3-1: USB disconnect, device number 126 [ 778.191492][ T10] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 46 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 778.322575][T18017] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3199'. [ 778.353300][T18017] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3199'. [ 778.416295][T12969] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 778.427741][T12969] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.439360][T12969] usb 7-1: Product: syz [ 778.443681][T12969] usb 7-1: Manufacturer: syz [ 778.448372][T12969] usb 7-1: SerialNumber: syz [ 778.464082][T12969] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 778.479165][ T5929] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 778.654271][T18033] input: syz0 as /devices/virtual/input/input60 [ 778.866123][ T5872] usb 5-1: USB disconnect, device number 46 [ 778.875128][ T5872] usblp0: removed [ 778.939314][ T5871] usb 7-1: USB disconnect, device number 104 [ 779.255021][T18039] syz.7.3205 (18039): drop_caches: 2 [ 779.260567][T18039] syz.7.3205 (18039): drop_caches: 2 [ 779.381336][ T5872] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 780.223906][ T5872] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 780.234182][ T5872] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 780.243443][ T5872] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 780.252785][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.262957][ T5872] usb 5-1: config 0 descriptor?? [ 780.273312][ T5872] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 780.279912][ T5872] dvb-usb: bulk message failed: -22 (3/0) [ 780.287898][ T5872] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 780.296787][ T5872] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 780.304411][ T5872] usb 5-1: media controller created [ 780.320252][ T5872] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 780.338878][ T5929] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 780.343229][ T5872] dvb-usb: bulk message failed: -22 (6/0) [ 780.386562][ T5929] ath9k_htc: Failed to initialize the device [ 780.428260][ T5871] usb 7-1: ath9k_htc: USB layer deinitialized [ 780.435652][ T5872] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 780.474380][ T5872] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input61 [ 780.488303][T18037] dvb-usb: bulk message failed: -22 (2/0) [ 780.699298][T18055] netlink: 'syz.5.3210': attribute type 10 has an invalid length. [ 780.710442][T18055] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 781.251324][T12969] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 781.455572][ T5872] dvb-usb: schedule remote query interval to 150 msecs. [ 781.465527][ T5872] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 781.621356][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 781.627133][ T5872] dvb-usb: error while querying for an remote control event. [ 781.665138][T12969] usb 3-1: Using ep0 maxpacket: 16 [ 781.679669][T12969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 781.698638][T12969] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 781.733326][T12969] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 781.770641][T18063] overlayfs: missing 'lowerdir' [ 781.794975][T12969] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 781.804718][T12969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.815388][T12969] usb 3-1: Product: syz [ 781.821400][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 781.831670][T12969] usb 3-1: Manufacturer: syz [ 781.833463][ T5872] dvb-usb: error while querying for an remote control event. [ 781.843705][T12969] usb 3-1: SerialNumber: syz [ 781.857860][T12969] usb 3-1: config 0 descriptor?? [ 781.879525][T18043] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 781.941645][T12969] mcba_usb 3-1:0.0 can0: failed tx_urb -90 [ 781.963464][T12969] mcba_usb 3-1:0.0 can0: Failed to send cmd (169) [ 781.983422][T12969] mcba_usb 3-1:0.0 can0: failed tx_urb -90 [ 782.002758][T12969] mcba_usb 3-1:0.0 can0: Failed to send cmd (169) [ 782.022344][T12969] mcba_usb 3-1:0.0: Microchip CAN BUS Analyzer connected [ 782.071429][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 782.079403][ T5872] dvb-usb: error while querying for an remote control event. [ 782.099072][T14321] usb 3-1: USB disconnect, device number 127 [ 782.110233][T14321] mcba_usb 3-1:0.0 can0: device disconnected [ 782.281606][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 782.346469][ T5872] dvb-usb: error while querying for an remote control event. [ 782.601988][T14321] dvb-usb: bulk message failed: -22 (1/0) [ 782.607763][T14321] dvb-usb: error while querying for an remote control event. [ 782.843002][T14321] dvb-usb: bulk message failed: -22 (1/0) [ 782.849593][T14321] dvb-usb: error while querying for an remote control event. [ 782.997784][T18081] syz.2.3215 (18081): drop_caches: 2 [ 783.003374][T18081] syz.2.3215 (18081): drop_caches: 2 [ 783.022157][ T5871] usb 5-1: USB disconnect, device number 47 [ 783.154970][ T5871] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 783.606040][T18102] syzkaller0: entered allmulticast mode [ 783.783344][ T5871] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 784.841216][T18122] netlink: 'syz.4.3221': attribute type 10 has an invalid length. [ 785.215700][ T5871] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 785.225155][T18127] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3222'. [ 785.235084][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.260910][ T5871] usb 6-1: Product: syz [ 785.267749][ T5871] usb 6-1: Manufacturer: syz [ 785.275078][ T5871] usb 6-1: SerialNumber: syz [ 785.424736][ T5871] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 785.454882][T12969] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 785.537832][ T30] audit: type=1400 audit(1751467610.715:5415): avc: denied { name_connect } for pid=18129 comm="syz.6.3223" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 785.963748][ T5871] usb 6-1: USB disconnect, device number 119 [ 786.521885][T12969] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 786.536110][T12969] ath9k_htc: Failed to initialize the device [ 786.543100][ T5871] usb 6-1: ath9k_htc: USB layer deinitialized [ 789.430331][T18179] can0: slcan on ttyS3. [ 789.825396][T18192] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3239'. [ 789.825778][T14321] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 790.281342][T14321] usb 5-1: Using ep0 maxpacket: 16 [ 790.294006][T14321] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 790.327323][T18203] netlink: 'syz.5.3240': attribute type 10 has an invalid length. [ 790.363506][T14321] usb 5-1: can't read configurations, error -61 [ 790.681823][T14321] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 790.982943][T18214] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3242'. [ 790.991468][T14321] usb 5-1: Using ep0 maxpacket: 16 [ 790.999755][T18214] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3242'. [ 791.006479][T14321] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 791.517443][T14321] usb 5-1: can't read configurations, error -61 [ 791.524664][T14321] usb usb5-port1: attempt power cycle [ 791.871381][T14321] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 791.955377][T14321] usb 5-1: Using ep0 maxpacket: 16 [ 792.296356][T18231] overlayfs: missing 'lowerdir' [ 792.608602][T14321] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 792.725091][T14321] usb 5-1: can't read configurations, error -71 [ 792.740330][T18240] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 792.914801][T18179] can0 (unregistered): slcan off ttyS3. [ 793.559880][T18254] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3254'. [ 793.599957][T18256] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3253'. [ 794.341620][T18274] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3257'. [ 794.446790][T18274] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3257'. [ 796.319901][T18311] can0: slcan on ttyS3. [ 796.347882][T18313] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3264'. [ 796.416608][T18313] vlan2: entered allmulticast mode [ 796.438412][T18313] veth1: entered allmulticast mode [ 796.450845][T18313] bridge1: port 1(vlan2) entered blocking state [ 796.459997][T18313] bridge1: port 1(vlan2) entered disabled state [ 796.468909][T18313] vlan2: entered promiscuous mode [ 796.477477][T18313] veth1: entered promiscuous mode [ 796.690566][T18321] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3267'. [ 796.719366][ T5871] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 796.833268][T18328] syz.2.3269 (18328): drop_caches: 2 [ 796.842651][T18328] syz.2.3269 (18328): drop_caches: 2 [ 796.901411][ T5871] usb 7-1: Using ep0 maxpacket: 16 [ 796.913151][ T5871] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 796.920997][ T5871] usb 7-1: can't read configurations, error -61 [ 797.091356][ T5871] usb 7-1: new high-speed USB device number 106 using dummy_hcd [ 797.861934][T18337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3273'. [ 797.921528][T18337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3273'. [ 797.935670][ T30] audit: type=1400 audit(1751467623.075:5416): avc: denied { write } for pid=18334 comm="syz.5.3272" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 797.981398][ T5871] usb 7-1: Using ep0 maxpacket: 16 [ 798.078668][ T5871] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 798.161278][ T5871] usb 7-1: can't read configurations, error -61 [ 798.215028][ T5871] usb usb7-port1: attempt power cycle [ 798.611613][ T5871] usb 7-1: new high-speed USB device number 107 using dummy_hcd [ 798.708560][ T5871] usb 7-1: Using ep0 maxpacket: 16 [ 798.782009][ T5871] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 798.853690][ T5871] usb 7-1: can't read configurations, error -61 [ 799.091466][ T5871] usb 7-1: new high-speed USB device number 108 using dummy_hcd [ 799.111980][ T5871] usb 7-1: Using ep0 maxpacket: 16 [ 799.181685][ T5871] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 799.208226][ T5871] usb 7-1: can't read configurations, error -61 [ 799.237238][ T5871] usb usb7-port1: unable to enumerate USB device [ 799.426012][T18311] can0 (unregistered): slcan off ttyS3. [ 799.491480][T12969] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 800.195775][T12969] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 800.205951][T12969] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.214150][T12969] usb 5-1: Product: syz [ 800.218464][T12969] usb 5-1: Manufacturer: syz [ 800.225701][T12969] usb 5-1: SerialNumber: syz [ 800.241341][T14321] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 800.249237][T12969] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 800.267831][ T5871] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 800.656829][T14321] usb 6-1: device descriptor read/64, error -71 [ 801.022645][T12969] usb 5-1: USB disconnect, device number 52 [ 801.104400][T14321] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 801.321374][ T5871] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 801.347713][ T30] audit: type=1400 audit(1751467626.445:5417): avc: denied { mount } for pid=18394 comm="syz.2.3281" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 801.743275][ T5871] ath9k_htc: Failed to initialize the device [ 802.092677][T12969] usb 5-1: ath9k_htc: USB layer deinitialized [ 802.130679][T14321] usb 6-1: device descriptor read/64, error -71 [ 802.311588][T14321] usb usb6-port1: attempt power cycle [ 803.171585][T14321] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 803.731142][T18429] can0: slcan on ttyS3. [ 804.022543][ T5872] usb 7-1: new high-speed USB device number 109 using dummy_hcd [ 804.108576][T18442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3290'. [ 804.131634][T18442] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3290'. [ 804.990541][T14321] usb 6-1: device descriptor read/8, error -71 [ 805.013020][ T5872] usb 7-1: Using ep0 maxpacket: 16 [ 805.091654][ T5872] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 805.127986][ T5872] usb 7-1: can't read configurations, error -61 [ 805.271805][ T5872] usb 7-1: new high-speed USB device number 110 using dummy_hcd [ 805.433289][ T5872] usb 7-1: Using ep0 maxpacket: 16 [ 805.440591][ T5872] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 805.507573][ T5872] usb 7-1: can't read configurations, error -61 [ 805.627671][T14321] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 805.647154][ T5872] usb usb7-port1: attempt power cycle [ 805.661996][T14321] usb 6-1: Using ep0 maxpacket: 32 [ 805.676149][T14321] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 805.685506][T14321] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 805.694457][T14321] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 805.704582][T14321] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 805.714764][T14321] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 805.724914][T14321] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 805.747136][T14321] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 805.756551][T14321] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.771829][T14321] usb 6-1: config 0 descriptor?? [ 805.992953][T14321] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 123 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 806.011367][ T5872] usb 7-1: new high-speed USB device number 111 using dummy_hcd [ 806.041953][ T5872] usb 7-1: Using ep0 maxpacket: 16 [ 806.052345][ T5872] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 806.068035][ T5872] usb 7-1: can't read configurations, error -61 [ 806.201515][ T5872] usb 7-1: new high-speed USB device number 112 using dummy_hcd [ 806.355642][ T5872] usb 7-1: Using ep0 maxpacket: 16 [ 806.363987][ T5872] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 806.371710][ T5872] usb 7-1: can't read configurations, error -61 [ 806.378395][ T5872] usb usb7-port1: unable to enumerate USB device [ 806.862288][ C1] usblp0: nonzero read bulk status received: -71 [ 806.862665][ T5872] usb 6-1: USB disconnect, device number 123 [ 806.892506][ T5872] usblp0: removed [ 807.042433][T18425] can0 (unregistered): slcan off ttyS3. [ 807.344984][T18493] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3301'. [ 807.375206][T18493] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3301'. [ 807.390358][T18493] vlan2: entered allmulticast mode [ 807.396216][T18493] bridge1: port 1(vlan2) entered blocking state [ 807.402994][T18493] bridge1: port 1(vlan2) entered disabled state [ 807.414914][T18493] vlan2: entered promiscuous mode [ 807.423425][T18493] veth1: entered promiscuous mode [ 808.534515][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.540794][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.101422][T14321] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 809.444661][T14321] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 809.872560][T14321] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 809.887601][T14321] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 809.918657][T14321] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 809.953269][T14321] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.983234][T14321] usb 6-1: config 0 descriptor?? [ 810.117954][ T30] audit: type=1326 audit(1751467635.275:5418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18537 comm="syz.7.3312" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb67db8e929 code=0x0 [ 810.934240][T14321] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 812.171362][T14321] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 812.192999][T12969] usb 7-1: new high-speed USB device number 113 using dummy_hcd [ 812.324927][T14321] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 812.335235][T14321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.351033][T14321] usb 3-1: Product: syz [ 812.358583][T14321] usb 3-1: Manufacturer: syz [ 812.363841][T14321] usb 3-1: SerialNumber: syz [ 812.373443][T14321] usb 3-1: config 0 descriptor?? [ 812.382974][T12969] usb 7-1: config 0 has no interfaces? [ 812.388661][T12969] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 812.395837][T14321] ch341 3-1:0.0: ch341-uart converter detected [ 812.511370][T12969] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.544588][T12969] usb 7-1: config 0 descriptor?? [ 812.599070][T14321] usb 3-1: failed to receive control message: -32 [ 812.656380][T14321] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32 [ 812.755262][T18563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 812.770281][T18563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 812.793005][T14321] usb 7-1: USB disconnect, device number 113 [ 812.817216][ T5872] usb 6-1: USB disconnect, device number 124 [ 813.384568][ T5923] usb 7-1: new high-speed USB device number 114 using dummy_hcd [ 814.013834][T14321] usb 3-1: USB disconnect, device number 2 [ 814.031319][ T5923] usb 7-1: Using ep0 maxpacket: 16 [ 814.040926][T14321] ch341 3-1:0.0: device disconnected [ 814.058260][ T5923] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 814.071466][ T5923] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 814.166928][ T5923] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 814.176233][ T5923] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.184260][ T5923] usb 7-1: Product: syz [ 814.188420][ T5923] usb 7-1: Manufacturer: syz [ 814.193095][ T5923] usb 7-1: SerialNumber: syz [ 814.611626][ T5872] usb 6-1: new full-speed USB device number 125 using dummy_hcd [ 814.696098][ T5923] usb 7-1: 0:2 : does not exist [ 814.701068][ T5923] usb 7-1: unit 5 not found! [ 814.818527][ T5872] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 814.830209][ T5872] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 814.841931][ T5872] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 814.854762][ T5872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.901041][ T5872] usb 6-1: config 0 descriptor?? [ 814.909203][ T5872] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 814.917809][ T5872] dvb-usb: bulk message failed: -22 (3/0) [ 814.927894][ T5872] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 815.017849][T18621] SET target dimension over the limit! [ 815.025475][ T5872] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 815.032625][ T5872] usb 6-1: media controller created [ 815.039708][ T5872] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 815.062677][ T5872] dvb-usb: bulk message failed: -22 (6/0) [ 815.075423][ T5872] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 815.171782][T18609] dvb-usb: bulk message failed: -22 (2/0) [ 815.211029][ T5872] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input64 [ 815.281143][ T5872] dvb-usb: schedule remote query interval to 150 msecs. [ 815.297494][ T5872] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 815.451342][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 815.457266][ T5872] dvb-usb: error while querying for an remote control event. [ 815.492072][ T5871] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 815.638463][T18627] team0: Mode changed to "loadbalance" [ 815.645574][T18627] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3328'. [ 815.671603][ T5871] usb 3-1: Using ep0 maxpacket: 32 [ 815.687708][ T5871] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 815.701326][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 815.711332][ T5871] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 815.719974][ T5871] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 815.730916][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 815.740857][ T5871] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 815.769503][T12969] usb 7-1: USB disconnect, device number 114 [ 815.869209][ T5872] dvb-usb: error while querying for an remote control event. [ 815.974313][ T5871] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 815.987810][ T5871] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 815.997250][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.012580][ T5871] usb 3-1: config 0 descriptor?? [ 816.041351][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 816.047169][ T5872] dvb-usb: error while querying for an remote control event. [ 816.311345][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 816.473070][T18630] syz.6.3329 (18630): drop_caches: 2 [ 816.809432][T18630] syz.6.3329 (18630): drop_caches: 2 [ 817.094932][ T5872] dvb-usb: error while querying for an remote control event. [ 817.284083][ T5871] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 817.315767][T12969] usb 6-1: USB disconnect, device number 125 [ 817.371295][T14321] dvb-usb: bulk message failed: -22 (1/0) [ 817.377607][T14321] dvb-usb: error while querying for an remote control event. [ 817.392383][ T5871] usb 3-1: USB disconnect, device number 3 [ 817.401978][ T5871] usblp0: removed [ 818.437554][T12969] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 818.661033][T18650] binder: BINDER_SET_CONTEXT_MGR already set [ 818.741776][T18650] binder: 18649:18650 ioctl 4018620d 200000000040 returned -16 [ 818.859553][T18652] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3334'. [ 818.882738][T18654] xt_l2tp: v2 sid > 0xffff: 262144 [ 819.931427][ T30] audit: type=1400 audit(1751467644.775:5419): avc: denied { setattr } for pid=18655 comm="syz.7.3335" name="RDS" dev="sockfs" ino=62327 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 821.376836][T18678] syz.4.3340 (18678): drop_caches: 2 [ 821.400274][T18678] syz.4.3340 (18678): drop_caches: 2 [ 822.277710][T18694] syzkaller0: entered allmulticast mode [ 823.806927][T18707] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3349'. [ 824.997093][T18715] orangefs_mount: mount request failed with -4 [ 825.031318][ T30] audit: type=1400 audit(1751467649.735:5420): avc: denied { mounton } for pid=18710 comm="syz.4.3352" path="/224/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 825.123919][ T30] audit: type=1400 audit(1751467649.785:5421): avc: denied { unmount } for pid=18710 comm="syz.4.3352" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 825.237102][ T30] audit: type=1326 audit(1751467650.385:5422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18720 comm="syz.7.3353" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb67db8e929 code=0x0 [ 826.459503][T18730] syz.7.3355 (18730): drop_caches: 2 [ 826.484285][T18730] syz.7.3355 (18730): drop_caches: 2 [ 826.874902][ T5872] libceph: connect (1)[c::]:6789 error -101 [ 826.893031][ T5872] libceph: mon0 (1)[c::]:6789 connect error [ 826.912691][T18735] ceph: No mds server is up or the cluster is laggy [ 829.461333][ T5872] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 829.631318][ T5872] usb 3-1: Using ep0 maxpacket: 32 [ 830.031803][ T5929] usb 7-1: new full-speed USB device number 115 using dummy_hcd [ 830.058071][ T5872] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 830.066372][ T5872] usb 3-1: config 0 has no interface number 0 [ 830.083841][ T5872] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 830.163467][T18779] netlink: 'syz.5.3368': attribute type 10 has an invalid length. [ 830.269399][ T5872] usb 3-1: config 0 interface 85 has no altsetting 0 [ 830.321170][ T5872] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 830.630209][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.652112][ T5872] usb 3-1: Product: syz [ 830.656862][ T5872] usb 3-1: Manufacturer: syz [ 830.829548][ T5872] usb 3-1: SerialNumber: syz [ 830.838780][ T5872] usb 3-1: config 0 descriptor?? [ 831.381042][ T5929] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 831.394992][ T5929] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 831.406189][ T5929] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 831.428348][ T5929] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.442840][ T5929] usb 7-1: config 0 descriptor?? [ 831.451192][ T5929] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 831.498447][ T5929] dvb-usb: bulk message failed: -22 (3/0) [ 831.555896][ T5929] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 831.581009][ T5929] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 831.628857][ T5872] appletouch 3-1:0.85: Failed to read mode from device. [ 831.641024][ T5929] usb 7-1: media controller created [ 831.664606][ T5872] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 831.676463][T18768] dvb-usb: bulk message failed: -22 (2/0) [ 831.679299][ T5929] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 831.840965][ T5929] dvb-usb: bulk message failed: -22 (6/0) [ 831.849823][ T5872] usb 3-1: USB disconnect, device number 4 [ 831.858972][ T5929] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 832.420672][ T5929] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input67 [ 832.434006][ T5929] dvb-usb: schedule remote query interval to 150 msecs. [ 832.441011][ T5929] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 832.601595][ T5929] dvb-usb: bulk message failed: -22 (1/0) [ 832.729065][ T5929] dvb-usb: error while querying for an remote control event. [ 832.980993][ T5929] usb 7-1: USB disconnect, device number 115 [ 833.136577][ T5871] dvb-usb: bulk message failed: -22 (1/0) [ 833.143687][ T5871] dvb-usb: error while querying for an remote control event. [ 833.404823][ T5929] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 835.055964][T18823] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3381'. [ 835.181283][ T30] audit: type=1400 audit(1751467660.365:5423): avc: denied { write } for pid=18824 comm="syz.5.3383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 835.212810][T18828] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3381'. [ 835.255803][ T30] audit: type=1400 audit(1751467660.365:5424): avc: denied { read } for pid=18824 comm="syz.5.3383" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 835.333801][T18831] vlan2: entered allmulticast mode [ 835.344668][T18831] bridge1: port 1(vlan2) entered blocking state [ 835.351060][T18831] bridge1: port 1(vlan2) entered disabled state [ 835.357491][ T5872] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 835.373258][T18831] vlan2: entered promiscuous mode [ 835.378323][T18831] veth1: entered promiscuous mode [ 835.531393][ T5872] usb 5-1: Using ep0 maxpacket: 8 [ 835.600006][T18840] syz.2.3386 (18840): drop_caches: 2 [ 835.623649][T18840] syz.2.3386 (18840): drop_caches: 2 [ 835.675977][ T5872] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 835.755419][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.893683][ T5872] usb 5-1: Product: syz [ 835.923057][ T5872] usb 5-1: Manufacturer: syz [ 836.446911][ T5872] usb 5-1: SerialNumber: syz [ 836.484950][ T5872] usb 5-1: config 0 descriptor?? [ 836.702006][ T5872] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 836.895665][T18857] overlayfs: failed to resolve './file1': -2 [ 836.911302][ T5929] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 837.431338][ T5929] usb 6-1: Using ep0 maxpacket: 16 [ 837.443747][ T5929] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 837.542337][ T5929] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 837.602273][ T5929] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 837.755063][ T5929] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 837.767207][ T5929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.787835][ T5929] usb 6-1: config 0 descriptor?? [ 838.448672][ T5872] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 839.457748][ T5929] HID 045e:07da: Invalid code 65791 type 1 [ 839.484963][ T5929] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0007/input/input68 [ 839.671400][ T5923] usb 5-1: USB disconnect, device number 53 [ 839.833750][ T5929] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 839.861823][ T5929] usb 6-1: USB disconnect, device number 126 [ 839.960731][T18882] netlink: 'syz.2.3395': attribute type 10 has an invalid length. [ 840.476308][T18881] fido_id[18881]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 840.509945][T18882] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 841.015368][T18894] syz.2.3399 (18894): drop_caches: 2 [ 841.043326][T18894] syz.2.3399 (18894): drop_caches: 2 [ 841.158069][T18898] Scaler: ================= START STATUS ================= [ 841.165600][T18898] Scaler: ================== END STATUS ================== [ 841.690164][ T5929] usb 7-1: new low-speed USB device number 116 using dummy_hcd [ 841.872956][ T5929] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 841.889272][ T5929] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.633643][ T5929] usb 7-1: config 0 descriptor?? [ 842.837518][T18916] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3407'. [ 843.041346][ T5871] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 843.371556][ T5871] usb 5-1: Using ep0 maxpacket: 8 [ 843.386057][ T5871] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 843.400622][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.414416][ T5871] usb 5-1: Product: syz [ 843.418671][ T5871] usb 5-1: Manufacturer: syz [ 843.424258][ T5871] usb 5-1: SerialNumber: syz [ 843.484606][ T5871] usb 5-1: config 0 descriptor?? [ 843.701184][ T5871] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 844.331424][ T5923] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 845.061649][ T5923] usb 3-1: Using ep0 maxpacket: 16 [ 845.162551][ T5871] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 845.231506][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 845.327945][ T5923] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 845.369029][T18953] mac80211_hwsim hwsim18 syzkaller0: entered promiscuous mode [ 845.377358][T18953] mac80211_hwsim hwsim18 syzkaller0: entered allmulticast mode [ 845.441458][ T5923] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 845.450536][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.522385][ T5923] usb 3-1: Product: syz [ 845.531057][ T5923] usb 3-1: Manufacturer: syz [ 845.626816][ T5929] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 845.639325][ T5929] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 845.653661][ T5929] asix 7-1:0.0: probe with driver asix failed with error -71 [ 845.670827][ T5929] usb 7-1: USB disconnect, device number 116 [ 845.698737][ T5923] usb 3-1: SerialNumber: syz [ 845.855900][ T5923] usb 3-1: config 0 descriptor?? [ 846.189712][ T5923] mcba_usb 3-1:0.0: Can't find endpoints [ 846.249040][T12969] usb 5-1: USB disconnect, device number 54 [ 846.787702][T18972] netlink: 'syz.4.3421': attribute type 10 has an invalid length. [ 847.321486][ T5929] usb 7-1: new high-speed USB device number 117 using dummy_hcd [ 847.361923][ T30] audit: type=1326 audit(1751467672.545:5425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18970 comm="syz.7.3420" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb67db8e929 code=0x0 [ 847.663890][ T5929] usb 7-1: config 0 has no interfaces? [ 847.671439][ T5929] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 847.852479][ T5929] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.870616][ T5929] usb 7-1: config 0 descriptor?? [ 848.479654][T18965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 848.562059][T18965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 848.599108][ T30] audit: type=1400 audit(1751467673.775:5426): avc: denied { ioctl } for pid=18978 comm="syz.7.3423" path="socket:[63996]" dev="sockfs" ino=63996 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 848.657840][ T5929] usb 7-1: USB disconnect, device number 117 [ 848.879776][ T5871] usb 3-1: USB disconnect, device number 5 [ 848.986017][T18991] netlink: 'syz.4.3427': attribute type 10 has an invalid length. [ 849.601344][ T5929] usb 7-1: new high-speed USB device number 118 using dummy_hcd [ 850.102848][ T5929] usb 7-1: Using ep0 maxpacket: 16 [ 850.129904][ T5929] usb 7-1: device descriptor read/all, error -71 [ 850.345591][ T5923] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 850.479678][T19006] netlink: 'syz.7.3432': attribute type 10 has an invalid length. [ 850.499037][T19006] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 850.561452][ T5923] usb 5-1: Using ep0 maxpacket: 8 [ 850.590218][ T5923] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 850.887832][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.895368][T19011] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3433'. [ 850.896431][ T5923] usb 5-1: Product: syz [ 850.913172][ T5923] usb 5-1: Manufacturer: syz [ 850.917929][ T5923] usb 5-1: SerialNumber: syz [ 850.927108][ T5923] usb 5-1: config 0 descriptor?? [ 851.200429][ T5923] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 852.354246][ T5923] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 853.394251][T12969] usb 5-1: USB disconnect, device number 55 [ 854.457481][T19060] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 857.906225][ T30] audit: type=1400 audit(1751467683.095:5427): avc: denied { listen } for pid=19090 comm="syz.4.3454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 857.967071][T19092] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.3454'. [ 859.191397][ T5929] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 859.355048][ T5929] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 859.367497][ T5929] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 859.379115][ T5929] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 859.391182][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.408959][ T5929] usb 5-1: config 0 descriptor?? [ 859.420584][ T5929] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 859.429460][ T5929] dvb-usb: bulk message failed: -22 (3/0) [ 859.443331][ T5929] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 859.454613][ T5929] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 859.463739][ T5929] usb 5-1: media controller created [ 859.470561][ T5929] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 859.486623][ T5929] dvb-usb: bulk message failed: -22 (6/0) [ 859.505011][ T5929] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 859.519055][ T5929] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input69 [ 859.538527][ T5929] dvb-usb: schedule remote query interval to 150 msecs. [ 859.546658][ T5929] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 859.653663][T19108] dvb-usb: bulk message failed: -22 (2/0) [ 859.701303][ T5929] dvb-usb: bulk message failed: -22 (1/0) [ 860.525297][ T5929] dvb-usb: error while querying for an remote control event. [ 860.697829][T12969] dvb-usb: bulk message failed: -22 (1/0) [ 860.704072][T12969] dvb-usb: error while querying for an remote control event. [ 860.902569][T12969] dvb-usb: bulk message failed: -22 (1/0) [ 860.908519][T12969] dvb-usb: error while querying for an remote control event. [ 861.381479][T12969] dvb-usb: bulk message failed: -22 (1/0) [ 861.407379][T12969] dvb-usb: error while querying for an remote control event. [ 861.420154][T19133] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 861.576411][T19025] syz.2.3436: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 861.641299][T12969] dvb-usb: bulk message failed: -22 (1/0) [ 862.362683][T12969] dvb-usb: error while querying for an remote control event. [ 862.509661][T19025] CPU: 1 UID: 0 PID: 19025 Comm: syz.2.3436 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 862.509689][T19025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 862.509700][T19025] Call Trace: [ 862.509706][T19025] [ 862.509713][T19025] dump_stack_lvl+0x16c/0x1f0 [ 862.509744][T19025] warn_alloc+0x248/0x3a0 [ 862.509767][T19025] ? __pfx_warn_alloc+0x10/0x10 [ 862.509799][T19025] ? hash_netiface_create+0x3ec/0x1250 [ 862.509832][T19025] ? __vmalloc_node_noprof+0xad/0xf0 [ 862.509853][T19025] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 862.509882][T19025] ? hash_netiface_create+0x3ec/0x1250 [ 862.509915][T19025] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 862.509945][T19025] ? hash_netiface_create+0x3ec/0x1250 [ 862.509969][T19025] __vmalloc_node_noprof+0xad/0xf0 [ 862.509989][T19025] ? hash_netiface_create+0x3ec/0x1250 [ 862.510018][T19025] __vmalloc_node_range_noprof+0xb73/0x14b0 [ 862.510047][T19025] ? hash_netiface_create+0x3ec/0x1250 [ 862.510078][T19025] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 862.510100][T19025] ? __alloc_pages_noprof+0xb/0x1b0 [ 862.510123][T19025] ? ___kmalloc_large_node+0x84/0x1e0 [ 862.510147][T19025] __kvmalloc_node_noprof+0x30a/0x620 [ 862.510171][T19025] ? hash_netiface_create+0x3ec/0x1250 [ 862.510196][T19025] ? hash_netiface_create+0x3ec/0x1250 [ 862.510226][T19025] ? hash_netiface_create+0x3ec/0x1250 [ 862.510249][T19025] hash_netiface_create+0x3ec/0x1250 [ 862.510276][T19025] ? __nla_parse+0x1b/0x60 [ 862.510304][T19025] ? __pfx_hash_netiface_create+0x10/0x10 [ 862.510331][T19025] ip_set_create+0x7e1/0x14d0 [ 862.510362][T19025] ? __pfx_ip_set_create+0x10/0x10 [ 862.510408][T19025] ? find_held_lock+0x2b/0x80 [ 862.510437][T19025] nfnetlink_rcv_msg+0x9f9/0x1200 [ 862.510468][T19025] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 862.510491][T19025] ? __lock_acquire+0x622/0x1c90 [ 862.510529][T19025] ? avc_has_perm_noaudit+0x149/0x3b0 [ 862.510558][T19025] netlink_rcv_skb+0x155/0x420 [ 862.510573][T19025] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 862.510591][T19025] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 862.510614][T19025] ? ns_capable+0xd7/0x110 [ 862.510632][T19025] nfnetlink_rcv+0x1b3/0x430 [ 862.510649][T19025] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 862.510665][T19025] ? netlink_deliver_tap+0x1ae/0xd30 [ 862.510692][T19025] netlink_unicast+0x53d/0x7f0 [ 862.510709][T19025] ? __pfx_netlink_unicast+0x10/0x10 [ 862.510728][T19025] netlink_sendmsg+0x8d1/0xdd0 [ 862.510747][T19025] ? __pfx_netlink_sendmsg+0x10/0x10 [ 862.510771][T19025] ____sys_sendmsg+0xa95/0xc70 [ 862.510788][T19025] ? copy_msghdr_from_user+0x10a/0x160 [ 862.510807][T19025] ? __pfx_____sys_sendmsg+0x10/0x10 [ 862.510832][T19025] ? __pfx_futex_wake_mark+0x10/0x10 [ 862.510850][T19025] ___sys_sendmsg+0x134/0x1d0 [ 862.510870][T19025] ? __pfx____sys_sendmsg+0x10/0x10 [ 862.510888][T19025] ? __lock_acquire+0x622/0x1c90 [ 862.510933][T19025] __sys_sendmsg+0x16d/0x220 [ 862.510952][T19025] ? __pfx___sys_sendmsg+0x10/0x10 [ 862.510971][T19025] ? __x64_sys_futex+0x1e0/0x4c0 [ 862.511004][T19025] do_syscall_64+0xcd/0x4c0 [ 862.511026][T19025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.511041][T19025] RIP: 0033:0x7fbca278e929 [ 862.511054][T19025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 862.511068][T19025] RSP: 002b:00007fbca3679038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 862.511083][T19025] RAX: ffffffffffffffda RBX: 00007fbca29b5fa0 RCX: 00007fbca278e929 [ 862.511093][T19025] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 862.511101][T19025] RBP: 00007fbca2810b39 R08: 0000000000000000 R09: 0000000000000000 [ 862.511110][T19025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 862.511119][T19025] R13: 0000000000000000 R14: 00007fbca29b5fa0 R15: 00007fff558aac18 [ 862.511137][T19025] [ 862.511146][T19025] Mem-Info: [ 862.558025][ T5923] usb 5-1: USB disconnect, device number 56 [ 862.559355][T12969] dvb-usb: bulk message failed: -22 (1/0) [ 862.575410][T19025] active_anon:13759 inactive_anon:22 isolated_anon:0 [ 862.575410][T19025] active_file:15780 inactive_file:40989 isolated_file:0 [ 862.575410][T19025] unevictable:768 dirty:257 writeback:0 [ 862.575410][T19025] slab_reclaimable:7271 slab_unreclaimable:170585 [ 862.575410][T19025] mapped:36180 shmem:1825 pagetables:1994 [ 862.575410][T19025] sec_pagetables:3 bounce:0 [ 862.575410][T19025] kernel_misc_reclaimable:0 [ 862.575410][T19025] free:1188166 free_pcp:15674 free_cma:0 [ 862.576249][T12969] dvb-usb: error while querying for an remote control event. [ 862.586880][T19025] Node 0 active_anon:55036kB inactive_anon:88kB active_file:63044kB inactive_file:163752kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:144688kB dirty:1028kB writeback:0kB shmem:5764kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12632kB pagetables:7748kB sec_pagetables:12kB all_unreclaimable? no Balloon:0kB [ 863.158274][ T5923] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 863.274923][T19144] netlink: 'syz.7.3471': attribute type 5 has an invalid length. [ 863.283452][T19144] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3471'. [ 863.318869][T19025] Node 1 active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:32kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 863.541351][T19025] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 864.087235][T19025] lowmem_reserve[]: 0 2481 2482 2482 2482 [ 864.123413][T19025] Node 0 DMA32 free:834384kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:73944kB inactive_anon:88kB active_file:63044kB inactive_file:162396kB unevictable:1536kB writepending:1048kB present:3129332kB managed:2540584kB mlocked:0kB bounce:0kB free_pcp:28400kB local_pcp:20552kB free_cma:0kB [ 864.281418][T19025] lowmem_reserve[]: 0 0 1 1 1 [ 864.286189][T19025] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:1356kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:12kB free_cma:0kB [ 864.365193][T19025] lowmem_reserve[]: 0 0 0 0 0 [ 864.369958][T19025] Node 1 Normal free:3902848kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:17272kB local_pcp:6240kB free_cma:0kB [ 864.429404][T19025] lowmem_reserve[]: 0 0 0 0 0 [ 864.439492][T19025] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 864.898383][T19025] Node 0 DMA32: 33*4kB (UME) 102*8kB (UE) 241*16kB (UME) 167*32kB (UME) 73*64kB (ME) 287*128kB (UE) 435*256kB (UME) 387*512kB (UME) 264*1024kB (UME) 33*2048kB (UME) 33*4096kB (UM) = 834148kB [ 865.088760][T19025] Node 0 Normal: 0*4kB 2*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 865.184483][T19025] Node 1 Normal: 177*4kB (UME) 49*8kB (UME) 45*16kB (UME) 241*32kB (UME) 67*64kB (UME) 7*128kB (UME) 3*256kB (M) 5*512kB (UME) 4*1024kB (UME) 3*2048kB (UME) 946*4096kB (M) = 3903100kB [ 865.299378][T19167] orangefs_mount: mount request failed with -4 [ 865.344088][T19025] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 865.385361][T19025] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 865.434338][T19025] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 865.510008][T19025] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 865.521176][T19025] 61504 total pagecache pages [ 865.526620][T19025] 27 pages in swap cache [ 865.530933][T19025] Free swap = 124840kB [ 865.535543][T19025] Total swap = 124996kB [ 865.539749][T19025] 2097051 pages RAM [ 865.548652][T19025] 0 pages HighMem/MovableOnly [ 865.553493][T19025] 429927 pages reserved [ 865.557744][T19025] 0 pages cma reserved [ 865.601366][ T5929] usb 7-1: new high-speed USB device number 120 using dummy_hcd [ 865.761555][ T5929] usb 7-1: Using ep0 maxpacket: 16 [ 865.786629][ T5929] usb 7-1: config 4 has an invalid interface number: 9 but max is 0 [ 865.817798][ T5929] usb 7-1: config 4 has no interface number 0 [ 865.900198][ T5929] usb 7-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 865.971405][ T5929] usb 7-1: config 4 interface 9 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 865.997264][T19182] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3481'. [ 866.011113][ T5929] usb 7-1: config 4 interface 9 has no altsetting 0 [ 866.034905][ T5929] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 866.061302][ T5929] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.083152][ T5929] usb 7-1: Product: syz [ 866.095539][ T5929] usb 7-1: Manufacturer: syz [ 866.105356][ T5929] usb 7-1: SerialNumber: syz [ 866.151145][T19155] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 866.187763][ T5929] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 867.286899][ T36] usb 7-1: Failed to submit usb control message: -110 [ 867.294271][ T36] usb 7-1: unable to send the bmi data to the device: -110 [ 867.305096][ T36] usb 7-1: unable to get target info from device [ 867.312050][ T36] usb 7-1: could not get target info (-110) [ 867.318348][ T36] usb 7-1: could not probe fw (-110) [ 867.338835][ T5923] usb 7-1: USB disconnect, device number 120 [ 868.545261][T19212] orangefs_mount: mount request failed with -4 [ 869.652965][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.661754][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.069959][T19224] can0: slcan on ttyS3. [ 870.101716][ T5821] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 870.110986][ T5821] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 870.124088][ T5821] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 870.141663][ T5821] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 870.149484][ T5821] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 870.361591][ T5819] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 870.372520][ T5819] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 870.379896][ T5819] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 870.387854][ T5819] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 870.398668][ T5819] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 870.543000][T19224] can0 (unregistered): slcan off ttyS3. [ 872.195984][T19025] syz.2.3436 (19025) used greatest stack depth: 18920 bytes left [ 872.457807][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.542885][T19227] chnl_net:caif_netlink_parms(): no params data found [ 872.647586][ T30] audit: type=1400 audit(1751467697.835:5428): avc: denied { execute } for pid=19252 comm="syz.6.3501" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=65557 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 873.494179][ T5821] Bluetooth: hci4: command tx timeout [ 875.599938][ T5821] Bluetooth: hci4: command tx timeout [ 875.745197][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.071447][ T5872] usb 7-1: new high-speed USB device number 121 using dummy_hcd [ 876.115601][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.217748][T19227] bridge0: port 1(bridge_slave_0) entered blocking state [ 876.231744][T19227] bridge0: port 1(bridge_slave_0) entered disabled state [ 876.239778][T19227] bridge_slave_0: entered allmulticast mode [ 876.248292][T19227] bridge_slave_0: entered promiscuous mode [ 876.258041][T19227] bridge0: port 2(bridge_slave_1) entered blocking state [ 876.265264][ T5872] usb 7-1: Using ep0 maxpacket: 16 [ 876.270903][T19227] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.279528][T19227] bridge_slave_1: entered allmulticast mode [ 876.279647][ T5872] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 876.299592][T19227] bridge_slave_1: entered promiscuous mode [ 876.305864][ T5872] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 876.317230][ T5872] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 876.330471][ T5872] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 876.339788][ T5872] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.364141][ T5872] usb 7-1: config 0 descriptor?? [ 876.417943][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.620737][T19227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 876.882910][ T5872] usbhid 7-1:0.0: can't add hid device: -71 [ 876.889323][ T5872] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 877.198977][ T5872] usb 7-1: USB disconnect, device number 121 [ 877.258532][T19227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 877.388695][T19227] team0: Port device team_slave_0 added [ 877.400624][T19227] team0: Port device team_slave_1 added [ 877.477771][T19227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 877.485374][T19227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 877.623753][T19227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 877.648852][ T5821] Bluetooth: hci4: command tx timeout [ 877.666134][T19227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 877.723015][T19227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 877.796526][T19227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 877.808696][ T30] audit: type=1400 audit(1751467703.005:5429): avc: denied { unmount } for pid=14199 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 877.870910][ T12] bridge_slave_1: left allmulticast mode [ 877.876965][ T12] bridge_slave_1: left promiscuous mode [ 877.883279][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.899338][ T12] bridge_slave_0: left allmulticast mode [ 877.957542][ T12] bridge_slave_0: left promiscuous mode [ 878.166775][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.232893][T19314] netlink: 'syz.4.3517': attribute type 10 has an invalid length. [ 879.196143][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 879.241490][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 879.312920][ T12] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 879.329504][ T12] bond0 (unregistering): Released all slaves [ 879.941770][ T5821] Bluetooth: hci4: command tx timeout [ 879.979877][T19227] hsr_slave_0: entered promiscuous mode [ 880.009457][T19227] hsr_slave_1: entered promiscuous mode [ 880.032351][T19227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 880.040022][T19227] Cannot create hsr debugfs directory [ 880.790876][ T12] hsr_slave_0: left promiscuous mode [ 880.811157][ T12] hsr_slave_1: left promiscuous mode [ 880.942870][T19352] netlink: 'syz.7.3526': attribute type 10 has an invalid length. [ 881.033771][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 881.708037][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 881.736243][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 881.749622][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 881.868600][ T12] veth1_macvtap: left promiscuous mode [ 881.878733][ T12] veth0_macvtap: left promiscuous mode [ 881.887540][ T12] veth1_vlan: left promiscuous mode [ 881.894591][ T12] veth0_vlan: left promiscuous mode [ 882.831336][ T5872] usb 7-1: new high-speed USB device number 122 using dummy_hcd [ 883.066888][ T5872] usb 7-1: config 0 has no interfaces? [ 883.081176][ T5872] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 883.236039][ T5872] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.244406][ T5872] usb 7-1: Product: syz [ 883.248741][ T5872] usb 7-1: Manufacturer: syz [ 883.253465][ T5872] usb 7-1: SerialNumber: syz [ 883.270635][ T5872] usb 7-1: config 0 descriptor?? [ 884.652186][ T12] team0 (unregistering): Port device team_slave_1 removed [ 884.696064][ T12] team0 (unregistering): Port device team_slave_0 removed [ 885.782633][ T5872] usb 7-1: can't set config #0, error -71 [ 885.804717][ T5872] usb 7-1: USB disconnect, device number 122 [ 886.185860][T19410] fuse: Unknown parameter 'grou00000000000000000000' [ 886.244688][T19227] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 886.270771][T19227] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 886.292503][ T5929] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 886.427927][T19227] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 886.451553][T19227] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 886.548619][T19227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 886.582813][ T5929] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 886.587718][T19227] 8021q: adding VLAN 0 to HW filter on device team0 [ 886.602516][ T5929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.642012][ T6258] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.649109][ T6258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 886.669940][ T4157] bridge0: port 2(bridge_slave_1) entered blocking state [ 886.677117][ T4157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 886.731290][ T5929] usb 6-1: config 0 descriptor?? [ 887.039403][T19431] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3542'. [ 887.853414][ T5929] pegasus 6-1:0.0: probe with driver pegasus failed with error -32 [ 887.875670][ T5929] usb 6-1: USB disconnect, device number 127 [ 888.155833][T19227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 888.191310][T12969] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 888.361498][ T5929] usb 7-1: new full-speed USB device number 123 using dummy_hcd [ 888.389704][T12969] usb 5-1: config 0 has no interfaces? [ 888.410794][T12969] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 888.425275][T12969] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.455642][T12969] usb 5-1: Product: syz [ 888.459808][T12969] usb 5-1: Manufacturer: syz [ 888.491276][T12969] usb 5-1: SerialNumber: syz [ 888.531139][ T5929] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 888.710891][ T5929] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 888.855509][T12969] usb 5-1: config 0 descriptor?? [ 888.869186][ T5929] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 888.878510][ T5929] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.007869][T19463] fuse: Unknown parameter 'grou00000000000000000000' [ 889.127531][T19468] ptrace attach of "./syz-executor exec"[15649] was attempted by "ߖ鷴)Qo \x0dvҢ9T{-92\x0ap_3j nޭOa)bkߟ.\x0aK~򜛱تKOkF^3B3){\x5crHBd,X\x09\x0b3c\x22&W\x22\x1bTL'\x09!_Nhٹ=n>a (G6茷A+&ϋЈUߍa{@{\x0b[ɸYacAzÂGl:d<]u~v!9,?Ŵ>\x22ar\x1blKڬY*VS8ȁ6]kK.=`#\x07x!gMDR*OLK\x0c}oKbA>{@aMdnQj̖5)];r,L\x0c=\x0dWAE n`>Ɵs-3`yfeH^/$L1&NP\x0d1D<\x07cPd(EdtaE!ҭ \x09@ݞHG~H%3{- ^Qǚ4e3\x0b>sF̗H]+\ [ 889.573701][T19448] pimreg: entered allmulticast mode [ 889.729246][ T5929] usb 7-1: GET_CAPABILITIES returned 0 [ 889.745793][ T5929] usbtmc 7-1:16.0: can't read capabilities [ 889.800430][T19474] pimreg: left allmulticast mode [ 889.846385][T19227] veth0_vlan: entered promiscuous mode [ 889.870842][T19227] veth1_vlan: entered promiscuous mode [ 889.952881][ T5929] usb 7-1: USB disconnect, device number 123 [ 889.999970][T19227] veth0_macvtap: entered promiscuous mode [ 890.008508][T19227] veth1_macvtap: entered promiscuous mode [ 890.231784][T19227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 890.246463][T19227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 890.267129][T19227] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.276341][T19227] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.287056][T19227] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.301916][T19227] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.334669][T19479] syzkaller1: entered promiscuous mode [ 890.340308][T19479] syzkaller1: entered allmulticast mode [ 890.403731][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 890.416445][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 890.450698][ T3523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 890.458890][ T3523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 892.337374][ T30] audit: type=1400 audit(1751467717.265:5430): avc: denied { ioctl } for pid=19495 comm="syz.8.3486" path="socket:[66419]" dev="sockfs" ino=66419 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 892.413962][ T5872] usb 5-1: USB disconnect, device number 57 [ 892.521491][T19509] tmpfs: Bad value for 'mpol' [ 893.440722][ T30] audit: type=1400 audit(1751467718.055:5431): avc: denied { mount } for pid=19510 comm="syz.5.3556" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 894.183256][T19533] netlink: 'syz.8.3563': attribute type 10 has an invalid length. [ 894.561529][T19553] netlink: 'syz.5.3562': attribute type 5 has an invalid length. [ 894.569788][T19553] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3562'. [ 894.824369][ T30] audit: type=1400 audit(1751467719.835:5432): avc: denied { read write } for pid=19547 comm="syz.6.3565" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 895.129940][ T30] audit: type=1400 audit(1751467719.845:5433): avc: denied { open } for pid=19547 comm="syz.6.3565" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 895.160094][T19533] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 895.249663][ T30] audit: type=1400 audit(1751467719.845:5434): avc: denied { watch } for pid=19547 comm="syz.6.3565" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 895.280456][ T30] audit: type=1400 audit(1751467719.855:5435): avc: denied { watch_sb watch_reads } for pid=19547 comm="syz.6.3565" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 896.926889][T19572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3571'. [ 897.763743][T19588] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 898.463925][T19590] netlink: 'syz.4.3576': attribute type 10 has an invalid length. [ 898.656902][T19595] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 898.969915][ T5871] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 899.121312][ T5871] usb 5-1: Using ep0 maxpacket: 32 [ 899.126837][ T5871] usb 5-1: config 8 has an invalid interface number: 203 but max is 0 [ 899.126909][ T5871] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 899.126956][ T5871] usb 5-1: config 8 has no interface number 0 [ 899.127099][ T5871] usb 5-1: config 8 interface 203 altsetting 1 has an endpoint descriptor with address 0x93, changing to 0x83 [ 899.127151][ T5871] usb 5-1: config 8 interface 203 altsetting 1 endpoint 0x83 has invalid wMaxPacketSize 0 [ 899.127201][ T5871] usb 5-1: config 8 interface 203 altsetting 1 bulk endpoint 0x83 has invalid maxpacket 0 [ 899.127250][ T5871] usb 5-1: config 8 interface 203 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 899.127370][ T5871] usb 5-1: config 8 interface 203 has no altsetting 0 [ 899.147848][ T5871] usb 5-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a [ 899.147918][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.147967][ T5871] usb 5-1: Product: syz [ 899.148009][ T5871] usb 5-1: Manufacturer: syz [ 899.148052][ T5871] usb 5-1: SerialNumber: syz [ 899.723516][ T5871] port100 5-1:8.203: NFC: Could not find bulk-in or bulk-out endpoint [ 899.741452][ T5871] usb 5-1: USB disconnect, device number 58 [ 900.770365][T19630] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 900.784337][T19630] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 900.824073][T19630] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 901.070705][T19644] netlink: 'syz.6.3585': attribute type 5 has an invalid length. [ 901.079729][T19644] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3585'. [ 901.311275][T14321] usb 5-1: new low-speed USB device number 59 using dummy_hcd [ 901.474617][T14321] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 901.484815][T14321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.611001][T14321] usb 5-1: config 0 descriptor?? [ 902.866168][ T5821] Bluetooth: hci4: command 0x0405 tx timeout [ 904.999559][T19681] nfs: Unknown parameter 'fscquencer' [ 905.073274][ T5821] Bluetooth: hci4: command 0x0405 tx timeout [ 905.352159][T14321] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 905.388077][T14321] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 905.410630][T14321] asix 5-1:0.0: probe with driver asix failed with error -71 [ 905.458591][T14321] usb 5-1: USB disconnect, device number 59 [ 905.901302][ T5871] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 905.963386][T19727] kvm: pic: non byte read [ 906.114544][ T5871] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 906.342459][ T5871] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 906.427891][ T5871] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 906.437363][ T5871] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.680247][ T5871] usb 9-1: GET_CAPABILITIES returned 0 [ 906.701744][ T5871] usbtmc 9-1:16.0: can't read capabilities [ 906.885000][T14321] usb 9-1: USB disconnect, device number 2 [ 907.161292][ T5821] Bluetooth: hci4: command 0x0405 tx timeout [ 908.155028][T19773] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3604'. [ 908.871754][T19778] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3603'. [ 908.883178][T19778] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3603'. [ 908.897695][T19777] random: crng reseeded on system resumption [ 908.930100][ T30] audit: type=1400 audit(1751467734.085:5436): avc: denied { write } for pid=19764 comm="syz.6.3602" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 909.350196][T19782] netlink: 'syz.4.3601': attribute type 5 has an invalid length. [ 911.710521][T19826] netlink: 'syz.8.3614': attribute type 10 has an invalid length. [ 911.972926][T19831] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3615'. [ 912.724395][ T30] audit: type=1326 audit(1751467737.845:5437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19848 comm="syz.8.3618" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4fae38e929 code=0x0 [ 914.091338][ T5871] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 914.436814][ T5871] usb 9-1: Using ep0 maxpacket: 16 [ 914.841429][ T5871] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 914.850702][ T5871] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.859052][ T5871] usb 9-1: Product: syz [ 914.863373][ T5871] usb 9-1: Manufacturer: syz [ 914.867975][ T5871] usb 9-1: SerialNumber: syz [ 914.927205][ T5871] r8152-cfgselector 9-1: Unknown version 0x0000 [ 914.933699][ T5871] r8152-cfgselector 9-1: config 0 descriptor?? [ 916.954849][ T3690] r8152-cfgselector 9-1: USB disconnect, device number 3 [ 918.712885][T19910] netlink: 'syz.7.3629': attribute type 5 has an invalid length. [ 918.938244][ T5819] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 918.948687][ T5819] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 918.958216][ T5819] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 918.968401][ T5819] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 918.976149][ T5819] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 919.469476][T19926] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 919.480089][T19926] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 919.490440][T19926] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 919.501324][T19926] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 919.511587][T19926] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 919.521910][T19926] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 919.532289][T19926] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 919.542583][T19926] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 919.552868][T19926] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 919.563651][T19926] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 919.729451][T19929] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3638'. [ 919.814614][T19934] syz.4.3639 (19934): drop_caches: 2 [ 919.820175][T19934] syz.4.3639 (19934): drop_caches: 2 [ 919.901881][T19940] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3638'. [ 920.009599][T19944] vlan2: entered allmulticast mode [ 920.019434][T19944] veth1: entered allmulticast mode [ 920.027785][T19944] bridge1: port 1(vlan2) entered blocking state [ 920.033311][T19946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3641'. [ 920.037996][T19944] bridge1: port 1(vlan2) entered disabled state [ 920.086884][T19944] vlan2: entered promiscuous mode [ 920.097634][T19944] veth1: entered promiscuous mode [ 920.256308][T19958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3641'. [ 920.266786][T19951] mac80211_hwsim hwsim18 syzkaller0: left promiscuous mode [ 920.282454][T19951] mac80211_hwsim hwsim18 syzkaller0: left allmulticast mode [ 920.873604][T19913] chnl_net:caif_netlink_parms(): no params data found [ 921.403173][ T5819] Bluetooth: hci2: command tx timeout [ 921.449788][T19994] netlink: 'syz.5.3646': attribute type 5 has an invalid length. [ 921.824618][T20002] Cannot find add_set index 0 as target [ 922.521727][T19721] bridge_slave_1: left promiscuous mode [ 922.560200][T19721] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.752740][T19721] bridge_slave_0: left promiscuous mode [ 922.759315][T19721] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.891848][T20037] syz.8.3651 (20037): drop_caches: 2 [ 922.898988][T20037] syz.8.3651 (20037): drop_caches: 2 [ 922.943251][T19721] vlan2: left promiscuous mode [ 922.948116][T19721] veth1: left promiscuous mode [ 922.998243][T19721] bridge1: port 1(vlan2) entered disabled state [ 923.120175][T20045] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3653'. [ 923.215260][T20050] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3653'. [ 923.581516][ T5819] Bluetooth: hci2: command tx timeout [ 923.965106][T19721] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 923.978947][T19721] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 923.993922][T19721] bond0 (unregistering): Released all slaves [ 924.038008][T20057] syzkaller1: entered promiscuous mode [ 924.045674][T20057] syzkaller1: entered allmulticast mode [ 924.808252][T19721] tipc: Left network mode [ 924.869587][T19913] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.887428][T19913] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.915849][T19913] bridge_slave_0: entered allmulticast mode [ 924.936025][T19913] bridge_slave_0: entered promiscuous mode [ 924.963481][T19913] bridge0: port 2(bridge_slave_1) entered blocking state [ 925.008465][T19913] bridge0: port 2(bridge_slave_1) entered disabled state [ 925.049970][ T30] audit: type=1400 audit(1751467750.235:5438): avc: denied { unmount } for pid=15649 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 925.111513][T19913] bridge_slave_1: entered allmulticast mode [ 925.129050][T19913] bridge_slave_1: entered promiscuous mode [ 925.211387][ T5871] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 925.426010][ T5871] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 925.445415][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.458215][T19913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 925.522553][T20096] overlayfs: missing 'lowerdir' [ 925.565390][T19913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 925.589579][T20094] syz.8.3662 (20094): drop_caches: 2 [ 925.641455][ T5819] Bluetooth: hci2: command tx timeout [ 925.751436][T20094] syz.8.3662 (20094): drop_caches: 2 [ 925.922874][ T5871] usb 5-1: Product: syz [ 925.928178][ T5871] usb 5-1: Manufacturer: syz [ 925.938051][ T5871] usb 5-1: SerialNumber: syz [ 925.951362][ T5871] usb 5-1: config 0 descriptor?? [ 925.970685][ T5871] ch341 5-1:0.0: ch341-uart converter detected [ 926.005855][T19721] hsr_slave_0: left promiscuous mode [ 926.024061][T19721] hsr_slave_1: left promiscuous mode [ 926.226331][ T5871] usb 5-1: failed to receive control message: -121 [ 926.280990][ T5871] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 927.721688][ T5819] Bluetooth: hci2: command tx timeout [ 927.959389][T19721] team0 (unregistering): Port device team_slave_1 removed [ 928.039507][ T10] usb 5-1: USB disconnect, device number 60 [ 928.072371][ T10] ch341 5-1:0.0: device disconnected [ 928.108126][T20141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3671'. [ 928.307833][T19721] team0 (unregistering): Port device team_slave_0 removed [ 929.267111][T19913] team0: Port device team_slave_0 added [ 929.329738][T19913] team0: Port device team_slave_1 added [ 929.561051][T19913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 929.601290][T19913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 929.646178][T19913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 929.680428][T19913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 929.697849][T19913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 929.746951][T19913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 929.966836][T20170] overlayfs: missing 'lowerdir' [ 929.976826][T19913] hsr_slave_0: entered promiscuous mode [ 929.993155][T19913] hsr_slave_1: entered promiscuous mode [ 930.019875][T19913] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 930.051290][T19913] Cannot create hsr debugfs directory [ 931.102539][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.122870][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.379305][T20208] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3681'. [ 932.418218][T20208] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3681'. [ 932.438125][T20210] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3683'. [ 933.900658][T19913] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 933.956071][T19913] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 933.995281][T19913] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 934.188698][T19913] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 934.213282][ T5879] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 936.061271][ T5879] usb 5-1: Using ep0 maxpacket: 16 [ 936.077110][ T5879] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 936.096213][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.105217][ T5879] usb 5-1: Product: syz [ 936.109445][ T5879] usb 5-1: Manufacturer: syz [ 936.114773][ T5879] usb 5-1: SerialNumber: syz [ 936.244070][ T30] audit: type=1800 audit(1751467761.395:5439): pid=20265 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.3692" name="bus" dev="overlay" ino=1057 res=0 errno=0 [ 936.945278][T19913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 937.020464][T19913] 8021q: adding VLAN 0 to HW filter on device team0 [ 937.040588][ T5879] r8152-cfgselector 5-1: Unknown version 0x0000 [ 937.045160][T19737] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.049183][ T5879] r8152-cfgselector 5-1: config 0 descriptor?? [ 937.054015][T19737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 937.073828][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.080954][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 937.163135][ T5879] r8152-cfgselector 5-1: can't set config #0, error -71 [ 937.312347][ T5879] r8152-cfgselector 5-1: USB disconnect, device number 61 [ 938.286185][T20290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3696'. [ 938.352551][T20290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3696'. [ 938.787949][T19913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 939.981217][T19913] veth0_vlan: entered promiscuous mode [ 940.152868][T19913] veth1_vlan: entered promiscuous mode [ 940.187925][T19913] veth0_macvtap: entered promiscuous mode [ 940.209707][T19913] veth1_macvtap: entered promiscuous mode [ 940.240328][T19913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 940.279466][T19913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 940.474681][T19913] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.515767][T19913] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.532178][T19913] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.540904][T19913] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.741792][T19729] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 940.825214][T19729] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 940.946369][T19721] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 940.967022][T19721] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 941.574568][T20377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3708'. [ 942.516828][T20384] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 949.634025][ T3690] IPVS: starting estimator thread 0... [ 950.271303][T20510] IPVS: using max 75 ests per chain, 180000 per kthread [ 950.631604][ T10] usb 7-1: new full-speed USB device number 124 using dummy_hcd [ 950.746378][T20522] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3737'. [ 950.883618][T20530] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3737'. [ 951.733295][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 951.744065][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 951.753293][ T10] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 951.763334][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.822432][ T10] usb 7-1: config 0 descriptor?? [ 951.842799][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 951.850151][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 951.893885][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 951.956983][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 951.986603][ T10] usb 7-1: media controller created [ 952.102591][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 952.134222][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 952.140098][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 952.164251][T20511] dvb-usb: bulk message failed: -22 (2/0) [ 952.194781][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input70 [ 952.251481][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 952.252477][T20541] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3741'. [ 952.271426][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 952.314727][T20545] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3741'. [ 952.441743][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 952.451424][ T10] dvb-usb: error while querying for an remote control event. [ 952.631719][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 952.639811][ T10] dvb-usb: error while querying for an remote control event. [ 952.676518][T20548] warning: `syz.7.3742' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 952.861812][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 952.875692][ T10] dvb-usb: error while querying for an remote control event. [ 953.071386][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 953.077683][ T10] dvb-usb: error while querying for an remote control event. [ 953.325524][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 953.367328][ T10] dvb-usb: error while querying for an remote control event. [ 954.312486][ T5821] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 954.336835][ T5821] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 954.401301][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 954.407347][ T5872] dvb-usb: error while querying for an remote control event. [ 954.423020][ T5821] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 954.448427][ T5821] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 954.460615][ T5821] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 954.520550][ T5872] usb 7-1: USB disconnect, device number 124 [ 955.366025][ T5872] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 955.708296][T20573] syz.4.3746 (20573): drop_caches: 2 [ 955.768385][T20573] syz.4.3746 (20573): drop_caches: 2 [ 956.209934][T20589] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 956.491150][T20586] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 956.535783][T20592] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3750'. [ 956.600781][T20561] chnl_net:caif_netlink_parms(): no params data found [ 956.608229][T20592] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3750'. [ 956.701463][ T5821] Bluetooth: hci3: command tx timeout [ 957.005278][T20608] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3751'. [ 957.196934][T19729] bridge_slave_1: left allmulticast mode [ 957.209049][T19729] bridge_slave_1: left promiscuous mode [ 957.237841][T19729] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.266715][T19729] bridge_slave_0: left allmulticast mode [ 957.292543][T19729] bridge_slave_0: left promiscuous mode [ 957.319510][T19729] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.364556][T20199] usb 7-1: new high-speed USB device number 125 using dummy_hcd [ 957.525264][T20199] usb 7-1: Using ep0 maxpacket: 16 [ 957.534223][T20199] usb 7-1: config 1 has an invalid interface number: 230 but max is 0 [ 957.544754][T20199] usb 7-1: config 1 has no interface number 0 [ 957.566886][T20199] usb 7-1: config 1 interface 230 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 957.597729][T20199] usb 7-1: config 1 interface 230 has no altsetting 0 [ 957.628729][T20199] usb 7-1: New USB device found, idVendor=093a, idProduct=2628, bcdDevice=55.d0 [ 957.638041][T20199] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.658275][T20199] usb 7-1: Product: syz [ 957.665204][T20199] usb 7-1: Manufacturer: syz [ 957.669907][T20199] usb 7-1: SerialNumber: syz [ 957.699038][T20610] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 957.711399][T20199] gspca_main: gspca_pac7302-2.14.0 probing 093a:2628 [ 958.084679][T19729] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 958.118938][T19729] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 958.144957][T19729] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 958.157398][T19729] bond0 (unregistering): Released all slaves [ 958.200660][T20628] netlink: 4768 bytes leftover after parsing attributes in process `syz.7.3754'. [ 958.608273][T20199] input: gspca_pac7302 as /devices/platform/dummy_hcd.6/usb7/7-1/input/input71 [ 958.762312][ T5821] Bluetooth: hci3: command tx timeout [ 959.566010][T20199] usb 7-1: USB disconnect, device number 125 [ 959.766218][T20561] bridge0: port 1(bridge_slave_0) entered blocking state [ 960.045818][T20561] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.165421][T20561] bridge_slave_0: entered allmulticast mode [ 960.342967][T20561] bridge_slave_0: entered promiscuous mode [ 960.449306][T19729] tipc: Disabling bearer [ 960.482137][T19729] tipc: Left network mode [ 960.590246][T20561] bridge0: port 2(bridge_slave_1) entered blocking state [ 960.625385][T20561] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.672238][T20561] bridge_slave_1: entered allmulticast mode [ 960.694236][T20561] bridge_slave_1: entered promiscuous mode [ 960.845764][ T5821] Bluetooth: hci3: command tx timeout [ 961.306554][T20561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 961.642096][T20561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 962.092006][T20659] orangefs_mount: mount request failed with -4 [ 962.476857][T20561] team0: Port device team_slave_0 added [ 962.640079][T20682] syz.7.3766 (20682): drop_caches: 2 [ 962.656487][T20682] syz.7.3766 (20682): drop_caches: 2 [ 962.713834][T20561] team0: Port device team_slave_1 added [ 962.921752][ T5821] Bluetooth: hci3: command tx timeout [ 962.985654][T20561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 963.010734][T20561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 963.101274][T20561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 963.128667][T20561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 963.343923][T20561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 963.699428][T20561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 963.943812][T20692] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 963.954273][T20692] batadv_slave_0: entered promiscuous mode [ 963.960172][T20692] batadv_slave_0: entered allmulticast mode [ 964.904208][T19729] hsr_slave_0: left promiscuous mode [ 964.910211][T19729] hsr_slave_1: left promiscuous mode [ 965.265915][T14321] usb 7-1: new high-speed USB device number 126 using dummy_hcd [ 965.423055][T14321] usb 7-1: Using ep0 maxpacket: 16 [ 965.437829][T14321] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 965.609555][T19729] team0 (unregistering): Port device team_slave_1 removed [ 965.690133][T19729] team0 (unregistering): Port device team_slave_0 removed [ 965.691232][T14321] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 965.712824][T14321] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 965.722775][T14321] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 965.732605][T14321] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 965.747496][T14321] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 965.757275][T14321] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 965.765380][T14321] usb 7-1: Manufacturer: syz [ 965.773037][T14321] usb 7-1: config 0 descriptor?? [ 966.053385][T14321] rc_core: IR keymap rc-hauppauge not found [ 966.060350][T14321] Registered IR keymap rc-empty [ 966.167949][T14321] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 966.210285][T14321] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 966.237897][T14321] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 966.310715][T14321] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input72 [ 966.368965][T14321] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 966.411305][T14321] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 966.419808][T20561] hsr_slave_0: entered promiscuous mode [ 966.443444][T20561] hsr_slave_1: entered promiscuous mode [ 966.451544][T14321] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 966.468252][T20561] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 966.501461][T20561] Cannot create hsr debugfs directory [ 966.501865][T14321] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 966.657826][T14321] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 966.684077][T14321] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 966.711284][T14321] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 966.741270][T14321] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 966.811361][T14321] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 966.851384][T14321] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 966.908276][T14321] mceusb 7-1:0.0: Registered with mce emulator interface version 1 [ 966.950196][T14321] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 966.995315][T14321] usb 7-1: USB disconnect, device number 126 [ 969.734036][T19729] IPVS: stop unused estimator thread 0... [ 970.138649][T20561] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 970.347509][T20561] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 970.604266][T20561] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 970.663910][T20561] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 970.885384][T20561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 970.924155][T20561] 8021q: adding VLAN 0 to HW filter on device team0 [ 971.165440][ T6258] bridge0: port 1(bridge_slave_0) entered blocking state [ 971.172631][ T6258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 971.530985][ T6258] bridge0: port 2(bridge_slave_1) entered blocking state [ 971.538101][ T6258] bridge0: port 2(bridge_slave_1) entered forwarding state [ 972.737040][T20561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 972.971801][T20830] 9pnet_fd: Insufficient options for proto=fd [ 975.058566][T20561] veth0_vlan: entered promiscuous mode [ 975.079862][T20561] veth1_vlan: entered promiscuous mode [ 975.142709][T20561] veth0_macvtap: entered promiscuous mode [ 975.161024][T20561] veth1_macvtap: entered promiscuous mode [ 975.202630][T20561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 975.239071][T20561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 975.277234][T20561] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.303224][T20561] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.322584][T20561] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.342468][T20561] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.610090][T19721] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 975.634272][T19721] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 975.674516][T19721] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 976.180538][T19721] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 976.493121][ T30] audit: type=1400 audit(1751467801.685:5440): avc: denied { connect } for pid=20886 comm="syz.4.3810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 976.916677][T20892] syzkaller0: entered allmulticast mode [ 977.554198][T20904] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 979.868315][T20199] usb 7-1: new high-speed USB device number 127 using dummy_hcd [ 980.023202][T20199] usb 7-1: Using ep0 maxpacket: 8 [ 980.045388][T20199] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 980.056296][T20199] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 980.065817][T20199] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.082007][T14321] usb 5-1: new low-speed USB device number 62 using dummy_hcd [ 980.109659][T20199] usb 7-1: Product: syz [ 980.114210][T20199] usb 7-1: Manufacturer: syz [ 980.118821][T20199] usb 7-1: SerialNumber: syz [ 980.134007][T20199] usb 7-1: config 0 descriptor?? [ 980.402683][T14321] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 980.419797][T14321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.446923][T14321] usb 5-1: config 0 descriptor?? [ 980.847651][T20945] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 982.660217][ T5879] usb 7-1: USB disconnect, device number 127 [ 983.492443][T14321] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 983.503508][T14321] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 983.524927][T14321] asix 5-1:0.0: probe with driver asix failed with error -71 [ 983.544655][T14321] usb 5-1: USB disconnect, device number 62 [ 984.011306][T20252] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 984.181305][T20252] usb 7-1: Using ep0 maxpacket: 16 [ 984.205246][T20252] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 984.236906][T20252] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.395612][T20990] syz.7.3841 (20990): drop_caches: 2 [ 985.082358][T20252] usb 7-1: Product: syz [ 985.091235][T20252] usb 7-1: Manufacturer: syz [ 985.095871][T20252] usb 7-1: SerialNumber: syz [ 985.132863][T20252] r8152-cfgselector 7-1: Unknown version 0x0000 [ 985.139148][T20252] r8152-cfgselector 7-1: config 0 descriptor?? [ 985.156304][T20990] syz.7.3841 (20990): drop_caches: 2 [ 985.803081][T20980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 985.821874][T20980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 985.868402][ T5879] r8152-cfgselector 7-1: USB disconnect, device number 2 [ 986.377540][T21013] netlink: 4768 bytes leftover after parsing attributes in process `syz.7.3847'. [ 986.488836][T21009] syzkaller0: entered allmulticast mode [ 991.454810][T21061] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3859'. [ 991.474966][T21062] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3860'. [ 991.575083][T21061] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3859'. [ 991.592366][T21062] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3860'. [ 992.281405][T20199] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 992.407474][T21077] netlink: 'syz.4.3858': attribute type 10 has an invalid length. [ 992.535331][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.543547][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.613544][T20199] usb 9-1: device descriptor read/64, error -71 [ 992.685191][T21086] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 992.931455][T20199] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 993.121285][T20199] usb 9-1: device descriptor read/64, error -71 [ 993.283876][T20199] usb usb9-port1: attempt power cycle [ 993.671816][T20199] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 993.765768][T20199] usb 9-1: device descriptor read/8, error -71 [ 994.062410][T20199] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 994.181381][T20199] usb 9-1: device descriptor read/8, error -71 [ 994.413976][T20199] usb usb9-port1: unable to enumerate USB device [ 995.660310][T20252] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 995.779032][T21128] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3879'. [ 996.211602][T20252] usb 9-1: Using ep0 maxpacket: 32 [ 996.280305][T20252] usb 9-1: config 8 has an invalid interface number: 203 but max is 0 [ 996.410212][T20252] usb 9-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 996.540218][T20252] usb 9-1: config 8 has no interface number 0 [ 996.634746][T20252] usb 9-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a [ 996.646841][T20252] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.659421][T20252] usb 9-1: Product: syz [ 996.664244][T20252] usb 9-1: Manufacturer: syz [ 996.668869][T20252] usb 9-1: SerialNumber: syz [ 996.704409][T21141] fuse: Bad value for 'fd' [ 996.902021][T21148] 9pnet_fd: Insufficient options for proto=fd [ 996.952712][T20252] port100 9-1:8.203: NFC: Could not find bulk-in or bulk-out endpoint [ 996.989026][T20252] usb 9-1: USB disconnect, device number 8 [ 997.056182][ T30] audit: type=1400 audit(1751467822.135:5441): avc: denied { execute_no_trans } for pid=21149 comm="syz.6.3887" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="hugetlbfs" ino=73779 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 997.086223][ C1] vkms_vblank_simulate: vblank timer overrun [ 997.239172][T21153] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3887'. [ 997.688894][T21157] netlink: 'syz.5.3881': attribute type 10 has an invalid length. [ 997.711661][T21157] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 998.645638][T21168] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3891'. [ 998.717614][T21168] bridge6: port 1(veth0_to_bond) entered blocking state [ 998.740151][T21168] bridge6: port 1(veth0_to_bond) entered disabled state [ 998.760207][T21168] veth0_to_bond: entered allmulticast mode [ 998.782152][T21168] veth0_to_bond: entered promiscuous mode [ 999.100379][T21175] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3893'. [ 999.218945][T21178] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3893'. [ 999.511401][T21184] fuse: Bad value for 'fd' [ 999.537231][T21186] tmpfs: Bad value for 'mpol' [ 1000.143197][T21195] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1000.939303][T21206] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3903'. [ 1001.055914][T21206] veth0_to_bond: left allmulticast mode [ 1001.089707][T21206] veth0_to_bond: left promiscuous mode [ 1001.140204][T21206] bridge6: port 1(veth0_to_bond) entered disabled state [ 1001.171362][T21206] bridge7: port 1(veth0_to_bond) entered blocking state [ 1001.178538][T21206] bridge7: port 1(veth0_to_bond) entered disabled state [ 1001.188698][T21206] veth0_to_bond: entered allmulticast mode [ 1001.212857][T21206] veth0_to_bond: entered promiscuous mode [ 1001.829822][T21222] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3908'. [ 1001.917451][T21222] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3908'. [ 1001.929540][T21224] fuse: Bad value for 'fd' [ 1003.556771][T21245] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3916'. [ 1003.577413][T21245] bridge3: port 1(veth0_to_bond) entered blocking state [ 1003.584921][T21245] bridge3: port 1(veth0_to_bond) entered disabled state [ 1003.592281][T21245] veth0_to_bond: entered allmulticast mode [ 1003.600090][T21245] veth0_to_bond: entered promiscuous mode [ 1004.242730][T21255] binder: 21249:21255 ioctl c0306201 200000000540 returned -22 [ 1004.330322][T21256] binder: 21249:21256 ioctl c0306201 200000000640 returned -22 [ 1005.794732][T21282] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.3924'. [ 1006.826158][T21290] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3929'. [ 1006.910926][T21290] veth0_to_bond: left allmulticast mode [ 1007.010186][T21290] veth0_to_bond: left promiscuous mode [ 1007.099217][T21298] netlink: 'syz.7.3928': attribute type 10 has an invalid length. [ 1007.501806][T21290] bridge3: port 1(veth0_to_bond) entered disabled state [ 1008.160907][T21290] bridge4: port 1(veth0_to_bond) entered blocking state [ 1008.187486][T21290] bridge4: port 1(veth0_to_bond) entered disabled state [ 1008.201662][T21290] veth0_to_bond: entered allmulticast mode [ 1008.273623][T21290] veth0_to_bond: entered promiscuous mode [ 1011.098432][T21357] netlink: 'syz.6.3944': attribute type 10 has an invalid length. [ 1011.664310][T21357] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1011.852451][T21367] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3946'. [ 1011.951515][T21367] bridge1: port 1(veth0_to_bond) entered blocking state [ 1011.976614][T21367] bridge1: port 1(veth0_to_bond) entered disabled state [ 1011.993257][T21367] veth0_to_bond: entered allmulticast mode [ 1012.380167][T21374] nfs: Unknown parameter 'fscquencer' [ 1012.505990][T21367] veth0_to_bond: entered promiscuous mode [ 1015.253557][ T10] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 1015.941259][ T10] usb 5-1: device descriptor read/64, error -71 [ 1016.139129][T21434] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3955'. [ 1016.181373][ T10] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 1016.394284][T21436] random: crng reseeded on system resumption [ 1016.939571][ T10] usb 5-1: device descriptor read/64, error -71 [ 1017.083201][ T10] usb usb5-port1: attempt power cycle [ 1017.104043][T21444] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3959'. [ 1017.760509][T21444] bridge1: port 1(veth0_to_bond) entered blocking state [ 1017.811412][T21444] bridge1: port 1(veth0_to_bond) entered disabled state [ 1017.818622][T21444] veth0_to_bond: entered allmulticast mode [ 1017.976248][ T10] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 1018.110332][T21444] veth0_to_bond: entered promiscuous mode [ 1020.550142][ T10] usb 5-1: device descriptor read/8, error -71 [ 1022.285653][T21488] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3976'. [ 1022.324996][T21489] netlink: 'syz.5.3977': attribute type 11 has an invalid length. [ 1022.381820][T21488] veth0_to_bond: left allmulticast mode [ 1022.392578][T21488] veth0_to_bond: left promiscuous mode [ 1022.408549][T21488] bridge1: port 1(veth0_to_bond) entered disabled state [ 1022.448879][T21488] bridge2: port 1(veth0_to_bond) entered blocking state [ 1022.457049][T21488] bridge2: port 1(veth0_to_bond) entered disabled state [ 1022.467162][T21488] veth0_to_bond: entered allmulticast mode [ 1022.507751][T21488] veth0_to_bond: entered promiscuous mode [ 1022.721227][ T10] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1022.865533][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 1022.885926][ T10] usb 5-1: config 8 has an invalid interface number: 203 but max is 0 [ 1022.903093][ T10] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1022.918903][ T10] usb 5-1: config 8 has no interface number 0 [ 1022.925997][ T10] usb 5-1: config 8 interface 203 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1022.937101][ T10] usb 5-1: config 8 interface 203 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1022.964593][ T10] usb 5-1: config 8 interface 203 has no altsetting 0 [ 1022.974055][ T10] usb 5-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a [ 1022.983330][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.427676][ T10] usb 5-1: Product: syz [ 1023.457652][ T10] usb 5-1: Manufacturer: syz [ 1023.474059][ T10] usb 5-1: SerialNumber: syz [ 1023.676637][T21508] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1023.683196][T21508] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1023.689366][T21508] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1023.701581][ T3690] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1023.748227][ T10] port100 5-1:8.203: NFC: Could not find bulk-in or bulk-out endpoint [ 1023.841938][ T10] usb 5-1: USB disconnect, device number 66 [ 1023.857165][T21508] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1023.921271][ T3690] usb 7-1: Using ep0 maxpacket: 16 [ 1023.962295][ T3690] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1023.984405][T21508] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1023.991695][T21508] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1024.004146][ T3690] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1024.029433][ T3690] usb 7-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1024.049683][ T3690] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.075845][ T3690] usb 7-1: Product: syz [ 1024.136650][ T3690] usb 7-1: Manufacturer: syz [ 1024.143495][T21508] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1024.163401][ T3690] usb 7-1: SerialNumber: syz [ 1024.184530][ T3690] usb 7-1: config 0 descriptor?? [ 1024.270908][ T3690] mcba_usb 7-1:0.0: Can't find endpoints [ 1024.551548][T20252] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 1024.822745][T20252] usb 9-1: device descriptor read/64, error -71 [ 1025.111500][T20252] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 1025.263396][T20252] usb 9-1: device descriptor read/64, error -71 [ 1025.345038][T21529] 9pnet_fd: Insufficient options for proto=fd [ 1025.381973][T20252] usb usb9-port1: attempt power cycle [ 1025.561833][ T5819] Bluetooth: hci4: command 0x0405 tx timeout [ 1025.704486][T21536] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3990'. [ 1025.731397][T20252] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 1025.740910][ T5819] Bluetooth: hci2: command 0x0c1a tx timeout [ 1025.882079][T20252] usb 9-1: device descriptor read/8, error -71 [ 1025.911716][T21536] veth0_to_bond: left allmulticast mode [ 1025.917363][T21536] veth0_to_bond: left promiscuous mode [ 1026.430378][ T5819] Bluetooth: hci3: command 0x0405 tx timeout [ 1026.455088][T21536] bridge1: port 1(veth0_to_bond) entered disabled state [ 1026.604418][T21536] bridge2: port 1(veth0_to_bond) entered blocking state [ 1026.612239][T21536] bridge2: port 1(veth0_to_bond) entered disabled state [ 1026.619551][T21536] veth0_to_bond: entered allmulticast mode [ 1026.626776][T21536] veth0_to_bond: entered promiscuous mode [ 1026.663098][T20252] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 1026.734098][T20252] usb 9-1: device descriptor read/8, error -71 [ 1026.839662][ T5872] usb 7-1: USB disconnect, device number 3 [ 1026.901510][T20252] usb usb9-port1: unable to enumerate USB device [ 1027.921365][ T5819] Bluetooth: hci2: command 0x0c1a tx timeout [ 1028.136007][T21563] 9pnet_fd: Insufficient options for proto=fd [ 1028.188887][T21565] binder: BINDER_SET_CONTEXT_MGR already set [ 1028.201935][T21565] binder: 21564:21565 ioctl 4018620d 200000000040 returned -16 [ 1028.441264][ T5819] Bluetooth: hci3: command 0x0405 tx timeout [ 1029.641882][T21578] random: crng reseeded on system resumption [ 1029.961302][ T5819] Bluetooth: hci2: command 0x0c1a tx timeout [ 1030.402575][T21588] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4004'. [ 1030.509584][T21588] veth0_to_bond: left allmulticast mode [ 1030.521565][T21588] veth0_to_bond: left promiscuous mode [ 1030.521665][ T5819] Bluetooth: hci3: command 0x0405 tx timeout [ 1030.527331][T21588] bridge2: port 1(veth0_to_bond) entered disabled state [ 1030.574374][T21588] bridge3: port 1(veth0_to_bond) entered blocking state [ 1030.581766][T21588] bridge3: port 1(veth0_to_bond) entered disabled state [ 1030.589871][T21588] veth0_to_bond: entered allmulticast mode [ 1030.598546][T21588] veth0_to_bond: entered promiscuous mode [ 1030.782963][T21597] binder: 21596:21597 ioctl c0306201 0 returned -14 [ 1031.536987][T21613] Bluetooth: MGMT ver 1.23 [ 1032.478206][T21623] hfsplus: unable to find HFS+ superblock [ 1032.682536][T21627] netlink: 'syz.6.4014': attribute type 10 has an invalid length. [ 1037.871247][T20252] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1038.461258][T20252] usb 7-1: device descriptor read/64, error -71 [ 1039.102579][T20252] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1039.253985][T20252] usb 7-1: device descriptor read/64, error -71 [ 1039.460728][T20252] usb usb7-port1: attempt power cycle [ 1040.421040][T20252] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1041.080102][T20252] usb 7-1: device descriptor read/8, error -71 [ 1042.487728][ T30] audit: type=1400 audit(1751467867.665:5442): avc: denied { write } for pid=21746 comm="syz.8.4057" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1043.383089][T21753] No control pipe specified [ 1046.060652][T20252] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1046.114470][ T30] audit: type=1400 audit(1751467871.295:5443): avc: denied { remount } for pid=21772 comm="syz.4.4067" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1046.501337][T20252] usb 7-1: device descriptor read/64, error -71 [ 1046.994348][T20252] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1047.241844][T20252] usb 7-1: device descriptor read/64, error -71 [ 1047.488722][T20252] usb usb7-port1: attempt power cycle [ 1047.975252][T21797] program syz.7.4073 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1048.098022][T21803] tipc: Enabled bearer , priority 0 [ 1048.221390][T21808] [ 1048.224059][T21808] ============================= [ 1048.228966][T21808] WARNING: suspicious RCU usage [ 1048.234245][T21808] 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 Not tainted [ 1048.241795][T21808] ----------------------------- [ 1048.246987][T21808] net/core/netclassid_cgroup.c:23 suspicious rcu_dereference_check() usage! [ 1048.255856][T21808] [ 1048.255856][T21808] other info that might help us debug this: [ 1048.255856][T21808] [ 1048.266173][T21808] [ 1048.266173][T21808] rcu_scheduler_active = 2, debug_locks = 1 [ 1048.274337][T21808] 1 lock held by syz.6.4078/21808: [ 1048.279445][T21808] #0: ffffffff8e5c3fc0 (rcu_read_lock_trace){....}-{0:0}, at: bpf_prog_test_run_syscall+0x344/0x780 [ 1048.290594][T21808] [ 1048.290594][T21808] stack backtrace: [ 1048.296807][T21808] CPU: 0 UID: 0 PID: 21808 Comm: syz.6.4078 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1048.296840][T21808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1048.296854][T21808] Call Trace: [ 1048.296862][T21808] [ 1048.296870][T21808] dump_stack_lvl+0x16c/0x1f0 [ 1048.296907][T21808] lockdep_rcu_suspicious+0x166/0x260 [ 1048.296942][T21808] task_cls_state+0x1c9/0x1f0 [ 1048.296964][T21808] bpf_get_cgroup_classid_curr+0x1a/0x60 [ 1048.296991][T21808] bpf_prog_841aec7193f618b3+0x1b/0x21 [ 1048.297008][T21808] bpf_prog_test_run_syscall+0x3ad/0x780 [ 1048.297029][T21808] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 1048.297049][T21808] ? fput+0x70/0xf0 [ 1048.297077][T21808] ? __bpf_prog_get+0x97/0x2a0 [ 1048.297098][T21808] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 1048.297117][T21808] __sys_bpf+0x1485/0x4d80 [ 1048.297147][T21808] ? __pfx_futex_wake+0x10/0x10 [ 1048.297171][T21808] ? __pfx___sys_bpf+0x10/0x10 [ 1048.297205][T21808] ? do_futex+0x122/0x350 [ 1048.297233][T21808] ? __pfx_do_futex+0x10/0x10 [ 1048.297269][T21808] ? exc_page_fault+0x5c/0xb0 [ 1048.297297][T21808] ? xfd_validate_state+0x61/0x180 [ 1048.297329][T21808] __x64_sys_bpf+0x78/0xc0 [ 1048.297353][T21808] ? lockdep_hardirqs_on+0x7c/0x110 [ 1048.297377][T21808] do_syscall_64+0xcd/0x4c0 [ 1048.297405][T21808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.297425][T21808] RIP: 0033:0x7f19add8e929 [ 1048.297441][T21808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1048.297460][T21808] RSP: 002b:00007f19aeba5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1048.297478][T21808] RAX: ffffffffffffffda RBX: 00007f19adfb5fa0 RCX: 00007f19add8e929 [ 1048.297492][T21808] RDX: 0000000000000039 RSI: 0000200000000500 RDI: 000000000000000a [ 1048.297505][T21808] RBP: 00007f19ade10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1048.297518][T21808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1048.297529][T21808] R13: 0000000000000000 R14: 00007f19adfb5fa0 R15: 00007ffef4ae4c28 [ 1048.297554][T21808] [ 1049.211294][T20252] tipc: Node number set to 340365865 [ 1053.966542][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.973147][ T1297] ieee802154 phy1 wpan1: encryption failed: -22