last executing test programs: 16.257850779s ago: executing program 1 (id=1276): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x8080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a80000000201010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0xa8}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) 12.246974226s ago: executing program 1 (id=1287): socket$netlink(0x10, 0x3, 0x8000000004) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000095c08a2f000800000014100000e6593f00b598fa92da02e42eec20c95d8b78e5ef0b3fafc58d5636ec3f0facd413584a956e951d175310e1c80227148f85b483439b5d4bcf3b6952fae908eeedd384f80838c458efe312469538e54b0189c8c5e9969b0cd91b645d6dcd0066b343c70d0d1bd6bea5e68c70cb84ec817b6190d87f6829c1ca42ab1204c4c85a5d3c40edb3af184a15e6cba3b1c498ae44f3968066f9f720704a255d4edd3f54346a7762dcab517c02a035bf53e2082c831a2e2eed6d23ed562a546736b459569e8e5dab2a249ff224405affee423a62c8b1f828bd3af2ab4acef7563b87ce0b0acae0718d08a4dcdf4730", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="0100000078000000000005000000180001801400020073797a5f74756e0000"], 0x7c}, 0x1, 0x0, 0x0, 0x44851}, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000008000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000b6a46dfbfde47baa9be8", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_udp_int(r2, 0x11, 0x67, 0x0, 0x0) connect$inet6(r2, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 11.585815415s ago: executing program 3 (id=1289): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x34}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f0000000400000008000000da00", @ANYBLOB="00000000000000000000000000033f4d4b993b", @ANYRES32=0x0, @ANYRES32], 0x48) syz_usb_connect(0x3, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e95b1710720500cbc9bb010203010902340001fb0000000904ca010338e88006090501021000060206090500000002f803070905061000041c0d090705c1"], 0x0) 11.498345204s ago: executing program 1 (id=1290): socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x0, 0x0) (async) r1 = syz_usb_connect$midi(0x3, 0x24, &(0x7f00000064c0)=ANY=[@ANYBLOB="120110030000001063071220400001020301090212000101056006090400000001033003"], &(0x7f0000006780)={0x0, 0x0, 0x8, &(0x7f0000006600)=ANY=[@ANYBLOB="f2ffffffffffffff"]}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) getpid() setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='bic', 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x12, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) read$FUSE(r2, &(0x7f0000000cc0)={0x2020}, 0x2020) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) syz_usbip_server_init(0x6) (async) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x3f, 0x1}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRESHEX=r1, @ANYBLOB="15002dbd7000ffdbdf258300000008000300", @ANYRES32=0x0, @ANYBLOB="1e8108cfdd4900e708697101a538a13c2018dc147a0ff76c0d8c221bf92639fe2796a173a4a8e9cbb7904059ff94325c4e50e6ceffe1af06d881745ef368f7baf51d69766f19897bb3b81e60da5b952bb7c38be0eb32a75617a00776679395f64befd6c7e851caae7f367b2dc025d60fb809132e41a98b739690c67d60ff16326012f0ba19862d84f6e903c1d03b2a9f1cb8b74c861763a59c43dbe1f2c50d3a69cf7ccb4231211ca2c0dae423d56bb4b3f2c6adc9d6e1daec756988ce91b1e040"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000016) (async) ioctl$COMEDI_LOCK(r0, 0x6405) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0x20, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xd, 0xd, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000f0ff466f3b8bf199093cfd8c81769cbe070d255bcdbaab8236b08e87e78737101bf51d969d1b1dc67baf9b15b1a447896b543ae81e95cdd46d67b625bcc901edf021f385791b279a6d162fdba0b93325598b346d5b144b45fe859bdf7b56a70f646df53855440ffd1c374ea7b2af276bf0e901a21be3a65de5329853eca0c20eab307f23000069595e0100000000000000639b8c10eb92cab94cabbf73ff5a1a0259fd53b08eebf8101acf0b329875168f18bfcda3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000100003040000fff30000ea0000000400", @ANYRES32=r6, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11.448276465s ago: executing program 0 (id=1291): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000010c0), &(0x7f0000000c00)=0x8) 11.302645776s ago: executing program 0 (id=1292): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0x10288100, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace(0x8, r2) wait4(r2, 0x0, 0x2, 0x0) 11.231321688s ago: executing program 2 (id=1293): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = semget(0x3, 0x0, 0x4c0) semop(r1, &(0x7f0000000180)=[{0x1, 0xeb, 0x1000}, {0x4, 0x3, 0x1800}, {0x3, 0x9}, {0x0, 0x8d23, 0x800}, {0x1, 0x0, 0x2800}, {0x1, 0x9, 0x800}], 0x6) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = getpgid(0xffffffffffffffff) timer_create(0x4, &(0x7f0000000000)={0x0, 0x1, 0x1, @tid=r2}, &(0x7f0000000100)) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r3, 0xee01, 0xee00) keyctl$setperm(0x5, r3, 0x21081c22) keyctl$search(0xa, r3, &(0x7f00000001c0)='id_resolver\x00', &(0x7f0000000200)={'syz', 0x3}, r3) keyctl$setperm(0x5, r3, 0x4010000) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='GPL\x00'}, 0x94) r6 = syz_open_dev$dri(&(0x7f0000000c00), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETENCODER(r6, 0xc01464a6, &(0x7f0000000100)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x600}) fcntl$getownex(r5, 0x10, &(0x7f0000000140)) 11.198426349s ago: executing program 0 (id=1294): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="34000000ba4efc3ed77a70a31ab9b7283bea6db7ec900b2839499b7d2f8eb8138be100000000", @ANYRES16=0x0, @ANYBLOB="010728bd700000000000450000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x20000021}, 0xd0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0x1, &(0x7f00000001c0)={&(0x7f0000000500)={0xb8, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc}, 0xb8}, 0x1, 0x0, 0x0, 0x24000000}, 0x4c80) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x40080) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r3, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "0fb1484d77a99d49ce26b87f7b25ba48c8748f603ba36d5454aa3a330f19fc6df8a981b3bfb40df5c8effa2d2fee2c8851d3ff36f473fdce4455eddd52af1cf3", 0x1f}, 0x48, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) bpf$LINK_DETACH(0x22, &(0x7f0000000300), 0x4) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendmmsg(r4, &(0x7f00000030c0), 0x0, 0x9200000000004000) sendmmsg(r4, &(0x7f0000002b40), 0x0, 0x8010) recvmmsg$unix(r4, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/211, 0xd3}], 0x1}}], 0x1, 0x40000100, 0x0) socketpair(0x26, 0x800, 0x6, &(0x7f0000000000)) r5 = socket$inet_sctp(0x2, 0x5, 0x84) close(r5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000540)=[@in={0x2, 0x0, @private=0xa010102}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r7) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff7) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="bc00"], 0x50) ioctl$TUNGETVNETLE(r7, 0x40047451, &(0x7f0000000180)) 11.173312153s ago: executing program 4 (id=1295): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d00010000600009040080020300000009210604000122050009058103"], 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x7e, &(0x7f00000002c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x5, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x89, 0x0, @broadcast, @rand_addr, {[@timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}, {@rand_addr, 0x4000000}]}, @cipso={0x86, 0x6}, @timestamp_prespec={0x44, 0x1c, 0x4, 0x3, 0x0, [{@local}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast}]}]}}}}}}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x3) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = open$dir(0x0, 0x111000, 0x91) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$nci(r4, &(0x7f0000000040)=""/71, 0x47) sendmsg$nl_xfrm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@rand_addr=0x64010100, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xa0}, {@in=@multicast1, 0x0, 0x33}, @in6=@local, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = syz_clone(0x25044800, &(0x7f00000005c0)="d1eb3edf36e67c2163dcc760e4ff99469a6a260fef28cf517384d914e5fe9af6a54439760ea123d9414f7e2d25aa3a833ffaacdcc98c84c3b16c5af26946a9f92ff9228ddb54764abdebbf2825bba3da2c3b547d157bac5ddf930fbde7d848", 0x5f, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)="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") ptrace$ARCH_MAP_VDSO_64(0x1e, r5, 0x70d8000, 0x2003) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x98, 0x0, 0xc29, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x26ea}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}]}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, 0x0, &(0x7f0000000080)) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001c"], 0x104}}, 0x0) mkdirat(r1, 0x0, 0xa) ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f0000008bc0)={0x0}) 11.114705166s ago: executing program 2 (id=1296): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'veth1_vlan\x00'}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x4000080) r4 = socket$nl_generic(0x10, 0x3, 0x10) syslog(0x1, &(0x7f0000000380)=""/188, 0xbc) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000041000901feffffff00000000027c0000040042800c00018006000600"], 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x6) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) read$FUSE(r6, &(0x7f0000003ec0)={0x2020}, 0x2020) sendfile(r6, r6, &(0x7f00000000c0)=0x7, 0x6fecb1) 9.686160881s ago: executing program 2 (id=1297): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x20040894) 9.248012999s ago: executing program 1 (id=1298): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'veth1_vlan\x00'}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x4000080) r4 = socket$nl_generic(0x10, 0x3, 0x10) syslog(0x1, &(0x7f0000000380)=""/188, 0xbc) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000041000901feffffff00000000027c0000040042800c00018006000600"], 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x6) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) read$FUSE(r6, &(0x7f0000003ec0)={0x2020}, 0x2020) sendfile(r6, r6, &(0x7f00000000c0)=0x7, 0x6fecb1) 7.230442304s ago: executing program 1 (id=1299): prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) r2 = mmap$IORING_OFF_CQ_RING(0x0, 0x3000, 0x2000003, 0x12, r1, 0x8000000) r3 = syz_io_uring_setup(0xf00, &(0x7f00000005c0)={0x0, 0x595f, 0x10000, 0x0, 0x800004f, 0x0, r1}, 0x0, 0x0, &(0x7f00000000c0)=0x0) syz_ublk_add_dev(r3, 0x0, 0x0, r4, 0x0, 0x0) clock_gettime(0xfffffffffffffffe, 0x0) syz_io_uring_complete(0x0, r2) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r2, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x4, 0xc3c, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x18}}}, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, 0x0, &(0x7f0000000380)={0x0, 0x2, 0x0, 0xfffffffe, 0x257, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x40, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x1000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1, 0x1ec}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 7.166473706s ago: executing program 4 (id=1300): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e0000000400000004"], 0x48) mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x88, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x5c, 0x3, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4c, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x6fbc}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x10c}}, 0x0) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000340)=""/207, 0xcf}], 0x1, 0x0, 0xffffffffffffff74}, 0x20060) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$sock(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000540)="9373740ef2125910181cdfc218cb0078bbdd2438095a27e7c49f9eb35095252b946b19af02660e481fd39063f4d3d500ffcadd4f355338b986b8d0497caf98f6e28908f864dcdb2733202940a08d145bf99e170bd4f2aa420c11c8a53466980668bd96c32069cbead57dca0f19c2b7e644e27b32f566a07f051bda2935d0fa060212fd47dea47c9286553526dddcdf954868660d4dcb5d56750d571624f56d15f53ed192fef88e92a420a86f563cf0d41c4b5d01531c26931ce918b50a02461ef87ee4092d73e36da4286d08e7", 0xcd}, {&(0x7f0000000640)="846db2e7db0e1a565ce4e30ab9107a3a5d9afeaea960f6e3e33abbb45adc95584ea6a6865b8f2125083354c2157b315f959e102485176c364ce8c7dc4dc7cd81fddaa9e8dbd1a7822750d6ff95a2dac9abfa78a928df138c", 0x58}, {&(0x7f0000000940)="a50875f4309572a180d9c8b4ff0b9ed3ab3a1b8a3b53e060de69b578e7168b7b00bb3450a5b5842af35504833487ade78ba5ce78ae53bd2ee01cbadf27b19e3cd45534da65c65c41c00a084babedaa483c75950520d2f6abf4cbd1fef6805343bff07816c3e9b27a6620bc8df8b7bcb2bce4c30492d8880c2d8cd246ad365f1a001e83e40b", 0x85}], 0x3, &(0x7f0000000a40)=[@timestamping={{0x14, 0x1, 0x25, 0x3ff}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0x48}, 0x40000) getsockopt$bt_hci(r4, 0x0, 0x3, &(0x7f0000000fc0)=""/4096, &(0x7f0000001fc0)=0x1000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000037000000000a20000000000a01030000000000000000010000010900010073797a310000000034000000030a01020000000000000000010000000900010073797a310000000008000540fffffffc04"], 0x7c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000000201030000000000000000000a1000040c0019800800020001000000180002"], 0x38}, 0x1, 0x0, 0x0, 0x44008000}, 0x40008d2) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x880000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x28, 0x1404, 0x8, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8}]}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x84}, 0x40010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)=@ipv4_getnetconf={0x2c, 0x52, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@NETCONFA_RP_FILTER={0x8, 0x3, 0x1ff}, @NETCONFA_FORWARDING={0x8, 0x2, 0x1ff}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x10000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x4004) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="0a000000010001", 0x7) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000140)={@mcast1, 0x0}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x300, 0x70bd40, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, 0x9801, 0x40100}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x71516}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xdc6a}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000873}, 0x0) syz_init_net_socket$llc(0x1a, 0x802, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d"], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 7.065673332s ago: executing program 3 (id=1301): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000000c0)={0x330, r0, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x9, 0x66}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x80}, @NL80211_ATTR_FRAME_MATCH={0xf8, 0x5b, "60e82d4763b244efaae60e333061d7a54bc2b969e07ddd7a4d723fdc5ffc94c1004b35a5b74f2b18cb18f5055e6c9e84282934eec0323f4d228d6b7973342dc0140caf274df4a698d789f25b126602826a6cc988edebd0504f1aab22fe331fc281eabe6a2514892a54962d1686fe3f899db15c974b73c62992fc7bb7ae1394b6887dba8e5b43ba802e079c4619a9f83c4eded4eb5eda25f67e5920dc0d639fb0896afbf7a971708966e9229443e1bfd55a6b4d1c3c5695c76d5ebbf2422d61860d4dd90389e468372ca05eac9c17b76326c949289a2cf2af514c5440671ee7ba1d2376c5b18960f3a14c8f7dc227e8275bfe6152"}, @NL80211_ATTR_FRAME_MATCH={0xf5, 0x5b, "6d48e4ceef6ff71c99edd1cdd0ca2c47a22f552fa9adf26261138d94a7a289f1397c8f6dcf2049c3f40ac402e75537df5c96a54b25004b89292598e4af39ed9fc24254c9dd19700e48c3ec4f691a25d7ef6d7986e4ee7258202f888602bd19c78956b9cd66654818c418232edf47f5b1351b2378a33ce899e8c14add1de53b4c7a6e1d6f90faeb7cbba4f3c0a8e2a7b35e4495e69fe2d7362cb933bb1a2b7bc314f411a4c1761f86a790d919aa76e22f551ea42b2ab4ed1e5bd6693a6f91cbc0c57803f8c3a1da530a736ce06e8877a411f8bde482a0d4da2b7456c7d7cab0ae6c749cec7d0401b006507c3ccf56ebdb63"}, @NL80211_ATTR_FRAME_MATCH={0x4b, 0x5b, "ae4c7a357ea3460524bbd6d3980f2dd93fdcddd243ad28d7a2f65a747387ba4bfc259b24cccc4b0cf59539e24d41083f686083addbd95d57c9cdc2e5e71156868ecf629f26018e"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_FRAME_MATCH={0xb, 0x5b, "d5caacaa000692"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}, @NL80211_ATTR_FRAME_MATCH={0xa7, 0x5b, "23ceab7b45d69fa084e2cc76aca428fbb9b79172b1280281a59601a82cba348e9417b739a4881e3fa01075f6e9fe3051d9dbbbf4b823206a7cd6330dcb70122cd279c2a7b4ee865d7aaed953f2b46d1f265a14272be3e90f957ba969fa918e515451c4eeac9eab8980ebf365c427f8d64b764282615236eb55e732090085f25bc00b529a0a1d8f6987b7114806d14cf5861d9529cbe2d69b652ba1324eaf0bb871a12b"}]}, 0x330}, 0x1, 0x0, 0x0, 0xc000}, 0x2000c090) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r0, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r2) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r3, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x51) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000006c0)={r2, 0x10001, 0xfffffffffffffffe, 0x5006}) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4084}, 0x50) write$binfmt_aout(r4, &(0x7f0000000840)={{0x107, 0xf, 0x5, 0x268, 0x113, 0x5, 0x1ff, 0x390}, "f2e7c5c86ca08b7339", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x929) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000001180), 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), r2) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000001700)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001240)={0x454, r6, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x6e}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_IE={0xd5, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x34, 0xd}}, @preq={0x82, 0x78, {{0x0, 0x1, 0x1, 0x0, 0x1}, 0x3, 0xf7, 0x2, @device_a, 0x2, @value, 0x7, 0x3, 0x8, [{{0x0, 0x0, 0x1}, @device_b, 0x1}, {{}, @broadcast, 0x5ba5}, {{0x1, 0x0, 0x1}, @broadcast, 0x4}, {{0x1, 0x0, 0x1}, @device_a, 0xffff}, {{}, @device_a, 0x2}, {{0x1}, @device_b, 0x59}, {{0x1}, @device_a, 0x8000}, {{0x1}, @device_a, 0x3}]}}, @perr={0x84, 0x48, {0x8, 0x4, [{{0x0, 0x1}, @broadcast, 0x0, @value, 0x3c}, {{}, @device_a, 0x0, @void, 0x30}, {{0x0, 0x1}, @broadcast, 0xa, @value=@broadcast, 0x2}, {{0x0, 0x1}, @broadcast, 0x9, @value=@broadcast, 0x29}]}}, @cf={0x4, 0x6, {0x8, 0x0, 0x2, 0x63}}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x24, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0xd9}, {0x8, 0x0, 0x100}, {0x8, 0x0, 0x7}, {0x8, 0x0, 0x4}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x9, 0x1}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x4000}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x324, 0x84, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3ff}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x7}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x3}, @NL80211_BAND_LC={0x8, 0x5, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x80}]}]}, {0x84, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x21, 0x1, @random="2c7ff23412f45c8329dcfbebeac7f8c66ebe269467cc4fe15e600172e4"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xfffffff7}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1f, 0x1, @random="035e4b8c7b0d55792ab85d19e4bae5ae426a92d8e5b2ed2019c648"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}]}, {0x84, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x5}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x40}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x3}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x8}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x3}, @NL80211_BAND_LC={0x8, 0x5, 0xffffffff}, @NL80211_BAND_6GHZ={0x8}, @NL80211_BAND_LC={0x8, 0x5, 0x9}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xb4}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x4}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x5, 0x1, @random='?'}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x3}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xfff}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3ced}]}, {0x64, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="60eec2e59ad6"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="ce7abc9d5812"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="f2add900e909"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x1000}, @NL80211_BAND_LC={0x8, 0x5, 0x6}, @NL80211_BAND_LC={0x8, 0x5, 0x14}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x9}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, {0xa4, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @random="d1e4929fda01"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x44, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x9}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8000}, @NL80211_BAND_LC={0x8, 0x5, 0x5}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x6}, @NL80211_BAND_LC={0x8, 0x5, 0xc}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xfff}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x8af1}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x1}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x3}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7}]}]}, {0x8c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x3}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x1}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x5}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x3}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xc}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x100}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7f}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="a0c44150285a"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x401}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x4}, @NL80211_BAND_6GHZ={0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x7f}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}]}]}, 0x454}, 0x1, 0x0, 0x0, 0x10}, 0x20020000) r7 = dup(r4) pipe2$9p(&(0x7f0000001740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000001b40)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001b00)={&(0x7f00000017c0)={0x30c, r0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x4, 0x71}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x53}, @NL80211_ATTR_FRAME_MATCH={0xbb, 0x5b, "6c97454155d5115b422b601b37886113c25c9ca6d36556eed32e4c89843f34918e9f3e492c2bff922e7563bafc004f4c31f59e5d54dba5fdb82f923c959eeea0a7f08cf684103927c2a60e2853ce1498057054bbf761892601d8e8be9b610fe887a3d5fdd85de67cd5f3a33c31b2de27b2eea46c87a015da070b14663bbe0b22922c29a81a2e1ec2621a68860a5c4aa20c173888430ec58a0e6d25b003ff248ffb02b890281a73edf5712f0f150acb731038dbc0a9165d"}, @NL80211_ATTR_FRAME_MATCH={0x101, 0x5b, "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"}, @NL80211_ATTR_FRAME_MATCH={0x4b, 0x5b, "1ea95ff03ec950ecac9a0ebbb8db751c0475948d933ea2dd96f693e157d398be64776aeea19e1d81f6259894cea2748cf43e4edd9aa2536e6bf3a44e5b92c75d8a787280e4a605"}, @NL80211_ATTR_FRAME_MATCH={0xd0, 0x5b, "3afc8de5213e7b7603a7df1eafc9b3b8a076d79e891d8a62fc48952e706c16c369a6a8faadfc7de962024f190e2a3ecdca7a348a336ff2f44b7687ec5c6e805512edc7ba0dc898946153a7e2b80d1c8c5bce23d9ea92996a2b08cc28e7d46f674fec71afe827b016c4ac3c0cacbd14d2bed2ec381454c9acc5630ca2a7a1f4f07dfd91e17c447c72ab53a302bb79eaf054b9275165cab7e482073215f9e5464712e2542111643c3b62050682adb1a4ffc69ddecd948ae5730a8dc54a43027ec3ba982435c215e69054a457f7"}]}, 0x30c}, 0x1, 0x0, 0x0, 0x40000800}, 0x80) ioctl$SNDCTL_DSP_GETIPTR(r7, 0x800c5011, &(0x7f0000001b80)) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), r2) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000001d00)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x60, r10, 0x4, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1a}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xb2e9}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x10}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x10001}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x46}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8010}, 0x841) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000001ec0)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001d80)={0xe4, r0, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xd0, 0x3, 0x0, 0x1, [{0xcc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xc7, 0x2, "f287e866300e2cacdf2bca6e2481f55577e5e62edaf20d59afe827595a971efa27a5eb093b7a5339132faf97784eb0f6beca6e1b9ec718f63fa03bffa2a174564138c0f4e4dc894a73280ae79e1b3c3504a2959fe85aa118ed471135772c439a505cdbedd0eba08173a24fa04a89a647ae46cd8e63f76c8ee747739bf4e62fc5adfe1b211b159a4097cfbb3f526abb6faa54bf1b6bf24f00049c5a83575507609de1633eb892dc83250fd0ca70490a2f640f6c3ba875c0bd40210b671418fcafd896a6"}}]}]}, 0xe4}}, 0x4841) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000002640)={'wg2\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002700)={r7, 0x58, &(0x7f0000002680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getpeername$packet(r5, &(0x7f0000002740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000002780)=0x14) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000003c40)={0x0, @private, @loopback}, &(0x7f0000003c80)=0xc) getpeername$packet(r4, &(0x7f0000003cc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000003d00)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000004180)={r7, 0x58, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmmsg$inet(r11, &(0x7f0000004280)=[{{&(0x7f0000001f00)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, &(0x7f0000002580)=[{&(0x7f0000001f40)="9acf9cb954eecaeb86878137fd14aeb17310ab6f99c4eea3e797dbe6cc8a3e259bf357d373e530a288b5ceb6d9a5f0013af7f177b5a5536d154d5ef325f39a0aba9eb38a33d2aa8e4f70ea4e4fc80ad37fdf43a29a2ee37d045458cc46d0ed9e8651aec92a9d33bfe4c0aae37d015fad28a8fb984cb626e552a6d29948ee6f0fc5676a555af5d6c16d8dc53233770406172d3083", 0x94}, {&(0x7f0000002000)="090889b7ff9cfb25ae12135c15ac2e6488762f6094ab939f16864cde5dedbcd0532c9553b45d44f23b21999e8a331b45995cdb98c8aa98ad514fddfd681cc1ee95153e477d5693b13e5927d9a3df4974f44ffccfe9639c6aee9021c139aa", 0x5e}, {&(0x7f0000002080)="0c358a965669244983be7a51b6f2f9b773078451567df943a7da0a8216b362b5559bd6388834e65bf4a640da923f3bfa0041b21762f357d272ae59bacd98bc0c1e8a1c5ee1fa91b3ecb271d90407d9a0888c26ebf536e1b801732c047651c4a72a12627236b5f819002bbe6e6d0853657259cc3eb374abdface00096f184f7cbdedfe84fce873dd90161bc2a47e32e749649659d07638d36", 0x98}, {&(0x7f0000002140)="0b9059977835c3cefef3285be08f61a1588e0a807a453e8d5a953ce47f4f2a01a426e1a590cb1180bd6f98638ab607c081ac8e0759fa74439a81eba8e9a8af81e5fdcf0f2bc8218996e4cbb4c3ec9074cc245b14585185e99c3d72ffa48e592b75fd63a1cafbaf9ab04ca154fccb1346d10975c2c4a23b9a990292129a0940ff9b5d1d0611b323df1af837cb0c3bceeb043a5f4cebf4885deb53e60d5faa2bcaed0747c72f4bd9", 0xa7}, {&(0x7f0000002200)="811cdfe0a9b115d6ed0ff7b3507106f43f2f775b1d73ffa4e67c1d52e03d627efeca7c889e2d80f3413c4a2eac4a6087e4676c2aab9b57325bac3afc4e4098c8f19a46d303b3737c21267f81ad95c2f5be8877d1f2d971d09b5144c1f43c8a90a16d47d5db47dade3be8e6e820111ec6fdfcdbbfd2043b87718784ce9e0ad42a83db6bd0fef42b415aa18a5175f4fdbecf468b32b2a00c37d2745900cc0d8b89f0fb6e511204dcda", 0xa8}, {&(0x7f00000022c0)="b88e54bd0ee8d1cbf11c1396af83641ce108848697622011b8eb6ed7a462eb18fa5c434543ebb7da49aa70348edac9ef5af6eff7def5cd3333a7ca33b7a2b762ed4bec89b3a5891ae9383707c528f461293b06b37f0525668683cfaa377c3b162c1bc26f16126fac00a1e25c6651861b2d3de7c8701888b336d56f29f1", 0x7d}, {&(0x7f0000002340)="25d63194df784171569320433455f691e505e5d3946d405b136a862d976d56ac7baf65a28b20c40cf52cbd800b382d440a9d0b76bc8772742942ccdd78a93bdad0e8e032c0725a6fbb01e0bd2ca2e213f94b9348d3bf16fc067e407144dad7fade9bddbe48d662874bd194e5af392580693ac5c284fba947edeedde7f066470aa3656915ef1627232af81e9436714cc740878c47e569c9612d9274a1a130fdaa5a6f621ac27ce2703bb98f95b94af3b6297a19b3dea7766ee20a2b1dc29533c3639d9171e386de75e3b58dc803c7ce808477e2d055676975ab5e055c63da8046e712d743257ea9b3c0b1f9cd0dd84636", 0xf0}, {&(0x7f0000002440)="0f116a0f3ac04773ecd229162956c7d7ea5a82b292f43671cc47f8af501304f129cbaa847d4041975aa28040ea1a43f139b9a1cdea87de588e745e9da18588290e23a7ffa4b6a641946e1a30e0957ba400b6ecfecd929c4170c3f5c78eba0e4b5f308aeee30de881d3ff68ec10c043ab1a2d3a2b40a8a1d673cdf015d4481f33a6b0e31d358aff441007d6b9a62efefcbb810d727a3ac660ad8242aa08ffe0effab75d5efcff71d3fccf1e5835e752a55345e144883431cefb1328b4cc4865448d9d9de7b36e30e5d1ef5ad4", 0xcc}, {&(0x7f0000002540)="78d8822533a920831663f036ee339070291a61def53088e791689d944487", 0x1e}], 0x9, &(0x7f00000027c0)=[@ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @local, @loopback}}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0xb5, [@local, @multicast1, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x2c, 0x48, 0x3, 0xa, [{@multicast1, 0x81}, {@private=0xa010102, 0xfffffffe}, {@empty, 0x1}, {@remote, 0xfffffffc}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x7}]}]}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop, @generic={0x82, 0x3, "0e"}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3c2c3566}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xc}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r14, @rand_addr=0x64010102, @private=0xa010102}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}], 0x140}}, {{&(0x7f0000002900)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000002b80)=[{&(0x7f0000002940)="37419299f986193189011f29a67cc8daea5b840e9a20195a83885fed066095e4dd7251d2b1855bec88b6cb1b2dc442e723af1abbacbeebb771382863104f3e96fa5f7b0eb1b7a13cbe9d999cc7876def3d7edf147fd0e30c38ca71ccbbd3ac3704ddc97dfe641cefe792c8056724966851e73c9088580aaa2fce1547ba85d6d2fc1f8d25f6679e97cbd0936b14ce0d2bbeb2f9f156156ed55cef3c850d89ce3669e1151507ded0e155581d1c03bc44cc7ec52219adbce566c519a5b9a4ddef6a7915b03fe83a2ba442", 0xc9}, {&(0x7f0000002a40)="fe7768ce1f4dd6893c3f433b5af5da0180b32e688bc3f2952b96c7b33d9c85eddde86f03ebbf6cb39bccd4708136b032c8141d6bc4bb093c7a", 0x39}, {&(0x7f0000002a80)="46a5a7e7f8abed497440", 0xa}, {&(0x7f0000002ac0)="f43d768f850090fda34ce6321f43d7b3ed66fb9f0cbc91bb0174be99aabbb7163f23f9d33b24fb00ffb39dbb67db3833844010ea1b59ab79733f75852eefec38cc198031ee25802e2f240133c48db9486f8a0a3f935c2fc170b3742e672c35166e09617e4930f78d04558f58917a479c9853d4f088b347c3bb4c72ea6c3fd3e4ac47c54db20a52d53c", 0x89}], 0x4}}, {{&(0x7f0000002bc0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000003c00)=[{&(0x7f0000002c00)="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", 0x1000}], 0x1, &(0x7f0000003d40)=[@ip_ttl={{0x14, 0x0, 0x2, 0xd}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010101, @rand_addr=0x64010100}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r15, @loopback, @broadcast}}}, @ip_tos_u8={{0x11}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4a4}}, @ip_retopts={{0x44, 0x0, 0x7, {[@end, @timestamp_addr={0x44, 0x2c, 0x7f, 0x1, 0x7, [{@private=0xa010102, 0x7}, {@empty, 0xc9e6}, {@broadcast, 0x2}, {@broadcast, 0x2}, {@broadcast, 0x2}]}, @ssrr={0x89, 0x7, 0x55, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r16, @empty, @broadcast}}}], 0x120}}, {{0x0, 0x0, &(0x7f00000040c0)=[{&(0x7f0000003e80)="ecd6641e8b39d3c85c928b3d0932b97d9ff36709b3db25a3be8a37eaa49eb550b05fce0866ad699bb3cab467dd453b7c5e264a2a81c2d13da5cc47561deaff5a4a7d61e4f5b68ecd9248c99790fcc9ffedb3254446cad8073467939e467850066d21fc5ca7515b4e6bd44f9b219a3221b89700df546577f6ec185e787c07e6f7e648a5928730a3d2e032bc306727761c17cfbeb67d663b1582310b2e58877359d3852bd441c98c7c0d17ca602b18d1fa133e16c5c6dd6780141bc5f3b68546790fd228492bfbee82789bd3e43071426228c4cd4878094be9e08922f3d609ff1b751edb5fb6e542c1817884b8fd95", 0xee}, {&(0x7f0000003f80)="b4af16b254d05ea08a53250cf196c41a22d7be93e7d92268c30c34e00c503faddff6dd3bd8bec4907b5f3f58ec8c8ddc64bc00a1af41db7663141b1d35184b4653bfbc3609b5e4baa0e8f5a9aa06454914ff2b1e3f06fe9eb3f4b163821eb4e7a5899d8ccad3d3b69ee26563fec1a5f2fb103779e7000d318f1ed7c8a08210a0cf37cddb72e9fb22622e146196819f638f9a855be567a7aaa3268ea5ac01317a61ca53bc6f976392f84a4136700556d55bf7a4250d867bc4e458a460a99a7b84b2cb50040c06106c47cfe7be7cd6a275133d577ed11c94c48f829940a6042eb4f180a390", 0xe4}, {&(0x7f0000004080)="fd6f123408e7a928", 0x8}], 0x3, &(0x7f00000041c0)=[@ip_retopts={{0x28, 0x0, 0x7, {[@rr={0x7, 0x17, 0x29, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x11}, @remote, @remote, @private=0xa010100]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r17, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0xc0}}], 0x4, 0x20000080) bpf$TOKEN_CREATE(0x24, &(0x7f0000004380)={0x0, r8}, 0x8) 6.967431864s ago: executing program 0 (id=1302): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000007880)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8000, 0x108) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r2], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r3, @ANYBLOB="fe46e80663431e595850316777c2e06f2004fa9d573e45831e2375e6b2ece9af1cb7b5e0696e4decce0ef48f075e82b4aefd5c8bc7befb56c20c3f39ed73f65c61e841aff6dee076fb097752cee8a7"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000180)={0x0, 0x0, 0xff, 0x0, @vifc_lcl_ifindex=r3, @local}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x8000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x998ed4ed88999c67}, 0x4c840) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b40)=@deltaction={0x274, 0x31, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x372}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x14, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x1597, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3879bad0}}]}, @TCA_ACT_TAB={0x68, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}]}, @TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x235d}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x4041091}, 0x844) socket$unix(0x1, 0x1, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0x100, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'gretap0\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x8, 0x1, 0x3, 0x4, {{0x9, 0x4, 0x3, 0x3c, 0x24, 0x64, 0x0, 0x0, 0x29, 0x0, @private=0xa010102, @empty, {[@noop, @rr={0x7, 0xf, 0xb4, [@loopback, @remote, @local]}]}}}}}) 6.772888622s ago: executing program 3 (id=1303): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000007880)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8000, 0x108) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r2], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r3, @ANYBLOB="fe46e80663431e595850316777c2e06f2004fa9d573e45831e2375e6b2ece9af1cb7b5e0696e4decce0ef48f075e82b4aefd5c8bc7befb56c20c3f39ed73f65c61e841af"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000180)={0x0, 0x0, 0xff, 0x0, @vifc_lcl_ifindex=r3, @local}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x8000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x998ed4ed88999c67}, 0x4c840) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b40)=@deltaction={0x274, 0x31, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x372}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x14, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x1597, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3879bad0}}]}, @TCA_ACT_TAB={0x68, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}]}, @TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x235d}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x4041091}, 0x844) socket$unix(0x1, 0x1, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0x100, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'gretap0\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x8, 0x1, 0x3, 0x4, {{0x9, 0x4, 0x3, 0x3c, 0x24, 0x64, 0x0, 0x0, 0x29, 0x0, @private=0xa010102, @empty, {[@noop, @rr={0x7, 0xf, 0xb4, [@loopback, @remote, @local]}]}}}}}) 6.076479785s ago: executing program 2 (id=1304): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000040)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$adsp1(0xffffffffffffff9c, &(0x7f00000002c0), 0x4624c0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r1, 0x0, 0x4000080) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x3c, 0x7, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x4, &(0x7f0000000140)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x220803) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000003c0)={{0x73, 0xd}, 'port1\x00', 0xf3, 0x1b1c06, 0xfffffff9, 0x20004, 0xb, 0x0, 0x7, 0x0, 0x7, 0x8}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) dup3(r3, r2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000260001031dbd7006fadbdf25010000000400ae80a2a75edfcdda3abae6835fa51fe31e8b5f91e0d523cd36d699dbc797f8c6f29979a6edc36a50e54d92027d5320cac811dba671b8cf34ed0fbb1c6c082b80410cc99c533cf7f7b1b71c67f1a7da57cfb3f51c3f3823e671e4a79e87516f4911dde59b5bc087c96d55b854aee17bd780b24fa225387b07afe82b"], 0x18}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffc72, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x4051}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5319, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0) 6.03961525s ago: executing program 4 (id=1305): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) rmdir(0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x3, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84022, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ptrace(0x10, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYRES16=r4, @ANYBLOB="210324bd70410900000000c1d800"], 0x14}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) recvmmsg(r5, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}, 0xddda}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x60000000}, {{0x0, 0x0, 0x0}, 0x871}, {{0x0, 0x0, 0x0}, 0x6c2}, {{0x0, 0x0, 0x0}, 0x9}], 0x6, 0x20, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10000, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') r6 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x75, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) 4.999802843s ago: executing program 4 (id=1306): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c000000000600"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYRES32], 0x6c}}, 0x40) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a240, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, &(0x7f0000000300)={0x0, 0xf20f, 0x0, 0x2, 0x1b}, &(0x7f0000000200), &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xd1, 0x5, 0x0, 0x31, @dev={0xfe, 0x80, '\x00', 0x20}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x10, 0x8000, 0xfffffff0, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) unshare(0x26020480) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000280)=0x6, 0x8, 0x6) r7 = fsmount(r6, 0x0, 0x0) openat$cgroup_int(r7, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xd) 4.215841948s ago: executing program 3 (id=1307): r0 = socket(0x10, 0x80000, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x1}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0xf2ff, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xa0}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff3, 0xf}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 4.146021971s ago: executing program 2 (id=1308): r0 = syz_open_dev$sndpcmc(&(0x7f00000002c0), 0xb, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000001080)={0x0, [[0x9ef8, 0x0, 0x0, 0x0, 0x20000, 0x2, 0x555], [0x10000, 0x0, 0x7, 0xa84ed6a2, 0x0, 0x0, 0x10], [0x6, 0xffffeffd, 0x3, 0xffffff7f, 0x0, 0x0, 0x0, 0xfffffffe]], '\x00', [{0x0, 0x6}, {0xfffffffd}, {0x0, 0x4}, {0xfffefffe, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x16, 0x0, 0x1, 0x1}, {0x5fff, 0xfffffffa}, {0x2044}, {0x0, 0x100000}, {0x0, 0x3}, {}, {0x80000, 0x1}, {0x8, 0x5}], '\x00', 0x1000}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x27, 0x1, 0x7fffd, 0x1000, {0xc}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f00000000001400010001000000000000000000ffffac"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) set_mempolicy(0x2, &(0x7f0000000040)=0xd, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x40, 0x7, "", [{{0x9, 0x4, 0x0, 0xeb, 0x2, 0x7, 0x1, 0x2, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0xfa, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x5, 0x8, 0x8}}]}}}]}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000300)='squashfs\x00', 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x23, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x9}, {0x0, 0x9}, {0xa, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x200008c4) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="580001042abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="feb0857dbdb5f31a24001280110001006272696467655f736c617665000000000c00058005000a0001000000140003006272696467655f736c6176655f300000"], 0x58}, 0x1, 0x0, 0x0, 0x2404c054}, 0x4040) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) sendmsg$inet(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x50, 0x30, 0x1, 0x0, 0x25dfdbff, {}, [{0x3c, 0x1, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xfffffffe}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0xc) sched_setaffinity(r12, 0x8, &(0x7f00000002c0)=0xfffffffffffffffc) bind$unix(r4, &(0x7f00000003c0)=@abs={0x1}, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f00000005c0)={0x0, @tipc=@name={0x1e, 0x2, 0x3, {{0x43}, 0x2}}, @in={0x2, 0x7ff, @multicast1}, @can={0x1d, r13}, 0x100, 0x0, 0x0, 0x0, 0x726a, &(0x7f0000000540)='vlan1\x00', 0x1ff, 0x58, 0xfff9}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="249a8eb0770f3d4be30c707a2a26cd0000090000000000000000000000001c140000000005001a0002000000000000000000"], 0x24}}, 0x0) 3.707288859s ago: executing program 0 (id=1309): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x5896c10264c034f5) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000000000000020000000000a0443b6fc19ed91cbcf134529ca00000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040f0401000604"], 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4001) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000002f000900000000000000400004000000040019"], 0x18}, 0x1, 0x0, 0x0, 0x8081}, 0x10) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 3.501777558s ago: executing program 4 (id=1310): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) (async) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r4 = gettid() r5 = socket(0x3e, 0x4, 0x6) sendmmsg$unix(r5, &(0x7f0000000bc0)=[{{&(0x7f0000002140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000000700)=[@cred={{0x18, 0x1, 0x2, {r4}}}], 0x18, 0x4c014}}], 0x4c, 0x800) (async) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x76}, "14bffd076773e618d39a90a7ddede0f1cbbfb5400507109f248002f538054f1d79f119c666d26733442cafd720bdb2541415da118792c9c7d05d58719ec0d92263e2739da7bc6b092a07f4122aea955b70195af1efcdf25f4a45cf1e36245c76d420b0a64fd997374c6ac536273d1c80341fe913eb46"}, 0x7a) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x14c}}, 0x0) tkill(r4, 0xb) (async) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040e0b03112003"], 0x7) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xb8}, "a6d5d21d6c0bbb4bab86110cf3559a52fdaa93946320c7a65a466d921992220aced8e792ba6b094e7bb16d9c389eb7679bc53d8a1669544a54b5f667ac703698773dc8140a79d1063edfce150941d0a860eb661c0de5e39d04264f1ec8978463c50c43bcb8c8ecf899c77ce50b10f2fe5ae924d0b9dd1c3b945a4ed8aefe7b24f719250b93dc2b505ab3c170ac51aa3e1ad6d968cafd3a21a924d0ca18132aea18cd8793d719738625682132af98f362627b0da53e8020e2"}, 0xbc) 3.386234753s ago: executing program 3 (id=1311): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0xffffffffffffffff}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) close(0xffffffffffffffff) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x1800, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4138ae84, &(0x7f0000000100)=@x86={0x7b, 0x40, 0x27, 0x0, 0x80000000, 0x5, 0x2, 0x8, 0x8, 0x9, 0xc, 0x7, 0x0, 0x6, 0x8, 0x6, 0x4, 0x4, 0x0, '\x00', 0x8, 0x5}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, &(0x7f0000000000)='discard') bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069003e00000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xa0, &(0x7f000000cf3d)=""/160, 0x0, 0x25, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) 2.295464692s ago: executing program 0 (id=1312): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x34}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f0000000400000008000000da00", @ANYBLOB="00000000000000000000000000033f4d4b993b", @ANYRES32=0x0, @ANYRES32], 0x48) syz_usb_connect(0x3, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e95b1710720500cbc9bb010203010902340001fb0000000904ca010338e88006090501021000060206090500000002f803070905061000041c0d090705c1"], 0x0) 1.305940196s ago: executing program 1 (id=1313): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x62040200) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d000000010902"], 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'nat\x00', 0x7003, [0x80002, 0x40007, 0x1, 0x8af, 0x20a]}, &(0x7f0000000100)=0x54) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}}, 0x0) 832.049872ms ago: executing program 4 (id=1314): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x67, 0x4, 0x20, 0x711, 0x200, 0xd7a6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x10, 0x4, 0x20, 0x5, "", [{{0x9, 0x4, 0x66, 0x25, 0x0, 0x47, 0xb3, 0x4a}}]}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x2f00, &(0x7f00000004c0)={0x0, 0xe8e2, 0x400, 0x20001, 0x2d6}) r3 = open(&(0x7f0000019340)='./file0\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) fcntl$setsig(r3, 0xa, 0x1d) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000019200)={{{@in6=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @multicast2}}, 0x0, @in6=@dev}}, &(0x7f0000019300)=0xe8) ioctl$TUNSETOWNER(r3, 0x400454cc, r4) socketpair(0x0, 0x4, 0x1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000019100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f00000191c0)={&(0x7f0000019080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000019180)={&(0x7f0000019140)={0x34, r6, 0x2, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x2}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x6}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4041}, 0x1) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301002, 0x0) close(r7) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f00000002c0)=[{0x6, 0x3}]}) ioctl$TUNGETVNETLE(r7, 0x40107446, &(0x7f0000000180)) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r9, 0x4004743d, 0x110e22fff6) 824.963514ms ago: executing program 3 (id=1315): open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602220f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x88a00, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x79, 0xfffffffffffffffc, 0x8000, 0x2, 0x10001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 0s ago: executing program 2 (id=1316): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) sendto$inet6(r2, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0xffffffffffffff69, 0x8040, 0x0, 0x0) kernel console output (not intermixed with test programs): _str(full-speed) [ 380.566534][ T9333] vhci_hcd vhci_hcd.0: Device attached [ 380.574436][ T9333] netlink: 'syz.2.947': attribute type 1 has an invalid length. [ 380.582699][ T9333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.947'. [ 380.622498][ T9342] vhci_hcd: connection closed [ 380.622826][ T9334] vhci_hcd: connection closed [ 380.627873][ T9336] vhci_hcd: connection closed [ 380.639736][ T7319] vhci_hcd vhci_hcd.2: stop threads [ 380.654014][ T7319] vhci_hcd vhci_hcd.2: release socket [ 380.659593][ T7319] vhci_hcd vhci_hcd.2: disconnect device [ 380.665974][ T7319] vhci_hcd vhci_hcd.2: stop threads [ 380.671207][ T7319] vhci_hcd vhci_hcd.2: release socket [ 380.677736][ T7319] vhci_hcd vhci_hcd.2: disconnect device [ 380.683553][ T7319] vhci_hcd vhci_hcd.2: stop threads [ 380.688767][ T7319] vhci_hcd vhci_hcd.2: release socket [ 380.694251][ T7319] vhci_hcd vhci_hcd.2: disconnect device [ 381.220817][ T9352] tmpfs: Unknown parameter 'mp' [ 381.593139][ T5782] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 381.599913][ T9] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 381.654923][ T5732] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 381.668355][ T29] audit: type=1400 audit(1784832328.279:756): avc: denied { write } for pid=9357 comm="syz.3.953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 381.784890][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 381.800257][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.810529][ T5732] usb 1-1: Using ep0 maxpacket: 8 [ 381.812124][ T5732] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 381.816931][ T9] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.839653][ T9] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.851152][ T9] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 381.859329][ T5732] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 381.878705][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 381.886297][ T9] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 381.897057][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.907844][ T5732] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 381.918967][ T5732] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.929149][ T5732] usb 1-1: Product: 潄᣹⨗ﴲ䟬⺌䖂ﱻꟳìºè¤®äŒ¸à»ºã‰‰æ‘¸à°¬ãµ¡êººï„…ã¦î°ç¨ˆîœ¸ì‚튿釡⾞ᾃ잮⚟ᘒì¶å­¿é‹¿áªŒï¤«î‰ë‚¥ã’‡êœ¡ä”®ç¦â‰á—“蛣æ‡ç¶´ì¸»ä¹²ã³•í’²à¸ì¹¾ê¨¦è³‘擉繙﹮ࣽ禓儤ⵣ퇀塹쇨ﺅ⢄鯄衧䨊ᣋꪜ쵨䟑ë®ã£®î–˜è¹‡ê·€î²Šë±åŒ¸é¨î¿Šç—ƒå²€ë±‘댅븙刳ç°ë–·åŽŽç›»ê–©ã³ªäƒ¼ê‹ªê’´å‹ƒã”ꜩޚୀ럵滦쪫ዳ䥽 [ 381.965563][ T5732] usb 1-1: Manufacturer: ⯲뽥렯ᗼ [ 381.971074][ T5732] usb 1-1: SerialNumber: à°š [ 382.023814][ T9] usb 5-1: config 0 descriptor?? [ 382.236177][ T5732] usb 1-1: 1:1 : bogus bTerminalLink 7 [ 382.266775][ T5732] usb 1-1: unit 119 not found! [ 382.352198][ T5732] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -16 [ 382.410813][ T5732] usb 1-1: USB disconnect, device number 31 [ 382.661302][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 382.675491][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 382.721094][ T9] usb 5-1: USB disconnect, device number 38 [ 383.855115][ T9367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.954'. [ 389.284293][ T29] audit: type=1400 audit(1784832335.829:757): avc: denied { shutdown } for pid=9396 comm="syz.1.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 389.541634][ T29] audit: type=1400 audit(1784832335.839:758): avc: denied { read write } for pid=9396 comm="syz.1.962" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 389.786430][ T9407] tmpfs: Unknown parameter 'mp' [ 390.506308][ T29] audit: type=1400 audit(1784832335.839:759): avc: denied { open } for pid=9396 comm="syz.1.962" path="/202/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 391.034942][ T5732] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 391.045347][ T804] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 391.184894][ T804] usb 2-1: device descriptor read/64, error -71 [ 391.197090][ T5732] usb 3-1: unable to get BOS descriptor or descriptor too short [ 391.224021][ T5732] usb 3-1: not running at top speed; connect to a high speed hub [ 391.250547][ T5732] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 391.275009][ T5782] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 391.289244][ T5732] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 391.323423][ T5732] usb 3-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 391.350482][ T5732] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.383214][ T5732] usb 3-1: Product: syz [ 391.399802][ T5732] usb 3-1: Manufacturer: syz [ 391.414769][ T5732] usb 3-1: SerialNumber: syz [ 391.445350][ T804] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 391.492503][ T5782] usb 5-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 391.505084][ T5782] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 391.514452][ T5782] usb 5-1: Product: syz [ 391.530348][ T5782] usb 5-1: Manufacturer: syz [ 391.561748][ T5782] usb 5-1: SerialNumber: syz [ 391.605648][ T804] usb 2-1: device descriptor read/64, error -71 [ 391.635843][ T5782] usb 5-1: config 0 descriptor?? [ 391.703645][ T5732] usb 3-1: USB disconnect, device number 28 [ 391.725576][ T804] usb usb2-port1: attempt power cycle [ 391.767498][ T7486] udevd[7486]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 391.864678][ T29] audit: type=1400 audit(1784832338.469:760): avc: denied { read } for pid=9415 comm="syz.4.967" name="btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 391.867535][ T9416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.900794][ T5342] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 391.903605][ T9416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.908727][ T29] audit: type=1400 audit(1784832338.469:761): avc: denied { open } for pid=9415 comm="syz.4.967" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 391.928326][ T5782] peak_usb 5-1:0.0: PEAK-System PCAN-Chip USB v136 fw v233.0.0 (1 channels) [ 391.943482][ T29] audit: type=1400 audit(1784832338.529:762): avc: denied { ioctl } for pid=9415 comm="syz.4.967" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 ioctlcmd=0x4150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 392.127800][ T5342] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 392.137014][ T5342] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.145179][ T5342] usb 1-1: Product: syz [ 392.149382][ T5342] usb 1-1: Manufacturer: syz [ 392.153982][ T5342] usb 1-1: SerialNumber: syz [ 392.241367][ T9425] FAULT_INJECTION: forcing a failure. [ 392.241367][ T9425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 392.254601][ T9425] CPU: 1 UID: 0 PID: 9425 Comm: syz.3.969 Not tainted syzkaller #0 PREEMPT(full) [ 392.254627][ T9425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 392.254638][ T9425] Call Trace: [ 392.254645][ T9425] [ 392.254652][ T9425] dump_stack_lvl+0x100/0x190 [ 392.254745][ T9425] should_fail_ex.cold+0x5/0xa [ 392.254782][ T9425] _copy_from_user+0x2e/0xd0 [ 392.254809][ T9425] sk_setsockopt+0x2f2/0x5d80 [ 392.254837][ T9425] ? __pfx_sk_setsockopt+0x10/0x10 [ 392.254857][ T9425] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 392.254884][ T9425] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 392.254914][ T9425] ? find_held_lock+0x2b/0x80 [ 392.254942][ T9425] ? __fget_files+0x215/0x3d0 [ 392.254963][ T9425] ? selinux_socket_setsockopt+0x6a/0x80 [ 392.254990][ T9425] do_sock_setsockopt+0x193/0x1d0 [ 392.255014][ T9425] __sys_setsockopt+0x195/0x220 [ 392.255037][ T9425] __x64_sys_setsockopt+0xbd/0x160 [ 392.255054][ T9425] ? do_syscall_64+0x90/0x870 [ 392.255072][ T9425] ? lockdep_hardirqs_on+0x78/0x100 [ 392.255099][ T9425] do_syscall_64+0x115/0x870 [ 392.255116][ T9425] ? clear_bhb_loop+0x40/0x90 [ 392.255138][ T9425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.255154][ T9425] RIP: 0033:0x7f888cf9de99 [ 392.255172][ T9425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.255193][ T9425] RSP: 002b:00007f888de00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 392.255210][ T9425] RAX: ffffffffffffffda RBX: 00007f888d226180 RCX: 00007f888cf9de99 [ 392.255221][ T9425] RDX: 0000000000000050 RSI: 0000000000000001 RDI: 0000000000000008 [ 392.255231][ T9425] RBP: 00007f888de00090 R08: 0000000000000010 R09: 0000000000000000 [ 392.255242][ T9425] R10: 0000200000abaff9 R11: 0000000000000246 R12: 0000000000000001 [ 392.255265][ T9425] R13: 00007f888d226218 R14: 00007f888d226180 R15: 00007ffc7452a168 [ 392.255289][ T9425] [ 393.155739][ T804] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 393.163438][ T5342] usb 1-1: config 0 descriptor?? [ 393.166933][ T29] audit: type=1400 audit(1784832338.849:763): avc: denied { connect } for pid=9422 comm="syz.3.969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 393.265505][ T804] usb 2-1: device descriptor read/8, error -71 [ 393.280712][ T5782] peak_usb 5-1:0.0 can0: sending command failure: -8 [ 393.300541][ T5782] peak_usb 5-1:0.0 can0: sending command failure: -8 [ 393.308262][ T5782] peak_usb 5-1:0.0 can0: sending command failure: -8 [ 393.514162][ T9] usb 1-1: USB disconnect, device number 32 [ 393.901790][ T9434] 9pnet_fd: Insufficient options for proto=fd [ 393.904932][ T804] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 393.914193][ T5782] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -8 [ 395.472651][ T804] usb 2-1: device descriptor read/8, error -71 [ 395.585165][ T804] usb usb2-port1: unable to enumerate USB device [ 395.672522][ T29] audit: type=1400 audit(1784832342.279:764): avc: denied { bind } for pid=9440 comm="syz.1.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 395.704108][ T29] audit: type=1400 audit(1784832342.279:765): avc: denied { name_bind } for pid=9440 comm="syz.1.973" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 395.747776][ T29] audit: type=1400 audit(1784832342.279:766): avc: denied { node_bind } for pid=9440 comm="syz.1.973" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 397.170908][ T5778] usb 5-1: USB disconnect, device number 39 [ 397.286645][ T29] audit: type=1400 audit(1784832343.879:767): avc: denied { setopt } for pid=9440 comm="syz.1.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 397.368417][ T9447] netlink: 'syz.1.973': attribute type 2 has an invalid length. [ 397.424346][ T29] audit: type=1400 audit(1784832344.029:768): avc: denied { setopt } for pid=9440 comm="syz.1.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 397.530454][ T9451] netlink: 32 bytes leftover after parsing attributes in process `syz.4.977'. [ 398.214882][ T9453] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 398.271747][ T9453] Cannot find set identified by id 0 to match [ 398.516072][ T804] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 398.684928][ T804] usb 2-1: Using ep0 maxpacket: 16 [ 398.698265][ T804] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 398.712469][ T804] usb 2-1: config 0 has no interface number 0 [ 398.725747][ T804] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 398.742802][ T804] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 398.781018][ T804] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 398.799781][ T804] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 398.833852][ T804] usb 2-1: Product: syz [ 398.846226][ T5342] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 398.856458][ T804] usb 2-1: SerialNumber: syz [ 398.883210][ T804] usb 2-1: config 0 descriptor?? [ 398.923652][ T804] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 398.963669][ T804] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input35 [ 399.004927][ T5342] usb 3-1: Using ep0 maxpacket: 8 [ 399.191893][ T5342] usb 3-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 399.202520][ T5342] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.221995][ T5342] usb 3-1: Product: syz [ 399.226484][ T6579] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 399.252984][ T5342] usb 3-1: Manufacturer: syz [ 399.298460][ T5342] usb 3-1: SerialNumber: syz [ 399.344216][ T5342] usb 3-1: config 0 descriptor?? [ 399.388547][ T5342] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 400.174530][ C1] cm109_urb_ctl_callback: 164 callbacks suppressed [ 400.174557][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 400.188367][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 400.195556][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 400.202682][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 400.210145][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 400.217845][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 400.225200][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 400.232319][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 400.239623][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 400.246972][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 400.260564][ T804] usb 2-1: USB disconnect, device number 46 [ 400.266758][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 400.319901][ T804] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 400.384959][ T5778] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 400.566933][ T5778] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 400.583117][ T5778] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 400.609995][ T5778] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 400.633332][ T5778] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 400.900433][ T804] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 401.019341][ T9476] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 401.025863][ T9476] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 401.034920][ T9476] vhci_hcd vhci_hcd.0: Device attached [ 401.044376][ T9476] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 401.050920][ T9476] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 401.059303][ T9476] vhci_hcd vhci_hcd.0: Device attached [ 401.066184][ T5778] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 401.078878][ T9450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.087004][ T804] usb 2-1: unable to get BOS descriptor or descriptor too short [ 401.087974][ T5778] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.096493][ T804] usb 2-1: not running at top speed; connect to a high speed hub [ 401.111477][ T29] audit: type=1400 audit(1784832347.709:769): avc: denied { setopt } for pid=9470 comm="syz.0.982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 401.111859][ T9450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.134323][ T804] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 401.149182][ T804] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 401.149697][ T5778] usb 4-1: Product: syz [ 401.164953][ T9476] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(8) [ 401.171497][ T9476] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 401.181801][ T804] usb 2-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 401.206211][ T804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.215596][ T9476] vhci_hcd vhci_hcd.0: Device attached [ 401.217813][ T9483] netlink: 'syz.4.984': attribute type 1 has an invalid length. [ 401.221186][ T804] usb 2-1: Product: syz [ 401.229323][ T5778] usb 4-1: Manufacturer: syz [ 401.233902][ T804] usb 2-1: Manufacturer: syz [ 401.238406][ T5778] usb 4-1: SerialNumber: syz [ 401.242619][ T804] usb 2-1: SerialNumber: syz [ 401.267970][ T9476] netlink: 8 bytes leftover after parsing attributes in process `syz.4.984'. [ 401.278056][ T5778] usb 4-1: config 0 descriptor?? [ 401.298100][ T9450] netlink: 'syz.2.976': attribute type 2 has an invalid length. [ 401.321528][ T9450] netlink: 'syz.2.976': attribute type 11 has an invalid length. [ 401.331469][ T9481] vhci_hcd: connection closed [ 401.331642][ T7319] vhci_hcd vhci_hcd.4: stop threads [ 401.332262][ T9479] vhci_hcd: connection closed [ 401.336376][ T7319] vhci_hcd vhci_hcd.4: release socket [ 401.336915][ T7319] vhci_hcd vhci_hcd.4: disconnect device [ 401.342069][ T9477] vhci_hcd: connection closed [ 401.357910][ T9450] netlink: 132 bytes leftover after parsing attributes in process `syz.2.976'. [ 401.375920][ T5732] usb 41-1: new low-speed USB device number 5 using vhci_hcd [ 401.422450][ T5342] gspca_sonixj: reg_w1 err -110 [ 401.456156][ T5342] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 401.476103][ T9478] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 401.762005][ T5778] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 401.779836][ T7319] vhci_hcd vhci_hcd.4: stop threads [ 401.796816][ T7319] vhci_hcd vhci_hcd.4: release socket [ 401.828033][ T7319] vhci_hcd vhci_hcd.4: disconnect device [ 401.857226][ T7319] vhci_hcd vhci_hcd.4: stop threads [ 401.891717][ T7319] vhci_hcd vhci_hcd.4: release socket [ 401.936037][ T7319] vhci_hcd vhci_hcd.4: disconnect device [ 402.002859][ T804] usb 2-1: USB disconnect, device number 47 [ 402.055794][ T24] usb 3-1: USB disconnect, device number 29 [ 402.186072][ T29] audit: type=1400 audit(1784832348.779:770): avc: denied { setopt } for pid=9486 comm="syz.4.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 402.206389][ T29] audit: type=1400 audit(1784832348.779:771): avc: denied { connect } for pid=9486 comm="syz.4.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 402.230574][ T29] audit: type=1400 audit(1784832348.779:772): avc: denied { write } for pid=9486 comm="syz.4.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 402.264858][ T9487] netlink: 16 bytes leftover after parsing attributes in process `syz.4.985'. [ 403.609296][ T9503] f2fs: Unknown parameter 'discardp' [ 404.080040][ T9507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.089045][ T9507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.594718][ T9517] FAULT_INJECTION: forcing a failure. [ 405.594718][ T9517] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 405.608774][ T9517] CPU: 1 UID: 0 PID: 9517 Comm: syz.2.994 Not tainted syzkaller #0 PREEMPT(full) [ 405.608799][ T9517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 405.608809][ T9517] Call Trace: [ 405.608815][ T9517] [ 405.608822][ T9517] dump_stack_lvl+0x100/0x190 [ 405.608850][ T9517] should_fail_ex.cold+0x5/0xa [ 405.608869][ T9517] ? prepare_alloc_pages+0x16d/0x5f0 [ 405.608895][ T9517] should_fail_alloc_page+0xeb/0x140 [ 405.608919][ T9517] prepare_alloc_pages+0x1f0/0x5f0 [ 405.608944][ T9517] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 405.608973][ T9517] ? stack_trace_save+0x8e/0xc0 [ 405.608991][ T9517] ? __pfx_stack_trace_save+0x10/0x10 [ 405.609025][ T9517] ? stack_depot_save_flags+0x27/0x9d0 [ 405.609050][ T9517] ? __lock_acquire+0x49f/0x1a40 [ 405.609073][ T9517] ? __lock_acquire+0x49f/0x1a40 [ 405.609092][ T9517] ? __kasan_slab_free+0x5f/0x80 [ 405.609110][ T9517] ? kfree+0x22b/0x6c0 [ 405.609132][ T9517] ? look_up_lock_class+0x55/0x120 [ 405.609162][ T9517] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 405.609197][ T9517] ? __lock_acquire+0x49f/0x1a40 [ 405.609216][ T9517] ? avc_has_extended_perms+0x33a/0x1080 [ 405.609245][ T9517] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 405.609267][ T9517] ? policy_nodemask+0xed/0x4f0 [ 405.609291][ T9517] alloc_pages_mpol+0x1fb/0x540 [ 405.609313][ T9517] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 405.609335][ T9517] ? do_raw_spin_lock+0x128/0x260 [ 405.609357][ T9517] ? find_held_lock+0x2b/0x80 [ 405.609385][ T9517] ___kmalloc_large_node+0xe5/0x120 [ 405.609409][ T9517] __kmalloc_large_noprof+0x1c/0x70 [ 405.609430][ T9517] ? get_task_mm+0xc7/0xf0 [ 405.609450][ T9517] vhost_dev_set_owner+0x2b6/0xa30 [ 405.609486][ T9517] vhost_net_ioctl+0xfa3/0x1910 [ 405.609511][ T9517] ? do_vfs_ioctl+0x226/0x13e0 [ 405.609536][ T9517] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 405.609559][ T9517] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 405.609584][ T9517] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 405.609616][ T9517] ? __fget_files+0x215/0x3d0 [ 405.609632][ T9517] ? hook_file_ioctl_common+0x140/0x440 [ 405.609659][ T9517] ? selinux_file_ioctl+0xb6/0x290 [ 405.609685][ T9517] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 405.609714][ T9517] __x64_sys_ioctl+0x18e/0x210 [ 405.609745][ T9517] do_syscall_64+0x115/0x870 [ 405.609759][ T9517] ? clear_bhb_loop+0x40/0x90 [ 405.609781][ T9517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.609799][ T9517] RIP: 0033:0x7fe0cfd9de99 [ 405.609816][ T9517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.609832][ T9517] RSP: 002b:00007fe0d0cae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 405.609851][ T9517] RAX: ffffffffffffffda RBX: 00007fe0d0025fa0 RCX: 00007fe0cfd9de99 [ 405.609862][ T9517] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000007 [ 405.609873][ T9517] RBP: 00007fe0d0cae090 R08: 0000000000000000 R09: 0000000000000000 [ 405.609883][ T9517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.609892][ T9517] R13: 00007fe0d0026038 R14: 00007fe0d0025fa0 R15: 00007ffd97710998 [ 405.609916][ T9517] [ 406.507036][ T9520] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 406.513601][ T9520] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 406.585547][ T9520] vhci_hcd vhci_hcd.0: Device attached [ 406.634910][ T5732] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 406.646010][ T9520] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 406.652581][ T9520] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 406.715861][ T9520] vhci_hcd vhci_hcd.0: Device attached [ 406.716033][ T9523] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(9) [ 406.728039][ T9523] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 406.791146][ T9532] netlink: 'syz.2.995': attribute type 1 has an invalid length. [ 406.834981][ T5820] usb 37-1: new low-speed USB device number 7 using vhci_hcd [ 406.877498][ T9523] vhci_hcd vhci_hcd.0: Device attached [ 406.904473][ T9533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.995'. [ 406.959439][ T5778] scsi host1: usb-storage 4-1:0.0 [ 407.037834][ T5778] usb 4-1: USB disconnect, device number 21 [ 407.189674][ T9521] vhci_hcd: connection reset by peer [ 407.196777][ T9530] vhci_hcd: connection closed [ 407.196981][ T9525] vhci_hcd: connection closed [ 407.202514][ T6379] vhci_hcd vhci_hcd.2: stop threads [ 407.229909][ T6379] vhci_hcd vhci_hcd.2: release socket [ 407.266086][ T6379] vhci_hcd vhci_hcd.2: disconnect device [ 407.291873][ T6379] vhci_hcd vhci_hcd.2: stop threads [ 407.307112][ T6379] vhci_hcd vhci_hcd.2: release socket [ 407.336768][ T6379] vhci_hcd vhci_hcd.2: disconnect device [ 407.384941][ T6379] vhci_hcd vhci_hcd.2: stop threads [ 407.391817][ T6379] vhci_hcd vhci_hcd.2: release socket [ 407.412831][ T6379] vhci_hcd vhci_hcd.2: disconnect device [ 408.058054][ T5342] hid-generic 0000:0000:0000.0006: item fetching failed at offset 0/2 [ 408.119067][ T5342] hid-generic 0000:0000:0000.0006: probe with driver hid-generic failed with error -22 [ 408.152371][ T9543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1000'. [ 408.221684][ T9545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1000'. [ 408.290533][ T29] audit: type=1400 audit(1784832354.899:773): avc: denied { write } for pid=9542 comm="syz.2.1000" path="socket:[25946]" dev="sockfs" ino=25946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 408.339988][ T9545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1000'. [ 408.360889][ T9549] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1001'. [ 408.389111][ T9543] bond5: entered promiscuous mode [ 408.427828][ T9543] 8021q: adding VLAN 0 to HW filter on device bond5 [ 408.635859][ T9556] FAULT_INJECTION: forcing a failure. [ 408.635859][ T9556] name failslab, interval 1, probability 0, space 0, times 0 [ 408.734385][ T9556] CPU: 0 UID: 0 PID: 9556 Comm: syz.1.1002 Not tainted syzkaller #0 PREEMPT(full) [ 408.734410][ T9556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 408.734421][ T9556] Call Trace: [ 408.734427][ T9556] [ 408.734434][ T9556] dump_stack_lvl+0x100/0x190 [ 408.734462][ T9556] should_fail_ex.cold+0x5/0xa [ 408.734486][ T9556] should_failslab+0xc2/0x120 [ 408.734506][ T9556] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 408.734525][ T9556] ? __alloc_skb+0x140/0x710 [ 408.734548][ T9556] __alloc_skb+0x140/0x710 [ 408.734563][ T9556] ? __alloc_skb+0x5b7/0x710 [ 408.734592][ T9556] ? __pfx___alloc_skb+0x10/0x10 [ 408.734606][ T9556] ? __asan_memset+0x23/0x50 [ 408.734633][ T9556] ? __alloc_skb+0x4e9/0x710 [ 408.734647][ T9556] ? __alloc_skb+0x5b7/0x710 [ 408.734670][ T9556] create_monitor_ctrl_event+0x3b/0x450 [ 408.734707][ T9556] mgmt_cmd_complete+0x2da/0x5a0 [ 408.734737][ T9556] set_powered+0x48e/0x5e0 [ 408.734759][ T9556] ? __pfx_set_powered+0x10/0x10 [ 408.734779][ T9556] ? __pfx_set_powered+0x10/0x10 [ 408.734797][ T9556] ? __pfx_mgmt_init_hdev+0x10/0x10 [ 408.734814][ T9556] hci_sock_sendmsg+0x154e/0x2620 [ 408.734836][ T9556] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 408.734852][ T9556] ? selinux_socket_sendmsg+0x198/0x2f0 [ 408.734877][ T9556] sock_write_iter+0x53a/0x5b0 [ 408.734899][ T9556] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 408.734914][ T9556] ? __pfx_sock_write_iter+0x10/0x10 [ 408.734942][ T9556] ? bpf_lsm_file_permission+0x9/0x10 [ 408.734966][ T9556] ? security_file_permission+0x76/0x210 [ 408.734995][ T9556] ? rw_verify_area+0xce/0x6d0 [ 408.735022][ T9556] vfs_write+0x6ac/0x1050 [ 408.735047][ T9556] ? __pfx_sock_write_iter+0x10/0x10 [ 408.735080][ T9556] ? __pfx_vfs_write+0x10/0x10 [ 408.735103][ T9556] ? find_held_lock+0x2b/0x80 [ 408.735146][ T9556] ksys_write+0x1f8/0x250 [ 408.735171][ T9556] ? __pfx_ksys_write+0x10/0x10 [ 408.735203][ T9556] do_syscall_64+0x115/0x870 [ 408.735219][ T9556] ? clear_bhb_loop+0x40/0x90 [ 408.735242][ T9556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.735260][ T9556] RIP: 0033:0x7f61a8d9de99 [ 408.735276][ T9556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.735293][ T9556] RSP: 002b:00007f61a9bbb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 408.735311][ T9556] RAX: ffffffffffffffda RBX: 00007f61a9025fa0 RCX: 00007f61a8d9de99 [ 408.735322][ T9556] RDX: 0000000000000007 RSI: 0000200000000040 RDI: 0000000000000004 [ 408.735333][ T9556] RBP: 00007f61a9bbb090 R08: 0000000000000000 R09: 0000000000000000 [ 408.735342][ T9556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.735352][ T9556] R13: 00007f61a9026038 R14: 00007f61a9025fa0 R15: 00007ffcc3209788 [ 408.735375][ T9556] [ 409.621978][ T9559] f2fs: Unknown parameter 'discardp' [ 410.618359][ T29] audit: type=1400 audit(1784832357.229:774): avc: denied { append } for pid=9567 comm="syz.4.1005" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 411.206802][ T29] audit: type=1400 audit(1784832357.819:775): avc: denied { ioctl } for pid=9577 comm="syz.3.1009" path="/dev/ppp" dev="devtmpfs" ino=710 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 411.445632][ T29] audit: type=1400 audit(1784832358.049:776): avc: denied { bind } for pid=9579 comm="syz.4.1011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 411.595289][ T5342] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 411.815767][ T5342] usb 3-1: unable to get BOS descriptor or descriptor too short [ 411.864225][ T5342] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 411.903316][ T5342] usb 3-1: can't read configurations, error -71 [ 412.000177][ T5820] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 413.135075][ T5778] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 413.616017][ T5732] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 413.669825][ T5778] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 413.713850][ T5778] usb 5-1: New USB device found, idVendor=0c45, idProduct=6007, bcdDevice=8e.7d [ 413.757093][ T5778] usb 5-1: New USB device strings: Mfr=69, Product=2, SerialNumber=3 [ 413.791017][ T5778] usb 5-1: Product: syz [ 413.794431][ T5732] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 413.798875][ T5778] usb 5-1: Manufacturer: syz [ 413.837164][ T5732] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.870517][ T5778] usb 5-1: SerialNumber: syz [ 414.681538][ T5732] usb 4-1: config 0 descriptor?? [ 414.718291][ T5778] usb 5-1: config 0 descriptor?? [ 415.749452][ T29] audit: type=1400 audit(1784832362.349:777): avc: denied { write } for pid=9590 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 415.917011][ T5732] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 415.950292][ T5732] [drm:udl_init] *ERROR* Selecting channel failed [ 415.990798][ T5778] gspca_main: sonixb-2.14.0 probing 0c45:6007 [ 416.016319][ T5778] sonixb 5-1:0.0: Error reading register 00: -71 [ 416.102703][ T5778] usb 5-1: USB disconnect, device number 40 [ 416.184754][ T5732] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 416.218433][ T5732] [drm] Initialized udl on minor 2 [ 416.901808][ T9637] f2fs: Unknown parameter 'discardp' [ 417.602352][ T9632] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 417.639206][ T5732] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 417.661551][ T5732] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 417.671428][ T5342] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 417.683567][ T9632] Cannot find set identified by id 0 to match [ 417.742087][ T5732] usb 4-1: USB disconnect, device number 22 [ 417.752831][ T5342] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 417.827539][ T5342] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 417.845100][ T5778] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 417.993971][ T29] audit: type=1400 audit(1784832364.599:778): avc: denied { append } for pid=9640 comm="syz.1.1022" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 418.175415][ T5778] usb 5-1: Using ep0 maxpacket: 16 [ 418.188016][ T5778] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 418.209917][ T29] audit: type=1400 audit(1784832364.709:779): avc: denied { write } for pid=9639 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 418.237898][ T5778] usb 5-1: config 0 has no interface number 0 [ 418.314761][ T5778] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 418.333389][ T5778] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.368479][ T5820] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 418.414759][ T5778] usb 5-1: Product: syz [ 418.427271][ T5778] usb 5-1: Manufacturer: syz [ 418.438383][ T5778] usb 5-1: SerialNumber: syz [ 418.463405][ T5778] usb 5-1: config 0 descriptor?? [ 418.514949][ T5732] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 418.535176][ T5820] usb 1-1: Using ep0 maxpacket: 32 [ 418.545094][ T5778] hub 5-1:0.132: bad descriptor, ignoring hub [ 418.553168][ T5820] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.574174][ T5778] hub 5-1:0.132: probe with driver hub failed with error -5 [ 418.592781][ T5820] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.627394][ T5778] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input36 [ 418.643576][ T5820] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.669005][ T5820] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 418.693501][ T5732] usb 4-1: Using ep0 maxpacket: 16 [ 418.693676][ T5820] usb 1-1: config 0 interface 0 has no altsetting 0 [ 418.717171][ T5732] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 418.757776][ T5732] usb 4-1: config 0 has no interface number 0 [ 418.784849][ T5732] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 418.817901][ T5820] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 418.823512][ T5732] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 418.873197][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.904217][ T9633] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 418.927202][ T5732] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 418.957230][ T9633] overlayfs: missing 'lowerdir' [ 418.965321][ T5732] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 418.995379][ T5732] usb 4-1: Product: syz [ 419.009890][ T5820] usb 1-1: config 0 descriptor?? [ 419.024215][ T5732] usb 4-1: SerialNumber: syz [ 419.110237][ T5732] usb 4-1: config 0 descriptor?? [ 419.124961][ T24] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 419.181057][ T5732] usb 4-1: can't set config #0, error -71 [ 419.221408][ T5732] usb 4-1: USB disconnect, device number 23 [ 419.296754][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 419.312709][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 419.325059][ T24] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.337073][ T24] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.349148][ T24] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 419.363046][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 419.370582][ T24] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 419.380050][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.398696][ T24] usb 3-1: config 0 descriptor?? [ 419.400254][ T9661] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8 sclass=netlink_xfrm_socket pid=9661 comm=syz.0.1023 [ 419.609012][ T29] audit: type=1400 audit(1784832366.219:780): avc: denied { write } for pid=9645 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 419.703837][ T9653] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1024'. [ 419.856854][ T29] audit: type=1400 audit(1784832366.449:781): avc: denied { write } for pid=9640 comm="syz.1.1022" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 420.052169][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 420.113408][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 420.159742][ T29] audit: type=1400 audit(1784832366.749:782): avc: denied { write } for pid=9675 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 420.206457][ T24] usb 3-1: USB disconnect, device number 32 [ 420.238351][ T5778] usb 5-1: USB disconnect, device number 41 [ 420.838223][ T5778] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 421.059602][ T5778] usb 5-1: unable to get BOS descriptor or descriptor too short [ 421.101453][ T5778] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 421.210372][ T5778] usb 5-1: can't read configurations, error -71 [ 421.239076][ T5820] usbhid 1-1:0.0: can't add hid device: -71 [ 421.301995][ T5820] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 421.320229][ T5820] usb 1-1: USB disconnect, device number 33 [ 421.584591][ T29] audit: type=1400 audit(1784832368.189:783): avc: denied { write } for pid=9682 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 422.690534][ T29] audit: type=1400 audit(1784832369.299:784): avc: denied { map } for pid=9708 comm="syz.4.1033" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 422.812165][ T29] audit: type=1400 audit(1784832369.299:785): avc: denied { execute } for pid=9708 comm="syz.4.1033" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 422.969507][ T29] audit: type=1400 audit(1784832369.349:786): avc: denied { write } for pid=9707 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 423.173193][ T9719] f2fs: Unknown parameter 'discardp' [ 424.042870][ T9724] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 424.049437][ T9724] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 424.077023][ T9725] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(7) [ 424.083583][ T9725] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 424.092881][ T9725] vhci_hcd vhci_hcd.0: Device attached [ 424.093154][ T9724] vhci_hcd vhci_hcd.0: Device attached [ 424.196589][ T9732] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(10) [ 424.203250][ T9732] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 424.265700][ T5732] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 424.292823][ T9725] netlink: 'syz.1.1036': attribute type 1 has an invalid length. [ 425.009743][ T9744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1038'. [ 425.103283][ T5732] usb 35-2: new full-speed USB device number 2 using vhci_hcd [ 425.125266][ T24] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 425.224135][ T9732] vhci_hcd vhci_hcd.0: Device attached [ 425.335084][ T9724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1036'. [ 425.391795][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 425.430406][ T9737] vhci_hcd: connection closed [ 425.430666][ T1053] vhci_hcd vhci_hcd.1: stop threads [ 425.432720][ T24] usb 4-1: not running at top speed; connect to a high speed hub [ 425.436757][ T9727] vhci_hcd: connection reset by peer [ 425.462961][ T9726] vhci_hcd: connection closed [ 425.465945][ T1053] vhci_hcd vhci_hcd.1: release socket [ 425.478990][ T1053] vhci_hcd vhci_hcd.1: disconnect device [ 425.480383][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 425.485664][ T1053] vhci_hcd vhci_hcd.1: stop threads [ 425.500762][ T1053] vhci_hcd vhci_hcd.1: release socket [ 425.511087][ T1053] vhci_hcd vhci_hcd.1: disconnect device [ 425.518613][ T1053] vhci_hcd vhci_hcd.1: stop threads [ 425.524543][ T1053] vhci_hcd vhci_hcd.1: release socket [ 425.530690][ T1053] vhci_hcd vhci_hcd.1: disconnect device [ 425.548541][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 426.426326][ T24] usb 4-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 426.449638][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.456822][ T9746] sg_write: data in/out 20006/1 bytes for SCSI command 0xe-- guessing data in; [ 426.456822][ T9746] program syz.4.1040 not setting count and/or reply_len properly [ 426.473522][ T24] usb 4-1: Product: syz [ 426.507719][ T24] usb 4-1: Manufacturer: syz [ 426.523026][ T24] usb 4-1: SerialNumber: syz [ 426.637706][ T29] audit: type=1400 audit(1784832373.249:787): avc: denied { write } for pid=9731 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 426.883563][ T29] audit: type=1400 audit(1784832373.489:788): avc: denied { write } for pid=9759 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 427.107972][ T24] usb 4-1: USB disconnect, device number 24 [ 427.186120][ T5778] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 427.225628][ T7486] udevd[7486]: setting mode of /dev/snd/controlC3 to 020660 failed: No such file or directory [ 427.268919][ T5820] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 427.277323][ T7486] udevd[7486]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 427.385854][ T5778] usb 5-1: unable to get BOS descriptor or descriptor too short [ 427.411412][ T5778] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 427.457357][ T5820] usb 2-1: Using ep0 maxpacket: 32 [ 427.464176][ T5778] usb 5-1: can't read configurations, error -71 [ 427.491922][ T5820] usb 2-1: config 11 has an invalid interface number: 161 but max is 0 [ 427.511062][ T5820] usb 2-1: config 11 has no interface number 0 [ 427.527413][ T5820] usb 2-1: config 11 interface 161 has no altsetting 0 [ 427.550307][ T5820] usb 2-1: New USB device found, idVendor=10d2, idProduct=81d2, bcdDevice=11.e5 [ 427.579510][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.604938][ T5820] usb 2-1: Product: syz [ 427.612068][ T5820] usb 2-1: Manufacturer: syz [ 427.619622][ T5820] usb 2-1: SerialNumber: syz [ 428.144919][ T24] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 428.323243][ T29] audit: type=1400 audit(1784832374.759:789): avc: denied { append } for pid=9777 comm="syz.2.1046" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 428.534545][ T9788] f2fs: Unknown parameter 'discardp' [ 428.907192][ T5820] usblcd 2-1:11.161: USBLCD model not supported. [ 429.442174][ T5820] usb 2-1: USB disconnect, device number 48 [ 429.505048][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 429.540598][ T24] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 429.677577][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.747822][ T9797] f2fs: Unknown parameter 'discardp' [ 429.840993][ T24] usb 1-1: config 0 descriptor?? [ 429.898694][ T9779] loop5: detected capacity change from 0 to 7 [ 430.191491][ T9779] Dev loop5: unable to read RDB block 7 [ 431.168139][ T9779] loop5: AHDI p1 [ 431.234915][ T5732] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 431.251974][ T12] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 431.266731][ T29] audit: type=1400 audit(1784832377.879:790): avc: denied { write } for pid=9767 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.536872][ T9805] tmpfs: Bad value for 'mpol' [ 431.801386][ T9779] loop5: partition table partially beyond EOD, truncated [ 431.809982][ T24] as10x_usb: device has been detected [ 431.954215][ T24] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 432.804699][ T9813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1051'. [ 433.188609][ T29] audit: type=1400 audit(1784832379.799:791): avc: denied { write } for pid=9808 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 433.253285][ T24] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 433.666252][ T804] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 433.902246][ T804] usb 4-1: unable to get BOS descriptor or descriptor too short [ 433.923350][ T24] as10x_usb: error during firmware upload part1 [ 433.956286][ T804] usb 4-1: not running at top speed; connect to a high speed hub [ 433.968480][ T24] Registered device nBox DVB-T Dongle [ 433.977424][ T24] usb 1-1: USB disconnect, device number 34 [ 434.008060][ T804] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 434.064570][ T804] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 434.109707][ T804] usb 4-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 434.152936][ T804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.181208][ T804] usb 4-1: Product: syz [ 434.194904][ T804] usb 4-1: Manufacturer: syz [ 434.200207][ T804] usb 4-1: SerialNumber: syz [ 434.227496][ T24] Unregistered device nBox DVB-T Dongle [ 434.239745][ T24] as10x_usb: device has been disconnected [ 434.345889][ T9] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 434.512785][ T9842] f2fs: Unknown parameter 'discardp' [ 434.563638][ T9843] FAULT_INJECTION: forcing a failure. [ 434.563638][ T9843] name failslab, interval 1, probability 0, space 0, times 0 [ 435.027630][ T9843] CPU: 0 UID: 0 PID: 9843 Comm: syz.4.1059 Not tainted syzkaller #0 PREEMPT(full) [ 435.027658][ T9843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 435.027670][ T9843] Call Trace: [ 435.027676][ T9843] [ 435.027684][ T9843] dump_stack_lvl+0x100/0x190 [ 435.027714][ T9843] should_fail_ex.cold+0x5/0xa [ 435.027738][ T9843] should_failslab+0xc2/0x120 [ 435.027762][ T9843] __kmalloc_noprof+0xfc/0x820 [ 435.027782][ T9843] ? constrain_params_by_rules+0x175/0xd20 [ 435.027815][ T9843] constrain_params_by_rules+0x175/0xd20 [ 435.027839][ T9843] ? __pfx___schedule+0x10/0x10 [ 435.027872][ T9843] ? irqentry_exit+0x24d/0xa00 [ 435.027889][ T9843] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 435.027912][ T9843] ? irqentry_exit+0x24d/0xa00 [ 435.027943][ T9843] ? rcu_is_watching+0x12/0xc0 [ 435.027970][ T9843] ? snd_interval_refine+0x2d0/0x580 [ 435.027993][ T9843] snd_pcm_hw_refine+0x82a/0xb40 [ 435.028022][ T9843] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 435.028050][ T9843] ? __kasan_kmalloc+0xaa/0xb0 [ 435.028072][ T9843] ? __asan_memset+0x23/0x50 [ 435.028099][ T9843] ? _snd_pcm_hw_param_min+0x1ea/0x670 [ 435.028127][ T9843] snd_pcm_oss_change_params_locked+0x2594/0x39f0 [ 435.028162][ T9843] ? snd_pcm_oss_write+0x49a/0xa30 [ 435.028189][ T9843] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 435.028217][ T9843] ? __pfx___mutex_lock+0x10/0x10 [ 435.028245][ T9843] ? trace_hrtimer_start+0x77/0x220 [ 435.028275][ T9843] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 435.028302][ T9843] snd_pcm_oss_write+0x4bb/0xa30 [ 435.028329][ T9843] ? bpf_lsm_file_permission+0x9/0x10 [ 435.028398][ T9843] ? security_file_permission+0x76/0x210 [ 435.028432][ T9843] vfs_write+0x2aa/0x1050 [ 435.028459][ T9843] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 435.028485][ T9843] ? __pfx_vfs_write+0x10/0x10 [ 435.028508][ T9843] ? find_held_lock+0x2b/0x80 [ 435.028535][ T9843] ? __fget_files+0x215/0x3d0 [ 435.028552][ T9843] ? __fget_files+0x215/0x3d0 [ 435.028573][ T9843] ? __fget_files+0x21f/0x3d0 [ 435.028597][ T9843] ksys_write+0x12a/0x250 [ 435.028622][ T9843] ? __pfx_ksys_write+0x10/0x10 [ 435.028656][ T9843] do_syscall_64+0x115/0x870 [ 435.028689][ T9843] ? clear_bhb_loop+0x40/0x90 [ 435.028711][ T9843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.028730][ T9843] RIP: 0033:0x7f8f9879de99 [ 435.028745][ T9843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.028762][ T9843] RSP: 002b:00007f8f9963d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 435.028780][ T9843] RAX: ffffffffffffffda RBX: 00007f8f98a26090 RCX: 00007f8f9879de99 [ 435.028792][ T9843] RDX: 000000000000ff51 RSI: 00002000000012c0 RDI: 0000000000000008 [ 435.028802][ T9843] RBP: 00007f8f9963d090 R08: 0000000000000000 R09: 0000000000000000 [ 435.028812][ T9843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.028822][ T9843] R13: 00007f8f98a26128 R14: 00007f8f98a26090 R15: 00007ffdc58e4b38 [ 435.028845][ T9843] [ 435.783128][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.798019][ T9] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 435.825992][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.162979][ T9] usb 3-1: config 0 descriptor?? [ 436.251005][ T804] usb 4-1: USB disconnect, device number 25 [ 436.340553][ T29] audit: type=1400 audit(1784832382.949:792): avc: denied { write } for pid=9822 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 436.345398][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 436.366768][ T7486] udevd[7486]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 436.479808][ T29] audit: type=1400 audit(1784832383.089:793): avc: denied { write } for pid=9865 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 436.716473][ T804] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 436.828915][ T9872] f2fs: Unknown parameter 'discardp' [ 436.956669][ T9] pwc: send_video_command error -71 [ 437.118174][ T804] usb 4-1: unable to get BOS descriptor or descriptor too short [ 437.263239][ T804] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 437.320800][ T804] usb 4-1: can't read configurations, error -71 [ 437.815003][ T24] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 437.998378][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 438.013210][ T24] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 438.069420][ T24] usb 5-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=6a.b1 [ 438.096477][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.172832][ T24] usb 5-1: Product: syz [ 438.209995][ T24] usb 5-1: Manufacturer: syz [ 438.261183][ T24] usb 5-1: SerialNumber: syz [ 438.382351][ T24] usb 5-1: config 0 descriptor?? [ 438.791792][ T9] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 439.023373][ T9] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 439.040728][ T9] usb 3-1: USB disconnect, device number 33 [ 439.084082][ T9882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.293252][ T9882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.340939][ T24] usb 5-1: USB disconnect, device number 46 [ 440.430583][ T9891] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1069'. [ 440.808615][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.817319][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.926918][ T9918] FAULT_INJECTION: forcing a failure. [ 442.926918][ T9918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 442.962078][ T9918] CPU: 0 UID: 0 PID: 9918 Comm: syz.2.1077 Not tainted syzkaller #0 PREEMPT(full) [ 442.962103][ T9918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 442.962128][ T9918] Call Trace: [ 442.962134][ T9918] [ 442.962141][ T9918] dump_stack_lvl+0x100/0x190 [ 442.962170][ T9918] should_fail_ex.cold+0x5/0xa [ 442.962191][ T9918] _copy_from_user+0x2e/0xd0 [ 442.962212][ T9918] copy_msghdr_from_user+0x9f/0x4c0 [ 442.962239][ T9918] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 442.962267][ T9918] ? rcu_is_watching+0x12/0xc0 [ 442.962289][ T9918] ? ___sys_recvmsg+0x177/0x1a0 [ 442.962311][ T9918] ? kfree+0x1e5/0x6c0 [ 442.962339][ T9918] ___sys_recvmsg+0xdd/0x1a0 [ 442.962364][ T9918] ? __pfx____sys_recvmsg+0x10/0x10 [ 442.962406][ T9918] ? __pfx___might_resched+0x10/0x10 [ 442.962432][ T9918] do_recvmmsg+0x2f3/0x740 [ 442.962458][ T9918] ? __pfx_do_recvmmsg+0x10/0x10 [ 442.962487][ T9918] ? __mutex_unlock_slowpath+0x35d/0x930 [ 442.962511][ T9918] ? __fget_files+0x21f/0x3d0 [ 442.962532][ T9918] __x64_sys_recvmmsg+0x22a/0x280 [ 442.962554][ T9918] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 442.962580][ T9918] do_syscall_64+0x115/0x870 [ 442.962596][ T9918] ? clear_bhb_loop+0x40/0x90 [ 442.962617][ T9918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.962636][ T9918] RIP: 0033:0x7fe0cfd9de99 [ 442.962651][ T9918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.962666][ T9918] RSP: 002b:00007fe0d0cae028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 442.962684][ T9918] RAX: ffffffffffffffda RBX: 00007fe0d0025fa0 RCX: 00007fe0cfd9de99 [ 442.962695][ T9918] RDX: 03ffffffffffff67 RSI: 0000200000002440 RDI: 0000000000000005 [ 442.962705][ T9918] RBP: 00007fe0d0cae090 R08: 0000000000000000 R09: 0000000000000000 [ 442.962714][ T9918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 442.962723][ T9918] R13: 00007fe0d0026038 R14: 00007fe0d0025fa0 R15: 00007ffd97710998 [ 442.962745][ T9918] [ 443.359308][ T29] audit: type=1400 audit(1784832389.969:794): avc: denied { getopt } for pid=9922 comm="syz.0.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 444.179838][ T29] audit: type=1400 audit(1784832390.509:795): avc: denied { read write } for pid=9929 comm="syz.2.1080" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 444.779760][ T29] audit: type=1400 audit(1784832390.509:796): avc: denied { open } for pid=9929 comm="syz.2.1080" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 444.803942][ T29] audit: type=1400 audit(1784832390.519:797): avc: denied { create } for pid=9929 comm="syz.2.1080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 444.988700][ T29] audit: type=1400 audit(1784832390.559:798): avc: denied { sys_admin } for pid=9929 comm="syz.2.1080" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 445.348541][ T9] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 445.503242][ T9944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1084'. [ 445.515262][ T9944] bridge_slave_1: left allmulticast mode [ 445.522964][ T9944] bridge_slave_1: left promiscuous mode [ 445.536683][ T9944] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.747105][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 445.919111][ T9946] efs: cannot read volume header [ 446.073577][ T9944] bridge_slave_0: left allmulticast mode [ 446.079308][ T9944] bridge_slave_0: left promiscuous mode [ 446.085995][ T9944] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.792760][ T9] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 446.808825][ T9] usb 3-1: config 0 has no interface number 0 [ 446.832473][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 446.842969][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.852866][ T9] usb 3-1: Product: syz [ 446.864526][ T9] usb 3-1: Manufacturer: syz [ 446.889500][ T9] usb 3-1: SerialNumber: syz [ 446.918878][ T9] usb 3-1: config 0 descriptor?? [ 446.938554][ T9] hub 3-1:0.132: bad descriptor, ignoring hub [ 446.952091][ T9] hub 3-1:0.132: probe with driver hub failed with error -5 [ 446.974977][ T5820] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 446.993722][ T9] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.132/input/input37 [ 447.375027][ T5820] usb 1-1: Using ep0 maxpacket: 16 [ 447.387586][ T5820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 447.403863][ T5820] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 447.426806][ T5820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.446246][ T5820] usb 1-1: Product: syz [ 447.481204][ T5820] usb 1-1: Manufacturer: syz [ 447.501987][ T5820] usb 1-1: SerialNumber: syz [ 447.526986][ T5820] usb 1-1: config 0 descriptor?? [ 447.550536][ T5820] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 447.575522][ T5820] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 447.597604][ T9940] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 447.632204][ T9940] overlayfs: missing 'lowerdir' [ 447.977471][ T24] usb 3-1: USB disconnect, device number 34 [ 448.155127][ T5820] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 448.194740][ T9962] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 449.395950][ T9964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1090'. [ 449.596672][ T29] audit: type=1400 audit(1784832396.199:799): avc: denied { setattr } for pid=9969 comm="syz.4.1092" name="NETLINK" dev="sockfs" ino=27780 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 449.703161][ T5820] em28xx 1-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 449.985027][ T5820] em28xx 1-1:0.0: board has no eeprom [ 450.173280][ T5820] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 450.203498][ T5820] em28xx 1-1:0.0: dvb set to bulk mode. [ 450.227734][ T9] em28xx 1-1:0.0: Binding DVB extension [ 450.274603][ T5820] usb 1-1: USB disconnect, device number 35 [ 450.334233][ T5820] em28xx 1-1:0.0: Disconnecting em28xx [ 450.551555][ T9] em28xx 1-1:0.0: Registering input extension [ 450.662125][ T5820] em28xx 1-1:0.0: Closing input extension [ 451.422204][ T5820] em28xx 1-1:0.0: Freeing device [ 452.038448][T10003] block device autoloading is deprecated and will be removed. [ 453.632585][ T29] audit: type=1400 audit(1784832400.239:800): avc: denied { write } for pid=10016 comm="syz.4.1105" name="btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 454.214975][ T9] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 454.485757][ T29] audit: type=1400 audit(1784832400.969:801): avc: denied { getattr } for pid=10033 comm="syz.0.1109" name="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 454.573143][T10036] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1108'. [ 454.592360][ T9] usb 2-1: device descriptor read/64, error -71 [ 455.107586][T10042] autofs: Unknown parameter 'øÙ³{¢D’xÿ×áϹ|à^N½ZÅz7\øO#Cêq"–1o¯©P»ÌìíߧI*s‰•ì'$ D“êb§À¤ƒ a}c]µlÈ [ 455.107586][T10042] ƒˆ_“†Tˆó‹«\Ò„AK7¯ÂâIû²½øpMJ‹£´ešÂ-ûe{ŒHÆþtÚNnÇþMqTr…XX{øü®¼÷•Õ&ø(båã²€çéÐ¥qºHÒ©ÚÖ’JDBGQã¥åxU“{&e_HÐã!.-EèÈyõÍÿã´{ÑÊ4'ŒCï±²ð¤$ØÈ59”ó-ÕÇPoâü]ó"sŸÍÃ:lc' [ 456.133848][ T5782] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 456.169175][ T9] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 456.503750][T10045] syzkaller0: entered promiscuous mode [ 456.522955][T10045] syzkaller0: entered allmulticast mode [ 456.565271][ T9] usb 2-1: device descriptor read/64, error -71 [ 456.584961][ T5782] usb 1-1: Using ep0 maxpacket: 16 [ 456.603174][ T5782] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.622271][ T5782] usb 1-1: config 0 interface 0 has no altsetting 0 [ 456.633878][ T5782] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 456.652884][ T5782] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.676378][ T9] usb usb2-port1: attempt power cycle [ 456.683068][ T5782] usb 1-1: config 0 descriptor?? [ 457.163232][ T5782] nzxt-smart2 0003:1E71:2009.0007: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 457.516591][ T29] audit: type=1400 audit(1784832404.129:802): avc: denied { read } for pid=10033 comm="syz.0.1109" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 457.707091][T10053] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1112'. [ 458.225177][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 458.369688][T10060] FAULT_INJECTION: forcing a failure. [ 458.369688][T10060] name failslab, interval 1, probability 0, space 0, times 0 [ 458.383989][T10060] CPU: 1 UID: 0 PID: 10060 Comm: syz.1.1116 Not tainted syzkaller #0 PREEMPT(full) [ 458.384014][T10060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 458.384025][T10060] Call Trace: [ 458.384031][T10060] [ 458.384038][T10060] dump_stack_lvl+0x100/0x190 [ 458.384063][T10060] should_fail_ex.cold+0x5/0xa [ 458.384085][T10060] should_failslab+0xc2/0x120 [ 458.384106][T10060] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 458.384125][T10060] ? __alloc_skb+0x5b7/0x710 [ 458.384141][T10060] ? __alloc_skb+0x140/0x710 [ 458.384160][T10060] __alloc_skb+0x140/0x710 [ 458.384174][T10060] ? __alloc_skb+0x5b7/0x710 [ 458.384189][T10060] ? __pfx___alloc_skb+0x10/0x10 [ 458.384201][T10060] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 458.384224][T10060] ? sock_has_perm+0x25a/0x2f0 [ 458.384242][T10060] ? __pfx_sock_has_perm+0x10/0x10 [ 458.384263][T10060] netlink_alloc_large_skb+0x69/0x150 [ 458.384291][T10060] netlink_sendmsg+0x680/0xda0 [ 458.384318][T10060] ? __pfx_netlink_sendmsg+0x10/0x10 [ 458.384343][T10060] ? selinux_socket_sendmsg+0x198/0x2f0 [ 458.384369][T10060] __sys_sendto+0x48b/0x4e0 [ 458.384384][T10060] ? __pfx_netlink_sendmsg+0x10/0x10 [ 458.384409][T10060] ? __pfx___sys_sendto+0x10/0x10 [ 458.384429][T10060] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 458.384465][T10060] __x64_sys_sendto+0xe0/0x1c0 [ 458.384481][T10060] ? do_syscall_64+0x90/0x870 [ 458.384497][T10060] ? lockdep_hardirqs_on+0x78/0x100 [ 458.384521][T10060] do_syscall_64+0x115/0x870 [ 458.384535][T10060] ? clear_bhb_loop+0x40/0x90 [ 458.384570][T10060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.384587][T10060] RIP: 0033:0x7f61a8d5e6ce [ 458.384601][T10060] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 458.384617][T10060] RSP: 002b:00007f61a9b98e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 458.384633][T10060] RAX: ffffffffffffffda RBX: 00007f61a9b9a6c0 RCX: 00007f61a8d5e6ce [ 458.384643][T10060] RDX: 0000000000000020 RSI: 00007f61a9b99000 RDI: 0000000000000004 [ 458.384653][T10060] RBP: 0000000000000000 R08: 00007f61a9b98f04 R09: 000000000000000c [ 458.384662][T10060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 458.384672][T10060] R13: 00007f61a9b98f58 R14: 00007f61a9b99000 R15: 0000000000000000 [ 458.384694][T10060] [ 458.645267][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 458.653537][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 458.674250][ T24] usb 1-1: USB disconnect, device number 36 [ 458.681757][ T9] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.693787][ T9] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.703720][ T9] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 458.716684][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 458.723344][ T9] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 458.820219][ T29] audit: type=1400 audit(1784832405.409:803): avc: denied { module_load } for pid=10061 comm="syz.4.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 458.879724][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.929026][ T9] usb 4-1: config 0 descriptor?? [ 458.942938][ T29] audit: type=1400 audit(1784832405.549:804): avc: denied { accept } for pid=10064 comm="syz.0.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 459.065137][ T29] audit: type=1400 audit(1784832405.669:805): avc: denied { setopt } for pid=10064 comm="syz.0.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 459.305015][ T5820] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 459.359796][T10080] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1115'. [ 459.468103][ T5820] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 459.478414][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.504730][ T5820] pvrusb2: Hardware description: Terratec Grabster AV400 [ 459.515218][ T5820] pvrusb2: ********** [ 459.521445][ T5820] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 459.534883][ T5820] pvrusb2: Important functionality might not be entirely working. [ 459.548261][ T5820] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 459.561466][ T5820] pvrusb2: ********** [ 459.614960][ T5778] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 459.699253][ T2363] pvrusb2: Invalid write control endpoint [ 459.800262][ T2363] pvrusb2: Invalid write control endpoint [ 459.820532][ T2363] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 459.835667][ T2363] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 459.843785][ T2363] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 459.853959][ T2363] pvrusb2: Device being rendered inoperable [ 459.863567][ T2363] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 459.870759][ T2363] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 459.879305][ T2363] pvrusb2: Attached sub-driver cx25840 [ 459.886432][ T2363] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 459.897486][ T2363] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 460.183909][ T5778] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 460.207890][ T5778] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 460.238035][ T5778] usb 5-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=6a.b1 [ 460.322389][ T5778] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.351383][ T5778] usb 5-1: Product: syz [ 460.356574][ T5778] usb 5-1: Manufacturer: syz [ 460.363060][ T5778] usb 5-1: SerialNumber: syz [ 460.377776][ T5778] usb 5-1: config 0 descriptor?? [ 460.635891][T10079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.674403][T10079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.716298][ T24] usb 5-1: USB disconnect, device number 47 [ 461.047753][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 461.062352][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 461.098181][ T9] usb 4-1: USB disconnect, device number 28 [ 461.551200][T10100] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1125'. [ 461.794209][ T9] usb 1-1: USB disconnect, device number 37 [ 461.887862][T10104] netlink: 'syz.2.1126': attribute type 1 has an invalid length. [ 461.927572][T10104] 8021q: adding VLAN 0 to HW filter on device bond6 [ 462.042367][ T29] audit: type=1400 audit(1784832408.649:806): avc: denied { ioctl } for pid=10102 comm="syz.4.1127" path="socket:[27404]" dev="sockfs" ino=27404 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 462.138962][ T29] audit: type=1400 audit(1784832408.719:807): avc: denied { write } for pid=10109 comm="syz.0.1128" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 462.302564][T10117] netlink: 'syz.2.1130': attribute type 1 has an invalid length. [ 463.101690][T10117] 8021q: adding VLAN 0 to HW filter on device bond7 [ 463.697576][T10127] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1132'. [ 463.707167][T10127] netlink: 'syz.0.1132': attribute type 2 has an invalid length. [ 463.716961][T10127] usb usb8: usbfs: process 10127 (syz.0.1132) did not claim interface 0 before use [ 464.512097][T10131] netlink: 16142 bytes leftover after parsing attributes in process `syz.3.1133'. [ 464.533427][ T29] audit: type=1400 audit(1784832411.139:808): avc: denied { bind } for pid=10130 comm="syz.3.1133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 464.625017][ T24] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 464.947555][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 464.957413][T10135] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 464.968645][ T24] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 464.982289][ T24] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 465.004883][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 465.047558][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 465.072096][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 465.096072][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 465.167754][ T24] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 465.185576][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.212233][ T24] usb 3-1: config 0 descriptor?? [ 465.785345][T10143] f2fs: Unknown parameter 'discardp' [ 466.340558][ T24] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 35 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 467.507895][ T24] usb 3-1: USB disconnect, device number 35 [ 467.699065][ T24] usblp0: removed [ 467.936584][T10156] syz_tun: entered allmulticast mode [ 468.005542][ T24] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 468.655115][ T24] usb 3-1: device descriptor read/64, error -71 [ 468.713728][T10161] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1144'. [ 468.801290][T10154] syz_tun: left allmulticast mode [ 468.890554][T10164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1145'. [ 468.988733][ T24] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 469.193460][ T24] usb 3-1: device descriptor read/64, error -71 [ 469.324866][ T804] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 470.017356][ T29] audit: type=1326 audit(1784832416.629:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10172 comm="syz.1.1148" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f61a8d97c17 code=0x0 [ 470.085457][ T24] usb usb3-port1: attempt power cycle [ 470.145949][ T804] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 470.163358][T10179] Cannot find add_set index 0 as target [ 470.171211][ T804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.186518][ T29] audit: type=1400 audit(1784832416.799:810): avc: denied { getopt } for pid=10177 comm="syz.0.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 470.210410][ T804] usb 5-1: Product: syz [ 470.216274][ T804] usb 5-1: Manufacturer: syz [ 470.221037][ T804] usb 5-1: SerialNumber: syz [ 470.435578][ T24] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 470.485631][ T24] usb 3-1: device descriptor read/8, error -71 [ 470.665645][ T804] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 48 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 470.714909][ T5732] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 470.736307][ T24] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 470.894863][ T5732] usb 2-1: Using ep0 maxpacket: 16 [ 470.913071][ T5732] usb 2-1: config 0 has no interfaces? [ 470.932623][ T5732] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 470.958700][ T24] usb 3-1: device not accepting address 39, error -71 [ 470.977041][ T5732] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 470.994591][ T24] usb usb3-port1: unable to enumerate USB device [ 471.013318][ T5732] usb 2-1: Manufacturer: syz [ 471.049489][ T5732] usb 2-1: config 0 descriptor?? [ 471.510474][T10181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.525388][T10181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.541870][ T24] usb 2-1: USB disconnect, device number 52 [ 471.555005][ T5732] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 471.726843][ T5732] usb 4-1: Using ep0 maxpacket: 8 [ 471.744383][ T5732] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 471.761468][ T5732] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 471.775316][ T5732] usb 4-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 471.789029][ T5732] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 471.801322][ T5732] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 471.812987][ T5732] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 471.828985][ T5732] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 471.840120][ T5732] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.920406][T10196] netlink: 'syz.0.1154': attribute type 13 has an invalid length. [ 472.070547][ T5732] usb 4-1: GET_CAPABILITIES returned 0 [ 472.096890][ T5732] usbtmc 4-1:16.0: can't read capabilities [ 472.136758][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.222937][T10199] tipc: Started in network mode [ 472.230832][T10199] tipc: Node identity e250c527a762, cluster identity 4711 [ 472.243112][T10199] tipc: Enabled bearer , priority 0 [ 472.273888][ T24] usb 4-1: USB disconnect, device number 29 [ 472.331647][T10195] tipc: Disabling bearer [ 472.704565][ T24] usb 5-1: USB disconnect, device number 48 [ 472.704990][ C0] usblp0: nonzero write bulk status received: -71 [ 473.091752][ T804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.181999][T10186] usblp0: removed [ 474.127750][T10209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1158'. [ 479.528941][T10252] f2fs: Unknown parameter 'discardp' [ 480.384048][T10265] tipc: Enabling of bearer rejected, failed to enable media [ 480.399024][ T29] audit: type=1400 audit(1784832427.009:811): avc: denied { watch_mount } for pid=10263 comm="syz.3.1170" path="/219" dev="tmpfs" ino=1228 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 480.574115][ T29] audit: type=1400 audit(1784832427.179:812): avc: denied { setopt } for pid=10271 comm="syz.3.1172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 480.799804][ T804] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 481.034849][ T804] usb 5-1: Using ep0 maxpacket: 8 [ 481.071084][ T29] audit: type=1400 audit(1784832427.679:813): avc: denied { map } for pid=10269 comm="syz.0.1173" path="/proc/729/task/730/oom_adj" dev="proc" ino=28581 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 481.430584][ T29] audit: type=1400 audit(1784832427.679:814): avc: denied { execute } for pid=10269 comm="syz.0.1173" path="/proc/729/task/730/oom_adj" dev="proc" ino=28581 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 481.695271][ T804] usb 5-1: config 6 has an invalid interface number: 150 but max is 0 [ 481.703673][ T804] usb 5-1: config 6 has no interface number 0 [ 481.709845][ T804] usb 5-1: config 6 interface 150 has no altsetting 0 [ 481.721402][ T804] usb 5-1: New USB device found, idVendor=0421, idProduct=0099, bcdDevice=ce.f2 [ 481.731789][ T804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.740022][ T804] usb 5-1: Product: syz [ 481.744224][ T804] usb 5-1: Manufacturer: syz [ 481.756613][ T804] usb 5-1: SerialNumber: syz [ 482.586266][ T804] rndis_host 5-1:6.150: skipping garbage [ 482.594000][ T804] rndis_host 5-1:6.150: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 482.614342][ T804] cdc_acm 5-1:6.150: skipping garbage [ 483.288883][ T804] usb 5-1: USB disconnect, device number 49 [ 484.312012][ T29] audit: type=1400 audit(1784832430.919:815): avc: denied { listen } for pid=10291 comm="syz.0.1176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 485.694914][ T5778] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 486.434494][T10310] tipc: Trying to set illegal importance in message [ 486.469715][ T5778] usb 1-1: config 2 has an invalid interface number: 79 but max is 0 [ 486.520441][ T5778] usb 1-1: config 2 has no interface number 0 [ 486.537516][ T5778] usb 1-1: config 2 interface 79 has no altsetting 0 [ 486.548402][ T5778] usb 1-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb [ 486.561130][ T5778] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.573071][ T5778] usb 1-1: Product: syz [ 486.579417][ T5778] usb 1-1: Manufacturer: syz [ 486.584660][ T5778] usb 1-1: SerialNumber: syz [ 486.610757][ T29] audit: type=1400 audit(1784832433.219:816): avc: denied { bind } for pid=10313 comm="syz.1.1183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 486.823513][ T29] audit: type=1400 audit(1784832433.429:817): avc: denied { read } for pid=10313 comm="syz.1.1183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 486.976788][T10317] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 486.983332][T10317] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 486.995201][T10317] vhci_hcd vhci_hcd.0: Device attached [ 487.949046][ T5778] usb 1-1: USB disconnect, device number 38 [ 487.981055][T10317] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 487.987612][T10317] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 488.006326][T10317] vhci_hcd vhci_hcd.0: Device attached [ 488.054380][T10317] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(8) [ 488.060977][T10317] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 488.069913][ T5782] usb 41-1: new low-speed USB device number 6 using vhci_hcd [ 488.078335][T10317] vhci_hcd vhci_hcd.0: Device attached [ 488.090370][T10317] netlink: 'syz.4.1185': attribute type 1 has an invalid length. [ 488.103340][T10317] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1185'. [ 488.120259][T10326] vhci_hcd: connection closed [ 488.120520][T10324] vhci_hcd: connection closed [ 488.120866][T10319] vhci_hcd: connection reset by peer [ 488.136429][ T1053] vhci_hcd vhci_hcd.4: stop threads [ 488.164196][ T1053] vhci_hcd vhci_hcd.4: release socket [ 488.175305][ T9] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 488.196038][ T1053] vhci_hcd vhci_hcd.4: disconnect device [ 488.219168][ T1053] vhci_hcd vhci_hcd.4: stop threads [ 488.247814][ T1053] vhci_hcd vhci_hcd.4: release socket [ 488.273771][ T1053] vhci_hcd vhci_hcd.4: disconnect device [ 488.297660][ T1053] vhci_hcd vhci_hcd.4: stop threads [ 488.321097][ T1053] vhci_hcd vhci_hcd.4: release socket [ 488.338079][ T1053] vhci_hcd vhci_hcd.4: disconnect device [ 488.359701][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 488.381223][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 488.410788][ T9] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 488.422512][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.432385][ T9] usb 2-1: Product: syz [ 488.448700][ T9] usb 2-1: Manufacturer: syz [ 488.453879][ T9] usb 2-1: SerialNumber: syz [ 488.837831][ T9] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 490.057671][ T29] audit: type=1400 audit(1784832436.659:818): avc: denied { watch } for pid=10337 comm="syz.4.1188" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1258 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 490.247680][ T5778] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 490.313646][ T9] gp8psk: usb out operation failed. [ 490.345140][ T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 490.373722][ T9] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-19) [ 490.413827][ T9] usb 2-1: USB disconnect, device number 53 [ 490.447439][ T5778] usb 3-1: Using ep0 maxpacket: 16 [ 490.525202][ T5778] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 490.544053][ T5778] usb 3-1: config 1 has no interface number 0 [ 490.554177][ T5778] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 490.566195][ T5778] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 490.578487][ T5778] usb 3-1: config 1 interface 105 has no altsetting 0 [ 490.590677][ T5778] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 490.601353][ T5778] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 490.610933][ T5778] usb 3-1: Product: syz [ 490.616052][ T5778] usb 3-1: Manufacturer: syz [ 490.621254][ T5778] usb 3-1: SerialNumber: syz [ 490.654206][T10340] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 490.666169][T10340] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 491.149837][T10340] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 491.193844][T10340] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 491.877884][ T804] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 491.915358][ T24] libceph: connect (1)[c::]:6789 error -101 [ 491.935105][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 491.963037][T10340] Cannot find del_set index 4 as target [ 492.000090][T10358] ceph: No mds server is up or the cluster is laggy [ 492.079773][ T804] usb 4-1: Using ep0 maxpacket: 16 [ 492.082952][ T5778] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 492.133318][ T804] usb 4-1: config 251 has an invalid interface number: 202 but max is 0 [ 492.253085][ T5778] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 492.291511][ T5778] aqc111 3-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, a6:f7:07:9b:e6:9f [ 492.335055][ T804] usb 4-1: config 251 has no interface number 0 [ 492.346571][ T5778] usb 3-1: USB disconnect, device number 40 [ 493.054382][ T5778] aqc111 3-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 493.086322][ T804] usb 4-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 493.107477][ T24] libceph: connect (1)[c::]:6789 error -101 [ 493.136481][ T804] usb 4-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 493.147833][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 493.225532][ T804] usb 4-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 493.263814][ T804] usb 4-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 493.278553][ T5782] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 493.289460][ T804] usb 4-1: config 251 interface 202 altsetting 1 has a duplicate endpoint with address 0x81, skipping [ 493.374950][ T804] usb 4-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 493.399510][ T804] usb 4-1: config 251 interface 202 has no altsetting 0 [ 493.408272][ T5778] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 493.417695][ T5778] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 493.421391][ T5732] IPVS: starting estimator thread 0... [ 493.427082][ T5778] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 493.507185][ T29] audit: type=1400 audit(1784832440.089:819): avc: denied { write } for pid=10367 comm="syz.0.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 493.521652][ T804] usb 4-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 493.628548][ T804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.650966][ T804] usb 4-1: Product: syz [ 493.701522][ T804] usb 4-1: Manufacturer: syz [ 493.716464][ T804] usb 4-1: SerialNumber: syz [ 493.726397][T10369] IPVS: using max 76 ests per chain, 182400 per kthread [ 493.776165][T10356] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 494.577731][ T29] audit: type=1400 audit(1784832441.189:820): avc: denied { unlink } for pid=10381 comm="syz.1.1201" name="file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 495.630862][ T804] cxacru 4-1:251.202: usbatm_usb_probe: bind failed: -19! [ 495.732303][ T804] usb 4-1: USB disconnect, device number 30 [ 495.995516][T10378] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 496.025087][T10378] xt_CT: You must specify a L4 protocol and not use inversions on it [ 496.565140][ T24] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 496.645143][ T29] audit: type=1400 audit(1784832443.009:821): avc: denied { ioctl } for pid=10399 comm="syz.3.1203" path="socket:[29069]" dev="sockfs" ino=29069 ioctlcmd=0x940b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 496.927715][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 496.966699][ T24] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 497.156037][ T24] usb 3-1: config 0 has no interface number 0 [ 497.185406][ T5782] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 497.475944][ T24] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 497.497280][ T24] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 497.511366][ T24] usb 3-1: string descriptor 0 read error: -71 [ 497.570295][ T24] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 497.641828][ T24] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 497.773511][ T24] usb 3-1: config 0 descriptor?? [ 498.631431][ T5782] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 498.651610][ T5782] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.662370][ T5782] usb 4-1: Product: syz [ 498.668295][ T5782] usb 4-1: Manufacturer: syz [ 498.672941][ T5782] usb 4-1: SerialNumber: syz [ 498.714200][ T24] usb 3-1: can't set config #0, error -71 [ 498.762270][ T24] usb 3-1: USB disconnect, device number 41 [ 498.880321][T10429] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 498.892502][ T5782] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 498.930311][T10421] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 498.953986][T10421] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 498.961887][T10421] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 498.969769][T10421] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 499.015737][ T5782] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 499.686064][T10432] workqueue: Failed to create a rescuer kthread for wq "dio/overlay": -EINTR [ 499.768458][T10421] kvm: requested 96381 ns i8254 timer period limited to 200000 ns [ 499.902216][ T804] usb 4-1: USB disconnect, device number 31 [ 499.964207][T10421] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 499.996955][T10421] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 500.063463][T10421] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 500.815024][ T5782] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 501.292131][T10421] kvm: requested 100571 ns i8254 timer period limited to 200000 ns [ 501.316298][ T5782] ath9k_htc: Failed to initialize the device [ 501.338840][ T804] usb 4-1: ath9k_htc: USB layer deinitialized [ 501.755108][ T804] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 502.084205][ T804] usb 4-1: Using ep0 maxpacket: 16 [ 502.117751][ T804] usb 4-1: config 251 has an invalid interface number: 202 but max is 0 [ 502.266613][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.275127][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.281900][ T804] usb 4-1: config 251 has no interface number 0 [ 502.313513][ T804] usb 4-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 502.363180][ T804] usb 4-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 502.436408][ T804] usb 4-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 502.480394][ T804] usb 4-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 502.507447][ T29] audit: type=1400 audit(1784832449.119:822): avc: denied { connect } for pid=10452 comm="syz.2.1216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 502.544968][ T804] usb 4-1: config 251 interface 202 altsetting 1 has a duplicate endpoint with address 0x81, skipping [ 502.630084][ T804] usb 4-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 502.669301][T10459] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 502.710409][ T804] usb 4-1: config 251 interface 202 has no altsetting 0 [ 502.746617][ T804] usb 4-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 502.756878][ T29] audit: type=1400 audit(1784832449.359:823): avc: denied { bind } for pid=10457 comm="syz.1.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 502.798156][ T804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.837884][ T804] usb 4-1: Product: syz [ 502.860652][ T804] usb 4-1: Manufacturer: syz [ 502.887977][ T804] usb 4-1: SerialNumber: syz [ 502.969691][T10444] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 503.155068][ T804] cxacru 4-1:251.202: usbatm_usb_probe: bind failed: -19! [ 503.243152][ T804] usb 4-1: USB disconnect, device number 32 [ 503.358236][ T29] audit: type=1400 audit(1784832449.969:824): avc: denied { bind } for pid=10463 comm="syz.2.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 503.420005][ T29] audit: type=1400 audit(1784832449.989:825): avc: denied { node_bind } for pid=10463 comm="syz.2.1218" saddr=::ffff:100.1.1.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 503.455003][ T5732] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 504.239908][ T5732] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 504.278175][ T5732] usb 5-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=6a.b1 [ 504.327271][ T5732] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.607682][ T5732] usb 5-1: Product: syz [ 504.631831][ T5732] usb 5-1: Manufacturer: syz [ 504.641268][ T5732] usb 5-1: SerialNumber: syz [ 504.656654][ T5732] usb 5-1: config 0 descriptor?? [ 504.676093][ T5732] cytherm 5-1:0.0: Cypress thermometer device now attached [ 504.952143][T10462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.969254][T10482] netlink: 'syz.2.1222': attribute type 1 has an invalid length. [ 504.994424][T10482] 8021q: adding VLAN 0 to HW filter on device bond8 [ 505.016999][T10462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.064631][T10482] bond8: (slave veth7): Enslaving as an active interface with a down link [ 505.114454][ T5782] usb 5-1: USB disconnect, device number 50 [ 505.155465][ T5782] cytherm 5-1:0.0: Cypress thermometer now disconnected [ 506.489832][T10492] binder: 10490:10492 ioctl c0306201 0 returned -14 [ 506.685420][ T5782] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 506.886207][ T5782] usb 2-1: Using ep0 maxpacket: 8 [ 507.020699][ T5782] usb 2-1: too many configurations: 180, using maximum allowed: 8 [ 507.031010][ T5782] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 507.041823][ T5782] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 507.056609][ T5782] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 507.122303][T10503] FAULT_INJECTION: forcing a failure. [ 507.122303][T10503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 507.135545][T10503] CPU: 1 UID: 0 PID: 10503 Comm: syz.2.1228 Tainted: G L syzkaller #0 PREEMPT(full) [ 507.135575][T10503] Tainted: [L]=SOFTLOCKUP [ 507.135583][T10503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 507.135593][T10503] Call Trace: [ 507.135601][T10503] [ 507.135608][T10503] dump_stack_lvl+0x100/0x190 [ 507.135638][T10503] should_fail_ex.cold+0x5/0xa [ 507.135662][T10503] _copy_to_user+0x32/0xd0 [ 507.135689][T10503] simple_read_from_buffer+0xcb/0x170 [ 507.135721][T10503] proc_fail_nth_read+0x1af/0x230 [ 507.135750][T10503] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 507.135777][T10503] ? rw_verify_area+0xce/0x6d0 [ 507.135801][T10503] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 507.135826][T10503] vfs_read+0x1e4/0xb40 [ 507.135853][T10503] ? __pfx_vfs_read+0x10/0x10 [ 507.135887][T10503] ? __fget_files+0x215/0x3d0 [ 507.135910][T10503] ? __fget_files+0x21f/0x3d0 [ 507.135932][T10503] ksys_read+0x12a/0x250 [ 507.135957][T10503] ? __pfx_ksys_read+0x10/0x10 [ 507.135988][T10503] do_syscall_64+0x115/0x870 [ 507.136007][T10503] ? clear_bhb_loop+0x40/0x90 [ 507.136030][T10503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.136048][T10503] RIP: 0033:0x7fe0cfd5e6ce [ 507.136065][T10503] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 507.136082][T10503] RSP: 002b:00007fe0d0c6bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 507.136100][T10503] RAX: ffffffffffffffda RBX: 00007fe0d0c6c6c0 RCX: 00007fe0cfd5e6ce [ 507.136111][T10503] RDX: 000000000000000f RSI: 00007fe0d0c6c0a0 RDI: 0000000000000011 [ 507.136121][T10503] RBP: 00007fe0d0c6c090 R08: 0000000000000000 R09: 0000000000000000 [ 507.136132][T10503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.136142][T10503] R13: 00007fe0d0026218 R14: 00007fe0d0026180 R15: 00007ffd97710998 [ 507.136166][T10503] [ 507.447709][ T5782] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 507.505794][ T5782] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 507.583207][ T5782] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 507.651716][ T5782] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 507.829097][ T5782] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 507.872657][ T5782] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 508.202638][ T5782] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 508.225931][ T5778] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 508.237135][ T5782] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 508.256513][ T5782] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 508.271928][ T5782] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 508.291172][ T5782] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 508.328005][ T5782] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 508.368606][ T5782] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 508.414971][ T5778] usb 1-1: Using ep0 maxpacket: 8 [ 508.429692][ T5782] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0035, bcdDevice= 0.40 [ 508.444960][ T5778] usb 1-1: unable to get BOS descriptor or descriptor too short [ 508.463731][ T5782] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.476578][ T5778] usb 1-1: config 4 has an invalid interface number: 233 but max is 0 [ 508.557191][ T5782] usb 2-1: Product: syz [ 508.562867][ T5778] usb 1-1: config 4 has no interface number 0 [ 508.573347][ T5782] usb 2-1: Manufacturer: syz [ 508.585186][ T5778] usb 1-1: config 4 interface 233 has no altsetting 0 [ 508.592710][ T5782] usb 2-1: SerialNumber: syz [ 508.608088][ T5778] usb 1-1: New USB device found, idVendor=0af0, idProduct=6951, bcdDevice= 3.a7 [ 508.618097][ T5778] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.630544][ T5778] usb 1-1: Product: syz [ 508.638157][ T5778] usb 1-1: Manufacturer: syz [ 508.650180][ T5778] usb 1-1: SerialNumber: syz [ 508.954941][ T9] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 509.127311][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 509.137660][ T5782] usb 2-1: USB disconnect, device number 54 [ 509.161626][ T9] usb 4-1: config 251 has an invalid interface number: 202 but max is 0 [ 509.205326][ T9] usb 4-1: config 251 has no interface number 0 [ 509.234465][ T9] usb 4-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 509.333503][ T9] usb 4-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 509.441665][ T9] usb 4-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 509.495083][ T9] usb 4-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 509.551661][ T9] usb 4-1: config 251 interface 202 altsetting 1 has a duplicate endpoint with address 0x81, skipping [ 509.574454][T10509] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 509.585219][ T9] usb 4-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 509.598477][ T9] usb 4-1: config 251 interface 202 has no altsetting 0 [ 509.728529][T10525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1233'. [ 510.019175][ T9] usb 4-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 510.029824][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.045434][ T9] usb 4-1: Product: syz [ 510.076491][ T9] usb 4-1: Manufacturer: syz [ 510.082106][ T9] usb 4-1: SerialNumber: syz [ 510.133657][T10513] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 510.134918][ T5782] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 510.195290][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.354995][ T5782] usb 2-1: Using ep0 maxpacket: 8 [ 510.377056][ T5782] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 510.388301][ T5782] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.398912][ T5782] usb 2-1: Product: syz [ 510.405625][ T9] cxacru 4-1:251.202: usbatm_usb_probe: bind failed: -19! [ 510.414830][ T5782] usb 2-1: Manufacturer: syz [ 510.425288][ T5782] usb 2-1: SerialNumber: syz [ 510.431524][ T9] usb 4-1: USB disconnect, device number 33 [ 510.451416][ T5782] usb 2-1: config 0 descriptor?? [ 510.521045][ T5782] gspca_main: se401-2.14.0 probing 047d:5003 [ 510.580336][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.010310][ T5782] gspca_se401: Wrong descriptor type [ 512.028747][ T5782] usb 2-1: USB disconnect, device number 55 [ 512.089731][T10509] 8021q: adding VLAN 0 to HW filter on device bond3 [ 513.314315][ T29] audit: type=1400 audit(1784832459.919:826): avc: denied { setopt } for pid=10540 comm="syz.4.1238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 513.341280][T10523] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 513.384943][T10523] UDF-fs: Scanning with blocksize 512 failed [ 513.472479][ T29] audit: type=1400 audit(1784832459.949:827): avc: denied { read } for pid=10540 comm="syz.4.1238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 513.510852][T10523] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 513.544312][T10523] UDF-fs: Scanning with blocksize 1024 failed [ 513.596859][T10523] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 513.641480][T10523] UDF-fs: Scanning with blocksize 2048 failed [ 513.697607][T10523] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 513.733083][T10523] UDF-fs: Scanning with blocksize 4096 failed [ 513.868234][ T5778] usb 1-1: USB disconnect, device number 39 [ 513.965077][ T804] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 514.136661][ T804] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 514.177462][ T804] usb 2-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=6a.b1 [ 514.203551][ T804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.234854][ T804] usb 2-1: Product: syz [ 514.245459][ T804] usb 2-1: Manufacturer: syz [ 514.262104][ T804] usb 2-1: SerialNumber: syz [ 514.392736][ T804] usb 2-1: config 0 descriptor?? [ 514.424373][ T804] cytherm 2-1:0.0: Cypress thermometer device now attached [ 515.167190][T10550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.192672][T10550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.396963][T10558] Cannot find set identified by id 0 to match [ 515.416658][ T5732] usb 2-1: USB disconnect, device number 56 [ 515.713170][ T5732] cytherm 2-1:0.0: Cypress thermometer now disconnected [ 515.923176][T10560] batadv_slave_1: entered promiscuous mode [ 515.996186][T10557] batadv_slave_1: left promiscuous mode [ 516.632543][ T29] audit: type=1400 audit(1784832463.239:828): avc: denied { bind } for pid=10564 comm="syz.4.1246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 519.374857][ T5732] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 519.545161][ T5778] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 519.554854][ T5732] usb 3-1: Using ep0 maxpacket: 16 [ 519.578129][ T5732] usb 3-1: config 251 has an invalid interface number: 202 but max is 0 [ 519.619869][T10596] binder: 10595:10596 ioctl c0306201 200000000080 returned -14 [ 519.643634][T10596] binder: 10595:10596 ioctl c0306201 2000000003c0 returned -14 [ 519.670625][ T5732] usb 3-1: config 251 has no interface number 0 [ 519.692138][ T5732] usb 3-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 519.713466][ T5778] usb 2-1: unable to get BOS descriptor or descriptor too short [ 519.747731][ T5778] usb 2-1: not running at top speed; connect to a high speed hub [ 519.777459][ T5778] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 519.859611][ T5732] usb 3-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 520.073968][ T5732] usb 3-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 520.085686][ T5732] usb 3-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 520.097606][ T5732] usb 3-1: config 251 interface 202 altsetting 1 has a duplicate endpoint with address 0x81, skipping [ 520.108930][ T5732] usb 3-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 520.123431][ T5732] usb 3-1: config 251 interface 202 has no altsetting 0 [ 520.131403][ T5778] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 520.420640][ T5732] usb 3-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 520.519978][ T5778] usb 2-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 520.540199][ T5778] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.552449][ T5732] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.567353][ T5778] usb 2-1: Product: syz [ 520.594675][ T5732] usb 3-1: Product: syz [ 520.606549][ T5778] usb 2-1: Manufacturer: syz [ 520.606549][ T5732] usb 3-1: Manufacturer: syz [ 520.606585][ T5778] usb 2-1: SerialNumber: syz [ 520.624542][ T5732] usb 3-1: SerialNumber: syz [ 520.657377][T10589] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 520.904254][ T5732] cxacru 3-1:251.202: usbatm_usb_probe: bind failed: -19! [ 520.951464][ T5778] usb 2-1: 3:0: cannot get min/max values for control 5 (id 3) [ 520.955083][ T5732] usb 3-1: USB disconnect, device number 42 [ 521.103345][ T5778] usb 2-1: 3:0: cannot get min/max values for control 5 (id 3) [ 521.209870][ T5778] usb 2-1: USB disconnect, device number 57 [ 521.902461][ T29] audit: type=1400 audit(1784832468.439:829): avc: denied { read } for pid=10616 comm="syz.0.1261" dev="sockfs" ino=29543 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 523.748412][T10627] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1262'. [ 524.070010][T10630] nfs4: Unknown parameter '' [ 524.342023][ T29] audit: type=1400 audit(1784832470.949:830): avc: denied { ioctl } for pid=10649 comm="syz.1.1270" path="socket:[30458]" dev="sockfs" ino=30458 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 524.710100][T10655] netlink: 'syz.1.1271': attribute type 1 has an invalid length. [ 524.857522][T10655] 8021q: adding VLAN 0 to HW filter on device bond1 [ 525.036438][T10659] bond1: (slave veth7): Enslaving as an active interface with a down link [ 525.830157][ T29] audit: type=1400 audit(1784832471.759:831): avc: denied { setopt } for pid=10660 comm="syz.2.1274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 525.887967][ T29] audit: type=1400 audit(1784832471.889:832): avc: denied { read } for pid=10660 comm="syz.2.1274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 525.919123][ T5732] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 526.095403][ T5732] usb 1-1: Using ep0 maxpacket: 16 [ 526.103998][ T5732] usb 1-1: config 251 has an invalid interface number: 202 but max is 0 [ 526.121499][ T5732] usb 1-1: config 251 has no interface number 0 [ 526.134876][ T5732] usb 1-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 526.155522][ T5732] usb 1-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 526.182740][ T5732] usb 1-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 526.206269][ T5732] usb 1-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 526.229889][ T5732] usb 1-1: config 251 interface 202 altsetting 1 has a duplicate endpoint with address 0x81, skipping [ 526.252160][ T5732] usb 1-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 526.281508][ T5732] usb 1-1: config 251 interface 202 has no altsetting 0 [ 526.298410][ T5732] usb 1-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 526.309028][ T5732] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.317352][ T5732] usb 1-1: Product: syz [ 526.321599][ T5732] usb 1-1: Manufacturer: syz [ 526.327058][ T5732] usb 1-1: SerialNumber: syz [ 526.335676][T10658] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 526.553341][ T5732] cxacru 1-1:251.202: usbatm_usb_probe: bind failed: -19! [ 526.564837][ T5732] usb 1-1: USB disconnect, device number 40 [ 526.577024][ T7486] udevd[7486]: setting mode of /dev/bus/usb/001/040 to 020664 failed: No such file or directory [ 526.589071][ T7486] udevd[7486]: setting owner of /dev/bus/usb/001/040 to uid=0, gid=0 failed: No such file or directory [ 526.684276][T10638] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 527.026485][ T29] audit: type=1400 audit(1784832473.639:833): avc: denied { setopt } for pid=10670 comm="syz.1.1276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 527.030386][T10676] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1276'. [ 527.124995][ T29] audit: type=1400 audit(1784832473.709:834): avc: denied { append } for pid=10674 comm="syz.4.1277" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 527.155612][ T29] audit: type=1400 audit(1784832473.759:835): avc: denied { map } for pid=10674 comm="syz.4.1277" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 527.179797][ T29] audit: type=1400 audit(1784832473.759:836): avc: denied { write execute } for pid=10674 comm="syz.4.1277" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 527.564916][ T5778] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 527.747043][ T5778] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 527.764873][ T5778] usb 2-1: config 0 has no interface number 0 [ 527.804526][ T5778] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 527.832314][ T5778] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.850375][ T29] audit: type=1400 audit(1784832474.459:837): avc: denied { bind } for pid=10685 comm="syz.4.1281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 527.987245][T10694] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1282'. [ 527.996579][ T5778] usb 2-1: Product: syz [ 528.044202][ T5778] usb 2-1: Manufacturer: syz [ 528.060601][ T5778] usb 2-1: SerialNumber: syz [ 528.119742][ T5778] usb 2-1: config 0 descriptor?? [ 528.558139][T10694] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 528.570129][ T9] libceph: connect (1)[c::]:6789 error -101 [ 528.588481][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 528.747246][T10694] bond1 (unregistering): Released all slaves [ 528.874272][ T5820] libceph: connect (1)[c::]:6789 error -101 [ 528.880393][ T5820] libceph: mon0 (1)[c::]:6789 connect error [ 529.053929][ T5732] usb 5-1: new low-speed USB device number 51 using dummy_hcd [ 529.069416][ T29] audit: type=1400 audit(1784832475.679:838): avc: denied { write } for pid=10706 comm="syz.0.1285" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 529.104106][ T29] audit: type=1400 audit(1784832475.679:839): avc: denied { open } for pid=10706 comm="syz.0.1285" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 529.143405][ T29] audit: type=1400 audit(1784832475.689:840): avc: denied { map } for pid=10706 comm="syz.0.1285" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 529.180574][ T29] audit: type=1400 audit(1784832475.689:841): avc: denied { read } for pid=10706 comm="syz.0.1285" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 529.205852][ T5778] dvb_usb_ec168 2-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 529.249532][T10686] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1281'. [ 529.262847][T10685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 529.285331][ T5732] usb 5-1: unable to get BOS descriptor or descriptor too short [ 529.321580][ T5732] usb 5-1: no configurations [ 529.331825][ T5732] usb 5-1: can't read configurations, error -22 [ 529.375701][ T5778] libceph: connect (1)[c::]:6789 error -101 [ 529.403350][ T5778] libceph: mon0 (1)[c::]:6789 connect error [ 529.467909][T10709] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1285'. [ 529.500173][T10709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1285'. [ 529.783688][T10676] ceph: No mds server is up or the cluster is laggy [ 530.720585][ T5820] usb 2-1: USB disconnect, device number 58 [ 530.942958][T10722] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1288'. [ 530.952457][T10722] ksmbd: Unknown IPC event: 4, ignore. [ 531.825890][ T804] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 531.833667][ T5732] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 532.521750][T10743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1296'. [ 533.026166][ T5732] usb 4-1: Using ep0 maxpacket: 16 [ 533.031368][ T804] usb 2-1: Using ep0 maxpacket: 16 [ 533.275578][ T5732] usb 4-1: config 251 has an invalid interface number: 202 but max is 0 [ 533.293434][ T804] usb 2-1: unable to get BOS descriptor or descriptor too short [ 533.317697][ T5732] usb 4-1: config 251 has no interface number 0 [ 533.333831][ T5732] usb 4-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 533.355587][ T804] usb 2-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 533.368313][ T5732] usb 4-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 533.384896][ T804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.403174][ T804] usb 2-1: Product: syz [ 533.410008][ T5732] usb 4-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 533.425411][ T804] usb 2-1: Manufacturer: syz [ 533.430929][ T804] usb 2-1: SerialNumber: syz [ 533.437063][ T5732] usb 4-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 533.460427][ T5732] usb 4-1: config 251 interface 202 altsetting 1 has a duplicate endpoint with address 0x81, skipping [ 533.471925][ T5732] usb 4-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 533.486437][ T5732] usb 4-1: config 251 interface 202 has no altsetting 0 [ 533.497593][ T5732] usb 4-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 533.507428][ T5732] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.519367][ T5732] usb 4-1: Product: syz [ 533.523928][ T5732] usb 4-1: Manufacturer: syz [ 533.532666][ T5732] usb 4-1: SerialNumber: syz [ 533.544345][T10727] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 533.551865][ T24] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 533.720838][ T804] usb 2-1: Fast Track Pro switching to config #2 [ 533.728260][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 533.747329][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 533.769256][ T804] usb 2-1: USB disconnect, device number 59 [ 533.795716][ T5732] cxacru 4-1:251.202: usbatm_usb_probe: bind failed: -19! [ 533.802945][ T24] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.841371][ T24] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 533.864398][ T5732] usb 4-1: USB disconnect, device number 34 [ 533.873679][ T24] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 533.914591][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 533.929860][ T24] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 533.958058][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.981459][ T24] usb 5-1: config 0 descriptor?? [ 534.654879][T10751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1298'. [ 535.797259][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 535.817296][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 535.876036][ T24] usb 5-1: USB disconnect, device number 53 [ 536.987643][T10763] netlink: 'syz.3.1303': attribute type 1 has an invalid length. [ 537.021618][T10763] 8021q: adding VLAN 0 to HW filter on device bond1 [ 537.965081][T10763] bond1: (slave veth3): Enslaving as an active interface with a down link [ 538.016651][T10758] netlink: 'syz.0.1302': attribute type 1 has an invalid length. [ 538.049457][T10758] 8021q: adding VLAN 0 to HW filter on device bond4 [ 538.123313][T10775] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 538.398374][T10778] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1536 sclass=netlink_route_socket pid=10778 comm=syz.4.1306 [ 538.439795][T10758] bond4: (slave veth9): Enslaving as an active interface with a down link [ 539.330723][T10786] netlink: 'syz.2.1308': attribute type 11 has an invalid length. [ 539.378912][T10786] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1308'. [ 539.725017][ T24] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 540.684922][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 540.714240][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 540.727355][T10798] f2fs: Unknown parameter 'discardp' [ 541.621291][ T24] usb 3-1: config 1 interface 0 altsetting 235 bulk endpoint 0x82 has invalid maxpacket 8 [ 541.654822][ T24] usb 3-1: config 1 interface 0 has no altsetting 0 [ 541.715111][ T24] usb 3-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 541.797228][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.857379][ T24] usb 3-1: Product: syz [ 541.880507][ T24] usb 3-1: Manufacturer: syz [ 541.896567][ T24] usb 3-1: SerialNumber: syz [ 541.922891][T10786] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 542.166180][ T5820] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 542.190992][T10786] Can't find a SQUASHFS superblock on nullb0 [ 542.393284][ T5778] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 542.393668][ T24] usblp0: Disabling reads from problematic bidirectional printer [ 542.421378][ T24] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 43 if 0 alt 235 proto 2 vid 0x03F0 pid 0x0004 [ 542.447978][ T24] usb 3-1: USB disconnect, device number 43 [ 542.485483][ T24] usblp0: removed [ 542.598885][ T9] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 542.714996][ T5820] usb 2-1: Using ep0 maxpacket: 8 [ 542.721715][ T5820] usb 2-1: config 0 has no interfaces? [ 542.729274][ T5820] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 542.738919][ T5820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.750073][ T5820] usb 2-1: config 0 descriptor?? [ 542.775170][ T5778] usb 1-1: Using ep0 maxpacket: 16 [ 542.783683][ T5778] usb 1-1: config 251 has an invalid interface number: 202 but max is 0 [ 542.792819][ T5778] usb 1-1: config 251 has no interface number 0 [ 542.799648][ T5778] usb 1-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 542.810654][ T5778] usb 1-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 542.822649][ T5778] usb 1-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 542.834541][ T5778] usb 1-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 542.847524][ T5778] usb 1-1: config 251 interface 202 altsetting 1 has a duplicate endpoint with address 0x81, skipping [ 542.859208][ T5778] usb 1-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 542.873213][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 542.878635][ T5778] usb 1-1: config 251 interface 202 has no altsetting 0 [ 542.888485][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 542.897343][ T5778] usb 1-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 542.907016][ T5778] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.916041][ T5778] usb 1-1: Product: syz [ 542.920709][ T9] usb 5-1: config 16 has an invalid interface number: 102 but max is 0 [ 542.929622][ T9] usb 5-1: config 16 has no interface number 0 [ 542.936354][ T5778] usb 1-1: Manufacturer: syz [ 542.941199][ T5778] usb 1-1: SerialNumber: syz [ 542.946276][ T9] usb 5-1: config 16 interface 102 has no altsetting 0 [ 542.961618][ T9] usb 5-1: New USB device found, idVendor=0711, idProduct=0200, bcdDevice=d7.a6 [ 542.988754][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.990131][T10810] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 543.001865][ T9] usb 5-1: Product: syz [ 543.008838][ T9] usb 5-1: Manufacturer: syz [ 548.325982][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.024718][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 648.031744][ C1] rcu: 0-...!: (0 ticks this GP) idle=a9b4/1/0x4000000000000000 softirq=46266/46266 fqs=0 [ 648.042793][ C1] rcu: (detected by 1, t=10502 jiffies, g=53461, q=382 ncpus=2) [ 648.050517][ C1] Sending NMI from CPU 1 to CPUs 0: [ 648.050566][ C0] NMI backtrace for cpu 0 [ 648.050585][ C0] CPU: 0 UID: 0 PID: 10806 Comm: syz.1.1313 Tainted: G L syzkaller #0 PREEMPT(full) [ 648.050610][ C0] Tainted: [L]=SOFTLOCKUP [ 648.050616][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 648.050625][ C0] RIP: 0010:debug_lockdep_rcu_enabled+0x28/0x40 [ 648.050651][ C0] Code: 90 90 f3 0f 1e fa 8b 05 6e 46 68 05 85 c0 74 20 8b 05 20 79 68 05 85 c0 74 16 65 48 8b 05 c8 9d a9 08 8b 80 9c 0b 00 00 85 c0 <0f> 94 c0 0f b6 c0 e9 fd 3e 03 00 66 2e 0f 1f 84 00 00 00 00 00 0f [ 648.050664][ C0] RSP: 0018:ffffc90000007de0 EFLAGS: 00000046 [ 648.050677][ C0] RAX: 0000000000000000 RBX: ffff88802e5f9300 RCX: ffffffff81e5c428 [ 648.050687][ C0] RDX: 1ffff11005cbf257 RSI: 0000000000000004 RDI: ffffc90000007d78 [ 648.050696][ C0] RBP: ffff88807ee64000 R08: 0000000000000001 R09: fffff52000000faf [ 648.050706][ C0] R10: 0000000000000003 R11: 0000000000000000 R12: ffff88802e5f9300 [ 648.050715][ C0] R13: ffffffff89c77a00 R14: ffff8880b8428540 R15: ffff8880b8428590 [ 648.050725][ C0] FS: 00007f61a9bbb6c0(0000) GS:ffff888123de6000(0000) knlGS:0000000000000000 [ 648.050740][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 648.050750][ C0] CR2: 000000110c30b3ba CR3: 0000000073d8c000 CR4: 00000000003526f0 [ 648.050760][ C0] Call Trace: [ 648.050767][ C0] [ 648.050772][ C0] advance_sched+0xea/0xd20 [ 648.050793][ C0] ? find_held_lock+0x2b/0x80 [ 648.050817][ C0] ? __hrtimer_run_queues+0x37b/0x9c0 [ 648.050839][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 648.050857][ C0] ? __pfx_advance_sched+0x10/0x10 [ 648.050871][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 648.050893][ C0] hrtimer_interrupt+0x3e5/0x940 [ 648.050918][ C0] __sysvec_apic_timer_interrupt+0x109/0x470 [ 648.050941][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 648.050962][ C0] [ 648.050967][ C0] [ 648.050972][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 648.050990][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x3f/0x70 [ 648.051006][ C0] Code: 59 12 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 00 ff 00 74 05 e9 91 64 b3 09 8b 82 24 17 00 00 85 c0 74 f1 8b 82 f8 16 00 00 <83> f8 02 75 e6 48 8b 8a 00 17 00 00 8b 92 fc 16 00 00 48 8b 01 48 [ 648.051019][ C0] RSP: 0018:ffffc9000fb77c60 EFLAGS: 00000246 [ 648.051030][ C0] RAX: 0000000000000002 RBX: ffffffff8ee678d8 RCX: ffffc90003db1000 [ 648.051040][ C0] RDX: ffff888079ab4a80 RSI: ffffffff82a9dbf1 RDI: ffff888079ab4a80 [ 648.051049][ C0] RBP: ffff8880b8528400 R08: 0000000000000001 R09: 0000000000000000 [ 648.051058][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: fffffbfff22448f2 [ 648.051067][ C0] R13: 1bc16ce8e205a5ee R14: 0000000000000000 R15: 0000000000000000 [ 648.051079][ C0] ? timerfd_clock_was_set+0x1a1/0x310 [ 648.051104][ C0] timerfd_clock_was_set+0x1a1/0x310 [ 648.051124][ C0] clock_was_set+0x652/0x850 [ 648.051144][ C0] ? __pfx_clock_was_set+0x10/0x10 [ 648.051163][ C0] ? rcu_is_watching+0x12/0xc0 [ 648.051182][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 648.051202][ C0] do_settimeofday64+0x330/0x4d0 [ 648.051217][ C0] ? __pfx_do_settimeofday64+0x10/0x10 [ 648.051232][ C0] ? security_capable+0x80/0x260 [ 648.051250][ C0] ? cma_igmp_send+0xde/0x1b0 [ 648.051268][ C0] ? capable+0xd3/0xf0 [ 648.051285][ C0] do_sys_settimeofday64+0x1dc/0x260 [ 648.051302][ C0] __x64_sys_clock_settime+0x1c1/0x2a0 [ 648.051324][ C0] ? __pfx___x64_sys_clock_settime+0x10/0x10 [ 648.051347][ C0] do_syscall_64+0x115/0x870 [ 648.051359][ C0] ? clear_bhb_loop+0x40/0x90 [ 648.051374][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.051388][ C0] RIP: 0033:0x7f61a8d9de99 [ 648.051401][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 648.051413][ C0] RSP: 002b:00007f61a9bbb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3 [ 648.051426][ C0] RAX: ffffffffffffffda RBX: 00007f61a9025fa0 RCX: 00007f61a8d9de99 [ 648.051435][ C0] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 648.051443][ C0] RBP: 00007f61a8e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 648.051452][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 648.051460][ C0] R13: 00007f61a9026038 R14: 00007f61a9025fa0 R15: 00007ffcc3209788 [ 648.051474][ C0] [ 648.051561][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g53461 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 648.490250][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 648.500211][ C1] rcu: RCU grace-period kthread stack dump: [ 648.506081][ C1] task:rcu_preempt state:R running task stack:26104 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 648.519608][ C1] Call Trace: [ 648.522893][ C1] [ 648.525816][ C1] __schedule+0x125c/0x6730 [ 648.530337][ C1] ? __pfx___schedule+0x10/0x10 [ 648.535183][ C1] ? find_held_lock+0x2b/0x80 [ 648.539860][ C1] ? schedule+0x225/0x2c0 [ 648.544187][ C1] schedule+0xdd/0x2c0 [ 648.548256][ C1] schedule_timeout+0x127/0x280 [ 648.553100][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 648.558471][ C1] ? __pfx_process_timeout+0x10/0x10 [ 648.563762][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 648.569566][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 648.575026][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 648.579784][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 648.585062][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 648.589999][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 648.595185][ C1] ? rcu_is_watching+0x12/0xc0 [ 648.599944][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 648.605750][ C1] rcu_gp_kthread+0x179/0x230 [ 648.610416][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 648.615604][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 648.621506][ C1] ? __kthread_parkme+0x18c/0x230 [ 648.626549][ C1] ? kthread+0x13a/0x450 [ 648.630779][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 648.635967][ C1] kthread+0x370/0x450 [ 648.640038][ C1] ? __pfx_kthread+0x10/0x10 [ 648.644626][ C1] ret_from_fork+0x72b/0xd50 [ 648.649216][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 648.654326][ C1] ? __switch_to+0x800/0x10f0 [ 648.658994][ C1] ? __pfx_kthread+0x10/0x10 [ 648.663586][ C1] ret_from_fork_asm+0x1a/0x30 [ 648.668362][ C1] [ 648.671385][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 648.677703][ C1] CPU: 1 UID: 0 PID: 5608 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 648.688714][ C1] Tainted: [L]=SOFTLOCKUP [ 648.693021][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 648.703170][ C1] RIP: 0010:smp_call_function_many_cond+0x589/0x16c0 [ 648.709866][ C1] Code: b8 00 00 00 00 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 c9 95 0c 00 f3 90 <41> 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 2c 0f 00 00 8b 45 08 31 [ 648.729464][ C1] RSP: 0018:ffffc9000393f618 EFLAGS: 00000293 [ 648.735522][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81fd46fd [ 648.743483][ C1] RDX: ffff88807c3e2540 RSI: ffffffff81fd46d7 RDI: ffff88807c3e2540 [ 648.751441][ C1] RBP: ffff8880b8443680 R08: 0000000000000005 R09: 0000000000000000 [ 648.759398][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 648.767356][ C1] R13: ffffed10170886d1 R14: 0000000000000001 R15: ffff8880b853c880 [ 648.775315][ C1] FS: 000055555ab6a500(0000) GS:ffff888123ee6000(0000) knlGS:0000000000000000 [ 648.784235][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 648.790813][ C1] CR2: 00007fe0d0b556b8 CR3: 000000005e712000 CR4: 00000000003526f0 [ 648.798775][ C1] Call Trace: [ 648.802059][ C1] [ 648.804992][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 648.810209][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 648.816529][ C1] ? ldt_dup_context+0x45/0x300 [ 648.821377][ C1] ? find_held_lock+0x2b/0x80 [ 648.826049][ C1] ? ldt_dup_context+0x1a4/0x300 [ 648.830983][ C1] ? ldt_dup_context+0x1a4/0x300 [ 648.835927][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 648.841119][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 648.846222][ C1] flush_tlb_mm_range+0x45f/0x16f0 [ 648.851681][ C1] ? dup_mmap+0x12ec/0x21b0 [ 648.856182][ C1] ? dup_mmap+0x12ec/0x21b0 [ 648.860679][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 648.866230][ C1] ? up_write+0x2e5/0x5c0 [ 648.870556][ C1] dup_mmap+0x1307/0x21b0 [ 648.874895][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 648.879566][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 648.885464][ C1] ? __lock_acquire+0x49f/0x1a40 [ 648.890392][ C1] ? find_held_lock+0x2b/0x80 [ 648.895064][ C1] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 648.900972][ C1] copy_process+0x4588/0x8030 [ 648.905666][ C1] ? __pfx_copy_process+0x10/0x10 [ 648.910683][ C1] ? do_raw_spin_lock+0x128/0x260 [ 648.915711][ C1] kernel_clone+0x176/0x9d0 [ 648.920228][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 648.925258][ C1] ? find_held_lock+0x2b/0x80 [ 648.929935][ C1] ? __might_fault+0xc5/0x140 [ 648.934613][ C1] __do_sys_clone+0xd9/0x120 [ 648.939212][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 648.944423][ C1] do_syscall_64+0x115/0x870 [ 648.949019][ C1] ? clear_bhb_loop+0x40/0x90 [ 648.953701][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.959587][ C1] RIP: 0033:0x7fe0cfdc6912 [ 648.963993][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 648.983594][ C1] RSP: 002b:00007ffd97710bb0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 648.992000][ C1] RAX: ffffffffffffffda RBX: 00007ffd97710bb0 RCX: 00007fe0cfdc6912 [ 648.999958][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 649.008015][ C1] RBP: 00007ffd97710d3c R08: 0000000000000000 R09: 0000000000000001 [ 649.015974][ C1] R10: 000055555ab6a7d0 R11: 0000000000000246 R12: 0000000000000001 [ 649.023937][ C1] R13: 00000000000927c0 R14: 0000000000084806 R15: 00007ffd97710d90 [ 649.031911][ C1]