last executing test programs: 4m50.110523612s ago: executing program 3 (id=353): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000100070000000900020073797a30000000001400078008001240fffffffe080013400000080015000300686173683a69702c706f72742c6e6574000000000500050002000000050004"], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 4m46.792563692s ago: executing program 3 (id=356): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$media(&(0x7f00000001c0), 0x2, 0x450403) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES8=r0, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="610504150102061f0e800104947c67693bceb0e3a904070e485030d7fb97234475b9f13ae269b3a02ecd3155c8a8d2b4fb1e52800fd95a1e25e73c030b9bab80d6d31e021240eb1960806bacd958e300"/89], 0x61) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="ff63d649", 0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$FICLONE(r3, 0x40049409, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x100, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000100)=[{{&(0x7f0000000440)=@in6={0xa, 0x4e23, 0xa, @mcast1, 0x80000000}, 0x80, &(0x7f0000000080)}}], 0x1, 0x0) r5 = epoll_create1(0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r7 = syz_open_pts(0xffffffffffffffff, 0x141601) fcntl$setstatus(r7, 0x4, 0x102800) write(r7, &(0x7f0000000600)="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", 0x191) close_range(r6, 0xffffffffffffffff, 0x0) epoll_create1(0x80000) r8 = syz_open_procfs(0xffffffffffffffff, 0x0) fcntl$dupfd(r5, 0x0, r5) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000001c0)={0x200c}) 4m45.581063375s ago: executing program 3 (id=361): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1300000005000000100000005f740000880000", @ANYBLOB='{C\x00'/15, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x20}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = semget$private(0x0, 0x2, 0x2) mount$9p_unix(&(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000500), 0xa0040, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000000)) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f00000002c0)='hfsplus\x00', 0xc4, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 4m43.784036813s ago: executing program 3 (id=366): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000100070000000900020073797a30000000001400078008001240fffffffe080013400000080015000300686173683a69702c706f72742c6e6574000000000500050002000000050004"], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 4m42.597019325s ago: executing program 3 (id=370): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xf3, &(0x7f0000006680)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ac05440200000000000109022400010000000009040000b9fef14f8fac7b9b000001220000090581030000000000"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x80) close_range(r3, 0xffffffffffffffff, 0x0) alarm(0x1000) syz_usb_control_io$hid(r0, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r4, &(0x7f0000002340)=[{&(0x7f0000000000)="f281", 0x2}], 0x1) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r7, 0xc008aeba, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000580)={r9, @in6={{0xa, 0x103, 0x0, @empty}}}, &(0x7f0000000040)=0x84) setsockopt(r5, 0x84, 0x10, &(0x7f0000000280)="1a00000002000000", 0x8) r11 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netfilter\x00') r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYRESOCT=r6, @ANYRES32=r3, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32=r11, @ANYBLOB="05000000020000000200"/28, @ANYRES64=r11, @ANYRES64=r4, @ANYRES64=r10, @ANYBLOB="38cc82563aa64dc4808f0a506087083521f55a4bb4ac78849ce57ee95480b8ebc5697abe31e7c7801ece7ed725e554d8100827ca", @ANYRES64=r2, @ANYRESOCT=r12, @ANYBLOB="6ce60643173118bb76f2bd3a27fdd00d650f58dca923fa537ecb6a80125ce9a8e8a40bcbd5eee52e188421fd7fca622f8a6b41b398c95424e06f0064c02c08f4f451e1db8f25e8b80c0a051d3eba78"], 0x50) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000380)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r12, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @remote, 0xd60}, r13, 0x400}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r12, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r13, 0x5}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r12, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000000c0)=0x1, r13, 0x0, 0x2, 0x4}}, 0x20) 4m41.269730117s ago: executing program 3 (id=374): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000008fdff00000000000300000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000140)={r1, 0x0, 0x42, 0x0, &(0x7f0000000000)="3df7dab2742a1a61f6c362232d1ca21713228ebba21c414bd429d05f93b3b6cd1fcb7f9bbfbb1bc905d11583e1b93b5cd88a4c7d371f222aa269619b660c7d4f6187", 0x0, 0xd, 0x0, 0xa1, 0x0, &(0x7f0000000080)="6cda76a0cb69aa9286472dff66c8ffbd0b0cb7a6d5e68e91e0d6ed6a60fabc09fcb4dd1383593edef59da099eacb822a2749d7f0dc2c487e30da87d739e82a08e123f9b53e1e4b3a4eb01a1f659b8de567c570b02c918227d7e87a25870af1719286c055ad197c32b7104373fe5ea1c91bb58e20bbf4359770e5905ed5a8b4a48138db5835e1ea1b40218c71f5d3a2dccbf596e61e54e0ab32f9bec2c115c4f342", 0x0, 0x2, 0x0, 0x4}, 0x37) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x60}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r3, @ANYRESHEX=r4], 0x15) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000200)=0x5, 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000008fdff00000000000300000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) (async) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000140)={r1, 0x0, 0x42, 0x0, &(0x7f0000000000)="3df7dab2742a1a61f6c362232d1ca21713228ebba21c414bd429d05f93b3b6cd1fcb7f9bbfbb1bc905d11583e1b93b5cd88a4c7d371f222aa269619b660c7d4f6187", 0x0, 0xd, 0x0, 0xa1, 0x0, &(0x7f0000000080)="6cda76a0cb69aa9286472dff66c8ffbd0b0cb7a6d5e68e91e0d6ed6a60fabc09fcb4dd1383593edef59da099eacb822a2749d7f0dc2c487e30da87d739e82a08e123f9b53e1e4b3a4eb01a1f659b8de567c570b02c918227d7e87a25870af1719286c055ad197c32b7104373fe5ea1c91bb58e20bbf4359770e5905ed5a8b4a48138db5835e1ea1b40218c71f5d3a2dccbf596e61e54e0ab32f9bec2c115c4f342", 0x0, 0x2, 0x0, 0x4}, 0x37) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x60}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) (async) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r3, @ANYRESHEX=r4], 0x15) (async) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000200)=0x5, 0x4) (async) 4m26.123652249s ago: executing program 32 (id=374): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000008fdff00000000000300000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000140)={r1, 0x0, 0x42, 0x0, &(0x7f0000000000)="3df7dab2742a1a61f6c362232d1ca21713228ebba21c414bd429d05f93b3b6cd1fcb7f9bbfbb1bc905d11583e1b93b5cd88a4c7d371f222aa269619b660c7d4f6187", 0x0, 0xd, 0x0, 0xa1, 0x0, &(0x7f0000000080)="6cda76a0cb69aa9286472dff66c8ffbd0b0cb7a6d5e68e91e0d6ed6a60fabc09fcb4dd1383593edef59da099eacb822a2749d7f0dc2c487e30da87d739e82a08e123f9b53e1e4b3a4eb01a1f659b8de567c570b02c918227d7e87a25870af1719286c055ad197c32b7104373fe5ea1c91bb58e20bbf4359770e5905ed5a8b4a48138db5835e1ea1b40218c71f5d3a2dccbf596e61e54e0ab32f9bec2c115c4f342", 0x0, 0x2, 0x0, 0x4}, 0x37) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x60}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r3, @ANYRESHEX=r4], 0x15) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000200)=0x5, 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000008fdff00000000000300000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) (async) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000140)={r1, 0x0, 0x42, 0x0, &(0x7f0000000000)="3df7dab2742a1a61f6c362232d1ca21713228ebba21c414bd429d05f93b3b6cd1fcb7f9bbfbb1bc905d11583e1b93b5cd88a4c7d371f222aa269619b660c7d4f6187", 0x0, 0xd, 0x0, 0xa1, 0x0, &(0x7f0000000080)="6cda76a0cb69aa9286472dff66c8ffbd0b0cb7a6d5e68e91e0d6ed6a60fabc09fcb4dd1383593edef59da099eacb822a2749d7f0dc2c487e30da87d739e82a08e123f9b53e1e4b3a4eb01a1f659b8de567c570b02c918227d7e87a25870af1719286c055ad197c32b7104373fe5ea1c91bb58e20bbf4359770e5905ed5a8b4a48138db5835e1ea1b40218c71f5d3a2dccbf596e61e54e0ab32f9bec2c115c4f342", 0x0, 0x2, 0x0, 0x4}, 0x37) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x60}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) (async) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r3, @ANYRESHEX=r4], 0x15) (async) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000200)=0x5, 0x4) (async) 20.455918584s ago: executing program 4 (id=1364): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4801}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/12], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) (fail_nth: 14) 19.531578897s ago: executing program 4 (id=1370): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$can_raw(0x1d, 0x3, 0x1) socket$kcm(0x10, 0x2, 0x4) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r0, @ANYRES32=r2], 0x44}}, 0x0) 18.106553425s ago: executing program 4 (id=1374): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x383001, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x800) signalfd4(r1, &(0x7f00000000c0), 0x8, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="12011001ec037e05000000eb8dd40102030109021b00010700f0090904c007019778370309053971200d22a302"], 0x0) syz_emit_ethernet(0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd602e2caa00003b00fe8000000000000000000000000000bbff020000000000000000000000000001162ba97fc96f3518c39111a6c298fbd44718f69a770610f97a51d201e8a24a5f376f0141f543a4c044986ebd7b1020a7302e89032d557e5262aa49e403341e6ba5f6bea86a5f83388b01ecab8863b726d61920303dcec6027f06390ca8bdff60ab6fb0554546d49dbc7f83c4aaeaf293099df1b85b9b9bc2a33aebc7347583c01ab3fa0840425dc86e8c80d14a926fa631664c3134034dad3635aa7e64a4340bd9d2356c5a94e37d9ad12f953585dbd13191512f034a563c85b4770ca35cc875f3"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_socket_connect_nvme_tcp() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = fsopen(&(0x7f0000000240)='rpc_pipefs\x00', 0x1) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x105900, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x7) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0xe1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000040)='E\xe1\x85\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x21}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000070000100000000000000000007000000", @ANYBLOB="0c00018008000100050004000c0001"], 0x30}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x24, 0xfffffffffffffffd, 0x1, 0xffffffffffffffff, 0x8}, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7, 0x20e282) ioctl$USBDEVFS_WAIT_FOR_RESUME(r5, 0x5523) close_range(r0, 0xffffffffffffffff, 0x0) 14.527552382s ago: executing program 4 (id=1394): r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x601040, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, 0x0, 0x884) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x131000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0xae30, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2, 0x0, 0x20000000}}, 0x2e) getsockopt(r5, 0x111, 0x3, 0x0, &(0x7f0000000080)) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r7, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r8, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_IOAS_UNMAP$ALL(r4, 0x3b86, &(0x7f0000000240)={0x18, r7}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newlink={0x3c, 0x10, 0x403, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_VF_PORTS={0x4}, @IFLA_VFINFO_LIST={0x4}, @IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}]}, 0x3c}}, 0x20048000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000ac0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r10 = fsopen(&(0x7f0000000040)='ceph\x00', 0x1) socket$nl_sock_diag(0x10, 0x3, 0x4) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 10.354956225s ago: executing program 2 (id=1413): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x2040400) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000180)=ANY=[], 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x109a, &(0x7f00000000c0)={0x0, 0x8d2da, 0x0, 0xffffffff, 0xbf}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) epoll_create1(0x80000) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r3, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r4, 0x47f5, 0x0, 0x0, 0x0, 0x0) 8.08673634s ago: executing program 5 (id=1422): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$can_raw(0x1d, 0x3, 0x1) socket$kcm(0x10, 0x2, 0x4) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) sendfile(r1, r0, 0x0, 0x110000) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000080), &(0x7f0000000280)=0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) socket(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) 7.04058223s ago: executing program 2 (id=1425): r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000100)={0x80000000, &(0x7f0000000040), &(0x7f0000000080)=[{}, {{0x80000000}}]}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f00000003c0)={r1, 0x0, &(0x7f0000000440)=[{{0x80000000, 0x0}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000400)={r4, &(0x7f00000007c0)=[{0x80000000}], 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xa, 0x4, &(0x7f0000006680)) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="140000f12500010025bd7000fcdbdf2507000000"], 0x14}}, 0x2400e844) r8 = syz_open_procfs(0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000004c00)=""/102392, 0x18ff8) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r10 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000a80)={{0x0, 0x5, 0x0, 0x7, 0xfe54, 0x0, 0x200, 0x7f, 0x3, 0x9, 0x9, 0x9, 0x7, 0xa4, 0x8}}) ioctl$BTRFS_IOC_TREE_SEARCH(r8, 0xd0009411, &(0x7f0000001b40)={{0x0, 0x8, 0x11, 0xd751, 0x80000000007, 0x6, 0x1017, 0x7, 0x1003, 0xd3f, 0x5, 0x8, 0xfffffffffffffc00, 0x101, 0xffffffffffffff7f}}) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f000000a300)={{r5, 0x0, 0x2, [0x1, 0x8]}, {0x80000000, r3, 0x0, [0xc1b, 0x4]}, 0x0, [0x7e, 0x8]}) sendmsg$NFNL_MSG_CTHELPER_DEL(r8, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000000209010400000000000000000a000000080005400000000e2c0002001400018008000100ffffffff08000200ffffffff0600034008a900000c13c080050001003a0000000800064000200001"], 0x50}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) 6.675579196s ago: executing program 1 (id=1426): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000240)='sys_exit\x00', r3}, 0x18) io_cancel(0x0, 0x0, 0x0) 6.610324829s ago: executing program 2 (id=1427): r0 = userfaultfd(0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x8) read$FUSE(r1, &(0x7f0000000980)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) io_uring_setup(0x1b7a, &(0x7f0000000040)={0x0, 0xc8a1, 0x100, 0x5, 0x20002f9, 0x0, r1}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0xa4, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x14}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4040080}, 0x4008050) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000040)={{&(0x7f00004be000/0x2000)=nil, 0x2000}, 0x1}) setrlimit(0x1, &(0x7f0000000000)={0x7e017999, 0x2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000300)}], 0x1, 0x40800) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r10, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES64=r4], 0x84}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) setsockopt$inet6_opts(r9, 0x29, 0x40, &(0x7f0000000000)=ANY=[], 0xd0060) close(r8) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 6.196511078s ago: executing program 0 (id=1428): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x4a) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4048aecb, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setregid(0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) setresgid(0x0, 0xee00, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0x40000007}}, 0x48) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r6, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000040)=0x6, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f2f, 0xfcde, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x203ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000480)="586775fb9901db49815172c1f747d4b7f006cde302a9915d508a026726989f48e7d7a4f8ad25e0ba2080b91f0aa200a8337d1018b387d7cc57c2e4413b4a82788410d3e411cb0ca1efa96a886164d6c1f974cae23a3ebab481e5e42c99e6882ea35031d7f412f72150c3299311a83bb1e39af73c0c2350f08b8912c23c75902ac99f982b1ca770", 0x3}, 0x23) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) 6.17450858s ago: executing program 5 (id=1429): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x24403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x910, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000500)=ANY=[@ANYBLOB="a0000000", @ANYBLOB="050424bd7000fedbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="84000280400001"], 0xa0}, 0x1, 0x0, 0x0, 0x4040800}, 0x24040084) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf2507"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r6, 0x5) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r8 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000040)=':\'\x00', &(0x7f00000000c0)='.\x00', 0x0) syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f0000000080)=ANY=[], 0x0) accept(r6, 0x0, 0x0) 5.540641832s ago: executing program 2 (id=1430): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b96, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x89, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x80, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="40330f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x1, 0x9, "461846725940730b27"}, 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@private2={0xfc, 0x2, '\x00', 0x1}, @empty, @private1, 0x80000, 0x6, 0x0, 0x0, 0x6, 0x900066}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="14042bfdd3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 5.429815556s ago: executing program 4 (id=1431): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016000f003f1b48013d030100000000009500000000000000bc26000000000000bf67000000000000070600000fff07006702000003000000360600000ee600f0bf052000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x8, 0x8, 0x90, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x1, 0x2}, 0x48) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r3, 0x40044160, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = gettid() sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="942a00000400060014001280090001007665746800000000e7ff028008001300", @ANYRES32=r5, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008080) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4a21, 0xdec, @private2, 0x6}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000200), &(0x7f0000000100)=0x8) 5.232087702s ago: executing program 0 (id=1432): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/83, 0x53}], 0x1, 0xc9, 0x1) socket$inet6(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000440)={0xfffffffffffffffa, 0x0, 0x8c1f, 0x0, 0x0, 0x0, 0x400, 0x7, 0x0, 0x37dc12502000000, 0x4000000000000000, 0x0, 0x8, 0x2, 0x0, 0xffffffffffff2ea6, 0xffffffffffffffec, 0x1, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000000000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = syz_open_dev$cec(0x0, 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) ftruncate(r6, 0x2007ffb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1, 0xb, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000010000000000000008000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffad0200000820b7030000010000"], &(0x7f0000000000)='syzkaller\x00', 0xe, 0xff7, &(0x7f0000002600)=""/4087, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x3f}, 0x94) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x10) ioctl$CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000100)={0x9, 0x0, 0x9, 0xffffffff, 0x0, 0x4, "0ff8000000000000c5c6ff0717c3a86d", 0x4, 0x2, 0x5, 0xff, 0x0, 0x1, 0xdf}) r8 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r8, &(0x7f0000000000)={0x18, 0x2, {0x3, @remote}}, 0x1e) connect$pptp(r8, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) 5.231154667s ago: executing program 1 (id=1433): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x24403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x910, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000500)=ANY=[@ANYBLOB="a0000000", @ANYBLOB="050424bd7000fedbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="84000280400001"], 0xa0}, 0x1, 0x0, 0x0, 0x4040800}, 0x24040084) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf2507"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r6, 0x5) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r8 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000040)=':\'\x00', &(0x7f00000000c0)='.\x00', 0x0) syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f0000000080)=ANY=[], 0x0) accept(r6, 0x0, 0x0) 3.133255948s ago: executing program 0 (id=1434): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1411c1, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x4a7c0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000003c0)={0x0, 0x0, 0x204000, 0x2000, &(0x7f0000fed000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0x5) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@gettaction={0x14, 0x32, 0x801, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x880e) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x14, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x8e, 0x7}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.events\x00', 0x275a, 0x0) tee(r6, r6, 0x6, 0x0) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r7, @ANYBLOB="2da52abd7000fbdbdf250300000008000100000000000800010000000000340007800c"], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000228d5b2fa1391969f7a4da68ba8af448ed3e9f509f8d3e0e88c022444aa15af5dcd9c77e1356ce4358a7d7c4298cfe00d465a6910deba909f074bd59b556cc4a6a9ff80d150f7e73279f1e454b4b4cabbe6e3af69308cabaf8f863201d6c0a5f495d2732e66c40db3b168212fa5b5e9eff18dc549f7d223bbcb578229d98ddedf509e702f4cdd1db0251c82a026073a2734fd9b80772cbb18b9983730413", @ANYRES16=r7, @ANYBLOB="20002db97000fddbdf25010000000c00050001010000000000000c000400fbffffffffffffff0c000800ff000000000000000c0003000f000000000000000c0008000800000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x24000050}, 0x4000000) 2.963857652s ago: executing program 0 (id=1435): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0x5, &(0x7f0000000140)={0x8, 0x1}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r4, &(0x7f0000000240), 0xfffffecc) (async) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000000000)=0xf) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='irq_handler_exit\x00', r5, 0x0, 0x3}, 0x18) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) (async) syz_open_dev$loop(&(0x7f0000000700), 0x10, 0x202a80) (async, rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x200, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050029bd700000000000000000003b0baae4", @ANYRES32=0x0, @ANYBLOB="0c0070000400050004000700"], 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x0) (async) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r9, &(0x7f0000000680)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) 2.962957369s ago: executing program 5 (id=1436): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) read$msr(0xffffffffffffffff, &(0x7f0000003040)=""/102399, 0x18fff) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x2000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x2}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x1802, 0x0) r3 = fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) fsmount(r3, 0x1, 0x4) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f00000000c0)) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) close(0x4) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004001, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) r7 = open(&(0x7f0000000480)='.\x00', 0x48800, 0x50) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r8, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8) 2.843487488s ago: executing program 4 (id=1437): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x4, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40800) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x17f, 0x9}, 0x9c) pipe2$9p(0x0, 0x0) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109022400010000000009040000025c291d000905090000000006f808050ae5"], 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x20000000000002, 0x2) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f0000000100)={0x1, 0x2}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x806, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 2.65175664s ago: executing program 0 (id=1438): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x4, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40800) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x17f, 0x9}, 0x9c) pipe2$9p(0x0, 0x0) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109022400010000000009040000025c291d000905090000000006f808050ae5"], 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x20000000000002, 0x2) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f0000000100)={0x1, 0x2}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x806, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 2.0523528s ago: executing program 1 (id=1439): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000070601030000000000000000000004000500010007"], 0x1c}}, 0x1000000000000) 1.972043502s ago: executing program 2 (id=1440): ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) connect$x25(r0, &(0x7f00000000c0), 0x12) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xf4, 0x1, 0x3, 0x101, 0x0, 0x0, {0xa}, [@NFQA_PAYLOAD={0xdf, 0xa, "8b3366c13f25a0b83a48c9e11e4d42efd60d0924a933c18f6ea0e00e14bab28370bbfc3a2d6b34a6008b3d733a8852750279a667108aca2c0b62ec449f1fedd060d6567bc4c285fa4ad11a1445b77144d28c5df43105b87c0c3c09f83f118d573cbf1389e66e9a66b9bfede05ff81baef66c259e54320a8a884cc8d419befb12f40e5796be21b7ec796c482eee03e2d39fa01eb58c24f78799ad57df1639fccbb40c10ed67711b95a5e6078ca18fd4ab4b897296c15aed11901b3d096641d211c7c402b2976d82f1c6f9fb10ead30adf593522bdac8f363c8478d0"}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000002c0)={0x8, 0x6, 0x1, 0x0, 0x7, 0x0, [{0x5, 0xc7f, 0x5}, {0xff, 0x6, 0x1000, '\x00', 0x984}, {0xfffffffffffffff2, 0x1, 0x8, '\x00', 0x100c}, {0x7, 0x3, 0xbe, '\x00', 0x1}, {0xfffffffffffffffa, 0xc, 0x5, '\x00', 0x4}, {0x0, 0x7, 0xff, '\x00', 0x10a}, {0xfffffffffffffffb, 0x2, 0x2, '\x00', 0x1104}]}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xc0, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x28}}}}, [@NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ce8ace9bc25d0da2"}]}, @NL80211_ATTR_REKEY_DATA={0x6c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="60512d62800c79350e19c6d12aa79c68f5226ec2c47d197258f9eeff9212c54c"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b78e90f5890a74bcac9809a64cabc78f"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9c9}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="2793a141112d87621627926622d62d79"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "22e26aa696f88f1b"}]}, @NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ebfeaf1737c2104e"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "838f7c984b49f43b"}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4010}, 0x4042898) setsockopt$MRT6_ASSERT(r0, 0x29, 0xcf, &(0x7f0000000600)=0x1, 0x4) r1 = getuid() quotactl_fd$Q_SETINFO(r0, 0xffffffff80000600, r1, &(0x7f0000000640)={0x9, 0x6, 0x0, 0x2}) r2 = socket$inet(0x2, 0x2, 0x4) connect$inet(r2, &(0x7f0000000680)={0x2, 0x4e24, @multicast1}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000006c0)={0x7fff, 0x8, 0x3}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000700)={0x70000000, 0x6, 0x1, 'queue0\x00', 0xd}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000880)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff4000/0x7000)=nil, &(0x7f00000007c0)="4050f3d8dcf75bf32ae8c29fb447b3e8fc3a6fb23d9b92767d8bc217ccae4a969210e8993ca42ffdd0a18201f3ee6b406f673ffb7a6680a9bf2b53f6ed0218003e1d90999c2634b04a9b08ccbc438394f5aaef366bff99b05993c9989fbc0ab53c7e075a1c68b31bd61f2b44a8e4410273cac8bcffa50de403160b532d7ddaac22d4e98861c13402f2222fbd07e2be3058469b280af8d2a040be67b8f9f78dc20b38a6508088c78947cfe22fc6983f248a7d2d2789f2f25342c6756798c2cd", 0xbf, r0}, 0x68) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000900)=0x3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r3, 0xc0045103, &(0x7f0000000980)=0x7) preadv2(r3, &(0x7f0000000ac0)=[{&(0x7f00000009c0)=""/114, 0x72}, {&(0x7f0000000a40)=""/104, 0x68}], 0x2, 0x0, 0xeb7f, 0x1) r4 = open$dir(&(0x7f0000000b00)='./file0\x00', 0x1, 0x90) getdents64(r4, &(0x7f0000000b40)=""/157, 0x9d) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x3) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000c00)={0x0, 0xffffd83b}, &(0x7f0000000c40)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000c80)={r5, 0x35}, 0x8) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)={0xf8, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000e80)={{0x1, 0x1, 0x18, r3, {0x8}}, './file1\x00'}) ioctl$SIOCNRDECOBS(r6, 0x89e2) recvmmsg(r2, &(0x7f0000005ec0)=[{{&(0x7f0000000ec0)=@can, 0x80, &(0x7f0000004240)=[{&(0x7f0000000f40)=""/4096, 0x1000}, {&(0x7f0000001f40)=""/201, 0xc9}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000003040)=""/103, 0x67}, {&(0x7f00000030c0)=""/242, 0xf2}, {&(0x7f00000031c0)=""/87, 0x57}, {&(0x7f0000003240)=""/4096, 0x1000}], 0x7, &(0x7f00000042c0)=""/22, 0x16}, 0x9}, {{&(0x7f0000004300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000004640)=[{&(0x7f0000004380)=""/90, 0x5a}, {&(0x7f0000004400)=""/99, 0x63}, {&(0x7f0000004480)=""/253, 0xfd}, {&(0x7f0000004580)=""/188, 0xbc}], 0x4, &(0x7f0000004680)=""/219, 0xdb}, 0x2}, {{0x0, 0x0, &(0x7f0000004e00)=[{&(0x7f0000004780)=""/49, 0x31}, {&(0x7f00000047c0)=""/8, 0x8}, {&(0x7f0000004800)=""/164, 0xa4}, {&(0x7f00000048c0)=""/24, 0x18}, {&(0x7f0000004900)=""/238, 0xee}, {&(0x7f0000004a00)=""/101, 0x65}, {&(0x7f0000004a80)=""/249, 0xf9}, {&(0x7f0000004b80)=""/166, 0xa6}, {&(0x7f0000004c40)=""/235, 0xeb}, {&(0x7f0000004d40)=""/137, 0x89}], 0xa}, 0x6}, {{&(0x7f0000004ec0)=@x25, 0x80, &(0x7f0000005380)=[{&(0x7f0000004f40)=""/248, 0xf8}, {&(0x7f0000005040)}, {&(0x7f0000005080)=""/96, 0x60}, {&(0x7f0000005100)=""/191, 0xbf}, {&(0x7f00000051c0)=""/26, 0x1a}, {&(0x7f0000005200)=""/208, 0xd0}, {&(0x7f0000005300)=""/95, 0x5f}], 0x7, &(0x7f0000005400)=""/178, 0xb2}, 0x800}, {{0x0, 0x0, &(0x7f0000005680)=[{&(0x7f00000054c0)=""/150, 0x96}, {&(0x7f0000005580)=""/25, 0x19}, {&(0x7f00000055c0)=""/86, 0x56}, {&(0x7f0000005640)=""/64, 0x40}], 0x4}}, {{&(0x7f00000056c0)=@can, 0x80, &(0x7f00000058c0)=[{&(0x7f0000005740)=""/46, 0x2e}, {&(0x7f0000005780)=""/153, 0x99}, {&(0x7f0000005840)=""/70, 0x46}], 0x3}, 0x5}, {{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f0000005900)=""/167, 0xa7}, {&(0x7f00000059c0)=""/9, 0x9}, {&(0x7f0000005a00)=""/92, 0x5c}, {&(0x7f0000005a80)=""/171, 0xab}, {&(0x7f0000005b40)=""/76, 0x4c}, {&(0x7f0000005bc0)=""/67, 0x43}, {&(0x7f0000005c40)=""/124, 0x7c}, {&(0x7f0000005cc0)=""/235, 0xeb}], 0x8, &(0x7f0000005e40)=""/90, 0x5a}, 0x4}], 0x7, 0x2100, 0x0) 1.965565059s ago: executing program 0 (id=1441): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0xa, 0x2) r3 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r3, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x1, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) ioctl$SIOCGETMIFCNT_IN6(r4, 0x89e0, &(0x7f0000000040)) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0x3, &(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) modify_ldt$write(0x1, &(0x7f0000000000)={0xfff, 0x100000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) lseek(r3, 0x0, 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) poll(&(0x7f0000000040), 0x0, 0x7) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xcf4e74310708dfc5, 0xc}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003940)=[{{0x0, 0x32, 0x0}}], 0x1, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) 1.951211235s ago: executing program 1 (id=1442): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4008890) listen(0xffffffffffffffff, 0x0) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, 0x0, &(0x7f0000000080)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x100000000000000, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x4000, 0xf9ffff00, 0x90, [], 0x2, 0x0, &(0x7f0000000100)=[{}, {}, {}]}, 0x108) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000d00)}], 0x2}, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 1.828419694s ago: executing program 2 (id=1443): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x800) r0 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x40042, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @func_proto, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}}, 0x0, 0x5a}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000105002000800000000000000000000003000000000100000002"], &(0x7f0000000340)=""/142, 0x4e, 0xfeaf, 0x1}, 0x20) socket$inet(0x2, 0x3, 0x6) r2 = syz_io_uring_setup(0x224, &(0x7f0000000300)={0x0, 0xba17, 0x4000, 0xffffffff, 0x31e}, &(0x7f00000000c0)=0x0, 0xfffffffffffffffc) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x98}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa}, 0x94) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, &(0x7f0000000080)=0x1) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000180)={{0x1, 0x1}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r5, &(0x7f0000000040)}, 0x20) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x3, 0x3, 0x0, 0x0, 0xf}) ioctl$int_in(r4, 0x5452, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0xb, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x6dc0, 0xfcbe, 0x41, 0x0, 0x0) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x3b, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c8301020301090229000100000000090400000002020100022406"], 0x0) 1.492869986s ago: executing program 1 (id=1444): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000000000000000bb8900000000850000006d0000"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x33, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) landlock_create_ruleset(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getcwd(&(0x7f0000001180)=""/4096, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)={0x18, r5, 0x111, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GETFLAGS(r6, 0x80086601, &(0x7f0000000240)) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001480)={0x14, 0x36, 0x107, 0x3, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r8, 0xb0b}, 0x14}}, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r10, 0x4040ae77, &(0x7f0000000180)={0x1}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 1.261778137s ago: executing program 5 (id=1445): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f000001f8c0)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000280)={0x1d, r1, 0x2, {0x0, 0xf0, 0x4}, 0xfe}, 0x18) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket(0x1d, 0x2, 0x6) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x80) sendmsg$inet_sctp(r4, &(0x7f00000008c0)={&(0x7f00000000c0)=@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000940)=[{0x0}, {0x0}, {&(0x7f00000005c0)}, {&(0x7f0000000a80)="e16cc70565d13220fc10b89070eb038f03017a1d54b826d655001773da730c7c19f0819d5582e8e26d7ebad7b8cdc24be4b1ef788cfd804e0b1dc4d7b596702f10036528cae9f730f94adf378515b9c8f1297f6daa5d69970778b3a0f4d004d615627ebf493c1391530ada457dc945d65819649e20f56f6d9716c0f57a469cf962ca9ce643ba990e80db238aadfa91ec3cea1dcb5fe0f2f878ca", 0x9a}, {&(0x7f0000000840)="40312c10e77a8fd923d436956acae039b833654aacae500318f310b2cb9ac2d6bf12b3eb7f106a43482ac553ba0c13cc07232331d9d112f24edd6dff73252612184a3c963bf5befda569", 0x4a}, {&(0x7f0000000680)="1e5cb0c36731951104fa3a30a9c539156480914d7e6debc50147f9d1f21a5669d9c177206ea17dd5b2a8236916e8d53644c0651d886ca4b33f4b38b8db716b917b749d716d394eee7165cb14", 0x4c}], 0x6, &(0x7f0000000380), 0x0, 0x4}, 0x4) ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f000001f8c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f000001f900)={0x1d, r5, 0x2, {0x2, 0x0, 0x6}, 0x2}, 0x24) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040), 0x0) sendmmsg$inet6(r6, &(0x7f00000017c0)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0x11, @loopback, 0x8000001}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000001200)="01", 0x1}], 0x1}}], 0x1, 0x24040845) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback}}}, 0x84) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r5, 0x1, {0x2, 0xff, 0x3}, 0x1}, 0x18) 696.263439ms ago: executing program 5 (id=1446): ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000000)=0x3) (async) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = syz_init_net_socket$nfc_raw(0x27, 0x6, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000080)={{r1}, "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"}) write$P9_RREADLINK(r0, &(0x7f0000001080)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) (async) acct(&(0x7f00000010c0)='./file0\x00') (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100), 0x40, 0x0) readv(r0, &(0x7f0000003140)=[{&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/4096, 0x1000}], 0x2) setsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000003180)=0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000031c0)={'vxcan1\x00', 0x0}) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000003200)=0x9) (async) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x4000010, r2, 0xb5e0c000) (async) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r0, 0x4020aed2, &(0x7f0000003240)={0xeeee0000, 0x101000, 0x8}) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000003280)=@assoc_value, &(0x7f00000032c0)=0x8) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000003300)={'nicvf0\x00', 0x0}) r6 = memfd_secret(0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) (async) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000003340)) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000003500)={&(0x7f0000003380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000034c0)={&(0x7f00000033c0)={0xf4, 0x0, 0xf33f292e8e1c9dd0, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44804) syz_open_dev$MSR(&(0x7f0000003540), 0x922d, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000003580)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000003600)={0x0, &(0x7f00000035c0)}, 0x10) umount2(&(0x7f0000003640)='./file1\x00', 0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000038c0)={0x11, 0x10, &(0x7f0000003680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003700)='GPL\x00', 0xce6, 0xd2, &(0x7f0000003740)=""/210, 0x41000, 0x81, '\x00', r3, 0x0, r0, 0x8, &(0x7f0000003840)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003880)=[r0, r6, r6], 0x0, 0x10, 0x3ff}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000003980)=r9, 0x4) openat$cgroup(r0, &(0x7f00000039c0)='syz1\x00', 0x200002, 0x0) (async) socket$kcm(0x29, 0x0, 0x0) 670.579217ms ago: executing program 5 (id=1447): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x24403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x910, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000500)=ANY=[@ANYRES16, @ANYBLOB="050424bd7000fedbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="84000280400001"], 0xa0}, 0x1, 0x0, 0x0, 0x4040800}, 0x24040084) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf2507"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r6, 0x5) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r8 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000040)=':\'\x00', &(0x7f00000000c0)='.\x00', 0x0) syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f0000000080)=ANY=[], 0x0) accept(r6, 0x0, 0x0) 0s ago: executing program 1 (id=1448): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x9c}, {0x6}]}, 0x10) r2 = socket$rxrpc(0x21, 0x2, 0xa) recvfrom$rxrpc(r2, &(0x7f0000000200)=""/217, 0xd9, 0x0, &(0x7f0000000300)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e21, 0x2, @empty, 0x9}}, 0x24) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xb8, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x74, 0x12, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8b}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, {0x3c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x3}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0x100}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r4, &(0x7f0000000340)={&(0x7f0000000100)=@rc, 0x80, 0x0, 0x0, &(0x7f0000000300)=""/12, 0xc}, 0x10002) socket$inet6_sctp(0xa, 0x1, 0x84) mount$9p_rdma(&(0x7f0000000080), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x11e) r7 = fanotify_init(0xf00, 0x40000) fanotify_mark(r7, 0x105, 0x4000997d, r6, 0x0) close_range(r5, 0xffffffffffffffff, 0x10000000000000) r8 = dup2(r0, r0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x4004af07, &(0x7f0000002280)) kernel console output (not intermixed with test programs): +0x16d/0x220 [ 279.685472][ T8568] ? __pfx___sys_sendmsg+0x10/0x10 [ 279.685507][ T8568] do_syscall_64+0xcd/0xf80 [ 279.685534][ T8568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.685552][ T8568] RIP: 0033:0x7fdcec78f749 [ 279.685567][ T8568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.685584][ T8568] RSP: 002b:00007fdced561038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 279.685602][ T8568] RAX: ffffffffffffffda RBX: 00007fdcec9e5fa0 RCX: 00007fdcec78f749 [ 279.685615][ T8568] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 279.685626][ T8568] RBP: 00007fdced561090 R08: 0000000000000000 R09: 0000000000000000 [ 279.685636][ T8568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.685647][ T8568] R13: 00007fdcec9e6038 R14: 00007fdcec9e5fa0 R15: 00007fff3c8bbe88 [ 279.685673][ T8568] [ 279.889837][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 279.913494][ T9] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 279.921855][ T9] usb 3-1: config 129 has an invalid interface number: 5 but max is 0 [ 280.000862][ T8571] tmpfs: Unknown parameter 'veno' [ 280.364852][ T9] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 280.423071][ T9] usb 3-1: config 129 has no interface number 0 [ 280.429346][ T9] usb 3-1: config 129 has no interface number 1 [ 280.436411][ T9] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 280.450407][ T9] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 280.700576][ T9] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 280.738041][ T9] usb 3-1: config 129 interface 135 has no altsetting 0 [ 280.745259][ T9] usb 3-1: config 129 interface 5 has no altsetting 0 [ 280.757867][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 280.769447][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.779011][ T9] usb 3-1: Product: syz [ 280.813397][ T9] usb 3-1: Manufacturer: syz [ 280.822090][ T9] usb 3-1: SerialNumber: syz [ 280.830059][ T8580] netlink: 16 bytes leftover after parsing attributes in process `syz.0.711'. [ 281.677731][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 281.677747][ T30] audit: type=1400 audit(1767709206.531:629): avc: denied { getopt } for pid=8587 comm="syz.4.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 281.681049][ T8588] netlink: 'syz.4.714': attribute type 1 has an invalid length. [ 281.750340][ T8589] netlink: 28 bytes leftover after parsing attributes in process `syz.4.714'. [ 281.848328][ T30] audit: type=1400 audit(1767709206.701:630): avc: denied { getopt } for pid=8594 comm="syz.0.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 281.892911][ T5992] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 281.902937][ T8592] bond1: (slave bridge1): making interface the new active one [ 281.912011][ T8592] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 282.000131][ T8600] netlink: 12 bytes leftover after parsing attributes in process `syz.0.717'. [ 282.052621][ T5935] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 282.062765][ T5992] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 282.071243][ T5992] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.081935][ T5992] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 282.091034][ T5992] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 282.099374][ T5992] usb 6-1: Manufacturer: syz [ 282.106069][ T5992] usb 6-1: config 0 descriptor?? [ 282.123094][ T5879] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 282.165231][ T5992] rc_core: IR keymap rc-hauppauge not found [ 282.171185][ T5992] Registered IR keymap rc-empty [ 282.179057][ T5992] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 282.190781][ T5992] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input14 [ 282.202620][ T5935] usb 2-1: Using ep0 maxpacket: 32 [ 282.211152][ T5935] usb 2-1: config 0 interface 0 has no altsetting 0 [ 282.221820][ T5935] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 282.232574][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.240637][ T5935] usb 2-1: Product: syz [ 282.244963][ T5935] usb 2-1: Manufacturer: syz [ 282.249620][ T5935] usb 2-1: SerialNumber: syz [ 282.257635][ T5935] usb 2-1: config 0 descriptor?? [ 282.272797][ T5879] usb 5-1: device descriptor read/64, error -71 [ 282.379929][ C1] igorplugusb 6-1:0.0: Error: urb status = -32 [ 282.409397][ T10] usb 6-1: USB disconnect, device number 11 [ 282.512746][ T5879] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 282.642537][ T5879] usb 5-1: device descriptor read/64, error -71 [ 282.655779][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 282.663152][ T9] usb 3-1: MIDIStreaming interface descriptor not found [ 282.692355][ T5935] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 282.739537][ T9] usb 3-1: USB disconnect, device number 28 [ 282.755018][ T5879] usb usb5-port1: attempt power cycle [ 282.812409][ T30] audit: type=1400 audit(1767709207.661:631): avc: denied { create } for pid=8605 comm="syz.2.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 282.844476][ T5819] udevd[5819]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:129.5/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 282.875716][ T30] audit: type=1400 audit(1767709207.691:632): avc: denied { setopt } for pid=8605 comm="syz.2.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 282.967293][ T30] audit: type=1400 audit(1767709207.721:633): avc: denied { getopt } for pid=8605 comm="syz.2.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 283.020665][ T30] audit: type=1400 audit(1767709207.871:634): avc: denied { read } for pid=5484 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 283.175643][ T5879] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 283.175744][ T5935] usb 2-1: USB disconnect, device number 23 [ 283.403288][ T5879] usb 5-1: device descriptor read/8, error -71 [ 283.652540][ T5879] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 283.685533][ T5879] usb 5-1: device descriptor read/8, error -71 [ 283.804400][ T5879] usb usb5-port1: unable to enumerate USB device [ 283.903313][ T5935] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 284.046822][ T5935] usb 6-1: device descriptor read/64, error -71 [ 284.302530][ T5935] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 285.242181][ T5935] usb 6-1: device descriptor read/64, error -71 [ 285.364048][ T5935] usb usb6-port1: attempt power cycle [ 285.712873][ T5935] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 285.752600][ T5935] usb 6-1: device descriptor read/8, error -71 [ 285.959985][ T8686] tmpfs: Unknown parameter 'veno' [ 286.161478][ T8687] tmpfs: Unknown parameter 'veno' [ 286.320283][ T8690] xt_NFQUEUE: number of total queues is 0 [ 286.322639][ T5935] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 286.356162][ T5935] usb 6-1: device descriptor read/8, error -71 [ 286.473719][ T5935] usb usb6-port1: unable to enumerate USB device [ 286.660674][ T5935] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 286.952784][ T5935] usb 5-1: Using ep0 maxpacket: 16 [ 286.988373][ T5935] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.208061][ T30] audit: type=1400 audit(1767709212.051:635): avc: denied { remount } for pid=8699 comm="syz.2.739" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 287.814043][ T5935] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.824380][ T5935] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 287.834068][ T5935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.899354][ T30] audit: type=1400 audit(1767709212.751:636): avc: denied { map } for pid=8711 comm="syz.2.743" path="socket:[21400]" dev="sockfs" ino=21400 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 288.118404][ T30] audit: type=1400 audit(1767709212.751:637): avc: denied { read accept } for pid=8711 comm="syz.2.743" path="socket:[21400]" dev="sockfs" ino=21400 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 288.292089][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 288.302016][ T5935] usbhid 5-1:128.0: can't add hid device: -71 [ 288.311275][ T5935] usbhid 5-1:128.0: probe with driver usbhid failed with error -71 [ 288.329533][ T5935] usb 5-1: USB disconnect, device number 33 [ 288.756657][ T30] audit: type=1400 audit(1767709213.611:638): avc: denied { map } for pid=8711 comm="syz.2.743" path="/dev/video4" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 289.018515][ T8737] netlink: 'syz.0.748': attribute type 11 has an invalid length. [ 289.047365][ T8740] autofs: Bad value for 'fd' [ 289.482743][ T5935] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 289.632519][ T5935] usb 5-1: Using ep0 maxpacket: 16 [ 289.647826][ T5935] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 289.662395][ T5935] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.673628][ T5935] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 289.690070][ T5935] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 289.700956][ T5935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.700998][ T8750] netlink: 24 bytes leftover after parsing attributes in process `syz.2.751'. [ 289.709625][ T5935] usb 5-1: Product: syz [ 289.723027][ T5935] usb 5-1: Manufacturer: syz [ 289.727713][ T5935] usb 5-1: SerialNumber: syz [ 289.863270][ T30] audit: type=1400 audit(1767709214.711:639): avc: denied { map } for pid=8752 comm="syz.0.752" path="socket:[21580]" dev="sockfs" ino=21580 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 290.580398][ T8757] bridge0: port 3(macsec1) entered blocking state [ 290.587169][ T8757] bridge0: port 3(macsec1) entered disabled state [ 290.594463][ T8757] macsec1: entered allmulticast mode [ 290.599781][ T8757] bridge0: entered allmulticast mode [ 290.631642][ T8758] netlink: 120 bytes leftover after parsing attributes in process `syz.4.750'. [ 290.640674][ T8758] netlink: 64 bytes leftover after parsing attributes in process `syz.4.750'. [ 290.684786][ T8758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.694236][ T8758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.969481][ T8755] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 291.009543][ T8757] macsec1: left allmulticast mode [ 291.014771][ T8757] bridge0: left allmulticast mode [ 291.712720][ T5992] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 291.872739][ T5992] usb 6-1: Using ep0 maxpacket: 32 [ 291.916255][ T5992] usb 6-1: config 0 has an invalid interface number: 76 but max is 0 [ 291.930687][ T5992] usb 6-1: config 0 has no interface number 0 [ 291.993554][ T5992] usb 6-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 292.027542][ T5992] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.056483][ T5992] usb 6-1: Product: syz [ 292.066581][ T5992] usb 6-1: Manufacturer: syz [ 292.076695][ T5992] usb 6-1: SerialNumber: syz [ 292.095630][ T5992] usb 6-1: config 0 descriptor?? [ 292.119634][ T5992] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 292.142741][ T5992] dw2102: su3000_power_ctrl: 1, initialized 0 [ 292.148865][ T5992] dvb-usb: bulk message failed: -22 (2/0) [ 292.175025][ T5992] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 292.203251][ T5992] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 292.222608][ T5992] usb 6-1: media controller created [ 292.232892][ T5992] dvb-usb: bulk message failed: -22 (6/0) [ 292.242670][ T5992] dw2102: i2c transfer failed. [ 292.247762][ T5992] dvb-usb: bulk message failed: -22 (6/0) [ 292.269978][ T5992] dw2102: i2c transfer failed. [ 292.282553][ T5992] dvb-usb: bulk message failed: -22 (6/0) [ 292.290692][ T5992] dw2102: i2c transfer failed. [ 292.295736][ T5992] dvb-usb: bulk message failed: -22 (6/0) [ 292.301569][ T5992] dw2102: i2c transfer failed. [ 292.307641][ T5992] dvb-usb: bulk message failed: -22 (6/0) [ 292.313555][ T5992] dw2102: i2c transfer failed. [ 292.318432][ T5992] dvb-usb: bulk message failed: -22 (6/0) [ 292.324626][ T5992] dw2102: i2c transfer failed. [ 292.329676][ T5992] dvb-usb: MAC address: 02:02:02:02:02:02 [ 292.361833][ T5992] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 292.402138][ T8766] dvb-usb: bulk message failed: -22 (3/0) [ 292.416627][ T8766] dw2102: i2c transfer failed. [ 292.428995][ T8766] dvb-usb: bulk message failed: -22 (4/0) [ 292.441224][ T8766] dw2102: i2c transfer failed. [ 292.453648][ T5992] dvb-usb: bulk message failed: -22 (3/0) [ 292.562958][ T5935] usb 5-1: 0:2 : does not exist [ 292.593705][ T5935] usb 5-1: USB disconnect, device number 34 [ 292.602531][ T5992] dw2102: command 0x0e transfer failed. [ 292.623782][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 292.640562][ T5992] dvb-usb: bulk message failed: -22 (3/0) [ 292.662611][ T5992] dw2102: command 0x0e transfer failed. [ 292.985734][ T5992] dvb-usb: bulk message failed: -22 (3/0) [ 292.991734][ T5992] dw2102: command 0x0e transfer failed. [ 292.997430][ T5992] dvb-usb: bulk message failed: -22 (3/0) [ 293.009245][ T5992] dw2102: command 0x0e transfer failed. [ 293.018298][ T5992] dvb-usb: bulk message failed: -22 (1/0) [ 293.024087][ T5992] dw2102: command 0x51 transfer failed. [ 293.058367][ T5992] DVB: Unable to find symbol ds3000_attach() [ 293.064698][ T5992] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 293.139879][ T5992] rc_core: IR keymap rc-su3000 not found [ 293.165956][ T5992] Registered IR keymap rc-empty [ 293.184466][ T5992] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 293.223198][ T8786] syzkaller0: entered promiscuous mode [ 293.228700][ T8786] syzkaller0: entered allmulticast mode [ 293.235313][ T5992] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input15 [ 293.278089][ T5992] dvb-usb: schedule remote query interval to 150 msecs. [ 293.286114][ T5992] dw2102: su3000_power_ctrl: 0, initialized 1 [ 293.292209][ T5992] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 293.316077][ T5992] usb 6-1: USB disconnect, device number 16 [ 293.464083][ T5992] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 293.803306][ T5992] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 293.812611][ T5935] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 293.832563][ T24] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 293.954078][ T5992] usb 6-1: config 0 has an invalid descriptor of length 149, skipping remainder of the config [ 293.964477][ T5992] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 293.973515][ T5935] usb 2-1: Using ep0 maxpacket: 16 [ 293.980833][ T5935] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.992078][ T5935] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.002301][ T5992] usb 6-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 294.011586][ T5935] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 294.020771][ T5992] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.029053][ T5992] usb 6-1: Product: syz [ 294.033357][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.041531][ T5992] usb 6-1: Manufacturer: syz [ 294.046437][ T24] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 294.053757][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 294.064355][ T5992] usb 6-1: SerialNumber: syz [ 294.074089][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 128, changing to 7 [ 294.086065][ T5992] usb 6-1: config 0 descriptor?? [ 294.093092][ T24] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 294.102151][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.110231][ T24] usb 3-1: Product: syz [ 294.114510][ T24] usb 3-1: Manufacturer: syz [ 294.119096][ T24] usb 3-1: SerialNumber: syz [ 294.125941][ T24] usb 3-1: config 0 descriptor?? [ 294.134081][ T24] usb 3-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress f8 [ 294.310154][ T5992] usb 6-1: USB disconnect, device number 17 [ 294.485099][ T5935] mcp2221 0003:04D8:00DD.0009: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 295.335556][ T8811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.348622][ T8811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.803566][ T8817] netlink: 32 bytes leftover after parsing attributes in process `syz.4.768'. [ 295.882920][ T5935] usb 2-1: reset high-speed USB device number 24 using dummy_hcd [ 296.970850][ T24] usb 3-1: USB disconnect, device number 29 [ 297.286143][ T8834] tmpfs: Unknown parameter 'veno' [ 297.552001][ T6326] udevd[6326]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 297.581323][ T8821] NFSD: Failed to start, no listeners configured. [ 297.759661][ T8838] syzkaller0: entered promiscuous mode [ 297.765421][ T8838] syzkaller0: entered allmulticast mode [ 297.904167][ T8842] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 297.923163][ T8842] netlink: 10 bytes leftover after parsing attributes in process `syz.0.776'. [ 298.486910][ T30] audit: type=1400 audit(1767709223.341:640): avc: denied { shutdown } for pid=8852 comm="syz.2.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 298.992656][ T5879] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 300.425810][ T5879] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 300.433248][ T5879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 300.446091][ T5879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 128, changing to 7 [ 300.460160][ T5879] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 300.486118][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.495074][ T5879] usb 5-1: Product: syz [ 300.499337][ T5879] usb 5-1: Manufacturer: syz [ 300.504849][ T5879] usb 5-1: SerialNumber: syz [ 300.519035][ T5879] usb 5-1: config 0 descriptor?? [ 300.541894][ T5879] usb 5-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress f8 [ 300.744456][ T30] audit: type=1400 audit(1767709225.601:641): avc: denied { write } for pid=8876 comm="syz.5.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 300.804537][ T8878] tmpfs: Unknown parameter 'veno' [ 301.155915][ T8880] bridge0: port 3(gretap0) entered blocking state [ 301.162539][ T8880] bridge0: port 3(gretap0) entered disabled state [ 301.169943][ T8880] gretap0: entered allmulticast mode [ 301.183133][ T8880] gretap0: entered promiscuous mode [ 301.206940][ T5935] usb 2-1: device descriptor read/64, error -110 [ 302.007840][ T5830] Bluetooth: hci5: command 0x0406 tx timeout [ 302.236630][ T5935] usb 2-1: reset high-speed USB device number 24 using dummy_hcd [ 302.305403][ T8882] autofs: Unknown parameter '0x0000000000000004' [ 302.332885][ T5879] usb 5-1: USB disconnect, device number 35 [ 302.402561][ T5935] usb 2-1: device descriptor read/64, error -32 [ 302.415000][ T6326] udevd[6326]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 302.495283][ T8890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.518561][ T8890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.607162][ T8894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.622823][ T8894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.677686][ T5935] usb 2-1: reset high-speed USB device number 24 using dummy_hcd [ 302.704226][ T5935] usb 2-1: device descriptor read/8, error -32 [ 302.721308][ T8894] autofs: Unknown parameter '*?PQOng lCL3!!ʭbDy`o^j<⫤ [ 302.721308][ T8894] /:+_fo( Ŝ' [ 302.754439][ T5879] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 302.766234][ T30] audit: type=1400 audit(1767709227.621:642): avc: denied { mount } for pid=8889 comm="syz.1.792" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 303.773893][ T5935] usb 2-1: reset high-speed USB device number 24 using dummy_hcd [ 303.793407][ T5879] usb 5-1: Using ep0 maxpacket: 16 [ 303.810673][ T5879] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 303.813688][ T5935] usb 2-1: device descriptor read/8, error -32 [ 303.829835][ T5879] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 303.870530][ T5879] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 303.894041][ T5879] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 303.912719][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.930939][ T5879] usb 5-1: Product: syz [ 303.935777][ T5879] usb 5-1: Manufacturer: syz [ 303.940382][ T5879] usb 5-1: SerialNumber: syz [ 303.942641][ T5935] raw-gadget.1 gadget.1: failed to queue suspend event [ 303.990201][ T5992] usb 2-1: USB disconnect, device number 24 [ 304.142499][ T30] audit: type=1400 audit(1767709228.991:643): avc: denied { unmount } for pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 304.392714][ T24] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 304.465494][ T8919] bridge0: port 3(macsec1) entered blocking state [ 304.472205][ T8919] bridge0: port 3(macsec1) entered disabled state [ 304.479403][ T8919] macsec1: entered allmulticast mode [ 304.484765][ T8919] bridge0: entered allmulticast mode [ 304.616972][ T8921] netlink: 120 bytes leftover after parsing attributes in process `syz.4.791'. [ 304.626164][ T8921] netlink: 64 bytes leftover after parsing attributes in process `syz.4.791'. [ 304.704805][ T8921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.715894][ T8921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.733035][ T8915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.742748][ T8915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.910738][ T24] usb 6-1: device descriptor read/64, error -71 [ 304.921426][ T8919] macsec1: left allmulticast mode [ 304.929211][ T8919] bridge0: left allmulticast mode [ 305.182529][ T24] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 305.242597][ T5817] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 305.312764][ T24] usb 6-1: device descriptor read/64, error -71 [ 305.392731][ T5817] usb 3-1: Using ep0 maxpacket: 32 [ 305.399935][ T5817] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 305.408679][ T5817] usb 3-1: config 0 has no interface number 0 [ 305.417678][ T5817] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 305.422970][ T24] usb usb6-port1: attempt power cycle [ 305.433373][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.441585][ T5817] usb 3-1: Product: syz [ 305.446357][ T5817] usb 3-1: Manufacturer: syz [ 305.451058][ T5817] usb 3-1: SerialNumber: syz [ 305.459597][ T5817] usb 3-1: config 0 descriptor?? [ 305.473716][ T5817] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 305.543975][ T30] audit: type=1400 audit(1767709230.401:644): avc: denied { read } for pid=8925 comm="syz.1.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 305.674112][ T8924] xt_ecn: cannot match TCP bits for non-tcp packets [ 305.782636][ T24] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 305.803127][ T24] usb 6-1: device descriptor read/8, error -71 [ 306.133476][ T24] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 306.228871][ T5879] usb 5-1: 0:2 : does not exist [ 306.236372][ T5817] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 306.246345][ T24] usb 6-1: device descriptor read/8, error -71 [ 306.259577][ T5817] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 306.270461][ T5879] usb 5-1: USB disconnect, device number 36 [ 306.291729][ T5969] udevd[5969]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 306.374034][ T24] usb usb6-port1: unable to enumerate USB device [ 306.435523][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 306.435878][ T24] usb 3-1: USB disconnect, device number 30 [ 306.582965][ T30] audit: type=1400 audit(1767709231.341:645): avc: denied { kexec_image_load } for pid=8939 comm="syz.4.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 306.617756][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 306.791174][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 306.803696][ T30] audit: type=1400 audit(1767709231.471:646): avc: denied { connect } for pid=8939 comm="syz.4.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 306.847343][ T24] quatech2 3-1:0.51: device disconnected [ 306.937799][ T8946] fuse: Bad value for 'fd' [ 307.810932][ T8955] syzkaller1: entered promiscuous mode [ 307.816474][ T8955] syzkaller1: entered allmulticast mode [ 308.092735][ T24] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 308.128318][ T30] audit: type=1400 audit(1767709232.981:647): avc: denied { append } for pid=8964 comm="syz.5.814" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 308.234257][ T8965] loop9: detected capacity change from 0 to 7 [ 308.507080][ T24] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 308.510260][ T8943] macvtap0: left allmulticast mode [ 308.554845][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.568375][ T24] usb 3-1: Product: syz [ 308.573922][ T24] usb 3-1: Manufacturer: syz [ 308.582490][ T24] usb 3-1: SerialNumber: syz [ 308.616333][ T24] usb 3-1: config 0 descriptor?? [ 308.936932][ T8943] veth0_macvtap: left allmulticast mode [ 308.941998][ T8965] Dev loop9: unable to read RDB block 7 [ 308.942601][ T8970] Invalid logical block size (1) [ 308.948674][ T8965] loop9: unable to read partition table [ 308.948844][ T8965] loop9: partition table beyond EOD, truncated [ 308.965852][ T8965] loop_reread_partitions: partition scan of loop9 () failed (rc=-5) [ 309.605891][ T8977] netlink: 'syz.0.815': attribute type 1 has an invalid length. [ 309.613590][ T8977] netlink: 188 bytes leftover after parsing attributes in process `syz.0.815'. [ 309.709116][ T8958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.762168][ T8943] wireguard0: left allmulticast mode [ 309.786314][ T8958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.855511][ T5821] Bluetooth: hci4: unexpected event for opcode 0x0c03 [ 309.884804][ T8976] bridge0: port 3(macsec1) entered blocking state [ 309.891328][ T8976] bridge0: port 3(macsec1) entered disabled state [ 309.897983][ T8976] macsec1: entered allmulticast mode [ 309.903329][ T8976] bridge0: entered allmulticast mode [ 310.028587][ T8976] macsec1: left allmulticast mode [ 310.029196][ T24] usb-storage 3-1:0.0: USB Mass Storage device detected [ 310.033740][ T8976] bridge0: left allmulticast mode [ 310.895851][ T24] usb 3-1: USB disconnect, device number 31 [ 311.314413][ T5817] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 311.355590][ T8993] ALSA: mixer_oss: invalid OSS volume '' [ 311.811623][ T8989] Process accounting resumed [ 312.257512][ T5817] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.283662][ T5817] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 312.293172][ T5817] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 312.301145][ T5817] usb 5-1: Manufacturer: syz [ 312.344280][ T5817] usb 5-1: config 0 descriptor?? [ 312.379317][ T5817] uvcvideo 5-1:0.0: Found UVC 0.00 device (18ec:3288) [ 312.405546][ T5817] uvcvideo 5-1:0.0: No valid video chain found. [ 312.609359][ T9009] overlayfs: missing 'workdir' [ 312.678519][ T8986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.711010][ T8986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.777637][ T5817] usb 5-1: USB disconnect, device number 37 [ 313.002691][ T24] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 313.254535][ T24] usb 6-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 313.265502][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 313.282877][ T24] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 313.291900][ T24] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 313.738702][ T24] usb 6-1: Product: syz [ 313.745063][ T24] usb 6-1: Manufacturer: syz [ 313.749683][ T24] usb 6-1: SerialNumber: syz [ 313.770492][ T24] usb 6-1: config 0 descriptor?? [ 313.849778][ T24] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 313.893317][ T30] audit: type=1400 audit(1767709238.751:648): avc: denied { watch } for pid=9021 comm="syz.1.829" path="/178/file0" dev="tmpfs" ino=991 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 313.939074][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 314.050316][ T30] audit: type=1400 audit(1767709238.901:649): avc: denied { name_bind } for pid=9023 comm="syz.4.830" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 314.095129][ T30] audit: type=1400 audit(1767709238.901:650): avc: denied { node_bind } for pid=9023 comm="syz.4.830" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 314.144182][ T30] audit: type=1326 audit(1767709238.901:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9023 comm="syz.4.830" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdcec78f749 code=0x0 [ 314.690379][ T9035] netlink: 'syz.0.831': attribute type 21 has an invalid length. [ 314.698171][ T9035] netlink: 128 bytes leftover after parsing attributes in process `syz.0.831'. [ 314.707158][ T9035] netlink: 'syz.0.831': attribute type 4 has an invalid length. [ 314.740414][ T9035] netlink: 'syz.0.831': attribute type 5 has an invalid length. [ 314.748086][ T9035] netlink: 3 bytes leftover after parsing attributes in process `syz.0.831'. [ 315.647750][ T5817] usb 6-1: USB disconnect, device number 22 [ 316.362955][ T4037] wlan0: Trigger new scan to find an IBSS to join [ 316.371478][ T30] audit: type=1400 audit(1767709241.221:652): avc: denied { create } for pid=9049 comm="syz.0.838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 316.562755][ T24] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 316.686301][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.712592][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 316.835371][ T24] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 316.980368][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.009806][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 317.025403][ T9056] fuse: Unknown parameter 'rootm ode' [ 317.032115][ T24] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 317.045850][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.121419][ T24] usb 6-1: Product: syz [ 317.138194][ T24] usb 6-1: Manufacturer: syz [ 317.157270][ T24] usb 6-1: SerialNumber: syz [ 317.393190][ T5935] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 317.560535][ T30] audit: type=1400 audit(1767709242.411:653): avc: denied { bind } for pid=9058 comm="syz.1.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 317.719691][ T9066] netlink: 'syz.5.835': attribute type 1 has an invalid length. [ 317.727546][ T9066] netlink: 188 bytes leftover after parsing attributes in process `syz.5.835'. [ 317.773180][ T9066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.782627][ T9066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.815884][ T9065] bridge0: port 4(macsec1) entered blocking state [ 317.822712][ T9065] bridge0: port 4(macsec1) entered disabled state [ 317.829745][ T9065] macsec1: entered allmulticast mode [ 317.835080][ T9065] bridge0: entered allmulticast mode [ 318.045759][ T9065] macsec1: left allmulticast mode [ 318.050847][ T9065] bridge0: left allmulticast mode [ 318.142849][ T30] audit: type=1400 audit(1767709243.001:654): avc: denied { module_load } for pid=9067 comm="syz.0.842" path="/198/bus" dev="tmpfs" ino=1105 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 318.143114][ T9069] Invalid ELF header len 8 [ 318.202623][ T5935] usb 3-1: Using ep0 maxpacket: 8 [ 318.210172][ T5935] usb 3-1: config index 0 descriptor too short (expected 30482, got 18) [ 318.221929][ T5935] usb 3-1: config 0 has too many interfaces: 101, using maximum allowed: 32 [ 318.239691][ T5935] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 101 [ 318.322631][ T5935] usb 3-1: config 0 has no interface number 0 [ 318.361271][ T5935] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 5.00 [ 318.371671][ T5935] usb 3-1: New USB device strings: Mfr=253, Product=255, SerialNumber=0 [ 318.380578][ T5935] usb 3-1: Product: syz [ 318.387284][ T5935] usb 3-1: Manufacturer: syz [ 318.394858][ T5935] usb 3-1: config 0 descriptor?? [ 318.412757][ T5935] ftdi_sio 3-1:0.67: FTDI USB Serial Device converter detected [ 318.439874][ T5935] usb 3-1: Detected FT2232C/D [ 318.504979][ T30] audit: type=1400 audit(1767709243.361:655): avc: denied { append } for pid=9072 comm="syz.4.844" name="sg0" dev="devtmpfs" ino=780 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 318.543130][ T30] audit: type=1400 audit(1767709243.391:656): avc: denied { getopt } for pid=9072 comm="syz.4.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 318.593693][ T9076] fuse: Bad value for 'fd' [ 318.598187][ T30] audit: type=1400 audit(1767709243.391:657): avc: denied { getopt } for pid=9072 comm="syz.4.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 318.633096][ T5935] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 318.644608][ T5935] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 318.661404][ T5935] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 318.709422][ T5935] usb 3-1: USB disconnect, device number 32 [ 318.736026][ T5935] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 318.751115][ T5935] ftdi_sio 3-1:0.67: device disconnected [ 319.244047][ T30] audit: type=1400 audit(1767709244.101:658): avc: denied { append } for pid=9082 comm="syz.2.847" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 319.405254][ T1020] wlan0: Trigger new scan to find an IBSS to join [ 319.421215][ T24] usb 6-1: 0:2 : does not exist [ 319.443608][ T24] usb 6-1: USB disconnect, device number 23 [ 320.514703][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 321.047133][ T4155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.182474][ T30] audit: type=1400 audit(1767709246.021:659): avc: denied { write } for pid=9106 comm="syz.1.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 321.202174][ T9109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.852'. [ 321.394746][ T9118] overlayfs: failed to resolve './file0': -2 [ 321.432609][ T30] audit: type=1400 audit(1767709246.291:660): avc: denied { watch } for pid=9112 comm="syz.0.855" path="/201/bus/file1" dev="tmpfs" ino=1125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 321.599211][ T9121] netlink: 56 bytes leftover after parsing attributes in process `syz.2.857'. [ 321.735108][ T30] audit: type=1400 audit(1767709246.291:661): avc: denied { watch_sb watch_reads } for pid=9112 comm="syz.0.855" path="/201/bus/file1" dev="tmpfs" ino=1125 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 321.846185][ T30] audit: type=1400 audit(1767709246.401:662): avc: denied { watch watch_reads } for pid=9099 comm="syz.4.852" path="/162" dev="tmpfs" ino=896 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 321.886955][ T9125] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 321.886955][ T9125] The task syz.5.859 (9125) triggered the difference, watch for misbehavior. [ 323.839958][ T9146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.866'. [ 323.981658][ T5821] Bluetooth: hci4: command 0x0405 tx timeout [ 327.430768][ T30] audit: type=1400 audit(1767709252.281:663): avc: denied { listen } for pid=9194 comm="syz.5.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 328.510948][ T9225] netlink: 'syz.0.887': attribute type 4 has an invalid length. [ 328.543752][ T30] audit: type=1400 audit(1767709253.401:664): avc: denied { ioctl } for pid=9224 comm="syz.2.888" path="socket:[24020]" dev="sockfs" ino=24020 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 328.690779][ T9225] batman_adv: batadv0: Removing interface: dummy0 [ 328.698646][ T9225] bridge_slave_0: left allmulticast mode [ 328.713794][ T9225] bridge_slave_0: left promiscuous mode [ 328.729722][ T9225] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.747147][ T9232] netlink: 'syz.1.889': attribute type 18 has an invalid length. [ 328.803565][ T9228] netlink: 'syz.0.887': attribute type 4 has an invalid length. [ 329.059790][ T9239] tmpfs: Bad value for 'mpol' [ 329.736604][ T9225] bridge_slave_1: left allmulticast mode [ 329.757836][ T9225] bridge_slave_1: left promiscuous mode [ 329.764045][ T9225] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.781193][ T9225] bond0: (slave bond_slave_0): Releasing backup interface [ 329.945021][ T9225] bond0: (slave bond_slave_1): Releasing backup interface [ 330.000648][ T9225] team0: Port device team_slave_0 removed [ 330.040829][ T9225] team0: Port device team_slave_1 removed [ 330.081297][ T9225] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.124410][ T9225] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.164332][ T9225] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 330.260726][ T9233] bridge1: entered promiscuous mode [ 330.266043][ T9233] bridge1: entered allmulticast mode [ 330.769895][ T9254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.893'. [ 330.832293][ T30] audit: type=1400 audit(1767709255.681:665): avc: denied { setopt } for pid=9252 comm="syz.0.894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 332.486937][ T9277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.496678][ T9275] syzkaller0: entered promiscuous mode [ 332.502188][ T9275] syzkaller0: entered allmulticast mode [ 332.573834][ T9277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.773019][ T9291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.905'. [ 333.834145][ T9296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.905'. [ 333.879988][ T9297] tmpfs: Unknown parameter 'veno' [ 334.251179][ T9302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.281051][ T9302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.403976][ T9293] syzkaller0: entered promiscuous mode [ 334.416925][ T9293] syzkaller0: entered allmulticast mode [ 334.734092][ T30] audit: type=1400 audit(1767709259.581:666): avc: denied { accept } for pid=9295 comm="syz.2.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 334.953457][ T30] audit: type=1400 audit(1767709259.801:667): avc: denied { append } for pid=9295 comm="syz.2.906" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 336.233161][ T9334] netlink: ct family unspecified [ 336.238247][ T9334] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.673362][ T9337] FAULT_INJECTION: forcing a failure. [ 336.673362][ T9337] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 336.693776][ T9337] CPU: 0 UID: 0 PID: 9337 Comm: syz.0.915 Tainted: G L syzkaller #0 PREEMPT(full) [ 336.693807][ T9337] Tainted: [L]=SOFTLOCKUP [ 336.693813][ T9337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 336.693824][ T9337] Call Trace: [ 336.693829][ T9337] [ 336.693836][ T9337] dump_stack_lvl+0x16c/0x1f0 [ 336.693865][ T9337] should_fail_ex+0x512/0x640 [ 336.693896][ T9337] _copy_from_user+0x2e/0xd0 [ 336.693924][ T9337] kstrtouint_from_user+0xd6/0x1d0 [ 336.693945][ T9337] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 336.693964][ T9337] ? __lock_acquire+0x436/0x2890 [ 336.693989][ T9337] ? lock_acquire+0x179/0x330 [ 336.694013][ T9337] proc_fail_nth_write+0x83/0x220 [ 336.694033][ T9337] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 336.694058][ T9337] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 336.694076][ T9337] vfs_write+0x2a0/0x11d0 [ 336.694101][ T9337] ? __pfx___mutex_lock+0x10/0x10 [ 336.694128][ T9337] ? __pfx_vfs_write+0x10/0x10 [ 336.694157][ T9337] ? __fget_files+0x20e/0x3c0 [ 336.694190][ T9337] ksys_write+0x12a/0x250 [ 336.694212][ T9337] ? __pfx_ksys_write+0x10/0x10 [ 336.694242][ T9337] do_syscall_64+0xcd/0xf80 [ 336.694268][ T9337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.694285][ T9337] RIP: 0033:0x7f7b7578e1ff [ 336.694300][ T9337] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 336.694317][ T9337] RSP: 002b:00007f7b766b5030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 336.694334][ T9337] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7b7578e1ff [ 336.694345][ T9337] RDX: 0000000000000001 RSI: 00007f7b766b50a0 RDI: 0000000000000003 [ 336.694356][ T9337] RBP: 00007f7b766b5090 R08: 0000000000000000 R09: 0000000000000000 [ 336.694367][ T9337] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 336.694377][ T9337] R13: 00007f7b759e6038 R14: 00007f7b759e5fa0 R15: 00007ffeb27934c8 [ 336.694404][ T9337] [ 336.941086][ T30] audit: type=1400 audit(1767709261.791:668): avc: denied { block_suspend } for pid=9338 comm="syz.4.916" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 338.079413][ T9358] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=9358 comm=syz.4.920 [ 338.374107][ T9360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.419293][ T9360] bond0: (slave rose0): Enslaving as an active interface with an up link [ 338.512347][ T9376] netlink: 108 bytes leftover after parsing attributes in process `syz.0.925'. [ 338.582683][ T9376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.925'. [ 338.629877][ T30] audit: type=1400 audit(1767709263.481:669): avc: denied { connect } for pid=9374 comm="syz.0.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 339.164971][ T9396] netlink: 24 bytes leftover after parsing attributes in process `syz.2.928'. [ 339.882832][ T5817] usb 3-1: new low-speed USB device number 33 using dummy_hcd [ 340.020971][ T9423] netlink: 'syz.0.933': attribute type 5 has an invalid length. [ 340.032752][ T5817] usb 3-1: device descriptor read/64, error -71 [ 340.147061][ T9423] netlink: 'syz.0.933': attribute type 5 has an invalid length. [ 340.170175][ T9423] netlink: 'syz.0.933': attribute type 5 has an invalid length. [ 340.219993][ T9423] netlink: 'syz.0.933': attribute type 5 has an invalid length. [ 340.329332][ T5817] usb 3-1: new low-speed USB device number 34 using dummy_hcd [ 340.484155][ T9423] netlink: 'syz.0.933': attribute type 5 has an invalid length. [ 340.590095][ T9423] netlink: 'syz.0.933': attribute type 5 has an invalid length. [ 340.654784][ T9423] netlink: 'syz.0.933': attribute type 5 has an invalid length. [ 340.662568][ T5817] usb 3-1: device descriptor read/64, error -71 [ 340.707611][ T9423] netlink: 'syz.0.933': attribute type 5 has an invalid length. [ 340.745610][ T9423] netlink: 'syz.0.933': attribute type 5 has an invalid length. [ 340.773978][ T5817] usb usb3-port1: attempt power cycle [ 341.142507][ T5817] usb 3-1: new low-speed USB device number 35 using dummy_hcd [ 341.193172][ T5817] usb 3-1: device descriptor read/8, error -71 [ 341.340186][ T30] audit: type=1400 audit(1767709266.191:670): avc: denied { accept } for pid=9450 comm="syz.4.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 341.344977][ T9452] 9p: Bad value for 'wfdno' [ 341.442784][ T5817] usb 3-1: new low-speed USB device number 36 using dummy_hcd [ 341.477509][ T9457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.488114][ T5817] usb 3-1: device descriptor read/8, error -71 [ 341.506834][ T9457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.587826][ T9452] netlink: 36 bytes leftover after parsing attributes in process `syz.0.939'. [ 341.638795][ T5817] usb usb3-port1: unable to enumerate USB device [ 342.598005][ T30] audit: type=1400 audit(1767709267.451:671): avc: denied { mount } for pid=9474 comm="syz.0.945" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 342.681076][ T30] audit: type=1400 audit(1767709267.531:672): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 342.733846][ T9478] can0: slcan on ttyS3. [ 343.572402][ T9480] ufs: You didn't specify the type of your ufs filesystem [ 343.572402][ T9480] [ 343.572402][ T9480] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 343.572402][ T9480] [ 343.572402][ T9480] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 343.712587][ T9480] ufs: ufstype=old is supported read-only [ 344.076788][ T9470] can0 (unregistered): slcan off ttyS3. [ 344.237174][ T30] audit: type=1400 audit(1767709269.091:673): avc: denied { setopt } for pid=9499 comm="syz.1.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 344.545157][ T5817] IPVS: starting estimator thread 0... [ 344.837101][ T9508] IPVS: using max 40 ests per chain, 96000 per kthread [ 345.376323][ T9526] ipt_REJECT: TCP_RESET invalid for non-tcp [ 347.871941][ T5938] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 348.280064][ T5938] usb 5-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 348.348179][ T5938] usb 5-1: config 0 interface 0 has no altsetting 0 [ 348.362543][ T5938] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 349.113006][ T5938] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 349.153921][ T5938] usb 5-1: Product: syz [ 349.167851][ T5938] usb 5-1: Manufacturer: syz [ 349.192586][ T5938] usb 5-1: SerialNumber: syz [ 349.215288][ T5938] usb 5-1: config 0 descriptor?? [ 349.290810][ T5938] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 349.451164][ T5817] usb 5-1: USB disconnect, device number 38 [ 349.482302][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 349.623764][ T9564] tmpfs: Unknown parameter 'veno' [ 350.602724][ T5938] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 350.714405][ T9578] netlink: 24 bytes leftover after parsing attributes in process `syz.1.971'. [ 351.416568][ T5817] kernel write not supported for file [eventfd] (pid: 5817 comm: kworker/0:4) [ 352.147269][ T30] audit: type=1400 audit(1767709277.001:674): avc: denied { read } for pid=9595 comm="syz.0.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 352.223245][ T30] audit: type=1400 audit(1767709277.081:675): avc: denied { mount } for pid=9595 comm="syz.0.966" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 352.254723][ T30] audit: type=1400 audit(1767709277.111:676): avc: denied { remount } for pid=9595 comm="syz.0.966" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 352.295723][ T9602] 9pnet_virtio: no channels available for device 127.0.0.1 [ 352.333064][ T9591] netlink: 4 bytes leftover after parsing attributes in process `syz.5.976'. [ 352.381735][ T9601] netlink: 44 bytes leftover after parsing attributes in process `syz.1.978'. [ 352.392590][ T9601] netlink: 11 bytes leftover after parsing attributes in process `syz.1.978'. [ 352.401574][ T9601] netlink: 'syz.1.978': attribute type 6 has an invalid length. [ 352.411295][ T9601] netlink: 'syz.1.978': attribute type 6 has an invalid length. [ 352.449203][ T9601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.449411][ T9601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.494699][ T9606] pimreg: entered allmulticast mode [ 352.967769][ T9615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.994064][ T9615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.422688][ T30] audit: type=1400 audit(1767709278.281:677): avc: denied { connect } for pid=9614 comm="syz.5.982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 353.448880][ T9621] vlan2: entered promiscuous mode [ 353.454069][ T9621] ip6gretap0: entered promiscuous mode [ 353.455365][ T30] audit: type=1400 audit(1767709278.301:678): avc: denied { ioctl } for pid=9622 comm="syz.0.986" path="socket:[26003]" dev="sockfs" ino=26003 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 353.802764][ T4037] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 355.318281][ T9655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.327535][ T30] audit: type=1400 audit(1767709280.171:679): avc: denied { mount } for pid=9651 comm="syz.1.997" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 355.356905][ T9655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.129006][ T30] audit: type=1400 audit(1767709280.981:680): avc: denied { unmount } for pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 356.282873][ T5830] Bluetooth: hci4: unexpected event for opcode 0x2010 [ 356.562579][ T5817] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 356.724443][ T5817] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.805513][ T30] audit: type=1400 audit(1767709281.641:681): avc: denied { read } for pid=9690 comm="syz.4.1002" name="sg0" dev="devtmpfs" ino=780 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 356.852940][ T5817] usb 3-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 356.919511][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.990234][ T5817] usb 3-1: config 0 descriptor?? [ 357.002498][ T9] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 357.056191][ T5817] rndis_host 3-1:0.0: skipping garbage [ 357.116521][ T5817] usb 3-1: bad CDC descriptors [ 357.222544][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 357.276262][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 357.408039][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 357.408068][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.408088][ T9] usb 6-1: Product: syz [ 357.408103][ T9] usb 6-1: Manufacturer: syz [ 357.408118][ T9] usb 6-1: SerialNumber: syz [ 357.475468][ T9] usb 6-1: config 0 descriptor?? [ 357.621944][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 358.041447][ T9] gspca_zc3xx: reg_w_i err -71 [ 358.569437][ T9728] tmpfs: Unknown parameter 'veno' [ 358.962618][ T9] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 358.968963][ T9] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 358.978802][ T9] usb 6-1: USB disconnect, device number 24 [ 359.086653][ T9733] Driver unsupported XDP return value 0 on prog (id 359) dev N/A, expect packet loss! [ 360.029981][ T9742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1014'. [ 360.310204][ T5830] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 360.320085][ T5830] Bluetooth: hci4: Injecting HCI hardware error event [ 360.330210][ T5821] Bluetooth: hci4: hardware error 0x00 [ 361.389358][ T9760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.398145][ T9760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.542875][ T5821] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 362.758391][ T24] usb 3-1: USB disconnect, device number 38 [ 363.268901][ T30] audit: type=1400 audit(1767709288.121:682): avc: denied { write } for pid=9785 comm="syz.4.1026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 363.289973][ T9787] netlink: 203340 bytes leftover after parsing attributes in process `syz.4.1026'. [ 363.328552][ T30] audit: type=1400 audit(1767709288.151:683): avc: denied { read append } for pid=9785 comm="syz.4.1026" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 363.352527][ T30] audit: type=1400 audit(1767709288.151:684): avc: denied { open } for pid=9785 comm="syz.4.1026" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 363.866029][ T9794] syzkaller0: entered promiscuous mode [ 363.871576][ T9794] syzkaller0: entered allmulticast mode [ 363.888239][ T9794] netlink: 'syz.2.1028': attribute type 1 has an invalid length. [ 364.595932][ T30] audit: type=1326 audit(1767709289.451:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9810 comm="syz.0.1033" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7b7578f749 code=0x0 [ 364.673983][ T30] audit: type=1400 audit(1767709289.531:686): avc: denied { connect } for pid=9810 comm="syz.0.1033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 364.703151][ T30] audit: type=1400 audit(1767709289.551:687): avc: denied { read } for pid=9810 comm="syz.0.1033" path="socket:[25575]" dev="sockfs" ino=25575 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 365.509827][ T24] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 366.460474][ T9] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 366.521419][ T9837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.530161][ T9837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.540734][ T24] usb 5-1: device descriptor read/64, error -71 [ 366.622506][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 366.630107][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 366.639945][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 366.685509][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 366.696929][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 366.709230][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 366.722310][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 366.731386][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.756569][ T30] audit: type=1400 audit(1767709291.611:688): avc: denied { setopt } for pid=9839 comm="syz.2.1041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 366.792628][ T24] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 366.922551][ T24] usb 5-1: device descriptor read/64, error -71 [ 366.953718][ T9] usb 6-1: GET_CAPABILITIES returned 0 [ 366.959230][ T9] usbtmc 6-1:16.0: can't read capabilities [ 367.002535][ T5938] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 367.033452][ T24] usb usb5-port1: attempt power cycle [ 367.157717][ T5938] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 367.177546][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.191930][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 367.204187][ T5938] usb 3-1: Product: syz [ 367.213219][ T5938] usb 3-1: Manufacturer: syz [ 367.223269][ T5938] usb 3-1: SerialNumber: syz [ 367.229110][ T48] usb 6-1: USB disconnect, device number 25 [ 367.249604][ T5938] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 367.271703][ T5935] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 367.372546][ T24] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 367.392949][ T24] usb 5-1: device descriptor read/8, error -71 [ 367.632568][ T24] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 367.653128][ T24] usb 5-1: device descriptor read/8, error -71 [ 367.683762][ T48] usb 3-1: USB disconnect, device number 39 [ 367.762795][ T24] usb usb5-port1: unable to enumerate USB device [ 368.174653][ T9853] netlink: zone id is out of range [ 368.182643][ T9853] netlink: zone id is out of range [ 368.189788][ T9853] netlink: zone id is out of range [ 368.195556][ T9853] netlink: zone id is out of range [ 368.202036][ T9853] netlink: zone id is out of range [ 368.209058][ T9853] netlink: zone id is out of range [ 368.214910][ T9853] netlink: zone id is out of range [ 368.220346][ T9853] netlink: zone id is out of range [ 368.226415][ T9853] netlink: zone id is out of range [ 368.232063][ T9853] netlink: zone id is out of range [ 368.401881][ T5935] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 368.408908][ T5935] ath9k_htc: Failed to initialize the device [ 368.415394][ T48] usb 3-1: ath9k_htc: USB layer deinitialized [ 369.155826][ T9868] binder: 9866:9868 ioctl c0189373 200000000100 returned -22 [ 370.140841][ T9878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1053'. [ 370.536414][ T30] audit: type=1400 audit(1767709295.391:689): avc: denied { connect } for pid=9894 comm="syz.0.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 370.556466][ T9899] vlan2: entered promiscuous mode [ 370.556751][ T9898] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1060'. [ 370.561679][ T9899] vlan2: entered allmulticast mode [ 370.576327][ T9899] hsr_slave_1: entered allmulticast mode [ 370.585855][ T9898] hsr_slave_0: left promiscuous mode [ 370.594790][ T9898] hsr_slave_1: left promiscuous mode [ 370.622260][ T9899] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1058'. [ 370.647641][ T30] audit: type=1400 audit(1767709295.511:690): avc: denied { listen } for pid=9894 comm="syz.0.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 370.683959][ T30] audit: type=1400 audit(1767709295.521:691): avc: denied { accept } for pid=9894 comm="syz.0.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 370.723689][ T30] audit: type=1400 audit(1767709295.581:692): avc: denied { write } for pid=9894 comm="syz.0.1059" path="socket:[27755]" dev="sockfs" ino=27755 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 370.747765][ T30] audit: type=1400 audit(1767709295.581:693): avc: denied { write } for pid=9894 comm="syz.0.1059" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netrom_socket permissive=1 [ 370.788070][ T9908] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 370.796405][ T9908] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 370.805377][ T9908] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 370.814940][ T9908] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 370.833794][ T30] audit: type=1400 audit(1767709295.691:694): avc: denied { ioctl } for pid=9906 comm="syz.5.1063" path="socket:[26839]" dev="sockfs" ino=26839 ioctlcmd=0x9402 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 370.883451][ T9911] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1064'. [ 370.901290][ T9908] kvm: kvm [9905]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000067) [ 370.911896][ T9908] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1062'. [ 370.933462][ T9908] syzkaller0: entered promiscuous mode [ 370.939266][ T9908] syzkaller0: entered allmulticast mode [ 370.950746][ T9914] macvtap1: entered promiscuous mode [ 370.958613][ T9914] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 370.968556][ T9914] macvtap1: entered allmulticast mode [ 370.974002][ T9914] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 370.991745][ T30] audit: type=1400 audit(1767709295.841:695): avc: denied { map } for pid=9905 comm="syz.2.1062" path="socket:[26858]" dev="sockfs" ino=26858 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 371.057426][ T9916] syzkaller0: entered promiscuous mode [ 371.065317][ T9916] syzkaller0: entered allmulticast mode [ 371.384283][ T9929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1070'. [ 373.860165][ T9948] syzkaller0: entered promiscuous mode [ 373.874399][ T9948] syzkaller0: entered allmulticast mode [ 374.022893][ T9947] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1075'. [ 374.213066][ T9959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1079'. [ 374.233629][ T9960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.242166][ T9960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.317208][ T9956] input: syz1 as /devices/virtual/input/input17 [ 374.332775][ T9956] input: failed to attach handler leds to device input17, error: -6 [ 374.730934][ T5826] udevd[5826]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 374.816340][ T9969] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1082'. [ 375.098582][ T9976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1085'. [ 375.248773][ T9981] binder: binder_mmap: 9980 200000000000-200000b36000 bad vm_flags failed -1 [ 376.004472][ T9991] netlink: 'syz.0.1089': attribute type 1 has an invalid length. [ 376.024589][ T9991] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1089'. [ 376.247849][T10004] netlink: 'syz.4.1093': attribute type 1 has an invalid length. [ 376.315919][T10004] bond2: entered promiscuous mode [ 376.325607][T10004] 8021q: adding VLAN 0 to HW filter on device bond2 [ 376.596328][T10037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1100'. [ 376.752529][ T5817] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 376.902511][ T5817] usb 5-1: Using ep0 maxpacket: 16 [ 376.909374][ T5817] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.920653][ T5817] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.930885][ T5817] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 376.940088][ T5817] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.185443][ T30] audit: type=1400 audit(1767709302.041:696): avc: denied { open } for pid=10039 comm="syz.5.1102" path="/dev/ttyqf" dev="devtmpfs" ino=390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 377.325002][T10042] Process accounting resumed [ 377.364326][ T5817] mcp2221 0003:04D8:00DD.000A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 378.242606][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.357042][T10051] macvlan2: entered promiscuous mode [ 378.372328][T10051] bridge0: entered promiscuous mode [ 378.405162][T10051] macvlan3: entered promiscuous mode [ 378.552584][ T5817] usb 5-1: reset high-speed USB device number 43 using dummy_hcd [ 379.470005][T10064] No control pipe specified [ 380.085895][T10087] tmpfs: Unknown parameter 'veno' [ 380.519461][T10088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.528113][T10088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.540090][ T9] usb 5-1: USB disconnect, device number 43 [ 380.945619][T10093] siw: device registration error -23 [ 381.722177][T10108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1115'. [ 382.632881][ T5879] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 382.792522][ T5879] usb 5-1: Using ep0 maxpacket: 16 [ 382.799561][ T5879] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 382.833090][ T5879] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 382.852509][ T5879] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 382.864096][ T5879] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 383.018456][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.065005][ T5879] usb 5-1: Product: syz [ 383.125739][ T5879] usb 5-1: Manufacturer: syz [ 383.252773][ T5879] usb 5-1: SerialNumber: syz [ 383.753727][T10139] bridge0: port 3(macsec1) entered blocking state [ 383.760557][T10139] bridge0: port 3(macsec1) entered disabled state [ 383.767976][T10139] macsec1: entered allmulticast mode [ 383.773381][T10139] bridge0: entered allmulticast mode [ 383.818742][T10140] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1119'. [ 384.097194][T10135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.105942][T10135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.908643][T10139] macsec1: left allmulticast mode [ 384.914120][T10139] bridge0: left allmulticast mode [ 385.709474][T10155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.718043][T10155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.742303][ T5879] usb 5-1: 0:2 : does not exist [ 385.803294][ T4387] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 385.845280][ T5879] usb 5-1: USB disconnect, device number 44 [ 385.924495][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 386.252773][ T48] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 386.442714][ T48] usb 3-1: Using ep0 maxpacket: 8 [ 386.451675][ T48] usb 3-1: config 0 interface 0 has no altsetting 0 [ 386.460953][ T48] usb 3-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 386.483619][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.486462][T10173] 9p: Bad value for 'rfdno' [ 386.496906][ T30] audit: type=1400 audit(1767709311.341:697): avc: denied { mounton } for pid=10171 comm="syz.0.1130" path="/syzcgroup/net/syz0/cgroup.procs" dev="cgroup" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 386.557855][ T48] usb 3-1: config 0 descriptor?? [ 386.989303][ T48] wacom 0003:056A:00BA.000B: item fetching failed at offset 3/7 [ 387.004139][ T48] wacom 0003:056A:00BA.000B: parse failed [ 387.009967][ T48] wacom 0003:056A:00BA.000B: probe with driver wacom failed with error -22 [ 387.630045][ T5879] usb 3-1: USB disconnect, device number 40 [ 387.660520][ T30] audit: type=1400 audit(1767709312.511:698): avc: denied { mounton } for pid=10183 comm="syz.4.1134" path="/220/file0" dev="tmpfs" ino=1211 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 387.660604][T10197] fuse: Unknown parameter 'grz_V' [ 387.759330][ T30] audit: type=1400 audit(1767709312.601:699): avc: denied { read write } for pid=10183 comm="syz.4.1134" name="file0" dev="tmpfs" ino=1211 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 387.842800][ T30] audit: type=1400 audit(1767709312.601:700): avc: denied { open } for pid=10183 comm="syz.4.1134" path="/220/file0" dev="tmpfs" ino=1211 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 388.551339][ T5935] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 389.275519][ T5935] usb 5-1: config 8 has an invalid interface number: 177 but max is 0 [ 389.305962][ T5935] usb 5-1: config 8 has no interface number 0 [ 389.314227][ T5935] usb 5-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 389.382110][ T5935] usb 5-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 389.467793][ T5935] usb 5-1: config 8 interface 177 has no altsetting 0 [ 389.487053][T10222] 9pnet_virtio: no channels available for device syz [ 389.502731][ T5935] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 389.511798][ T5935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.513034][T10222] overlayfs: failed to resolve './file1': -2 [ 389.550134][T10206] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 389.634900][T10231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.654064][T10231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.739106][T10237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.747818][T10237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.921581][ T9] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 390.006802][T10206] fuse: Bad value for 'fd' [ 390.090589][ T5935] usb 5-1: string descriptor 0 read error: -71 [ 390.099299][ T9] usb 6-1: config 0 has an invalid interface number: 113 but max is 0 [ 390.117892][ T9] usb 6-1: config 0 has no interface number 0 [ 390.142483][ T9] usb 6-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 390.327996][ T9] usb 6-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 390.351918][ T9] usb 6-1: config 0 interface 113 has no altsetting 0 [ 390.387190][ T5935] ir_toy 5-1:8.177: required endpoints not found [ 390.395275][ T9] usb 6-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 390.397676][ T5935] usb 5-1: USB disconnect, device number 45 [ 390.409987][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.438594][ T9] usb 6-1: Product: syz [ 390.454372][ T9] usb 6-1: Manufacturer: syz [ 390.468671][ T9] usb 6-1: SerialNumber: syz [ 390.509721][ T9] usb 6-1: config 0 descriptor?? [ 390.529489][ T9] pn533_usb 6-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 390.730998][ T5935] usb 6-1: USB disconnect, device number 26 [ 391.001691][T10246] tmpfs: Unknown parameter '' [ 391.579492][ T30] audit: type=1400 audit(1767709316.431:701): avc: denied { mounton } for pid=10247 comm="syz.4.1148" path="/" dev="tmpfs" ino=1219 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 394.216609][T10275] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1151'. [ 394.607035][T10285] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 395.715393][T10296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1161'. [ 395.925367][ T30] audit: type=1400 audit(1767709320.781:702): avc: denied { connect } for pid=10295 comm="syz.0.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 396.359526][T10311] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1166'. [ 396.907852][T10315] process 'syz.5.1167' launched './file1' with NULL argv: empty string added [ 396.929249][T10315] overlay: ./file1 is not a directory [ 396.976191][ T30] audit: type=1400 audit(1767709321.831:703): avc: denied { unmount } for pid=7589 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 397.012508][ T5879] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 397.219439][ T5879] usb 3-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x93, changing to 0x83 [ 397.261141][ T5879] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x83 has invalid maxpacket 64602, setting to 64 [ 397.327346][ T5879] usb 3-1: config 0 interface 0 has no altsetting 0 [ 397.341116][T10322] comedi: valid board names for 8255 driver are: [ 397.369799][ T5879] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 397.410818][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 397.448836][ T5879] usb 3-1: Product: syz [ 397.472559][ T5879] usb 3-1: Manufacturer: syz [ 397.495994][ T5879] usb 3-1: SerialNumber: syz [ 397.513726][T10322] 8255 [ 397.526356][ T5879] usb 3-1: config 0 descriptor?? [ 397.562978][T10312] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 397.587605][ T5879] usb 3-1: selecting invalid altsetting 0 [ 397.589566][T10322] comedi: valid board names for vmk80xx driver are: [ 397.619384][T10322] vmk80xx [ 397.627830][T10322] comedi: valid board names for usbduxsigma driver are: [ 397.641372][T10322] usbduxsigma [ 397.650622][T10322] comedi: valid board names for usbduxfast driver are: [ 397.797088][ T5879] usb 3-1: USB disconnect, device number 41 [ 397.849374][T10322] usbduxfast [ 397.933998][T10322] comedi: valid board names for usbdux driver are: [ 398.002175][T10322] usbdux [ 398.091178][T10322] comedi: valid board names for ni6501 driver are: [ 398.161889][T10322] ni6501 [ 398.170145][T10322] comedi: valid board names for dt9812 driver are: [ 398.289483][T10322] dt9812 [ 398.294669][T10322] comedi: valid board names for ni_labpc_cs driver are: [ 398.316986][T10322] ni_labpc_cs [ 398.320433][T10322] comedi: valid board names for ni_daq_700 driver are: [ 398.329667][T10322] ni_daq_700 [ 398.583075][T10322] comedi: valid board names for labpc_pci driver are: [ 398.593181][T10322] labpc_pci [ 398.603281][T10322] comedi: valid board names for adl_pci9118 driver are: [ 398.623490][T10322] pci9118dg [ 398.632155][T10322] pci9118hg [ 399.039791][T10322] pci9118hr [ 399.401512][ T30] audit: type=1400 audit(1767709324.251:704): avc: denied { ioctl } for pid=10344 comm="syz.0.1175" path="socket:[28873]" dev="sockfs" ino=28873 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 399.512533][T10322] comedi: valid board names for 8255_pci driver are: [ 399.519631][T10322] 8255_pci [ 399.522971][T10322] comedi: valid board names for s526 driver are: [ 399.529293][T10322] s526 [ 399.533204][T10322] comedi: valid board names for multiq3 driver are: [ 399.539973][T10322] multiq3 [ 399.549388][T10322] comedi: valid board names for pcmuio driver are: [ 399.562763][T10322] pcmuio48 [ 399.592676][T10322] pcmuio96 [ 399.865435][T10322] comedi: valid board names for pcmmio driver are: [ 400.082615][T10322] pcmmio [ 400.089920][T10322] comedi: valid board names for pcmda12 driver are: [ 400.091612][T10361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1180'. [ 400.097180][T10322] pcmda12 [ 400.112858][T10322] comedi: valid board names for pcmad driver are: [ 400.534800][T10322] pcmad12 [ 400.574583][T10365] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1181'. [ 400.892524][T10322] pcmad16 [ 400.895599][T10322] comedi: valid board names for ni_labpc driver are: [ 400.902265][T10322] lab-pc-1200 [ 401.197673][T10322] lab-pc-1200ai [ 401.271645][ T5821] Bluetooth: hci3: unexpected event for opcode 0x2019 [ 401.292467][T10322] lab-pc+ [ 401.630031][T10322] comedi: valid board names for atmio16 driver are: [ 401.652804][T10322] atmio16 [ 401.656903][T10322] atmio16d [ 401.662079][T10322] comedi: valid board names for ni_at_ao driver are: [ 401.670237][T10322] at-ao-6 [ 401.675552][T10322] at-ao-10 [ 401.678786][T10322] comedi: valid board names for ni_at_a2150 driver are: [ 402.092652][ T5879] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 402.433925][ T5879] usb 3-1: device descriptor read/64, error -71 [ 402.554064][T10322] ni_at_a2150 [ 402.562629][T10322] comedi: valid board names for adq12b driver are: [ 402.573710][T10322] adq12b [ 402.585557][T10322] comedi: valid board names for mpc624 driver are: [ 402.592057][T10322] mpc624 [ 402.595050][T10322] comedi: valid board names for c6xdigio driver are: [ 402.601787][T10322] c6xdigio [ 402.611957][T10322] comedi: valid board names for aio_iiro_16 driver are: [ 402.618978][T10322] aio_iiro_16 [ 402.625042][T10322] comedi: valid board names for aio_aio12_8 driver are: [ 402.642483][T10322] aio_aio12_8 [ 402.647079][T10322] aio_ai12_8 [ 402.650776][T10322] aio_ao12_4 [ 402.654123][T10322] comedi: valid board names for fl512 driver are: [ 402.662550][T10322] fl512 [ 402.665395][T10322] comedi: valid board names for dmm32at driver are: [ 402.672023][T10322] dmm32at [ 402.675127][T10322] comedi: valid board names for dt282x driver are: [ 402.681617][T10322] dt2821 [ 402.685605][T10322] dt2821-f [ 402.702819][T10322] dt2821-g [ 402.705946][T10322] dt2823 [ 402.708948][T10322] dt2824-pgh [ 402.712220][T10322] dt2824-pgl [ 402.712554][ T5879] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 402.715647][T10322] dt2825 [ 402.845109][T10322] dt2827 [ 402.868587][T10389] netlink: 'syz.1.1187': attribute type 33 has an invalid length. [ 402.876823][T10389] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1187'. [ 402.907753][T10389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1187'. [ 402.922631][T10322] dt2828 [ 402.939483][T10322] dt2829 [ 402.952544][T10322] dt21-ez [ 402.952575][ T5879] usb 3-1: device descriptor read/64, error -71 [ 402.957848][T10322] dt23-ez [ 403.063255][T10322] dt24-ez [ 403.066305][T10322] dt24-ez-pgl [ 403.079448][T10322] comedi: valid board names for dt2817 driver are: [ 403.086719][T10322] dt2817 [ 403.090137][T10322] comedi: valid board names for dt2815 driver are: [ 403.101221][T10322] dt2815 [ 403.105678][T10322] comedi: valid board names for dt2814 driver are: [ 403.113836][T10322] dt2814 [ 403.118470][T10322] comedi: valid board names for dt2811 driver are: [ 403.125841][T10322] dt2811-pgh [ 403.129806][T10322] dt2811-pgl [ 403.150716][T10322] comedi: valid board names for dt2801 driver are: [ 403.158383][T10322] dt2801 [ 403.162116][T10322] comedi: valid board names for das6402 driver are: [ 403.228050][T10322] das6402-12 [ 403.231452][T10322] das6402-16 [ 403.234610][ T5879] usb usb3-port1: attempt power cycle [ 403.235175][T10322] comedi: valid board names for das1800 driver are: [ 403.371064][T10322] das-1701st [ 403.473564][T10322] das-1701st-da [ 403.477103][T10322] das-1702st [ 403.480379][T10322] das-1702st-da [ 403.483979][T10322] das-1702hr [ 403.487255][T10322] das-1702hr-da [ 403.515520][T10322] das-1701ao [ 403.518881][T10322] das-1702ao [ 403.522200][T10322] das-1801st [ 403.788542][T10408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.865022][T10322] das-1801st-da [ 403.881968][T10408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.964572][T10322] das-1802st [ 403.990788][T10322] das-1802st-da [ 403.992553][ T5879] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 404.011315][T10322] das-1802hr [ 404.016098][T10322] das-1802hr-da [ 404.016163][ T5879] usb 3-1: device descriptor read/8, error -71 [ 404.019715][T10322] das-1801hc [ 404.072306][T10322] das-1802hc [ 404.098536][T10322] das-1801ao [ 404.129433][T10322] das-1802ao [ 404.172490][T10322] comedi: valid board names for das800 driver are: [ 404.253256][T10322] das-800 [ 404.256365][T10322] cio-das800 [ 404.259886][T10322] das-801 [ 404.264747][T10322] cio-das801 [ 404.276788][T10322] das-802 [ 404.582802][ T5879] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 404.659105][T10322] cio-das802 [ 404.911666][ T5879] usb 3-1: device descriptor read/8, error -71 [ 404.999548][T10322] cio-das802/16 [ 405.038999][ T5879] usb usb3-port1: unable to enumerate USB device [ 405.066901][T10322] comedi: valid board names for isa-das08 driver are: [ 405.178613][T10322] isa-das08 [ 405.249483][T10322] das08-pgm [ 405.308433][T10322] das08-pgh [ 405.332615][ T5821] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 405.345639][ T5821] Bluetooth: hci3: Injecting HCI hardware error event [ 405.354454][ T5830] Bluetooth: hci3: hardware error 0x00 [ 405.391101][T10322] das08-pgl [ 405.431772][T10322] das08-aoh [ 405.473024][T10322] das08-aol [ 405.509171][T10418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1197'. [ 405.572463][T10322] das08-aom [ 405.626099][T10322] das08/jr-ao [ 405.646893][T10418] 8021q: adding VLAN 0 to HW filter on device bond1 [ 405.761379][T10322] das08jr-16-ao [ 405.780082][T10322] pc104-das08 [ 405.796572][T10322] das08jr/16 [ 406.287995][T10322] comedi: valid board names for das16m1 driver are: [ 406.294973][T10322] das16m1 [ 406.298005][T10322] comedi: valid board names for dac02 driver are: [ 406.304820][T10322] dac02 [ 406.307670][T10322] comedi: valid board names for rti802 driver are: [ 406.338656][T10322] rti802 [ 406.395564][T10322] comedi: valid board names for rti800 driver are: [ 406.465608][T10322] rti800 [ 406.482518][T10322] rti815 [ 406.555888][T10322] comedi: valid board names for pcm3724 driver are: [ 406.627076][T10441] cgroup: release_agent respecified [ 406.662160][T10322] pcm3724 [ 406.820372][T10322] comedi: valid board names for pcl818 driver are: [ 406.827951][T10322] pcl818l [ 406.830988][T10322] pcl818h [ 406.835122][T10322] pcl818hd [ 406.838522][T10322] pcl818hg [ 406.842365][T10322] pcl818 [ 406.845660][T10322] pcl718 [ 406.848594][T10322] pcm3718 [ 406.851921][T10322] comedi: valid board names for pcl816 driver are: [ 406.861779][T10322] pcl816 [ 406.864982][T10322] pcl814b [ 406.868001][T10322] comedi: valid board names for pcl812 driver are: [ 406.874855][T10322] pcl812 [ 406.877790][T10322] pcl812pg [ 407.347451][T10322] acl8112pg [ 407.351252][T10322] acl8112dg [ 407.354690][T10322] acl8112hg [ 407.357889][T10322] a821pgl [ 407.361843][T10322] a821pglnda [ 407.365392][T10322] a821pgh [ 407.368412][T10322] a822pgl [ 407.371425][T10322] a822pgh [ 407.375290][T10322] a823pgl [ 407.378558][T10322] a823pgh [ 407.381617][T10322] pcl813 [ 407.385054][T10322] pcl813b [ 407.388073][T10322] acl8113 [ 407.391090][T10322] iso813 [ 407.394484][T10322] acl8216 [ 407.397504][T10322] a826pg [ 407.400725][T10322] comedi: valid board names for pcl730 driver are: [ 407.407536][ T5830] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 407.419022][T10322] pcl730 [ 407.422459][T10322] iso730 [ 407.425400][T10322] acl7130 [ 407.428417][T10322] pcm3730 [ 407.431435][T10322] pcl725 [ 407.437213][T10322] p8r8dio [ 407.440448][T10322] acl7225b [ 407.443740][T10322] p16r16dio [ 407.446939][T10322] pcl733 [ 407.450173][T10322] pcl734 [ 407.453840][T10322] opmm-1616-xt [ 407.457298][T10322] pearl-mm-p [ 407.460643][T10322] ir104-pbf [ 407.464343][T10322] comedi: valid board names for pcl726 driver are: [ 407.470993][T10322] pcl726 [ 407.474279][T10322] pcl727 [ 407.477313][T10322] pcl728 [ 407.480274][T10322] acl6126 [ 407.483801][T10322] acl6128 [ 407.486927][T10322] comedi: valid board names for pcl724 driver are: [ 407.508495][T10322] pcl724 [ 407.511456][T10322] pcl722 [ 407.514876][T10322] pcl731 [ 407.517896][T10322] acl7122 [ 407.520909][T10322] acl7124 [ 407.692689][T10322] pet48dio [ 407.695927][T10322] pcmio48 [ 407.698993][T10322] onyx-mm-dio [ 407.702355][T10322] comedi: valid board names for pcl711 driver are: [ 407.711957][T10322] pcl711 [ 407.715201][T10322] pcl711b [ 407.718220][T10322] acl8112hg [ 407.721816][T10322] acl8112dg [ 407.725716][T10322] comedi: valid board names for amplc_pc263 driver are: [ 407.733083][T10322] pc263 [ 407.735964][T10322] comedi: valid board names for amplc_pc236 driver are: [ 407.750921][T10322] pc36at [ 407.773273][T10322] comedi: valid board names for amplc_dio200 driver are: [ 407.812666][T10322] pc212e [ 408.105704][T10322] pc214e [ 408.108632][T10322] pc215e [ 408.111608][T10322] pc218e [ 408.114619][T10322] pc272e [ 408.117553][T10322] comedi: valid board names for comedi_parport driver are: [ 408.124890][T10322] comedi_parport [ 408.128613][T10322] comedi: valid board names for comedi_test driver are: [ 408.152529][ T48] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 408.265752][T10322] comedi_test [ 408.316754][T10322] comedi: valid board names for comedi_bond driver are: [ 408.342826][ T48] usb 3-1: Using ep0 maxpacket: 16 [ 408.354335][ T48] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 408.367385][ T48] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 408.388870][ T48] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 408.410577][ T48] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 408.426091][T10322] comedi_bond [ 408.429586][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.447471][ T48] usb 3-1: Product: syz [ 408.457148][ T48] usb 3-1: Manufacturer: syz [ 408.467293][ T48] usb 3-1: SerialNumber: syz [ 409.003918][T10487] bridge0: port 3(macsec1) entered blocking state [ 409.010751][T10487] bridge0: port 3(macsec1) entered disabled state [ 409.018174][T10487] macsec1: entered allmulticast mode [ 409.023615][T10487] bridge0: entered allmulticast mode [ 409.065704][T10488] netlink: 252 bytes leftover after parsing attributes in process `syz.2.1212'. [ 409.132632][T10488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.142916][T10488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.321372][T10487] macsec1: left allmulticast mode [ 409.326490][T10487] bridge0: left allmulticast mode [ 410.085704][T10483] syz.1.1216 (10483) used greatest stack depth: 17000 bytes left [ 410.387942][T10504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.397006][T10504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.860900][ T48] usb 3-1: 0:2 : does not exist [ 411.503669][ T48] usb 3-1: USB disconnect, device number 46 [ 413.398617][ T48] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 413.593806][T10531] gadgetfs: Unknown parameter 'usrquota' [ 413.644058][ T48] usb 3-1: config 1 has an invalid interface descriptor of length 8, skipping [ 413.657286][ T48] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 413.749216][ T48] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 413.799793][ T48] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 413.914850][ T48] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 413.968088][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 413.992848][ T48] usb 3-1: SerialNumber: syz [ 414.058642][ T48] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 414.083936][ T48] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 414.141321][ T48] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 414.274984][ T48] usb 3-1: USB disconnect, device number 47 [ 414.522585][T10546] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1233'. [ 414.728806][T10549] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 414.810128][ T30] audit: type=1400 audit(1767709339.661:705): avc: denied { create } for pid=10540 comm="syz.1.1226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 414.838034][T10547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 414.910008][ T30] audit: type=1400 audit(1767709339.761:706): avc: denied { create } for pid=10550 comm="syz.2.1235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 415.095707][T10555] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1234'. [ 415.766490][T10572] kAFS: unable to lookup cell '.' [ 417.892823][ T3973] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 418.250451][T10590] bridge1: entered promiscuous mode [ 418.262453][T10590] bridge1: entered allmulticast mode [ 418.289082][T10590] input: syz0 as /devices/virtual/input/input19 [ 418.333146][T10590] netlink: 'syz.1.1247': attribute type 1 has an invalid length. [ 418.702514][T10603] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1246'. [ 418.800994][T10602] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 418.825448][T10602] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 418.843042][T10607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.858903][ T3973] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.883234][T10607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.892742][ T3973] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.901598][ T3973] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.955600][ T3973] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.012486][ T5879] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 419.193969][ T5879] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 419.204710][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.221406][ T5879] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 419.232804][ T5879] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 419.249296][ T5879] usb 3-1: Manufacturer: syz [ 419.263039][ T5879] usb 3-1: config 0 descriptor?? [ 419.352706][ T5879] rc_core: IR keymap rc-hauppauge not found [ 419.364755][ T5879] Registered IR keymap rc-empty [ 419.371447][ T5879] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 419.397896][ T5879] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input20 [ 419.424765][T10626] netlink: 'syz.0.1258': attribute type 2 has an invalid length. [ 419.454259][T10626] !9: entered promiscuous mode [ 419.488939][ T48] usb 3-1: USB disconnect, device number 48 [ 419.502666][ T9] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 419.550101][ T30] audit: type=1400 audit(1767709344.401:707): avc: denied { accept } for pid=10629 comm="syz.4.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 419.601188][ T30] audit: type=1400 audit(1767709344.451:708): avc: denied { shutdown } for pid=10629 comm="syz.4.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 419.664422][ T9] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 419.711305][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 419.720407][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 419.729775][ T9] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 419.738018][ T9] usb 6-1: Product: syz [ 419.742248][ T9] usb 6-1: Manufacturer: syz [ 419.746950][ T9] usb 6-1: SerialNumber: syz [ 419.753238][ T9] usb 6-1: config 0 descriptor?? [ 419.759340][ T9] hub 6-1:0.0: bad descriptor, ignoring hub [ 419.765356][ T9] hub 6-1:0.0: probe with driver hub failed with error -5 [ 419.773168][ T30] audit: type=1400 audit(1767709344.631:709): avc: denied { write } for pid=10629 comm="syz.4.1259" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 419.775080][ T9] usb 6-1: selecting invalid altsetting 0 [ 419.797497][ T30] audit: type=1400 audit(1767709344.631:710): avc: denied { ioctl } for pid=10629 comm="syz.4.1259" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 420.088877][ T9] usb 6-1: USB disconnect, device number 27 [ 421.381734][ T5830] Bluetooth: hci5: command 0x0406 tx timeout [ 421.452618][ T9] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 421.602701][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 421.680537][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 421.719628][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 421.784869][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.820584][ T9] usb 3-1: Product: syz [ 421.832525][T10667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.840977][T10668] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1271'. [ 421.856412][ T9] usb 3-1: Manufacturer: syz [ 421.864752][ T9] usb 3-1: SerialNumber: syz [ 421.869702][T10667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.884983][T10668] netlink: 'syz.0.1271': attribute type 11 has an invalid length. [ 421.901239][ T9] usb 3-1: config 0 descriptor?? [ 421.931289][T10668] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1271'. [ 421.952552][T10668] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1271'. [ 421.955505][ T30] audit: type=1400 audit(1767709346.811:711): avc: denied { accept } for pid=10664 comm="syz.4.1269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 421.963916][ T9] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 421.990770][ T9] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 423.353642][ T30] audit: type=1400 audit(1767709348.211:712): avc: denied { map } for pid=10679 comm="syz.1.1275" path="socket:[29647]" dev="sockfs" ino=29647 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 423.509879][ T9] em28xx 3-1:0.0: chip ID is em2874 [ 423.674075][T10691] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1276'. [ 423.827844][ T9] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 423.864891][ T9] em28xx 3-1:0.0: board has no eeprom [ 423.966405][ T9] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 423.981110][ T9] em28xx 3-1:0.0: dvb set to bulk mode. [ 424.111268][ T5817] em28xx 3-1:0.0: Binding DVB extension [ 424.647768][ T9] usb 3-1: USB disconnect, device number 49 [ 424.678521][ T9] em28xx 3-1:0.0: Disconnecting em28xx [ 424.753541][ T5817] em28xx 3-1:0.0: Registering input extension [ 425.652772][T10707] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1279'. [ 425.688378][ T30] audit: type=1400 audit(1767709350.541:713): avc: denied { listen } for pid=10706 comm="syz.0.1279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 425.708586][ T5817] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 425.744428][ T5817] Registered IR keymap rc-empty [ 425.782827][ T5817] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 425.821991][ T5817] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input21 [ 425.879272][ T30] audit: type=1400 audit(1767709350.731:714): avc: denied { bind } for pid=10706 comm="syz.0.1279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 425.943407][ T5817] em28xx 3-1:0.0: Input extension successfully initialized [ 425.971586][ T9] em28xx 3-1:0.0: Closing input extension [ 426.063149][ T9] em28xx 3-1:0.0: Freeing device [ 426.068266][ T30] audit: type=1400 audit(1767709350.921:715): avc: denied { setopt } for pid=10706 comm="syz.0.1279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 426.425962][ T9] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 426.719338][T10719] syzkaller0: entered promiscuous mode [ 426.729744][T10719] syzkaller0: entered allmulticast mode [ 426.765014][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 426.773336][ T9] usb 3-1: config 0 has no interface number 0 [ 426.790330][ T9] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 426.806145][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.833512][ T9] usb 3-1: Product: syz [ 426.846246][ T9] usb 3-1: Manufacturer: syz [ 426.851008][ T9] usb 3-1: SerialNumber: syz [ 426.882044][ T9] usb 3-1: config 0 descriptor?? [ 427.140300][ T9] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 427.164101][ T9] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 427.185059][ T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 427.193213][ T9] usb 3-1: media controller created [ 427.208449][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 427.357834][ T9] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 427.376491][ T5935] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 427.429676][ T9] usb 3-1: USB disconnect, device number 50 [ 427.554118][ T5935] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 427.564783][ T5935] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 427.579374][ T5935] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 427.600144][ T5935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.620240][ T5935] usb 5-1: Product: syz [ 427.630161][T10727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1285'. [ 427.637343][ T5935] usb 5-1: Manufacturer: syz [ 427.646393][ T5935] usb 5-1: SerialNumber: syz [ 429.884339][T10744] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 429.891365][T10744] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 429.900615][T10744] vhci_hcd vhci_hcd.0: Device attached [ 429.926807][T10748] vhci_hcd: connection closed [ 429.934212][ T4037] vhci_hcd vhci_hcd.0: stop threads [ 429.948501][ T4037] vhci_hcd vhci_hcd.0: release socket [ 429.959944][ T4037] vhci_hcd vhci_hcd.0: disconnect device [ 430.290930][T10735] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 430.302040][T10735] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 430.313068][ T30] audit: type=1400 audit(1767709355.161:716): avc: denied { firmware_load } for pid=10722 comm="syz.4.1284" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 430.313139][T10735] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 430.441620][ T5935] usb 5-1: cannot find UAC_HEADER [ 430.484574][ T5935] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 430.498712][ T5935] usb 5-1: USB disconnect, device number 46 [ 430.526701][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 430.692174][ T30] audit: type=1400 audit(1767709355.541:717): avc: denied { setopt } for pid=10756 comm="syz.1.1293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 430.741102][T10758] syzkaller0: entered promiscuous mode [ 430.747950][T10758] syzkaller0: entered allmulticast mode [ 430.772615][ T5817] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 430.936446][ T5817] usb 3-1: config 8 has an invalid interface number: 177 but max is 0 [ 430.940132][T10764] /dev/nbd0: Can't lookup blockdev [ 430.954763][ T5817] usb 3-1: config 8 has no interface number 0 [ 430.975802][ T5817] usb 3-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 431.205357][ T5817] usb 3-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 431.221858][ T5817] usb 3-1: config 8 interface 177 has no altsetting 0 [ 431.231323][ T5817] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 431.243233][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.946793][T10754] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 431.995049][T10778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.004023][T10778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.504493][T10754] fuse: Bad value for 'fd' [ 432.691750][ T5817] usb 3-1: string descriptor 0 read error: -71 [ 432.700779][ T5817] ir_toy 3-1:8.177: required endpoints not found [ 432.710241][ T5817] usb 3-1: USB disconnect, device number 51 [ 433.107203][ T30] audit: type=1400 audit(1767709357.961:718): avc: denied { bind } for pid=10792 comm="syz.5.1302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 434.162535][ T48] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 434.332472][ T48] usb 5-1: Using ep0 maxpacket: 16 [ 434.345473][ T48] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.368635][ T48] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.389697][ T48] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 434.409121][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.647320][T10825] fuse: Bad value for 'fd' [ 434.780278][T10829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1312'. [ 434.848154][ T48] mcp2221 0003:04D8:00DD.000C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 434.875068][ T30] audit: type=1400 audit(1767709359.731:719): avc: denied { write } for pid=10830 comm="syz.2.1313" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 434.902199][T10832] 9pnet_fd: Insufficient options for proto=fd [ 434.985201][T10835] FAULT_INJECTION: forcing a failure. [ 434.985201][T10835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.064005][T10835] CPU: 1 UID: 0 PID: 10835 Comm: syz.2.1313 Tainted: G L syzkaller #0 PREEMPT(full) [ 435.064034][T10835] Tainted: [L]=SOFTLOCKUP [ 435.064040][T10835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 435.064049][T10835] Call Trace: [ 435.064054][T10835] [ 435.064061][T10835] dump_stack_lvl+0x16c/0x1f0 [ 435.064090][T10835] should_fail_ex+0x512/0x640 [ 435.064120][T10835] _copy_from_user+0x2e/0xd0 [ 435.064147][T10835] __sys_bpf+0x248/0x4980 [ 435.064175][T10835] ? __pfx___sys_bpf+0x10/0x10 [ 435.064198][T10835] ? preempt_schedule_common+0x44/0xc0 [ 435.064222][T10835] ? preempt_schedule_thunk+0x16/0x30 [ 435.064247][T10835] ? vfs_write+0x454/0x11d0 [ 435.064270][T10835] ? find_held_lock+0x2b/0x80 [ 435.064302][T10835] ? __mutex_unlock_slowpath+0x161/0x790 [ 435.064340][T10835] ? fput+0x70/0xf0 [ 435.064355][T10835] ? xfd_validate_state+0x61/0x180 [ 435.064372][T10835] ? __pfx_ksys_write+0x10/0x10 [ 435.064398][T10835] __x64_sys_bpf+0x78/0xc0 [ 435.064424][T10835] ? lockdep_hardirqs_on+0x7c/0x110 [ 435.064448][T10835] do_syscall_64+0xcd/0xf80 [ 435.064472][T10835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.064489][T10835] RIP: 0033:0x7f8977b8f749 [ 435.064503][T10835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.064520][T10835] RSP: 002b:00007f89789a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 435.064537][T10835] RAX: ffffffffffffffda RBX: 00007f8977de6180 RCX: 00007f8977b8f749 [ 435.064548][T10835] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 435.064558][T10835] RBP: 00007f89789a3090 R08: 0000000000000000 R09: 0000000000000000 [ 435.064568][T10835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.064579][T10835] R13: 00007f8977de6218 R14: 00007f8977de6180 R15: 00007ffd247eacc8 [ 435.064603][T10835] [ 436.342473][ T5935] usb 5-1: reset high-speed USB device number 47 using dummy_hcd [ 438.000030][T10866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1325'. [ 438.222913][T10875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.241084][T10875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.463119][ T48] usb 5-1: USB disconnect, device number 47 [ 439.564185][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.597387][ T30] audit: type=1400 audit(1767709364.451:720): avc: denied { bind } for pid=10893 comm="syz.0.1331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 439.646245][ T30] audit: type=1400 audit(1767709364.491:721): avc: denied { setopt } for pid=10893 comm="syz.0.1331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 439.690911][ T30] audit: type=1400 audit(1767709364.501:722): avc: denied { write } for pid=10893 comm="syz.0.1331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 440.264984][T10902] bridge_slave_0: left allmulticast mode [ 440.270665][T10902] bridge_slave_0: left promiscuous mode [ 440.277346][T10902] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.316742][T10902] bridge_slave_1: left allmulticast mode [ 440.322422][T10902] bridge_slave_1: left promiscuous mode [ 440.328115][T10902] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.346639][T10902] bond0: (slave bond_slave_0): Releasing backup interface [ 440.379982][T10902] bond0: (slave bond_slave_1): Releasing backup interface [ 440.389219][T10902] team0: Port device team_slave_0 removed [ 440.395978][T10902] team0: Port device team_slave_1 removed [ 440.396208][T10902] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.397245][T10902] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.417243][T10902] net_ratelimit: 46 callbacks suppressed [ 440.417253][T10902] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 442.015798][T10930] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1341'. [ 442.061624][ T30] audit: type=1400 audit(1767709366.911:723): avc: denied { mounton } for pid=10931 comm="syz.2.1342" path="/proc/857/task" dev="proc" ino=31025 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 442.215716][ T30] audit: type=1400 audit(1767709366.951:724): avc: denied { create } for pid=10933 comm="syz.5.1343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 443.585012][T10942] batman_adv: batadv0: Interface deactivated: gretap1 [ 444.179989][T10960] netlink: 252 bytes leftover after parsing attributes in process `syz.0.1349'. [ 444.255842][ T5817] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 444.582325][T10968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1353'. [ 444.656157][ T5817] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 444.663751][ T5817] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 444.674020][ T5817] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 444.687327][ T5817] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 444.696896][ T5817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.705090][ T5817] usb 5-1: Product: syz [ 444.708537][T10977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.709442][ T5817] usb 5-1: Manufacturer: syz [ 444.718041][T10977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.728008][ T5817] usb 5-1: SerialNumber: syz [ 444.742789][ T5817] usb 5-1: config 0 descriptor?? [ 444.753283][ T5817] usb 5-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress f8 [ 445.105938][T10982] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1356'. [ 446.638606][ T5817] usb 5-1: USB disconnect, device number 48 [ 446.705977][ T30] audit: type=1400 audit(1767709371.561:725): avc: denied { ioctl } for pid=11002 comm="syz.2.1363" path="socket:[32040]" dev="sockfs" ino=32040 ioctlcmd=0x943b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 446.765762][T11006] udevd[11006]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 446.857303][T11010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1365'. [ 446.868988][T11008] FAULT_INJECTION: forcing a failure. [ 446.868988][T11008] name failslab, interval 1, probability 0, space 0, times 0 [ 446.882534][T11008] CPU: 0 UID: 0 PID: 11008 Comm: syz.4.1364 Tainted: G L syzkaller #0 PREEMPT(full) [ 446.882563][T11008] Tainted: [L]=SOFTLOCKUP [ 446.882569][T11008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 446.882580][T11008] Call Trace: [ 446.882586][T11008] [ 446.882593][T11008] dump_stack_lvl+0x16c/0x1f0 [ 446.882621][T11008] should_fail_ex+0x512/0x640 [ 446.882647][T11008] ? __kmalloc_cache_noprof+0x5f/0x800 [ 446.882679][T11008] should_failslab+0xc2/0x120 [ 446.882703][T11008] __kmalloc_cache_noprof+0x80/0x800 [ 446.882732][T11008] ? ovl_init_fs_context+0x11f/0x5f0 [ 446.882761][T11008] ? ovl_init_fs_context+0x11f/0x5f0 [ 446.882780][T11008] ovl_init_fs_context+0x11f/0x5f0 [ 446.882800][T11008] ? __pfx_ovl_init_fs_context+0x10/0x10 [ 446.882822][T11008] alloc_fs_context+0x629/0xf50 [ 446.882845][T11008] path_mount+0xe21/0x23a0 [ 446.882861][T11008] ? rcu_is_watching+0x12/0xc0 [ 446.882882][T11008] ? __pfx_path_mount+0x10/0x10 [ 446.882900][T11008] ? kmem_cache_free+0x2d8/0x770 [ 446.882927][T11008] ? putname+0xf5/0x1a0 [ 446.882958][T11008] ? putname+0xf5/0x1a0 [ 446.882983][T11008] ? putname+0xf5/0x1a0 [ 446.883012][T11008] ? __x64_sys_mount+0x293/0x310 [ 446.883034][T11008] __x64_sys_mount+0x293/0x310 [ 446.883052][T11008] ? __pfx___x64_sys_mount+0x10/0x10 [ 446.883077][T11008] do_syscall_64+0xcd/0xf80 [ 446.883102][T11008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.883120][T11008] RIP: 0033:0x7fdcec78f749 [ 446.883134][T11008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.883150][T11008] RSP: 002b:00007fdced540038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 446.883168][T11008] RAX: ffffffffffffffda RBX: 00007fdcec9e6090 RCX: 00007fdcec78f749 [ 446.883179][T11008] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 0000000000000000 [ 446.883190][T11008] RBP: 00007fdced540090 R08: 00002000000000c0 R09: 0000000000000000 [ 446.883200][T11008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 446.883210][T11008] R13: 00007fdcec9e6128 R14: 00007fdcec9e6090 R15: 00007fff3c8bbe88 [ 446.883235][T11008] [ 448.491545][T11036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1372'. [ 449.070873][T11042] syz.1.1375 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 449.752854][ T48] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 449.802743][ T1020] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 449.902468][ T48] usb 5-1: device descriptor read/64, error -71 [ 450.162537][ T48] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 450.312550][ T48] usb 5-1: device descriptor read/64, error -71 [ 450.423369][ T48] usb usb5-port1: attempt power cycle [ 450.536951][T11080] fuse: Bad value for 'fd' [ 451.733429][ T48] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 451.862281][ T48] usb 5-1: device descriptor read/8, error -71 [ 451.923261][T11094] program syz.2.1391 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 452.172490][ T30] audit: type=1804 audit(1767709377.001:726): pid=11097 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1390" name="/newroot/333/file0" dev="tmpfs" ino=1820 res=1 errno=0 [ 452.262637][ T48] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 452.571989][ T48] usb 5-1: device descriptor read/8, error -71 [ 452.728682][ T48] usb usb5-port1: unable to enumerate USB device [ 453.457868][T11121] gretap1: entered allmulticast mode [ 453.584638][ T30] audit: type=1400 audit(1767709378.441:727): avc: denied { map } for pid=11124 comm="syz.5.1399" path="socket:[32189]" dev="sockfs" ino=32189 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 453.674311][T11129] IPVS: set_ctl: invalid protocol: 135 172.20.20.45:21 [ 454.971340][T11155] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1406'. [ 455.785723][ T30] audit: type=1400 audit(1767709380.641:728): avc: denied { getopt } for pid=11104 comm="syz.4.1394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 456.272826][T11172] FAULT_INJECTION: forcing a failure. [ 456.272826][T11172] name failslab, interval 1, probability 0, space 0, times 0 [ 456.302937][T11172] CPU: 0 UID: 0 PID: 11172 Comm: syz.1.1412 Tainted: G L syzkaller #0 PREEMPT(full) [ 456.302971][T11172] Tainted: [L]=SOFTLOCKUP [ 456.302978][T11172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 456.302988][T11172] Call Trace: [ 456.302995][T11172] [ 456.303002][T11172] dump_stack_lvl+0x16c/0x1f0 [ 456.303031][T11172] should_fail_ex+0x512/0x640 [ 456.303057][T11172] ? __kmalloc_noprof+0xca/0x910 [ 456.303088][T11172] should_failslab+0xc2/0x120 [ 456.303114][T11172] __kmalloc_noprof+0xeb/0x910 [ 456.303142][T11172] ? io_cache_alloc_new+0x45/0xf0 [ 456.303176][T11172] ? io_cache_alloc_new+0x45/0xf0 [ 456.303197][T11172] io_cache_alloc_new+0x45/0xf0 [ 456.303221][T11172] __io_prep_rw+0x21d/0x1060 [ 456.303252][T11172] ? find_held_lock+0x2b/0x80 [ 456.303280][T11172] ? __pfx___io_prep_rw+0x10/0x10 [ 456.303306][T11172] ? __io_alloc_req_refill+0x18f/0x5e0 [ 456.303339][T11172] ? __io_alloc_req_refill+0x33a/0x5e0 [ 456.303371][T11172] io_prep_rw+0x76/0x2c0 [ 456.303397][T11172] ? __pfx_io_prep_rw+0x10/0x10 [ 456.303432][T11172] io_prep_readv+0x20/0xa0 [ 456.303449][T11172] io_submit_sqes+0xa14/0x28e0 [ 456.303485][T11172] __do_sys_io_uring_enter+0xd6b/0x1630 [ 456.303509][T11172] ? __fget_files+0x20e/0x3c0 [ 456.303536][T11172] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 456.303559][T11172] ? fput+0x70/0xf0 [ 456.303575][T11172] ? ksys_write+0x1ac/0x250 [ 456.303597][T11172] ? __pfx_ksys_write+0x10/0x10 [ 456.303628][T11172] do_syscall_64+0xcd/0xf80 [ 456.303653][T11172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.303671][T11172] RIP: 0033:0x7fb349d8f749 [ 456.303687][T11172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.303704][T11172] RSP: 002b:00007fb347ff6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 456.303723][T11172] RAX: ffffffffffffffda RBX: 00007fb349fe5fa0 RCX: 00007fb349d8f749 [ 456.303734][T11172] RDX: 0000000000000000 RSI: 00000000000847ba RDI: 0000000000000007 [ 456.303745][T11172] RBP: 00007fb347ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 456.303756][T11172] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000001 [ 456.303767][T11172] R13: 00007fb349fe6038 R14: 00007fb349fe5fa0 R15: 00007ffdf37b69a8 [ 456.303794][T11172] [ 456.696749][T11177] netlink: 62967 bytes leftover after parsing attributes in process `syz.5.1410'. [ 458.127873][T11199] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1419'. [ 458.410304][T11202] fuse: Bad value for 'fd' [ 461.446481][T11234] bridge0: port 4(macsec1) entered blocking state [ 461.453031][T11234] bridge0: port 4(macsec1) entered disabled state [ 461.459648][T11234] macsec1: entered allmulticast mode [ 461.465060][T11234] bridge0: entered allmulticast mode [ 461.497044][T11234] macsec1: left allmulticast mode [ 461.502144][T11234] bridge0: left allmulticast mode [ 461.865247][ T48] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 462.033366][T11248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.058444][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 462.072787][T11248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.081241][ T48] usb 3-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 462.102286][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.244920][T11252] bridge0: port 3(macsec1) entered blocking state [ 463.251458][T11252] bridge0: port 3(macsec1) entered disabled state [ 463.258196][T11252] macsec1: entered allmulticast mode [ 463.263539][T11252] bridge0: entered allmulticast mode [ 463.273598][T11250] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1433'. [ 463.293155][T11250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.301643][T11250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.316424][T11252] macsec1: left allmulticast mode [ 463.323176][T11252] bridge0: left allmulticast mode [ 463.353197][ T48] usb 3-1: config 0 descriptor?? [ 463.575757][ T30] audit: type=1400 audit(1767709388.421:729): avc: denied { bind } for pid=11244 comm="syz.0.1432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 463.950503][ T48] ntrig 0003:1B96:0009.000D: unknown main item tag 0x0 [ 463.957691][ T48] ntrig 0003:1B96:0009.000D: unknown main item tag 0x0 [ 463.966382][ T48] ntrig 0003:1B96:0009.000D: unknown main item tag 0x0 [ 463.989496][ T48] ntrig 0003:1B96:0009.000D: hidraw0: USB HID v0.00 Device [HID 1b96:0009] on usb-dummy_hcd.2-1/input0 [ 464.023678][T11256] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1434'. [ 464.039495][T11256] block nbd0: not configured, cannot reconfigure [ 464.047639][T11243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1431'. [ 464.122993][ T48] ntrig 0003:1B96:0009.000D: Firmware version: 1.1.18.2.1 (4672 5940) [ 464.491813][ T48] usb 3-1: USB disconnect, device number 52 [ 464.524007][T11273] bridge0: left promiscuous mode [ 464.802499][ T5935] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 464.964116][ T5935] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 464.971492][ T5935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 464.981293][ T5935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 464.996286][ T5935] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 465.063501][ T5935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.082613][ T5935] usb 5-1: Product: syz [ 465.086811][ T5935] usb 5-1: Manufacturer: syz [ 465.091406][ T5935] usb 5-1: SerialNumber: syz [ 465.109784][ T5935] usb 5-1: config 0 descriptor?? [ 465.126702][ T5935] usb 5-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress f8 [ 465.419879][ T5935] usb 5-1: USB disconnect, device number 53 [ 465.587065][T11289] syz_tun: entered allmulticast mode [ 465.672700][ T48] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 466.226027][ T48] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 466.264884][ T48] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 466.275523][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.291971][ T48] usb 3-1: Product: syz [ 466.297231][ T48] usb 3-1: Manufacturer: syz [ 466.301855][ T48] usb 3-1: SerialNumber: syz [ 466.315114][ T48] usb 3-1: config 0 descriptor?? [ 466.329899][ T48] ims_pcu 3-1:0.0: Union descriptor too short (2 vs 5) [ 466.342155][ T48] ims_pcu 3-1:0.0: probe with driver ims_pcu failed with error -22 [ 466.587316][ T48] usb 3-1: USB disconnect, device number 53 [ 466.709794][T11309] bridge0: port 4(macsec1) entered blocking state [ 466.716644][T11309] bridge0: port 4(macsec1) entered disabled state [ 466.723991][T11309] macsec1: entered allmulticast mode [ 466.729304][T11309] bridge0: entered allmulticast mode [ 467.093604][ T31] INFO: task kworker/1:8:5992 blocked for more than 143 seconds. [ 467.108335][T11309] macsec1: left allmulticast mode [ 467.113420][T11309] bridge0: left allmulticast mode [ 467.123392][ T31] Tainted: G L syzkaller #0 [ 467.129993][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 467.158707][ T31] task:kworker/1:8 state:D stack:21880 pid:5992 tgid:5992 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 467.174214][ T30] audit: type=1400 audit(1767709392.021:730): avc: denied { read } for pid=11311 comm="syz.1.1448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 467.204035][ T31] Workqueue: usb_hub_wq hub_event [ 467.215762][ T31] Call Trace: [ 467.220149][ T31] [ 467.227491][ T31] ? __schedule+0x10b9/0x6150 [ 467.237806][ T31] __schedule+0x1139/0x6150 [ 467.243981][ T31] ? __lock_acquire+0x436/0x2890 [ 467.248974][ T31] ? __pfx___schedule+0x10/0x10 [ 467.261581][ T31] ? find_held_lock+0x2b/0x80 [ 467.266414][ T31] ? schedule+0x2d7/0x3a0 [ 467.270747][ T31] schedule+0xe7/0x3a0 [ 467.274877][ T31] schedule_timeout+0x257/0x290 [ 467.279763][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 467.285701][ T31] ? mark_held_locks+0x49/0x80 [ 467.290575][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 467.290881][T11315] 9pnet_virtio: no channels available for device 127.0.0.1 [ 467.295836][ T31] __wait_for_common+0x2fc/0x4e0 [ 467.295869][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 467.315345][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 467.320942][ T31] ? __pfx_device_del+0x10/0x10 [ 467.326121][ T31] ? kobject_put+0xaf/0x6f0 [ 467.330691][ T31] i2c_del_adapter+0x640/0x850 [ 467.335611][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 467.340873][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 467.346436][ T31] ? rcu_is_watching+0x12/0xc0 [ 467.351389][ T31] ? devres_log+0xef/0x330 [ 467.355970][ T31] devres_release_group+0x238/0x3d0 [ 467.361224][ T31] ? __pfx_devres_release_group+0x10/0x10 [ 467.367084][ T31] ? __pfx_mcp2221_remove+0x10/0x10 [ 467.372285][ T31] hid_device_remove+0x107/0x260 [ 467.377305][ T31] ? __pfx_hid_device_remove+0x10/0x10 [ 467.382835][ T31] device_remove+0xcb/0x170 [ 467.387350][ T31] device_release_driver_internal+0x44b/0x620 [ 467.393476][ T31] bus_remove_device+0x22f/0x450 [ 467.398419][ T31] device_del+0x396/0x9f0 [ 467.402929][ T31] ? __pfx_device_del+0x10/0x10 [ 467.407799][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 467.412935][ T31] hid_destroy_device+0x19c/0x240 [ 467.417976][ T31] usbhid_disconnect+0xa0/0xe0 [ 467.422795][ T31] usb_unbind_interface+0x1dd/0x9e0 [ 467.428101][ T31] ? kernfs_remove_by_name_ns+0xbe/0x100 [ 467.433878][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 467.439597][ T31] device_remove+0x125/0x170 [ 467.444250][ T31] device_release_driver_internal+0x44b/0x620 [ 467.450318][ T31] bus_remove_device+0x22f/0x450 [ 467.455330][ T31] device_del+0x396/0x9f0 [ 467.459673][ T31] ? __pfx_device_del+0x10/0x10 [ 467.464619][ T31] ? kobject_put+0x218/0x6f0 [ 467.469224][ T31] usb_disable_device+0x355/0x820 [ 467.474333][ T31] usb_disconnect+0x2e1/0x9e0 [ 467.479015][ T31] hub_event+0x1d84/0x52f0 [ 467.487215][ T31] ? __lock_acquire+0x436/0x2890 [ 467.492168][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 467.497432][ T31] ? __pfx_hub_event+0x10/0x10 [ 467.502196][ T31] ? put_objects.isra.0+0x100/0x1f0 [ 467.507501][ T31] ? finish_task_switch.isra.0+0x202/0xbd0 [ 467.513368][ T31] ? rcu_is_watching+0x12/0xc0 [ 467.524180][ T31] process_one_work+0x9ba/0x1b20 [ 467.529153][ T31] ? __pfx_process_one_work+0x10/0x10 [ 467.537950][ T31] ? assign_work+0x1a0/0x250 [ 467.542736][ T31] worker_thread+0x6c8/0xf10 [ 467.547350][ T31] ? __kthread_parkme+0x19e/0x250 [ 467.552370][ T31] ? __pfx_worker_thread+0x10/0x10 [ 467.557529][ T31] kthread+0x3c5/0x780 [ 467.561590][ T31] ? __pfx_kthread+0x10/0x10 [ 467.566257][ T31] ? rcu_is_watching+0x12/0xc0 [ 467.571015][ T31] ? __pfx_kthread+0x10/0x10 [ 467.575653][ T31] ret_from_fork+0x983/0xb10 [ 467.580250][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 467.585456][ T31] ? __switch_to+0x7af/0x10d0 [ 467.590162][ T31] ? __pfx_kthread+0x10/0x10 [ 467.594798][ T31] ret_from_fork_asm+0x1a/0x30 [ 467.599596][ T31] [ 467.603215][ T31] [ 467.603215][ T31] Showing all locks held in the system: [ 467.610984][ T31] 3 locks held by kworker/0:0/9: [ 467.618482][ T31] #0: ffff88813ff51948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 467.629032][ T31] #1: ffffc900000e7c90 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 467.639436][ T31] #2: ffffffff90142028 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 467.649965][ T31] 1 lock held by khungtaskd/31: [ 467.654955][ T31] #0: ffffffff8e3c96a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 467.664886][ T31] 2 locks held by getty/5581: [ 467.669559][ T31] #0: ffff88814dfdd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 467.679337][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510 [ 467.689531][ T31] 6 locks held by kworker/1:8/5992: [ 467.694756][ T31] #0: ffff8880206ad148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 467.705710][ T31] #1: ffffc9000216fc90 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 467.716988][ T31] #2: ffff888029542198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x52f0 [ 467.726030][ T31] #3: ffff88805642b198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x9e0 [ 467.735340][ T31] #4: ffff888069e35160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xa4/0x620 [ 467.745939][ T31] #5: ffff88804b751a20 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xa4/0x620 [ 467.756507][ T31] 3 locks held by kworker/u8:2/10015: [ 467.761883][ T31] #0: ffff88813ff69948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 467.773426][ T31] #1: ffffc9001eebfc90 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 467.783832][ T31] #2: ffffffff90142028 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 467.792932][ T31] 3 locks held by syz.5.1447/11309: [ 467.798132][ T31] #0: ffffffff9088f7e8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 467.807762][ T31] #1: ffffffff90142028 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x5f6/0x1f50 [ 467.816824][ T31] #2: ffffffff8e3d4df8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 467.826885][ T31] [ 467.830163][ T31] ============================================= [ 467.830163][ T31] [ 467.847024][ T31] NMI backtrace for cpu 0 [ 467.847043][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 467.847065][ T31] Tainted: [L]=SOFTLOCKUP [ 467.847069][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 467.847076][ T31] Call Trace: [ 467.847080][ T31] [ 467.847084][ T31] dump_stack_lvl+0x116/0x1f0 [ 467.847104][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 467.847122][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 467.847137][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 467.847156][ T31] sys_info+0x133/0x180 [ 467.847172][ T31] watchdog+0xe66/0x1180 [ 467.847187][ T31] ? rcu_is_watching+0x12/0xc0 [ 467.847198][ T31] ? __pfx_watchdog+0x10/0x10 [ 467.847209][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 467.847224][ T31] ? __kthread_parkme+0x19e/0x250 [ 467.847243][ T31] ? __pfx_watchdog+0x10/0x10 [ 467.847262][ T31] kthread+0x3c5/0x780 [ 467.847284][ T31] ? __pfx_kthread+0x10/0x10 [ 467.847306][ T31] ? rcu_is_watching+0x12/0xc0 [ 467.847321][ T31] ? __pfx_kthread+0x10/0x10 [ 467.847341][ T31] ret_from_fork+0x983/0xb10 [ 467.847360][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 467.847381][ T31] ? __switch_to+0x7af/0x10d0 [ 467.847402][ T31] ? __pfx_kthread+0x10/0x10 [ 467.847417][ T31] ret_from_fork_asm+0x1a/0x30 [ 467.847440][ T31] [ 467.847446][ T31] Sending NMI from CPU 0 to CPUs 1: [ 467.990507][ C1] NMI backtrace for cpu 1 [ 467.990524][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 467.990544][ C1] Tainted: [L]=SOFTLOCKUP [ 467.990549][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 467.990557][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 467.990578][ C1] Code: b6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 39 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 467.990593][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 467.990605][ C1] RAX: 0000000001c2b803 RBX: 0000000000000001 RCX: ffffffff8b7826d9 [ 467.990614][ C1] RDX: 0000000000000000 RSI: ffffffff8dace4f3 RDI: ffffffff8bf2b480 [ 467.990622][ C1] RBP: ffffed1003b56498 R08: 0000000000000001 R09: ffffed10170a673d [ 467.990631][ C1] R10: ffff8880b85339eb R11: ffff88801dab2ff0 R12: 0000000000000001 [ 467.990640][ C1] R13: ffff88801dab24c0 R14: ffffffff9088bad0 R15: 0000000000000000 [ 467.990648][ C1] FS: 0000000000000000(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 467.990662][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 467.990672][ C1] CR2: 000000110c37a5d8 CR3: 0000000080727000 CR4: 00000000003526f0 [ 467.990681][ C1] Call Trace: [ 467.990686][ C1] [ 467.990691][ C1] default_idle+0x13/0x20 [ 467.990710][ C1] default_idle_call+0x6c/0xb0 [ 467.990728][ C1] do_idle+0x38d/0x510 [ 467.990750][ C1] ? __pfx_do_idle+0x10/0x10 [ 467.990771][ C1] cpu_startup_entry+0x4f/0x60 [ 467.990791][ C1] start_secondary+0x21d/0x2d0 [ 467.990805][ C1] ? __pfx_start_secondary+0x10/0x10 [ 467.990820][ C1] common_startup_64+0x13e/0x148 [ 467.990842][ C1] [ 468.163258][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 468.170124][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 468.180827][ T31] Tainted: [L]=SOFTLOCKUP [ 468.185137][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 468.195177][ T31] Call Trace: [ 468.198436][ T31] [ 468.201357][ T31] dump_stack_lvl+0x3d/0x1f0 [ 468.205963][ T31] vpanic+0x640/0x6f0 [ 468.209949][ T31] panic+0xca/0xd0 [ 468.213682][ T31] ? __pfx_panic+0x10/0x10 [ 468.218085][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 468.224052][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 468.230197][ T31] ? nmi_trigger_cpumask_backtrace+0x2be/0x300 [ 468.236341][ T31] ? watchdog+0xe83/0x1180 [ 468.240741][ T31] ? watchdog+0xe76/0x1180 [ 468.245139][ T31] watchdog+0xe94/0x1180 [ 468.249368][ T31] ? rcu_is_watching+0x12/0xc0 [ 468.254115][ T31] ? __pfx_watchdog+0x10/0x10 [ 468.258776][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 468.263962][ T31] ? __kthread_parkme+0x19e/0x250 [ 468.268972][ T31] ? __pfx_watchdog+0x10/0x10 [ 468.273630][ T31] kthread+0x3c5/0x780 [ 468.277769][ T31] ? __pfx_kthread+0x10/0x10 [ 468.282343][ T31] ? rcu_is_watching+0x12/0xc0 [ 468.287085][ T31] ? __pfx_kthread+0x10/0x10 [ 468.291658][ T31] ret_from_fork+0x983/0xb10 [ 468.296232][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 468.301329][ T31] ? __switch_to+0x7af/0x10d0 [ 468.305991][ T31] ? __pfx_kthread+0x10/0x10 [ 468.310571][ T31] ret_from_fork_asm+0x1a/0x30 [ 468.315343][ T31] [ 468.318629][ T31] Kernel Offset: disabled [ 468.322971][ T31] Rebooting in 86400 seconds..