last executing test programs: 7m36.742003497s ago: executing program 1 (id=5780): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) (async, rerun: 32) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) (async, rerun: 32) setitimer(0x2, &(0x7f00000000c0)={{0x0, 0xea60}, {0xffffffff}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) capset(&(0x7f0000000dc0)={0x20080522}, &(0x7f0000000e00)={0x0, 0x4, 0x4, 0x0, 0x80000, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m36.57466155s ago: executing program 1 (id=5781): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000400)={0x2020}, 0x2020) syz_emit_ethernet(0x3e, &(0x7f00000004c0)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x2d, 0x2c, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local, {[@ra={0x94, 0x4}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) preadv2(r1, &(0x7f0000000280)=[{&(0x7f0000000040)=""/60, 0x3c}], 0x1, 0x101, 0x4, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0xe0000000, 0x564b043a, 0x83, 0xffff, 0x5, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) syz_fuse_handle_req(r4, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0xd43a}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80840, 0x8000, 0x0, 0x0, r6, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r4, &(0x7f0000006340)="7c7a6a069306f2c5ddf91f36944f207a1bd11284b4445fa3507bbc5def2e6fec4bb7c6001eafe381e277221f30085acd5d0c251f7c60c23874c04db6aa516f773dd2e57e746d1a085193c8b7664fceb1fe764d87f4395c66e5d4eee443a555692ebe80f3a11b8be74963f1a18c1d0cd71dec65e609e065e14615d2e8b283e55b4aa8b485f81ce52443d61fac9f08cf34f2997c05a63f98f988cfcea9a5650b37dff5817e5033b3912c226bd9bf68b528dec710584242fbdcf7dd0d55e394d3742039e6960bb589fb9ba18ac8e9e82cdbd08e9b584d0a8224cae3e9dd91e25699549007dc0d99165a73cda1c99fc48f6bfdb900c60e4481222505c58cc1108fbaf317d361d1f2d78f6db6e14b283ca9f1927f4f8a0f6f52818be03c7b257aec57f06a0a4279131a2bb0a13b23ab188ea50a686abb2f7e4d0f7a166f358e4cb886b7fbdf51cd9a153410dcc4cc5db7e8e94cc9ba2371a328480ad20f51d7fa012f367a0a8f9c882c47b5f714f0e1b35f72b2261989513c1428d648aa8ab8c12c87dfea38d5be0d49097fce804c9cd2ac8f61b68579853129351e3bcdbdae3371d2b12a150d94b3097161c226c50a1d2c1f8b4c10a986e21dbbb854ad1d26d0ce5d950835d14664ee8f58c537f5256b761b4707fe8d46cc1658798d285310a1cff127b1280cab3f1f633569391d5a7cc08aa1d108b93c38df397d90bbb81753930934df7dcaf8f960dff660fe239aa15cf48872668cacf4d664dc0809fe9d780ab202c3a968abb56655267c907eb3343809b2407105a5c14d53a3b17a9a1552314d27e13daf48a2bb7b2c9fc15aba9ae1d6325c11fbe8432c067efa72878ca56c6463b6cf4d29646905422908a4a1f7741d0049febed4fc2b7cc27154031e50a0ab297826383935bef6a0f968db92128e8a940509b5368146bdcacc852b9d0b4ae9624635f9e69f3a7bc8e6f3340c7de46f49feb20a46f11aef464fa6696a60865bdd0c40b1c411c9661fa9f6393a33a7eb4afaef3eb1ab4634a42baeea780ac6c0c4fc8cf7a92cf0592f993ac85bdfd6c18ba4b7cf4c4438a8330413de8365b4a080234f59edefca0c5ce9697b20cc7b71d04438c00cf3d557bd03b5e1b86e167d2d6e09714135ef720667d0f2e7ca54da419d1bf6722eda31381059216009cd8c99ba1d7f9ebc1bc021457a195fa5be2f0727a84cf4cac5e080f22c836a4955d5ed06bee2eec0d39abc5f459ac43596fee3b341dfbd7ce6f4e57ea42e1e8d4f65880b8b77d2ee27dc1efe95ff1bacf5aa14933456b68645380d0f2ef6284b9946857456d64f4cb656998e99e3e286f596b31c69a69d0ee8444ed838ca2f0ead1be9538e4e927239d0e65a3f871dcad33881f69592eed93a9fafc934aefa67bb87d582d0ae4cfbb5c50325774bbc259a277749751228d3610f95fd56e9fbccb288eca1b14c8255b6996a59c91efbb08440ed91cdd53b0aab82600906904cee2a117a06157e24fa822e1cf4f9db4c2e8a5e842cfc503e578e69002fbae194b6bc7c8b69aac7359292109b712eb49d21946f5ea2745ab77ef59950dcfd926df2aef20e85f2a14554aabb417f15c725c73edd4853926ad6c525afa2c65de213cee799c18d1ced9424d10d7076fc5862579702a5f91031381f41cb8d9899ab514cfa1c8c51437df9710271d8cf69e8900921cba296703f1a7b5234500c1625884fea594d836a930b06142a6e577cd9c2a32cae65e712624abeeffc423a5d5ed7bd75fcb1a82ecec8acd0da9918a5c7c189f14f8cdf37062f93b87f9188501556060ffc6eac435cb1624f2af688316366e03cfb869eacf83d9d45fce910c3347f810b614c2e4291e70471ca2b574241c3f3d9740c6a45c7296a2f275acbde72e513ef4e5a1123a57c2eb1bd023af716c16a7747204338f60b6e3ac514af50b21952c21592aefb6149828a5183ba581d5ee8647f374645ff941bab67bef760ce353b456c4b51c5d3a0c5372b1773b944ad67a92937dd838e1b6f550a1dca975d6230e430bcc278afed54e0621008b2f850107b0244359e3747be5282630452d432e5df0fd160795effed150f9396a7da5a1e4dce0c8f62280ff2fbfaa813859a671208b4b9f05fe450729b0efad83a790acd688a90e5fee5550de4ddeac70ecd125ad076c4e2b68652e6ea520e2b6b339b4b9dc219d853e06b9aa79d022e53607213fc254e15ec3e6b776d2b562997e0fe52b98c58e1c0316b22a4219460053da87e7baff7dc1892c2de2f324dd1169b977f3a6698d0234c78de3e46ba5824f3e373f264e8d28fbb4cc108a41fdecd4b629d92b0a65f84366bf504eb5a894ba40c89f9df854dc469fa174ac85cb8d2adfdc099ca9848a1032b2e2f375bd1544dfb69e33492e1a4b921ad7ff17c4c7e357ff69f42d2301c302ee2ed313f0e9a20ebfe028a8737d6e38bf179940179cb779b70c2276264cb4f23249db7d5f179baa842b70f5b287cf74ce1ff6b70a56be8f2fe15aeadca229804923d28a793838bc605eaf5dcd362f757577ebdac54b09fd73326720d3522d002a41a3b5f2450f48286a5ea45836b5ee77fc415f47e0716049ec2610d607737fd5a73b066b4876f9d744f6b3486b088dd3bfc3d393a27c6c799ce078e2ee348257b5ec1ba9de76da2a67ca912dc2dd5afc70834ceecbb8bd41f6e790294cacd5891bef1b4e2124dcd6dffdedee8f16b3bddc030429dcb0f98e6fe0649cb14eed3293fa4933b2ab8c0ec0ff4dbbced1e32dceb317252e715b872b00478cbd7b0275b7394a0ccfe9887410b32f1ce9266b3b83470ec982cf908507d3ad0cc366bff3759388b624701b3e0dc0e7928386b155b50b42a8e352622516beeeddfb79866a2eb1d360802cd19d62fd171267a0fece5f54e315a8cd49c41072f2a7a0baab5aadae2c1ff28e285b642f8d3869321bd18b4aed107feaa12d055b179a8ab7b50e2796d287a196e280d527b526c45c8aa98696d88a02d923d06fedf51336c0695c218e70448073921971093ea44b5352e10ce6cec26d082b93f69958165bd986f56650a62224c2d9fd044bd8fefd33544c6bd141b4cc211a087fa57c09e195c8edffe559048db738d1395f5e2625dd7cd035b8c76aad6c238fb52a7c5ff0965fc7122a5899746ca88abd699d6078623722fff92726e18613519f2b1927504fd5cb7a38ffa373c3883022f0387953530834affb5f05e0f44c24caa75561b2b63994493ab857fdc30900586fed09298d846e5936869b43d81c4b91902028e57a8f2da16355ccb7a77d29ecc8e66015e979b2f3edc5b8d77c45348dea55c9ed6b7465acf899f4bc1a7edcae0b0daf69ff85c504eea1294620b6d3dbb004575044a5ae7c110010c2cf39827fbdab3b42ac35d147fc53bb5e7de6c47091dc80c14b8da494b2e913d1a52085e29af19edc4a417346c5a896a3851cb6132511e0627d190b77623c8a3bb6085eff22ede7127f7988a1d388fb70ea20d5c1b2424c5aa83532bc5162a5d177968b4a46583f2d4b92d04a5f19145221aeaf724d92ea1d4dfb53021b47585bbe5ce35f8d09a83e13fdb1de8e52dc646d41e810879ce9c830959c3ee93f11a16d030d141863244395e3f847505fe6d9594a34009fec9a743c033b9793335684cc5c3d0eb0ad094f40a60264b02cd88c583c850d99c5b9c6c5dcef467ca3ea38f2aa42f5657cd940aeb12960efa18d571e4f958b9cd90918e069a486d84f214617ce29c0f2c26bf84f12f5036f26a8de0c8359f572654bf5ee06d38f741c464976d95ae3fdda45c2ed2d08ef71d3590e82d235e0fa357c568158791a195d4a2d9615e1edc85be64cfd169f925ffc4f636f86783cf43624a77bdb9b172228097f02f391df00668dafbd9932298b23cfadfd1b8d14a25cb408a440f930f0813de73c1eb2eb4b3c802d718a672453d0038965c6dc98db96fb4e06f1fda72782d0839d4e8b477ebdb2c73510db44f643ec7dc4fcb837806853caa35cf622aff9d44381d3f7adae00650cbb6f0334ceca14ec982dfb5817d7fd49251c203b6463a09c14885f754603291ccf0a7ceaa57284ee751774fa5ad72f9f7a32fa542947af40601e98057895f2869d4ec2db0d73930962535fc9e12ba7e6777cb458592bee505b367012ebd27b256fa0fac1452cf3b28eab573549b7c7a13752ca0189768f738d5f8030fe999f7bdc466d67bb32937ae469f1a1e21fac2ae2ab92a0a260bf0e9ce20625e82f88d0ed4d13876aed768765d77433bb9137d92d622df502aef574de82fe28063128fe5a1787ced99734c2f3f221e80d3baefd367d01d950ee1bc981b4b5ff86b2a96ab78fa3c1201303cab473103d89bb185afc77dd2cb7ac1564045036fe9fcf85af5d73a7553bc45bf5e221564540982db2f81e612e7c1715d3498b8d7851c0160146d6eaae9e30c81dedfca8e7122fcb69b26b396629b723f1e1822b8d5d8f2ac583728a5ab40010f88aa42f37f2031a3e99d8d6661e63f86f65af521066ea6af89c89e1748521b8368cd03409e895a941025ee777653f55e66cd1a0cca21308666260c3b9a306ddadb322eb1d09f7b27fd570cd35b6ec88bb391e3ae4745e17fb4dd7aef1d75b4ebb91e6e7789b241566d7c0cc97a3a126ed50b0cb621e015414f62641afd85bad78470463f86d8287aa56d331911c23c4cae8e5dfea33f3789c03d61f51c590417b5ff9f1aa35ab6a15364296c5f9399216ce565210a4075ac5e43e916850774a127f9174d95b43d839e056b4a7d679bb8804951ca171c0b59f4d6f32c4fe8f908b9a1614591f5d1e1cf3348e02317ec4655c693417a4c4e7007a8db02faa1634f8eea9c9bbe5b149ce2279953a54884392dc7251dd38670fd59d9d1da5203340909d50f779e864339014bcb545d825cdcccedc558a1d01a2784b8f499ce9fa2ddb0dd1dc0b93d1b282a96cb4ecf152474dbc4b2853b30c8e5fcea85bdab949f5eb1e98d81c102c349f680230082db5aba9e20209c35b16598507d28211b49763b598a7e60519d5b28b67c027cb2657cf2ac7c7455291fcfe63f0b43afcd3afaea934da97c209d02e5b47a686c1c284aeee5d662fd9d9be7c576259d9f1a36fc0f7fe329a1da1dbe078381233940745fc28a56db98b1a8442325168158e3f0b3cbf8a368d19dd20cdfc1c4f3893a30a49223050159b0bb8b7c59ca705ae25453988d87ca6cdd2bd2fe37847ba67cbcf7a494925a8598b7b50a741c9ced10ea08e35c422b79265561a07f40ebb89bc46069a1c1ad95949fe757a76ff6b5386a043abc967c367a9d86b54d374e573540dfc1f6d396f398abe9735f523b778fd124ac1e1eb832a66dd4b1838a50e6a4eb1b95b8a60a94f067b24d1194976c539d5ec287a261bf25904575be3ff49e7411a8dc09739649828124c14fc2b89dad1f3f5725db2e45f5a447cd3e4bdf9e1e95c5ad7c76fcf0c1021cb6c32e6985e1d113030d534eecb0dff2554183ee18da2da5d21a8b994a81f05e0e6ae89b20bffb4be333d1956270da23e9905830921b1f3d615a56a20b11d45ccd1d22b910e33f475a92c31fa5b4675ddee18336d0ee7b75c07df2a9d4ad53d83142219a00aef15e1e9dace0f039d63a530fdf671a54aba3882dad0d439632af5576726c3aa095cc1a0a03063e8a6581b78bef501acc24b05a0150d8f683c90e8e5e283a49f898906dab926e544ead48cb9bf9a6e1bf140b5273443b8cb8166b2d8a5464a3e9d9f4246ac81ea91b33a0b399dde9f5efaf792bb04cfa028f40b7c92db2d9c33e16ef58b9263350879ea94e581a1187b2d1931b1cd7606a76bd8943b7c3098a33bdf476960af7bdf2854b1336e72feb603b8bb2242df0839d157843d369a50a615068ff5d99ecebe8dc19158a6c654e853cedf860a727bf8140c062f5d307fdcd150ad0af03d2c3a913b91047858ed6382d2d2d30f5c0bd419c2cd4047f225107ea8bf4a3a69384f16b5b5bb2655bdb750db4e975794592987df95f6a90374b0a08769b2c957faa16a21270196afba76b4527f01f0c5db7fa16e2da81fc49336e20bc3ee1ccbcb62255c84513d9ceb706f03c25000517070c03b7bce838e6b6cbc7f767959fbd62e11ab7ea6d760cff674a4296e6185eb348028b472290922160f3ea36c22c8375a016f505017c0a0e041dd8e52b4f19ccfc701109a19391a059d77db239d40a06d84a6f0ccd08aaad764e53ad1da19ee825a4d25ca7cd538289bffe135486ec1614e28b3682c7081a1b0a2c7272f4e36f6d0d9e68d84209126dc59312d48eed1c63c90efeadd472259392c28746abf394c5c6c97d3fb00b70a74c313a817ee1719c33f16d58f297fc7eacbca5803df115745079c5434e851ad6c1f0e8ba0bdbb66cbb6789b89a23526b476ad0f2cea0907e72702f93d37bdfe7b39fb9b33fb1111e58f5c45db8cc38afe4e03a318aa0690afb870a67aeda7da9640fdad1e1f551dd4757c69b4f523b616e502514a2e35495916f2e5ddab1ad9534644d99ec56e818caba173773aa5e45104deb869b23063eaea5542d3bc503a6948b83779aa46879443cad02477451b46429f1f67560c31d4377f96031ab94866a73be753c4ab91cc6576c3991c3423103ebae604e887c56cbacb9e95b8b46300b62e698a6456a0d175cf682eacabbe301e0b0ea34f963daed0dc6c1b75fa5e3870959913e69e61911d9ff646e9c6bab33fe566871027e861577c4d7fdfdf94ce7ac1a3f6d29daf28d660431a89c0b56c4b95090e2ca5df62c1e5c5dbf98f067751819d4c5914aa33883b7b521aab30d14e1cfae74fcf3ad4b2cf9448009d3223ad984e0c50f92d465573a6fc2894f8a5d4e855316738ecfd6a6c157d39b5c44d80a7cba944cf9f7a701899859821cf2bc248459f7a350fefba53c1481a7197f024f2eb74251455c06f4b82dfcf3ccf3e3b98b898fa1b16c310125e5e9fd4019acccbe91b4d842ddd52ee56f6d3112dec80159d6d3ef93bca70e7afcccb223361c39addbe3c429934cd0ae35f36a8f6309f08e36b27341db1f21fd8a148b239361b31a85f53bd1ad49fadace6c64d5f4363427fb2f268e8aec6d81cdb7f1252baa4652dc55881661114bf98cdf17190379591f0e22dc97e790f53f463bbb0ad0ead78ddf7dfe2e26052acc31cfe52b822afd5ec5c75957106cb5c368c09252ff3e4f624d90e599279fb985ecdb7d8880dfe05ac2d2da83e34e2b9b88f5dd60107a4509902fcddf4a36605e5c7a2606a4aea9fd4b5b24ca6b67d6945d133869cf9276d8c30b08c2a9f4bf03f4e0b956fd5f3c80b958ac5c41e4115b6708799c3102bd8b6c7fe17ff8c3f89c7437255faf69d1e16074086dd44d038bc0211ac74743169b462dbc085d77bf45eea72bf8348308bf48feea02d739a0fee9fbf71023ef8c6828da1aec8618cc2345ff663f88bc52a990e6b9591425435b0c7900ea4068f5aa6345e94254e259a71290fa23281658a6a165d1dee10dcb355518264824665ff2c5538de9ae4487782911f79e0bb09bc2c2d8e0d91b33cbec839075c9b38c848e9d2fad7368e96c1932042c3e85fd95b7d4500e6cae9e649082e9d5ca6f2cf91fc7ecaccc1049525d4325003424cacbd6eb5b8cc30b6893bd1ef46a8e7cbcc87dc2dda5c802ef1f8bb607c7457eb161254dc0feb60ed5ed0383fdb4db91d7e41d45c8eb80c1981e801ef05703f97f8710a2e00eb0559f854f700f946937b9e68c75ad6d0015d5d79be5423d0d846bc76f92ea7ebb0302b3d3c695c0aafa83b2bf029a444709cbf2cefbdcc7eaf3dd7a16f8ca8c861e883db10d433f7fec547be45e6829962e430bb3c93e8cdfb342c1cb7e53d8a6ea625d5574c4b4303f61c4338a658e652ab2bc0029c0a78a5114f495a439956909cf42128cb4348affbecb20b7fea98e22160e9a58e7666a00e7b37fbec4bd3860d66a39d1232a57e8cc50710c5c666f7efa98f16f9a02d843c94b0842a383945d06899998ff2fd01ffb58ab53ea89b2c93634c48d0420edb9791b8e451b35b534b8b2874c4859c684cd14afb5335a2555c75ad9df018635bb7131a7ef204ccecfed33a675fc51687e3f8818406fbf58e7b5fde1ca96153817e1b632e89a78d967eb6a34af1dac0d9ffa448b7b9bac27afc305a7b47febbe0a37036c18aef6852b1b2759d67479f9edb169e796d949844a1624b1e832a2eee9be36dc5866d6fde431cfcbd4e305d322c9dd07f83b5b361daaa74bfc9fbce8b447210c327468659ecbb0a5fc20d0cb79de7d1d70bf251c81d5f38711f3f4bd4752685b077058beb465711b1359d2a7d2f59216c5a807121bb97e7ccacc46526e4072f1d6de3b487d492fed0995e2273fa3bb115bd08d32d8e57eb2aa8f9d3b81babd1b8334c3a5e69422b75502ced3793d07b9bdf38e9d9fa1d2e48c7886dfc41985e8ffc49f09c4ba58ddc3b4cbf562b591f8939ced5d18214a77cc753075334a157373cc33cbc07a731cd6342492f5e05f78108e627bc88777203c76632bbe0120924c7a51bbfc9dc789a5695b7c95ef544935032fb81d499c454a2d78727875c20bc8a48a9f23cf6595c17c9cdaa8d04bab8ac567ebd3bbcdb40e11f1893fea3970f176f75f38d17d6ee1bd4ab76c660723a776bc72319199ab82c40ac4a9f4f475e8fd4643a4be8601cb5172e112c236c7c430078601bf183a59a03885e994c1116a9d4ef275790ff2417ffd85b43274fc57654466fa394958aeb11f343c3439604af13997011af70b67df1a9dfa4cdb751a2dc3e5bbf42f7b9ebc6dcebb2dbdc57d7a2cef7409dba307b7cf6eab148a924566341d035cabc877c68d0fbfaebdd39c16304b63a1bae376fb4650708bf5695dfd7ffc01f43f0021f622de0b116ea494454497337a0ec469963de7f9d2b1d6c5a7a0a7835777a78a2b9e16eec696446981d2fea550f011419b96f7b2018d027b87fc715521b0302bd7b5b3bc5f033346029eced73df07dd1bb1f91848376b40b9e9da7233e7832edcc7b54ef6fd320d19efce78d58ea7020fbbdf77612dc8a4f3281915ac9706f346e405b9f489f8f2e9a2decb8d18bec1e5f735a4ec69bba4dc5d36c9c1cc50b92fe67b2cdd53fa671c0cbe331abdf46787e7c9912b951aa20700dba6cf5a209fe5c9c61ef62a8e2e572ec774b2d0f42d570633fc44d44826e848d47a8f386a5704e0a3eaf1d06617181aeb166334ab55d5aedccb27abf19a42a480930e25465721336c70a2ea7799d21a3659124ac9503efc99c1b13ca2b9723e3e338055f9b3cef7502017ebbb09a64b06462db353a5c562101cb7fbf29e056deeb1ff0c7bc877210c941c87401ceae52bcecc83e87655069ab931bd813c1a87d67554f5d2cf435e6dd92a515c22f5d5a9a44ebc81e9c4849104343b80824005619312a9e349d996e366d381da42edad1a560bf5e31ecd049e92ceaf42954958600a7868599fe10e9b34587368d3044250c3d1a8ba6c8dcb6d318d4f9e71c2d33fc74cb57620a8343258d072f3aa767b4b178f3f66d5a713dae2426296c12edf9ee37636869e30df64cd3855fae20bc7602c1b7e6c8246ed4be71231a5ec7b5e7a9ebb08bf8667d8f2900ecdb0a0addc14a2328eebc448db13013e6a3c1a661065e5ac0a04b5171bd84c9d9d947a6c31257ed13a966530c5e20168c100117cf82b4c00ea3ad00ea65e1af89535b3f11a1418ddad33db8cec281543732d2ff4eab54b12cc95f7d872e75bc01bf6c580540b0e26413c6c2321ddfb0447bdb6acf05ddf2bb92534a3a5f37d6da882289f6fefc6a213cdfcf34902137fa3b982b2b4c27c611f08909a18405482f1e3a2bf3635d3e970457541da16e37bb3c422cceeb484bb64c78724431a543ecf4ca851914c1555e3b785ec87bba3769927f6c29f80e7ae8632bdb9acdddf7c3b5580740d9b2bfc25086c9566844136f3fac74f429121f86c378c68c20a194b0c98b1e92991954cbf60477e217a2e25297fc7b18972e40c531ec19e1eea193bbc8893392d8528c6a0375bcb4b082d20d5c47cb330bbb4b74b91ab55d4a0d3e1dee8182c581e8e70ac30108eeb7185c6ea3f786881ad124e1404651ee95cdb0fbb0d0f4a2b43c795ec1cd4e46234a88862d57903ce878b641004fb637341e5d6bf5163f1a3467b828f6eea96c3c2bb79503687867e11eec32dec452e0fdd2eaacfc0a477ee839ef049855da734d18212142dfe2a95ab9ad9bc4f98c3bfa34134c7e6c9f8669303314d4e8c1bc5475e8fcf418cbdb3246ebf393d911cdfee8f2550dc1593ece59ced81a4ffb2484f9c8ebed0aed8d418138445c4e96b209adcc4afd70f09901662daa2c8c557d6039768d97e6b9518f0de4ac2e0187ba08a4a9128d3e632fca102137338b5e568f12c7bd28db772c800fb5f4d4e683b201840731bb7c034235cd73313cde88891bbb31597bb537696e6c987302297f9717b8053779aed447d33ef9129e84d3031fa9b453bd5731fb010ffd19a9133e0ccbec2461cdd31ba294d68c60a8535b15584bab6e6d0ce6c1cef4755bd5f7d90f4debb40af1437a19a96ef9c0709692156152091c7efb58f2d39a65b96416dc09e8091ae08d9be5235a3c1ec062862baa1aab788f28e83ba4635cecc6671f2320f42b4f711e7d0fcad89d6727d3630da1ef35e32dee39eda665946abe6224f17f2acc29e62518fd51eb7f193d9bb16c38204069098c293fdce24c1c79229fd08622a4256b581cffce12e46c20248dc902753f0e3c91f9685b3d45f984620e262b3487d67d152f1c50de3fd2067a9d3debf715f346dd2f712c55545336a9036ba82bb06cfae59a48d083c3388f77790c9639fa0a9c33f4c66c7513042bffb765c2a4b3657dddf0ea094d8d79018f66c8ef8e9df980a89906275edf4a467a5db0a623976899f0efd167aab6ff385cdde59027a95a570277cb94ebce503906c28527e3114eb9ed739d0c2f4cf82786b35c0054718f47381ed8ce9b107e1f1019be5fc877166da667036f0c1b84e2b5118b5f4babc052d997e5f1e8c4cf45eb26430b74d9e1df3735b8d5df559903143d983e974bed6cc608c2580a991bdd3628ec676d348de8752cafa80c1661f162e35c25fc0ba0198423f83214fed800f9355ac8ea67951cfeeb3736b50c1e14d45d33aa25fc72c38702bd5dd217842e54114f4799c45ff1b7cec9729382ff7fc3ff80cbe1a13d03e19eecd7de676f6791fe34143ae30c97da9623907d974a37b65d0ef5d46b718d58541c6b1902814de71218ca7396ceb5fdacdc3cf4d110862402e7cc6254f1e44e28593fd443290262db75fd482ce1d305d6bf9fd3e5e0efbedac5a4d097650b111e6e9e1b2c66a23ac5bf27ed78d25d1a54c16ca4287126736c2f17ab73e683798c29d16481775ada8e20d94b00b6b29654b18f60e2853fdc7d3ba55d7df660db90288b6f440efd19f0478047b12c7b07ab2b1c9529597e6462d20612e6c3b6d1b1d11305f8ddc811860450504b7cbf9794edd0d07c25ab6307d74afdce958355eb919dcb1fcb8038c6dd5e774ee398dc8553a9ddeb551f", 0x2000, 0x0) writev(r7, &(0x7f0000000200)=[{&(0x7f0000000280)='G', 0x1}], 0x1) creat(&(0x7f0000000140)='./file0\x00', 0x34) dup3(r4, r7, 0x6700000000000000) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, ',\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_DOMAIN={0x13, 0x1, '/dev/cpu/#/msr\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, ':\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008004}, 0x40c0010) r8 = socket(0x10, 0x3, 0x4) write(r8, &(0x7f0000000080)="11000000140025000307f4f900", 0xd) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x4058534c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) 7m35.368543095s ago: executing program 1 (id=5785): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f000000fa00)) r2 = epoll_create1(0x0) epoll_create1(0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r2], 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) fstat(r6, &(0x7f0000000200)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x8, 0x8000, 0x9, 0x7, {{0x1b, 0x4, 0x0, 0x4, 0x6c, 0x67, 0x0, 0xd, 0x2f, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x21}, {[@ssrr={0x89, 0x7, 0xa4, [@private=0xa010101]}, @ssrr={0x89, 0xf, 0x5d, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @remote]}, @ssrr={0x89, 0x17, 0x4d, [@dev={0xac, 0x14, 0x14, 0xa}, @local, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0xa}]}, @generic={0x82, 0x3, '\"'}, @ssrr={0x89, 0x7, 0x84, [@rand_addr=0x64010101]}, @ssrr={0x89, 0x17, 0xea, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @empty, @multicast1, @multicast2]}, @end, @generic={0x94, 0x6, "f90a4748"}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x9, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x247, 0x0, 0x0, 0x0, 0x6, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000300)=[r4, r3, r3], &(0x7f0000000380)=[{0x4, 0x1, 0x1, 0xc}, {0x2, 0x3, 0x9, 0xc}, {0x1, 0x4, 0xc, 0xc}, {0x5, 0x1, 0x1, 0xb}], 0x10, 0x5}, 0x94) r8 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x101000) r9 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r11, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r12, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r11, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(r9, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r8, 0xc05c6104, &(0x7f0000000140)={"524ebce3", 0x3, 0x5, 0x81, 0x3, 0x16dc, "0d0767fcf850456f2290e729cf77f1", "2eb4fea5", "44b4dd9e", "ad2e21d3", ["d4150c57d062e240fbe214a9", "850f3d04d42a166156600360", "82621ecad17be13010ccc10d", "6631cbd8c92f5461e2ea90f9"]}) ioctl$CEC_TRANSMIT(r8, 0xc0386105, &(0x7f00000001c0)={0x0, 0x1, 0x6, 0x5, 0xe30, 0x5, ' \x00', 0x8, 0x91, 0x9, 0x0, 0x0, 0x0, 0xfc}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r5}, 0x18) 7m32.097673907s ago: executing program 1 (id=5796): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc383, 0x3010, 0x2, 0x200004}, &(0x7f0000000300), &(0x7f0000000140)) r3 = epoll_create(0xaf2) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0xe000200f}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000182000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1, 0x0, 0x10000}, 0x28) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$alg(0x26, 0x5, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r7, 0x0, 0x0, 0x800) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000340)={[0x3ffffd, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x213f85fe, 0x101, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x5, 0x4, 0x100000000], 0x3000, 0x280384}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 7m30.710744254s ago: executing program 1 (id=5801): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x26e1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006970766c616e0000040002800800", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 7m30.458300746s ago: executing program 1 (id=5802): r0 = syz_usbip_server_init(0x4) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)) syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) write$usbip_server(r0, &(0x7f0000000540)=@ret_submit={{0x3, 0x1, 0x0, 0x1, 0x4}, 0xfdf, 0x0, 0x1df, 0x0, 0x1}, 0x30) 7m14.95930865s ago: executing program 32 (id=5802): r0 = syz_usbip_server_init(0x4) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)) syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) write$usbip_server(r0, &(0x7f0000000540)=@ret_submit={{0x3, 0x1, 0x0, 0x1, 0x4}, 0xfdf, 0x0, 0x1df, 0x0, 0x1}, 0x30) 17.682855206s ago: executing program 5 (id=7238): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000300)=0x2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x9, @private0, 0x9}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000400)='n', 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e23, 0xa6, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000100)="81c313672bd49fb22d", 0x9}], 0x1}}], 0x2, 0x5d9) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x20400) ioctl$VIDIOC_SUBDEV_S_CROP(r4, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0x3, 0xfffffffc, 0x4, 0x6}}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r5}, 0x10) 17.106327156s ago: executing program 5 (id=7241): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') preadv(r0, &(0x7f0000001240)=[{&(0x7f0000000240)=""/4088, 0xff8}, {&(0x7f0000000080)=""/40, 0x28}, {&(0x7f00000000c0)=""/148, 0x94}, {&(0x7f0000000180)=""/137, 0x89}], 0x4, 0x15f, 0x0) 17.014079901s ago: executing program 5 (id=7243): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x2) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0xb16b}, 0x8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x8, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54}, 0x28) syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) sendmsg$nl_generic(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001100)={0x80, 0x40, 0x100, 0x70bd2d, 0x25dfdbfd, {0x1}, [@generic="14d5fc04a4cf37768f288cc076e023046007b9f1af4e457fce7aea02d49472644d33d23f3e5b92588493fd7c949d504ab30025d27c3f", @generic="da7260cb579fbe8acb5bc44c03e000ef89e9ee7fee64255e3c069265dd330713e576229a727027528ac16a88d075eff300ae07ed"]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r2, r2, 0x37, 0x4, 0x0, @void, @value=r5}, 0x20) syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') 16.65138594s ago: executing program 5 (id=7245): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip_mr_cache\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0800000004000000040020000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000100000000000100"/28], 0x50) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x0, 0x1) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x185) r6 = inotify_init() inotify_add_watch(r6, &(0x7f00000000c0)='.\x00', 0x5000009) fallocate(r5, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x27fffff, 0x110, r5, 0x3000) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/106, 0x6a}], 0x1, 0xe, 0x1) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) setuid(0xee00) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) ioperm(0x3, 0x3, 0x9) 15.18643818s ago: executing program 5 (id=7252): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x300) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) 15.018430874s ago: executing program 5 (id=7253): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180004c93dd2ec9f40f15b00010000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r7, 0x84, 0x8, &(0x7f0000000140), &(0x7f0000000240)=0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r8, 0x40045532, &(0x7f0000000040)=0x7) r9 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa0c65) ioctl$SNDRV_PCM_IOCTL_REWIND(r9, 0xc0844123, &(0x7f0000000180)=0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x7ff, 0x8, 0x8, 0x80, 0x8, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0xfff, 0xa, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c57, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x9, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x400, 0x6, 0x1a, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0xffff8001, 0x2, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0xffffffff, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0x388000, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2b, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x7, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x4, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xf, 0xd86, 0x2, 0x4, 0x8, 0x4, 0x9, 0x9, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x2, 0x200004, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0x71d, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x4, 0x800000, 0x1ef, 0x8, 0x8, 0x86, 0x3, 0x8, 0xff, 0xb, 0x2, 0x2, 0x2, 0x7, 0x20000008, 0x4, 0x16d01, 0x2, 0x8, 0x800003, 0x600, 0x80, 0xaf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x7, 0x3, 0x801, 0x127, 0x4, 0x1, 0x542, 0x3, 0x5, 0x1b, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x80000000], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x3, 0xfffd, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a8, 0x6, 0x10000016, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x3, 0x100, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x1000, 0x8, 0x4, 0x5, 0x40b1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r10 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000100), r3) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000007600)={&(0x7f00000075c0)={0x14, r10, 0x1, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 14.261762129s ago: executing program 3 (id=7257): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000300)={@dev={0xac, 0x14, 0x14, 0x22}, @loopback}, 0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/12], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r2 = getpid() (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e) (async) listen(0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000080)=0x4, 0x4) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r8 = fsmount(r7, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x20b800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r8}}, 0x58) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x1, 0x25dfdbff, {{0x2}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, 0x7, 0xa, 0x401, 0x0, 0x0, {0x4, 0x0, 0x1}, [@NFTA_RULE_COMPAT={0x4}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040001}, 0x80) 14.194872333s ago: executing program 3 (id=7259): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) 14.162586928s ago: executing program 3 (id=7260): timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) clock_getres(0x0, &(0x7f0000000000)) 14.140708075s ago: executing program 3 (id=7261): r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0x9, "00000000020000000000002100", "00004702", "0300", "97ad3700", ["fdffffff84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "0000efffffffffffbfff00"]}) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x5, 0x0, 0xffffffff, 0x1000006, 'U\x00', "1575a859", "0725eade", '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) (fail_nth: 3) 13.873973906s ago: executing program 3 (id=7262): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x20) mkdir(&(0x7f0000000000)='./bus\x00', 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) acct(0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x88041, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{0x3, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "d2a28dc15a41fd46"}}, 0x48}, 0x300}, 0x24040000) sendmsg$can_bcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0500e7ff3f000000000000c000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000000200000000000000000200003fd31340e92c4bb8"], 0x38}, 0x300}, 0x8040) 7.322722027s ago: executing program 2 (id=7284): r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000046f17720fd0b2001adf90102030109021b0001000010000904", @ANYBLOB="df9db6ce63811e2c02759b88c7c607d8c2e27778f9982e8643e9b592a0beed09b15f547d895ca7e25bef25769a5f388d97c6e9fbe1aa480cc1d9fe24744894d8c4eeed4e06cc1a0a438468a70b143f0b3dd12c72ee783f79c4a481c4e53353d39a6de0fc8169fdb9901eb446207605412f8026053bf4a08e3a2ace79f16a1c50e158c5422f94f0a3f424848b05ddbad85be97d5620abbb4b2c8189e9259c0657e3282084786cc8669c62a8c4f08e3e81817f727dbf777078bd4da0cb677ba02666414ed76782e367d7da1e", @ANYRES8=r0, @ANYRESOCT=r0], 0x0) sendmmsg$inet6(r0, &(0x7f0000007500)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x6, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@flowinfo={{0x14, 0x29, 0xb, 0x7}}], 0x18}}], 0x1, 0x68034) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @local}, @in6={0xa, 0x0, 0x0, @loopback, 0x7fc}], 0x2c) sendto$inet6(r3, &(0x7f0000000c00)="e4", 0x1, 0x24001854, &(0x7f000005ffe4)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, 0x1c) sendmsg$kcm(r2, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x4e22, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000200)=[{0x18, 0x84, 0x0, '\x00'}], 0x18}, 0xd1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r5) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x8000004) socket$inet_sctp(0x2, 0x1, 0x84) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock2(&(0x7f0000381000/0x4000)=nil, 0x4000, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getpid() sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0xfe8e, 0x12) 7.117772919s ago: executing program 4 (id=7285): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x5, @private2, 0x9}], 0x1c) setuid(0xee01) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x70bd2a, 0xffffffff, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0x3, {@ip4=@broadcast, 0x86dd}}}]}, 0x38}}, 0x40084c0) 6.450595975s ago: executing program 0 (id=7286): write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_clone(0x2b00b100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x101201, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) close_range(r1, r1, 0x0) close(r1) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047454, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000709c3120e80401669b81010203010902120001010000000904"], 0x0) r4 = accept4$x25(0xffffffffffffffff, &(0x7f0000000080)={0x9, @remote}, &(0x7f00000000c0)=0x12, 0x800) close(r4) read$char_usb(r3, &(0x7f0000000000)=""/73, 0x49) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r5, &(0x7f0000000100)=""/83, 0x53) getdents(r5, &(0x7f0000000000)=""/116, 0x74) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xc0389424, &(0x7f0000000300)={0x80000001, 0x10, '\x00', 0x0, &(0x7f0000000280)=[0x0, 0x0]}) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1, 0xffffffffffffffa5}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x1380, &(0x7f0000000100)=ANY=[]) 6.190068349s ago: executing program 4 (id=7287): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f000000fa00)) r2 = epoll_create1(0x0) epoll_create1(0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r2], 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRES32=r3], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) fstat(r6, &(0x7f0000000200)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x8, 0x8000, 0x9, 0x7, {{0x13, 0x4, 0x0, 0x4, 0x4c, 0x67, 0x0, 0xd, 0x2f, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x21}, {[@ssrr={0x89, 0x7, 0xa4, [@private=0xa010101]}, @ssrr={0x89, 0xf, 0x5d, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @remote]}, @ssrr={0x89, 0x17, 0x4d, [@dev={0xac, 0x14, 0x14, 0xa}, @local, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0xa}]}, @generic={0x82, 0x3, '\"'}, @end, @generic={0x94, 0x6, "f90a4748"}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x9, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x247, 0x0, 0x0, 0x0, 0x6, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000300)=[r4, r3, r3], &(0x7f0000000380)=[{0x4, 0x1, 0x1, 0xc}, {0x2, 0x3, 0x9, 0xc}, {0x1, 0x4, 0xc, 0xc}, {0x5, 0x1, 0x1, 0xb}], 0x10, 0x5}, 0x94) r8 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x101000) r9 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r11, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r12, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r11, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(r9, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r8, 0xc05c6104, &(0x7f0000000140)={"524ebce3", 0x3, 0x5, 0x81, 0x3, 0x16dc, "0d0767fcf850456f2290e729cf77f1", "2eb4fea5", "44b4dd9e", "ad2e21d3", ["d4150c57d062e240fbe214a9", "850f3d04d42a166156600360", "82621ecad17be13010ccc10d", "6631cbd8c92f5461e2ea90f9"]}) ioctl$CEC_TRANSMIT(r8, 0xc0386105, &(0x7f00000001c0)={0x0, 0x1, 0x6, 0x5, 0xe30, 0x5, ' \x00', 0x8, 0x91, 0x9, 0x0, 0x0, 0x0, 0xfc}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r5}, 0x18) 3.942946265s ago: executing program 2 (id=7288): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xca) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, &(0x7f0000000000)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000080)={r0, 0x2, 0x9, "7ef048931b8b24739fe27dfe67c4856455ccf37cafd1a8ff030a8ce7a76570f58dab25a44cc59d6ab3dc8e7d22c47c87f3beb36f8779299a5ad51aa590f0f8455d9d65f9df8a5b4577f77777960d09cc917fd3554e425c8717ee89954349e30de4f1ec0057f13c0947c09a51c1868a3ccf2724a0d58dc7db6e217a96c3ee15c06fa99a91a129a79b6d53c4fba1c25ace7b2eca744257f9e0b5f126253b50e5ed827883"}) clock_gettime(0x0, &(0x7f00000028c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000002880)=[{{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000000200)=""/195, 0xc3}, {0x0}, {&(0x7f0000000340)=""/46, 0x2e}, {&(0x7f0000000380)=""/212, 0xd4}, {&(0x7f0000000480)=""/134, 0x86}, {&(0x7f0000000540)=""/68, 0x44}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f00000025c0)=""/175, 0xaf}, {0x0}], 0xa, &(0x7f00000027c0)=""/167, 0xa7}}], 0x1, 0x120, &(0x7f0000002900)={r2, r3+60000000}) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000002940)=""/179, &(0x7f0000002a00)=0xb3) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000003bc0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000003b80), 0x111}}, 0x20) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000003e00)) syz_genetlink_get_family_id$devlink(&(0x7f0000003e80), r1) 3.88476207s ago: executing program 2 (id=7289): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a5c3693048b8aa179cf93", 0xa1}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x5, 0x20000004, 0x7f, 0x4233, 0x0, 0x81, 0x9c1, 0x8001, 0x1005, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0x2000, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x1, 0xa, 0x99, '\x00', 0xe}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.165139816s ago: executing program 2 (id=7290): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYRES32=r5, @ANYBLOB="3a8d04005a10000008000400440000003cfeca652dfefec1385909000000000000003aa5e5f0f3e1f7e2472f9a08e572ef2ccbd659b1625497a86055c72dc96e4face0c53925144eb419e65095d7ff820db18efd6343bf4dee7057c7cd194a9b62bc29cf448cdfe8081c8279d0d88efb3fedbf14bf3a5548c13ef27ba9245ea03a23b9a6670e90e0462a0117bb8a60c37c691aa6d6e7dff8c9ebe9d00c0bbe444be32859af1d01da6b981c98c00c5b35f1be8b76885e573392c70f2d024a5f0ca3416bef8cff18b6fc60f70b68bd51b3ac11cb265cc3db6df4d8d116fe95851c4bde2d6a8fbd85"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 3.161930522s ago: executing program 0 (id=7291): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r3, 0x0, 0xcf, &(0x7f0000000240)=0x1, 0x4) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000004000000200000008000300", @ANYRES32=r1, @ANYBLOB="0c009900030000005200000008009f00230000000800a00062090000080026006c09"], 0x40}, 0x1, 0x0, 0x0, 0x20008004}, 0x80) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000480)={0x6, @win={{0x535, 0x4, 0x4, 0x4}, 0x6, 0x6, &(0x7f00000000c0)={{0xe, 0xb759, 0x10, 0x81}, &(0x7f0000000080)={{0xe1, 0x382, 0x1, 0xff}, &(0x7f0000000040)={{0x3000, 0x7490, 0xfffffffb, 0x2}}}}, 0x7, &(0x7f0000000100)="e63d13ab3488b04cf0b835b62f8937a84106ac58bf0a1a9a0b4a39ededf3182b07f3a4bc6ed06f24da9554c770f469be1d623d4a704b7b6529715e2a262c0a6115ad66bab7bc1e5ef917f391f4e06468b924c1b6865519a8abd14d5da025a15cd0d80fc8517dcb83fd0ff3dcf65de894bf8f4a8fff861e41d1cace0fb10da9ea25c4e9700a7a473ed32c37774080387050ae3034ce350703292ef0d615044d2ec0900f996616c02e1c157aa7aa37017f2db9b537e7feea87aad18978fe8744f1adfff474df87cb02fd403d58c6bcfc3f5a483aa8b5ce875bc499805902d5df2fcc4c915925517df68859e69f9415b26b55c0fb309a", 0x6}}) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x280, @mcast1, 0x8}, 0x1c) 2.965725831s ago: executing program 0 (id=7292): keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.926408187s ago: executing program 0 (id=7293): r0 = syz_io_uring_setup(0xec5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000080), &(0x7f0000000340)) io_uring_enter(r0, 0x95d, 0xfa39, 0xe1, 0x0, 0x0) io_uring_enter(r0, 0xedd, 0x8acb, 0x41, 0x0, 0x0) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) 2.809836545s ago: executing program 0 (id=7294): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="440000001000ffff2f3d7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="13200200313402001c0012800b0001006970766c616e00000c000280060001000200000008000500", @ANYRES32=r5, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x8000002) 2.157203135s ago: executing program 3 (id=7265): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="20310700000007300600eae7ae"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.886337972s ago: executing program 0 (id=7295): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x31) mknodat$loop(r1, &(0x7f00000000c0)='./file0\x00', 0xba43, 0x1) io_setup(0x1, &(0x7f0000000100)=0x0) r3 = eventfd(0xfff) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000c2bd0b20f8061b3039bb0102030109021b0001000000000904"], 0x0) r4 = signalfd(r1, &(0x7f0000000300)={[0x5]}, 0x8) io_submit(r2, 0x2, &(0x7f0000000380)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0xe999, r1, &(0x7f00000003c0)="16f2d19e855d90b94e3e519fe5e8bf75f52728623ebf545bdf653b2b53dc3ecac5fb21ba1cb6326ecd390c980f6347c98e11f6322ef86451ed77b9fe7a6921a5d93d7fd221eecc0f2a1cac835285065c5b22666c00f6ce6a58a024cbd2", 0x5d, 0xa56e, 0x0, 0x2, r3}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x9, r1, &(0x7f0000000200)="7e86ff020b6081a0cf76d5c8dda0990450d85ef7bf26e554346215296bd50c4862e9e529023c3e85125c3a77ab938571da7ae1107ff6022c659ea49d98a9c243c6155b8c95b5fdc4efb517fbd5c25323bb718deb0e49c91d556149aa9266e28f7be8f6225195ff3292ed3183a9d52e3a82282eed1b858c9db97a6b33881ea7b5b860e971aa74f7b3df24f5847c39713cb2e9dc9dd4022e628c32e3f413132c6a9a7ab178ec71c7b108fdad195bd5a73362917fccb866e2c2cb7fc14f51f8cf58dbd8612c8c1e7a591449545b1a0ab0ff76b8b89686099b3e1700e3619851271d1a352518c9ab3e10ac16f0bba0824f58", 0xf0, 0xf, 0x0, 0x0, r4}]) mprotect(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x1000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 1.675020414s ago: executing program 4 (id=7296): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000000a0a01020000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x2000c801}, 0xe0) 1.647939677s ago: executing program 2 (id=7297): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setaffinity(0x0, 0xfffffd10, &(0x7f0000000200)=0x2000000000006) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000dc0)={0x0, &(0x7f0000000200)}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b8, 0x98, 0x0, 0x130, 0x288, 0x288, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@ip={@multicast1, @local, 0xffffffff, 0xff, 'team_slave_0\x00', 'pim6reg0\x00', {0xff}, {}, 0x32, 0x1, 0x8}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xffffff00, 0x0, 'ip6gre0\x00', 'veth1_virt_wifi\x00', {}, {}, 0xff, 0x3, 0x69}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0xa}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0xf2}}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x8}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x3, 0x3}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x13}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @private0}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x310) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x4e20, 0x0, @mcast1}}, {{0xa, 0x0, 0x94, @empty}}}, 0x108) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_iso={0x0, {0x1, 0x1}, 0x49e, 0xc0, 0x0, 0x0, 0x800003, 0x60000, 0x0, 0x800, 0x7, 0x0}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8080) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) fsopen(&(0x7f0000000000)='sockfs\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$swradio(&(0x7f0000000a00), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r4, 0xc0405665, &(0x7f0000000a40)={0x0, 0x5, 0x3}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000240)="f5135e2c98"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b000000006c6a3d54c1f5e31867dd7017e769ee8c4df24ed1da041cd164f4368ca188aab5f3131575487a1b21891b17d3ce32c7565d76b43c519890d5fb30983540ad7f9b4890826059ed23d11977054f61bb21b37d154b59e77b8d726a20af9d2ca8307d7d7108f69d8590a8a7963d2cc0881699fd9bfe5fb3dc758d1ddb9d51b9c684054e241156fe097b051e646c3e9a5abf54"], 0x48) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x4078850, r5, 0x51f82000) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 1.591002416s ago: executing program 4 (id=7298): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a5c3693048b8aa179cf93", 0xa1}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x5, 0x20000004, 0x7f, 0x4233, 0x0, 0x81, 0x9c1, 0x8001, 0x1005, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0x2000, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x1, 0xa, 0x99, '\x00', 0xe}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.302437769s ago: executing program 4 (id=7299): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x66, &(0x7f0000000980)=ANY=[@ANYBLOB="aaaa09fc8ad3000000000000860000000000000000000000bbfe8000000000000000000000000000adf167e90000000000ff0100000000000000000000000000014e220000001890780600000000000000000000000000000051f0bf7ed86732400edf67e1c489821884582f62e0784dff5a4da5e881c56659d978baefd526509dd9a6d0f675a6f5186000"/151], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r3, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r2, r4, 0xfffffffffffffc01, 0x0) tee(r2, r4, 0x60000000000, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000040)={0x9, {0xf8000000, 0x4, 0x2008, 0xffffbfff}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200970}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) 693.63184ms ago: executing program 2 (id=7300): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x0) read$FUSE(r3, &(0x7f0000002440)={0x2020}, 0x2020) 10.028ms ago: executing program 4 (id=7301): pipe2(&(0x7f0000001040)={0xffffffffffffffff}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r2, 0xfffffffffffffc01, 0x0) 0s ago: executing program 33 (id=7253): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180004c93dd2ec9f40f15b00010000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r7, 0x84, 0x8, &(0x7f0000000140), &(0x7f0000000240)=0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r8, 0x40045532, &(0x7f0000000040)=0x7) r9 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa0c65) ioctl$SNDRV_PCM_IOCTL_REWIND(r9, 0xc0844123, &(0x7f0000000180)=0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x7ff, 0x8, 0x8, 0x80, 0x8, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0xfff, 0xa, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c57, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x9, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x400, 0x6, 0x1a, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0xffff8001, 0x2, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0xffffffff, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0x388000, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2b, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x7, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x4, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xf, 0xd86, 0x2, 0x4, 0x8, 0x4, 0x9, 0x9, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x2, 0x200004, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0x71d, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x4, 0x800000, 0x1ef, 0x8, 0x8, 0x86, 0x3, 0x8, 0xff, 0xb, 0x2, 0x2, 0x2, 0x7, 0x20000008, 0x4, 0x16d01, 0x2, 0x8, 0x800003, 0x600, 0x80, 0xaf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x7, 0x3, 0x801, 0x127, 0x4, 0x1, 0x542, 0x3, 0x5, 0x1b, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x80000000], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x3, 0xfffd, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a8, 0x6, 0x10000016, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x3, 0x100, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x1000, 0x8, 0x4, 0x5, 0x40b1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r10 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000100), r3) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000007600)={&(0x7f00000075c0)={0x14, r10, 0x1, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) kernel console output (not intermixed with test programs): irectory [ 2007.786041][T30807] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6894'. [ 2007.908534][T30782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2007.929081][T30782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2007.949739][ T30] audit: type=1400 audit(1767976520.349:2066): avc: denied { map } for pid=30793 comm="syz.3.6892" path="socket:[125818]" dev="sockfs" ino=125818 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2007.981430][ T30] audit: type=1400 audit(1767976520.349:2067): avc: denied { read accept } for pid=30793 comm="syz.3.6892" path="socket:[125818]" dev="sockfs" ino=125818 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2008.006265][ T30] audit: type=1400 audit(1767976520.379:2068): avc: denied { setopt } for pid=30793 comm="syz.3.6892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2008.031648][ T30] audit: type=1400 audit(1767976520.429:2069): avc: denied { execute } for pid=30781 comm="syz.0.6888" path=2F6D656D66643A01FDAE2E2BA68CB63F32193994532C7C783F55655BBDE1210333BC2723FF179B25F35B64202097F5479741C2D8F05571E62BA56C940BB607175CFB0421E4C4B1A21CFF433B94510DB67D9CEC430BCFEBE49A52E52C8203202864656C6574656429 dev="hugetlbfs" ino=124360 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 2008.189129][ T5934] usb 1-1: USB disconnect, device number 123 [ 2008.542181][T30821] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6897'. [ 2008.584764][T27935] (null): failure reading functionality [ 2009.080261][T27935] i2c i2c-2: failure reading functionality [ 2009.088863][T27935] i2c i2c-2: connected i2c-tiny-usb device [ 2009.098854][T27935] usb 5-1: USB disconnect, device number 47 [ 2010.211834][ T5934] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 2010.354923][ T30] audit: type=1400 audit(1767976522.749:2070): avc: denied { read write } for pid=30824 comm="syz.0.6899" name="file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 2010.391389][ T5934] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2010.417016][ T30] audit: type=1400 audit(1767976522.789:2071): avc: denied { open } for pid=30824 comm="syz.0.6899" path="/263/file0/file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 2010.771951][ T5934] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2010.781149][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2010.791856][ T5934] usb 4-1: config 0 descriptor?? [ 2010.817622][ T5934] pwc: Askey VC010 type 2 USB webcam detected. [ 2012.177137][ T5934] pwc: send_video_command error -71 [ 2012.182375][ T5934] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 2012.189885][ T5934] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 2012.200168][ T5934] usb 4-1: USB disconnect, device number 64 [ 2013.619461][T15428] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 2014.319159][T15428] usb 4-1: config 2 has an invalid interface number: 220 but max is 0 [ 2014.347421][T15428] usb 4-1: config 2 has no interface number 0 [ 2014.375055][T15428] usb 4-1: config 2 interface 220 has no altsetting 0 [ 2014.411358][T15428] usb 4-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=94.f4 [ 2014.463429][T15428] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 2014.513955][T15428] usb 4-1: Product: syz [ 2014.573742][T15428] usb 4-1: Manufacturer: syz [ 2014.598804][T15428] usb 4-1: SerialNumber: syz [ 2014.679433][T30864] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.6909'. [ 2015.164488][T30844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2015.190628][T30844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2015.263601][T30844] random: crng reseeded on system resumption [ 2015.275283][T15428] usb 4-1: USB disconnect, device number 65 [ 2016.679546][T15428] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 2016.860793][T15428] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2016.882762][T15428] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2016.902565][T15428] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2016.913224][T15428] usb 3-1: config 0 descriptor?? [ 2016.931388][T15428] pwc: Askey VC010 type 2 USB webcam detected. [ 2017.099022][ T30] audit: type=1400 audit(1767976529.489:2072): avc: denied { create } for pid=30887 comm="syz.3.6918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2017.119023][T27935] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 2017.161642][ T30] audit: type=1400 audit(1767976529.509:2073): avc: denied { bind } for pid=30887 comm="syz.3.6918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2017.189396][T30890] binder: BINDER_SET_CONTEXT_MGR already set [ 2017.195448][T30890] binder: 30887:30890 ioctl 4018620d 2000000002c0 returned -16 [ 2017.244132][ T30] audit: type=1400 audit(1767976529.519:2074): avc: denied { listen } for pid=30887 comm="syz.3.6918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2017.597451][ T5934] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 2018.174147][ T5934] usb 4-1: config 0 has an invalid interface number: 3 but max is 2 [ 2018.189758][ T5934] usb 4-1: config 0 has an invalid interface number: 176 but max is 2 [ 2018.198149][ T5934] usb 4-1: config 0 has no interface number 1 [ 2018.204514][ T5934] usb 4-1: config 0 has no interface number 2 [ 2018.211267][ T5934] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 2018.220559][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2018.251295][ T5934] usb 4-1: config 0 descriptor?? [ 2018.351320][T15428] pwc: send_video_command error -71 [ 2018.356570][T15428] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 2018.479778][ T5934] qcserial 4-1:0.3: Qualcomm USB modem converter detected [ 2019.171079][T27935] usb 6-1: Using ep0 maxpacket: 8 [ 2019.600251][T15428] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 2019.611632][T15428] usb 3-1: USB disconnect, device number 75 [ 2019.629557][T30899] FAULT_INJECTION: forcing a failure. [ 2019.629557][T30899] name failslab, interval 1, probability 0, space 0, times 0 [ 2019.642282][T30899] CPU: 0 UID: 0 PID: 30899 Comm: syz.4.6919 Tainted: G L syzkaller #0 PREEMPT(full) [ 2019.642309][T30899] Tainted: [L]=SOFTLOCKUP [ 2019.642316][T30899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2019.642326][T30899] Call Trace: [ 2019.642333][T30899] [ 2019.642340][T30899] dump_stack_lvl+0x16c/0x1f0 [ 2019.642368][T30899] should_fail_ex+0x512/0x640 [ 2019.642399][T30899] ? __kmalloc_cache_noprof+0x5f/0x800 [ 2019.642429][T30899] should_failslab+0xc2/0x120 [ 2019.642454][T30899] __kmalloc_cache_noprof+0x80/0x800 [ 2019.642482][T30899] ? kvm_arch_vcpu_ioctl+0x99f/0x54b0 [ 2019.642511][T30899] ? kvm_arch_vcpu_ioctl+0x99f/0x54b0 [ 2019.642532][T30899] kvm_arch_vcpu_ioctl+0x99f/0x54b0 [ 2019.642557][T30899] ? stack_trace_save+0x8e/0xc0 [ 2019.642578][T30899] ? __pfx_stack_trace_save+0x10/0x10 [ 2019.642598][T30899] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 2019.642626][T30899] ? __lock_acquire+0x436/0x2890 [ 2019.642650][T30899] ? kasan_save_stack+0x42/0x60 [ 2019.642669][T30899] ? kasan_save_stack+0x33/0x60 [ 2019.642688][T30899] ? kasan_save_track+0x14/0x30 [ 2019.642706][T30899] ? kasan_save_free_info+0x3b/0x60 [ 2019.642725][T30899] ? __lock_acquire+0x436/0x2890 [ 2019.642756][T30899] ? lock_acquire+0x179/0x330 [ 2019.642780][T30899] ? __pfx___might_resched+0x10/0x10 [ 2019.642798][T30899] ? rcu_is_watching+0x12/0xc0 [ 2019.642816][T30899] ? trace_contention_end+0xdd/0x110 [ 2019.642839][T30899] ? __mutex_lock+0x27b/0x1ca0 [ 2019.642865][T30899] ? kvm_vcpu_ioctl+0x316/0x16d0 [ 2019.642896][T30899] ? __pfx___mutex_lock+0x10/0x10 [ 2019.642931][T30899] ? tomoyo_path_number_perm+0x18d/0x580 [ 2019.642957][T30899] ? kvm_vcpu_ioctl+0x1293/0x16d0 [ 2019.642982][T30899] kvm_vcpu_ioctl+0x1293/0x16d0 [ 2019.643013][T30899] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 2019.643041][T30899] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2019.643063][T30899] ? do_vfs_ioctl+0x128/0x14f0 [ 2019.643084][T30899] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2019.643106][T30899] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 2019.643140][T30899] ? hook_file_ioctl_common+0x144/0x410 [ 2019.643175][T30899] ? selinux_file_ioctl+0x180/0x270 [ 2019.643197][T30899] ? selinux_file_ioctl+0xb4/0x270 [ 2019.643221][T30899] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 2019.643249][T30899] __x64_sys_ioctl+0x18e/0x210 [ 2019.643272][T30899] do_syscall_64+0xcd/0xf80 [ 2019.643296][T30899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2019.643313][T30899] RIP: 0033:0x7fb2a798f749 [ 2019.643328][T30899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2019.643344][T30899] RSP: 002b:00007fb2a8814038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2019.643362][T30899] RAX: ffffffffffffffda RBX: 00007fb2a7be5fa0 RCX: 00007fb2a798f749 [ 2019.643373][T30899] RDX: 0000200000000880 RSI: 000000008188aea6 RDI: 0000000000000005 [ 2019.643384][T30899] RBP: 00007fb2a8814090 R08: 0000000000000000 R09: 0000000000000000 [ 2019.643395][T30899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2019.643406][T30899] R13: 00007fb2a7be6038 R14: 00007fb2a7be5fa0 R15: 00007ffe629d60b8 [ 2019.643430][T30899] [ 2019.645565][T27935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2019.975072][ T30] audit: type=1400 audit(1767976532.369:2075): avc: denied { execute } for pid=30901 comm="syz.2.6921" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2020.002339][T27935] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2020.014950][T27935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2020.025657][ T30] audit: type=1400 audit(1767976532.369:2076): avc: denied { ioctl } for pid=30901 comm="syz.2.6921" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2020.060199][T27935] usb 6-1: config 0 descriptor?? [ 2020.065662][T27935] usb 6-1: can't set config #0, error -71 [ 2020.080825][T27935] usb 6-1: USB disconnect, device number 20 [ 2020.167869][T30905] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.6922'. [ 2020.854910][T27935] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 2021.424017][T30920] netem: change failed [ 2021.509762][T27510] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 2021.670606][T27935] usb 6-1: Using ep0 maxpacket: 8 [ 2021.729584][T27510] usb 5-1: Using ep0 maxpacket: 8 [ 2021.830948][T27935] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2021.844852][T27935] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2021.855233][T27935] usb 6-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2021.880554][ T5934] usb 4-1: USB disconnect, device number 66 [ 2021.890354][T27510] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2021.907204][ T5934] qcserial 4-1:0.3: device disconnected [ 2021.916559][T27935] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2021.916571][T27510] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2021.916596][T27510] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2021.950733][T27935] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2021.978813][T27510] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2021.989383][T27935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2021.991921][T27510] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2022.008939][T27510] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2022.026499][T27935] usbtmc 6-1:16.0: bulk endpoints not found [ 2022.036247][ T30] audit: type=1400 audit(1767977046.431:2077): avc: denied { read write } for pid=30927 comm="syz.0.6931" name="sg0" dev="devtmpfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2022.071072][ T30] audit: type=1400 audit(1767977046.431:2078): avc: denied { open } for pid=30927 comm="syz.0.6931" path="/dev/sg0" dev="devtmpfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2022.776481][T27510] usbtmc 5-1:16.0: bulk endpoints not found [ 2023.279623][ T30] audit: type=1326 audit(1767977047.671:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30932 comm="syz.2.6932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa53d18f749 code=0x7ffc0000 [ 2023.788257][ T30] audit: type=1326 audit(1767977047.671:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30932 comm="syz.2.6932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa53d18f749 code=0x7ffc0000 [ 2023.819463][ T30] audit: type=1326 audit(1767977047.671:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30932 comm="syz.2.6932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa53d18f749 code=0x7ffc0000 [ 2024.018659][ T30] audit: type=1326 audit(1767977047.671:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30932 comm="syz.2.6932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa53d18f749 code=0x7ffc0000 [ 2024.532506][ T30] audit: type=1326 audit(1767977047.671:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30932 comm="syz.2.6932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa53d18f749 code=0x7ffc0000 [ 2024.557999][ T30] audit: type=1326 audit(1767977047.671:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30932 comm="syz.2.6932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7fa53d18f749 code=0x7ffc0000 [ 2024.591066][ T30] audit: type=1326 audit(1767977047.671:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30932 comm="syz.2.6932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa53d18f749 code=0x7ffc0000 [ 2024.642851][ T30] audit: type=1326 audit(1767977047.671:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30932 comm="syz.2.6932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa53d18f749 code=0x7ffc0000 [ 2024.700478][ T30] audit: type=1326 audit(1767977047.671:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30932 comm="syz.2.6932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fa53d18f749 code=0x7ffc0000 [ 2024.730341][ T30] audit: type=1326 audit(1767977047.671:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30932 comm="syz.2.6932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa53d18f749 code=0x7ffc0000 [ 2024.860062][T27935] usb 6-1: USB disconnect, device number 21 [ 2025.128456][T27638] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 2025.570475][T27510] usb 5-1: USB disconnect, device number 48 [ 2025.599394][T27638] usb 4-1: Using ep0 maxpacket: 8 [ 2025.606879][T27638] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2025.619641][T27638] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2025.629026][T27638] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2025.640938][T27638] usb 4-1: config 0 descriptor?? [ 2025.683261][T30957] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 2025.954519][T27638] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2026.099450][T27510] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 2026.122971][T30965] netlink: 'syz.5.6940': attribute type 1 has an invalid length. [ 2026.251279][T30971] xt_hashlimit: size too large, truncated to 1048576 [ 2026.259420][T27510] usb 5-1: device descriptor read/64, error -71 [ 2026.499694][T27510] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 2026.594991][T30945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2027.699564][T27510] usb 5-1: device descriptor read/64, error -71 [ 2027.816036][T27510] usb usb5-port1: attempt power cycle [ 2028.034294][T30945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2028.659420][T27510] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 2028.709991][T27510] usb 5-1: device descriptor read/8, error -71 [ 2028.768365][T27638] usb 4-1: USB disconnect, device number 67 [ 2028.877892][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 2028.877906][ T30] audit: type=1326 audit(1767977053.271:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30992 comm="syz.2.6947" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa53d18f749 code=0x0 [ 2028.955030][T30991] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6946'. [ 2028.991344][ T30] audit: type=1400 audit(1767977053.391:2115): avc: denied { read } for pid=30996 comm="syz.4.6948" path="socket:[126468]" dev="sockfs" ino=126468 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2029.266122][ T30] audit: type=1326 audit(1767977053.661:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31002 comm="syz.4.6949" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb2a798f749 code=0x0 [ 2029.798381][T31021] netlink: 'syz.3.6952': attribute type 1 has an invalid length. [ 2029.882527][ T5988] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 2030.019484][ T5988] usb 6-1: device descriptor read/64, error -71 [ 2030.289815][ T5988] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 2030.459520][ T5988] usb 6-1: device descriptor read/64, error -71 [ 2030.619805][ T5988] usb usb6-port1: attempt power cycle [ 2030.719433][ T30] audit: type=1400 audit(1767977055.031:2117): avc: denied { setopt } for pid=31036 comm="syz.4.6958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2030.796089][T31040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6957'. [ 2030.805175][T31040] netlink: 'syz.0.6957': attribute type 30 has an invalid length. [ 2030.813020][T31040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6957'. [ 2032.728848][ T5988] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 2033.145155][T31059] FAULT_INJECTION: forcing a failure. [ 2033.145155][T31059] name failslab, interval 1, probability 0, space 0, times 0 [ 2033.291005][ T5988] usb 6-1: device descriptor read/8, error -71 [ 2033.364084][T31059] CPU: 1 UID: 0 PID: 31059 Comm: syz.0.6961 Tainted: G L syzkaller #0 PREEMPT(full) [ 2033.364112][T31059] Tainted: [L]=SOFTLOCKUP [ 2033.364119][T31059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2033.364130][T31059] Call Trace: [ 2033.364136][T31059] [ 2033.364144][T31059] dump_stack_lvl+0x16c/0x1f0 [ 2033.364173][T31059] should_fail_ex+0x512/0x640 [ 2033.364202][T31059] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 2033.364224][T31059] should_failslab+0xc2/0x120 [ 2033.364250][T31059] kmem_cache_alloc_node_noprof+0x86/0x800 [ 2033.364268][T31059] ? __alloc_skb+0x156/0x410 [ 2033.364299][T31059] ? __alloc_skb+0x156/0x410 [ 2033.364325][T31059] __alloc_skb+0x156/0x410 [ 2033.364350][T31059] ? __alloc_skb+0x35d/0x410 [ 2033.364376][T31059] ? __pfx___alloc_skb+0x10/0x10 [ 2033.364403][T31059] ? netlink_autobind.isra.0+0x158/0x370 [ 2033.364432][T31059] netlink_alloc_large_skb+0x69/0x140 [ 2033.364456][T31059] netlink_sendmsg+0x698/0xdd0 [ 2033.364489][T31059] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2033.364523][T31059] ____sys_sendmsg+0xa5d/0xc30 [ 2033.364548][T31059] ? copy_msghdr_from_user+0x10a/0x160 [ 2033.364567][T31059] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2033.364603][T31059] ___sys_sendmsg+0x134/0x1d0 [ 2033.364623][T31059] ? __pfx____sys_sendmsg+0x10/0x10 [ 2033.364671][T31059] __sys_sendmsg+0x16d/0x220 [ 2033.364690][T31059] ? __pfx___sys_sendmsg+0x10/0x10 [ 2033.364725][T31059] do_syscall_64+0xcd/0xf80 [ 2033.364751][T31059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2033.364769][T31059] RIP: 0033:0x7f578038f749 [ 2033.364783][T31059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2033.364801][T31059] RSP: 002b:00007f57812f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2033.364819][T31059] RAX: ffffffffffffffda RBX: 00007f57805e5fa0 RCX: 00007f578038f749 [ 2033.364831][T31059] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 2033.364842][T31059] RBP: 00007f57812f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2033.364853][T31059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2033.364864][T31059] R13: 00007f57805e6038 R14: 00007f57805e5fa0 R15: 00007ffcdf25fef8 [ 2033.364889][T31059] [ 2034.191575][T31070] FAULT_INJECTION: forcing a failure. [ 2034.191575][T31070] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2036.383633][T31070] CPU: 0 UID: 0 PID: 31070 Comm: syz.3.6964 Tainted: G L syzkaller #0 PREEMPT(full) [ 2036.383654][T31070] Tainted: [L]=SOFTLOCKUP [ 2036.383658][T31070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2036.383665][T31070] Call Trace: [ 2036.383669][T31070] [ 2036.383674][T31070] dump_stack_lvl+0x16c/0x1f0 [ 2036.383693][T31070] should_fail_ex+0x512/0x640 [ 2036.383713][T31070] _copy_from_user+0x2e/0xd0 [ 2036.383731][T31070] video_usercopy+0xee2/0x16c0 [ 2036.383746][T31070] ? __pfx_subdev_do_ioctl_lock+0x10/0x10 [ 2036.383758][T31070] ? selinux_kernel_read_file+0x81/0x120 [ 2036.383774][T31070] ? __pfx_video_usercopy+0x10/0x10 [ 2036.383795][T31070] v4l2_ioctl+0x1bd/0x250 [ 2036.383807][T31070] ? __pfx_v4l2_ioctl+0x10/0x10 [ 2036.383820][T31070] __x64_sys_ioctl+0x18e/0x210 [ 2036.383834][T31070] do_syscall_64+0xcd/0xf80 [ 2036.383850][T31070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2036.383862][T31070] RIP: 0033:0x7f61e498f749 [ 2036.383872][T31070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2036.383883][T31070] RSP: 002b:00007f61e57b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2036.383894][T31070] RAX: ffffffffffffffda RBX: 00007f61e4be5fa0 RCX: 00007f61e498f749 [ 2036.383902][T31070] RDX: 00002000000003c0 RSI: 00000000c0205648 RDI: 0000000000000003 [ 2036.383909][T31070] RBP: 00007f61e57b8090 R08: 0000000000000000 R09: 0000000000000000 [ 2036.383915][T31070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2036.383922][T31070] R13: 00007f61e4be6038 R14: 00007f61e4be5fa0 R15: 00007fff02a548a8 [ 2036.383936][T31070] [ 2036.967307][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2036.973880][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.709444][T27935] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 2037.900836][T27935] usb 6-1: device descriptor read/64, error -71 [ 2038.209443][T27935] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 2038.218814][T31095] ubi31: attaching mtd0 [ 2038.224290][T31095] ubi31: scanning is finished [ 2038.228949][T31095] ubi31: empty MTD device detected [ 2038.319550][T31095] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 2038.327088][T31095] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 2038.334382][T31095] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 2038.341396][T31095] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 2038.348822][T31095] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 2038.355682][T31095] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 2038.363742][T31095] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 610157820 [ 2038.373717][T31095] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 2038.385253][T27935] usb 6-1: device descriptor read/64, error -71 [ 2038.391827][T31102] ubi31: background thread "ubi_bgt31d" started, PID 31102 [ 2038.510199][T27935] usb usb6-port1: attempt power cycle [ 2038.538704][ T30] audit: type=1400 audit(1767977062.931:2118): avc: denied { getopt } for pid=31103 comm="syz.0.6974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 2038.602536][T31107] netlink: 'syz.2.6975': attribute type 10 has an invalid length. [ 2038.627369][T31107] syz_tun: entered promiscuous mode [ 2038.651996][T31107] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 2038.700720][ T30] audit: type=1400 audit(1767977063.101:2119): avc: denied { write } for pid=31110 comm="syz.0.6976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2038.700766][T31112] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6976'. [ 2038.949761][T27935] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 2039.512207][ T30] audit: type=1400 audit(1767977063.911:2120): avc: denied { getopt } for pid=31110 comm="syz.0.6976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2039.560612][T27935] usb 6-1: device descriptor read/8, error -71 [ 2039.682461][ T30] audit: type=1400 audit(1767977064.081:2121): avc: denied { watch } for pid=31125 comm="syz.2.6980" path="/264/file0" dev="tmpfs" ino=1427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2039.736091][ T30] audit: type=1400 audit(1767977064.081:2122): avc: denied { watch_sb watch_reads } for pid=31125 comm="syz.2.6980" path="/264/file0" dev="tmpfs" ino=1427 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2039.799417][T27935] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 2039.831447][T27935] usb 6-1: device descriptor read/8, error -71 [ 2040.012499][T27935] usb usb6-port1: unable to enumerate USB device [ 2040.102759][T31132] 8021q: adding VLAN 0 to HW filter on device ipvlan5 [ 2040.226899][T31138] FAULT_INJECTION: forcing a failure. [ 2040.226899][T31138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2040.240151][T31138] CPU: 0 UID: 0 PID: 31138 Comm: syz.4.6984 Tainted: G L syzkaller #0 PREEMPT(full) [ 2040.240179][T31138] Tainted: [L]=SOFTLOCKUP [ 2040.240186][T31138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2040.240197][T31138] Call Trace: [ 2040.240204][T31138] [ 2040.240211][T31138] dump_stack_lvl+0x16c/0x1f0 [ 2040.240239][T31138] should_fail_ex+0x512/0x640 [ 2040.240271][T31138] _copy_from_iter+0x2a4/0x16c0 [ 2040.240308][T31138] ? __alloc_skb+0x220/0x410 [ 2040.240335][T31138] ? __alloc_skb+0x35d/0x410 [ 2040.240361][T31138] ? __pfx__copy_from_iter+0x10/0x10 [ 2040.240389][T31138] ? netlink_autobind.isra.0+0x158/0x370 [ 2040.240421][T31138] netlink_sendmsg+0x820/0xdd0 [ 2040.240448][T31138] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2040.240481][T31138] ____sys_sendmsg+0xa5d/0xc30 [ 2040.240506][T31138] ? copy_msghdr_from_user+0x10a/0x160 [ 2040.240525][T31138] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2040.240560][T31138] ___sys_sendmsg+0x134/0x1d0 [ 2040.240581][T31138] ? __pfx____sys_sendmsg+0x10/0x10 [ 2040.240630][T31138] __sys_sendmsg+0x16d/0x220 [ 2040.240650][T31138] ? __pfx___sys_sendmsg+0x10/0x10 [ 2040.240686][T31138] do_syscall_64+0xcd/0xf80 [ 2040.240711][T31138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2040.240729][T31138] RIP: 0033:0x7fb2a798f749 [ 2040.240744][T31138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2040.240761][T31138] RSP: 002b:00007fb2a8814038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2040.240779][T31138] RAX: ffffffffffffffda RBX: 00007fb2a7be5fa0 RCX: 00007fb2a798f749 [ 2040.240791][T31138] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2040.240802][T31138] RBP: 00007fb2a8814090 R08: 0000000000000000 R09: 0000000000000000 [ 2040.240813][T31138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2040.240824][T31138] R13: 00007fb2a7be6038 R14: 00007fb2a7be5fa0 R15: 00007ffe629d60b8 [ 2040.240849][T31138] [ 2040.670529][T27935] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 2041.269475][T27935] usb 3-1: Using ep0 maxpacket: 32 [ 2041.280383][T27935] usb 3-1: config 0 has an invalid interface number: 223 but max is 0 [ 2041.288560][T27935] usb 3-1: config 0 has an invalid descriptor of length 44, skipping remainder of the config [ 2041.300478][T31143] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6986'. [ 2041.321571][T31146] GUP no longer grows the stack in syz.4.6987 (31146): 200000004000-20000000a000 (200000002000) [ 2041.336558][T27935] usb 3-1: config 0 has no interface number 0 [ 2041.336609][T31146] CPU: 1 UID: 0 PID: 31146 Comm: syz.4.6987 Tainted: G L syzkaller #0 PREEMPT(full) [ 2041.336639][T31146] Tainted: [L]=SOFTLOCKUP [ 2041.336646][T31146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2041.336656][T31146] Call Trace: [ 2041.336663][T31146] [ 2041.336671][T31146] dump_stack_lvl+0x16c/0x1f0 [ 2041.336696][T31146] gup_vma_lookup+0x1d2/0x220 [ 2041.336719][T31146] __get_user_pages+0x241/0x3590 [ 2041.336749][T31146] ? find_held_lock+0x2b/0x80 [ 2041.336777][T31146] ? __pfx___get_user_pages+0x10/0x10 [ 2041.336806][T31146] get_user_pages_remote+0x243/0xab0 [ 2041.336829][T31146] ? mas_new_root+0x660/0x6e0 [ 2041.336854][T31146] ? __pfx_get_user_pages_remote+0x10/0x10 [ 2041.336879][T31146] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2041.336903][T31146] __access_remote_vm+0x24d/0x850 [ 2041.336926][T31146] ? do_raw_spin_lock+0x12c/0x2b0 [ 2041.336948][T31146] ? __pfx___access_remote_vm+0x10/0x10 [ 2041.336974][T31146] proc_pid_cmdline_read+0x4de/0x8e0 [ 2041.336994][T31146] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 2041.337020][T31146] ? rw_verify_area+0xcf/0x6c0 [ 2041.337041][T31146] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 2041.337057][T31146] vfs_readv+0x5c1/0x8b0 [ 2041.337082][T31146] ? __pfx_vfs_readv+0x10/0x10 [ 2041.337121][T31146] ? __fget_files+0x20e/0x3c0 [ 2041.337152][T31146] ? do_preadv+0x1a6/0x270 [ 2041.337171][T31146] do_preadv+0x1a6/0x270 [ 2041.337193][T31146] ? __pfx_do_preadv+0x10/0x10 [ 2041.337221][T31146] do_syscall_64+0xcd/0xf80 [ 2041.337245][T31146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2041.337261][T31146] RIP: 0033:0x7fb2a798f749 [ 2041.337275][T31146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2041.337290][T31146] RSP: 002b:00007fb2a8814038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 2041.337308][T31146] RAX: ffffffffffffffda RBX: 00007fb2a7be5fa0 RCX: 00007fb2a798f749 [ 2041.337320][T31146] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000006 [ 2041.337332][T31146] RBP: 00007fb2a7a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 2041.337343][T31146] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 2041.337354][T31146] R13: 00007fb2a7be6038 R14: 00007fb2a7be5fa0 R15: 00007ffe629d60b8 [ 2041.337380][T31146] [ 2041.764327][T31146] comedi comedi0: Minor 4 could not be opened [ 2041.814299][T27935] usb 3-1: too many endpoints for config 0 interface 223 altsetting 157: 182, using maximum allowed: 30 [ 2041.844589][T27935] usb 3-1: config 0 interface 223 altsetting 157 has 0 endpoint descriptors, different from the interface descriptor's value: 182 [ 2041.892185][T27935] usb 3-1: config 0 interface 223 has no altsetting 0 [ 2041.911246][T27935] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 2041.929521][T27935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2041.944154][T27935] usb 3-1: Product: syz [ 2041.953090][T27935] usb 3-1: Manufacturer: syz [ 2041.961555][T27935] usb 3-1: SerialNumber: syz [ 2041.984121][T27935] usb 3-1: config 0 descriptor?? [ 2042.239451][ T5988] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 2042.279511][T27510] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 2042.338804][T31157] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6983'. [ 2042.434949][ T5988] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 2042.444111][T27510] usb 5-1: Using ep0 maxpacket: 8 [ 2042.457993][T31157] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2042.463516][ T5988] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2042.476222][T27510] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2042.487418][ T5988] usb 6-1: Product: syz [ 2042.493422][T27510] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2042.503581][ T5988] usb 6-1: Manufacturer: syz [ 2042.509215][ T5988] usb 6-1: SerialNumber: syz [ 2042.516052][T27510] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2042.540201][ T30] audit: type=1400 audit(1767977066.941:2123): avc: denied { write } for pid=31158 comm="syz.0.6991" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2042.567776][ T5988] usb 6-1: config 0 descriptor?? [ 2042.584951][ T30] audit: type=1400 audit(1767977066.971:2124): avc: denied { map } for pid=31158 comm="syz.0.6991" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2042.614701][ T5988] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 030 [ 2042.623421][T27510] usb 5-1: config 0 descriptor?? [ 2043.008934][T27510] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2043.575497][T27935] kvaser_usb 3-1:0.223: error -ENODEV: Cannot get usb endpoint(s) [ 2043.622826][T27935] usb 3-1: USB disconnect, device number 76 [ 2044.082431][T31156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2044.605390][T31156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2044.799958][ T5988] (null): failure reading functionality [ 2044.815796][ T5988] i2c i2c-2: failure reading functionality [ 2045.182669][ T30] audit: type=1400 audit(1767977069.571:2125): avc: denied { create } for pid=31187 comm="syz.0.6997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 2045.210198][ T5988] i2c i2c-2: connected i2c-tiny-usb device [ 2045.212864][ T30] audit: type=1400 audit(1767977069.611:2126): avc: denied { connect } for pid=31187 comm="syz.0.6997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 2045.246499][ T30] audit: type=1400 audit(1767977069.631:2127): avc: denied { read write } for pid=31187 comm="syz.0.6997" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 2045.271140][T15428] usb 5-1: USB disconnect, device number 53 [ 2045.274476][ T30] audit: type=1400 audit(1767977069.631:2128): avc: denied { open } for pid=31187 comm="syz.0.6997" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 2045.318923][ T5988] usb 6-1: USB disconnect, device number 30 [ 2045.384208][ T30] audit: type=1400 audit(1767977069.781:2129): avc: denied { ioctl } for pid=31191 comm="syz.5.7000" path="/dev/sg0" dev="devtmpfs" ino=768 ioctlcmd=0x227b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2045.512062][T26642] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 2045.629424][T27935] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 2045.669582][T26642] usb 3-1: Using ep0 maxpacket: 32 [ 2045.738230][T26642] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2045.762374][T26642] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2045.806139][T31195] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7001'. [ 2046.031359][T26642] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2046.049366][T26642] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2046.061830][T26642] usb 3-1: config 0 descriptor?? [ 2046.063704][T27935] usb 1-1: config 0 has an invalid interface number: 247 but max is 0 [ 2046.095194][T27935] usb 1-1: config 0 has no interface number 0 [ 2046.115401][T27935] usb 1-1: config 0 interface 247 has no altsetting 0 [ 2046.137482][T27935] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2046.173924][T27935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2046.218845][T27935] usb 1-1: Product: syz [ 2046.233240][T27935] usb 1-1: Manufacturer: syz [ 2046.237871][T27935] usb 1-1: SerialNumber: syz [ 2046.255563][T27935] usb 1-1: config 0 descriptor?? [ 2046.514231][T26642] savu 0003:1E7D:2D5A.0019: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 2046.535472][T27935] usb 1-1: USB disconnect, device number 124 [ 2046.812156][T31189] netlink: 'syz.0.6997': attribute type 1 has an invalid length. [ 2046.861074][T26642] usb 3-1: USB disconnect, device number 77 [ 2046.913739][T31189] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2046.919577][T31214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6997'. [ 2046.973722][T31189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6997'. [ 2047.010209][T31203] fido_id[31203]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 2047.039289][T31211] bond1: (slave veth3): Enslaving as an active interface with a down link [ 2047.073554][T31215] bond1: (slave dummy0): making interface the new active one [ 2047.085477][T31215] dummy0: entered promiscuous mode [ 2047.093261][T31215] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 2047.424709][T31189] bond1 (unregistering): (slave veth3): Releasing active interface [ 2047.462003][T31189] bond1 (unregistering): (slave dummy0): Releasing active interface [ 2047.473995][T31189] bond1 (unregistering): Released all slaves [ 2048.869061][T27935] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 2049.103162][T31235] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.7012'. [ 2049.173703][T27935] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 2049.180862][T31238] xt_hashlimit: size too large, truncated to 1048576 [ 2049.189371][T27935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2049.189393][T27935] usb 3-1: Product: syz [ 2049.189409][T27935] usb 3-1: Manufacturer: syz [ 2049.189425][T27935] usb 3-1: SerialNumber: syz [ 2049.191548][T27935] usb 3-1: config 0 descriptor?? [ 2049.252257][T27935] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 078 [ 2049.279914][T15428] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 2049.401316][T31219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7005'. [ 2049.420668][T31241] netlink: 'syz.0.7014': attribute type 3 has an invalid length. [ 2049.429972][T31241] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1537 sclass=netlink_route_socket pid=31241 comm=syz.0.7014 [ 2049.449409][T15428] usb 6-1: Using ep0 maxpacket: 8 [ 2049.455891][T15428] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2049.485134][T15428] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2049.513331][T15428] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2049.538794][T15428] usb 6-1: config 0 descriptor?? [ 2049.794429][T15428] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2050.334233][T31233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2050.357224][T31233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2050.590218][T15428] usb 6-1: USB disconnect, device number 31 [ 2051.369947][T27935] (null): failure reading functionality [ 2051.376278][T27935] i2c i2c-2: failure reading functionality [ 2051.384025][T27935] i2c i2c-2: connected i2c-tiny-usb device [ 2051.403264][T27935] usb 3-1: USB disconnect, device number 78 [ 2051.409449][T15428] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 2051.609792][T15428] usb 6-1: Using ep0 maxpacket: 8 [ 2052.069105][T15428] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2052.081189][T15428] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2052.092346][T15428] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2052.102888][T15428] usb 6-1: config 0 descriptor?? [ 2052.323615][T15428] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2052.567773][T31257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2052.588818][T31257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2052.817685][ T30] audit: type=1400 audit(1767977077.211:2130): avc: denied { ioctl } for pid=31263 comm="syz.4.7020" path="socket:[127347]" dev="sockfs" ino=127347 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 2052.943922][T31278] trusted_key: syz.0.7022 sent an empty control message without MSG_MORE. [ 2052.961886][ T5988] usb 6-1: USB disconnect, device number 32 [ 2053.031559][ T30] audit: type=1400 audit(1767977077.431:2131): avc: denied { map } for pid=31279 comm="syz.0.7023" path="socket:[128204]" dev="sockfs" ino=128204 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2053.105542][ T30] audit: type=1400 audit(1767977077.431:2132): avc: denied { read accept } for pid=31279 comm="syz.0.7023" path="socket:[128204]" dev="sockfs" ino=128204 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2053.828500][ T30] audit: type=1400 audit(1767977078.221:2133): avc: denied { ioctl } for pid=31294 comm="syz.0.7028" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5566 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 2053.862705][T31295] input: syz1 as /devices/virtual/input/input47 [ 2054.163278][T31304] 9p: Bad value for 'port' [ 2054.587861][T15428] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 2055.229372][T15428] usb 3-1: Using ep0 maxpacket: 8 [ 2055.310906][T15428] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2055.365101][T15428] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2055.374424][T15428] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2056.088027][T31330] loop5: detected capacity change from 0 to 7 [ 2056.112742][T15428] usb 3-1: config 0 descriptor?? [ 2056.185740][ T30] audit: type=1400 audit(1767977080.581:2134): avc: denied { read } for pid=31331 comm="syz.3.7036" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 2056.188784][T31330] Dev loop5: unable to read RDB block 7 [ 2056.214963][T31330] loop5: AHDI p1 p2 p3 [ 2056.219181][T31330] loop5: partition table partially beyond EOD, truncated [ 2056.244645][T31330] loop5: p1 start 1601398130 is beyond EOD, truncated [ 2056.256965][T31330] loop5: p2 start 1702059890 is beyond EOD, [ 2056.256999][ T30] audit: type=1400 audit(1767977080.611:2135): avc: denied { open } for pid=31331 comm="syz.3.7036" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 2056.287166][T31332] netlink: 'syz.3.7036': attribute type 1 has an invalid length. [ 2056.295442][T31330] truncated [ 2056.459722][T15428] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2056.493668][ T30] audit: type=1400 audit(1767977080.891:2136): avc: denied { create } for pid=31331 comm="syz.3.7036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 2056.528156][T31332] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7036'. [ 2057.054490][T31343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2057.074911][T31343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2057.330030][T15428] usb 3-1: USB disconnect, device number 79 [ 2057.359433][ T5988] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 2057.539584][ T5988] usb 5-1: Using ep0 maxpacket: 8 [ 2057.560807][ T5988] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2057.589441][ T5988] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2057.618983][ T5988] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2057.661518][T31350] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 2057.770346][ T5988] usb 5-1: config 0 descriptor?? [ 2057.793980][ T30] audit: type=1400 audit(1767977082.121:2137): avc: denied { read } for pid=5482 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 2057.941358][ T30] audit: type=1400 audit(1767977082.261:2138): avc: denied { read } for pid=31331 comm="syz.3.7036" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2057.967273][T31350] ALSA: mixer_oss: invalid index 1374389 [ 2058.409602][ T5988] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2058.731592][T31337] batman_adv: batadv0: Adding interface: gretap1 [ 2058.738571][T31337] batman_adv: batadv0: Interface activated: gretap1 [ 2058.861830][T31361] kvm: pic: non byte write [ 2058.873948][T31361] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=167772160 (335544320 ns) > initial count (40 ns). Using initial count to start timer. [ 2058.899182][T31361] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 2058.960387][T31363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2059.017381][ T30] audit: type=1400 audit(1767977083.411:2139): avc: denied { shutdown } for pid=31365 comm="syz.5.7043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2059.063948][T31363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2059.277665][ T30] audit: type=1400 audit(1767977083.671:2140): avc: denied { create } for pid=31374 comm="syz.2.7047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2059.281905][T31370] kvm: kvm [31369]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x87 [ 2059.310003][T31370] kvm: kvm [31369]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x87 [ 2059.321217][T31370] kvm: kvm [31369]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x87 [ 2059.337575][T31370] kvm: kvm [31369]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x87 [ 2059.337644][T31370] kvm: kvm [31369]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x87 [ 2059.351323][T31370] kvm_intel: kvm [31369]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x87 [ 2059.449410][ T5988] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 2059.530338][T15428] usb 5-1: USB disconnect, device number 54 [ 2059.540836][ T30] audit: type=1326 audit(1767977083.941:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31378 comm="syz.0.7048" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f578038f749 code=0x0 [ 2059.609385][ T5988] usb 6-1: Using ep0 maxpacket: 32 [ 2059.622578][ T5988] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 2059.649539][ T5988] usb 6-1: config 0 has no interface number 0 [ 2059.655635][ T5988] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2059.688755][ T5988] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 2059.719390][ T5988] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2059.727665][ T5988] usb 6-1: Product: syz [ 2059.741693][ T5988] usb 6-1: Manufacturer: syz [ 2059.749539][ T5988] usb 6-1: SerialNumber: syz [ 2059.770752][ T5988] usb 6-1: config 0 descriptor?? [ 2059.789026][ T5988] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 2059.799709][ T5988] em28xx 6-1:0.132: Video interface 132 found: [ 2060.183224][ T5988] em28xx 6-1:0.132: chip ID is em2710/2820 [ 2060.360653][T31390] syzkaller1: entered promiscuous mode [ 2060.366146][T31390] syzkaller1: entered allmulticast mode [ 2060.375772][ T30] audit: type=1326 audit(1767977084.771:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31389 comm="syz.4.7051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a798f749 code=0x7ffc0000 [ 2060.416666][ T30] audit: type=1326 audit(1767977084.771:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31389 comm="syz.4.7051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a798f749 code=0x7ffc0000 [ 2060.452632][ T30] audit: type=1326 audit(1767977084.771:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31389 comm="syz.4.7051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a798f749 code=0x7ffc0000 [ 2060.476327][T26642] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 2060.488507][ T30] audit: type=1326 audit(1767977084.771:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31389 comm="syz.4.7051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a798f749 code=0x7ffc0000 [ 2060.512980][ T30] audit: type=1326 audit(1767977084.771:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31389 comm="syz.4.7051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2a798f749 code=0x7ffc0000 [ 2060.557385][ T30] audit: type=1326 audit(1767977084.771:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31389 comm="syz.4.7051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a798f749 code=0x7ffc0000 [ 2060.659592][T26642] usb 4-1: Using ep0 maxpacket: 8 [ 2060.666175][T26642] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2060.679384][T26642] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 2060.706552][T26642] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2060.722230][T31372] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7046'. [ 2060.733142][T26642] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 2060.745052][T26642] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 2060.745076][T26642] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2060.745096][T26642] usb 4-1: SerialNumber: syz [ 2060.748632][T31388] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2060.751448][T26642] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 2060.751823][T26642] usb-storage 4-1:1.0: USB Mass Storage device detected [ 2060.762340][T26642] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 2060.762742][T26642] scsi host1: usb-storage 4-1:1.0 [ 2060.762804][T31372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2060.763100][T31372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2060.837603][ T5988] em28xx 6-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 2060.877477][T27510] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 2060.878243][ T5988] em28xx 6-1:0.132: board has no eeprom [ 2060.950314][T26642] usb 3-1: new full-speed USB device number 80 using dummy_hcd [ 2060.959617][ T5988] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 2060.974784][ T5988] em28xx 6-1:0.132: analog set to bulk mode. [ 2060.984803][T29435] em28xx 6-1:0.132: Registering V4L2 extension [ 2060.985813][T31405] netem: change failed [ 2061.019377][T27510] usb 1-1: Using ep0 maxpacket: 8 [ 2061.047101][T27510] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2061.095458][ T5988] usb 6-1: USB disconnect, device number 33 [ 2061.128801][T26642] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2061.161493][T27510] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2061.182531][ T5988] em28xx 6-1:0.132: Disconnecting em28xx [ 2061.191826][T27510] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2061.200556][T26642] usb 3-1: not running at top speed; connect to a high speed hub [ 2061.235208][T26642] usb 3-1: config 14 has an invalid interface number: 21 but max is 0 [ 2061.296736][T26642] usb 3-1: config 14 has no interface number 0 [ 2061.308857][T27510] usb 1-1: config 0 descriptor?? [ 2061.313896][T26642] usb 3-1: config 14 interface 21 has no altsetting 0 [ 2061.322886][T26642] usb 3-1: New USB device found, idVendor=c880, idProduct=760e, bcdDevice=35.fc [ 2061.333290][T26642] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2061.341678][T26642] usb 3-1: Product: 红　á´è鑫裲㥋酆虫竧⥞ﵣ樥鰿熸઺炦áŽà¶ºëº—ꌊ疕乣沙â”怇퉥눂뼀å›ä–ºæ¯¬á¥™ç ¸æŽ’龤陵킎뉇糱﷞렅崺퇬刎颈篹㕿㦜ቖ⴩؅䷞☘⊉â–扅셀⢛薜泻鵞㳈䊌蛵舢催⾸뵇㸻푳 [ 2061.366432][T26642] usb 3-1: Manufacturer: ᪫é¼áŒ‚Û‰ì«ãº´ï™žã…¢á²¶çµ”妡嗪ã¤ï¾ƒé€¥í½ç¨–㡷邢瑙㗩觱â¾æ»ŠäŠ·ï²¼ã¡•áœ¬à¿žî¡ïŽŸã°«ìžœæ¤¹î‚–ᆔ㦆졩ꨈ橷뇻껌鱓칮ୀ敻糆ࣄ跖åŒë°³ë—šì¾ªáˆ¾ì‚¼êžå»ë™¤æ¥·à¶ªì£²ç»€éŸ®ç§á¥ªå¬³î¨§ä´­ì½®î¥î¨¤â˜†ê¥›á•›á¿¼æ”•æ½šë¦¢ï Šê´¸å® æ£²é¥´æ©¯å¥´å¸å¬¡ê­€ä²¬í‰’âƒè±¸ä§ çŠ™å‚颉ì’医Ц츣ᅩçžé¾¦âµªä”ˆãª“꿱á¥ì²•è„ƒí€†æ圤鴤姨 [ 2061.428686][T26642] usb 3-1: SerialNumber: syz [ 2061.433548][T29435] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 2061.440768][T29435] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 2061.452415][T29435] em28xx 6-1:0.132: No AC97 audio processor [ 2061.462063][T29435] usb 6-1: Decoder not found [ 2061.466679][T29435] em28xx 6-1:0.132: failed to create media graph [ 2061.483558][T29435] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 2061.491742][T29435] em28xx 6-1:0.132: Remote control support is not available for this card. [ 2061.500481][ T5988] em28xx 6-1:0.132: Closing input extension [ 2061.512004][ T5988] em28xx 6-1:0.132: Freeing device [ 2061.543278][T27510] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2061.694872][T26642] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2061.706107][T31417] loop5: detected capacity change from 0 to 7 [ 2061.712325][T26642] usb 3-1: MIDIStreaming interface descriptor not found [ 2061.720289][T31417] Dev loop5: unable to read RDB block 7 [ 2061.726054][T31417] loop5: AHDI p1 p2 p3 [ 2061.733410][T31417] loop5: partition table partially beyond EOD, truncated [ 2061.746529][T31417] loop5: p1 start 1601398130 is beyond EOD, truncated [ 2061.753483][T31417] loop5: p2 start 1702059890 is beyond EOD, truncated [ 2061.784671][T26642] usb 3-1: USB disconnect, device number 80 [ 2061.866271][T31422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2061.895449][T31422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2061.925004][T31088] udevd[31088]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:14.21/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2062.021057][T31402] usb 4-1: reset high-speed USB device number 68 using dummy_hcd [ 2062.276682][T27638] usb 1-1: USB disconnect, device number 125 [ 2062.489091][ T5187] Dev loop5: unable to read RDB block 7 [ 2062.496585][ T5187] loop5: AHDI p1 p2 p3 [ 2062.501050][ T5187] loop5: partition table partially beyond EOD, truncated [ 2062.511193][ T5187] loop5: p1 start 1601398130 is beyond EOD, truncated [ 2062.520187][ T5187] loop5: p2 start 1702059890 is beyond EOD, truncated [ 2062.592157][T26642] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 2063.269476][T26642] usb 3-1: Using ep0 maxpacket: 8 [ 2063.275962][T26642] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2063.288012][T15428] usb 4-1: USB disconnect, device number 68 [ 2063.310491][T26642] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2063.339411][T26642] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2063.358193][T26642] usb 3-1: config 0 descriptor?? [ 2063.579894][T31438] FAULT_INJECTION: forcing a failure. [ 2063.579894][T31438] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2063.593762][T31438] CPU: 1 UID: 0 PID: 31438 Comm: syz.5.7064 Tainted: G L syzkaller #0 PREEMPT(full) [ 2063.593783][T31438] Tainted: [L]=SOFTLOCKUP [ 2063.593787][T31438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2063.593794][T31438] Call Trace: [ 2063.593798][T31438] [ 2063.593802][T31438] dump_stack_lvl+0x16c/0x1f0 [ 2063.593820][T31438] should_fail_ex+0x512/0x640 [ 2063.593839][T31438] _copy_from_user+0x2e/0xd0 [ 2063.593856][T31438] vmemdup_user+0x6b/0xe0 [ 2063.593869][T31438] setxattr_copy+0x148/0x210 [ 2063.593887][T31438] path_setxattrat+0x104/0x2a0 [ 2063.593904][T31438] ? __pfx_path_setxattrat+0x10/0x10 [ 2063.593922][T31438] ? ksys_write+0x190/0x250 [ 2063.593948][T31438] ? fput+0x70/0xf0 [ 2063.593957][T31438] ? ksys_write+0x1ac/0x250 [ 2063.593970][T31438] ? __pfx_ksys_write+0x10/0x10 [ 2063.593986][T31438] __x64_sys_lsetxattr+0xc9/0x140 [ 2063.594007][T31438] ? do_syscall_64+0x91/0xf80 [ 2063.594021][T31438] ? lockdep_hardirqs_on+0x7c/0x110 [ 2063.594035][T31438] do_syscall_64+0xcd/0xf80 [ 2063.594050][T31438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2063.594062][T31438] RIP: 0033:0x7fe4e758f749 [ 2063.594071][T31438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2063.594082][T31438] RSP: 002b:00007fe4e8389038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 2063.594093][T31438] RAX: ffffffffffffffda RBX: 00007fe4e77e5fa0 RCX: 00007fe4e758f749 [ 2063.594101][T31438] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 0000200000000140 [ 2063.594108][T31438] RBP: 00007fe4e8389090 R08: 0000000000000000 R09: 0000000000000000 [ 2063.594114][T31438] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000001 [ 2063.594120][T31438] R13: 00007fe4e77e6038 R14: 00007fe4e77e5fa0 R15: 00007fff4cbf2998 [ 2063.594135][T31438] [ 2063.809400][ T5988] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 2063.827159][T26642] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2063.929697][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 2063.929714][ T30] audit: type=1400 audit(1767977088.331:2189): avc: denied { bind } for pid=31439 comm="syz.5.7066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2063.965668][ T30] audit: type=1400 audit(1767977088.361:2190): avc: denied { write } for pid=31439 comm="syz.5.7066" path="socket:[128620]" dev="sockfs" ino=128620 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2063.989558][ T5988] usb 1-1: Using ep0 maxpacket: 32 [ 2063.996045][ T5988] usb 1-1: config 0 has an invalid interface number: 223 but max is 0 [ 2064.004270][ T5988] usb 1-1: config 0 has an invalid descriptor of length 44, skipping remainder of the config [ 2064.014591][ T5988] usb 1-1: config 0 has no interface number 0 [ 2064.020724][ T5988] usb 1-1: too many endpoints for config 0 interface 223 altsetting 157: 182, using maximum allowed: 30 [ 2064.032136][ T5988] usb 1-1: config 0 interface 223 altsetting 157 has 0 endpoint descriptors, different from the interface descriptor's value: 182 [ 2064.045952][ T5988] usb 1-1: config 0 interface 223 has no altsetting 0 [ 2064.055344][ T5988] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 2064.064492][ T5988] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2064.072576][ T5988] usb 1-1: Product: syz [ 2064.076769][ T5988] usb 1-1: Manufacturer: syz [ 2064.081371][ T5988] usb 1-1: SerialNumber: syz [ 2064.090430][T31443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2064.102046][ T5988] usb 1-1: config 0 descriptor?? [ 2064.130570][T31443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2064.462954][T31445] netem: change failed [ 2064.579063][T31448] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2064.919864][T27638] usb 3-1: USB disconnect, device number 81 [ 2065.001465][T15428] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 2065.189387][T15428] usb 6-1: Using ep0 maxpacket: 8 [ 2065.392423][T15428] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2065.427624][T15428] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2065.437801][T15428] usb 6-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2065.449783][T15428] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2065.462915][T15428] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2065.472425][T15428] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2065.484709][T15428] usbtmc 6-1:16.0: bulk endpoints not found [ 2065.563394][ T5988] kvaser_usb 1-1:0.223: error -ENODEV: Cannot get usb endpoint(s) [ 2065.600849][ T5988] usb 1-1: USB disconnect, device number 126 [ 2066.918152][T31468] netlink: 'syz.4.7074': attribute type 1 has an invalid length. [ 2067.034049][T31470] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7068'. [ 2067.371815][ T30] audit: type=1326 audit(1767977347.769:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31473 comm="syz.0.7075" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f578038f749 code=0x0 [ 2067.461130][ T30] audit: type=1400 audit(1767977347.869:2192): avc: denied { create } for pid=31476 comm="syz.2.7072" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2067.487308][ T30] audit: type=1400 audit(1767977347.889:2193): avc: denied { mounton } for pid=31476 comm="syz.2.7072" path="/282/file0" dev="tmpfs" ino=1530 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2067.756484][ T30] audit: type=1400 audit(1767977348.149:2194): avc: denied { append } for pid=31486 comm="syz.3.7077" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 2069.023505][ T5988] usb 6-1: USB disconnect, device number 34 [ 2069.222917][ T30] audit: type=1400 audit(1767977349.559:2195): avc: denied { unlink } for pid=26578 comm="syz-executor" name="file0" dev="tmpfs" ino=1530 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2069.934738][T31505] 8021q: adding VLAN 0 to HW filter on device ipvlan6 [ 2069.974776][T31509] /dev/nullb0: Can't open blockdev [ 2070.209531][ T5988] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 2070.369492][ T5988] usb 3-1: Using ep0 maxpacket: 16 [ 2070.386921][ T5988] usb 3-1: config 4 has an invalid interface number: 9 but max is 0 [ 2070.497222][ T5988] usb 3-1: config 4 has no interface number 0 [ 2070.513444][T15428] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 2070.547337][ T5988] usb 3-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2070.569638][ T5988] usb 3-1: config 4 interface 9 has no altsetting 0 [ 2070.589609][ T5988] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 2070.607956][ T5988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2070.619550][ T5988] usb 3-1: Product: syz [ 2070.623705][ T5988] usb 3-1: Manufacturer: syz [ 2070.628320][ T5988] usb 3-1: SerialNumber: syz [ 2070.654122][T31508] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2070.669474][T15428] usb 6-1: Using ep0 maxpacket: 8 [ 2070.680067][T15428] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2070.701475][T15428] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2070.725505][ T5988] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2070.729338][T15428] usb 6-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2070.776157][T15428] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2070.809389][T15428] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2070.818427][T15428] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2070.861917][T15428] usbtmc 6-1:16.0: bulk endpoints not found [ 2071.762982][T27100] usb 3-1: Failed to submit usb control message: -110 [ 2071.774457][T27100] usb 3-1: unable to send the bmi data to the device: -110 [ 2071.782135][ T30] audit: type=1400 audit(1767977608.186:2196): avc: denied { ioctl } for pid=31527 comm="syz.4.7088" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 2071.808201][T27100] usb 3-1: unable to get target info from device [ 2071.820819][T27100] usb 3-1: could not get target info (-110) [ 2071.830190][T27100] usb 3-1: could not probe fw (-110) [ 2071.949678][ T5988] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 2072.093024][T31538] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7085'. [ 2072.318550][T31542] xt_hashlimit: size too large, truncated to 1048576 [ 2072.389440][ T5988] usb 4-1: device descriptor read/64, error -71 [ 2072.919619][ T5988] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 2073.079584][ T5988] usb 4-1: device descriptor read/64, error -71 [ 2073.199839][ T5988] usb usb4-port1: attempt power cycle [ 2073.477224][T15428] usb 6-1: USB disconnect, device number 35 [ 2073.499036][T27638] usb 3-1: USB disconnect, device number 82 [ 2073.539794][ T5988] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 2073.592583][ T5988] usb 4-1: device descriptor read/8, error -71 [ 2073.859609][ T5988] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 2074.070181][ T5988] usb 4-1: device descriptor read/8, error -71 [ 2074.088804][T31574] xt_hashlimit: size too large, truncated to 1048576 [ 2074.222979][ T5988] usb usb4-port1: unable to enumerate USB device [ 2074.317742][ T30] audit: type=1800 audit(1767977610.716:2197): pid=31576 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.7099" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 2074.361893][ T30] audit: type=1400 audit(1767977610.746:2198): avc: denied { connect } for pid=31571 comm="syz.0.7099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2074.400746][ T30] audit: type=1400 audit(1767977610.746:2199): avc: denied { getopt } for pid=31571 comm="syz.0.7099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2075.187866][T31584] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 2075.234170][T31582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7097'. [ 2075.327363][T31592] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7103'. [ 2075.346510][ T30] audit: type=1400 audit(1767977611.736:2200): avc: denied { map } for pid=31589 comm="syz.0.7103" path="socket:[128906]" dev="sockfs" ino=128906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2076.249648][ T30] audit: type=1326 audit(1767977612.656:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31604 comm="syz.0.7108" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f578038f749 code=0x0 [ 2076.541516][ T30] audit: type=1326 audit(1767977612.946:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31609 comm="syz.5.7110" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe4e758f749 code=0x0 [ 2077.379470][ T5988] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 2077.559378][ T5988] usb 1-1: Using ep0 maxpacket: 8 [ 2077.572367][ T5988] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2077.630147][ T5988] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2077.641897][ T5988] usb 1-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2077.655636][ T5988] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2077.669514][ T5988] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2077.700042][ T5988] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2077.952061][ T5988] usbtmc 1-1:16.0: bulk endpoints not found [ 2078.039415][ T30] audit: type=1326 audit(1767977870.411:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31630 comm="syz.3.7114" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f61e498f749 code=0x0 [ 2078.221831][T31639] netlink: 'syz.2.7115': attribute type 1 has an invalid length. [ 2079.197379][T31658] xt_hashlimit: size too large, truncated to 1048576 [ 2079.262142][T31662] netlink: 'syz.4.7116': attribute type 1 has an invalid length. [ 2079.473480][T31667] 8021q: adding VLAN 0 to HW filter on device ipvlan5 [ 2079.604164][T31669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7111'. [ 2080.706784][T31671] ubi: mtd0 is already attached to ubi31 [ 2080.960291][T31681] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57941 sclass=netlink_route_socket pid=31681 comm=syz.3.7123 [ 2081.018481][ T5988] usb 1-1: USB disconnect, device number 127 [ 2081.481425][T31681] zonefs (nullb0) ERROR: Not a zoned block device [ 2082.021272][T31699] kvm: pic: non byte write [ 2082.231608][T31707] netlink: 'syz.5.7128': attribute type 1 has an invalid length. [ 2082.620901][T31709] loop5: detected capacity change from 0 to 7 [ 2082.631500][T31166] Dev loop5: unable to read RDB block 7 [ 2082.645367][T31166] loop5: AHDI p1 p2 p3 [ 2082.658850][T31166] loop5: partition table partially beyond EOD, truncated [ 2082.670250][T31166] loop5: p1 start 1601398130 is beyond EOD, truncated [ 2082.682251][T31166] loop5: p2 start 1702059890 is beyond EOD, truncated [ 2082.694518][T31709] Dev loop5: unable to read RDB block 7 [ 2082.702007][T31709] loop5: AHDI p1 p2 p3 [ 2082.708887][T31709] loop5: partition table partially beyond EOD, truncated [ 2082.730539][T31709] loop5: p1 start 1601398130 is beyond EOD, truncated [ 2082.738414][T31709] loop5: p2 start 1702059890 is beyond EOD, truncated [ 2082.815927][ T30] audit: type=1400 audit(1767977875.211:2204): avc: denied { bind } for pid=31711 comm="syz.0.7133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2082.887836][T31717] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7133'. [ 2083.326592][T31726] fuse: Invalid rootmode [ 2084.950639][T31750] netlink: 'syz.0.7141': attribute type 1 has an invalid length. [ 2084.983153][ T5988] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 2085.567712][ T5988] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 2085.628634][ T5988] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2085.684161][ T5988] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 2085.747569][ T30] audit: type=1400 audit(1767977878.141:2205): avc: denied { ioctl } for pid=31754 comm="syz.0.7145" path="socket:[129516]" dev="sockfs" ino=129516 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2085.783432][ T5988] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2085.792967][ T5988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2085.802992][ T5988] usb 3-1: Product: syz [ 2085.819395][ T5988] usb 3-1: Manufacturer: syz [ 2085.826326][ T5988] usb 3-1: SerialNumber: syz [ 2085.835437][ T5988] usb 3-1: config 0 descriptor?? [ 2085.871376][ T5988] usb 3-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress f8 [ 2086.132977][T27935] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 2086.269698][T26642] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 2086.329357][T27935] usb 1-1: Using ep0 maxpacket: 8 [ 2086.335706][T27935] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2086.347216][T27935] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2086.357569][T27935] usb 1-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2086.399603][T27935] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2086.430185][T26642] usb 4-1: Using ep0 maxpacket: 8 [ 2086.436936][T27935] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2086.439220][T26642] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2086.450311][T27935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2086.458560][T26642] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2086.476604][T26642] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2086.665704][T27935] usbtmc 1-1:16.0: bulk endpoints not found [ 2087.246608][T26642] usb 4-1: config 0 descriptor?? [ 2087.503649][T26642] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2087.566099][ T5988] usb 3-1: USB disconnect, device number 83 [ 2088.058280][T31784] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7146'. [ 2088.900636][T31790] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7154'. [ 2088.911679][T31790] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7154'. [ 2089.436016][T31796] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 2089.451320][T27100] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2089.459909][T27100] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2089.468343][T27100] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2089.490064][T27100] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2089.583618][ T5988] usb 1-1: USB disconnect, device number 2 [ 2089.669937][T31788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7152'. [ 2089.706816][T27935] usb 4-1: USB disconnect, device number 73 [ 2089.976439][T31807] usb 2-1: USB disconnect, device number 69 [ 2090.487215][T26642] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 2090.511517][T31808] hub 2-0:1.0: USB hub found [ 2090.519553][T31808] hub 2-0:1.0: 1 port detected [ 2090.644606][T26642] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2090.692273][T26642] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2090.709534][T27638] usb 2-1: new low-speed USB device number 70 using dummy_hcd [ 2090.713867][T26642] usb 3-1: Product: syz [ 2090.730295][T26642] usb 3-1: Manufacturer: syz [ 2090.743392][T26642] usb 3-1: SerialNumber: syz [ 2090.892345][T26642] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2090.914724][ T5988] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2091.339668][ T30] audit: type=1400 audit(1767978139.728:2206): avc: denied { accept } for pid=31792 comm="syz.2.7155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 2092.286461][ T5988] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2092.296441][ T5988] ath9k_htc: Failed to initialize the device [ 2092.366670][ T5988] usb 3-1: ath9k_htc: USB layer deinitialized [ 2092.603196][T26642] usb 3-1: USB disconnect, device number 84 [ 2093.607315][T31822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7160'. [ 2094.761870][T31830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7163'. [ 2095.872535][T31849] random: crng reseeded on system resumption [ 2096.872031][T31857] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7169'. [ 2096.881610][T31857] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7169'. [ 2097.420683][T31860] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.7168'. [ 2097.499416][T27638] usb 2-1: device descriptor read/64, error -110 [ 2097.799371][T27638] usb 2-1: new low-speed USB device number 71 using dummy_hcd [ 2097.979412][T27638] usb 2-1: device descriptor read/64, error -32 [ 2098.119564][T27638] usb usb2-port1: attempt power cycle [ 2098.404189][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2098.439484][T27638] raw-gadget.1 gadget.1: failed to queue resume event [ 2098.537870][T27638] usb 2-1: new low-speed USB device number 72 using dummy_hcd [ 2098.589554][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 2098.596641][T27638] usb 2-1: device descriptor read/8, error -32 [ 2098.709470][T27638] raw-gadget.1 gadget.1: failed to queue suspend event [ 2098.730152][T27638] raw-gadget.1 gadget.1: failed to queue reset event [ 2099.139382][T27638] raw-gadget.1 gadget.1: failed to queue resume event [ 2099.249428][T27638] usb 2-1: new low-speed USB device number 73 using dummy_hcd [ 2099.279578][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 2099.286640][T27638] usb 2-1: device descriptor read/8, error -32 [ 2099.409397][T27638] raw-gadget.1 gadget.1: failed to queue suspend event [ 2099.416517][T27638] usb usb2-port1: unable to enumerate USB device [ 2099.819055][T31870] netlink: 'syz.2.7170': attribute type 1 has an invalid length. [ 2101.113078][ T30] audit: type=1326 audit(1767978149.508:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31877 comm="syz.2.7175" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa53d18f749 code=0x0 [ 2101.194426][T31880] fuse: Bad value for 'rootmode' [ 2102.023859][T31893] netlink: 'syz.0.7179': attribute type 1 has an invalid length. [ 2103.465178][T31912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7182'. [ 2104.411699][T31922] xt_hashlimit: size too large, truncated to 1048576 [ 2105.632791][T31937] fuse: Bad value for 'rootmode' [ 2105.747347][T27510] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 2106.320133][T27510] usb 3-1: Using ep0 maxpacket: 8 [ 2106.327083][T27510] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 2106.375868][T27510] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2106.386996][T27510] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2106.401174][ T30] audit: type=1326 audit(1767978154.798:2208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31942 comm="syz.5.7190" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe4e758f749 code=0x0 [ 2106.424770][T27510] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 2106.438195][T27510] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2106.469480][T27510] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 2106.593996][T27510] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2106.677800][T27510] usb 3-1: config 0 descriptor?? [ 2106.689842][T31930] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2106.915170][T31941] netlink: 'syz.3.7188': attribute type 1 has an invalid length. [ 2106.950944][ T7339] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 2106.957897][ T7339] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 2106.964868][ T7339] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 2106.971775][ T7339] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 2106.978658][ T7339] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 2106.985562][ T7339] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 2106.998338][ T7339] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 2107.005355][ T7339] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 2107.012199][ T7339] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 2107.019166][ T7339] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 2107.109698][T31954] FAULT_INJECTION: forcing a failure. [ 2107.109698][T31954] name failslab, interval 1, probability 0, space 0, times 0 [ 2107.122463][T31954] CPU: 1 UID: 0 PID: 31954 Comm: syz.0.7192 Tainted: G L syzkaller #0 PREEMPT(full) [ 2107.122498][T31954] Tainted: [L]=SOFTLOCKUP [ 2107.122505][T31954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2107.122516][T31954] Call Trace: [ 2107.122522][T31954] [ 2107.122529][T31954] dump_stack_lvl+0x16c/0x1f0 [ 2107.122557][T31954] should_fail_ex+0x512/0x640 [ 2107.122585][T31954] ? fs_reclaim_acquire+0xae/0x150 [ 2107.122612][T31954] should_failslab+0xc2/0x120 [ 2107.122637][T31954] __kmalloc_noprof+0xeb/0x910 [ 2107.122666][T31954] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 2107.122696][T31954] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 2107.122720][T31954] tomoyo_realpath_from_path+0xc2/0x6e0 [ 2107.122748][T31954] ? tomoyo_profile+0x47/0x60 [ 2107.122778][T31954] tomoyo_path_number_perm+0x245/0x580 [ 2107.122799][T31954] ? tomoyo_path_number_perm+0x237/0x580 [ 2107.122824][T31954] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2107.122848][T31954] ? find_held_lock+0x2b/0x80 [ 2107.122899][T31954] ? find_held_lock+0x2b/0x80 [ 2107.122925][T31954] ? hook_file_ioctl_common+0x144/0x410 [ 2107.122959][T31954] ? __fget_files+0x20e/0x3c0 [ 2107.122990][T31954] security_file_ioctl+0x9b/0x240 [ 2107.123016][T31954] __x64_sys_ioctl+0xb7/0x210 [ 2107.123040][T31954] do_syscall_64+0xcd/0xf80 [ 2107.123066][T31954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2107.123085][T31954] RIP: 0033:0x7f578038f749 [ 2107.123100][T31954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2107.123118][T31954] RSP: 002b:00007f57812f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2107.123135][T31954] RAX: ffffffffffffffda RBX: 00007f57805e5fa0 RCX: 00007f578038f749 [ 2107.123147][T31954] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 2107.123159][T31954] RBP: 00007f57812f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2107.123169][T31954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2107.123180][T31954] R13: 00007f57805e6038 R14: 00007f57805e5fa0 R15: 00007ffcdf25fef8 [ 2107.123206][T31954] [ 2107.123816][T31954] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2107.345399][ T30] audit: type=1400 audit(1767978155.738:2209): avc: denied { read write } for pid=31924 comm="syz.2.7186" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 2107.379134][ T30] audit: type=1400 audit(1767978155.738:2210): avc: denied { open } for pid=31924 comm="syz.2.7186" path="/306/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 2107.409090][ T30] audit: type=1400 audit(1767978155.738:2211): avc: denied { mounton } for pid=31924 comm="syz.2.7186" path="/306/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 2108.371940][T31925] overlayfs: failed to resolve './file0/file1': -4 [ 2108.577682][T27638] usb 3-1: USB disconnect, device number 85 [ 2108.580487][T24989] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 2109.175208][T31966] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7197'. [ 2109.645248][T31975] xt_hashlimit: size too large, truncated to 1048576 [ 2109.823041][T31979] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.7203'. [ 2111.518415][ T30] audit: type=1400 audit(1767978159.908:2212): avc: denied { mounton } for pid=31997 comm="syz.0.7207" path="/proc/1197/task" dev="proc" ino=131248 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 2111.630573][T32004] netlink: 'syz.5.7206': attribute type 1 has an invalid length. [ 2112.097280][ T30] audit: type=1400 audit(1767978159.908:2213): avc: denied { mount } for pid=31997 comm="syz.0.7207" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 2112.141328][T32009] netlink: 'syz.0.7209': attribute type 13 has an invalid length. [ 2112.350521][T32014] netlink: 'syz.5.7210': attribute type 13 has an invalid length. [ 2112.379908][T32007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7199'. [ 2112.421263][ T3543] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2112.431421][ T3543] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2112.661306][ T3543] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2112.688095][ T3543] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2113.801685][T32027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7213'. [ 2115.205871][T27638] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 2115.435884][T27638] usb 4-1: config 2 has an invalid interface number: 220 but max is 0 [ 2115.457181][T27638] usb 4-1: config 2 has no interface number 0 [ 2115.475106][T27638] usb 4-1: config 2 interface 220 has no altsetting 0 [ 2116.337625][T27638] usb 4-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=94.f4 [ 2116.388951][T27638] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 2116.433191][T27638] usb 4-1: Product: syz [ 2116.463727][T27638] usb 4-1: Manufacturer: syz [ 2116.479442][T27638] usb 4-1: SerialNumber: syz [ 2116.754344][ T30] audit: type=1400 audit(1767978165.148:2214): avc: denied { ioctl } for pid=32041 comm="syz.5.7219" path="socket:[131356]" dev="sockfs" ino=131356 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2116.804730][T32040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2116.950690][T32040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2117.408198][T32056] random: crng reseeded on system resumption [ 2117.631235][T32059] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 2117.655657][T27510] usb 4-1: USB disconnect, device number 74 [ 2117.956032][T32064] netlink: 'syz.0.7221': attribute type 1 has an invalid length. [ 2118.899460][T26642] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 2118.950640][T32070] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.7224'. [ 2119.129648][T26642] usb 1-1: Using ep0 maxpacket: 8 [ 2119.198575][T26642] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2119.259354][T26642] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2119.314043][T26642] usb 1-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2119.318346][T32073] netem: change failed [ 2119.329963][T26642] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2119.343102][T26642] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2119.352339][T26642] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2119.377510][T26642] usbtmc 1-1:16.0: bulk endpoints not found [ 2119.437179][T32080] loop5: detected capacity change from 0 to 7 [ 2119.455055][T32060] Dev loop5: unable to read RDB block 7 [ 2119.471575][T32060] loop5: AHDI p1 p2 p3 [ 2119.475746][T32060] loop5: partition table partially beyond EOD, truncated [ 2119.489387][T32060] loop5: p1 start 1601398130 is beyond EOD, truncated [ 2119.501368][T32060] loop5: p2 start 1702059890 is beyond EOD, truncated [ 2119.510937][T32080] Dev loop5: unable to read RDB block 7 [ 2119.516518][T32080] loop5: AHDI p1 p2 p3 [ 2119.523591][T32080] loop5: partition table partially beyond EOD, truncated [ 2119.539587][T32080] loop5: p1 start 1601398130 is beyond EOD, [ 2119.539595][T32081] netlink: 64 bytes leftover after parsing attributes in process `syz.5.7226'. [ 2119.554777][T32080] truncated [ 2119.557916][T32080] loop5: p2 start 1702059890 is beyond EOD, truncated [ 2119.689469][T27638] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 2119.879365][T27638] usb 3-1: Using ep0 maxpacket: 8 [ 2119.886018][T27638] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2119.897882][T27638] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2119.912893][T27638] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2119.944510][T27638] usb 3-1: config 0 descriptor?? [ 2120.092849][ T30] audit: type=1326 audit(1767978424.491:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32082 comm="syz.4.7228" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb2a798f749 code=0x0 [ 2120.191727][T32088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7222'. [ 2120.630493][T27638] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2120.929080][ T30] audit: type=1400 audit(1767978425.321:2216): avc: denied { map } for pid=32092 comm="syz.5.7229" path="/dev/usbmon6" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 2120.953718][ T30] audit: type=1400 audit(1767978425.321:2217): avc: denied { execute } for pid=32092 comm="syz.5.7229" path="/dev/usbmon6" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 2121.086506][T32097] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.7230'. [ 2121.156750][ T30] audit: type=1400 audit(1767978425.551:2218): avc: denied { create } for pid=32075 comm="syz.3.7223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 2121.903021][T27510] usb 1-1: USB disconnect, device number 3 [ 2122.346603][T32117] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.7236'. [ 2122.567471][T27638] usb 3-1: USB disconnect, device number 86 [ 2122.817619][ T30] audit: type=1400 audit(1767978427.161:2219): avc: denied { listen } for pid=32121 comm="syz.2.7237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 2123.055536][T32126] kvm: pic: non byte write [ 2123.063605][T32126] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=167772160 (335544320 ns) > initial count (40 ns). Using initial count to start timer. [ 2123.745257][T32146] fuse: Unknown parameter 'user_id00000000000000000000' [ 2124.039459][T27638] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 2124.930585][T27638] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2124.962406][T27638] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2124.980159][T27638] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2125.009699][T27638] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2125.018747][T27638] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2125.035254][T27638] usb 3-1: config 0 descriptor?? [ 2125.166616][ T30] audit: type=1400 audit(1767978429.561:2220): avc: denied { mount } for pid=32170 comm="syz.5.7252" name="/" dev="autofs" ino=131656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 2125.194281][ T30] audit: type=1400 audit(1767978429.591:2221): avc: denied { mounton } for pid=32170 comm="syz.5.7252" path="/317/file1/file0" dev="autofs" ino=131657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 2125.230798][ T30] audit: type=1400 audit(1767978429.621:2222): avc: denied { read } for pid=32170 comm="syz.5.7252" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 2125.350028][ T30] audit: type=1400 audit(1767978429.621:2223): avc: denied { open } for pid=32170 comm="syz.5.7252" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 2125.487480][ T30] audit: type=1400 audit(1767978429.621:2224): avc: denied { ioctl } for pid=32170 comm="syz.5.7252" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 2125.596964][ T30] audit: type=1400 audit(1767978429.681:2225): avc: denied { unmount } for pid=26827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 2125.667171][T27638] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 2125.679147][T27638] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 2125.687458][T27638] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 2125.696335][T27638] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 2125.706312][T27638] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 2125.726786][T27638] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 2125.921744][T27510] usb 3-1: USB disconnect, device number 87 [ 2126.072601][T32182] netlink: 512 bytes leftover after parsing attributes in process `syz.4.7256'. [ 2126.082385][T27638] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 2126.181687][T32195] FAULT_INJECTION: forcing a failure. [ 2126.181687][T32195] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2126.195200][T32195] CPU: 0 UID: 0 PID: 32195 Comm: syz.3.7261 Tainted: G L syzkaller #0 PREEMPT(full) [ 2126.195228][T32195] Tainted: [L]=SOFTLOCKUP [ 2126.195235][T32195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2126.195245][T32195] Call Trace: [ 2126.195252][T32195] [ 2126.195258][T32195] dump_stack_lvl+0x16c/0x1f0 [ 2126.195286][T32195] should_fail_ex+0x512/0x640 [ 2126.195316][T32195] _copy_from_user+0x2e/0xd0 [ 2126.195344][T32195] cec_ioctl+0x2da/0x2970 [ 2126.195369][T32195] ? __pfx_cec_ioctl+0x10/0x10 [ 2126.195397][T32195] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2126.195416][T32195] ? do_vfs_ioctl+0x128/0x14f0 [ 2126.195437][T32195] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2126.195456][T32195] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 2126.195486][T32195] ? hook_file_ioctl_common+0x144/0x410 [ 2126.195517][T32195] ? selinux_file_ioctl+0x180/0x270 [ 2126.195538][T32195] ? selinux_file_ioctl+0xb4/0x270 [ 2126.195559][T32195] ? __pfx_cec_ioctl+0x10/0x10 [ 2126.195578][T32195] __x64_sys_ioctl+0x18e/0x210 [ 2126.195599][T32195] do_syscall_64+0xcd/0xf80 [ 2126.195622][T32195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2126.195639][T32195] RIP: 0033:0x7f61e498f749 [ 2126.195654][T32195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2126.195670][T32195] RSP: 002b:00007f61e57b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2126.195685][T32195] RAX: ffffffffffffffda RBX: 00007f61e4be5fa0 RCX: 00007f61e498f749 [ 2126.195695][T32195] RDX: 0000200000000140 RSI: 00000000c05c6104 RDI: 0000000000000003 [ 2126.195705][T32195] RBP: 00007f61e57b8090 R08: 0000000000000000 R09: 0000000000000000 [ 2126.195715][T32195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2126.195725][T32195] R13: 00007f61e4be6038 R14: 00007f61e4be5fa0 R15: 00007fff02a548a8 [ 2126.195746][T32195] [ 2126.399424][T27638] usb 1-1: Using ep0 maxpacket: 8 [ 2126.405781][T27638] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2126.416828][T27638] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2126.425940][T27638] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2126.437977][T27638] usb 1-1: config 0 descriptor?? [ 2126.530259][ T30] audit: type=1804 audit(1767978430.921:2226): pid=32199 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.7262" name="/newroot/599/bus/file0" dev="overlay" ino=3219 res=1 errno=0 [ 2126.795256][T27638] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2127.515704][T32213] FAULT_INJECTION: forcing a failure. [ 2127.515704][T32213] name failslab, interval 1, probability 0, space 0, times 0 [ 2127.538199][T32213] CPU: 0 UID: 0 PID: 32213 Comm: syz.2.7266 Tainted: G L syzkaller #0 PREEMPT(full) [ 2127.538225][T32213] Tainted: [L]=SOFTLOCKUP [ 2127.538229][T32213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2127.538236][T32213] Call Trace: [ 2127.538244][T32213] [ 2127.538249][T32213] dump_stack_lvl+0x16c/0x1f0 [ 2127.538267][T32213] should_fail_ex+0x512/0x640 [ 2127.538284][T32213] ? fs_reclaim_acquire+0xae/0x150 [ 2127.538303][T32213] should_failslab+0xc2/0x120 [ 2127.538318][T32213] __kmalloc_noprof+0xeb/0x910 [ 2127.538337][T32213] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 2127.538356][T32213] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 2127.538371][T32213] tomoyo_realpath_from_path+0xc2/0x6e0 [ 2127.538388][T32213] ? tomoyo_profile+0x47/0x60 [ 2127.538406][T32213] tomoyo_path_number_perm+0x245/0x580 [ 2127.538418][T32213] ? tomoyo_path_number_perm+0x237/0x580 [ 2127.538433][T32213] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2127.538447][T32213] ? find_held_lock+0x2b/0x80 [ 2127.538477][T32213] ? find_held_lock+0x2b/0x80 [ 2127.538493][T32213] ? hook_file_ioctl_common+0x144/0x410 [ 2127.538514][T32213] ? __fget_files+0x20e/0x3c0 [ 2127.538532][T32213] security_file_ioctl+0x9b/0x240 [ 2127.538548][T32213] __x64_sys_ioctl+0xb7/0x210 [ 2127.538562][T32213] do_syscall_64+0xcd/0xf80 [ 2127.538578][T32213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2127.538589][T32213] RIP: 0033:0x7fa53d18f749 [ 2127.538599][T32213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2127.538610][T32213] RSP: 002b:00007fa53e05b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2127.538621][T32213] RAX: ffffffffffffffda RBX: 00007fa53d3e5fa0 RCX: 00007fa53d18f749 [ 2127.538629][T32213] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003 [ 2127.538636][T32213] RBP: 00007fa53e05b090 R08: 0000000000000000 R09: 0000000000000000 [ 2127.538642][T32213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2127.538649][T32213] R13: 00007fa53d3e6038 R14: 00007fa53d3e5fa0 R15: 00007fffa09462e8 [ 2127.538663][T32213] [ 2127.538668][T32213] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2127.771415][ T7339] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2127.780777][ T7339] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2127.819049][T32211] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7264'. [ 2127.830426][ T7339] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2127.844313][ T7339] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2127.854056][ T7339] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2127.886193][T24989] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2127.896082][T24989] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2127.906912][T24989] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2127.914809][T24989] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2127.922422][T24989] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2127.950244][ T30] audit: type=1400 audit(1767978432.351:2227): avc: denied { mounton } for pid=32215 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 2128.252819][T32215] chnl_net:caif_netlink_parms(): no params data found [ 2128.517771][T32215] bridge0: port 1(bridge_slave_0) entered blocking state [ 2128.538827][T32215] bridge0: port 1(bridge_slave_0) entered disabled state [ 2128.557756][T32215] bridge_slave_0: entered allmulticast mode [ 2128.577932][T32215] bridge_slave_0: entered promiscuous mode [ 2128.605837][T32215] bridge0: port 2(bridge_slave_1) entered blocking state [ 2128.623124][T32215] bridge0: port 2(bridge_slave_1) entered disabled state [ 2128.640932][T32215] bridge_slave_1: entered allmulticast mode [ 2128.658237][T32215] bridge_slave_1: entered promiscuous mode [ 2128.712407][ T30] audit: type=1400 audit(1767978433.111:2228): avc: denied { search } for pid=5482 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2128.781955][T32215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2128.792800][ T30] audit: type=1400 audit(1767978433.141:2229): avc: denied { search } for pid=5482 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2128.827468][T32215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2128.846169][T26642] usb 1-1: USB disconnect, device number 4 [ 2128.846735][ T30] audit: type=1400 audit(1767978433.141:2230): avc: denied { search } for pid=5482 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2128.886199][ T30] audit: type=1400 audit(1767978433.141:2231): avc: denied { read } for pid=5482 comm="dhcpcd" name="n133" dev="tmpfs" ino=14267 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2128.929879][ T30] audit: type=1400 audit(1767978433.141:2232): avc: denied { open } for pid=5482 comm="dhcpcd" path="/run/udev/data/n133" dev="tmpfs" ino=14267 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2128.967352][ T30] audit: type=1400 audit(1767978433.141:2233): avc: denied { getattr } for pid=5482 comm="dhcpcd" path="/run/udev/data/n133" dev="tmpfs" ino=14267 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2129.025016][ T30] audit: type=1400 audit(1767978433.421:2234): avc: denied { read open } for pid=32236 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2129.053908][T32215] team0: Port device team_slave_0 added [ 2129.094926][ T30] audit: type=1400 audit(1767978433.471:2235): avc: denied { getattr } for pid=32236 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2129.104543][T32215] team0: Port device team_slave_1 added [ 2129.147484][ T1084] bridge0: port 5(batadv0) entered disabled state [ 2129.167356][ T1084] macsec0: left allmulticast mode [ 2129.173069][ T1084] macsec0: left promiscuous mode [ 2129.200996][ T1084] bridge0: port 4(macsec0) entered disabled state [ 2129.215712][ T1084] gretap0: left allmulticast mode [ 2129.225566][ T1084] gretap0: left promiscuous mode [ 2129.239018][ T1084] bridge0: port 3(gretap0) entered disabled state [ 2129.239441][T32245] netlink: 512 bytes leftover after parsing attributes in process `syz.0.7270'. [ 2129.257160][ T1084] bridge_slave_1: left allmulticast mode [ 2129.292373][ T1084] bridge_slave_1: left promiscuous mode [ 2129.306916][ T1084] bridge0: port 2(bridge_slave_1) entered disabled state [ 2129.626801][ T1084] bridge_slave_0: left allmulticast mode [ 2129.639541][ T1084] bridge_slave_0: left promiscuous mode [ 2129.650650][ T1084] bridge0: port 1(bridge_slave_0) entered disabled state [ 2129.673646][ T1084] batman_adv: batadv0: Interface deactivated: gretap1 [ 2129.712277][ T30] audit: type=1400 audit(1767978434.111:2236): avc: denied { add_name } for pid=32233 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2130.009508][ T7339] Bluetooth: hci6: command tx timeout [ 2130.317281][ T1084] batman_adv: batadv0: Removing interface: gretap1 [ 2130.968054][ T1084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2130.977730][ T1084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2130.986899][ T1084] bond0 (unregistering): Released all slaves [ 2131.007856][T32215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2131.017200][T32215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2131.054802][T32215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2131.075459][T32215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2131.088280][T32215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2131.129393][T32215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2131.144518][ T1084] tipc: Left network mode [ 2131.327195][T32215] hsr_slave_0: entered promiscuous mode [ 2131.334020][T32215] hsr_slave_1: entered promiscuous mode [ 2131.344874][T32215] debugfs: 'hsr0' already exists in 'hsr' [ 2131.351934][T32215] Cannot create hsr debugfs directory [ 2131.587073][T32280] netlink: 'syz.4.7275': attribute type 1 has an invalid length. [ 2132.085133][ T7339] Bluetooth: hci6: command tx timeout [ 2132.811813][ T1084] hsr_slave_0: left promiscuous mode [ 2132.860740][ T1084] hsr_slave_1: left promiscuous mode [ 2132.866667][ T1084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2132.909991][ T1084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2133.269877][T27638] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 2133.403317][ T1084] team0 (unregistering): Port device team_slave_1 removed [ 2133.421331][T27638] usb 3-1: Using ep0 maxpacket: 32 [ 2133.427809][T27638] usb 3-1: config 0 has an invalid interface number: 223 but max is 0 [ 2133.443073][T27638] usb 3-1: config 0 has an invalid descriptor of length 44, skipping remainder of the config [ 2133.457941][T27638] usb 3-1: config 0 has no interface number 0 [ 2133.465686][ T1084] team0 (unregistering): Port device team_slave_0 removed [ 2133.479137][T27638] usb 3-1: too many endpoints for config 0 interface 223 altsetting 157: 182, using maximum allowed: 30 [ 2133.490339][T27638] usb 3-1: config 0 interface 223 altsetting 157 has 0 endpoint descriptors, different from the interface descriptor's value: 182 [ 2133.503763][T27638] usb 3-1: config 0 interface 223 has no altsetting 0 [ 2133.512821][T27638] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 2133.522520][T27638] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2133.531451][T27638] usb 3-1: Product: syz [ 2133.535612][T27638] usb 3-1: Manufacturer: syz [ 2133.540325][T27638] usb 3-1: SerialNumber: syz [ 2133.549966][T27638] usb 3-1: config 0 descriptor?? [ 2133.951132][T32327] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2134.149373][T26642] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 2134.163232][ T7339] Bluetooth: hci6: command tx timeout [ 2134.204623][ T1084] IPVS: stop unused estimator thread 0... [ 2134.340600][T26642] usb 1-1: Using ep0 maxpacket: 8 [ 2134.363600][T26642] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2134.375576][T26642] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2134.384682][T26642] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2134.428494][T26642] usb 1-1: config 0 descriptor?? [ 2134.479377][T27935] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 2134.633934][T32215] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2134.648292][T32215] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2134.659087][T27935] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 2134.669216][T27935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2134.680103][T32215] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2134.686818][T27935] usb 5-1: Product: syz [ 2134.691650][T27935] usb 5-1: Manufacturer: syz [ 2134.696967][T27935] usb 5-1: SerialNumber: syz [ 2134.711086][T32215] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2134.720368][T27935] usb 5-1: config 0 descriptor?? [ 2134.721647][T26642] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2134.734793][T27935] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 055 [ 2134.896254][T32215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2134.927707][T32215] 8021q: adding VLAN 0 to HW filter on device team0 [ 2134.960838][T15284] bridge0: port 1(bridge_slave_0) entered blocking state [ 2134.967926][T15284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2135.010333][T15284] bridge0: port 2(bridge_slave_1) entered blocking state [ 2135.017433][T15284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2135.120990][T32355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2135.166193][T32355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2135.255726][T27638] kvaser_usb 3-1:0.223: error -ENODEV: Cannot get usb endpoint(s) [ 2135.295093][T27638] usb 3-1: USB disconnect, device number 88 [ 2136.034216][T32215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2136.096462][T32215] veth0_vlan: entered promiscuous mode [ 2136.114282][T32215] veth1_vlan: entered promiscuous mode [ 2136.146717][T32215] veth0_macvtap: entered promiscuous mode [ 2136.157176][T32215] veth1_macvtap: entered promiscuous mode [ 2136.182044][T32215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2136.197907][T32215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2136.214244][ T1084] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2136.231865][ T1084] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2136.249634][ T7339] Bluetooth: hci6: command tx timeout [ 2136.252085][ T1084] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2136.294042][ T1084] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2136.988384][T32329] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 2136.999098][T32329] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 2137.041298][T27935] (null): failure reading functionality [ 2137.061403][T27935] i2c i2c-2: failure reading functionality [ 2137.081555][T27935] i2c i2c-2: connected i2c-tiny-usb device [ 2137.122012][T27935] usb 1-1: USB disconnect, device number 5 [ 2137.150869][ T3065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2137.166808][ T3065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2137.229097][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2137.229842][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 2137.229855][ T30] audit: type=1400 audit(1767978441.621:2246): avc: denied { connect } for pid=32414 comm="syz.0.7291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2137.264025][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2137.325897][ T30] audit: type=1400 audit(1767978441.681:2247): avc: denied { mounton } for pid=32215 comm="syz-executor" path="/root/syzkaller.1gr54E/syz-tmp" dev="sda1" ino=2065 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 2137.395047][ T30] audit: type=1400 audit(1767978441.691:2248): avc: denied { mounton } for pid=32215 comm="syz-executor" path="/root/syzkaller.1gr54E/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 2137.462355][ T30] audit: type=1400 audit(1767978441.691:2249): avc: denied { mounton } for pid=32215 comm="syz-executor" path="/root/syzkaller.1gr54E/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=133364 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 2137.645624][ T30] audit: type=1400 audit(1767978441.931:2250): avc: denied { mounton } for pid=32215 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 2137.760776][T32432] 8021q: adding VLAN 0 to HW filter on device ipvlan7 [ 2138.180119][ T30] audit: type=1400 audit(1767978441.931:2251): avc: denied { mount } for pid=32215 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 2138.180976][T25366] usb 5-1: USB disconnect, device number 55 [ 2138.268293][ T30] audit: type=1400 audit(1767978441.931:2252): avc: denied { mounton } for pid=32215 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 2138.452902][ T30] audit: type=1400 audit(1767978442.851:2253): avc: denied { map } for pid=32438 comm="syz.0.7295" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2138.492989][T26642] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 2138.531141][ T30] audit: type=1400 audit(1767978442.881:2254): avc: denied { execute } for pid=32438 comm="syz.0.7295" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2138.639644][T26642] usb 4-1: device descriptor read/64, error -71 [ 2138.692204][T32444] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7296'. [ 2138.759878][T25366] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 2138.858629][T32447] kvm: pic: non byte write [ 2138.889551][T26642] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 2138.921942][T25366] usb 1-1: Using ep0 maxpacket: 32 [ 2138.929618][T25366] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2138.942636][T25366] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 2138.952892][T25366] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2138.963529][T25366] usb 1-1: Product: syz [ 2138.968816][T25366] usb 1-1: Manufacturer: syz [ 2138.974240][T25366] usb 1-1: SerialNumber: syz [ 2138.983601][T25366] usb 1-1: config 0 descriptor?? [ 2138.993099][T25366] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 2139.028922][T32450] xt_hashlimit: size too large, truncated to 1048576 [ 2139.050625][T26642] usb 4-1: device descriptor read/64, error -71 [ 2139.159700][T26642] usb usb4-port1: attempt power cycle [ 2139.509491][T25366] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 2139.519372][T26642] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 2139.541389][T25366] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 2139.559759][T26642] usb 4-1: device descriptor read/8, error -71 [ 2139.765902][T25366] usb 1-1: USB disconnect, device number 6 [ 2140.289405][T26642] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 2140.309965][T26642] usb 4-1: device descriptor read/8, error -71 [ 2140.429637][T26642] usb usb4-port1: unable to enumerate USB device [ 2140.462724][T24989] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2140.473539][T24989] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2140.485814][T24989] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2140.493582][T24989] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2140.501322][T24989] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2140.929621][T25366] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 2141.086194][T32462] chnl_net:caif_netlink_parms(): no params data found [ 2141.129577][T25366] usb 1-1: Using ep0 maxpacket: 8 [ 2141.140691][T25366] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2141.156179][T32478] netlink: 'syz.2.7306': attribute type 13 has an invalid length. [ 2141.171609][T25366] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2141.180734][T25366] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2141.190838][T25366] usb 1-1: config 0 descriptor?? [ 2141.595261][T25366] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2141.640201][T32462] bridge0: port 1(bridge_slave_0) entered blocking state [ 2141.647303][T32462] bridge0: port 1(bridge_slave_0) entered disabled state [ 2141.664631][T32462] bridge_slave_0: entered allmulticast mode [ 2142.176221][T32462] bridge_slave_0: entered promiscuous mode [ 2142.211325][T32496] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 2142.222982][T32462] bridge0: port 2(bridge_slave_1) entered blocking state [ 2142.238731][T32495] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7308'. [ 2142.247988][T32462] bridge0: port 2(bridge_slave_1) entered disabled state [ 2142.269455][T32462] bridge_slave_1: entered allmulticast mode [ 2142.286290][T32462] bridge_slave_1: entered promiscuous mode [ 2142.483113][T32462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2142.505396][T32462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2142.560413][T24989] Bluetooth: hci4: command tx timeout [ 2142.606258][T32462] team0: Port device team_slave_0 added [ 2142.621240][T32462] team0: Port device team_slave_1 added [ 2142.744611][T32462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2142.752134][T32462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2142.779088][T32462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2142.790739][ T3543] macsec0: left allmulticast mode [ 2142.798069][ T3543] macsec0: left promiscuous mode [ 2142.803683][ T3543] bridge0: port 3(macsec0) entered disabled state [ 2142.812199][ T3543] bridge_slave_1: left allmulticast mode [ 2142.819022][ T3543] bridge_slave_1: left promiscuous mode [ 2142.828779][ T3543] bridge0: port 2(bridge_slave_1) entered disabled state [ 2142.842232][ T3543] bridge_slave_0: left allmulticast mode [ 2142.848019][ T3543] bridge_slave_0: left promiscuous mode [ 2142.858773][ T3543] bridge0: port 1(bridge_slave_0) entered disabled state [ 2143.300109][ T3543] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2143.311347][ T3543] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2143.324834][ T3543] bond0 (unregistering): Released all slaves [ 2143.341985][T32462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2143.348963][T32462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2143.376677][T32462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2143.518992][T32462] hsr_slave_0: entered promiscuous mode [ 2143.525993][T32462] hsr_slave_1: entered promiscuous mode [ 2143.532204][T32462] debugfs: 'hsr0' already exists in 'hsr' [ 2143.537920][T32462] Cannot create hsr debugfs directory [ 2143.715296][T32462] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2143.726115][T32462] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2143.738507][T32462] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2143.755067][T32462] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2143.797972][T32469] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2143.815448][T32469] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 2143.907003][T25366] usb 1-1: USB disconnect, device number 7 [ 2143.989003][ T3543] hsr_slave_0: left promiscuous mode [ 2143.997005][ T3543] hsr_slave_1: left promiscuous mode [ 2144.003369][ T3543] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2144.011375][ T3543] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2144.382461][ T3543] team0 (unregistering): Port device team_slave_1 removed [ 2144.416041][ T3543] team0 (unregistering): Port device team_slave_0 removed [ 2144.707872][T32462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2144.725223][T32462] 8021q: adding VLAN 0 to HW filter on device team0 [ 2144.743012][T15284] bridge0: port 1(bridge_slave_0) entered blocking state [ 2144.750080][T15284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2144.761035][T15284] bridge0: port 2(bridge_slave_1) entered blocking state [ 2144.768133][T15284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2144.985545][T32462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2145.224757][T32462] veth0_vlan: entered promiscuous mode [ 2145.239463][T32462] veth1_vlan: entered promiscuous mode [ 2145.272740][T32462] veth0_macvtap: entered promiscuous mode [ 2145.282449][T32462] veth1_macvtap: entered promiscuous mode [ 2145.303265][T32462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2145.323910][T32462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2145.337925][ T3543] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2145.349912][ T3543] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2145.393510][ T3543] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2145.406322][ T3543] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2145.500883][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2145.508707][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2145.549089][ T1084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2145.567293][ T1084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2158.481374][ T30] audit: type=1400 audit(1767978462.881:2255): avc: denied { recv } for pid=3065 comm="kworker/u8:11" saddr=10.128.0.169 src=43588 daddr=10.128.0.255 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2159.843858][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2221.283281][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2282.734642][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2294.239534][ T31] INFO: task kworker/1:3:5925 blocked for more than 143 seconds. [ 2294.247382][ T31] Tainted: G L syzkaller #0 [ 2294.253983][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2294.262693][ T31] task:kworker/1:3 state:D stack:22344 pid:5925 tgid:5925 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2294.274726][ T31] Workqueue: usb_hub_wq hub_event [ 2294.279806][ T31] Call Trace: [ 2294.283075][ T31] [ 2294.285983][ T31] ? __schedule+0x10b9/0x6150 [ 2294.290728][ T31] __schedule+0x1139/0x6150 [ 2294.295228][ T31] ? __lock_acquire+0x436/0x2890 [ 2294.300445][ T31] ? __pfx___schedule+0x10/0x10 [ 2294.305308][ T31] ? find_held_lock+0x2b/0x80 [ 2294.310059][ T31] ? schedule+0x2d7/0x3a0 [ 2294.314398][ T31] schedule+0xe7/0x3a0 [ 2294.318474][ T31] usb_kill_urb+0x253/0x320 [ 2294.323167][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 2294.328189][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2294.334329][ T31] usb_start_wait_urb+0x250/0x4e0 [ 2294.339368][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 2294.344899][ T31] ? __asan_memset+0x23/0x50 [ 2294.349683][ T31] usb_control_msg+0x326/0x4a0 [ 2294.354480][ T31] ? __pfx_usb_control_msg+0x10/0x10 [ 2294.359807][ T31] get_bMaxPacketSize0.constprop.0+0xd0/0x1f0 [ 2294.365874][ T31] hub_port_init+0x690/0x3a90 [ 2294.370618][ T31] hub_event+0x2ee7/0x52f0 [ 2294.375052][ T31] ? __pfx_hub_event+0x10/0x10 [ 2294.379860][ T31] ? free_object_list.isra.0+0x90/0x2a0 [ 2294.385428][ T31] ? rcu_is_watching+0x12/0xc0 [ 2294.390237][ T31] process_one_work+0x9ba/0x1b20 [ 2294.395179][ T31] ? __pfx_psi_avgs_work+0x10/0x10 [ 2294.400346][ T31] ? __pfx_process_one_work+0x10/0x10 [ 2294.405864][ T31] ? assign_work+0x1a0/0x250 [ 2294.410523][ T31] worker_thread+0x6c8/0xf10 [ 2294.415120][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2294.420251][ T31] kthread+0x3c5/0x780 [ 2294.424316][ T31] ? __pfx_kthread+0x10/0x10 [ 2294.428881][ T31] ? rcu_is_watching+0x12/0xc0 [ 2294.433654][ T31] ? __pfx_kthread+0x10/0x10 [ 2294.438241][ T31] ret_from_fork+0x983/0xb10 [ 2294.442861][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2294.447981][ T31] ? __switch_to+0x7af/0x10d0 [ 2294.452728][ T31] ? __pfx_kthread+0x10/0x10 [ 2294.457316][ T31] ret_from_fork_asm+0x1a/0x30 [ 2294.462273][ T31] [ 2294.465309][ T31] [ 2294.465309][ T31] Showing all locks held in the system: [ 2294.473049][ T31] 1 lock held by khungtaskd/31: [ 2294.477908][ T31] #0: ffffffff8e3c96a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 2294.487801][ T31] no locks held by klogd/5176. [ 2294.492652][ T31] 2 locks held by getty/5575: [ 2294.497331][ T31] #0: ffff8880322a70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 2294.507324][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510 [ 2294.517494][ T31] 5 locks held by kworker/1:3/5925: [ 2294.522843][ T31] #0: ffff88801fef1548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 2294.533668][ T31] #1: ffffc90005387c90 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 2294.545020][ T31] #2: ffff8881467d4198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x52f0 [ 2294.553937][ T31] #3: ffff8881467d7518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2b87/0x52f0 [ 2294.566364][ T31] #4: ffff88802a4a1568 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2bb0/0x52f0 [ 2294.576284][ T31] 5 locks held by kworker/u8:21/15284: [ 2294.581843][ T31] [ 2294.584163][ T31] ============================================= [ 2294.584163][ T31] [ 2294.592597][ T31] NMI backtrace for cpu 1 [ 2294.592611][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2294.592635][ T31] Tainted: [L]=SOFTLOCKUP [ 2294.592642][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2294.592652][ T31] Call Trace: [ 2294.592659][ T31] [ 2294.592665][ T31] dump_stack_lvl+0x116/0x1f0 [ 2294.592693][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 2294.592721][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2294.592742][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 2294.592773][ T31] sys_info+0x133/0x180 [ 2294.592798][ T31] watchdog+0xe66/0x1180 [ 2294.592824][ T31] ? rcu_is_watching+0x12/0xc0 [ 2294.592842][ T31] ? __pfx_watchdog+0x10/0x10 [ 2294.592859][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 2294.592884][ T31] ? __kthread_parkme+0x19e/0x250 [ 2294.592902][ T31] ? __pfx_watchdog+0x10/0x10 [ 2294.592922][ T31] kthread+0x3c5/0x780 [ 2294.592943][ T31] ? __pfx_kthread+0x10/0x10 [ 2294.592966][ T31] ? rcu_is_watching+0x12/0xc0 [ 2294.592983][ T31] ? __pfx_kthread+0x10/0x10 [ 2294.593004][ T31] ret_from_fork+0x983/0xb10 [ 2294.593025][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2294.593052][ T31] ? __switch_to+0x7af/0x10d0 [ 2294.593075][ T31] ? __pfx_kthread+0x10/0x10 [ 2294.593096][ T31] ret_from_fork_asm+0x1a/0x30 [ 2294.593135][ T31] [ 2294.593141][ T31] Sending NMI from CPU 1 to CPUs 0: [ 2294.732884][ C0] NMI backtrace for cpu 0 [ 2294.732901][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 2294.732921][ C0] Tainted: [L]=SOFTLOCKUP [ 2294.732926][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2294.732934][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 2294.732955][ C0] Code: a6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 29 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 2294.732968][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 2294.732981][ C0] RAX: 000000000fdfb9f1 RBX: 0000000000000000 RCX: ffffffff8b7836d9 [ 2294.732990][ C0] RDX: 0000000000000000 RSI: ffffffff8dace187 RDI: ffffffff8bf2b380 [ 2294.732999][ C0] RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d [ 2294.733008][ C0] R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000 [ 2294.733017][ C0] R13: ffffffff8e097b40 R14: ffffffff9088b8d0 R15: 0000000000000000 [ 2294.733026][ C0] FS: 0000000000000000(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 2294.733040][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2294.733050][ C0] CR2: 0000560a344b3660 CR3: 000000000e184000 CR4: 00000000003526f0 [ 2294.733059][ C0] Call Trace: [ 2294.733064][ C0] [ 2294.733069][ C0] default_idle+0x13/0x20 [ 2294.733089][ C0] default_idle_call+0x6c/0xb0 [ 2294.733108][ C0] do_idle+0x38d/0x510 [ 2294.733129][ C0] ? __pfx_do_idle+0x10/0x10 [ 2294.733150][ C0] cpu_startup_entry+0x4f/0x60 [ 2294.733170][ C0] rest_init+0x16b/0x2b0 [ 2294.733181][ C0] ? acpi_subsystem_init+0x133/0x180 [ 2294.733195][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 2294.733210][ C0] start_kernel+0x3ef/0x4d0 [ 2294.733230][ C0] x86_64_start_reservations+0x18/0x30 [ 2294.733251][ C0] x86_64_start_kernel+0x130/0x190 [ 2294.733264][ C0] common_startup_64+0x13e/0x148 [ 2294.733285][ C0] [ 2294.924548][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2294.931373][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2294.942019][ T31] Tainted: [L]=SOFTLOCKUP [ 2294.946315][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2294.956342][ T31] Call Trace: [ 2294.959595][ T31] [ 2294.962500][ T31] dump_stack_lvl+0x3d/0x1f0 [ 2294.967086][ T31] vpanic+0x640/0x6f0 [ 2294.971045][ T31] panic+0xca/0xd0 [ 2294.974739][ T31] ? __pfx_panic+0x10/0x10 [ 2294.979126][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2294.985084][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 2294.991231][ T31] ? nmi_trigger_cpumask_backtrace+0x2be/0x300 [ 2294.997375][ T31] ? watchdog+0xe83/0x1180 [ 2295.001777][ T31] ? watchdog+0xe76/0x1180 [ 2295.006181][ T31] watchdog+0xe94/0x1180 [ 2295.010409][ T31] ? rcu_is_watching+0x12/0xc0 [ 2295.015154][ T31] ? __pfx_watchdog+0x10/0x10 [ 2295.019814][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 2295.025000][ T31] ? __kthread_parkme+0x19e/0x250 [ 2295.030011][ T31] ? __pfx_watchdog+0x10/0x10 [ 2295.034672][ T31] kthread+0x3c5/0x780 [ 2295.038725][ T31] ? __pfx_kthread+0x10/0x10 [ 2295.043302][ T31] ? rcu_is_watching+0x12/0xc0 [ 2295.048047][ T31] ? __pfx_kthread+0x10/0x10 [ 2295.052624][ T31] ret_from_fork+0x983/0xb10 [ 2295.057199][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2295.062295][ T31] ? __switch_to+0x7af/0x10d0 [ 2295.066960][ T31] ? __pfx_kthread+0x10/0x10 [ 2295.071538][ T31] ret_from_fork_asm+0x1a/0x30 [ 2295.076299][ T31] [ 2295.079601][ T31] Kernel Offset: disabled [ 2295.083903][ T31] Rebooting in 86400 seconds..