last executing test programs: 11m8.333688409s ago: executing program 1 (id=406): r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x4, 0x309000) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) sigaltstack(&(0x7f0000000100)={&(0x7f0000000040)=""/137, 0x3, 0x89}, &(0x7f0000000200)={&(0x7f0000000140)=""/149, 0x0, 0x95}) sigaltstack(&(0x7f0000000340)={&(0x7f0000000240)=""/234, 0x80000000, 0xea}, &(0x7f0000000400)={&(0x7f0000000380)=""/89, 0x0, 0x59}) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r0, 0xc008aec1, &(0x7f0000000440)={0x2, 0x0, [{0xc0000000, 0x3, 0x0, 0x9, 0xca4, 0x4, 0x3}, {0x40000001, 0x133, 0x3, 0x5, 0x3, 0x6, 0x7}]}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000500)='blkio.bfq.io_service_time\x00', 0x0, 0x0) read(r2, &(0x7f0000000540)=""/152, 0x98) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x48, 0x2, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) socket$pptp(0x18, 0x1, 0x2) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$BLKGETZONESZ(r2, 0x80041284, &(0x7f00000007c0)=0x1ad) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000800)=0xffff, 0x4) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1, 0x0) ioctl$PPPIOCGDEBUG(r6, 0x80047441, &(0x7f0000000880)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r2) sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000200}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r7, 0x0, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [""]}, 0x1c}}, 0x40081) ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82307201, &(0x7f0000000a00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sigaltstack(&(0x7f0000000d40)={&(0x7f0000000c40)=""/209, 0x80000000, 0xd1}, &(0x7f0000000e00)={&(0x7f0000000d80)=""/108, 0x0, 0x6c}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e80), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_RESP(r8, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x60, r9, 0x800, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x1}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x4}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x9}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x805) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000fc0)={0x7ff, 0x1, 0x7, 0xff, 0x581e, 0x9}) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001040), r8) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x20, r10, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0xc0) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000001180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r8, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x24, r10, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040004}, 0x48000) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f00000016c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001680)={&(0x7f0000001300)={0x36c, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x84}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK={0x124, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x90eb}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xebd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xed3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfacd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x11d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6927b3c0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0xf0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x24}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdd5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x75ca}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7cb975c8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3b05}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x25a8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8927}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'wlan0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller0\x00'}}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}]}, 0x36c}, 0x1, 0x0, 0x0, 0x14010}, 0x5) 11m7.640245883s ago: executing program 1 (id=410): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)={0x7, [0x8, 0x3, 0x4, 0xce, 0x5, 0x57a, 0xd747]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f00000000c0)=[@cpuid={0x64, 0x18, {0x1, 0x8}}], 0x18}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000140)=@x86={0x5, 0x5, 0x7, 0x0, 0xa, 0x84, 0x5, 0x1, 0x7, 0x8, 0x4, 0x67, 0x0, 0x9, 0x400, 0x5, 0x3, 0x8, 0x1d, '\x00', 0x9, 0x9}) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r3, 0xc008aec1, &(0x7f0000000180)={0xa, 0x0, [{0x7, 0x6, 0x0, 0x3, 0xfffffffd, 0x1c000, 0x2}, {0x80000008, 0x9, 0x1, 0xffff, 0x1, 0x5e3, 0x5}, {0xd, 0xb7, 0x0, 0x8, 0x9b98, 0x3, 0x4}, {0xd, 0xa9, 0x1, 0x8dfe, 0x1, 0xaaa7, 0x3}, {0x4, 0x8, 0x3, 0x8000, 0x5, 0x6, 0x95}, {0xc0000001, 0xa, 0x1, 0x8, 0x0, 0x5, 0x200}, {0x6, 0x400, 0x3, 0x10000, 0x3, 0x1, 0x42}, {0x80000019, 0x0, 0x4, 0xa3, 0x5, 0x7fffffff, 0x100}, {0xc0000001, 0xe63, 0x2, 0x7fff, 0x2, 0x4, 0x2}, {0xb, 0x6, 0x4, 0x7, 0x3f5, 0x3, 0x1}]}) mmap$KVM_VCPU(&(0x7f0000001000/0x3000)=nil, 0x0, 0x2, 0x13, r2, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11m5.942749035s ago: executing program 1 (id=413): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x244, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11m2.857595388s ago: executing program 1 (id=423): openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0xc8001, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="09000000070000000000010003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f0000001bc0)={@link_local, @random="0b1b04f62e78", @val={@val={0x88a8, 0x4, 0x0, 0x2}, {0x8100, 0x4, 0x0, 0x3}}, {@generic={0x201, "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"}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8}, 0x0, &(0x7f00000001c0)=r8}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r8}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8, @ANYRES16=r9], 0x0) 10m59.476020546s ago: executing program 1 (id=433): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) setrlimit(0xb, &(0x7f0000000000)={0x5, 0x4}) r0 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002840)={'wpan0\x00'}) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x10}) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x7, 0x0, &(0x7f00000000c0)=0x17) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000180)=0x3) ioctl$TCFLSH(r4, 0x540b, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000034c0), 0x0, 0x700, 0x0) acct(&(0x7f0000000080)='./cgroup\x00') r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000563000/0x1000)=nil, 0x1000, 0x2000002, 0x4010, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0xc0, 0x0, 0x0, 0x4) 10m58.763467346s ago: executing program 1 (id=434): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000340)="71e67a15cd", 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x80108907, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1000000, 0xffffffffffffffff, 0x40c}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408048000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="000000900a008000b703000008"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000400)=r4, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4cc, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x404, 0x3d8, 0x3d8, 0x404, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x28c, 0x2d4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x3f, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xc8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x528) sendmsg$kcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="d80000001a0081044e81f782db4cb904021d0800fe0055a1150015000200142603600e12080005007a010401a8001600200002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457fffffffffffff0001bace8017cbec4c2ee5a7cef4090000001fb79164d322fe7c9f8775d3f2d5d0683f5aeb4edbb57a5025ccca9e00360db785262f3d40fad95667e006dcdf61951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a94100000000000000000000000000d4da15", 0xd8}], 0x1}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r7, 0x110, 0x6, 0x0, &(0x7f0000000280)=0x61) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) write$rfkill(r9, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5800000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a24001280110001006272696467655f736c617665000000000c09058006001f0009000000000000000000004cd05a90b061"], 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000140)={'wlan1\x00', 0xf}) 10m43.080578611s ago: executing program 32 (id=434): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000340)="71e67a15cd", 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x80108907, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1000000, 0xffffffffffffffff, 0x40c}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408048000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="000000900a008000b703000008"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000400)=r4, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4cc, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x404, 0x3d8, 0x3d8, 0x404, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x28c, 0x2d4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x3f, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xc8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x528) sendmsg$kcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="d80000001a0081044e81f782db4cb904021d0800fe0055a1150015000200142603600e12080005007a010401a8001600200002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457fffffffffffff0001bace8017cbec4c2ee5a7cef4090000001fb79164d322fe7c9f8775d3f2d5d0683f5aeb4edbb57a5025ccca9e00360db785262f3d40fad95667e006dcdf61951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a94100000000000000000000000000d4da15", 0xd8}], 0x1}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r7, 0x110, 0x6, 0x0, &(0x7f0000000280)=0x61) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) write$rfkill(r9, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5800000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a24001280110001006272696467655f736c617665000000000c09058006001f0009000000000000000000004cd05a90b061"], 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000140)={'wlan1\x00', 0xf}) 24.836525718s ago: executing program 0 (id=2539): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) add_key(&(0x7f0000000000)='big_key\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) syz_open_dev$media(0x0, 0x33ac98ac, 0x0) timer_create(0x7, 0x0, &(0x7f0000001ac0)) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000500)={{0x81}, {0x4, 0xb}, 0x5, 0x1, 0x3}) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r5, 0xc10c5541, &(0x7f00000001c0)={0x8, 0xc11, 0x1}) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000100)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 24.013632858s ago: executing program 0 (id=2542): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x200681, 0x0) ioctl$COMEDI_CMD(r2, 0x80506409, &(0x7f0000000180)={0x0, 0x10000, 0x4, 0x4, 0x1, 0xfffff801, 0x40, 0x0, 0x160, 0x1003, 0xffffffff, 0x6, 0x0, 0x0, 0x0}) (async) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b040003"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800e00010069703665727370616e0000002c0002801400050000000000000000000000000000000002050016000200000004001200050017"], 0x60}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002380)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r5, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES16=r1], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) mremap(&(0x7f0000804000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000373000/0x4000)=nil) (async, rerun: 32) sendto$packet(r1, &(0x7f0000000600)="05d936277c6f54220002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62", 0x5b4, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r5, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) (async, rerun: 32) ioperm(0x7, 0x449, 0x7ff) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async, rerun: 64) syz_clone3(&(0x7f0000001240)={0x2a00d3000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0], 0x1}, 0x58) (rerun: 64) ioctl$UFFDIO_REGISTER(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) 22.211752491s ago: executing program 0 (id=2547): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffd2a9dc6da626c0e21677ffaaaaaaaaaa2b86dd6700000100513afffe880000000000000000000000000201ff02000000000000000000000000000189009078000000002001000000000000000000000001fe800000000000000000000000000038220560aeb59d3fb13258c6f29dd7eed9c5aaa04a18f74d2a89000000000000"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = mq_open(&(0x7f0000000000)='e_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000040000000, 0x4, 0x4, 0x9}) mq_timedsend(r2, 0x0, 0x0, 0x5, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x18}) mq_timedreceive(r2, &(0x7f0000000140)=""/154, 0x9a, 0x0, &(0x7f0000000040)={0x77359400}) creat(&(0x7f00000001c0)='./file0\x00', 0x16c) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x1) ioctl$TCSETA(r4, 0x8925, &(0x7f0000000100)={0x2, 0x0, 0x1, 0x0, 0x13, "31f40000f7ece2f4"}) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ZERO(r5, 0x0, 0x48f, &(0x7f0000000740)={0x11, @loopback, 0x4e24, 0x4, 'dh\x00', 0x39, 0x7ff, 0x22}, 0x2c) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) write$UHID_CREATE2(r7, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/259], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r7, 0x1000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) read(r1, 0x0, 0x0) add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) close_range(r6, 0xffffffffffffffff, 0x0) 13.376494633s ago: executing program 3 (id=2563): socket(0x10, 0x3, 0xa) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$kvm(0xffffffffffffff9c, 0x0, 0x8082, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x25}, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x24, 0x9f, 0x3, 0x0, [{@loopback=0x7f000089}, {@remote, 0xfffffffd}, {@private}, {@dev}]}]}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) socket(0x1000000010, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0xb2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x9a, 0xfffffffe}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r5, 0x2) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$VFAT_IOCTL_READDIR_BOTH(r6, 0x82307201, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) unshare(0x42000000) sendfile(r0, r0, 0x0, 0x7fffffffffffffff) 12.131945892s ago: executing program 5 (id=2568): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000300)={0x90000011}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000009c0)={"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"}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r5 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) setsockopt$sock_timeval(r5, 0x1, 0x43, &(0x7f00000000c0)={0x0, 0xea60}, 0x10) 11.118188247s ago: executing program 5 (id=2570): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) add_key(&(0x7f0000000000)='big_key\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) syz_open_dev$media(0x0, 0x33ac98ac, 0x0) timer_create(0x7, 0x0, &(0x7f0000001ac0)) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000500)={{0x81}, {0x4, 0xb}, 0x5, 0x1, 0x3}) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r5, 0xc10c5541, &(0x7f00000001c0)={0x8, 0xc11, 0x1}) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000100)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 9.419640402s ago: executing program 0 (id=2572): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x20000050) sendmsg$NFT_BATCH(r0, 0x0, 0x40) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0xfffffd10, &(0x7f0000000200)=0x2000000000006) shutdown(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000004c00)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8080) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000001340)={0x1, 0x0, [{0x200, 0x5, 0x1, 0x0, @adapter={0x5, 0x3, 0x3, 0xff, 0xb1e0}}]}) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 8.898662963s ago: executing program 5 (id=2573): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES32], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcdb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f00000001c0)=0x1) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f00000000c0)=0x7) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r8 = syz_open_dev$evdev(0x0, 0x2, 0x822b01) ioctl$EVIOCGKEYCODE(r8, 0x80084504, &(0x7f0000000100)=""/182) syz_open_dev$usbmon(&(0x7f0000002d80), 0x9929, 0x2200) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMKSA(r9, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00 ', @ANYRES16=0x0], 0x6c}, 0x1, 0x0, 0x0, 0x8040}, 0x4048001) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000100)={0x1011, 0x0, 0x1011, 0x109, 0x0, 0x3a6e, 0x66a, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xd, 0x3, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.883821081s ago: executing program 4 (id=2574): socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$uinput(0xffffff9c, &(0x7f0000000180), 0x802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000940)={0x0, 0xb5, 0x6be7, 0x1}) writev(r2, &(0x7f0000003740)=[{&(0x7f0000001440)='d', 0x1}], 0x1) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000240)=0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r3, 0x0, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = add_key$user(0x0, 0x0, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) keyctl$KEYCTL_WATCH_KEY(0x20, r5, 0xffffffffffffffff, 0x100000000000f7) keyctl$revoke(0x3, r5) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x3f46137792f68265) ioctl$AUTOFS_IOC_ASKUMOUNT(r6, 0xc0089364, &(0x7f0000001240)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_DESTROY(r0, 0x5502) 7.942410188s ago: executing program 5 (id=2575): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffd2a9dc6da626c0e21677ffaaaaaaaaaa2b86dd6700000100513afffe880000000000000000000000000201ff02000000000000000000000000000189009078000000002001000000000000000000000001fe800000000000000000000000000038220560aeb59d3fb13258c6f29dd7eed9c5aaa04a18f74d2a89000000000000"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = mq_open(&(0x7f0000000000)='e_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000040000000, 0x4, 0x4, 0x9}) mq_timedsend(r2, 0x0, 0x0, 0x5, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x18}) mq_timedreceive(r2, &(0x7f0000000140)=""/154, 0x9a, 0x0, &(0x7f0000000040)={0x77359400}) creat(&(0x7f00000001c0)='./file0\x00', 0x16c) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x1) socket$inet_sctp(0x2, 0x5, 0x84) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) write$UHID_CREATE2(r6, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r6, 0x1000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) read(r1, 0x0, 0x0) add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) close_range(r5, 0xffffffffffffffff, 0x0) 7.771970044s ago: executing program 4 (id=2576): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd03}, 0x20004040) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00'}, 0x18) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000006900030500000000000000000000000000006fb7b91bb60000"], 0x18}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/dev_mcast\x00') pread64(r2, &(0x7f0000000540)=""/226, 0xe2, 0x791f) r5 = io_uring_setup(0xd71, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00220d000000170b27e38da2b608b7776c3dcad83134251960aa19e0d2f9e61bbebb943c5638fbc9b2c57fb116374a133adce54f3a7a2d68b02d207aec517a2ca9918722f509419d7b8f5a18f7631ec84ff7ce762bb5d0bea923fce2a25a65662f2cf3fd7c77a21c68d8b123b29f17887a287dc3c4de446601d34d51"], 0x0}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x5c}}, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/136, 0x88}], 0x1, 0x5, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) 7.648233016s ago: executing program 2 (id=2578): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r0, 0x0, 0x0, 0x0) 7.527559999s ago: executing program 2 (id=2579): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r1, 0x3b70, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x1, 0x30bc6287) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x531702, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TCGETS(r2, 0x8910, &(0x7f00000002c0)) r3 = syz_open_procfs(0x0, 0x0) getdents(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="18649a2e80000000010000000800000000000000277068453b2aa9239bd670ce5adecb66148ed8eb808eeaca138a7435db09005427f92941a651b3256501c7bd29cadbaab002a7cd4de0d03e940a65dd3a76c6039121", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={0x0, 0x80000000}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0xc04c000}, 0x0) sendmsg$inet(r0, 0x0, 0x24024051) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x0, 0x1}, 0x8) 7.245458625s ago: executing program 3 (id=2580): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x3, &(0x7f0000000400)) r3 = syz_io_uring_setup(0x110, &(0x7f0000000380)={0x0, 0x10, 0x0, 0x1, 0x80}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=[r6], 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000340)={'rti800\x00', [0xfffffffa, 0xfffffffa, 0x2, 0x40400, 0x1, 0x6, 0x9, 0x7, 0x209, 0x5, 0x6, 0x1600, 0x6, 0x1, 0x9, 0xe1cb, 0x6, 0x4, 0x6, 0x8, 0x80000089, 0xfffffffc, 0x2f, 0xfffffff5, 0xffffead7, 0x3, 0x3c, 0x108, 0x2, 0x8000000, 0x6]}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) 5.728208673s ago: executing program 3 (id=2581): r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_enter\x00'}, 0x18) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c0c8) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x4, {0x2}, 0xfe}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000000)=0x1) read$msr(0xffffffffffffffff, &(0x7f000001c040)=""/102399, 0x18fff) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x2000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x62, 0x8001, 0x2, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x2}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000317000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x600c015, &(0x7f0000b63fe4)={0xa, 0x2, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=@newtfilter={0xec, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, {0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x8c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x80, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x1c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xfffffffb}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x54, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xfff}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0xf8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x7f}]}]}, @TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x6}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0x5f}, @TCA_RATE={0x6, 0x5, {0x0, 0xe}}, @TCA_RATE={0x6, 0x5, {0x0, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_CHAIN={0x8, 0xb, 0xc000}]}, 0xec}, 0x1, 0xf0ffffffffffff}, 0x0) 5.723210614s ago: executing program 2 (id=2582): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000000)=0xf, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) inotify_init() r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') pread64(r1, &(0x7f0000000180)=""/15, 0xfffffe9c, 0xb6) r2 = socket$inet6(0xa, 0x5, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000080)={0x5c, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @enc_lim={0x4, 0x1, 0x8}]}, 0x10) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.124979953s ago: executing program 2 (id=2583): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x22400, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@newtfilter={0xec, 0x2c, 0x1, 0x70bd24, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xfff3, 0xffe0}, {}, {0xfffb, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0xb1a}, @TCA_FLOW_ADDEND={0x8, 0x5, 0xc}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x10, 0xc}}]}}, @TCA_CHAIN={0x8, 0xb, 0xbdaa}, @filter_kind_options=@f_flow={{0x9}, {0x8c, 0x2, [@TCA_FLOW_EMATCHES={0x14, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x70}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}]}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x2}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7}, @TCA_FLOW_POLICE={0x5c, 0xa, 0x0, 0x1, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x948e, 0x4, 0xfffffffe, 0x101, 0xf9d, {0x9a, 0x1, 0x0, 0x375, 0x9, 0xf}, {0x76, 0x1, 0x1, 0xa, 0x8, 0x5}, 0x0, 0x10000, 0x2}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}]}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x1}]}}]}, 0xec}, 0x1, 0x0, 0x0, 0x48848}, 0x4040050) 3.709113516s ago: executing program 4 (id=2584): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x1d, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xe}, [@jmp={0x5, 0x0, 0x4, 0x7, 0x3, 0xffffffffffffffff}, @generic={0x5, 0x3, 0x4, 0x2, 0xa2}, @jmp={0x5, 0x1, 0xc, 0x2, 0x9, 0xfffffffffffffff8, 0x8}, @call={0x85, 0x0, 0x0, 0x19}, @tail_call]}, &(0x7f00000000c0)='GPL\x00', 0x800, 0xd1, &(0x7f0000000380)=""/209, 0x41100, 0x21, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0xb, 0xfffffffb, 0x7ff}, 0x10, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000240)=[0x1, 0x1], &(0x7f00000002c0)=[{0x0, 0x1, 0x6}], 0x10, 0x9}, 0x94) fcntl$setstatus(r0, 0x4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000800)={&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000640)=""/105, 0x69}, {&(0x7f00000006c0)=""/69, 0x45}], 0x2, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x68}, 0x20c2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x20020, &(0x7f0000000300)='upperdir') getsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000004cc0)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000004dc0)=0xe8) fcntl$getownex(r10, 0x10, &(0x7f0000004e00)={0x0, 0x0}) r17 = getpid() sched_setscheduler(r17, 0x2, &(0x7f0000000040)=0x6) getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000004e40)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000004f40)=0xe8) stat(&(0x7f0000004f80)='./file1/../file0\x00', &(0x7f0000004fc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r21 = openat$cgroup_freezer_state(r9, &(0x7f0000005040), 0x2, 0x0) r22 = openat$cgroup_int(r11, &(0x7f0000005080)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r23 = syz_open_dev$I2C(&(0x7f0000005540), 0x4e2f, 0x4000) r24 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r24, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r24, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="02e700f8ff010000"], 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r24, 0x84, 0x16, &(0x7f0000000040)={0x2, [0xc, 0x6]}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000005580)={r8}) r26 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r27 = openat$dsp(0xffffffffffffff9c, &(0x7f00000055c0), 0x80080, 0x0) r28 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000005a80)={0x6, 0x14, &(0x7f0000005780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xef37, 0x0, 0x0, 0x0, 0x6}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x80000001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}, @func, @alu={0x5, 0x0, 0x9, 0x4, 0x5, 0x30, 0x1}]}, &(0x7f0000005840)='GPL\x00', 0x2, 0x89, &(0x7f0000005880)=""/137, 0x40f00, 0x6c, '\x00', r18, 0x25, r6, 0x8, &(0x7f0000005940)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000005980)={0x4, 0xd, 0x81, 0x5}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000059c0)=[r11, r8, r7], &(0x7f0000005a00)=[{0x4, 0x2, 0x0, 0xb}, {0x3, 0x3, 0xd, 0xc}, {0x1, 0x3, 0x9, 0x7}, {0x0, 0x2, 0x2}, {0x4, 0x3, 0xe, 0x8}, {0x1, 0x1, 0x10, 0x7}, {0x0, 0x4, 0x5, 0x3}], 0x10, 0x2}, 0x94) sendmmsg$unix(r11, &(0x7f0000007d80)=[{{&(0x7f0000000840)=@file={0xa9d8e0be89b7ddbe, './file0\x00'}, 0x6e, &(0x7f0000002940)=[{&(0x7f00000008c0)="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", 0x1000}, {&(0x7f00000018c0)="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", 0x1000}, {&(0x7f00000028c0)="04af4aabc2c21ab66b62b743c1d6990929a088ef4bc0c7b53efb867976c77425eda155c6e584cbdf708ec757aed2bef88af878f844612f34c5786fc012d8363cb45d1a40b440141d46716834d7", 0x4d}], 0x3, 0x0, 0x0, 0x4008810}}, {{&(0x7f0000002980)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000004c40)=[{&(0x7f0000002a00)="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", 0x1000}, {&(0x7f0000003a00)="f65eb4b923c65b3a449a2c9bd7e025f1ee1db815f300472f", 0x18}, {&(0x7f0000003a40)="2e0df4b7610a0b0ed22accfcd32fc8799e48819b5d435f1a853a9aa55f999dc6f15cabf8bb9aa2eec9447d6acf202f6aa73074810c52d75206ff3aaa7e8c95ca064e1b0f155da71e456e21bf6272ddf451be7d4c91c6e1b1328e25a3647eb2d52d5c7fdd64973826baffe3e864b934e02d0a46bf9413e21b7cbf6644fa081277513b32be7259b586714b5f0bc1b67f8da5adcf10f235055c", 0x98}, {&(0x7f0000003b00)="549e505fef738b9bc0588be58a6f914375d303e3e04903661e526c758d19ac779101047a902bedfa2789a344362ebae9c5a4c8ce64c9ef86ca9898bfb6bc7c15", 0x40}, {&(0x7f0000003b40)="2f0b96ebfa1616", 0x7}, {&(0x7f0000003b80)="f41d06dfffcbf0d86b1ac0390ff73a753ddb7b386aef7463e9fa18501eb4f817763d428b65c7b793bc41684ff590f658ffaf386576691674c7362f314586d76d489489c512a38de5efcc3e7e8aa66d6e0ad6cc853a97ce1bef7e54d69a1b83093338a5", 0x63}, {&(0x7f0000003c00)="25f1e8e720d1620e38e0fe59a579de0f7fc7b4805ff3d882fdf0508f197b441e53d4012eadfc328fd7b992fa509954717f", 0x31}, {&(0x7f0000003c40)="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", 0x1000}], 0x8, &(0x7f00000050c0)=[@cred={{0x1c, 0x1, 0x2, {r3, r15, r14}}}, @cred={{0x1c, 0x1, 0x2, {r16, r4, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, r14}}}, @cred={{0x1c, 0x1, 0x2, {r17, r13, r5}}}, @cred={{0x1c, 0x1, 0x2, {r12, r19, r14}}}, @cred={{0x1c, 0x1, 0x2, {r3, r20, r14}}}, @rights={{0x20, 0x1, 0x1, [r7, r21, r22, r2]}}, @cred={{0x1c, 0x1, 0x2, {r12, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}], 0x120}}, {{&(0x7f0000005200)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000005500)=[{&(0x7f0000005280)="a7633ec2aa5fcf699495ac9e45b97926abf4d17f0b", 0x15}, {&(0x7f00000052c0)="7fd31aae688939d38a9829973fe4c58d2c3e1bde5e6c92f7aa4661f947c899f8e3ffca52974dd557f8415a9fddfd0cbd5bec3489902640e00a8779a8317f43876350678b64abd53ac7584ec7db85c2a55996b0a1df7f4350a215cc0088173cc1adb27be5a758f1ab2dd9659dd0d33a836207e90468a325", 0x77}, {&(0x7f0000005340)="60c771dd9f4dcbcaf1e78cd8c6bf7f4f4b102916aedbb674b6a5ba124856ad11fc62391d01eaad1fa7eedb4b6eee427c8117fc67c895be55b27d714a2ed3d73229a1c19f6567288f397f5e6fb5cebfe25f9e29aa09a8f3ba200b379ec621a451093b51b5740b5f43b3ab5266799b0dfe950490b4969ed2c23011d888b7c3f7036c264dfdabcb8bcc72d3642c2f81774fe4c5c1542d595b3f06a7715b42c9bb9547cd21d6b21af282893035c0763719300ddb7a99a8c81f423f7eab8803137f44cd9588bfa4a259d9fad1358e513d606266e46d", 0xd3}, {&(0x7f0000005440)="18a584cd97c245c0fe3bdd321c5f38add34731e112e1a30f1b80b7e884986d845eeb3fec286fff998c807c80dc01c7db0e87da0c2853e2bca5c000be0f58eed991d655595830d25432e0653e17dd98014567c62d87d03652d869be24cffededd61bc3a32060286a44ec215182a4e278c5c85a9c6a434e60a23f993afeadfbc061682289e26", 0x85}], 0x4, &(0x7f0000005600)=[@rights={{0x24, 0x1, 0x1, [r6, r23, r24, r2, r6]}}, @rights={{0x38, 0x1, 0x1, [r25, r11, r28, r26, r0, r6, r11, r1, r10, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r9]}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r5}}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}, @rights={{0x1c, 0x1, 0x1, [r6, r11, r9]}}, @rights={{0x20, 0x1, 0x1, [r9, r1, r10, r27]}}], 0xf8, 0x20000004}}, {{&(0x7f0000005700)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000007cc0), 0x0, 0x0, 0x0, 0x4000000}}], 0x4, 0x48005) 3.706535189s ago: executing program 3 (id=2585): r0 = socket$inet_smc(0x2b, 0x1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000240)=0x7c, 0x4) bind$inet(r5, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000001bc0)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r5, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x52, 0x0, 0x0) listen(r4, 0x0) ioctl$SIOCX25SDTEFACILITIES(r4, 0x89eb, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aa"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) splice(r0, 0x0, r1, 0x0, 0xf3c, 0x0) 3.573055851s ago: executing program 5 (id=2586): socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$uinput(0xffffff9c, &(0x7f0000000180), 0x802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000940)={0x0, 0xb5, 0x6be7, 0x1}) writev(r2, &(0x7f0000003740)=[{&(0x7f0000001440)='d', 0x1}], 0x1) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000240)=0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r3, 0x0, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = add_key$user(0x0, 0x0, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) keyctl$KEYCTL_WATCH_KEY(0x20, r5, 0xffffffffffffffff, 0x100000000000f7) keyctl$revoke(0x3, r5) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x3f46137792f68265) ioctl$AUTOFS_IOC_ASKUMOUNT(r6, 0xc0089364, &(0x7f0000001240)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_DESTROY(r0, 0x5502) 3.401774727s ago: executing program 3 (id=2587): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv6_getaddrlabel={0x1c, 0x1e, 0x492dfc465ae32a8d, 0xfffffff6}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x4c044) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) readv(r5, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x6, 0x9}, 0x0) shmctl$SHM_LOCK(0x0, 0xb) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) connect$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 3.350041007s ago: executing program 0 (id=2588): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x20000050) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0xfffffd10, &(0x7f0000000200)=0x2000000000006) shutdown(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000004c00)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8080) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000001340)={0x1, 0x0, [{0x200, 0x5, 0x1, 0x0, @adapter={0x5, 0x3, 0x3, 0xff, 0xb1e0}}]}) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 3.168155311s ago: executing program 4 (id=2589): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r0, 0x0, 0x0, 0x0) 2.325267937s ago: executing program 5 (id=2590): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x5, @mcast2, 0x5}, 0x1c) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000140)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x20008814) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) r7 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='msdos\x00', 0x2004801, 0x0) r9 = syz_io_uring_setup(0x10a, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r4, 0x0}) io_uring_enter(r9, 0x3516, 0x3e44, 0x8, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000100)=0x5, 0x4) 2.234419913s ago: executing program 2 (id=2591): r0 = fanotify_init(0x8, 0x80000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x16, 0x80, 0x5, 0x19, "0076ba7d82000000002700000000f7ff6fd800"}) r2 = syz_open_pts(r1, 0x440) r3 = dup(r2) fanotify_mark(r0, 0x1, 0x40001012, r3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0xff0f) 2.159754613s ago: executing program 4 (id=2592): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = getpgrp(0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0xee01, &(0x7f00000000c0)={0x0, 0x1, 0x2000200000a95c, 0x9, 0x4000000201, 0x24c, 0x0, 0xfffffffffffffffc, 0x1}) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1812c1, 0x0) fchown(r2, 0xee01, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x9, &(0x7f0000000000), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000180)='hybla', 0x65) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r7, &(0x7f0000001b00), 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) 2.085579943s ago: executing program 3 (id=2593): r0 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r2 = syz_open_dev$vim2m(0x0, 0x6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, 0x0) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f0000000380)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x94, 0x0, &(0x7f0000000480)=[@increfs_done={0x40106308, 0x2}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x68, 0x18, &(0x7f00000003c0)={@fda={0x66646185, 0x6, 0x2, 0x3a}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/219, 0xdb, 0x0, 0x25}, @fda={0x66646185, 0x9, 0x2, 0x1b}}, &(0x7f0000000440)={0x0, 0x20, 0x48}}}, @release={0x40046306, 0x1}, @acquire_done, @dead_binder_done, @acquire_done={0x40106309, 0x1}], 0x5, 0x0, &(0x7f0000000540)="57cc85031b"}) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_route(0x10, 0x3, 0x0) flock(r4, 0x1) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000005c0), &(0x7f0000000600)=0x4) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) clock_gettime(0x5, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{r8, r9+60000000}, {r6, r7+60000000}}, 0x0) sched_setattr(0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) recvmmsg(r5, &(0x7f0000007900), 0x847, 0x10162, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2001, 0x0) ptrace(0x11, r1) 1.03977592s ago: executing program 4 (id=2594): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffd2a9dc6da626c0e21677ffaaaaaaaaaa2b86dd6700000100513afffe880000000000000000000000000201ff02000000000000000000000000000189009078000000002001000000000000000000000001fe800000000000000000000000000038220560aeb59d3fb13258c6f29dd7eed9c5aaa04a18f74d2a89000000000000"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = mq_open(&(0x7f0000000000)='e_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000040000000, 0x4, 0x4, 0x9}) mq_timedsend(r2, 0x0, 0x0, 0x5, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x18}) mq_timedreceive(r2, &(0x7f0000000140)=""/154, 0x9a, 0x0, &(0x7f0000000040)={0x77359400}) creat(&(0x7f00000001c0)='./file0\x00', 0x16c) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x1) ioctl$TCSETA(r4, 0x8925, &(0x7f0000000100)={0x2, 0x0, 0x1, 0x0, 0x13, "31f40000f7ece2f4"}) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ZERO(r5, 0x0, 0x48f, &(0x7f0000000740)={0x11, @loopback, 0x4e24, 0x4, 'dh\x00', 0x39, 0x7ff, 0x22}, 0x2c) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) write$UHID_CREATE2(r7, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r7, 0x1000) syz_open_dev$hidraw(0x0, 0x0, 0x14a042) read(r1, 0x0, 0x0) add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) close_range(r6, 0xffffffffffffffff, 0x0) 5.427386ms ago: executing program 2 (id=2595): r0 = epoll_create1(0x80000) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000280)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @remote, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000300)="e2", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e20, 0x1dc5ad4a, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000040)='^', 0x1}], 0x1}}], 0x2, 0x14) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000001c0)={0xb0000010}) shutdown(r1, 0x1) socket$can_bcm(0x1d, 0x2, 0x2) openat$vcsu(0xffffffffffffff9c, &(0x7f0000001280), 0x101000, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0xa7) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xebec93e830f96115}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRESDEC=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r4}, 0x8) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x4b67, &(0x7f0000000180)) io_uring_enter(0xffffffffffffffff, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 0s ago: executing program 0 (id=2596): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000002c00), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x20014880) kernel console output (not intermixed with test programs): my_hcd [ 748.685880][T16215] usb 3-1: config 0 descriptor?? [ 748.692915][ C1] usbtouchscreen 5-1:0.156: usbtouch_irq - usb_submit_urb failed with result: -1 [ 748.817621][ C1] usbtouchscreen 5-1:0.156: usbtouch_irq - usb_submit_urb failed with result: -1 [ 748.848778][T16460] usb 6-1: Using ep0 maxpacket: 16 [ 748.855195][T16460] usb 6-1: config 0 has an invalid interface number: 156 but max is 0 [ 748.859179][T16215] rc_core: IR keymap rc-hauppauge not found [ 748.864115][T16460] usb 6-1: config 0 has no interface number 0 [ 748.894901][T16460] usb 6-1: config 0 interface 156 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 748.899211][T16215] Registered IR keymap rc-empty [ 748.908655][T16460] usb 6-1: config 0 interface 156 has no altsetting 0 [ 748.938111][ T30] audit: type=1400 audit(1765801925.933:2126): avc: denied { validate_trans } for pid=16534 comm="syz.2.2282" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 748.961613][T16460] usb 6-1: New USB device found, idVendor=1234, idProduct=0002, bcdDevice=c8.36 [ 748.972818][T16460] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.982208][T16460] usb 6-1: Product: syz [ 749.005523][T16215] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 749.007287][T16460] usb 6-1: Manufacturer: syz [ 749.035851][T16460] usb 6-1: SerialNumber: syz [ 749.050065][T16460] usb 6-1: config 0 descriptor?? [ 749.055831][T16539] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 749.200812][T16215] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input86 [ 749.237164][T16215] usb 3-1: USB disconnect, device number 67 [ 749.816425][T16460] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.156/input/input87 [ 750.391840][T16215] usb 5-1: USB disconnect, device number 86 [ 750.544431][T16569] xt_cgroup: path and classid specified [ 751.781470][T16567] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 751.804695][T16460] usb 6-1: USB disconnect, device number 49 [ 751.830805][T16567] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 753.082023][T16591] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2296'. [ 753.191640][T16588] CUSE: unknown device info "" [ 753.448802][T16588] CUSE: zero length info key specified [ 753.884236][T16604] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2301'. [ 754.588683][T16215] usb 4-1: new full-speed USB device number 86 using dummy_hcd [ 754.912406][T16215] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 52, changing to 4 [ 755.038117][T16215] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 13368, setting to 1023 [ 755.447390][T16215] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 755.560319][T16215] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.830342][T16215] usb 4-1: config 0 descriptor?? [ 755.941294][T16215] usb 4-1: can't set config #0, error -71 [ 755.956695][T16215] usb 4-1: USB disconnect, device number 86 [ 756.336797][T16637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2308'. [ 757.033608][T16632] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 757.105477][T16632] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 757.395158][T16652] openvswitch: netlink: IPv4 tunnel dst address is zero [ 758.763485][T16670] netlink: 'syz.4.2317': attribute type 5 has an invalid length. [ 758.871228][ T89] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 758.932973][ T89] hid-generic 0000:0000:0000.0052: hidraw0: HID v0.00 Device [syz1] on syz0 [ 759.020169][T16679] netlink: 'syz.3.2319': attribute type 7 has an invalid length. [ 759.027914][T16679] netlink: 'syz.3.2319': attribute type 8 has an invalid length. [ 759.035642][T16679] netlink: 'syz.3.2319': attribute type 7 has an invalid length. [ 759.043419][T16679] netlink: 208740 bytes leftover after parsing attributes in process `syz.3.2319'. [ 759.106311][T16663] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 759.361211][T16683] cgroup: subsys name conflicts with all [ 759.548767][ T89] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 759.688763][ T89] usb 5-1: device descriptor read/64, error -71 [ 759.717379][ T30] audit: type=1326 audit(1765801936.353:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16677 comm="syz.3.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520e78f749 code=0x7ffc0000 [ 759.797624][ T30] audit: type=1326 audit(1765801936.353:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16677 comm="syz.3.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520e78f749 code=0x7ffc0000 [ 759.878805][ T30] audit: type=1326 audit(1765801936.353:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16677 comm="syz.3.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f520e78f749 code=0x7ffc0000 [ 759.915427][ T30] audit: type=1326 audit(1765801936.353:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16677 comm="syz.3.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520e78f749 code=0x7ffc0000 [ 760.092785][ T30] audit: type=1326 audit(1765801936.353:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16677 comm="syz.3.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520e78f749 code=0x7ffc0000 [ 760.613115][ T30] audit: type=1326 audit(1765801936.353:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16677 comm="syz.3.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f520e78f749 code=0x7ffc0000 [ 760.636703][ T89] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 760.679659][ T30] audit: type=1326 audit(1765801936.353:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16677 comm="syz.3.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520e78f749 code=0x7ffc0000 [ 760.730147][T16690] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 760.835222][ T89] usb 5-1: device descriptor read/64, error -71 [ 760.870320][ T30] audit: type=1326 audit(1765801936.353:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16677 comm="syz.3.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520e78f749 code=0x7ffc0000 [ 760.905488][T16697] xt_cgroup: path and classid specified [ 760.930280][ T30] audit: type=1326 audit(1765801936.363:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16677 comm="syz.3.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f520e78f749 code=0x7ffc0000 [ 760.968787][ T89] usb usb5-port1: attempt power cycle [ 761.008654][ T30] audit: type=1326 audit(1765801936.363:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16677 comm="syz.3.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520e78f749 code=0x7ffc0000 [ 761.118888][T16460] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 761.280271][T16460] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 761.301454][T16460] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 761.341662][T10850] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 761.352380][T16460] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 761.397144][T16460] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 761.520042][T10850] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 761.591981][T10850] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 761.609271][T16460] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.643025][T10850] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.666286][ T89] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 761.686684][T16460] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 761.742372][T10850] usb 4-1: config 0 descriptor?? [ 761.749151][ T89] usb 5-1: device descriptor read/8, error -71 [ 761.883952][T16695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2321'. [ 761.998069][T16460] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 762.018895][ T89] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 762.210700][T16699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 762.237965][T16699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 762.268677][T10850] keytouch 0003:0926:3333.0053: fixing up Keytouch IEC report descriptor [ 762.288699][ T89] usb 5-1: device not accepting address 90, error -71 [ 762.406390][ T89] usb usb5-port1: unable to enumerate USB device [ 762.447687][T10850] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0053/input/input89 [ 762.527267][T16709] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 762.561674][T16709] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 762.820296][T16723] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 762.988240][T10850] keytouch 0003:0926:3333.0053: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 764.229385][T16734] [U]  [ 764.858774][T16757] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 765.079243][ T7691] usb 4-1: USB disconnect, device number 87 [ 765.144044][T10850] usb 1-1: USB disconnect, device number 64 [ 765.189138][ T89] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 765.569098][ T89] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 765.720482][ T89] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.798408][T16466] hid-generic 0000:0000:0000.0054: unknown main item tag 0x0 [ 765.827560][ T89] usb 6-1: config 0 descriptor?? [ 765.842851][T16466] hid-generic 0000:0000:0000.0054: hidraw0: HID v0.00 Device [syz1] on syz0 [ 765.874031][ T89] cp210x 6-1:0.0: cp210x converter detected [ 766.100930][T16782] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 766.373705][ T89] usb 6-1: cp210x converter now attached to ttyUSB0 [ 766.621673][ T89] usb 6-1: USB disconnect, device number 50 [ 766.856020][ T89] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 766.955699][ T89] cp210x 6-1:0.0: device disconnected [ 767.545486][T16797] netlink: 'syz.2.2341': attribute type 4 has an invalid length. [ 767.643314][T16797] netlink: 'syz.2.2341': attribute type 17 has an invalid length. [ 767.939612][T16794] xt_CT: You must specify a L4 protocol and not use inversions on it [ 767.966557][T16786] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 768.000997][T16786] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 768.571617][ T89] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 768.718776][T16466] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 768.739737][T16820] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 768.878698][ T89] usb 4-1: Using ep0 maxpacket: 8 [ 768.935137][ T89] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 768.951384][T16466] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 768.988646][ T89] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 768.997579][T16466] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 769.035505][T16466] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 769.046855][ T89] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 769.079301][T16826] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2346'. [ 769.088285][T16466] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 769.097359][ T89] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.119263][ T89] usb 4-1: Product: syz [ 769.123404][ T89] usb 4-1: Manufacturer: syz [ 769.127961][ T89] usb 4-1: SerialNumber: syz [ 769.132565][T16466] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.196367][T16466] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 769.418036][T16818] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2345'. [ 769.472688][T16466] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 769.484493][ T89] usb 4-1: 0:2 : does not exist [ 769.568572][ T89] usb 4-1: USB disconnect, device number 88 [ 769.602417][T16832] [U]  [ 769.627745][T10559] udevd[10559]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 770.398213][T16860] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 770.839620][T16859] xt_cgroup: path and classid specified [ 771.980679][T10850] usb 6-1: USB disconnect, device number 51 [ 772.168758][ T9] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 772.368088][T12959] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 772.377819][T12959] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 772.385963][T12959] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 772.393670][T12959] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 772.401121][T12959] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 772.457129][ T9] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 772.466447][ T9] usb 5-1: can't read configurations, error -22 [ 772.558050][T16880] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 772.568870][ T6027] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 772.980144][T16869] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 772.988333][T16869] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 772.998704][ T9] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 773.108668][ T6027] usb 3-1: Using ep0 maxpacket: 8 [ 773.115700][ T6027] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 773.126076][ T6027] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 773.155781][T16877] chnl_net:caif_netlink_parms(): no params data found [ 773.159777][ T6027] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 773.164952][ T9] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 773.201327][ T9] usb 5-1: can't read configurations, error -22 [ 773.218135][ T9] usb usb5-port1: attempt power cycle [ 773.256921][ T6027] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 773.270516][ T6027] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 773.281566][ T6027] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.308662][T16460] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 773.362357][T16877] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.369509][T16877] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.376588][T16877] bridge_slave_0: entered allmulticast mode [ 773.383665][T16877] bridge_slave_0: entered promiscuous mode [ 773.391176][T16877] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.398283][T16877] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.407565][T16877] bridge_slave_1: entered allmulticast mode [ 773.414982][T16877] bridge_slave_1: entered promiscuous mode [ 773.439776][T16877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 773.450840][T16877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 773.467936][T16460] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 773.485215][T16460] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.496738][T16877] team0: Port device team_slave_0 added [ 773.497955][ T6027] usb 3-1: GET_CAPABILITIES returned 0 [ 773.507104][T16877] team0: Port device team_slave_1 added [ 773.510321][ T6027] usbtmc 3-1:16.0: can't read capabilities [ 773.514220][T16460] usb 6-1: config 0 descriptor?? [ 773.539644][T16460] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 773.568902][ T9] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 773.601157][T16877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 773.609810][T16877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 773.636088][T16877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 773.646874][ T9] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 773.657003][T16877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 773.664075][ T9] usb 5-1: can't read configurations, error -22 [ 773.670405][T16877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 773.697759][T16877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 773.726307][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 773.735581][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 773.744637][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 773.753708][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 773.774128][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 773.783209][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 773.792274][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 773.801333][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 773.813129][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 773.818759][ T9] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 773.824323][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 773.838934][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 773.847980][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 773.857014][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 773.866048][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 773.875078][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 773.909483][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 773.963566][ T6027] usb 3-1: USB disconnect, device number 68 [ 773.965569][ T9] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 774.008738][ T9] usb 5-1: can't read configurations, error -22 [ 774.032703][T16877] hsr_slave_0: entered promiscuous mode [ 774.078846][ T9] usb usb5-port1: unable to enumerate USB device [ 774.081824][T16877] hsr_slave_1: entered promiscuous mode [ 774.136143][T16877] debugfs: 'hsr0' already exists in 'hsr' [ 774.203243][T16877] Cannot create hsr debugfs directory [ 774.264050][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 774.274046][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 774.282559][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 774.296141][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 774.304046][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 774.448686][ T5828] Bluetooth: hci0: command tx timeout [ 774.609095][T16460] gspca_cpia1: usb_control_msg 05, error -110 [ 774.646089][T16460] gspca_cpia1: usb_control_msg 01, error -32 [ 774.675900][T16460] gspca_cpia1: usb_control_msg 01, error -32 [ 774.684517][T16460] gspca_cpia1: usb_control_msg 01, error -32 [ 774.697724][T16877] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.709022][T16460] gspca_cpia1: usb_control_msg 01, error -32 [ 774.715010][T16460] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 774.810214][T16877] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.888419][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 774.888434][ T30] audit: type=1400 audit(1765801951.883:2139): avc: denied { write } for pid=16894 comm="syz.5.2362" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 775.016342][T16877] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.037147][T16899] Bluetooth: MGMT ver 1.23 [ 775.205920][T16877] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.972354][T16891] chnl_net:caif_netlink_parms(): no params data found [ 776.168121][ T6027] usb 6-1: USB disconnect, device number 52 [ 776.332889][T16913] [U]  [ 776.368868][ T5828] Bluetooth: hci3: command tx timeout [ 776.433537][T16891] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.441253][T16891] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.448348][T16891] bridge_slave_0: entered allmulticast mode [ 776.471072][T16891] bridge_slave_0: entered promiscuous mode [ 776.479883][T16891] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.488870][T16891] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.496053][T16891] bridge_slave_1: entered allmulticast mode [ 776.527397][T16891] bridge_slave_1: entered promiscuous mode [ 776.533274][ T5828] Bluetooth: hci0: command tx timeout [ 776.562176][T16877] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 776.638442][T16877] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 776.728421][T16877] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 776.742315][T16877] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 776.761257][T16891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 776.825268][T16891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 776.897891][T16891] team0: Port device team_slave_0 added [ 776.913320][T16891] team0: Port device team_slave_1 added [ 776.955827][T16891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 776.962830][T16891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 776.991182][T16891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 777.007475][T16891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 777.015506][T16891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 777.041769][T16891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 777.156686][T16891] hsr_slave_0: entered promiscuous mode [ 777.163249][T16891] hsr_slave_1: entered promiscuous mode [ 777.171307][T16891] debugfs: 'hsr0' already exists in 'hsr' [ 777.177091][T16891] Cannot create hsr debugfs directory [ 777.367168][T16877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 777.386317][T16877] 8021q: adding VLAN 0 to HW filter on device team0 [ 777.460086][T16891] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.482278][T13336] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.489378][T13336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 777.502609][T13336] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.509696][T13336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 777.564200][T16891] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.579055][T16924] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 777.587106][T16924] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 778.296136][T16891] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.458667][ T5828] Bluetooth: hci3: command tx timeout [ 778.540689][T16891] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.618655][ T5828] Bluetooth: hci0: command tx timeout [ 778.817016][T16877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 778.965486][T16891] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 779.037800][T16891] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 779.054557][T16891] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 779.067370][T16891] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 779.112701][T16877] veth0_vlan: entered promiscuous mode [ 779.150372][T16877] veth1_vlan: entered promiscuous mode [ 779.268089][T16891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 779.273245][ T30] audit: type=1400 audit(1765801956.253:2140): avc: denied { append } for pid=16961 comm="syz.4.2377" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 779.313439][T16877] veth0_macvtap: entered promiscuous mode [ 779.354045][T16877] veth1_macvtap: entered promiscuous mode [ 779.377889][T16877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 779.389611][T16877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 779.404780][T16891] 8021q: adding VLAN 0 to HW filter on device team0 [ 779.430856][T16970] sctp: [Deprecated]: syz.2.2378 (pid 16970) Use of int in maxseg socket option. [ 779.430856][T16970] Use struct sctp_assoc_value instead [ 779.448898][T16460] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 779.504312][ T6051] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.511411][ T6051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 779.528485][ T6051] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.544830][ T6323] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.551881][ T6323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 779.565714][ T6051] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.577638][ T6051] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.588008][ T6051] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.618697][T16460] usb 6-1: Using ep0 maxpacket: 16 [ 779.639020][T16460] usb 6-1: config 0 has an invalid interface number: 156 but max is 0 [ 779.666324][T16460] usb 6-1: config 0 has no interface number 0 [ 779.685128][T16460] usb 6-1: config 0 interface 156 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 779.689662][T16891] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 779.705889][T16460] usb 6-1: config 0 interface 156 has no altsetting 0 [ 779.723828][T16460] usb 6-1: New USB device found, idVendor=1234, idProduct=0002, bcdDevice=c8.36 [ 779.742087][T16460] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.773203][T16460] usb 6-1: Product: syz [ 779.777387][T16460] usb 6-1: Manufacturer: syz [ 779.797397][T16460] usb 6-1: SerialNumber: syz [ 779.802929][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 779.820286][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 779.828416][T16460] usb 6-1: config 0 descriptor?? [ 779.856150][T16960] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 779.893600][ T6051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 779.908126][ T6051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 780.121601][T16891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 780.547800][ T5828] Bluetooth: hci3: command tx timeout [ 780.656030][T16891] veth0_vlan: entered promiscuous mode [ 780.670773][T16891] veth1_vlan: entered promiscuous mode [ 780.689036][ T5828] Bluetooth: hci0: command tx timeout [ 780.737623][T16988] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 780.748501][T16891] veth0_macvtap: entered promiscuous mode [ 780.863100][T16891] veth1_macvtap: entered promiscuous mode [ 780.927548][T16891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 780.988674][ T9] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 781.110417][T16891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 781.155797][ T9] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 781.157500][ T6319] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.198734][ T9] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 781.198762][ T6319] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.235137][ T6319] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.238341][ T9] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 781.284564][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.315029][T16988] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 781.380784][ T6319] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.504041][ T4495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 781.524029][ T4495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 781.571005][ T132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 781.579717][ T132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 781.956822][T17023] FAULT_INJECTION: forcing a failure. [ 781.956822][T17023] name failslab, interval 1, probability 0, space 0, times 0 [ 781.969867][T17023] CPU: 0 UID: 0 PID: 17023 Comm: syz.2.2385 Tainted: G L syzkaller #0 PREEMPT(full) [ 781.969895][T17023] Tainted: [L]=SOFTLOCKUP [ 781.969902][T17023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 781.969913][T17023] Call Trace: [ 781.969920][T17023] [ 781.969927][T17023] dump_stack_lvl+0x16c/0x1f0 [ 781.969963][T17023] should_fail_ex+0x512/0x640 [ 781.969983][T17023] ? __kmalloc_cache_noprof+0x5f/0x800 [ 781.970016][T17023] should_failslab+0xc2/0x120 [ 781.970040][T17023] __kmalloc_cache_noprof+0x80/0x800 [ 781.970069][T17023] ? snd_timer_instance_new+0x47/0x2e0 [ 781.970103][T17023] ? snd_timer_instance_new+0x47/0x2e0 [ 781.970130][T17023] snd_timer_instance_new+0x47/0x2e0 [ 781.970159][T17023] __snd_timer_user_ioctl.isra.0+0x170b/0x27b0 [ 781.970181][T17023] ? lock_acquire+0x179/0x330 [ 781.970203][T17023] ? __pfx___snd_timer_user_ioctl.isra.0+0x10/0x10 [ 781.970225][T17023] ? __pfx___might_resched+0x10/0x10 [ 781.970244][T17023] ? rcu_is_watching+0x12/0xc0 [ 781.970268][T17023] ? do_vfs_ioctl+0x128/0x14f0 [ 781.970287][T17023] ? snd_timer_user_ioctl+0x4a/0xd0 [ 781.970305][T17023] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 781.970327][T17023] ? __pfx___mutex_lock+0x10/0x10 [ 781.970356][T17023] ? irqentry_exit+0x1dd/0x8c0 [ 781.970387][T17023] ? rcu_is_watching+0x12/0xc0 [ 781.970420][T17023] snd_timer_user_ioctl+0x76/0xd0 [ 781.970439][T17023] ? __pfx_snd_timer_user_ioctl+0x10/0x10 [ 781.970459][T17023] __x64_sys_ioctl+0x18e/0x210 [ 781.970482][T17023] do_syscall_64+0xcd/0xf80 [ 781.970511][T17023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.970530][T17023] RIP: 0033:0x7f06a278f749 [ 781.970546][T17023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 781.970564][T17023] RSP: 002b:00007f06a35b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 781.970583][T17023] RAX: ffffffffffffffda RBX: 00007f06a29e6180 RCX: 00007f06a278f749 [ 781.970595][T17023] RDX: 0000200000000040 RSI: 0000000040345410 RDI: 0000000000000008 [ 781.970607][T17023] RBP: 00007f06a35b2090 R08: 0000000000000000 R09: 0000000000000000 [ 781.970617][T17023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 781.970628][T17023] R13: 00007f06a29e6218 R14: 00007f06a29e6180 R15: 00007fffa419b408 [ 781.970655][T17023] [ 782.239206][ T9] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 782.248252][ T9] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input92 [ 782.345864][T16460] usbtouchscreen 6-1:0.156: probe with driver usbtouchscreen failed with error -71 [ 782.374166][T16460] usb 6-1: USB disconnect, device number 53 [ 782.614221][ T5828] Bluetooth: hci3: command tx timeout [ 782.770318][T16466] usb 5-1: USB disconnect, device number 95 [ 782.770450][ C0] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 783.189215][ T9] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 783.940235][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 783.988656][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 784.020873][T17046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2389'. [ 784.042046][ T9] usb 6-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 784.059602][T17046] tipc: Started in network mode [ 784.077545][T17046] tipc: Node identity d2b201ea9733, cluster identity 4711 [ 784.148099][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.158328][ T30] audit: type=1326 audit(1765801961.093:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17048 comm="syz.4.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a2838f749 code=0x7ffc0000 [ 784.190388][T17046] tipc: Enabled bearer , priority 0 [ 784.194416][ T9] usb 6-1: config 0 descriptor?? [ 784.209420][T17050] syzkaller0: entered promiscuous mode [ 784.212411][ T30] audit: type=1326 audit(1765801961.103:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17048 comm="syz.4.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6a2838f749 code=0x7ffc0000 [ 784.281156][T17050] syzkaller0: entered allmulticast mode [ 784.515719][ T30] audit: type=1326 audit(1765801961.103:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17048 comm="syz.4.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a2838f749 code=0x7ffc0000 [ 784.581271][ T30] audit: type=1326 audit(1765801961.103:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17048 comm="syz.4.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a2838f749 code=0x7ffc0000 [ 784.870236][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 784.891270][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 784.933096][T17050] tipc: Resetting bearer [ 784.947228][ T9] usb 6-1: USB disconnect, device number 54 [ 784.958664][ T30] audit: type=1326 audit(1765801961.103:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17048 comm="syz.4.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6a2838f749 code=0x7ffc0000 [ 785.001041][ T30] audit: type=1326 audit(1765801961.143:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17048 comm="syz.4.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a2838f749 code=0x7ffc0000 [ 785.045980][ T30] audit: type=1326 audit(1765801961.143:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17048 comm="syz.4.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a2838f749 code=0x7ffc0000 [ 785.088013][T17040] tipc: Resetting bearer [ 785.099467][ T30] audit: type=1326 audit(1765801961.143:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17048 comm="syz.4.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6a2838f34b code=0x7ffc0000 [ 785.140922][ T30] audit: type=1326 audit(1765801961.143:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17048 comm="syz.4.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6a2838f34b code=0x7ffc0000 [ 785.165071][ T30] audit: type=1326 audit(1765801961.143:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17048 comm="syz.4.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6a2838f34b code=0x7ffc0000 [ 785.192871][T17040] tipc: Disabling bearer [ 785.313886][ T6027] tipc: Node number set to 1166082538 [ 785.826679][T17090] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 786.109288][ T6027] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 786.287123][T17094] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2399'. [ 786.728670][ T6027] usb 1-1: Using ep0 maxpacket: 16 [ 786.739604][ T6027] usb 1-1: config 0 has an invalid interface number: 156 but max is 0 [ 786.771208][ T6027] usb 1-1: config 0 has no interface number 0 [ 786.777303][ T6027] usb 1-1: config 0 interface 156 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 786.839592][T17100] IPv4: Oversized IP packet from 127.202.26.0 [ 786.876043][ T6027] usb 1-1: config 0 interface 156 has no altsetting 0 [ 786.883712][T17086] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 786.910961][ T6027] usb 1-1: New USB device found, idVendor=1234, idProduct=0002, bcdDevice=c8.36 [ 786.939965][T17086] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 786.988719][ T6027] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.006978][ T6027] usb 1-1: Product: syz [ 787.016433][ T6027] usb 1-1: Manufacturer: syz [ 787.026746][ T6027] usb 1-1: SerialNumber: syz [ 787.177532][ T6027] usb 1-1: config 0 descriptor?? [ 787.183933][T17084] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 787.650143][ T6027] usbtouchscreen 1-1:0.156: probe with driver usbtouchscreen failed with error -71 [ 787.708067][ T6027] usb 1-1: USB disconnect, device number 65 [ 788.072437][T17128] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17128 comm=syz.5.2404 [ 788.128179][T17128] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2404'. [ 788.409050][T16460] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 788.688740][T16460] usb 6-1: Using ep0 maxpacket: 16 [ 788.697559][T16460] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 788.731059][T16460] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.752974][T16460] usb 6-1: Product: syz [ 788.757138][T16460] usb 6-1: Manufacturer: syz [ 788.780854][T16460] usb 6-1: SerialNumber: syz [ 788.818676][T16460] usb 6-1: config 0 descriptor?? [ 788.846151][T16460] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 788.936760][T17149] mac80211_hwsim hwsim69 wlan0: entered promiscuous mode [ 789.272225][ T30] kauditd_printk_skb: 130 callbacks suppressed [ 789.272241][ T30] audit: type=1326 audit(1765801966.273:2281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17145 comm="syz.2.2407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a278f749 code=0x7ffc0000 [ 789.278876][T16460] ssu100 6-1:0.0: probe with driver ssu100 failed with error -110 [ 790.040864][ T30] audit: type=1326 audit(1765801966.273:2282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17145 comm="syz.2.2407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a278f749 code=0x7ffc0000 [ 790.090739][ T30] audit: type=1326 audit(1765801967.043:2283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17145 comm="syz.2.2407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f06a278f749 code=0x7ffc0000 [ 790.114627][ T30] audit: type=1326 audit(1765801967.043:2284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17145 comm="syz.2.2407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a278f749 code=0x7ffc0000 [ 790.138461][ T30] audit: type=1326 audit(1765801967.043:2285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17145 comm="syz.2.2407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a278f749 code=0x7ffc0000 [ 790.493365][ T30] audit: type=1326 audit(1765801967.493:2286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17166 comm="syz.3.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5918f749 code=0x7ffc0000 [ 790.558555][ T30] audit: type=1326 audit(1765801967.523:2287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17166 comm="syz.3.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5918f749 code=0x7ffc0000 [ 790.624573][ T30] audit: type=1326 audit(1765801967.523:2288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17166 comm="syz.3.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2a5918f749 code=0x7ffc0000 [ 790.997237][T17180] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 791.324625][ T30] audit: type=1326 audit(1765801967.523:2289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17166 comm="syz.3.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5918f749 code=0x7ffc0000 [ 791.626630][T17183] IPVS: length: 149 != 8 [ 791.639422][T17183] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 791.887724][ T30] audit: type=1326 audit(1765801967.523:2290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17166 comm="syz.3.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5918f749 code=0x7ffc0000 [ 792.352993][ T6325] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 792.358684][ T6027] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 792.376740][ T6325] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.464883][ T6325] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 792.481104][ T6325] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.568676][ T6027] usb 3-1: Using ep0 maxpacket: 16 [ 792.581510][ T6325] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 792.593767][ T6325] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.618491][ T6027] usb 3-1: config 7 has an invalid interface number: 152 but max is 0 [ 792.630137][ T6027] usb 3-1: config 7 has no interface number 0 [ 792.636303][ T6027] usb 3-1: config 7 interface 152 altsetting 190 bulk endpoint 0x2 has invalid maxpacket 8 [ 792.647341][ T6027] usb 3-1: config 7 interface 152 has no altsetting 0 [ 792.677009][ T6027] usb 3-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=66.6d [ 792.679076][ T6325] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 792.687125][ T6027] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.708535][ T6027] usb 3-1: Product: syz [ 792.714813][ T6027] usb 3-1: Manufacturer: syz [ 792.719693][ T6027] usb 3-1: SerialNumber: syz [ 792.724508][ T6325] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.745040][T17190] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 792.770707][T12959] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 792.781728][T12959] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 792.790255][T12959] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 792.798355][T12959] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 792.805995][T12959] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 792.856360][ T5886] usb 6-1: USB disconnect, device number 55 [ 793.087268][ T6027] usbtest 3-1:7.152: couldn't get endpoints, -22 [ 793.245244][T17200] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2421'. [ 793.627440][ T6027] usbtest 3-1:7.152: probe with driver usbtest failed with error -22 [ 793.680804][ T6027] usb 3-1: USB disconnect, device number 69 [ 794.133284][ T6325] bridge_slave_1: left allmulticast mode [ 794.163511][ T6325] bridge_slave_1: left promiscuous mode [ 794.198496][ T6325] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.249377][ T6325] bridge_slave_0: left allmulticast mode [ 794.269424][ T6325] bridge_slave_0: left promiscuous mode [ 794.293680][ T6325] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.853312][ T5828] Bluetooth: hci4: command tx timeout [ 795.262352][ T6325] bond4 (unregistering): (slave xfrm2): Releasing backup interface [ 795.367355][ T6325] xfrm2 (unregistering): left promiscuous mode [ 796.625875][ T6325] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 796.641293][ T6325] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 796.653989][ T6325] bond0 (unregistering): Released all slaves [ 796.670316][ T6325] bond1 (unregistering): Released all slaves [ 796.883638][ T6325] bond2 (unregistering): (slave bond3): Releasing backup interface [ 796.909583][ T6325] bond3 (unregistering): left promiscuous mode [ 796.935439][ T6325] bond2 (unregistering): Released all slaves [ 796.938972][ T5828] Bluetooth: hci4: command tx timeout [ 797.095901][ T6325] bond3 (unregistering): Released all slaves [ 797.178552][ T6325] bond4 (unregistering): Released all slaves [ 797.189226][ T6325] bond5 (unregistering): Released all slaves [ 797.277996][ T6325] tipc: Left network mode [ 797.828111][T17265] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 797.876387][T17195] chnl_net:caif_netlink_parms(): no params data found [ 798.315953][T17291] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 799.015152][ T5828] Bluetooth: hci4: command tx timeout [ 801.089121][ T5828] Bluetooth: hci4: command tx timeout [ 801.195851][ T6325] hsr_slave_0: left promiscuous mode [ 801.298749][ T6325] hsr_slave_1: left promiscuous mode [ 801.307698][ T6325] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 801.325793][ T6325] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 801.343829][ T6325] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 801.366691][ T6325] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 801.405942][ T6325] veth0_macvtap: left promiscuous mode [ 801.412296][ T6325] veth1_vlan: left promiscuous mode [ 801.419750][ T6325] veth0_vlan: left promiscuous mode [ 801.520309][T17313] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2440'. [ 801.934232][T17318] loop2: detected capacity change from 0 to 7 [ 801.956354][T17318] Dev loop2: unable to read RDB block 7 [ 801.962623][T17318] loop2: unable to read partition table [ 801.970975][T17318] loop2: partition table beyond EOD, truncated [ 801.980453][T17318] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 802.179130][T17321] ptrace attach of "./syz-executor exec"[17323] was attempted by "./syz-executor exec"[17321] [ 802.192463][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 802.192482][ T30] audit: type=1400 audit(1765801979.173:2348): avc: denied { ioctl } for pid=17319 comm="syz.5.2442" path="socket:[65452]" dev="sockfs" ino=65452 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 803.075446][ T6325] team0 (unregistering): Port device team_slave_1 removed [ 803.103893][ T6325] team0 (unregistering): Port device team_slave_0 removed [ 803.198683][ T5886] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 803.361876][ T5886] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 803.372155][ T5886] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 803.382533][ T5886] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 803.391618][ T5886] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 803.413492][ T5886] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 803.422587][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 803.430849][ T5886] usb 4-1: Product: syz [ 803.430939][T17195] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.434995][ T5886] usb 4-1: Manufacturer: syz [ 803.448183][T17195] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.451180][ T5886] cdc_wdm 4-1:1.0: skipping garbage [ 803.455586][T17195] bridge_slave_0: entered allmulticast mode [ 803.462244][ T5886] cdc_wdm 4-1:1.0: skipping garbage [ 803.468634][T17195] bridge_slave_0: entered promiscuous mode [ 803.473756][ T5886] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 803.479619][T17195] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.493053][T17195] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.500246][T17195] bridge_slave_1: entered allmulticast mode [ 803.507651][T17195] bridge_slave_1: entered promiscuous mode [ 803.539539][ T5886] cdc_wdm 4-1:1.0: Unknown control protocol [ 803.666937][ T30] audit: type=1400 audit(1765801980.663:2349): avc: denied { read write } for pid=17326 comm="syz.3.2443" name="cdc-wdm0" dev="devtmpfs" ino=4447 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 803.717654][T17195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 803.759206][T17195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 803.777840][ T30] audit: type=1400 audit(1765801980.693:2350): avc: denied { open } for pid=17326 comm="syz.3.2443" path="/dev/cdc-wdm0" dev="devtmpfs" ino=4447 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 803.835261][ T30] audit: type=1326 audit(1765801980.753:2351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17331 comm="syz.5.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2cf8f749 code=0x7ffc0000 [ 803.865468][ T30] audit: type=1326 audit(1765801980.753:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17331 comm="syz.5.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2cf8f749 code=0x7ffc0000 [ 803.890293][ T30] audit: type=1326 audit(1765801980.753:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17331 comm="syz.5.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffb2cf8f749 code=0x7ffc0000 [ 803.900226][T17195] team0: Port device team_slave_0 added [ 803.936643][ T30] audit: type=1326 audit(1765801980.753:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17331 comm="syz.5.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2cf8f749 code=0x7ffc0000 [ 804.052225][ T6027] usb 4-1: USB disconnect, device number 89 [ 804.137204][ T30] audit: type=1326 audit(1765801980.763:2355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17331 comm="syz.5.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2cf8f749 code=0x7ffc0000 [ 804.189481][ T7692] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 804.298456][T17195] team0: Port device team_slave_1 added [ 804.329121][ T30] audit: type=1326 audit(1765801980.763:2356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17331 comm="syz.5.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffb2cf8f749 code=0x7ffc0000 [ 804.367149][ T30] audit: type=1326 audit(1765801980.813:2357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17331 comm="syz.5.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2cf8f749 code=0x7ffc0000 [ 804.415613][T17195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 804.422724][T17195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 804.453197][T17195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 804.498645][ T7692] usb 3-1: Using ep0 maxpacket: 16 [ 804.505199][ T7692] usb 3-1: config 0 has an invalid interface number: 156 but max is 0 [ 804.531691][ T7692] usb 3-1: config 0 has no interface number 0 [ 804.552806][T17195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 804.562004][ T7692] usb 3-1: config 0 interface 156 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 804.598648][T17195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 804.628820][ T7692] usb 3-1: config 0 interface 156 has no altsetting 0 [ 804.668866][T17195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 804.679794][ T7692] usb 3-1: New USB device found, idVendor=1234, idProduct=0002, bcdDevice=c8.36 [ 804.689904][ T7692] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.697881][ T7692] usb 3-1: Product: syz [ 804.727779][ T7692] usb 3-1: Manufacturer: syz [ 804.748631][ T7692] usb 3-1: SerialNumber: syz [ 804.773817][ T7692] usb 3-1: config 0 descriptor?? [ 804.789290][T17335] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 804.851052][T12959] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 804.860511][T12959] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 804.868409][T12959] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 804.879281][ T6325] IPVS: stop unused estimator thread 0... [ 804.885191][T12959] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 804.885791][T12959] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 804.951715][T17356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2450'. [ 804.983553][T17195] hsr_slave_0: entered promiscuous mode [ 804.996238][T17195] hsr_slave_1: entered promiscuous mode [ 805.026730][T17195] debugfs: 'hsr0' already exists in 'hsr' [ 805.033570][T17195] Cannot create hsr debugfs directory [ 805.065924][ T7692] usbtouchscreen 3-1:0.156: probe with driver usbtouchscreen failed with error -71 [ 805.094951][ T7692] usb 3-1: USB disconnect, device number 70 [ 805.516994][T17371] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 806.911951][T17354] chnl_net:caif_netlink_parms(): no params data found [ 806.931462][T12959] Bluetooth: hci0: command tx timeout [ 807.455349][ T30] kauditd_printk_skb: 125 callbacks suppressed [ 807.455373][ T30] audit: type=1400 audit(1765801984.453:2483): avc: denied { write } for pid=17412 comm="syz.3.2459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 807.543259][T17195] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 807.567466][T17354] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.587099][T17354] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.594584][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 807.607151][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 807.615906][T17354] bridge_slave_0: entered allmulticast mode [ 807.622287][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 807.631043][T17354] bridge_slave_0: entered promiscuous mode [ 807.640234][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 807.647510][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 807.679638][T17195] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 807.697272][T17354] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.745137][T17354] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.791201][T17354] bridge_slave_1: entered allmulticast mode [ 807.863026][T17354] bridge_slave_1: entered promiscuous mode [ 807.971872][T17195] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 808.091702][T17195] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 808.134622][T17354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 808.767150][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.773527][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.850631][T17354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 809.018687][ T5828] Bluetooth: hci0: command tx timeout [ 809.112493][T17354] team0: Port device team_slave_0 added [ 809.145021][T17354] team0: Port device team_slave_1 added [ 809.395850][T17354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 809.409706][T17354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 809.468687][T17354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 809.503646][T17354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 809.519965][T17354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 809.575930][T17354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 809.732277][ T5828] Bluetooth: hci2: command tx timeout [ 809.889883][T17354] hsr_slave_0: entered promiscuous mode [ 809.919828][T17354] hsr_slave_1: entered promiscuous mode [ 809.937351][T17354] debugfs: 'hsr0' already exists in 'hsr' [ 809.959202][T17354] Cannot create hsr debugfs directory [ 810.462372][T17477] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 811.179712][ T5828] Bluetooth: hci0: command tx timeout [ 811.631257][T17195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 811.810691][ T5828] Bluetooth: hci2: command tx timeout [ 812.134243][T17195] 8021q: adding VLAN 0 to HW filter on device team0 [ 812.164923][T17417] chnl_net:caif_netlink_parms(): no params data found [ 812.313175][ T6325] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.320308][ T6325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 812.442336][T17354] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.550902][T13960] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.601074][T16465] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.608184][T16465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 812.685627][T17354] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.710410][ T30] audit: type=1400 audit(1765801989.713:2484): avc: denied { getopt } for pid=17515 comm="syz.2.2468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 812.778549][T12959] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 812.788420][T12959] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 812.802503][T12959] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 812.810231][T12959] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 812.817685][T12959] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 812.837394][T13960] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.990348][T17354] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.027537][T17527] geneve2: entered promiscuous mode [ 813.046722][T17527] geneve2: entered allmulticast mode [ 813.056283][T17417] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.064399][T17417] bridge0: port 1(bridge_slave_0) entered disabled state [ 813.085734][T17417] bridge_slave_0: entered allmulticast mode [ 813.110239][T17417] bridge_slave_0: entered promiscuous mode [ 813.124478][T17538] netlink: 'syz.2.2470': attribute type 3 has an invalid length. [ 813.154137][T17417] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.176819][T17417] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.208987][T17417] bridge_slave_1: entered allmulticast mode [ 813.216373][T17417] bridge_slave_1: entered promiscuous mode [ 813.248823][T12959] Bluetooth: hci0: command tx timeout [ 813.262948][T13960] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.650879][T17354] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.723051][T17417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 814.348661][T12959] Bluetooth: hci2: command tx timeout [ 814.390474][T17417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 814.463490][T13960] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.626396][T17417] team0: Port device team_slave_0 added [ 814.656818][T17417] team0: Port device team_slave_1 added [ 814.891501][T17417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 814.898449][T17417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 814.938087][T12959] Bluetooth: hci3: command tx timeout [ 814.958767][T17417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 814.971128][T17417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 814.980138][T17417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 815.006157][T17417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 815.189847][T13960] bridge_slave_1: left allmulticast mode [ 815.195493][T13960] bridge_slave_1: left promiscuous mode [ 815.219268][T13960] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.229680][T13960] bridge_slave_0: left allmulticast mode [ 815.235317][T13960] bridge_slave_0: left promiscuous mode [ 815.250983][T13960] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.545167][T17569] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 815.896082][T13960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 815.910499][T13960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 815.920960][T13960] bond0 (unregistering): Released all slaves [ 815.975376][T17354] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 816.048625][T17354] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 816.139501][T17417] hsr_slave_0: entered promiscuous mode [ 816.145947][T17417] hsr_slave_1: entered promiscuous mode [ 816.152404][T17417] debugfs: 'hsr0' already exists in 'hsr' [ 816.158124][T17417] Cannot create hsr debugfs directory [ 816.165126][T17354] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 816.205459][T17354] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 816.255866][T17195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 816.394883][T12959] Bluetooth: hci2: command tx timeout [ 817.008680][T12959] Bluetooth: hci3: command tx timeout [ 817.314469][T13960] hsr_slave_0: left promiscuous mode [ 817.320468][T13960] hsr_slave_1: left promiscuous mode [ 817.326652][T13960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 817.337539][T13960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 817.345773][T13960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 817.354004][T13960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 817.407849][T13960] veth1_macvtap: left promiscuous mode [ 817.428811][T13960] veth0_macvtap: left promiscuous mode [ 817.434365][T13960] veth1_vlan: left promiscuous mode [ 817.463058][T13960] veth0_vlan: left promiscuous mode [ 818.116712][T13960] team0 (unregistering): Port device team_slave_1 removed [ 818.155183][T13960] team0 (unregistering): Port device team_slave_0 removed [ 818.696973][T17417] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.739579][T17519] chnl_net:caif_netlink_parms(): no params data found [ 818.834847][T17417] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.915790][T17195] veth0_vlan: entered promiscuous mode [ 818.956810][T17417] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.088753][T12959] Bluetooth: hci3: command tx timeout [ 819.227992][T17622] FAULT_INJECTION: forcing a failure. [ 819.227992][T17622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 819.243802][T17622] CPU: 0 UID: 0 PID: 17622 Comm: syz.2.2478 Tainted: G L syzkaller #0 PREEMPT(full) [ 819.243830][T17622] Tainted: [L]=SOFTLOCKUP [ 819.243836][T17622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 819.243847][T17622] Call Trace: [ 819.243853][T17622] [ 819.243860][T17622] dump_stack_lvl+0x16c/0x1f0 [ 819.243890][T17622] should_fail_ex+0x512/0x640 [ 819.243917][T17622] strncpy_from_user+0x3b/0x2e0 [ 819.243937][T17622] getname_flags.part.0+0x8f/0x550 [ 819.243961][T17622] getname_flags+0x93/0xf0 [ 819.243983][T17622] user_path_at+0x24/0x60 [ 819.244007][T17622] __x64_sys_mount+0x1fb/0x310 [ 819.244025][T17622] ? __pfx___x64_sys_mount+0x10/0x10 [ 819.244049][T17622] do_syscall_64+0xcd/0xf80 [ 819.244078][T17622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.244096][T17622] RIP: 0033:0x7f06a278f749 [ 819.244112][T17622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 819.244130][T17622] RSP: 002b:00007f06a35d3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 819.244147][T17622] RAX: ffffffffffffffda RBX: 00007f06a29e6090 RCX: 00007f06a278f749 [ 819.244159][T17622] RDX: 0000200000000040 RSI: 00002000000000c0 RDI: 00002000000001c0 [ 819.244170][T17622] RBP: 00007f06a35d3090 R08: 0000000000000000 R09: 0000000000000000 [ 819.244181][T17622] R10: 000000000200010e R11: 0000000000000246 R12: 0000000000000001 [ 819.244192][T17622] R13: 00007f06a29e6128 R14: 00007f06a29e6090 R15: 00007fffa419b408 [ 819.244214][T17622] [ 819.698664][T17417] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.724091][T17519] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.735857][T17519] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.743400][T17519] bridge_slave_0: entered allmulticast mode [ 819.755717][T17519] bridge_slave_0: entered promiscuous mode [ 819.771914][T17519] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.781498][T17519] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.788965][T17519] bridge_slave_1: entered allmulticast mode [ 819.807303][T17519] bridge_slave_1: entered promiscuous mode [ 819.847505][T12959] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 819.855287][T12959] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 819.881411][T17195] veth1_vlan: entered promiscuous mode [ 819.929554][T17519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 819.976898][T17519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 820.125628][T17519] team0: Port device team_slave_0 added [ 820.170719][T17195] veth0_macvtap: entered promiscuous mode [ 820.239745][T17519] team0: Port device team_slave_1 added [ 820.337252][T17354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 820.367149][T17195] veth1_macvtap: entered promiscuous mode [ 820.378416][T17519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 820.393784][T17519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 820.450917][T17519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 820.473079][T17519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 820.487791][T17519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 820.545725][T17519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 820.584121][T17417] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 820.615255][T17417] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 820.645419][T17417] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 820.790093][T17417] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 820.832997][T17519] hsr_slave_0: entered promiscuous mode [ 820.855305][T17519] hsr_slave_1: entered promiscuous mode [ 820.899714][T17519] debugfs: 'hsr0' already exists in 'hsr' [ 820.905527][T17519] Cannot create hsr debugfs directory [ 820.914748][T17195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 820.971329][T17354] 8021q: adding VLAN 0 to HW filter on device team0 [ 821.104678][ T6335] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.111752][ T6335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 821.141226][T17195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 821.169616][T12959] Bluetooth: hci3: command tx timeout [ 821.322543][ T6335] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.329685][ T6335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 821.630391][T13331] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.656202][T13331] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.939814][T13331] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.027388][T13331] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.060530][ T30] audit: type=1400 audit(1765801999.063:2485): avc: denied { write } for pid=17671 comm="syz.2.2484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 822.379598][T13331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 822.391119][T13331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 822.515818][ T6335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 822.557646][ T6335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 822.568450][T17417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 822.684374][T17417] 8021q: adding VLAN 0 to HW filter on device team0 [ 822.728119][T16465] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.735196][T16465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 822.796137][T16465] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.803213][T16465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 822.926588][T17519] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 822.961132][T17519] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 822.986150][T17519] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 823.026920][T17519] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 823.062763][T17354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 823.235036][T17354] veth0_vlan: entered promiscuous mode [ 823.318333][T17354] veth1_vlan: entered promiscuous mode [ 823.421159][T17354] veth0_macvtap: entered promiscuous mode [ 823.443427][T17354] veth1_macvtap: entered promiscuous mode [ 823.465986][T17519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 823.522328][ T30] audit: type=1326 audit(1765802000.523:2486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17713 comm="syz.2.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a278f749 code=0x7ffc0000 [ 823.543827][T17519] 8021q: adding VLAN 0 to HW filter on device team0 [ 823.567926][T17354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 823.614524][ T30] audit: type=1326 audit(1765802000.553:2487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17713 comm="syz.2.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f06a278f749 code=0x7ffc0000 [ 823.622985][T17354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 823.944157][ T132] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.951232][ T132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 823.962819][ T132] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.967106][ T30] audit: type=1326 audit(1765802000.553:2488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17713 comm="syz.2.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a278f749 code=0x7ffc0000 [ 823.969934][ T132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 824.010428][ T6335] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.027926][ T6335] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.067580][ T6335] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.094151][ T6335] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.121309][ T30] audit: type=1326 audit(1765802000.553:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17713 comm="syz.2.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a278f749 code=0x7ffc0000 [ 824.147563][T17417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 824.169267][ T30] audit: type=1326 audit(1765802000.563:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17713 comm="syz.2.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f06a278f749 code=0x7ffc0000 [ 824.233208][ T30] audit: type=1326 audit(1765802000.563:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17713 comm="syz.2.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a278f749 code=0x7ffc0000 [ 824.258425][T17519] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 824.273700][T17519] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 824.319137][ T30] audit: type=1326 audit(1765802000.573:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17713 comm="syz.2.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f06a278f34b code=0x7ffc0000 [ 824.348683][ T7691] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 824.396774][ T30] audit: type=1326 audit(1765802000.573:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17713 comm="syz.2.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f06a278f34b code=0x7ffc0000 [ 824.452165][ T30] audit: type=1326 audit(1765802000.573:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17713 comm="syz.2.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f06a278f34b code=0x7ffc0000 [ 824.619655][ T7691] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 824.648778][ T7691] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 824.711421][ T7691] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 824.742755][ T7691] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 824.764415][ T7691] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.777593][T17417] veth0_vlan: entered promiscuous mode [ 824.820624][ T7691] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 824.962004][T17417] veth1_vlan: entered promiscuous mode [ 824.983874][ T7691] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 824.996598][ T1336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.021269][T17725] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2487'. [ 825.042750][T17519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 825.043447][ T1336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.988503][T13960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 826.010754][T17417] veth0_macvtap: entered promiscuous mode [ 826.017084][T13960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 826.059973][T17417] veth1_macvtap: entered promiscuous mode [ 826.150444][T17519] veth0_vlan: entered promiscuous mode [ 826.184960][T17417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 826.468156][T17417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 826.491745][T17519] veth1_vlan: entered promiscuous mode [ 826.508059][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.535869][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.561663][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.589898][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.699967][T17519] veth0_macvtap: entered promiscuous mode [ 826.995660][T17519] veth1_macvtap: entered promiscuous mode [ 827.029928][ T6325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 827.060252][ T6325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 827.116989][T17519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 827.161653][T16215] usb 5-1: USB disconnect, device number 96 [ 827.206806][T17519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 827.276904][ T6325] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.285974][ T3460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 827.321741][ T3460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 827.495001][ T6325] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.528884][ T6325] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.564731][ T6325] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.718984][ T7692] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 827.751052][T13334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 827.771946][T13334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 827.913915][T13334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 827.922040][T13334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 828.025941][T17786] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2457'. [ 828.382336][ T7692] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 828.420586][ T7692] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 828.452212][ T7692] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 828.464605][ T7692] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 828.473978][ T7692] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.507714][ T7692] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 828.777549][T10568] udevd[10568]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 829.303643][ T7692] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 829.643457][ T7691] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 830.788102][ T7691] usb 3-1: Using ep0 maxpacket: 16 [ 830.804182][ T891] usb 1-1: USB disconnect, device number 66 [ 830.820621][ T7691] usb 3-1: config 0 has an invalid interface number: 156 but max is 0 [ 830.831006][ T7691] usb 3-1: config 0 has no interface number 0 [ 830.837173][ T7691] usb 3-1: config 0 interface 156 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 830.853745][ T7691] usb 3-1: config 0 interface 156 has no altsetting 0 [ 830.863003][ T7691] usb 3-1: New USB device found, idVendor=1234, idProduct=0002, bcdDevice=c8.36 [ 830.866502][ T30] kauditd_printk_skb: 124 callbacks suppressed [ 830.866514][ T30] audit: type=1326 audit(1765802007.863:2619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17805 comm="syz.3.2496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fec18f749 code=0x7ffc0000 [ 830.922177][ T30] audit: type=1326 audit(1765802007.903:2620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17805 comm="syz.3.2496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fec18f749 code=0x7ffc0000 [ 830.948020][ T30] audit: type=1326 audit(1765802007.903:2621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17805 comm="syz.3.2496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6fec18f749 code=0x7ffc0000 [ 831.028820][T16215] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 831.031483][ T30] audit: type=1326 audit(1765802007.903:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17805 comm="syz.3.2496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fec18f749 code=0x7ffc0000 [ 831.060989][ T7691] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.061071][ T7691] usb 3-1: Product: syz [ 831.061205][ T7691] usb 3-1: Manufacturer: syz [ 831.061297][ T7691] usb 3-1: SerialNumber: syz [ 831.134981][ T7691] usb 3-1: config 0 descriptor?? [ 831.418719][ T30] audit: type=1326 audit(1765802007.903:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17805 comm="syz.3.2496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fec18f749 code=0x7ffc0000 [ 831.486325][ T30] audit: type=1326 audit(1765802007.903:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17805 comm="syz.3.2496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6fec18f749 code=0x7ffc0000 [ 831.487366][T17791] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 831.548248][ T30] audit: type=1326 audit(1765802007.913:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17805 comm="syz.3.2496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fec18f749 code=0x7ffc0000 [ 831.558657][T16215] usb 6-1: Using ep0 maxpacket: 8 [ 831.580530][ T30] audit: type=1326 audit(1765802007.913:2626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17805 comm="syz.3.2496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6fec18f34b code=0x7ffc0000 [ 831.590226][T16215] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 831.623988][ T30] audit: type=1326 audit(1765802007.913:2627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17805 comm="syz.3.2496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6fec18f34b code=0x7ffc0000 [ 831.746121][T17818] gfs2: error -5 reading superblock [ 832.222592][ T30] audit: type=1326 audit(1765802007.913:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17805 comm="syz.3.2496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6fec18f34b code=0x7ffc0000 [ 832.280066][ T7691] usbtouchscreen 3-1:0.156: probe with driver usbtouchscreen failed with error -71 [ 832.305227][T16215] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 832.320445][ T7691] usb 3-1: USB disconnect, device number 71 [ 832.335864][T16215] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 832.351380][T16215] usb 6-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 832.363361][T16215] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.439220][T16215] usb 6-1: config 0 descriptor?? [ 833.048724][ T7691] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 833.181674][T17839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2505'. [ 833.404541][T16215] nzxt-kraken2 0003:1E71:170E.0055: hidraw0: USB HID v0.04 Device [HID 1e71:170e] on usb-dummy_hcd.5-1/input0 [ 833.429906][ T7691] usb 3-1: Using ep0 maxpacket: 16 [ 833.464578][ T7691] usb 3-1: config 0 has an invalid interface number: 156 but max is 0 [ 833.484123][ T7691] usb 3-1: config 0 has no interface number 0 [ 833.501303][ T7691] usb 3-1: config 0 interface 156 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 833.517281][T17843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 833.526894][ T7691] usb 3-1: config 0 interface 156 has no altsetting 0 [ 833.538334][T17843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 833.610005][ T7691] usb 3-1: New USB device found, idVendor=1234, idProduct=0002, bcdDevice=c8.36 [ 833.642802][ T7691] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.651560][ T89] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 833.693159][ T7691] usb 3-1: Product: syz [ 833.697323][ T7691] usb 3-1: Manufacturer: syz [ 833.746354][ T7691] usb 3-1: SerialNumber: syz [ 833.869289][ T89] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 833.889241][ T7691] usb 3-1: config 0 descriptor?? [ 833.926806][T17823] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 833.989000][ T89] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 834.145198][ T89] usb 1-1: too many endpoints for config 1 interface 1 altsetting 138: 250, using maximum allowed: 30 [ 834.200170][ T89] usb 1-1: config 1 interface 1 altsetting 138 has 0 endpoint descriptors, different from the interface descriptor's value: 250 [ 834.247396][ T89] usb 1-1: config 1 interface 1 has no altsetting 0 [ 834.294611][ T89] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 834.340541][ T89] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.364688][ T89] usb 1-1: Product: syz [ 834.372557][ T7691] usbtouchscreen 3-1:0.156: probe with driver usbtouchscreen failed with error -71 [ 834.395588][ T89] usb 1-1: Manufacturer: syz [ 834.411286][ T89] usb 1-1: SerialNumber: syz [ 834.421161][ T7691] usb 3-1: USB disconnect, device number 72 [ 834.454110][ T89] usb 1-1: selecting invalid altsetting 0 [ 834.477381][ T89] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 834.521480][ T89] usb 1-1: selecting invalid altsetting 0 [ 834.560110][ T89] usbtest 1-1:1.1: probe with driver usbtest failed with error -22 [ 834.749752][ T6027] usb 6-1: reset high-speed USB device number 56 using dummy_hcd [ 835.128389][T17860] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 835.888665][T17806] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 835.890590][ T7676] usb 1-1: USB disconnect, device number 67 [ 835.902844][T17869] netlink: 'syz.4.2515': attribute type 10 has an invalid length. [ 835.913446][ T5887] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 835.927397][T17869] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.934988][T17869] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.016170][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 836.016184][ T30] audit: type=1326 audit(1765802013.013:2686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17871 comm="syz.0.2517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2e2b8f749 code=0x7ffc0000 [ 836.080596][ T5887] usb 3-1: Using ep0 maxpacket: 16 [ 836.085413][T16215] usb 6-1: USB disconnect, device number 56 [ 836.106098][T17806] usb 4-1: config 0 has an invalid interface number: 70 but max is 0 [ 836.114027][ T30] audit: type=1326 audit(1765802013.013:2687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17871 comm="syz.0.2517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd2e2b8f749 code=0x7ffc0000 [ 836.188626][T17806] usb 4-1: config 0 has no interface number 0 [ 836.288950][T16215] usb 6-1: new low-speed USB device number 57 using dummy_hcd [ 836.289483][T17806] usb 4-1: New USB device found, idVendor=1b3d, idProduct=01c1, bcdDevice= 2.f5 [ 836.322641][ T5887] usb 3-1: config 0 has an invalid interface number: 156 but max is 0 [ 836.427912][ T5887] usb 3-1: config 0 has no interface number 0 [ 836.437024][T17806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.437696][ T30] audit: type=1326 audit(1765802013.013:2688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17871 comm="syz.0.2517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2e2b8f749 code=0x7ffc0000 [ 836.445175][ T5887] usb 3-1: config 0 interface 156 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 836.469518][ T30] audit: type=1326 audit(1765802013.013:2689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17871 comm="syz.0.2517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2e2b8f749 code=0x7ffc0000 [ 836.502272][T17806] usb 4-1: Product: syz [ 836.502291][T17806] usb 4-1: Manufacturer: syz [ 836.502306][T17806] usb 4-1: SerialNumber: syz [ 836.520167][ T5887] usb 3-1: config 0 interface 156 has no altsetting 0 [ 836.523305][T16215] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 836.531294][ T5887] usb 3-1: New USB device found, idVendor=1234, idProduct=0002, bcdDevice=c8.36 [ 836.543848][T17806] usb 4-1: config 0 descriptor?? [ 836.556509][T17806] ftdi_sio 4-1:0.70: FTDI USB Serial Device converter detected [ 836.558147][T16215] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 836.575137][T16215] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 836.588551][ T30] audit: type=1326 audit(1765802013.013:2690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17871 comm="syz.0.2517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd2e2b8f749 code=0x7ffc0000 [ 836.598797][T17806] ftdi_sio ttyUSB0: unknown device type: 0x2f5 [ 836.612544][T16215] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 836.618322][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.629771][T16215] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 836.661952][ T30] audit: type=1326 audit(1765802013.023:2691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17871 comm="syz.0.2517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2e2b8f749 code=0x7ffc0000 [ 836.691399][ T5887] usb 3-1: Product: syz [ 836.695565][ T5887] usb 3-1: Manufacturer: syz [ 836.700748][ T30] audit: type=1326 audit(1765802013.023:2692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17871 comm="syz.0.2517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd2e2b8f34b code=0x7ffc0000 [ 836.708778][ T5887] usb 3-1: SerialNumber: syz [ 836.734424][T16215] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 836.747887][T16215] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 836.798122][ T5887] usb 3-1: config 0 descriptor?? [ 836.801813][T16215] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 836.815466][T17863] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 836.824753][T16466] usb 4-1: USB disconnect, device number 90 [ 836.833406][T16466] ftdi_sio 4-1:0.70: device disconnected [ 836.843347][ T30] audit: type=1326 audit(1765802013.023:2693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17871 comm="syz.0.2517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd2e2b8f34b code=0x7ffc0000 [ 836.880203][T16215] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 836.897142][T16215] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 836.912377][ T30] audit: type=1326 audit(1765802013.023:2694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17871 comm="syz.0.2517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd2e2b8f34b code=0x7ffc0000 [ 836.941243][T16215] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 836.949110][T16215] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 836.959920][T16215] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 836.972074][ T30] audit: type=1326 audit(1765802013.023:2695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17871 comm="syz.0.2517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd2e2b8f34b code=0x7ffc0000 [ 836.996949][T16215] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 837.010121][T17882] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17882 comm=syz.0.2519 [ 837.022736][T16215] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 837.038983][ T5887] usbtouchscreen 3-1:0.156: probe with driver usbtouchscreen failed with error -71 [ 837.054181][T16215] usb 6-1: string descriptor 0 read error: -22 [ 837.061611][T16215] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 837.071115][T16215] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.075956][ T5887] usb 3-1: USB disconnect, device number 73 [ 837.084155][T16215] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 837.428637][T16215] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 837.454334][ T89] usb 6-1: USB disconnect, device number 57 [ 837.581270][T16215] usb 1-1: Using ep0 maxpacket: 16 [ 837.820903][T16215] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 837.858733][T16215] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.866733][T16215] usb 1-1: Product: syz [ 837.902376][T16215] usb 1-1: Manufacturer: syz [ 837.923404][T16215] usb 1-1: SerialNumber: syz [ 837.948302][T16215] usb 1-1: config 0 descriptor?? [ 837.965947][T16215] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 838.068661][T17806] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 838.443762][T17806] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 838.471685][T17806] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 838.512708][T17806] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 838.538792][T17806] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 838.572829][T17806] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 838.604611][T17806] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 838.628872][T17806] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 838.653332][T17806] usb 6-1: Product: syz [ 838.673428][T17806] usb 6-1: Manufacturer: syz [ 838.684150][T17806] cdc_wdm 6-1:1.0: skipping garbage [ 838.700203][T17806] cdc_wdm 6-1:1.0: skipping garbage [ 838.710743][T17806] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 838.720914][T17806] cdc_wdm 6-1:1.0: Unknown control protocol [ 838.970184][T16215] ssu100 1-1:0.0: probe with driver ssu100 failed with error -110 [ 839.383825][ T5887] usb 6-1: USB disconnect, device number 58 [ 839.394443][T16215] usb 1-1: USB disconnect, device number 68 [ 839.671755][T17913] can: request_module (can-proto-5) failed. [ 839.900882][T17928] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 840.492675][T17929] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 841.695350][T17957] netlink: 'syz.0.2537': attribute type 16 has an invalid length. [ 841.761718][T17957] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2537'. [ 841.799377][T17957] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.806644][T17957] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 842.615401][T17960] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 842.640097][T17960] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 843.528645][ T5887] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 843.738653][ T5887] usb 4-1: Using ep0 maxpacket: 16 [ 843.777836][ T5887] usb 4-1: config 0 has an invalid interface number: 156 but max is 0 [ 843.867525][ T5887] usb 4-1: config 0 has no interface number 0 [ 843.890567][T17977] cgroup: fork rejected by pids controller in /syz0 [ 843.980776][ T5887] usb 4-1: config 0 interface 156 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 844.140164][ T5887] usb 4-1: config 0 interface 156 has no altsetting 0 [ 844.230342][ T5887] usb 4-1: New USB device found, idVendor=1234, idProduct=0002, bcdDevice=c8.36 [ 844.348725][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.356700][ T5887] usb 4-1: Product: syz [ 844.488700][ T5887] usb 4-1: Manufacturer: syz [ 844.518689][ T5887] usb 4-1: SerialNumber: syz [ 844.588928][ T5887] usb 4-1: config 0 descriptor?? [ 844.624720][T17983] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 844.655539][ T30] kauditd_printk_skb: 204 callbacks suppressed [ 844.655548][ T30] audit: type=1326 audit(1765802021.653:2900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18014 comm="syz.2.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a278f749 code=0x7ffc0000 [ 845.158650][ T30] audit: type=1326 audit(1765802021.693:2901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18014 comm="syz.2.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f06a278f749 code=0x7ffc0000 [ 845.201490][ T5887] usbtouchscreen 4-1:0.156: probe with driver usbtouchscreen failed with error -71 [ 845.228838][ T5887] usb 4-1: USB disconnect, device number 91 [ 845.244975][ T30] audit: type=1326 audit(1765802021.693:2902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18014 comm="syz.2.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a278f749 code=0x7ffc0000 [ 845.711547][ T30] audit: type=1326 audit(1765802021.743:2903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18014 comm="syz.2.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a278f749 code=0x7ffc0000 [ 845.989001][ T30] audit: type=1326 audit(1765802021.743:2904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18014 comm="syz.2.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f06a278f749 code=0x7ffc0000 [ 846.108688][ T6027] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 846.298155][ T30] audit: type=1326 audit(1765802021.773:2905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18014 comm="syz.2.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a278f749 code=0x7ffc0000 [ 846.452146][ T6027] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 846.486683][ T6027] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.581697][ T6027] usb 5-1: Product: syz [ 846.585849][ T6027] usb 5-1: Manufacturer: syz [ 846.717321][ T6027] usb 5-1: SerialNumber: syz [ 846.718645][ T30] audit: type=1326 audit(1765802021.773:2906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18014 comm="syz.2.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f06a278f34b code=0x7ffc0000 [ 847.082346][T18021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 847.355110][T18021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 847.388731][ T30] audit: type=1326 audit(1765802021.773:2907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18014 comm="syz.2.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f06a278f34b code=0x7ffc0000 [ 847.596083][T18026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 847.774901][T18030] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2548'. [ 848.334554][T18026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 848.372070][ T30] audit: type=1326 audit(1765802021.773:2908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18014 comm="syz.2.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f06a278f34b code=0x7ffc0000 [ 848.389305][ T6027] rtl8150 5-1:1.0: couldn't reset the device [ 848.402065][ T6027] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 848.604119][ T30] audit: type=1326 audit(1765802021.773:2909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18014 comm="syz.2.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f06a278f34b code=0x7ffc0000 [ 848.664857][T18021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 848.750145][T18021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 849.096281][T18021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 849.173133][T18021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 849.287230][ T5887] usb 5-1: USB disconnect, device number 97 [ 851.306614][T18083] input: syz1 as /devices/virtual/input/input105 [ 851.811082][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 851.811099][ T30] audit: type=1326 audit(1765802028.633:2960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18080 comm="syz.4.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36acd8f749 code=0x7ffc0000 [ 852.218668][ T30] audit: type=1326 audit(1765802028.763:2961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18080 comm="syz.4.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36acd8f749 code=0x7ffc0000 [ 852.402093][ T30] audit: type=1326 audit(1765802029.373:2962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18090 comm="syz.5.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9378f749 code=0x7ffc0000 [ 852.802354][ T30] audit: type=1326 audit(1765802029.393:2963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18090 comm="syz.5.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9378f749 code=0x7ffc0000 [ 852.908903][ T30] audit: type=1326 audit(1765802029.533:2964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18090 comm="syz.5.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7c9378f749 code=0x7ffc0000 [ 852.991055][ T30] audit: type=1326 audit(1765802029.533:2965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18090 comm="syz.5.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9378f749 code=0x7ffc0000 [ 853.079688][ T30] audit: type=1326 audit(1765802029.533:2966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18090 comm="syz.5.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9378f749 code=0x7ffc0000 [ 853.218818][ T30] audit: type=1326 audit(1765802029.533:2967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18090 comm="syz.5.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7c9378f749 code=0x7ffc0000 [ 853.574823][ T30] audit: type=1326 audit(1765802029.533:2968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18090 comm="syz.5.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9378f749 code=0x7ffc0000 [ 853.804394][ T30] audit: type=1326 audit(1765802029.533:2969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18090 comm="syz.5.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9378f749 code=0x7ffc0000 [ 854.949155][T18120] 9pnet_fd: Insufficient options for proto=fd [ 856.165775][T17995] syz.0.2542 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 856.178630][ T5942] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 856.287964][T17995] CPU: 0 UID: 0 PID: 17995 Comm: syz.0.2542 Tainted: G L syzkaller #0 PREEMPT(full) [ 856.287987][T17995] Tainted: [L]=SOFTLOCKUP [ 856.287992][T17995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 856.287998][T17995] Call Trace: [ 856.288002][T17995] [ 856.288007][T17995] dump_stack_lvl+0x16c/0x1f0 [ 856.288037][T17995] dump_header+0x101/0x960 [ 856.288067][T17995] oom_kill_process+0x176/0x910 [ 856.288089][T17995] out_of_memory+0x350/0x1700 [ 856.288106][T17995] ? __lock_acquire+0x436/0x2890 [ 856.288122][T17995] ? __pfx_out_of_memory+0x10/0x10 [ 856.288144][T17995] mem_cgroup_out_of_memory+0x118/0x130 [ 856.288163][T17995] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 856.288185][T17995] ? do_raw_spin_unlock+0x172/0x230 [ 856.288203][T17995] try_charge_memcg+0x695/0xd30 [ 856.288220][T17995] ? __pfx_try_charge_memcg+0x10/0x10 [ 856.288235][T17995] ? __pfx_find_held_lock+0x1/0x10 [ 856.288252][T17995] ? rcu_read_unlock+0x17/0x60 [ 856.288271][T17995] charge_memcg+0x8a/0x230 [ 856.288291][T17995] __mem_cgroup_charge+0x2b/0x1e0 [ 856.288308][T17995] shmem_alloc_and_add_folio+0x50c/0xc20 [ 856.288330][T17995] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 856.288349][T17995] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 856.288370][T17995] shmem_get_folio_gfp+0x67f/0x1610 [ 856.288391][T17995] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 856.288415][T17995] shmem_write_begin+0x1a4/0x3b0 [ 856.288426][T17995] ? __pfx_shmem_write_begin+0x10/0x10 [ 856.288437][T17995] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 856.288451][T17995] ? lockdep_hardirqs_on+0x7c/0x110 [ 856.288470][T17995] generic_perform_write+0x3c4/0x900 [ 856.288491][T17995] ? __pfx_generic_perform_write+0x10/0x10 [ 856.288509][T17995] ? file_update_time_flags+0x35c/0x520 [ 856.288523][T17995] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 856.288536][T17995] shmem_file_write_iter+0x10e/0x140 [ 856.288550][T17995] __kernel_write_iter+0x31a/0xb10 [ 856.288573][T17995] ? __pfx___kernel_write_iter+0x10/0x10 [ 856.288594][T17995] ? __up_read+0x2d1/0x700 [ 856.288611][T17995] ? dump_user_range+0x756/0xb70 [ 856.288631][T17995] dump_user_range+0x413/0xb70 [ 856.288651][T17995] ? __pfx_dump_user_range+0x10/0x10 [ 856.288669][T17995] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 856.288685][T17995] ? __pfx_writenote+0x10/0x10 [ 856.288699][T17995] elf_core_dump+0x29c3/0x3c10 [ 856.288717][T17995] ? __pfx_elf_core_dump+0x10/0x10 [ 856.288727][T17995] ? kasan_save_stack+0x33/0x60 [ 856.288739][T17995] ? kasan_save_track+0x14/0x30 [ 856.288750][T17995] ? __kasan_kmalloc+0xaa/0xb0 [ 856.288760][T17995] ? __kvmalloc_node_noprof+0x3ac/0xa40 [ 856.288773][T17995] ? vfs_coredump+0x1dd9/0x55e0 [ 856.288788][T17995] ? arch_do_signal_or_restart+0x8f/0x7e0 [ 856.288804][T17995] ? irqentry_exit+0x38a/0x8c0 [ 856.288819][T17995] ? asm_exc_page_fault+0x26/0x30 [ 856.288833][T17995] ? 0xffffffffff600000 [ 856.288866][T17995] ? vfs_coredump+0x2b85/0x55e0 [ 856.288882][T17995] vfs_coredump+0x2b85/0x55e0 [ 856.288904][T17995] ? __pfx_vfs_coredump+0x10/0x10 [ 856.288920][T17995] ? __lock_acquire+0x436/0x2890 [ 856.288936][T17995] ? __lock_acquire+0x436/0x2890 [ 856.288950][T17995] ? lock_acquire+0x179/0x330 [ 856.288966][T17995] ? lock_acquire+0x179/0x330 [ 856.288988][T17995] ? arch_stack_walk+0xa6/0x100 [ 856.289008][T17995] ? stack_trace_save+0x8e/0xc0 [ 856.289021][T17995] ? __pfx_stack_trace_save+0x10/0x10 [ 856.289033][T17995] ? stack_depot_save_flags+0x29/0x9b0 [ 856.289046][T17995] ? __lock_acquire+0x436/0x2890 [ 856.289061][T17995] ? kasan_save_stack+0x42/0x60 [ 856.289122][T17995] ? proc_coredump_connector+0x2d1/0x4f0 [ 856.289150][T17995] ? __pfx_proc_coredump_connector+0x10/0x10 [ 856.289182][T17995] ? rcu_is_watching+0x12/0xc0 [ 856.289202][T17995] get_signal+0x22e1/0x26d0 [ 856.289236][T17995] ? __pfx_get_signal+0x10/0x10 [ 856.289268][T17995] arch_do_signal_or_restart+0x8f/0x7e0 [ 856.289301][T17995] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 856.289336][T17995] ? do_user_addr_fault+0x926/0x1370 [ 856.289364][T17995] irqentry_exit+0x38a/0x8c0 [ 856.289393][T17995] asm_exc_page_fault+0x26/0x30 [ 856.289411][T17995] RIP: 0033:0x7fd2e2b8f749 [ 856.289429][T17995] Code: Unable to access opcode bytes at 0x7fd2e2b8f71f. [ 856.289437][T17995] RSP: 002b:00007fd2e0df5f08 EFLAGS: 00010246 [ 856.289453][T17995] RAX: 0000000000000000 RBX: 0000000000000058 RCX: 00007fd2e2b8f749 [ 856.289464][T17995] RDX: 00007fd2e0df5f20 RSI: 0000000000000058 RDI: 00007fd2e0df5f20 [ 856.289475][T17995] RBP: 00007fd2e2c13f91 R08: 0000000000000000 R09: 0000000000000058 [ 856.289486][T17995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 856.289496][T17995] R13: 00007fd2e2de6128 R14: 00007fd2e2de6090 R15: 00007fff95a43b88 [ 856.289521][T17995] [ 857.332995][T17995] memory: usage 307200kB, limit 307200kB, failcnt 26326 [ 857.384582][T17995] memory+swap: usage 432192kB, limit 9007199254740988kB, failcnt 0 [ 857.437276][T17995] kmem: usage 4024kB, limit 9007199254740988kB, failcnt 0 [ 857.568864][T17995] Memory cgroup stats for /syz0: [ 857.569828][T17995] cache 310497280 [ 857.758791][ T5942] usb 3-1: device descriptor read/64, error -71 [ 857.807369][T17995] rss 20480 [ 857.897491][T17995] rss_huge 0 [ 857.911826][T17995] shmem 310489088 [ 857.942267][T17995] mapped_file 0 [ 857.945713][T17995] dirty 0 [ 857.982319][T17995] writeback 0 [ 857.987301][T17995] workingset_refault_anon 14 [ 858.002446][T17995] workingset_refault_file 495 [ 858.011925][ T5942] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 858.015769][T17995] swap 127987712 [ 858.030141][T17995] swapcached 8192 [ 858.038639][T17995] pgpgin 574062 [ 858.042236][T17995] pgpgout 498250 [ 858.045837][T17995] pgfault 535220 [ 858.056379][T17995] pgmajfault 26 [ 858.060226][T17995] inactive_anon 249872384 [ 858.064880][T17995] active_anon 60645376 [ 858.079310][T18135] [U]  [ 858.133188][T17995] inactive_file 8192 [ 858.146296][T17995] active_file 0 [ 858.151870][T17995] unevictable 0 [ 858.159808][T17995] hierarchical_memory_limit 314572800 [ 858.166049][T17995] hierarchical_memsw_limit 9223372036854771712 [ 858.256851][ T5942] usb 3-1: device descriptor read/64, error -71 [ 858.827239][ T5942] usb usb3-port1: attempt power cycle [ 858.828967][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 858.828981][ T30] audit: type=1400 audit(1765802035.403:2985): avc: denied { write } for pid=18147 comm="syz.5.2573" name="usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 858.882819][T17995] total_cache 310497280 [ 858.891594][T17995] total_rss 20480 [ 858.895744][T17995] total_rss_huge 0 [ 858.900876][T17995] total_shmem 310489088 [ 859.193368][T17995] total_mapped_file 0 [ 859.197346][T17995] total_dirty 0 [ 859.213653][T17995] total_writeback 0 [ 859.232616][T17995] total_workingset_refault_anon 14 [ 859.249564][T17995] total_workingset_refault_file 495 [ 859.254764][T17995] total_swap 127987712 [ 859.261462][ T5942] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 859.287588][T17995] total_swapcached 8192 [ 859.292242][T17995] total_pgpgin 574062 [ 859.296222][T17995] total_pgpgout 498250 [ 859.328718][T17995] total_pgfault 535220 [ 859.340311][T17995] total_pgmajfault 26 [ 859.347101][T17995] total_inactive_anon 249872384 [ 859.367459][T17995] total_active_anon 60645376 [ 859.384899][T17995] total_inactive_file 8192 [ 859.411155][T17995] total_active_file 0 [ 859.435369][T17995] total_unevictable 0 [ 859.488696][ T5942] usb 3-1: device not accepting address 76, error -71 [ 859.499384][T17995] anon_cost 0 [ 859.516206][T17995] file_cost 0 [ 859.534953][T17995] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2542,pid=17984,uid=0 [ 859.593161][T17995] Memory cgroup out of memory: Killed process 17984 (syz.0.2542) total-vm:49260kB, anon-rss:0kB, file-rss:33408kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 861.291990][T18012] syz.0.2542 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 861.510955][T18012] CPU: 1 UID: 0 PID: 18012 Comm: syz.0.2542 Tainted: G L syzkaller #0 PREEMPT(full) [ 861.510974][T18012] Tainted: [L]=SOFTLOCKUP [ 861.510979][T18012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 861.510985][T18012] Call Trace: [ 861.510989][T18012] [ 861.510994][T18012] dump_stack_lvl+0x16c/0x1f0 [ 861.511015][T18012] dump_header+0x101/0x960 [ 861.511036][T18012] oom_kill_process+0x176/0x910 [ 861.511055][T18012] out_of_memory+0x350/0x1700 [ 861.511072][T18012] ? __lock_acquire+0x436/0x2890 [ 861.511088][T18012] ? __pfx_out_of_memory+0x10/0x10 [ 861.511110][T18012] mem_cgroup_out_of_memory+0x118/0x130 [ 861.511129][T18012] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 861.511150][T18012] ? do_raw_spin_unlock+0x172/0x230 [ 861.511168][T18012] try_charge_memcg+0x695/0xd30 [ 861.511185][T18012] ? __pfx_try_charge_memcg+0x10/0x10 [ 861.511201][T18012] ? __pfx_find_held_lock+0x1/0x10 [ 861.511221][T18012] ? rcu_read_unlock+0x17/0x60 [ 861.511241][T18012] charge_memcg+0x8a/0x230 [ 861.511256][T18012] __mem_cgroup_charge+0x2b/0x1e0 [ 861.511273][T18012] shmem_alloc_and_add_folio+0x50c/0xc20 [ 861.511295][T18012] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 861.511315][T18012] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 861.511336][T18012] shmem_get_folio_gfp+0x67f/0x1610 [ 861.511357][T18012] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 861.511375][T18012] ? __pfx_timestamp_truncate+0x10/0x10 [ 861.511395][T18012] shmem_write_begin+0x1a4/0x3b0 [ 861.511406][T18012] ? __pfx_shmem_write_begin+0x10/0x10 [ 861.511418][T18012] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 861.511435][T18012] generic_perform_write+0x3c4/0x900 [ 861.511460][T18012] ? __pfx_generic_perform_write+0x10/0x10 [ 861.511476][T18012] ? generic_update_time+0xcf/0xf0 [ 861.511486][T18012] ? mnt_put_write_access_file+0x45/0xf0 [ 861.511502][T18012] ? file_update_time_flags+0x35c/0x520 [ 861.511515][T18012] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 861.511527][T18012] shmem_file_write_iter+0x10e/0x140 [ 861.511540][T18012] __kernel_write_iter+0x31a/0xb10 [ 861.511557][T18012] ? __pfx___kernel_write_iter+0x10/0x10 [ 861.511570][T18012] ? __up_read+0x2d1/0x700 [ 861.511587][T18012] ? dump_user_range+0x756/0xb70 [ 861.511607][T18012] dump_user_range+0x413/0xb70 [ 861.511627][T18012] ? __pfx_dump_user_range+0x10/0x10 [ 861.511645][T18012] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 861.511661][T18012] ? __pfx_writenote+0x10/0x10 [ 861.511676][T18012] elf_core_dump+0x29c3/0x3c10 [ 861.511694][T18012] ? __pfx_elf_core_dump+0x10/0x10 [ 861.511704][T18012] ? kasan_save_stack+0x33/0x60 [ 861.511715][T18012] ? kasan_save_track+0x14/0x30 [ 861.511727][T18012] ? __kasan_kmalloc+0xaa/0xb0 [ 861.511738][T18012] ? __kvmalloc_node_noprof+0x3ac/0xa40 [ 861.511750][T18012] ? vfs_coredump+0x1dd9/0x55e0 [ 861.511766][T18012] ? arch_do_signal_or_restart+0x8f/0x7e0 [ 861.511782][T18012] ? irqentry_exit+0x38a/0x8c0 [ 861.511798][T18012] ? asm_exc_page_fault+0x26/0x30 [ 861.511812][T18012] ? 0xffffffffff600000 [ 861.511844][T18012] ? vfs_coredump+0x2b85/0x55e0 [ 861.511860][T18012] vfs_coredump+0x2b85/0x55e0 [ 861.511882][T18012] ? __pfx_vfs_coredump+0x10/0x10 [ 861.511898][T18012] ? __lock_acquire+0x436/0x2890 [ 861.511914][T18012] ? __lock_acquire+0x436/0x2890 [ 861.511928][T18012] ? lock_acquire+0x179/0x330 [ 861.511944][T18012] ? lock_acquire+0x179/0x330 [ 861.511966][T18012] ? arch_stack_walk+0xa6/0x100 [ 861.511985][T18012] ? stack_trace_save+0x8e/0xc0 [ 861.511998][T18012] ? __pfx_stack_trace_save+0x10/0x10 [ 861.512011][T18012] ? stack_depot_save_flags+0x29/0x9b0 [ 861.512025][T18012] ? __lock_acquire+0x436/0x2890 [ 861.512039][T18012] ? kasan_save_stack+0x42/0x60 [ 861.512073][T18012] ? proc_coredump_connector+0x2d1/0x4f0 [ 861.512091][T18012] ? __pfx_proc_coredump_connector+0x10/0x10 [ 861.512112][T18012] ? rcu_is_watching+0x12/0xc0 [ 861.512124][T18012] get_signal+0x22e1/0x26d0 [ 861.512146][T18012] ? __pfx_get_signal+0x10/0x10 [ 861.512167][T18012] arch_do_signal_or_restart+0x8f/0x7e0 [ 861.512183][T18012] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 861.512203][T18012] ? do_user_addr_fault+0x926/0x1370 [ 861.512221][T18012] irqentry_exit+0x38a/0x8c0 [ 861.512239][T18012] asm_exc_page_fault+0x26/0x30 [ 861.512250][T18012] RIP: 0033:0x7fd2e2b8f749 [ 861.512262][T18012] Code: Unable to access opcode bytes at 0x7fd2e2b8f71f. [ 861.512268][T18012] RSP: 002b:00007fd2e0df5f08 EFLAGS: 00010246 [ 861.512277][T18012] RAX: 0000000000000000 RBX: 0000000000000058 RCX: 00007fd2e2b8f749 [ 861.512285][T18012] RDX: 00007fd2e0df5f20 RSI: 0000000000000058 RDI: 00007fd2e0df5f20 [ 861.512291][T18012] RBP: 00007fd2e2c13f91 R08: 0000000000000000 R09: 0000000000000058 [ 861.512298][T18012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 861.512305][T18012] R13: 00007fd2e2de6128 R14: 00007fd2e2de6090 R15: 00007fff95a43b88 [ 861.512319][T18012] [ 861.512324][T18012] memory: usage 307088kB, limit 307200kB, failcnt 26808 [ 862.681379][T18012] memory+swap: usage 417092kB, limit 9007199254740988kB, failcnt 0 [ 862.698978][T18012] kmem: usage 3976kB, limit 9007199254740988kB, failcnt 0 [ 862.706095][T18012] Memory cgroup stats for /syz0: [ 862.706219][T18012] cache 301764608 [ 862.772959][T18194] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2581'. [ 862.822571][T18012] rss 45056 [ 862.825692][T18012] rss_huge 0 [ 862.865237][T18012] shmem 299929600 [ 862.938663][T18012] mapped_file 847872 [ 862.960972][T18012] dirty 0 [ 863.238673][T18012] writeback 0 [ 863.241972][T18012] workingset_refault_anon 22 [ 863.292033][T18012] workingset_refault_file 942 [ 863.296939][T18012] swap 120930304 [ 863.327154][T18012] swapcached 20480 [ 863.358608][T18012] pgpgin 576921 [ 863.362070][T18012] pgpgout 503232 [ 863.365603][T18012] pgfault 535379 [ 863.441812][T18012] pgmajfault 32 [ 863.471847][T18012] inactive_anon 249970688 [ 863.471939][ T30] audit: type=1400 audit(1765802040.463:2986): avc: denied { remount } for pid=18210 comm="syz.4.2584" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 863.476172][T18012] active_anon 49790976 [ 863.476182][T18012] inactive_file 0 [ 863.476190][T18012] active_file 1835008 [ 863.476198][T18012] unevictable 0 [ 863.476206][T18012] hierarchical_memory_limit 314572800 [ 863.544836][T18212] Set syz0 is full, maxelem 0 reached [ 863.684985][ T30] audit: type=1400 audit(1765802040.573:2987): avc: denied { read } for pid=18208 comm="syz.3.2585" path="socket:[72908]" dev="sockfs" ino=72908 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 863.838680][T18012] hierarchical_memsw_limit 9223372036854771712 [ 863.908241][T18012] total_cache 301764608 [ 864.450155][T18012] total_rss 45056 [ 864.592206][ T30] audit: type=1326 audit(1765802041.593:2988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18216 comm="syz.3.2587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fec18f749 code=0x7ffc0000 [ 864.631333][T18012] total_rss_huge 0 [ 864.635039][T18012] total_shmem 299929600 [ 864.667380][T18012] total_mapped_file 847872 [ 864.678261][T18012] total_dirty 0 [ 864.697493][T18012] total_writeback 0 [ 864.708631][T18012] total_workingset_refault_anon 22 [ 864.717238][ T30] audit: type=1326 audit(1765802041.593:2989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18216 comm="syz.3.2587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fec18f749 code=0x7ffc0000 [ 864.788596][T18012] total_workingset_refault_file 942 [ 864.816004][T18012] total_swap 120930304 [ 864.833777][T18012] total_swapcached 20480 [ 864.885388][T18012] total_pgpgin 576921 [ 864.895922][T18012] total_pgpgout 503232 [ 864.910701][T18012] total_pgfault 535379 [ 864.923799][T18012] total_pgmajfault 32 [ 864.924076][ T30] audit: type=1400 audit(1765802041.923:2990): avc: denied { watch watch_reads } for pid=18230 comm="syz.2.2591" path="/dev/pts/0" dev="devpts" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_devpts_t tclass=chr_file permissive=1 [ 864.958774][T18012] total_inactive_anon 249970688 [ 864.963622][T18012] total_active_anon 49790976 [ 864.970225][T18012] total_inactive_file 0 [ 864.974379][T18012] total_active_file 1835008 [ 864.979065][T18012] total_unevictable 0 [ 864.983071][T18012] anon_cost 0 [ 864.986325][T18012] file_cost 0 [ 866.971485][T18009] syz.0.2542 (18009) used greatest stack depth: 18856 bytes left [ 867.038646][ T30] audit: type=1400 audit(1765802042.433:2991): avc: denied { name_bind } for pid=18232 comm="syz.4.2592" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 867.059935][T18012] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2542,pid=17982,uid=0 [ 868.108371][T18012] Memory cgroup out of memory: Killed process 17982 (syz.0.2542) total-vm:49260kB, anon-rss:0kB, file-rss:33340kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 973.168540][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 973.175486][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P18189/1:b..l P18250/3:b..l P132/1:b..l [ 973.186135][ C0] rcu: (detected by 0, t=10502 jiffies, g=85421, q=1100 ncpus=2) [ 973.193927][ C0] task:kworker/u8:5 state:R running task stack:24088 pid:132 tgid:132 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 973.208185][ C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 973.215978][ C0] Call Trace: [ 973.219245][ C0] [ 973.222154][ C0] ? __schedule+0x10b9/0x6150 [ 973.226809][ C0] __schedule+0x1139/0x6150 [ 973.231294][ C0] ? __pfx___schedule+0x10/0x10 [ 973.236120][ C0] ? mark_held_locks+0x49/0x80 [ 973.240856][ C0] preempt_schedule_irq+0x51/0x90 [ 973.245853][ C0] irqentry_exit+0x1d8/0x8c0 [ 973.250419][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 973.256370][ C0] RIP: 0010:lock_acquire+0x62/0x330 [ 973.261538][ C0] Code: 76 17 12 83 f8 07 0f 87 a2 02 00 00 89 c0 48 0f a3 05 82 fe ed 0e 0f 82 74 02 00 00 8b 35 1a 2f ee 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 99 76 17 12 0f 85 ad 02 00 00 48 83 c4 [ 973.281129][ C0] RSP: 0018:ffffc90002e87460 EFLAGS: 00000206 [ 973.287167][ C0] RAX: 0000000000000046 RBX: ffffffff8e3c9620 RCX: 00000000e0871288 [ 973.295123][ C0] RDX: 0000000000000000 RSI: ffffffff8da9bfab RDI: ffffffff8bf24280 [ 973.303066][ C0] RBP: 0000000000000002 R08: 000000000cf8a69d R09: 00000000d0cf8a69 [ 973.311009][ C0] R10: 0000000000000002 R11: ffff88801d732ff0 R12: 0000000000000000 [ 973.318949][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 973.326899][ C0] ? unwind_next_frame+0x3f4/0x20a0 [ 973.332080][ C0] unwind_next_frame+0xd1/0x20a0 [ 973.336989][ C0] ? unwind_next_frame+0xbd/0x20a0 [ 973.342074][ C0] ? arch_stack_walk+0x73/0x100 [ 973.346901][ C0] __unwind_start+0x45f/0x7f0 [ 973.351552][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 973.357677][ C0] arch_stack_walk+0x73/0x100 [ 973.362328][ C0] ? arch_stack_walk+0x73/0x100 [ 973.367152][ C0] stack_trace_save+0x8e/0xc0 [ 973.371800][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 973.377147][ C0] kasan_save_stack+0x33/0x60 [ 973.381813][ C0] kasan_save_track+0x14/0x30 [ 973.386474][ C0] __kasan_kmalloc+0xaa/0xb0 [ 973.391041][ C0] __kmalloc_node_track_caller_noprof+0x353/0x930 [ 973.397448][ C0] ? pskb_expand_head+0x238/0xf80 [ 973.402450][ C0] ? kmalloc_reserve+0xef/0x2c0 [ 973.407276][ C0] kmalloc_reserve+0xef/0x2c0 [ 973.411932][ C0] pskb_expand_head+0x238/0xf80 [ 973.416761][ C0] ? __pfx_pskb_expand_head+0x10/0x10 [ 973.422109][ C0] batadv_skb_head_push+0xf5/0x290 [ 973.427195][ C0] batadv_send_skb_packet+0xef/0x6f0 [ 973.432459][ C0] batadv_iv_send_outstanding_bat_ogm_packet+0x734/0x920 [ 973.439460][ C0] process_one_work+0x9ba/0x1b20 [ 973.444376][ C0] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 973.451893][ C0] ? __pfx_process_one_work+0x10/0x10 [ 973.457243][ C0] ? assign_work+0x1a0/0x250 [ 973.461806][ C0] worker_thread+0x6c8/0xf10 [ 973.466372][ C0] ? __kthread_parkme+0x19e/0x250 [ 973.471370][ C0] ? __pfx_worker_thread+0x10/0x10 [ 973.476454][ C0] kthread+0x3c5/0x780 [ 973.480495][ C0] ? __pfx_kthread+0x10/0x10 [ 973.485056][ C0] ? rcu_is_watching+0x12/0xc0 [ 973.489790][ C0] ? __pfx_kthread+0x10/0x10 [ 973.494352][ C0] ret_from_fork+0x983/0xb10 [ 973.498918][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 973.504006][ C0] ? __switch_to+0x7af/0x10d0 [ 973.508655][ C0] ? __pfx_kthread+0x10/0x10 [ 973.513217][ C0] ret_from_fork_asm+0x1a/0x30 [ 973.517961][ C0] [ 973.520952][ C0] task:syz.2.2595 state:R running task stack:20920 pid:18250 tgid:18249 ppid:15302 task_flags:0x400040 flags:0x00080000 [ 973.534390][ C0] Call Trace: [ 973.537641][ C0] [ 973.540546][ C0] ? __schedule+0x10b9/0x6150 [ 973.545197][ C0] __schedule+0x1139/0x6150 [ 973.549679][ C0] ? __pfx___schedule+0x10/0x10 [ 973.554502][ C0] ? kasan_quarantine_put+0x10a/0x240 [ 973.559847][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 973.565190][ C0] preempt_schedule_common+0x44/0xc0 [ 973.570450][ C0] preempt_schedule_thunk+0x16/0x30 [ 973.575621][ C0] ? __neigh_event_send+0x32b/0x1390 [ 973.580880][ C0] __local_bh_enable_ip+0x107/0x120 [ 973.586052][ C0] __neigh_event_send+0x330/0x1390 [ 973.591141][ C0] neigh_resolve_output+0x56b/0x940 [ 973.596318][ C0] ? __pfx____neigh_create+0x10/0x10 [ 973.601579][ C0] ip6_finish_output2+0xad1/0x1cf0 [ 973.606665][ C0] ip6_fragment+0xbf5/0x27f0 [ 973.611228][ C0] ? __pfx_ip6_finish_output2+0x10/0x10 [ 973.616749][ C0] ? __pfx_ip6_fragment+0x10/0x10 [ 973.621742][ C0] ? nf_hook+0x48d/0x780 [ 973.625956][ C0] ? nf_hook_slow+0x132/0x200 [ 973.630623][ C0] ? ip6_dst_mtu_maybe_forward.constprop.0+0x1be/0x530 [ 973.637450][ C0] __ip6_finish_output+0x369/0x1010 [ 973.642620][ C0] ip6_output+0x253/0x710 [ 973.646925][ C0] ip6_xmit+0x1512/0x23f0 [ 973.651225][ C0] ? kmem_cache_free+0x2d8/0x770 [ 973.656132][ C0] ? sctp_chunk_put+0x205/0x2c0 [ 973.660954][ C0] ? sctp_packet_transmit+0x120e/0x30b0 [ 973.666476][ C0] ? __pfx_ip6_xmit+0x10/0x10 [ 973.671132][ C0] sctp_v6_xmit+0xd28/0x1240 [ 973.675692][ C0] ? __local_bh_enable_ip+0x80/0x120 [ 973.680951][ C0] ? kernel_fpu_end+0x59/0x70 [ 973.685601][ C0] ? __pfx_sctp_v6_xmit+0x10/0x10 [ 973.690592][ C0] ? kernel_fpu_end+0x5e/0x70 [ 973.695242][ C0] ? crc32c+0xa9/0x370 [ 973.699292][ C0] ? skb_crc32c+0x770/0x8d0 [ 973.703769][ C0] sctp_packet_transmit+0x1f44/0x30b0 [ 973.709123][ C0] sctp_packet_singleton+0x19e/0x370 [ 973.714378][ C0] ? __pfx_sctp_packet_singleton+0x10/0x10 [ 973.720160][ C0] ? sctp_outq_select_transport+0x208/0x740 [ 973.726027][ C0] sctp_outq_flush+0x53d/0x33a0 [ 973.730860][ C0] ? _raw_spin_unlock+0x41/0x50 [ 973.735698][ C0] ? __pfx_sctp_outq_flush+0x10/0x10 [ 973.740954][ C0] ? __pfx_sctp_sm_lookup_event+0x10/0x10 [ 973.746647][ C0] ? sctp_outq_tail+0x671/0xa80 [ 973.751468][ C0] ? sctp_endpoint_add_asoc+0x225/0x2e0 [ 973.756989][ C0] sctp_do_sm+0x17d1/0x5e00 [ 973.761466][ C0] ? kasan_save_stack+0x42/0x60 [ 973.766287][ C0] ? kasan_save_stack+0x33/0x60 [ 973.771109][ C0] ? kasan_save_track+0x14/0x30 [ 973.775934][ C0] ? __pfx_sctp_do_sm+0x10/0x10 [ 973.780754][ C0] ? sctp_sendmsg+0xe99/0x1e20 [ 973.785489][ C0] ? ____sys_sendmsg+0x973/0xc30 [ 973.790400][ C0] ? __x64_sys_sendmmsg+0x9c/0x100 [ 973.795483][ C0] ? do_syscall_64+0xcd/0xf80 [ 973.800165][ C0] ? __sk_mem_raise_allocated+0x77d/0x14f0 [ 973.805965][ C0] sctp_primitive_ASSOCIATE+0x9c/0xd0 [ 973.811312][ C0] sctp_sendmsg_to_asoc+0xa4a/0x1c50 [ 973.816573][ C0] ? sctp_assoc_set_primary+0x177/0x300 [ 973.822087][ C0] ? sctp_assoc_add_peer+0x252/0x1540 [ 973.827441][ C0] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 973.833137][ C0] ? sctp_connect_new_asoc+0x41e/0x770 [ 973.838567][ C0] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 973.844350][ C0] sctp_sendmsg+0xe99/0x1e20 [ 973.848913][ C0] ? __pfx_sctp_sendmsg+0x10/0x10 [ 973.853913][ C0] ? __pfx_sock_has_perm+0x10/0x10 [ 973.859006][ C0] ? __import_iovec+0x1dd/0x650 [ 973.863841][ C0] ? __pfx_sctp_sendmsg+0x10/0x10 [ 973.868836][ C0] inet_sendmsg+0x11c/0x140 [ 973.873313][ C0] ____sys_sendmsg+0x973/0xc30 [ 973.878053][ C0] ? copy_msghdr_from_user+0x10a/0x160 [ 973.883485][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 973.888747][ C0] ? find_held_lock+0x2b/0x80 [ 973.893400][ C0] ? futex_unqueue+0x133/0x2c0 [ 973.898138][ C0] ___sys_sendmsg+0x134/0x1d0 [ 973.902797][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 973.907995][ C0] ? __pfx___futex_wait+0x10/0x10 [ 973.913004][ C0] ? find_held_lock+0x2b/0x80 [ 973.917666][ C0] __sys_sendmmsg+0x200/0x420 [ 973.922324][ C0] ? __pfx___sys_sendmmsg+0x10/0x10 [ 973.927504][ C0] ? __pfx_do_futex+0x10/0x10 [ 973.932161][ C0] ? __sys_socket+0xac/0x260 [ 973.936719][ C0] ? fd_install+0x223/0x570 [ 973.941209][ C0] ? xfd_validate_state+0x61/0x180 [ 973.946292][ C0] __x64_sys_sendmmsg+0x9c/0x100 [ 973.951203][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 973.956375][ C0] do_syscall_64+0xcd/0xf80 [ 973.960855][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.966716][ C0] RIP: 0033:0x7f06a278f749 [ 973.971113][ C0] RSP: 002b:00007f06a35f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 973.979495][ C0] RAX: ffffffffffffffda RBX: 00007f06a29e5fa0 RCX: 00007f06a278f749 [ 973.987435][ C0] RDX: 0000000000000002 RSI: 0000200000000280 RDI: 0000000000000004 [ 973.995376][ C0] RBP: 00007f06a2813f91 R08: 0000000000000000 R09: 0000000000000000 [ 974.003327][ C0] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000000 [ 974.011269][ C0] R13: 00007f06a29e6038 R14: 00007f06a29e5fa0 R15: 00007fffa419b408 [ 974.019220][ C0] [ 974.022212][ C0] task:kworker/u8:22 state:R running task stack:26296 pid:18189 tgid:18189 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 974.035741][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 974.041960][ C0] Call Trace: [ 974.045212][ C0] [ 974.048116][ C0] ? __schedule+0x10b9/0x6150 [ 974.052766][ C0] __schedule+0x1139/0x6150 [ 974.057249][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 974.062424][ C0] ? __pfx___schedule+0x10/0x10 [ 974.067248][ C0] ? mark_held_locks+0x49/0x80 [ 974.071984][ C0] preempt_schedule_irq+0x51/0x90 [ 974.076993][ C0] irqentry_exit+0x1d8/0x8c0 [ 974.081560][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 974.087512][ C0] RIP: 0010:lock_acquire+0x133/0x330 [ 974.092770][ C0] Code: 00 65 8b 05 37 bd 17 12 85 c0 0f 85 a2 00 00 00 65 48 8b 05 f7 75 17 12 8b 90 2c 0b 00 00 85 d2 0f 85 8c 00 00 00 9c 8f 04 24 48 c7 c7 44 24 bb 8d e8 30 15 dd 09 45 89 e0 89 e9 44 89 ea 65 [ 974.112349][ C0] RSP: 0018:ffffc9000d41f1f0 EFLAGS: 00000246 [ 974.118385][ C0] RAX: ffff88803571c980 RBX: ffffffff8e3c9620 RCX: 0000000000000001 [ 974.126328][ C0] RDX: 0000000000000000 RSI: ffffffff816cb681 RDI: fffffbfff1c792c4 [ 974.134276][ C0] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 974.142219][ C0] R10: 0000000000000002 R11: 000000000009f95e R12: 0000000000000000 [ 974.150165][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 974.158111][ C0] ? unwind_next_frame+0xd1/0x20a0 [ 974.163202][ C0] ? unwind_next_frame+0x3f4/0x20a0 [ 974.168373][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 974.174499][ C0] unwind_next_frame+0xd1/0x20a0 [ 974.179423][ C0] ? unwind_next_frame+0xbd/0x20a0 [ 974.184507][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xc85/0x2fc0 [ 974.190733][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 974.196856][ C0] arch_stack_walk+0x94/0x100 [ 974.201507][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xc85/0x2fc0 [ 974.207721][ C0] stack_trace_save+0x8e/0xc0 [ 974.212370][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 974.217717][ C0] ? find_held_lock+0x2b/0x80 [ 974.222370][ C0] kasan_save_stack+0x33/0x60 [ 974.227020][ C0] ? kasan_save_stack+0x33/0x60 [ 974.231840][ C0] ? kasan_save_track+0x14/0x30 [ 974.236661][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 974.241406][ C0] ? __kmalloc_noprof+0x33d/0x910 [ 974.246406][ C0] ? ieee802_11_parse_elems_full+0x1db/0x3780 [ 974.252444][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xc85/0x2fc0 [ 974.258671][ C0] kasan_save_track+0x14/0x30 [ 974.263330][ C0] __kasan_kmalloc+0xaa/0xb0 [ 974.267890][ C0] __kmalloc_noprof+0x33d/0x910 [ 974.272723][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 974.277637][ C0] ? ieee802_11_parse_elems_full+0x1db/0x3780 [ 974.283677][ C0] ? ieee802_11_parse_elems_full+0x1db/0x3780 [ 974.289717][ C0] ieee802_11_parse_elems_full+0x1db/0x3780 [ 974.295583][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 974.300507][ C0] ? stack_trace_save+0x8e/0xc0 [ 974.305327][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 974.310668][ C0] ? stack_depot_save_flags+0x29/0x9b0 [ 974.316099][ C0] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 974.322403][ C0] ? ieee80211_iface_work+0x42f/0x1350 [ 974.327836][ C0] ? cfg80211_wiphy_work+0x3fb/0x560 [ 974.333098][ C0] ? process_one_work+0x9ba/0x1b20 [ 974.338182][ C0] ? worker_thread+0x6c8/0xf10 [ 974.342920][ C0] ? kthread+0x3c5/0x780 [ 974.347133][ C0] ? ret_from_fork+0x983/0xb10 [ 974.351866][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 974.356780][ C0] ieee80211_ibss_rx_queued_mgmt+0xc85/0x2fc0 [ 974.362823][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 974.369306][ C0] ? kcov_remote_start+0x399/0x680 [ 974.374404][ C0] ieee80211_iface_work+0xe28/0x1350 [ 974.379660][ C0] ? rcu_is_watching+0x12/0xc0 [ 974.384393][ C0] cfg80211_wiphy_work+0x3fb/0x560 [ 974.389479][ C0] process_one_work+0x9ba/0x1b20 [ 974.394392][ C0] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 974.399998][ C0] ? __pfx_process_one_work+0x10/0x10 [ 974.405345][ C0] ? assign_work+0x1a0/0x250 [ 974.409923][ C0] worker_thread+0x6c8/0xf10 [ 974.414498][ C0] ? __kthread_parkme+0x19e/0x250 [ 974.419508][ C0] ? __pfx_worker_thread+0x10/0x10 [ 974.424593][ C0] kthread+0x3c5/0x780 [ 974.428635][ C0] ? __pfx_kthread+0x10/0x10 [ 974.433196][ C0] ? rcu_is_watching+0x12/0xc0 [ 974.437938][ C0] ? __pfx_kthread+0x10/0x10 [ 974.442501][ C0] ret_from_fork+0x983/0xb10 [ 974.447063][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 974.452146][ C0] ? __switch_to+0x7af/0x10d0 [ 974.456800][ C0] ? __pfx_kthread+0x10/0x10 [ 974.461374][ C0] ret_from_fork_asm+0x1a/0x30 [ 974.466132][ C0] [ 974.469130][ C0] rcu: rcu_preempt kthread starved for 10535 jiffies! g85421 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 974.480306][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 974.490241][ C0] rcu: RCU grace-period kthread stack dump: [ 974.496096][ C0] task:rcu_preempt state:R running task stack:28136 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 974.509534][ C0] Call Trace: [ 974.512786][ C0] [ 974.515691][ C0] ? __schedule+0x10b9/0x6150 [ 974.520343][ C0] __schedule+0x1139/0x6150 [ 974.524822][ C0] ? __lock_acquire+0x436/0x2890 [ 974.529732][ C0] ? __mod_timer+0x8f2/0xd30 [ 974.534300][ C0] ? __pfx___schedule+0x10/0x10 [ 974.539121][ C0] ? find_held_lock+0x2b/0x80 [ 974.543772][ C0] ? schedule+0x2d7/0x3a0 [ 974.548074][ C0] schedule+0xe7/0x3a0 [ 974.552116][ C0] schedule_timeout+0x123/0x290 [ 974.556940][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 974.562281][ C0] ? __pfx_process_timeout+0x10/0x10 [ 974.567538][ C0] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 974.573321][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 974.578754][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 974.583491][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 974.588747][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 974.593922][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 974.598829][ C0] ? rcu_gp_cleanup+0x7c1/0xe90 [ 974.603656][ C0] rcu_gp_kthread+0x26d/0x380 [ 974.608306][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 974.613474][ C0] ? rcu_is_watching+0x12/0xc0 [ 974.618207][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 974.623379][ C0] ? __kthread_parkme+0x19e/0x250 [ 974.628375][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 974.633546][ C0] kthread+0x3c5/0x780 [ 974.637585][ C0] ? __pfx_kthread+0x10/0x10 [ 974.642147][ C0] ? rcu_is_watching+0x12/0xc0 [ 974.646880][ C0] ? __pfx_kthread+0x10/0x10 [ 974.651441][ C0] ret_from_fork+0x983/0xb10 [ 974.656002][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 974.661082][ C0] ? __switch_to+0x7af/0x10d0 [ 974.665742][ C0] ? __pfx_kthread+0x10/0x10 [ 974.670303][ C0] ret_from_fork_asm+0x1a/0x30 [ 974.675047][ C0] [ 974.678034][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 974.684321][ C0] Sending NMI from CPU 0 to CPUs 1: [ 974.689501][ C1] NMI backtrace for cpu 1 [ 974.689514][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 974.689534][ C1] Tainted: [L]=SOFTLOCKUP [ 974.689539][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 974.689548][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 974.689569][ C1] Code: 06 60 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 59 13 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 974.689583][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 974.689595][ C1] RAX: 000000000450f7e1 RBX: 0000000000000001 RCX: ffffffff8b7706d9 [ 974.689605][ C1] RDX: 0000000000000000 RSI: ffffffff8dac204b RDI: ffffffff8bf24280 [ 974.689614][ C1] RBP: ffffed1003b56498 R08: 0000000000000001 R09: ffffed10170a673d [ 974.689624][ C1] R10: ffff8880b85339eb R11: ffff88801dab2ff0 R12: 0000000000000001 [ 974.689633][ C1] R13: ffff88801dab24c0 R14: ffffffff9087f7d0 R15: 0000000000000000 [ 974.689642][ C1] FS: 0000000000000000(0000) GS:ffff888124a09000(0000) knlGS:0000000000000000 [ 974.689657][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 974.689667][ C1] CR2: 00007f1f1d44984d CR3: 0000000076632000 CR4: 00000000003526f0 [ 974.689677][ C1] Call Trace: [ 974.689682][ C1] [ 974.689687][ C1] default_idle+0x13/0x20 [ 974.689701][ C1] default_idle_call+0x6c/0xb0 [ 974.689714][ C1] do_idle+0x38d/0x510 [ 974.689736][ C1] ? __pfx_do_idle+0x10/0x10 [ 974.689758][ C1] cpu_startup_entry+0x4f/0x60 [ 974.689779][ C1] start_secondary+0x21d/0x2d0 [ 974.689793][ C1] ? __pfx_start_secondary+0x10/0x10 [ 974.689809][ C1] common_startup_64+0x13e/0x148 [ 974.689830][ C1]