last executing test programs: 10.928422467s ago: executing program 2 (id=2696): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e71, 0x170e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000001c0)={@mcast1, 0x0}, &(0x7f0000000340)=0x14) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2080, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x6, [@union={0x400000f, 0x6, 0x0, 0x5, 0x0, 0x0, [{0xa, 0x0, 0x5}, {0xe, 0x2, 0x3}, {0x9, 0x0, 0x2}, {0x3, 0x4, 0x3}, {0xd, 0x5, 0xb}, {0x6, 0x4, 0x4d}]}]}, {0x0, [0x61, 0x2e, 0x2e, 0x61]}}, &(0x7f00000002c0), 0x72, 0x0, 0x10, 0x5}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x3, 0x101, 0x80000000, 0x4000, r5, 0x7, '\x00', r4, r6, 0x4, 0x4}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r7 = fsopen(&(0x7f0000000040)='exfat\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = getpid() r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r10, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r11 = socket$l2tp(0x2, 0x2, 0x73) r12 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r12, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0xfa60f000775a5d09}, 0xc) close_range(r11, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xa, {[@global=@item_4={0x3, 0x1, 0xe, "4b4c1afb"}, @local=@item_4={0x3, 0x2, 0x4, "e2fbf1d7"}]}}, 0x0}, 0x0) 10.592086497s ago: executing program 1 (id=2699): setresgid(0xee00, 0xee01, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010010ca090000feffffffffffffff18010902e1e90a000010000904490827738994ec6cb303"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2000000000903, 0x1, 0x0, 0x3}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000500)=0x40, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmmsg(r2, &(0x7f000000d6c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000340)="26e845c8bd1b81440635d9d750351d50e3e299417a0f59b13b51a29b1c0654dcc47495faabb8608a", 0x28}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="0c02000000000000190100000c0000004760964ef30064cde579d52843ab9fc1de5b5591cac386e182e157ae76afe6ca1641ec54380c9a12e36a9effc0b31b4b28794dcff58637de07e8fa931b06c70dc9fd1f57a97f64aac954e4ac1eb9f58d90fe9ead2b50317e78a54ae231b38c00496f204fdbd6a1b0d05d76edbad611fc4b46b80ac746cd198beed6ee9c1f99d0fc31041bf1b837e3ed768c5e74607c8e0052595ab0a521eb8e7c026448c8f58b0fca6b4445c1253de3110a023a47efd5629a24fb09f8f2ccedc124f7551b56af"], 0xc}}], 0x1, 0x4000000) syz_open_procfs(r1, &(0x7f0000000100)='net/ip_tables_targets\x00') 10.385619813s ago: executing program 3 (id=2700): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0x7, 0x541e, 0x50, @private1, @private0, 0x1, 0x700, 0x1, 0x5}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xe4, '\x00', r2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xe4, '\x00', r2}, 0x94) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdfffffffffd, 0xfa11, 0xffffffff}, 0x0) semctl$SETALL(0x0, 0x0, 0x14, 0x0) (async) semctl$SETALL(0x0, 0x0, 0x14, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) close_range(r5, r0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000080)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) (async) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000080)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) socket$inet(0x2, 0x2, 0x4) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r7, 0x10, 0x70ad2d, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x80000000}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x884}, 0x0) (async) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r7, 0x10, 0x70ad2d, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x80000000}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x884}, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000300)={0x0, 0x80000, 0xffffffffffffffff}) r9 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f0000000440)={0x0, 0x53, r10, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r9, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, r10, r11, 0x20, 0x5, 0x4000000, 0x7, {0x20000, 0x0, 0x0, 0x800, 0x3ff, 0x0, 0x0, 0xb8e, 0x0, 0x0, 0x25, 0xfffffffd, 0x8, 0x0, "d20bddda7de75aec79ff0300d28000000b0000000000001000000900"}}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r8, 0xc02064a4, &(0x7f0000000400)={r10, 0x5, &(0x7f0000000340)=[0x800, 0x7, 0x9, 0xeeea, 0x4], &(0x7f0000000380)=[0x1e4, 0x1, 0x200, 0xa, 0x4, 0x8], &(0x7f00000003c0)=[0x1000]}) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) accept4(r4, 0x0, 0x0, 0x0) (async) r12 = accept4(r4, 0x0, 0x0, 0x0) r13 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) openat$cgroup_int(r13, &(0x7f00000002c0)='cpuset.mem_hardwall\x00', 0x2, 0x0) (async) openat$cgroup_int(r13, &(0x7f00000002c0)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendto$inet6(r12, &(0x7f0000000100), 0xffffffe3, 0x4004840, 0x0, 0xfffffffffffffe1b) 10.344895697s ago: executing program 4 (id=2701): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x24004004) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x19, 0x4, 0x8, 0x1}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000240), &(0x7f00000006c0)=r2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r7, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000440)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x64, 0x0, 0x9, 0x2, 0x0, @broadcast=0x10000e0, @multicast1}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x98, 0x0, {0x5, 0x4, 0x2, 0x2a, 0x1, 0x68, 0xa, 0x64, 0x1, 0x3, @multicast1, @rand_addr=0x64010100}}}}}}, 0x0) 10.188375299s ago: executing program 4 (id=2702): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x400, 0x101080) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000140)={0x0, 0x5, 0x2, 0x7, 0x7, 0x9, 0x400, 0x1ff, 0x10001, 0x2e9, 0x7fffffff, 0x2}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x4000801) syz_usb_connect(0x3, 0x24, &(0x7f0000001cc0)={{0x12, 0x1, 0x300, 0x74, 0xd8, 0xe1, 0x40, 0x110a, 0x1658, 0xdbdb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x96, 0x40, 0x7, [{{0x9, 0x4, 0x15, 0x6f, 0x0, 0xf5, 0x60, 0x70, 0x8}}]}}]}}, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r10, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xc, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) socket(0x29, 0x5, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) syz_emit_ethernet(0x9a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000010aaaaaaaaaa0086dd60002600006411"], 0x0) 10.145434364s ago: executing program 3 (id=2703): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="00000c000000070001e0e1358416e0185fa7564e00965a398d5eaa070000006b90fbab827705c1e9922c74c03a0694f2d15363aac99ad05baa2fd480f843060041bbaf1ae28a40e61fa88b5ba226516412d0fe55f26dd2e196b94794f56ee1050000003428c42bf75b90304c9416a9f3ca365246766d2e1d4090c3daeb25b4741e"], 0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8103, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x39, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x40, 0x19, 0x29, "7ef3"}, 0x0, 0x0, 0x0, 0x0}) 8.649128757s ago: executing program 0 (id=2684): syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0xf) socket$pppl2tp(0x18, 0x1, 0x1) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x14080, 0x0) 8.595909891s ago: executing program 4 (id=2704): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@hopopts_2292={{0x24, 0x29, 0xb, {0x0, 0x1, '\x00', [@calipso={0x7, 0x8, {0x2, 0x0, 0x0, 0xdfda}}]}}}], 0x24}, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (rerun: 64) bind$bt_l2cap(r4, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmmsg(r6, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4404c000) 8.540005231s ago: executing program 0 (id=2705): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) (async) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) sendfile(r5, r5, 0x0, 0xb) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r4}, 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r4}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = socket(0x10, 0x803, 0x0) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) (async) ptrace(0x10, r7) ptrace$cont(0x19, r7, 0xc, 0x274b) (async) ptrace$cont(0x19, r7, 0xc, 0x274b) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xffffffff}]}, 0x40}}, 0x0) recvfrom$packet(r0, &(0x7f0000000040)=""/213, 0xd5, 0x2100, &(0x7f0000000280)={0x11, 0x4, r9, 0x1, 0xc, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x14) ioctl$TIOCL_BLANKSCREEN(r4, 0x4b67, &(0x7f0000000180)) (async) ioctl$TIOCL_BLANKSCREEN(r4, 0x4b67, &(0x7f0000000180)) 7.918315122s ago: executing program 0 (id=2706): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="180300000000000000000000000000009500000000000000c3afebad64e35664d784702d0e75a8ab48f84187d99bf2a8a2ca9d605932119620ebec52ef227bf4d94d7ca4bde08cf03f2f157a8eaaf438070570f949ecc812c5d8bb7a7e61f863106e01dc4ed952f438d6aa95bc0c3589067081d430789b7445c734785d06afba768b5bc9c5b0b44ca6c91b43112b9ad34d7bbab3e62c9359acb1659fbbba4fbe98eb50fc33119bf85178858408f4bce3cbcc7473e773831e596f9296d4fe80e248b36316d0cfaa37246141f7ea6f169c1eefdf9deea647f87d146ac3371ac53a782ab0cbe99e6ef9220e1b296e19639cef75dd0a1103c104"], &(0x7f0000000000)='GPL\x00'}, 0x90) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0xfffffffe}, 0x10) write(r1, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000001000000000000000800080002000000", 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x9f9, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x3, 0x20002f7}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r6}, 0x10) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) readv(r7, &(0x7f0000000700)=[{&(0x7f0000001980)=""/237, 0xed}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x1000005, '\x00', 0x0, @cgroup_sock_addr=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYRES64=r7], &(0x7f0000000180)='GPL\x00', 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 6.840536795s ago: executing program 1 (id=2707): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f00000000c0)={0x2, "99433d622702f4bed1f994660e7e1adcc600048cdab113bbcda9e26ecf140842", 0x3, 0x1}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) setresuid(0x0, 0xee01, 0xffffffffffffffff) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mount$fuse(0x0, &(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x120000, 0x0) 6.819261197s ago: executing program 0 (id=2708): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x200000, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f0000000040)={0x5c, 0x42474752, 0x280, 0x168, 0x3, @stepwise={{0x2, 0x7fff}, {0x6, 0xfff}, {0x2, 0xd}}}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0xfffffffffffffe1f, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe01, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000500)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000700, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe10804000000af8e0e3dc11d875397bdb22d0000b420a1a93e527d3d458d080000000000000000000000000000000000000000004300", "f4bd000000801900000000e9ffffff0200000000000000000000000000ff00", [0x8, 0x5]}}) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000380)={&(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x5, 0x2, 0xa}) ioctl$DRM_IOCTL_MODE_ADDFB(r7, 0xc01c64ae, &(0x7f00000003c0)={r8, 0x2, 0x1, 0x4000000, 0xfffffff7, 0xfffffffd, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$FBIOGETCMAP(r7, 0x4604, &(0x7f00000015c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_buf(r4, 0x1, 0x1a, &(0x7f0000000080)=""/197, &(0x7f0000000180)=0xc5) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r9 = dup(r4) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) close_range(r0, r1, 0x2) 6.748166008s ago: executing program 3 (id=2709): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0x1001, &(0x7f0000000780)=""/4097, 0x41100, 0x5, '\x00', 0x0, 0x0, r0, 0x19c00, 0x0, 0x3d}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}, 0x94) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r3}]}]}, 0x28}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002340)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xfff2, 0xa}, {0x2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2e, 0x2, [@TCA_FQ_PIE_TUPDATE={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f0000847fff)='X', 0xcf88, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 6.696841447s ago: executing program 4 (id=2710): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x2, &(0x7f0000000000)=0x3, 0x4) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00002ec000/0x4000)=nil, 0x4000, 0x200000c, 0x20010, 0xffffffffffffffff, 0xd2e16000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000000a0a0300000000fe08505e2a24804f7c10732e64000000000007000005e10006"], 0x24}}, 0x20008002) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() sched_setscheduler(0xffffffffffffffff, 0x3, &(0x7f0000000080)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x810, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000010}, 0x40) 6.615269679s ago: executing program 1 (id=2711): r0 = fsopen(&(0x7f0000000100)='fusectl\x00', 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000240)={0x2, 0x0, 0x7fffffffffffffff, 0x9}) r1 = fsopen(&(0x7f0000000340)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x13}], 0x2) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r5 = syz_io_uring_setup(0x5e9, &(0x7f0000000480)={0x0, 0x96ee, 0x8, 0x2}, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, 0x0, 0x0, 0x4) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x31, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x20002000}, r4}) (async) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r2, 0x8004510b, &(0x7f0000000080)) (async) r8 = fsmount(r1, 0x0, 0x83) r9 = openat(r8, &(0x7f0000000040)='.\x00', 0x0, 0xa2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r9}, 0x8) (async) sched_setscheduler(0x0, 0x1, 0x0) (async) getpid() (async) sched_setscheduler(0x0, 0x2, 0x0) (async) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141, 0x0) (async) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r5, 0x90}, {r10, 0x1081}, {0xffffffffffffffff, 0x10}], 0x3, &(0x7f0000000280)={r11, r12+10000000}, &(0x7f0000000300), 0x8) (async) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) (async) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x803000, 0x0) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) 6.528740352s ago: executing program 2 (id=2712): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x54, 0x700}, [@ldst={0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xcab5, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 6.208577848s ago: executing program 2 (id=2713): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r2, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x78}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x59}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x200000c4) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x44, r1, 0x1, 0x70bd2c, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x44}}, 0x0) 6.208256262s ago: executing program 1 (id=2714): getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) ioctl$TCSETSW2(r1, 0x5408, &(0x7f0000000540)={0xff, 0x37, 0xffffffee, 0x7fffffef, 0x0, "b850e43615b1b70500000000000400", 0x81002, 0x2}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) prctl$PR_SET_PDEATHSIG(0x21, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f00003cd000/0x1000)=nil, 0x1000, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) sched_setscheduler(r3, 0x6, &(0x7f0000000000)=0xffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047d"], 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="14000000"], 0x14}}, 0x0) 6.141119253s ago: executing program 2 (id=2715): pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r1, &(0x7f00000000c0)=ANY=[], 0xffffff6a) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = userfaultfd(0x80001) openat$nvram(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) readv(r4, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/213, 0xd5}], 0x1) r5 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0x1, 0x10d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x10c, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r8, 0xfffffffffffffc01, 0x0) tee(r0, r8, 0x60000000000, 0x0) 5.77935674s ago: executing program 3 (id=2716): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]}) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r1 = getpid() (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) (async) socket$caif_seqpacket(0x25, 0x5, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000001580)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001540)={0x0}}, 0x24004004) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) (async, rerun: 64) r7 = syz_usb_connect(0x0, 0x46, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000e75fcc08c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000042b06010905010300021007c109050c04400006ea0e07059acbe54d82249e4087cef7eae6b46d88e0806391222ca484"], 0x0) (rerun: 64) syz_usb_control_io$printer(r7, &(0x7f00000003c0)={0x14, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) 5.279981986s ago: executing program 0 (id=2717): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) io_setup(0x13, &(0x7f00000003c0)) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000380)={0x0, 0xf01d, 0x8, 0x0, 0xb}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r3, 0x0, 0x0) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = syz_open_procfs(0x0, &(0x7f0000000200)='net/fib_triestat\x00') pread64(r8, &(0x7f0000000100)=""/253, 0xfd, 0xadc) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="0f8666f2a665f0ff0f0fc73666ba21003e0f01c5c4c1ed665a0aa00f06ea009000002c00c4c1b81516", 0x29}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 5.267731455s ago: executing program 4 (id=2718): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) getitimer(0x2, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = fanotify_init(0x8, 0x80000) write$binfmt_elf64(r2, 0x0, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet6(r6, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f00000000c0)="4435c61bc9a1f1ed51c7b06188c682bd59fde0261c9bc2b1f66724ea0287fb6effd2c318abfa442135afa8ca2b68dacbb4a1aa65f9c177dc50967e99edcce6e8900d450fcd9980371cd431b9c1ad0766a9cb142c1ac79715905c856c9e549753967a92c7024ac039", 0xffffffffffffff1d, 0x850, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r9, 0x9000aea4, &(0x7f0000003000)) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000c1a9010300000000000000000500000d0900011073797a6a00000000"], 0x20}, 0x1, 0x0, 0x0, 0x20048000}, 0x10) 4.112094573s ago: executing program 2 (id=2719): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) r1 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x1) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x9, 0x307}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x0, 0x6, {{0x17, 0x4, 0x1, 0x17, 0x5c, 0x68, 0x0, 0x7, 0x2b, 0x0, @empty, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x2c, 0xdc, 0x3, 0x6, [{@multicast1, 0xd}, {@rand_addr=0x64010102, 0x3}, {@multicast2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@local, 0x9}]}, @end, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x14, 0xd9, 0x0, 0x4, [0x430706c3, 0x1, 0x6, 0x1]}]}}}}}) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x198, 0x13, 0x400, 0x70bd29, 0x25dfdbfd, {0x10, 0x0, 0x6, 0x7, {0x4e24, 0x4e23, [0x0, 0x1, 0x6, 0x18], [0x6, 0xdc, 0xfffffffe, 0x1], r4, [0x84b, 0x6]}, 0x5, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x5b, 0x1, "0885469693c94e31c7cf92a88b3f3892154ee4b584d2f49efc3a326520a0c2e483d8a44dad4b1a10570cfe8737736623f0df294c305e29adf340b3d63230a761bfa393a5cc0fd79ead71db8d7243b4ec78f73e194006d5"}, @INET_DIAG_REQ_BYTECODE={0xed, 0x1, "1f7290db9eb406d80db0179c418b73429ef4b9d1a848054e488492e8126fb692699f45162c50b5fe12d730b00c61cc10f073b9569410f63cc7347084c0822d54e3c13f5e3662a039ef1878af66e17232dff26326ef2d59f414f823098b512a2a7df02b119da9da2c0d5a2b777547987b044b2380a517f05a42d61cf80d632e902d2eb6e5cfc0d3ea09168bafb23999f52945ec07354aeccc942e2913dc1609e20fbc0cd648c692313b53bdc2b3c33cf51cbdaa760c8c9dd4166e11a741940dae579b149174af147f610798a2277f0666f5243be682bd50f9af1fa33d16d18addf275f57da0c17d553a"}]}, 0x198}, 0x1, 0x0, 0x0, 0x40}, 0x8004) sendmsg$inet(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x48840) 4.064839547s ago: executing program 3 (id=2720): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa0009058202"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="401406"], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000680)={'syz0\x00', {0x9, 0x1, 0x9, 0x5}, 0x28, [0x6, 0x3ff00000, 0x32cd355a, 0x10, 0x8, 0x9, 0x3, 0x401, 0x1, 0x7f, 0x1, 0x1, 0x6, 0xfffffff7, 0x3b9, 0x0, 0x1000, 0x1000, 0xb, 0x3, 0xbd8, 0xca2, 0x5, 0xf, 0x13ff7ae7, 0xe0, 0x80000000, 0x5, 0x7, 0x1, 0x9, 0x0, 0x3, 0x2, 0xbe4, 0x7, 0x3, 0x3, 0xf8000000, 0x8, 0x1e, 0x101, 0x1, 0x80000000, 0xffff, 0x4, 0x5, 0xffffffff, 0x2, 0x0, 0x0, 0xa900, 0x6, 0x8000, 0x1, 0x3, 0x80000000, 0x9, 0xd, 0xfffffff8, 0x1, 0xffff274d, 0x3, 0x3], [0x9, 0x5, 0x1, 0x9ab, 0x4, 0x4, 0x600, 0x7fffffff, 0xf81, 0xb45, 0x10001, 0x5c836541, 0x6, 0x4, 0x6, 0x10000, 0x9, 0x2, 0x2, 0x8, 0x8, 0xfff, 0x5, 0x81, 0x3, 0x2, 0x5, 0x800, 0x7, 0x0, 0x3, 0xdc2, 0x7, 0x5, 0x32d92195, 0x0, 0x4000000, 0x9120, 0xab0f, 0x1, 0x2, 0x401, 0x3, 0x9, 0x8000, 0x4, 0xfffffff2, 0x12df, 0xffff62e9, 0xb872, 0xbc4, 0x4, 0x5, 0x6, 0x93, 0x0, 0x1, 0x18, 0x8, 0x2, 0xfffffffd, 0x5, 0x9, 0x1], [0x5a4301ef, 0x1ff, 0x4, 0x0, 0x6, 0x523, 0x9, 0x6, 0xd, 0x3, 0x8, 0x8, 0xa0a7, 0x4, 0xfffff9c5, 0x7f, 0x5, 0x9, 0x401, 0x6, 0x8, 0x6, 0x2, 0x36, 0xd2, 0x101, 0x3, 0x2, 0xefa, 0x3, 0x6, 0x4, 0x35, 0x8, 0x1, 0x6da, 0x200, 0x8, 0x200, 0xd, 0x9, 0x6, 0x0, 0x5ca, 0x7ff, 0xfffff025, 0xfffffff3, 0x80, 0x1000, 0x3, 0x1, 0x7, 0x6, 0x5, 0x5, 0xfffff884, 0x8, 0xa, 0x4, 0x99, 0x6, 0x2, 0xf64c233, 0x5c8aa780], [0xcf, 0x9, 0x8, 0x6, 0x9, 0xc, 0x4, 0x800, 0x200, 0xdc, 0x1000, 0xc00, 0x8, 0x9, 0xc002, 0x4, 0x6, 0x400, 0x4, 0x7fffffff, 0x4, 0x0, 0x8, 0x9, 0x7fff, 0x7ff, 0x8000, 0x1, 0x9, 0x296, 0x1, 0x6, 0x80000000, 0x3ff, 0x1, 0xf, 0x9, 0x62b, 0x4, 0x4, 0x7, 0x3, 0x278000, 0x7fff, 0x2, 0x43380000, 0x546, 0x0, 0xa, 0x4, 0x9, 0x9, 0x7, 0x9, 0x4, 0x6, 0x8, 0x3, 0x6, 0x1, 0xfff, 0x6, 0x80, 0x1]}, 0x45c) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x82, 0x1, "17"}, 0x0, &(0x7f0000000540)={0x20, 0x84, 0x1, ' '}, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x0, 0xc, 0x5, {0x5, 0x30, "207987"}}, &(0x7f00000000c0)=ANY=[@ANYBLOB="00033b0000003b03bf825df562e725f3f440d28d8d90415f9172e5aeaba746559e4411fed1d86860fc51bd81534265aae3d7fe9f09bc2d89625b931491bc33a5e4"]}, &(0x7f0000000580)={0x44, &(0x7f0000000180)={0x40, 0x1, 0xbb, "41a86de4dc312a34aecfa0a58ca6e109bccb7ba333d9fd64bdc253adc959c851faef2623ab7dafdaf1c82fe320f9d76133af458165de287e120a533256e378026119e5c16ae829127d9202323f7f07be66691c20b622621a36ce703d87cc754bf5a25f1335f8134f348f9b0faf61730539e5ae381c9f2f3bce9f6d462f447997ac4ee51f264393e26d29729fc08ed6df4b97fb1197247e2f528bc65ad095fab67e1f11bae26c4100e4260ac7ee5ca7362492d39f01af7c3dddfe82"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x7f}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000300)={0x20, 0x81, 0x2, "8b47"}, &(0x7f0000000340)={0x20, 0x82, 0x3, "7dcee9"}, &(0x7f00000003c0)={0x20, 0x83, 0x1, "17"}, &(0x7f0000000400)={0x20, 0x84, 0x3, "4902cb"}, &(0x7f0000000440)={0x20, 0x85, 0x3, "6bf744"}}) 3.931145979s ago: executing program 0 (id=2721): r0 = dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x1a, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f65d0000850000000600000018110000", @ANYRES32, @ANYBLOB="00000000000000008500000075000000bf91000000000000b7020000020000008500000085080000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private2, 0x0, 0x2, 0x0, 0x2, 0x4101}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f0000000380)="e875b3c8557b32439fb08ad494dd8a44983f82fb94be1a55d0eae46c3ab09f667eb414281c8f6bb5136b58cbb27c37f1090bf9980102c78caea347a3") setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) r6 = fsopen(&(0x7f0000000040)='tracefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x8, 0x0, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e25, 0x68, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000040)}, 0x4000000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000004800010928bd700018dcdf250a000100", @ANYRES32, @ANYBLOB="0000000014000100fe80000000000000000000000000001f14000100fe8000000000000000000000000000bb08"], 0x54}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2, 0x600}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x7fff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='team_slave_1\x00', 0x10) 3.284442287s ago: executing program 4 (id=2722): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x10000059, 0x3, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) memfd_create(0x0, 0x3) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200), 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(r4) r6 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r0) syz_open_dev$usbfs(&(0x7f0000000000), 0x12cb, 0x8000) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000200)={0x0, 0xaee2, 0x800, 0xffffffff, 0x3aa}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r10 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r10, &(0x7f00000000c0)='bic\x00', 0x4) io_uring_enter(r7, 0x47f6, 0x4100, 0x2, 0x0, 0x300) sendmsg$NET_DM_CMD_START(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x14, r6, 0x1, 0xfffffffc}, 0x5a}}, 0x0) 3.10875323s ago: executing program 2 (id=2723): pipe2$9p(0x0, 0x84000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket(0x2, 0x80805, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x82, 0x0, 0x0) r4 = syz_io_uring_setup(0x1ac5, &(0x7f0000000300)={0x0, 0xc273, 0x2000, 0x2, 0x24e}, &(0x7f0000000280)=0x0, &(0x7f00000000c0)=0x0) r7 = creat(&(0x7f0000000080)='./file0\x00', 0xa) close(r7) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0xffed}, {0xf, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x8021}, 0x24008084) r11 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) listen(r11, 0x2) write$FUSE_NOTIFY_RESEND(r7, &(0x7f0000000040)={0x14}, 0x14) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f00000001c0)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x80, 0x3, 0x0, 0x9276, 0x0, 0x0, {0x1}}) 2.853350209s ago: executing program 1 (id=2724): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x64}, 0x48800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x3, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3a6}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x4080000) (async) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000200)={{0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0xa}, 0x48}, {0xa, 0x4e22, 0xfffffff9, @mcast1, 0x8}, 0x1, {[0x6, 0xf71, 0x4, 0x7a82, 0x2, 0x2, 0x7a18, 0x8]}}, 0x5c) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x10000, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f00000002c0)={0x0, {{0x2, 0x4e24, @remote}}, 0x1, 0x6, [{{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e22, @loopback}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x28}}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e23, @local}}]}, 0x390) (async) sendto$inet6(r3, &(0x7f0000000680)="7227e984cf4d7f560efd6d7c9fb839dca92d24ed142fdbe9ab59ccf684b2da3e154a774218d286498c56ec49e3a73bba41f24ad8ed08b4c0d1e67c02a692434c903a94ed54d00304a85ae0ebc155992a40a52ae8cf49d61a5b702142a5295e0ff725a3bf56f3c88b26ddb60f8b6e3e9be331ca1d1c24c5db9957f83a76acc0f40fcfbf746c557026a6575f65b37e4adbf32c04fce404fe9f09912d2a7c2b2a7652cccb4fbf9c6e6378b8184d57edf0c61c6d26771979c1905a", 0xb9, 0xc000, &(0x7f0000000740)={0xa, 0x4e22, 0x5, @empty, 0x3fe3}, 0x1c) (async) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000780)=0xa002, 0x4) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x5c, 0x4, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8906}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22f0}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xc}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6005}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x801) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x11, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@jmp={0x5, 0x1, 0xd, 0x6, 0xb, 0x4}, @generic={0x2, 0x7, 0x5, 0x3, 0xfffffe01}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000009c0)='GPL\x00', 0xde0, 0x1c, &(0x7f0000000a00)=""/28, 0x41100, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000a80)={0x2, 0x4, 0x5, 0x9}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=[r3, r3], &(0x7f0000000b00)=[{0x3, 0x2, 0x0, 0x5d6ffe42c8e66cfd}], 0x10, 0x7f}, 0x94) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x800) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f0000004600)=[{0x7, 0x1, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000c00)=""/40, 0x28}, {&(0x7f0000000c40)=""/187, 0xbb}, {&(0x7f0000000d00)=""/167, 0xa7}, {&(0x7f0000000dc0)=""/171, 0xab}, {&(0x7f0000000e80)=""/193, 0xc1}, {&(0x7f0000000f80)=""/90, 0x5a}, {&(0x7f0000001000)=""/150, 0x96}], &(0x7f0000001140)}, {0x8, 0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000001180)=""/220, 0xdc}, {&(0x7f0000001280)=""/41, 0x29}, {&(0x7f00000012c0)=""/245, 0xf5}, {&(0x7f00000013c0)=""/139, 0x8b}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/79, 0x4f}, {&(0x7f0000002500)=""/53, 0x35}, {&(0x7f0000002540)=""/84, 0x54}], &(0x7f0000002640)=[0x5, 0xfff, 0x1]}, {0x1, 0x1, 0x0, &(0x7f0000002740)=[{&(0x7f0000002680)=""/146, 0x92}], &(0x7f0000002780)=[0x8000, 0x9, 0x332c]}, {0x1, 0x1, 0x0, &(0x7f00000028c0)=[{&(0x7f00000027c0)=""/244, 0xf4}], &(0x7f0000002900)=[0x7d1e, 0xfffffffffffffffc, 0x7ff, 0x800]}, {0x0, 0x0, 0x0, &(0x7f0000002940), &(0x7f0000002980)=[0x3, 0x7]}, {0x7, 0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f00000029c0)=""/31, 0x1f}, {&(0x7f0000002a00)=""/142, 0x8e}, {&(0x7f0000002ac0)=""/98, 0x62}, {&(0x7f0000002b40)=""/132, 0x84}, {&(0x7f0000002c00)=""/58, 0x3a}, {&(0x7f0000002c40)=""/199, 0xc7}, {&(0x7f0000002d40)=""/109, 0x6d}], &(0x7f0000002e40)=[0x6, 0x3, 0x7, 0x2]}, {0x3, 0x1, 0x0, &(0x7f0000003040)=[{&(0x7f0000002e80)=""/120, 0x78}, {&(0x7f0000002f00)=""/62, 0x3e}, {&(0x7f0000002f40)=""/193, 0xc1}], &(0x7f0000003080)=[0x3, 0x7, 0x3, 0x5, 0x7fffffff, 0xa2, 0x3, 0xfffffffffffff663, 0x0, 0x2]}, {0x2, 0x1, 0x0, &(0x7f0000004200)=[{&(0x7f0000003100)=""/4096, 0x1000}, {&(0x7f0000004100)=""/209, 0xd1}], &(0x7f0000004240)=[0x6, 0x4, 0x2]}, {0x2, 0x1, 0x0, &(0x7f0000004400)=[{&(0x7f0000004280)=""/240, 0xf0}, {&(0x7f0000004380)=""/72, 0x48}], &(0x7f0000004440)=[0x2, 0x5]}, {0x2, 0x0, 0x0, &(0x7f0000004580)=[{&(0x7f0000004480)=""/42, 0x2a}, {&(0x7f00000044c0)=""/136, 0x88}], &(0x7f00000045c0)=[0x9, 0x5, 0x6, 0x9, 0x8]}], 0xa) r6 = syz_clone(0x4000, &(0x7f0000004740)="de", 0x1, &(0x7f0000004780), &(0x7f00000047c0), &(0x7f0000004800)="a557879fb5cfaee2f48c1fbc678a2c43d219e391f1137534036a08f14bcedb40fe4d7e0aac82cbd342cf2d0fce51f01a2888ec887aea9bd2699d050021720aa52a378b31a47562f48c802569dee8356258d4") io_uring_setup(0x4256, &(0x7f0000004880)={0x0, 0x6da3, 0x8, 0x1, 0x2da, 0x0, r3}) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004940), r3) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r3, &(0x7f0000004a00)={&(0x7f0000004900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000049c0)={&(0x7f0000004980)={0x14, r7, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x404000d) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r8, 0x8982, &(0x7f0000004a40)) (async, rerun: 64) write$USERIO_CMD_REGISTER(r3, &(0x7f0000004a80)={0x0, 0xd}, 0x2) (rerun: 64) sched_setscheduler(r6, 0x2, &(0x7f0000004ac0)=0x9) (async) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000004b00)={'nat\x00', 0x7b, "9a9d8770a17ead0ffb9211f777d0cd952ef9fceb5bdd2123185f749e91391520ea12483642916e688849d8e64fe853b4f8dada6ee39d409bc24d9ed661024d52dbafa2ab4b5b5a95cd5eabaf0b1fbd1cfe17a862c2ee247bec4e53a7de8eabd4dd33bb35e79a3e4550aa716a1a5802c95dbb41b89efbd2b367048e"}, &(0x7f0000004bc0)=0x9f) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000004c40)={'sit0\x00', &(0x7f0000004c00)={@multicast2, 0x1, 0x0, 0x10, 0x0, [{@local}]}}) (async, rerun: 64) accept(r8, &(0x7f0000004c80)=@in, &(0x7f0000004d00)=0x80) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r3, &(0x7f0000004f40)={&(0x7f0000004d40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000004f00)={&(0x7f0000004d80)={0x14c, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x4}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0xaa}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7ff}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x91f1}, {0x5, 0x12, 0x1}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) sendmsg$nl_netfilter(r3, &(0x7f0000006040)={&(0x7f0000004f80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000006000)={&(0x7f0000004fc0)={0x1028, 0x5, 0xa, 0x0, 0x70bd25, 0x25dfdbfe, {0x2, 0x0, 0x1}, [@nested={0x10, 0x13c, 0x0, 0x1, [@nested={0x4, 0x94}, @typed={0x8, 0x86, 0x0, 0x0, @ipv4=@broadcast}]}, @nested={0x1004, 0x136, 0x0, 0x1, [@generic="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"]}]}, 0x1028}, 0x1, 0x0, 0x0, 0x4000015}, 0x4000c04) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, &(0x7f0000006080)) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000060c0)={0xd, 0x7e, 0x8000, 0x5, 0x2, 0x4, 0xfffffffc, 0x8}, &(0x7f0000006100)=0x20) 46.638671ms ago: executing program 1 (id=2725): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x54, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x95}, 0x40090) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000003c0)={0x54, r1, 0x1, 0x70bd2b, 0xfffffffe, {0x1e}, [{@nsim={{0xffffffffffffff73}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3e, 0x1}, {0xc, 0x8f, 0x5}, {0xfffffe36, 0x90, 0x2}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000081}, 0x20044010) 0s ago: executing program 3 (id=2726): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000100", 0x8) setsockopt(r0, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8) syz_usb_connect(0x2, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed010203010902220001000000000904000001437b6a00090500000000000000070594", @ANYRES16], 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000880), 0x200000000000002, 0x862b01) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040003}, 0x0) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000100", 0x8) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000080)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000140)=0x2c) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fedbdf25070000000a0004007770616e30000000080001"], 0x40}}, 0x8084) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) bind$netlink(r3, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfc, 0x10000}, 0xc) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c0000002e00090027bd7012000000000400000008001a"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000380)={0x1, r5}) kernel console output (not intermixed with test programs): terface number: 234 but max is 0 [ 647.713529][ T1205] usb 2-1: config 5 has no interface number 0 [ 647.725485][ T1205] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0027, bcdDevice=6e.03 [ 647.742807][ T6476] usb usb4-port1: attempt power cycle [ 647.752549][ T1205] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.828881][ T1205] usb 2-1: Product: syz [ 647.841268][ T1205] usb 2-1: Manufacturer: syz [ 647.854323][ T1205] usb 2-1: SerialNumber: syz [ 647.872451][ T1205] kvaser_usb 2-1:5.234: error -ENODEV: Cannot get usb endpoint(s) [ 647.922566][ T5824] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 648.282594][ T5824] usb 3-1: Using ep0 maxpacket: 16 [ 648.290148][ T5824] usb 3-1: unable to get BOS descriptor or descriptor too short [ 648.301217][ T5824] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 648.312561][ T6476] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 648.325345][ T5824] usb 3-1: config 0 has no interface number 0 [ 648.335996][ T5824] usb 3-1: config 0 interface 3 altsetting 142 bulk endpoint 0x5 has invalid maxpacket 32 [ 648.361894][ T5824] usb 3-1: config 0 interface 3 altsetting 142 bulk endpoint 0x6 has invalid maxpacket 8 [ 648.386867][ T5824] usb 3-1: config 0 interface 3 has no altsetting 0 [ 648.397617][ T5824] usb 3-1: New USB device found, idVendor=0bfd, idProduct=000b, bcdDevice=4e.46 [ 648.407712][ T5824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.419293][ T5824] usb 3-1: Product: syz [ 648.439882][ T5824] usb 3-1: Manufacturer: syz [ 648.445024][ T5824] usb 3-1: SerialNumber: syz [ 648.455592][ T5824] usb 3-1: config 0 descriptor?? [ 648.475299][T13615] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 648.504183][T13615] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 648.524229][ T6476] usb 4-1: device not accepting address 53, error -71 [ 648.561381][T13629] fuse: Unknown parameter '' [ 648.570121][T13629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2235'. [ 648.664378][T13634] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2237'. [ 648.715053][T13633] netlink: 'syz.3.2237': attribute type 3 has an invalid length. [ 648.861875][ T5824] kvaser_usb 3-1:0.3: error -ENODEV: Cannot get usb endpoint(s) [ 648.903486][ T5824] usb 3-1: USB disconnect, device number 37 [ 649.190141][T13646] serio: Serial port ttyS3 [ 650.095432][ T30] audit: type=1400 audit(1766719423.136:873): avc: denied { read } for pid=13648 comm="syz.2.2240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 650.189537][ T30] audit: type=1400 audit(1766719423.236:874): avc: denied { ioctl } for pid=13648 comm="syz.2.2240" path="socket:[46115]" dev="sockfs" ino=46115 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 650.379756][ T5824] usb 2-1: USB disconnect, device number 49 [ 650.423250][ T90] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 650.482570][ T6476] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 650.872637][ T90] usb 4-1: Using ep0 maxpacket: 8 [ 650.881798][ T90] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 650.893105][ T90] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.901126][ T90] usb 4-1: Product: syz [ 650.906178][ T90] usb 4-1: Manufacturer: syz [ 650.910800][ T90] usb 4-1: SerialNumber: syz [ 650.920812][ T90] usb 4-1: config 0 descriptor?? [ 650.929188][ T90] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 650.938157][ T6476] usb 3-1: Using ep0 maxpacket: 32 [ 650.944492][ T90] dvb-usb: bulk message failed: -22 (2/0) [ 650.956081][ T6476] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 650.970185][ T90] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 650.979932][ T6476] usb 3-1: config 1 interface 0 altsetting 38 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 650.994380][ T90] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 651.003492][ T90] usb 4-1: media controller created [ 651.008794][ T6476] usb 3-1: config 1 interface 0 has no altsetting 0 [ 651.022157][ T90] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 651.034911][ T6476] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 651.052666][ T6476] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.060717][ T6476] usb 3-1: Product: syz [ 651.065484][ T6476] usb 3-1: Manufacturer: syz [ 651.075546][ T6476] usb 3-1: SerialNumber: syz [ 651.346534][T13654] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2242'. [ 651.540226][ T30] audit: type=1400 audit(1766719424.596:875): avc: denied { accept } for pid=13653 comm="syz.3.2242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 651.567310][ T90] cxusb: set interface failed [ 651.588724][ T90] dvb-usb: bulk message failed: -22 (1/0) [ 651.665175][ T90] DVB: Unable to find symbol mt352_attach() [ 651.671361][ T90] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 651.679889][T13678] netlink: 'syz.0.2248': attribute type 21 has an invalid length. [ 651.689030][T13678] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2248'. [ 651.872931][ T90] rc_core: IR keymap rc-dvico-portable not found [ 651.879543][ T90] Registered IR keymap rc-empty [ 652.483753][ T90] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 652.503566][ T90] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input40 [ 652.518401][ T90] dvb-usb: schedule remote query interval to 100 msecs. [ 652.526471][ T90] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 652.559409][ T90] usb 4-1: USB disconnect, device number 55 [ 652.595115][ T30] audit: type=1400 audit(1766719425.646:876): avc: denied { mount } for pid=13682 comm="syz.4.2249" name="/" dev="rpc_pipefs" ino=46250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 652.674952][ T30] audit: type=1400 audit(1766719425.726:877): avc: denied { map } for pid=13684 comm="syz.1.2250" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 652.675758][ T90] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 652.713039][ T30] audit: type=1400 audit(1766719425.766:878): avc: denied { execute } for pid=13684 comm="syz.1.2250" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 652.821668][T13691] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2253'. [ 652.832949][T13691] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2253'. [ 653.197375][ T6476] usb 3-1: USB disconnect, device number 38 [ 653.242620][ T90] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 653.255365][T13706] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 653.292753][ T1205] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 653.394327][ T90] usb 2-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 653.406296][ T90] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x86 has invalid maxpacket 13102, setting to 64 [ 653.417567][ T90] usb 2-1: config 0 interface 0 has no altsetting 0 [ 653.426520][ T90] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 653.436061][ T90] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 653.444658][ T90] usb 2-1: Product: syz [ 653.449412][ T90] usb 2-1: Manufacturer: syz [ 653.454154][ T90] usb 2-1: SerialNumber: syz [ 653.460452][ T90] usb 2-1: config 0 descriptor?? [ 653.462536][ T1205] usb 5-1: Using ep0 maxpacket: 8 [ 653.473761][ T1205] usb 5-1: unable to get BOS descriptor or descriptor too short [ 653.475236][ T90] usb 2-1: selecting invalid altsetting 0 [ 653.482968][ T1205] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 653.492568][ T6476] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 653.496114][ T1205] usb 5-1: config 0 has no interface number 0 [ 653.509637][ T1205] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 653.522710][ T1205] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 653.533713][ T1205] usb 5-1: config 0 interface 88 has no altsetting 0 [ 653.543318][ T1205] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 653.553111][ T1205] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 653.561278][ T1205] usb 5-1: Product: syz [ 653.566133][ T1205] usb 5-1: Manufacturer: syz [ 653.570800][ T1205] usb 5-1: SerialNumber: syz [ 653.578226][ T1205] usb 5-1: config 0 descriptor?? [ 653.654802][ T6476] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.664980][ T6476] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 653.677955][ T6476] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 653.690479][ T6476] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 653.699928][ T6476] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.703953][ T6303] usb 2-1: USB disconnect, device number 50 [ 653.708343][ T6476] usb 3-1: Product: syz [ 653.726007][ T6476] usb 3-1: Manufacturer: syz [ 653.735078][ T6476] usb 3-1: SerialNumber: syz [ 653.800243][ T1205] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input41 [ 653.818560][ T1205] usb 5-1: USB disconnect, device number 68 [ 653.963106][T13705] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 653.980118][T13705] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 654.127299][T13714] futex_wake_op: syz.3.2262 tries to shift op by -1; fix this program [ 654.136698][ T6303] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 654.432759][ T6303] usb 2-1: Using ep0 maxpacket: 8 [ 654.566661][ T6303] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 654.607753][T13705] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2259'. [ 654.617931][ T6303] usb 2-1: config 2 has no interface number 0 [ 654.639323][ T6303] usb 2-1: config 2 interface 31 has no altsetting 0 [ 654.658362][ T6303] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 654.668961][ T6303] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.677728][ T6303] usb 2-1: Product: syz [ 654.681910][ T6303] usb 2-1: Manufacturer: syz [ 654.689122][ T6303] usb 2-1: SerialNumber: syz [ 655.077281][T13730] Set syz1 is full, maxelem 0 reached [ 655.117042][T13716] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 655.124925][T13716] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 655.135203][ T6476] cdc_ncm 3-1:1.0: bind() failure [ 655.144572][ T6476] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 655.151492][ T6476] cdc_ncm 3-1:1.1: bind() failure [ 655.163313][ T6303] ch9200 2-1:2.31: probe with driver ch9200 failed with error -22 [ 655.175898][ T6303] usb 2-1: USB disconnect, device number 51 [ 655.192713][ T1205] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 655.354116][ T1205] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 655.362285][ T1205] usb 5-1: config 0 has no interface number 0 [ 655.369388][ T1205] usb 5-1: config 0 interface 41 has no altsetting 0 [ 655.379510][ T1205] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 655.388628][ T1205] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.397793][ T1205] usb 5-1: Product: syz [ 655.401972][ T1205] usb 5-1: Manufacturer: syz [ 655.406625][ T1205] usb 5-1: SerialNumber: syz [ 655.412890][ T1205] usb 5-1: config 0 descriptor?? [ 656.828253][ T1205] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -32 [ 656.883505][ T1205] usb 3-1: USB disconnect, device number 39 [ 656.901860][ T30] audit: type=1400 audit(1766719429.946:879): avc: denied { create } for pid=13737 comm="syz.0.2269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 656.949178][ T30] audit: type=1400 audit(1766719429.976:880): avc: denied { setopt } for pid=13737 comm="syz.0.2269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 658.574439][T13763] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2274'. [ 658.585020][ T6476] usb 5-1: USB disconnect, device number 69 [ 658.629831][T13763] openvswitch: netlink: Flow key attr not present in new flow. [ 658.819128][T13768] geneve2: entered promiscuous mode [ 658.906787][T13776] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 658.937179][ T6476] IPVS: starting estimator thread 0... [ 659.072705][T13777] IPVS: using max 63 ests per chain, 151200 per kthread [ 659.158253][T13787] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2280'. [ 659.220917][T13786] syz_tun: refused to change device tx_queue_len [ 659.421581][T13795] syzkaller1: entered promiscuous mode [ 659.427419][T13795] syzkaller1: entered allmulticast mode [ 659.442667][ T1205] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 659.624997][ T1205] usb 2-1: Using ep0 maxpacket: 16 [ 659.655789][ T1205] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 659.701668][ T1205] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 659.741382][ T1205] usb 2-1: config 0 interface 0 has no altsetting 0 [ 659.873025][T13806] netlink: 'syz.4.2286': attribute type 1 has an invalid length. [ 660.381368][ T1205] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 660.601739][ T1205] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.634916][ T1205] usb 2-1: config 0 descriptor?? [ 663.347736][ T30] audit: type=1400 audit(1766719436.186:881): avc: denied { getopt } for pid=13821 comm="syz.4.2291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 663.933582][ T30] audit: type=1326 audit(1766719436.946:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13827 comm="syz.0.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952ad8f749 code=0x7ffc0000 [ 664.069751][T13828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2292'. [ 664.134492][ T30] audit: type=1326 audit(1766719436.946:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13827 comm="syz.0.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952ad8f749 code=0x7ffc0000 [ 664.317210][ T30] audit: type=1326 audit(1766719436.976:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13827 comm="syz.0.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952ad8f749 code=0x7ffc0000 [ 664.479254][ T30] audit: type=1326 audit(1766719436.976:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13827 comm="syz.0.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f952ad8f749 code=0x7ffc0000 [ 664.663568][ T30] audit: type=1326 audit(1766719436.976:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13827 comm="syz.0.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952ad8f749 code=0x7ffc0000 [ 664.868080][ T30] audit: type=1326 audit(1766719437.016:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13827 comm="syz.0.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952ad8f749 code=0x7ffc0000 [ 665.037248][ T30] audit: type=1326 audit(1766719437.016:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13827 comm="syz.0.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952ad8f749 code=0x7ffc0000 [ 665.061645][ T30] audit: type=1326 audit(1766719437.016:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13827 comm="syz.0.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952ad8f749 code=0x7ffc0000 [ 665.271207][ T1205] usbhid 2-1:0.0: can't add hid device: -71 [ 665.277243][ T1205] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 665.294666][ T30] audit: type=1326 audit(1766719437.016:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13827 comm="syz.0.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f952ad91667 code=0x7ffc0000 [ 665.334613][ T1205] usb 2-1: USB disconnect, device number 52 [ 665.398312][T13842] overlayfs: failed to clone upperpath [ 665.443364][T13846] netlink: 'syz.3.2298': attribute type 27 has an invalid length. [ 666.125729][T13855] Invalid source name [ 666.372853][T13857] fuse: Unknown parameter 'fi' [ 667.188425][T13873] FAULT_INJECTION: forcing a failure. [ 667.188425][T13873] name failslab, interval 1, probability 0, space 0, times 0 [ 667.204788][T13873] CPU: 1 UID: 0 PID: 13873 Comm: syz.4.2307 Tainted: G L syzkaller #0 PREEMPT(full) [ 667.204822][T13873] Tainted: [L]=SOFTLOCKUP [ 667.204830][T13873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 667.204841][T13873] Call Trace: [ 667.204847][T13873] [ 667.204855][T13873] dump_stack_lvl+0x16c/0x1f0 [ 667.204886][T13873] should_fail_ex+0x512/0x640 [ 667.204913][T13873] ? __kmalloc_noprof+0xca/0x910 [ 667.204948][T13873] should_failslab+0xc2/0x120 [ 667.204976][T13873] __kmalloc_noprof+0xeb/0x910 [ 667.205009][T13873] ? constrain_params_by_rules+0x175/0xca0 [ 667.205044][T13873] ? constrain_params_by_rules+0x175/0xca0 [ 667.205071][T13873] constrain_params_by_rules+0x175/0xca0 [ 667.205099][T13873] ? arch_stack_walk+0xa6/0x100 [ 667.205146][T13873] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 667.205175][T13873] ? stack_trace_save+0x8e/0xc0 [ 667.205200][T13873] ? __pfx_stack_trace_save+0x10/0x10 [ 667.205228][T13873] ? __pfx_stack_trace_save+0x10/0x10 [ 667.205259][T13873] ? snd_pcm_oss_change_params_locked+0xb46/0x3ab0 [ 667.205286][T13873] ? snd_pcm_oss_make_ready+0xe6/0x1b0 [ 667.205313][T13873] ? snd_pcm_oss_set_trigger.isra.0+0x32/0x6b0 [ 667.205342][T13873] ? snd_pcm_oss_ioctl+0x1d38/0x37f0 [ 667.205369][T13873] ? __x64_sys_ioctl+0x18e/0x210 [ 667.205391][T13873] ? do_syscall_64+0xcd/0xf80 [ 667.205417][T13873] ? snd_interval_refine+0x2fa/0x580 [ 667.205444][T13873] snd_pcm_hw_refine+0x7de/0xad0 [ 667.205479][T13873] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 667.205527][T13873] snd_pcm_hw_param_first+0x334/0x6f0 [ 667.205563][T13873] snd_pcm_hw_param_near.constprop.0+0x702/0x8e0 [ 667.205599][T13873] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 667.205630][T13873] ? snd_pcm_oss_change_params_locked+0xad1/0x3ab0 [ 667.205668][T13873] snd_pcm_oss_change_params_locked+0xb46/0x3ab0 [ 667.205713][T13873] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 667.205743][T13873] ? __pfx___mutex_lock+0x10/0x10 [ 667.205795][T13873] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 667.205827][T13873] snd_pcm_oss_set_trigger.isra.0+0x32/0x6b0 [ 667.205863][T13873] snd_pcm_oss_ioctl+0x1d38/0x37f0 [ 667.205896][T13873] ? hook_file_ioctl_common+0x144/0x410 [ 667.205931][T13873] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 667.205965][T13873] ? selinux_file_ioctl+0x180/0x270 [ 667.205993][T13873] ? selinux_file_ioctl+0xb4/0x270 [ 667.206023][T13873] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 667.206055][T13873] __x64_sys_ioctl+0x18e/0x210 [ 667.206083][T13873] do_syscall_64+0xcd/0xf80 [ 667.206113][T13873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.206140][T13873] RIP: 0033:0x7f3c1a38f749 [ 667.206159][T13873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 667.206180][T13873] RSP: 002b:00007f3c1b1df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 667.206202][T13873] RAX: ffffffffffffffda RBX: 00007f3c1a5e5fa0 RCX: 00007f3c1a38f749 [ 667.206218][T13873] RDX: 0000200000000040 RSI: 0000000040045010 RDI: 0000000000000006 [ 667.206233][T13873] RBP: 00007f3c1b1df090 R08: 0000000000000000 R09: 0000000000000000 [ 667.206247][T13873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 667.206260][T13873] R13: 00007f3c1a5e6038 R14: 00007f3c1a5e5fa0 R15: 00007ffde7cf7dd8 [ 667.206293][T13873] [ 667.572688][ T1205] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 667.724107][T13881] overlayfs: failed to clone upperpath [ 667.771693][T13882] xt_hashlimit: max too large, truncated to 1048576 [ 667.784756][ T1205] usb 4-1: Using ep0 maxpacket: 16 [ 667.804327][ T1205] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 667.840904][ T1205] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 667.881268][ T1205] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.915825][ T1205] usb 4-1: config 0 descriptor?? [ 667.954959][ T1205] pegasus_notetaker 4-1:0.0: Invalid number of endpoints [ 667.962069][ T1205] pegasus_notetaker 4-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 668.149961][T13893] bridge: RTM_NEWNEIGH with invalid ether address [ 668.165297][ T90] usb 4-1: USB disconnect, device number 56 [ 668.328635][T13896] Invalid source name [ 668.597818][T13889] VFS: Mount too revealing [ 668.738993][T13900] tipc: Enabled bearer , priority 0 [ 668.748957][T13900] syzkaller0: entered promiscuous mode [ 668.757072][T13900] syzkaller0: entered allmulticast mode [ 668.772035][T13900] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 668.816541][T13900] tipc: Resetting bearer [ 668.858357][T13899] tipc: Resetting bearer [ 668.910212][T13899] tipc: Disabling bearer [ 669.147875][T13917] input: syz0 as /devices/virtual/input/input42 [ 669.180224][T13917] FAULT_INJECTION: forcing a failure. [ 669.180224][T13917] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 669.249112][T13917] CPU: 0 UID: 0 PID: 13917 Comm: syz.4.2319 Tainted: G L syzkaller #0 PREEMPT(full) [ 669.249148][T13917] Tainted: [L]=SOFTLOCKUP [ 669.249156][T13917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 669.249169][T13917] Call Trace: [ 669.249177][T13917] [ 669.249185][T13917] dump_stack_lvl+0x16c/0x1f0 [ 669.249216][T13917] should_fail_ex+0x512/0x640 [ 669.249251][T13917] _copy_from_user+0x2e/0xd0 [ 669.249283][T13917] input_event_from_user+0x133/0x3b0 [ 669.249309][T13917] ? __pfx_input_event_from_user+0x10/0x10 [ 669.249333][T13917] ? __pfx___might_resched+0x10/0x10 [ 669.249356][T13917] ? input_event+0x5b/0xd0 [ 669.249380][T13917] uinput_write+0xbb4/0x12b0 [ 669.249417][T13917] ? __pfx_uinput_write+0x10/0x10 [ 669.249447][T13917] ? bpf_lsm_file_permission+0x9/0x10 [ 669.249470][T13917] ? security_file_permission+0x71/0x210 [ 669.249499][T13917] ? rw_verify_area+0xcf/0x6c0 [ 669.249526][T13917] ? __pfx_uinput_write+0x10/0x10 [ 669.249553][T13917] vfs_write+0x2a0/0x11d0 [ 669.249587][T13917] ? __pfx_vfs_write+0x10/0x10 [ 669.249612][T13917] ? find_held_lock+0x2b/0x80 [ 669.249644][T13917] ? __fget_files+0x204/0x3c0 [ 669.249676][T13917] ? __fget_files+0x20e/0x3c0 [ 669.249712][T13917] ksys_write+0x1f8/0x250 [ 669.249739][T13917] ? __pfx_ksys_write+0x10/0x10 [ 669.249772][T13917] do_syscall_64+0xcd/0xf80 [ 669.249802][T13917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.249824][T13917] RIP: 0033:0x7f3c1a38f749 [ 669.249842][T13917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 669.249862][T13917] RSP: 002b:00007f3c1b1df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 669.249883][T13917] RAX: ffffffffffffffda RBX: 00007f3c1a5e5fa0 RCX: 00007f3c1a38f749 [ 669.249899][T13917] RDX: 000000000000045c RSI: 0000200000000980 RDI: 0000000000000003 [ 669.249912][T13917] RBP: 00007f3c1b1df090 R08: 0000000000000000 R09: 0000000000000000 [ 669.249926][T13917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 669.249939][T13917] R13: 00007f3c1a5e6038 R14: 00007f3c1a5e5fa0 R15: 00007ffde7cf7dd8 [ 669.249991][T13917] [ 669.686087][T13924] netlink: 'syz.1.2320': attribute type 9 has an invalid length. [ 669.693949][T13924] netlink: 'syz.1.2320': attribute type 11 has an invalid length. [ 669.701795][T13924] netlink: 'syz.1.2320': attribute type 12 has an invalid length. [ 669.710273][T13924] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.2320'. [ 670.139876][ T90] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 670.303620][ T1205] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 670.352816][ T90] usb 4-1: Using ep0 maxpacket: 16 [ 670.485653][ T1205] usb 3-1: Using ep0 maxpacket: 8 [ 670.574799][ T1205] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 670.620583][ T1205] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.631877][ T90] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 670.827302][ T1205] pvrusb2: Hardware description: Terratec Grabster AV400 [ 670.856633][ T1205] pvrusb2: ********** [ 670.860635][ T1205] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 670.975882][ T90] usb 4-1: config 0 has no interface number 0 [ 670.982232][ T90] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 671.146821][ T90] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 671.223303][ T90] usb 4-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 671.260163][ T90] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.350562][ T90] usb 4-1: Product: syz [ 671.383470][ T1205] pvrusb2: Important functionality might not be entirely working. [ 671.432310][ T90] usb 4-1: Manufacturer: syz [ 671.445274][ T1205] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 671.450369][ T90] usb 4-1: SerialNumber: syz [ 671.523040][ T1205] pvrusb2: ********** [ 671.529758][ T90] usb 4-1: config 0 descriptor?? [ 671.556737][ T90] cypress_m8 4-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 671.700052][ T2341] pvrusb2: Invalid write control endpoint [ 671.709566][ T1205] usb 3-1: USB disconnect, device number 40 [ 671.773933][T13909] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2318'. [ 671.804651][T13909] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2318'. [ 671.872637][T13909] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 671.894467][ T90] usb 4-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 671.895770][ T2341] pvrusb2: Invalid write control endpoint [ 671.926173][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 671.947254][ T90] usb 4-1: USB disconnect, device number 57 [ 672.063023][ T90] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 672.079397][ T90] cypress_m8 4-1:0.35: device disconnected [ 672.094715][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 672.142702][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 672.152779][ T2341] pvrusb2: Device being rendered inoperable [ 672.242682][ T2341] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 672.250189][ T2341] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 672.343383][ T2341] pvrusb2: Attached sub-driver cx25840 [ 672.349326][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 672.410759][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 673.578008][T13953] xt_cgroup: invalid path, errno=-2 [ 674.204912][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 674.204923][ T30] audit: type=1400 audit(2000000007.950:930): avc: denied { transfer } for pid=13963 comm="syz.3.2329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 674.927039][T13970] xt_hashlimit: max too large, truncated to 1048576 [ 674.949311][T13970] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 676.342675][ T5824] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 676.513790][ T90] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 676.532292][ T5824] usb 5-1: Using ep0 maxpacket: 16 [ 676.549579][ T5824] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 676.588985][ T5824] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 676.624740][ T5824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.687156][ T5824] usb 5-1: Product: syz [ 676.720277][ T5824] usb 5-1: Manufacturer: syz [ 676.734454][ T5824] usb 5-1: SerialNumber: syz [ 676.768136][ T5824] usb 5-1: config 0 descriptor?? [ 676.818721][T13969] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 676.826600][T13969] ALSA: mixer_oss: invalid index 1374389 [ 676.857882][ T5824] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 676.896349][ T5824] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 676.935767][T13992] overlayfs: failed to clone upperpath [ 677.303005][ T6476] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 677.475106][ T6476] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 677.499410][ T5824] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 677.510282][ T6476] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 677.530728][ T6476] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 677.652823][ T6476] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.667656][ T6476] usb 2-1: config 0 descriptor?? [ 677.680326][ T6476] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 677.690988][ T6476] dvb-usb: bulk message failed: -22 (3/0) [ 677.706786][ T6476] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 677.730303][T13984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.233168][ T6476] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 678.233444][T13984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.240315][ T6476] usb 2-1: media controller created [ 678.259706][ T6476] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 678.274432][ T6476] dvb-usb: bulk message failed: -22 (6/0) [ 678.288505][ T6476] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 678.303110][ T6476] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input43 [ 678.323765][ T6476] dvb-usb: schedule remote query interval to 150 msecs. [ 678.333416][ T6476] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 678.364322][ T6476] usb 2-1: USB disconnect, device number 53 [ 678.455594][ T6476] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 678.620360][T14003] Invalid source name [ 678.688501][ T5824] em28xx 5-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 678.699327][ T5824] em28xx 5-1:0.0: board has no eeprom [ 678.782540][ T5824] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 678.803779][ T5824] em28xx 5-1:0.0: dvb set to bulk mode. [ 678.812742][ T6476] em28xx 5-1:0.0: Binding DVB extension [ 678.834226][ T5824] usb 5-1: USB disconnect, device number 70 [ 678.874897][ T5824] em28xx 5-1:0.0: Disconnecting em28xx [ 678.934038][ T6476] em28xx 5-1:0.0: Registering input extension [ 678.956116][ T5824] em28xx 5-1:0.0: Closing input extension [ 679.009754][ T5824] em28xx 5-1:0.0: Freeing device [ 679.446426][ T30] audit: type=1400 audit(2000000013.190:931): avc: denied { ioctl } for pid=14027 comm="syz.4.2349" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x3ba0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 679.714264][ T30] audit: type=1400 audit(2000000013.440:932): avc: denied { read write } for pid=14027 comm="syz.4.2349" name="mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 680.281553][ T30] audit: type=1326 audit(2000000014.020:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14033 comm="syz.1.2351" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa30558f749 code=0x0 [ 680.694341][T14041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2352'. [ 682.039456][T14044] ALSA: mixer_oss: invalid OSS volume 'IG)$‰¬‹' [ 682.201118][T14061] netlink: 'syz.2.2356': attribute type 39 has an invalid length. [ 682.228230][T14061] hsr_slave_1 (unregistering): left promiscuous mode [ 682.395996][T14070] Invalid source name [ 682.900012][T14072] futex_wake_op: syz.0.2362 tries to shift op by -1; fix this program [ 683.352326][T14087] FAULT_INJECTION: forcing a failure. [ 683.352326][T14087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 683.366192][T14087] CPU: 0 UID: 0 PID: 14087 Comm: syz.3.2365 Tainted: G L syzkaller #0 PREEMPT(full) [ 683.366227][T14087] Tainted: [L]=SOFTLOCKUP [ 683.366234][T14087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 683.366248][T14087] Call Trace: [ 683.366256][T14087] [ 683.366264][T14087] dump_stack_lvl+0x16c/0x1f0 [ 683.366298][T14087] should_fail_ex+0x512/0x640 [ 683.366334][T14087] _copy_from_user+0x2e/0xd0 [ 683.366368][T14087] snd_pcm_oss_write2+0x1c2/0x410 [ 683.366401][T14087] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 683.366441][T14087] snd_pcm_oss_write+0x710/0xa10 [ 683.366480][T14087] ? security_file_permission+0x71/0x210 [ 683.366517][T14087] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 683.366546][T14087] vfs_write+0x2a0/0x11d0 [ 683.366581][T14087] ? __pfx_vfs_write+0x10/0x10 [ 683.366606][T14087] ? find_held_lock+0x2b/0x80 [ 683.366640][T14087] ? __fget_files+0x204/0x3c0 [ 683.366675][T14087] ? __fget_files+0x20e/0x3c0 [ 683.366713][T14087] ksys_write+0x12a/0x250 [ 683.366740][T14087] ? __pfx_ksys_write+0x10/0x10 [ 683.366765][T14087] ? rcu_is_watching+0x12/0xc0 [ 683.366795][T14087] do_syscall_64+0xcd/0xf80 [ 683.366825][T14087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.366848][T14087] RIP: 0033:0x7fd8bb38f749 [ 683.366866][T14087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 683.366888][T14087] RSP: 002b:00007fd8bc1af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 683.366910][T14087] RAX: ffffffffffffffda RBX: 00007fd8bb5e6180 RCX: 00007fd8bb38f749 [ 683.366926][T14087] RDX: 0000000000004000 RSI: 00002000000012c0 RDI: 0000000000000003 [ 683.366940][T14087] RBP: 00007fd8bc1af090 R08: 0000000000000000 R09: 0000000000000000 [ 683.366954][T14087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 683.366968][T14087] R13: 00007fd8bb5e6218 R14: 00007fd8bb5e6180 R15: 00007fff1bd16708 [ 683.367000][T14087] [ 684.006965][ T90] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 684.875728][ T90] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 684.923665][ T90] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 685.007608][ T90] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 685.017089][ T90] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.025347][ T90] usb 3-1: Product: syz [ 685.035495][T14106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2373'. [ 685.053500][ T90] usb 3-1: Manufacturer: syz [ 685.063814][T14106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2373'. [ 685.073836][ T90] usb 3-1: SerialNumber: syz [ 685.107473][ T90] usb 3-1: config 0 descriptor?? [ 685.119992][T14090] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 685.245572][T14090] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 685.308614][T14106] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2373'. [ 685.389281][T14106] block nbd0: not configured, cannot reconfigure [ 685.543170][T14079] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 685.543247][T14079] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 685.646736][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.646771][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.809591][T14129] Invalid source name [ 686.333796][ T90] Error reading MAC address [ 686.341687][ T90] usb 3-1: USB disconnect, device number 41 [ 686.770342][T14133] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2379'. [ 686.822857][T14126] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2375'. [ 686.848142][ T5828] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 687.122997][ T6476] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 687.192664][T14143] can: request_module (can-proto-0) failed. [ 687.276767][ T6476] usb 4-1: config 0 has an invalid interface number: 153 but max is 0 [ 687.299841][ T6476] usb 4-1: config 0 has no interface number 0 [ 687.319900][ T6476] usb 4-1: too many endpoints for config 0 interface 153 altsetting 255: 255, using maximum allowed: 30 [ 687.360760][ T6476] usb 4-1: config 0 interface 153 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 687.416590][ T6476] usb 4-1: config 0 interface 153 has no altsetting 0 [ 687.431296][T14143] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2382'. [ 687.725386][T14155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2384'. [ 688.153147][ T1205] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 688.381290][ T6476] usb 4-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 688.390608][ T6476] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.399215][ T6476] usb 4-1: Product: syz [ 688.403438][ T6476] usb 4-1: Manufacturer: syz [ 688.408080][ T6476] usb 4-1: SerialNumber: syz [ 688.423488][ T6476] usb 4-1: config 0 descriptor?? [ 688.430497][ T6476] hub 4-1:0.153: bad descriptor, ignoring hub [ 688.436909][ T6476] hub 4-1:0.153: probe with driver hub failed with error -5 [ 688.445496][ T1205] usb 5-1: Using ep0 maxpacket: 16 [ 688.452231][ T1205] usb 5-1: config index 0 descriptor too short (expected 22052, got 36) [ 688.462155][ T1205] usb 5-1: config 110 has too many interfaces: 139, using maximum allowed: 32 [ 688.472122][ T1205] usb 5-1: config 110 has an invalid descriptor of length 175, skipping remainder of the config [ 688.484001][ T1205] usb 5-1: config 110 has 0 interfaces, different from the descriptor's value: 139 [ 688.494249][ T1205] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 688.496555][ T6476] sierra 4-1:0.153: Sierra USB modem converter detected [ 688.950845][ T1205] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.991187][ T6476] usb 4-1: USB disconnect, device number 59 [ 689.074153][ T6476] sierra 4-1:0.153: device disconnected [ 689.075636][T14167] Invalid source name [ 689.187512][T14157] rtc_cmos 00:00: Alarms can be up to one day in the future [ 689.198935][T14157] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2385'. [ 689.211529][ T1205] usb 5-1: string descriptor 0 read error: -71 [ 689.230235][ T1205] usb 5-1: USB disconnect, device number 71 [ 690.060586][T14183] netlink: 'syz.4.2394': attribute type 4 has an invalid length. [ 690.076352][T14187] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2395'. [ 691.760325][T14187] tipc: Started in network mode [ 691.765252][T14187] tipc: Node identity ac1414aa, cluster identity 4711 [ 691.809086][ T1205] IPVS: starting estimator thread 0... [ 691.818521][T14187] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 691.830738][T14187] tipc: Enabled bearer , priority 10 [ 691.922032][T14219] IPVS: using max 63 ests per chain, 151200 per kthread [ 691.952789][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 692.092566][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 692.138321][ T6303] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 692.151719][ T1205] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 692.242641][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 692.306696][ T6303] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 692.318570][ T6303] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 692.333682][ T1205] usb 4-1: Using ep0 maxpacket: 16 [ 692.344257][ T1205] usb 4-1: unable to get BOS descriptor or descriptor too short [ 692.357624][ T1205] usb 4-1: config 0 has an invalid interface number: 3 but max is 0 [ 692.369165][ T6303] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 692.384882][ T1205] usb 4-1: config 0 has no interface number 0 [ 692.392537][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 692.400114][ T1205] usb 4-1: config 0 interface 3 altsetting 142 bulk endpoint 0x5 has invalid maxpacket 32 [ 692.412032][ T1205] usb 4-1: config 0 interface 3 altsetting 142 endpoint 0x6 has invalid wMaxPacketSize 0 [ 692.423042][ T6303] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 692.454948][ T1205] usb 4-1: config 0 interface 3 has no altsetting 0 [ 692.461775][ T6303] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.479832][ T1205] usb 4-1: New USB device found, idVendor=0bfd, idProduct=000b, bcdDevice=4e.46 [ 692.489660][ T1205] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.502509][ T6303] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22 [ 692.516127][ T1205] usb 4-1: Product: syz [ 692.525223][ T1205] usb 4-1: Manufacturer: syz [ 692.532375][ T1205] usb 4-1: SerialNumber: syz [ 692.537121][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 692.548897][ T1205] usb 4-1: config 0 descriptor?? [ 692.559284][T14213] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 692.673048][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 692.682746][ T90] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 692.812800][ T6303] tipc: Node number set to 2886997162 [ 692.857200][ T1205] kvaser_usb 4-1:0.3: error -ENODEV: Cannot get usb endpoint(s) [ 692.893667][T14218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.902845][ T1205] usb 4-1: USB disconnect, device number 60 [ 692.921651][T14218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.941878][T14218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.952566][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 692.971103][T14218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.979696][ T90] usb 5-1: Using ep0 maxpacket: 32 [ 692.986246][ T90] usb 5-1: config 0 has an invalid interface number: 146 but max is 0 [ 692.999197][ T90] usb 5-1: config 0 has no interface number 0 [ 693.011290][ T90] usb 5-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 693.013561][ T6303] usb 3-1: USB disconnect, device number 42 [ 693.023188][ T90] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 693.098940][ T90] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 693.111256][ T90] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 693.125817][ T90] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 693.138609][ T90] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 693.149042][ T90] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 693.159446][ T90] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 693.169815][ T90] usb 5-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 693.186368][ T90] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 693.186730][T14227] gre1: entered promiscuous mode [ 693.196191][ T90] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.196218][ T90] usb 5-1: Product: syz [ 693.196236][ T90] usb 5-1: Manufacturer: syz [ 693.196253][ T90] usb 5-1: SerialNumber: syz [ 693.223297][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 693.231486][T14227] gre1: entered allmulticast mode [ 693.257555][ T90] usb 5-1: config 0 descriptor?? [ 693.263332][T14225] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 693.272065][ T90] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 693.293181][ T90] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 693.441876][T14233] fuse: Unknown parameter 'Pßx&°gÅ+)w¡!$Àú'MP*Ðöò6é¾^ Û€ß¹FŒOúEº¯€ÊKUvÊêqíªpo¡zK³÷³ÅU‰ÝÎÛgäå@¶¢s¨ÒåÛ€—”׆÷óY¶±cê_½' [ 693.752560][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 694.369247][ T90] usb 5-1: USB disconnect, device number 72 [ 695.636410][T14258] netlink: 'syz.1.2418': attribute type 10 has an invalid length. [ 695.645335][T14258] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2418'. [ 695.662375][T14259] vivid-004: disconnect [ 695.699793][T14259] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2417'. [ 695.709147][T14258] dummy0: entered promiscuous mode [ 695.726545][T14258] bridge0: port 3(dummy0) entered blocking state [ 695.777150][T14258] bridge0: port 3(dummy0) entered disabled state [ 695.800035][T14258] dummy0: entered allmulticast mode [ 695.821747][T14258] bridge0: port 3(dummy0) entered blocking state [ 695.828267][T14258] bridge0: port 3(dummy0) entered forwarding state [ 696.453208][T14256] vivid-004: reconnect [ 696.460903][ T30] audit: type=1400 audit(2000000029.810:934): avc: denied { bind } for pid=14262 comm="syz.4.2419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 696.785722][ T30] audit: type=1400 audit(2000000030.460:935): avc: denied { connect } for pid=14279 comm="syz.1.2423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 696.842545][ C0] net_ratelimit: 2 callbacks suppressed [ 696.842564][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 696.862060][ T30] audit: type=1400 audit(2000000030.460:936): avc: denied { read } for pid=14279 comm="syz.1.2423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 697.253031][ T90] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 697.434719][ T90] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 697.444144][ T90] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.457674][ T90] usb 5-1: config 0 descriptor?? [ 697.466337][ T90] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 697.882550][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 697.899821][ T5828] Bluetooth: hci0: unexpected cc 0x204b length: 9 > 3 [ 697.907316][ T5828] Bluetooth: hci0: unexpected event for opcode 0x204b [ 698.395933][ T90] gspca_sunplus: reg_w_riv err -110 [ 698.408804][ T90] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 698.594285][T14306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2427'. [ 698.657562][T14306] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2427'. [ 698.922550][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 698.942705][ T1205] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 699.105430][ T1205] usb 4-1: unable to get BOS descriptor or descriptor too short [ 699.120708][ T1205] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 699.148986][ T1205] usb 4-1: config 0 has no interfaces? [ 699.167441][ T1205] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 699.187424][ T1205] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.196531][ T1205] usb 4-1: Product: syz [ 699.200766][ T1205] usb 4-1: Manufacturer: syz [ 699.206265][ T1205] usb 4-1: SerialNumber: syz [ 699.215024][ T1205] usb 4-1: config 0 descriptor?? [ 699.434518][ T1205] usb 4-1: USB disconnect, device number 61 [ 699.962548][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 700.153694][ T6303] usb 5-1: USB disconnect, device number 73 [ 701.003037][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 701.752705][ T90] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 701.803657][T14362] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2442'. [ 702.042540][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 702.247707][ T90] usb 2-1: Using ep0 maxpacket: 32 [ 702.254865][ T90] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 702.271096][ T90] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 702.281687][ T90] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 702.290795][ T90] usb 2-1: Product: syz [ 702.295694][ T90] usb 2-1: Manufacturer: syz [ 702.300857][ T90] usb 2-1: SerialNumber: syz [ 702.327195][ T90] usb 2-1: config 0 descriptor?? [ 702.346200][T14353] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 702.457615][T14366] 9p: Bad value for 'rfdno' [ 702.650378][ T90] usb 2-1: USB disconnect, device number 55 [ 703.082548][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 703.207818][T14372] syzkaller0: entered promiscuous mode [ 703.225430][T14372] syzkaller0: entered allmulticast mode [ 703.492923][ T6476] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 703.566678][T14382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2448'. [ 703.666870][ T6476] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 703.703817][T14395] /dev/nullb0: Can't open blockdev [ 703.716351][ T6476] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 704.010700][ T6476] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 704.037526][ T6476] usb 4-1: config 220 has no interface number 2 [ 704.049296][ T6476] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 704.071673][ T6476] usb 4-1: config 220 interface 0 has no altsetting 0 [ 704.091538][ T6476] usb 4-1: config 220 interface 76 has no altsetting 0 [ 704.107931][ T6476] usb 4-1: config 220 interface 1 has no altsetting 0 [ 704.122558][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 704.139939][ T6476] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 704.159989][ T6476] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.187436][ T6476] usb 4-1: Product: syz [ 704.197256][ T6476] usb 4-1: Manufacturer: syz [ 704.215098][ T6476] usb 4-1: SerialNumber: syz [ 704.367679][T14411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2456'. [ 704.683489][ T5828] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 704.709418][ T6476] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 704.733084][ T6476] uvcvideo 4-1:220.0: No valid video chain found. [ 704.770633][ T6476] usb 4-1: USB disconnect, device number 62 [ 704.888848][T14416] SELinux: failed to load policy [ 705.162548][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 705.426462][T14434] bridge0: entered promiscuous mode [ 705.431769][T14434] bridge0: entered allmulticast mode [ 705.848506][ T30] audit: type=1400 audit(2000000039.590:937): avc: denied { mounton } for pid=14435 comm="syz.4.2463" path="cgroup:[4026533006]" dev="nsfs" ino=4026533006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 705.917185][T14438] netlink: 'syz.3.2464': attribute type 3 has an invalid length. [ 705.932333][T14438] netlink: 'syz.3.2464': attribute type 3 has an invalid length. [ 706.029880][T14440] FAULT_INJECTION: forcing a failure. [ 706.029880][T14440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 706.043057][T14440] CPU: 1 UID: 0 PID: 14440 Comm: syz.1.2465 Tainted: G L syzkaller #0 PREEMPT(full) [ 706.043079][T14440] Tainted: [L]=SOFTLOCKUP [ 706.043083][T14440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 706.043090][T14440] Call Trace: [ 706.043096][T14440] [ 706.043102][T14440] dump_stack_lvl+0x16c/0x1f0 [ 706.043121][T14440] should_fail_ex+0x512/0x640 [ 706.043143][T14440] strncpy_from_user+0x3b/0x2e0 [ 706.043158][T14440] ? ktime_get+0x200/0x310 [ 706.043179][T14440] strncpy_from_user_nofault+0x7f/0x180 [ 706.043194][T14440] bpf_probe_read_user_str+0x26/0x70 [ 706.043214][T14440] bpf_prog_80e7e8a273d19f42+0x46/0x4c [ 706.043225][T14440] bpf_test_run+0x3d2/0xb50 [ 706.043244][T14440] ? __pfx_bpf_test_run+0x10/0x10 [ 706.043262][T14440] ? skb_copy_bits+0x745/0x8c0 [ 706.043285][T14440] ? eth_type_trans+0x2e3/0x740 [ 706.043302][T14440] bpf_prog_test_run_skb+0x1035/0x31a0 [ 706.043325][T14440] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 706.043341][T14440] ? fput+0x70/0xf0 [ 706.043353][T14440] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 706.043366][T14440] __sys_bpf+0x1035/0x4980 [ 706.043386][T14440] ? __pfx___sys_bpf+0x10/0x10 [ 706.043401][T14440] ? find_held_lock+0x2b/0x80 [ 706.043423][T14440] ? find_held_lock+0x2b/0x80 [ 706.043443][T14440] ? __mutex_unlock_slowpath+0x161/0x790 [ 706.043468][T14440] ? fput+0x70/0xf0 [ 706.043477][T14440] ? ksys_write+0x1ac/0x250 [ 706.043492][T14440] ? __pfx_ksys_write+0x10/0x10 [ 706.043508][T14440] __x64_sys_bpf+0x78/0xc0 [ 706.043524][T14440] ? lockdep_hardirqs_on+0x7c/0x110 [ 706.043539][T14440] do_syscall_64+0xcd/0xf80 [ 706.043555][T14440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.043568][T14440] RIP: 0033:0x7fa30558f749 [ 706.043579][T14440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 706.043590][T14440] RSP: 002b:00007fa30637b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 706.043601][T14440] RAX: ffffffffffffffda RBX: 00007fa3057e5fa0 RCX: 00007fa30558f749 [ 706.043609][T14440] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 706.043616][T14440] RBP: 00007fa30637b090 R08: 0000000000000000 R09: 0000000000000000 [ 706.043623][T14440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 706.043630][T14440] R13: 00007fa3057e6038 R14: 00007fa3057e5fa0 R15: 00007ffe2ebe8d68 [ 706.043646][T14440] [ 706.202560][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 707.242561][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 707.801483][T14468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2473'. [ 707.827447][T14468] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2473'. [ 707.840210][T14471] 9p: Bad value for 'wfdno' [ 708.088334][ T30] audit: type=1400 audit(2000000041.830:938): avc: denied { read } for pid=14479 comm="getty" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 syzkaller syzkaller login: [ 708.282542][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 708.450958][T14486] /dev/nullb0: Can't open blockdev [ 708.903022][ T30] audit: type=1326 audit(2000000042.640:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14488 comm="syz.3.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8bb38f749 code=0x7ffc0000 [ 709.147415][ T30] audit: type=1326 audit(2000000042.740:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14488 comm="syz.3.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8bb38f749 code=0x7ffc0000 [ 709.187061][ T30] audit: type=1326 audit(2000000042.740:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14488 comm="syz.3.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8bb38f749 code=0x7ffc0000 [ 709.218493][ T30] audit: type=1326 audit(2000000042.820:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14488 comm="syz.3.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8bb38f749 code=0x7ffc0000 [ 709.271916][ T30] audit: type=1326 audit(2000000042.840:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14488 comm="syz.3.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd8bb38f783 code=0x7ffc0000 [ 709.322633][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 709.368860][ T30] audit: type=1326 audit(2000000042.880:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14488 comm="syz.3.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8bb38f749 code=0x7ffc0000 [ 709.423113][ T30] audit: type=1326 audit(2000000042.880:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14488 comm="syz.3.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd8bb38f749 code=0x7ffc0000 [ 709.462829][ T30] audit: type=1326 audit(2000000042.880:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14488 comm="syz.3.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8bb38f749 code=0x7ffc0000 [ 709.497429][ T5815] Bluetooth: hci0: command 0x0406 tx timeout [ 709.601286][T14503] Set syz1 is full, maxelem 0 reached [ 710.362541][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 710.410276][T14511] autofs4:pid:14511:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1803188595.1701604449), cmd(0xc0189371) [ 710.425343][T14511] autofs4:pid:14511:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189371) [ 710.593466][ T6303] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 710.990869][ T30] kauditd_printk_skb: 70 callbacks suppressed [ 710.990893][ T30] audit: type=1400 audit(2000000044.730:1017): avc: denied { setopt } for pid=14514 comm="syz.1.2487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 711.020772][T14515] syz.1.2487 (14515): /proc/14514/oom_adj is deprecated, please use /proc/14514/oom_score_adj instead. [ 711.054659][ T6303] usb 3-1: unable to get BOS descriptor or descriptor too short [ 711.071819][ T6303] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 711.091089][ T6303] usb 3-1: config 1 has no interface number 1 [ 711.106490][ T6303] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 711.174666][ T6303] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 711.183973][ T6303] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.191966][ T6303] usb 3-1: Product: syz [ 711.205295][ T6303] usb 3-1: Manufacturer: syz [ 711.209940][ T6303] usb 3-1: SerialNumber: syz [ 711.392722][ T1205] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 711.402555][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 711.438803][ T6303] usb 3-1: found format II with max.bitrate = 26774, frame size=2 [ 711.448104][ T6303] usb 3-1: found format II with max.bitrate = 26774, frame size=2 [ 711.497640][ T6303] usb 3-1: failed to enable PITCH for EP 0x82 [ 711.533117][ T6303] usb 3-1: USB disconnect, device number 43 [ 711.564713][ T1205] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 711.575275][ T1205] usb 4-1: config 0 interface 0 has no altsetting 0 [ 711.587642][ T1205] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 711.602397][ T1205] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.611851][ T1205] usb 4-1: Product: syz [ 711.616481][ T1205] usb 4-1: Manufacturer: syz [ 711.621107][ T1205] usb 4-1: SerialNumber: syz [ 711.628423][ T1205] usb 4-1: config 0 descriptor?? [ 711.635726][ T1205] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 711.646413][ T1205] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 711.805961][ T1205] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 711.815174][ T1205] usb 4-1: media controller created [ 711.828768][ T1205] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 711.854976][T14526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 711.863717][ T90] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 711.872204][T14526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 711.882275][ T1205] DVB: Unable to find symbol tda10046_attach() [ 711.885921][T14526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 711.890855][ T1205] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 711.910058][T14526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 711.918311][ T1205] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 712.060723][ T90] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 712.082537][ T90] usb 2-1: can't read configurations, error -22 [ 712.242611][ T90] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 712.397799][ T90] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 712.416511][ T90] usb 2-1: can't read configurations, error -22 [ 712.429814][T14559] overlayfs: failed to clone lowerpath [ 712.436619][ T90] usb usb2-port1: attempt power cycle [ 712.442556][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 712.535144][ T1205] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 712.549982][ T1205] usb 4-1: USB disconnect, device number 63 [ 712.752822][ T6476] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 712.794514][ T90] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 712.825345][ T90] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 712.837583][ T90] usb 2-1: can't read configurations, error -22 [ 713.003163][ T5824] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 713.018571][T14579] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2504'. [ 713.132862][ T6476] usb 5-1: Using ep0 maxpacket: 8 [ 713.139290][ T6476] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 713.149404][ T6476] usb 5-1: config 179 has no interface number 0 [ 713.156185][ T90] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 713.164617][ T6476] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 713.177229][ T6476] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 713.188734][ T6476] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 713.200356][ T6476] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 713.215281][ T6476] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 713.225277][ T6476] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.234167][ T90] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 713.244616][ T90] usb 2-1: can't read configurations, error -22 [ 713.252628][ T5824] usb 3-1: Using ep0 maxpacket: 32 [ 713.260707][T14560] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 713.269534][ T90] usb usb2-port1: unable to enumerate USB device [ 713.278439][ T5824] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 713.289079][ T5824] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 713.314996][T14586] openvswitch: netlink: VXLAN extension 30 out of range max 1 [ 713.333456][T14586] libceph: resolve '400' (ret=-3): failed [ 713.344189][ T5824] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 713.353712][ T5824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.362025][ T5824] usb 3-1: Product: ጠ[ 713.366826][ T5824] usb 3-1: Manufacturer: â [ 713.371507][ T5824] usb 3-1: SerialNumber: 죎㱨î¼âªŠí“•íŽžá£¬á¤·ä¦˜Ó•ã¼‡ç»â™­ä¬æ¨€à¨¶í…¡ìš‰ï’µä“¥æ¯Žå¢Žä µïž¨æ‰©ä‹¨å¢µï½ì›Ÿâ€ªî¸šé–„迀驒韂뀿牎튣 [ 713.482547][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 713.505839][T14560] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 713.515303][T14560] CPU: 1 UID: 0 PID: 14560 Comm: syz.4.2498 Tainted: G L syzkaller #0 PREEMPT(full) [ 713.515342][T14560] Tainted: [L]=SOFTLOCKUP [ 713.515350][T14560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 713.515364][T14560] Call Trace: [ 713.515374][T14560] [ 713.515383][T14560] dump_stack_lvl+0x16c/0x1f0 [ 713.515421][T14560] sysfs_warn_dup+0x7f/0xa0 [ 713.515448][T14560] sysfs_do_create_link_sd+0x124/0x140 [ 713.515479][T14560] sysfs_create_link+0x61/0xc0 [ 713.515506][T14560] device_add+0x652/0x1980 [ 713.515537][T14560] ? __pfx_device_add+0x10/0x10 [ 713.515563][T14560] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 713.515594][T14560] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 713.515631][T14560] wiphy_register+0x1ea1/0x2cc0 [ 713.515662][T14560] ? __rtnl_unlock+0x68/0xf0 [ 713.515690][T14560] ? __netdev_update_features+0x1040/0x1fe0 [ 713.515724][T14560] ? __pfx_wiphy_register+0x10/0x10 [ 713.515757][T14560] ? __asan_memset+0x23/0x50 [ 713.515800][T14560] ? ieee80211_init_rate_ctrl_alg+0x125/0x680 [ 713.515839][T14560] ieee80211_register_hw+0x2bb2/0x4160 [ 713.515886][T14560] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 713.515919][T14560] ? __pfx___debug_object_init+0x10/0x10 [ 713.515955][T14560] ? find_held_lock+0x2b/0x80 [ 713.515991][T14560] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 713.516019][T14560] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 713.516046][T14560] ? __hrtimer_setup+0x176/0x280 [ 713.516083][T14560] mac80211_hwsim_new_radio+0x3323/0x5150 [ 713.516136][T14560] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 713.516173][T14560] ? __asan_memcpy+0x3c/0x60 [ 713.516202][T14560] hwsim_new_radio_nl+0xba2/0x1330 [ 713.516240][T14560] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 713.516281][T14560] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 713.516313][T14560] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 713.516353][T14560] genl_family_rcv_msg_doit+0x209/0x2f0 [ 713.516388][T14560] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 713.516431][T14560] ? bpf_lsm_capable+0x9/0x10 [ 713.516457][T14560] ? security_capable+0x7e/0x260 [ 713.516483][T14560] ? ns_capable+0xd7/0x110 [ 713.516517][T14560] genl_rcv_msg+0x55c/0x800 [ 713.516552][T14560] ? __pfx_genl_rcv_msg+0x10/0x10 [ 713.516585][T14560] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 713.516623][T14560] ? __lock_acquire+0x436/0x2890 [ 713.516656][T14560] netlink_rcv_skb+0x158/0x420 [ 713.516684][T14560] ? __pfx_genl_rcv_msg+0x10/0x10 [ 713.516718][T14560] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 713.516767][T14560] ? netlink_deliver_tap+0x1ae/0xd30 [ 713.516801][T14560] genl_rcv+0x28/0x40 [ 713.516831][T14560] netlink_unicast+0x5aa/0x870 [ 713.516866][T14560] ? __pfx_netlink_unicast+0x10/0x10 [ 713.516892][T14560] ? __asan_memset+0x23/0x50 [ 713.516915][T14560] ? __build_skb_around+0x278/0x390 [ 713.516956][T14560] netlink_sendmsg+0x8c8/0xdd0 [ 713.516990][T14560] ? __pfx_netlink_sendmsg+0x10/0x10 [ 713.517031][T14560] sock_sendmsg+0x3cc/0x470 [ 713.517063][T14560] ? __pfx_sock_sendmsg+0x10/0x10 [ 713.517115][T14560] splice_to_socket+0xaf4/0x1110 [ 713.517167][T14560] ? __pfx_splice_to_socket+0x10/0x10 [ 713.517213][T14560] ? inode_has_perm+0x16d/0x1d0 [ 713.517266][T14560] ? bpf_lsm_file_permission+0x9/0x10 [ 713.517290][T14560] ? security_file_permission+0x71/0x210 [ 713.517322][T14560] ? rw_verify_area+0xcf/0x6c0 [ 713.517346][T14560] ? __pfx_splice_to_socket+0x10/0x10 [ 713.517380][T14560] do_splice+0x1478/0x1fc0 [ 713.517414][T14560] ? __lock_acquire+0x436/0x2890 [ 713.517452][T14560] ? __pfx_do_splice+0x10/0x10 [ 713.517482][T14560] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 713.517514][T14560] ? find_held_lock+0x2b/0x80 [ 713.517550][T14560] __do_splice+0x32a/0x360 [ 713.517586][T14560] ? __pfx___do_splice+0x10/0x10 [ 713.517618][T14560] ? __x64_sys_openat+0xf0/0x210 [ 713.517650][T14560] __x64_sys_splice+0x187/0x250 [ 713.517689][T14560] do_syscall_64+0xcd/0xf80 [ 713.517720][T14560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.517744][T14560] RIP: 0033:0x7f3c1a38f749 [ 713.517770][T14560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 713.517795][T14560] RSP: 002b:00007f3c1b1be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 713.517818][T14560] RAX: ffffffffffffffda RBX: 00007f3c1a5e6090 RCX: 00007f3c1a38f749 [ 713.517834][T14560] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000003 [ 713.517849][T14560] RBP: 00007f3c1a413f91 R08: 000000000004fbe6 R09: 0000000000000004 [ 713.517865][T14560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 713.517880][T14560] R13: 00007f3c1a5e6128 R14: 00007f3c1a5e6090 R15: 00007ffde7cf7dd8 [ 713.517915][T14560] [ 713.543143][ T1205] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 714.010097][ T30] audit: type=1400 audit(2000000047.750:1018): avc: denied { ioctl } for pid=14565 comm="syz.2.2501" path="socket:[49953]" dev="sockfs" ino=49953 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 714.036846][T14566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 714.045608][T14566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.065911][ T5824] cdc_ncm 3-1:1.0: bind() failure [ 714.080552][ T5824] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 714.088008][ T5824] cdc_ncm 3-1:1.1: bind() failure [ 714.126734][ T5824] usb 3-1: USB disconnect, device number 44 [ 714.313720][ T1205] usb 4-1: config 8 has an invalid interface number: 8 but max is 1 [ 714.323266][ T1205] usb 4-1: config 8 has an invalid interface number: 8 but max is 1 [ 714.331267][ T1205] usb 4-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 714.342944][ T1205] usb 4-1: config 8 has no interface number 0 [ 714.350904][ T1205] usb 4-1: config 8 interface 8 has no altsetting 1 [ 714.380184][ T1205] usb 4-1: New USB device found, idVendor=1199, idProduct=68a2, bcdDevice=33.93 [ 714.389890][ T1205] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.398691][ T1205] usb 4-1: Product: syz [ 714.403604][ T1205] usb 4-1: Manufacturer: syz [ 714.522547][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 715.074718][ T1205] usb 4-1: SerialNumber: syz [ 715.385774][ T1205] qmi_wwan 4-1:8.8: probe with driver qmi_wwan failed with error -22 [ 715.401119][ T1205] usb 4-1: USB disconnect, device number 64 [ 715.562544][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 716.602552][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 716.702295][ T90] usb 5-1: USB disconnect, device number 74 [ 716.702356][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 716.702409][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 716.923468][T14618] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 716.963588][T14616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2515'. [ 717.120768][T14623] bridge1: entered promiscuous mode [ 717.126125][T14623] bridge1: entered allmulticast mode [ 717.154338][T14623] team0: Port device bridge1 added [ 717.642694][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 718.682543][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 719.403262][ T6303] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 719.562921][ T6303] usb 5-1: Using ep0 maxpacket: 32 [ 719.570299][ T6303] usb 5-1: config 0 interface 0 has no altsetting 0 [ 719.587793][ T6303] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 719.609301][ T6303] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.634920][ T6303] usb 5-1: Product: syz [ 719.648628][ T6303] usb 5-1: Manufacturer: syz [ 719.664183][ T6303] usb 5-1: SerialNumber: syz [ 719.682589][ T6303] usb 5-1: config 0 descriptor?? [ 719.722559][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 720.209163][ T6303] gs_usb 5-1:0.0: Configuring for 2 interfaces [ 720.258155][T14648] Set syz1 is full, maxelem 0 reached [ 720.347959][T14650] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2524'. [ 720.611017][ T6303] gs_usb 5-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 720.634697][ T6303] gs_usb 5-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 720.654042][ T6303] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 720.680605][ T6303] usb 5-1: USB disconnect, device number 75 [ 720.762640][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 720.793404][T14658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2527'. [ 720.830182][T14658] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2527'. [ 720.870655][T14660] futex_wake_op: syz.3.2528 tries to shift op by -1; fix this program [ 721.481978][ T30] audit: type=1400 audit(2000000055.220:1019): avc: denied { ioctl } for pid=14671 comm="syz.3.2532" path="socket:[50118]" dev="sockfs" ino=50118 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 721.671545][T14674] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2534'. [ 721.684236][T14674] block nbd0: not configured, cannot reconfigure [ 721.735845][T14677] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14677 comm=syz.1.2533 [ 721.802621][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 721.909192][ T30] audit: type=1400 audit(2000000055.650:1020): avc: denied { append } for pid=14685 comm="syz.1.2535" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 722.061386][T14687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2536'. [ 722.842546][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 723.064798][ T5828] Bluetooth: hci3: command 0x0406 tx timeout [ 723.094190][T14687] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2536'. [ 723.368015][ T1205] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 723.534303][ T1205] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 723.583063][ T1205] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 723.595285][T14695] syzkaller0: entered promiscuous mode [ 723.601528][T14705] Set syz1 is full, maxelem 0 reached [ 723.610614][ T1205] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 723.620701][T14695] syzkaller0: entered allmulticast mode [ 723.626857][ T1205] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.654793][ T1205] usb 5-1: config 0 descriptor?? [ 723.892597][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 724.922535][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 725.054192][T14690] trusted_key: encrypted_key: insufficient parameters specified [ 725.980789][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 727.002549][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 728.042586][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 728.755480][ T30] audit: type=1326 audit(2000000062.500:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14746 comm="syz.0.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952ad8f749 code=0x7ffc0000 [ 728.813274][ T30] audit: type=1326 audit(2000000062.520:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14746 comm="syz.0.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f952ad8f749 code=0x7ffc0000 [ 728.843505][ T30] audit: type=1326 audit(2000000062.520:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14746 comm="syz.0.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952ad8f749 code=0x7ffc0000 [ 728.868121][ T30] audit: type=1326 audit(2000000062.580:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14746 comm="syz.0.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f952ad8f749 code=0x7ffc0000 [ 728.927336][ T30] audit: type=1326 audit(2000000062.580:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14746 comm="syz.0.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952ad8f749 code=0x7ffc0000 [ 729.037983][ T30] audit: type=1326 audit(2000000062.580:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14746 comm="syz.0.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952ad8f749 code=0x7ffc0000 [ 729.083843][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 729.090996][ T30] audit: type=1326 audit(2000000062.580:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14746 comm="syz.0.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f952ad8f749 code=0x7ffc0000 [ 729.115759][ T1205] usbhid 5-1:0.0: can't add hid device: -32 [ 729.124205][ T1205] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 729.141174][ T30] audit: type=1326 audit(2000000062.580:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14746 comm="syz.0.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952ad8f749 code=0x7ffc0000 [ 729.199729][ T30] audit: type=1326 audit(2000000062.580:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14746 comm="syz.0.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f952ad8f749 code=0x7ffc0000 [ 729.224153][ T30] audit: type=1326 audit(2000000062.580:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14746 comm="syz.0.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952ad8f749 code=0x7ffc0000 [ 730.058182][T14711] infiniband syz2: set down [ 730.062930][T14711] infiniband syz2: added ipvlan0 [ 730.072418][T14711] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 730.075740][T14711] infiniband syz2: Couldn't open port 1 [ 730.112027][T14711] RDS/IB: syz2: added [ 730.116642][T14711] smc: adding ib device syz2 with port count 1 [ 730.122547][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 730.123183][T14711] smc: ib device syz2 port 1 has no pnetid [ 730.763545][ T1205] usb 5-1: USB disconnect, device number 76 [ 731.162653][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 732.148226][T14775] 9p: Bad value for 'wfdno' [ 732.202541][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 732.329124][T14794] xt_policy: output policy not valid in PREROUTING and INPUT [ 733.242534][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 733.263682][ T1205] IPVS: starting estimator thread 0... [ 733.353097][T14809] IPVS: using max 35 ests per chain, 84000 per kthread [ 733.886941][T14819] FAULT_INJECTION: forcing a failure. [ 733.886941][T14819] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 733.953264][T14819] CPU: 0 UID: 0 PID: 14819 Comm: syz.2.2574 Tainted: G L syzkaller #0 PREEMPT(full) [ 733.953301][T14819] Tainted: [L]=SOFTLOCKUP [ 733.953310][T14819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 733.953323][T14819] Call Trace: [ 733.953331][T14819] [ 733.953340][T14819] dump_stack_lvl+0x16c/0x1f0 [ 733.953371][T14819] should_fail_ex+0x512/0x640 [ 733.953410][T14819] _copy_to_user+0x32/0xd0 [ 733.953450][T14819] simple_read_from_buffer+0xcb/0x170 [ 733.953482][T14819] proc_fail_nth_read+0x197/0x240 [ 733.953507][T14819] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 733.953533][T14819] ? rw_verify_area+0xcf/0x6c0 [ 733.953556][T14819] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 733.953580][T14819] vfs_read+0x1e4/0xcf0 [ 733.953608][T14819] ? __pfx___mutex_lock+0x10/0x10 [ 733.953640][T14819] ? __pfx_vfs_read+0x10/0x10 [ 733.953675][T14819] ? __fget_files+0x20e/0x3c0 [ 733.953713][T14819] ksys_read+0x12a/0x250 [ 733.953739][T14819] ? __pfx_ksys_read+0x10/0x10 [ 733.953772][T14819] do_syscall_64+0xcd/0xf80 [ 733.953801][T14819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.953822][T14819] RIP: 0033:0x7f3da318e15c [ 733.953841][T14819] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 733.953862][T14819] RSP: 002b:00007f3da4064030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 733.953883][T14819] RAX: ffffffffffffffda RBX: 00007f3da33e5fa0 RCX: 00007f3da318e15c [ 733.953898][T14819] RDX: 000000000000000f RSI: 00007f3da40640a0 RDI: 0000000000000004 [ 733.953912][T14819] RBP: 00007f3da4064090 R08: 0000000000000000 R09: 0000000000000000 [ 733.953926][T14819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 733.953939][T14819] R13: 00007f3da33e6038 R14: 00007f3da33e5fa0 R15: 00007ffc35ea08f8 [ 733.953970][T14819] [ 734.282715][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 734.302840][ T5824] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 734.724123][ T5824] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 734.735023][ T5824] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 734.771074][ T5824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.799382][ T5824] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 735.332537][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 735.993702][ T5824] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 736.021999][ T5824] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 736.028904][ T5824] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 736.037589][ T5824] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 736.046946][ T5824] usb 5-1: USB disconnect, device number 77 [ 736.362543][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 737.013087][T14851] Set syz1 is full, maxelem 0 reached [ 737.402709][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 737.759223][T14859] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2585'. [ 737.953714][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 737.953731][ T30] audit: type=1400 audit(2000000071.700:1034): avc: denied { ioctl } for pid=14860 comm="syz.2.2586" path="socket:[52283]" dev="sockfs" ino=52283 ioctlcmd=0x9424 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 738.182448][T14870] tmpfs: Unknown parameter 'n„_blocksLt' [ 738.204201][ T30] audit: type=1326 audit(2000000071.950:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14867 comm="syz.4.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1a38f749 code=0x7ffc0000 [ 738.353045][ T30] audit: type=1326 audit(2000000071.950:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14867 comm="syz.4.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1a38f749 code=0x7ffc0000 [ 738.377977][ T30] audit: type=1326 audit(2000000071.950:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14867 comm="syz.4.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f3c1a38f749 code=0x7ffc0000 [ 738.402073][ T30] audit: type=1326 audit(2000000071.950:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14867 comm="syz.4.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1a38f749 code=0x7ffc0000 [ 738.442553][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 738.450362][T14869] tun0: tun_chr_ioctl cmd 1074025675 [ 738.460196][ T30] audit: type=1326 audit(2000000071.950:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14867 comm="syz.4.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1a38f749 code=0x7ffc0000 [ 738.470263][T14869] tun0: persist enabled [ 738.912902][ T30] audit: type=1326 audit(2000000071.960:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14867 comm="syz.4.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3c1a38f749 code=0x7ffc0000 [ 738.943108][T14880] tun0: tun_chr_ioctl cmd 1074025675 [ 738.970375][ T30] audit: type=1326 audit(2000000071.960:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14867 comm="syz.4.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1a38f749 code=0x7ffc0000 [ 738.971015][T14880] tun0: persist disabled [ 739.213711][ T30] audit: type=1326 audit(2000000071.960:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14867 comm="syz.4.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3c1a38f749 code=0x7ffc0000 [ 739.258478][ T30] audit: type=1326 audit(2000000071.960:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14867 comm="syz.4.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1a38f749 code=0x7ffc0000 [ 739.401767][T14886] input: syz1 as /devices/virtual/input/input46 [ 739.482744][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 739.578844][ T1205] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 739.732574][ T1205] usb 3-1: Using ep0 maxpacket: 8 [ 739.891018][ T1205] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 739.903455][ T1205] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.092787][ T1205] usb 3-1: Product: syz [ 740.096995][ T1205] usb 3-1: Manufacturer: syz [ 740.101765][ T1205] usb 3-1: SerialNumber: syz [ 740.123693][ T1205] usb 3-1: config 0 descriptor?? [ 740.132089][ T1205] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 740.141503][ T1205] dvb-usb: bulk message failed: -22 (2/0) [ 740.159029][ T1205] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 740.185170][ T1205] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 740.210673][ T1205] usb 3-1: media controller created [ 740.234104][ T1205] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 740.366795][ T1205] cxusb: set interface failed [ 740.383349][ T1205] dvb-usb: bulk message failed: -22 (1/0) [ 740.522698][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 741.042364][ T1205] DVB: Unable to find symbol mt352_attach() [ 741.068741][ T1205] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 741.108795][T14907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2597'. [ 741.202751][ T1205] rc_core: IR keymap rc-dvico-portable not found [ 741.224399][ T1205] Registered IR keymap rc-empty [ 741.224936][ T1148] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 741.240372][T14907] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=14907 comm=syz.3.2597 [ 741.562923][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 741.697634][ T1205] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 741.708248][ T6304] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 741.712843][T14907] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=14907 comm=syz.3.2597 [ 741.754554][ T6304] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 741.886795][ T1205] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input47 [ 741.917094][ T6304] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 741.948642][ T1205] dvb-usb: schedule remote query interval to 100 msecs. [ 741.966974][ T1205] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 742.085227][ T6303] dvb-usb: bulk message failed: -22 (1/0) [ 742.304296][ T6303] dvb-usb: bulk message failed: -22 (1/0) [ 742.320715][ T1205] usb 3-1: USB disconnect, device number 45 [ 742.602748][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 743.642532][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 744.011866][T14933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2603'. [ 744.682534][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 745.003837][ T1205] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 745.095023][T14933] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 745.483456][ T1205] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 745.722555][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 746.143959][ T1205] usb 3-1: Using ep0 maxpacket: 32 [ 746.151423][ T1205] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 746.165276][ T1205] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 746.180216][ T1205] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 746.191371][ T1205] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 746.205282][ T1205] usb 3-1: config 0 interface 0 has no altsetting 0 [ 746.230189][ T1205] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 746.265937][ T1205] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 746.353187][ T1205] usb 3-1: Product: syz [ 746.357393][ T1205] usb 3-1: Manufacturer: syz [ 746.361994][ T1205] usb 3-1: SerialNumber: syz [ 746.398284][ T1205] usb 3-1: config 0 descriptor?? [ 746.419373][ T1205] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 746.459364][ T1205] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 746.720681][ T1205] usb 3-1: USB disconnect, device number 46 [ 746.727902][ T1205] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 746.762548][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 747.087541][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.094235][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.482908][T14971] overlayfs: failed to clone lowerpath [ 747.802531][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 748.852544][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 748.882773][ T90] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 749.062557][ T90] usb 3-1: Using ep0 maxpacket: 32 [ 749.069396][ T90] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 749.098202][ T90] usb 3-1: config 0 has no interface number 0 [ 749.115891][T14982] Invalid logical block size (2304) [ 749.123097][ T90] usb 3-1: config 0 interface 12 altsetting 2 endpoint 0x2 has invalid maxpacket 2560, setting to 1024 [ 749.152541][ T90] usb 3-1: config 0 interface 12 altsetting 2 bulk endpoint 0x2 has invalid maxpacket 1024 [ 749.186379][ T90] usb 3-1: config 0 interface 12 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 749.233398][ T90] usb 3-1: config 0 interface 12 has no altsetting 0 [ 749.261636][ T90] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 749.281470][ T90] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.292645][ T90] usb 3-1: Product: syz [ 749.300445][ T90] usb 3-1: Manufacturer: syz [ 749.310539][ T90] usb 3-1: SerialNumber: syz [ 749.318473][ T90] usb 3-1: config 0 descriptor?? [ 749.414462][ T90] f81534 3-1:0.12: unsupported endpoint max packet size [ 749.882541][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 750.278480][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 750.278512][ T30] audit: type=1400 audit(2000000083.930:1061): avc: denied { bind } for pid=14973 comm="syz.2.2616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 750.662164][T14999] Set syz1 is full, maxelem 0 reached [ 750.888359][T15002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2625'. [ 750.922574][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 751.877913][ T90] usb 3-1: USB disconnect, device number 47 [ 751.964054][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 753.002541][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 753.380924][T15050] overlayfs: failed to resolve './file0': -2 [ 754.042668][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 754.363061][T15054] xt_cgroup: invalid path, errno=-2 [ 754.394443][T15061] syzkaller0: entered promiscuous mode [ 754.400080][T15061] syzkaller0: entered allmulticast mode [ 754.467305][T15063] Set syz1 is full, maxelem 0 reached [ 755.082634][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 755.872889][T15078] tipc: Enabling of bearer rejected, failed to enable media [ 756.113230][T15086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2650'. [ 756.124366][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 756.416267][T15098] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 756.425227][T15098] team0: Port device batadv1 added [ 756.431772][ T1205] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 756.593051][ T1205] usb 4-1: Using ep0 maxpacket: 16 [ 756.603913][ T1205] usb 4-1: unable to get BOS descriptor or descriptor too short [ 756.617675][ T1205] usb 4-1: config 13 has an invalid interface number: 50 but max is 0 [ 756.649691][ T1205] usb 4-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 756.666041][ T1205] usb 4-1: config 13 has no interface number 0 [ 756.677436][ T1205] usb 4-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 756.697621][ T1205] usb 4-1: config 13 interface 50 altsetting 167 endpoint 0x7 has invalid wMaxPacketSize 0 [ 756.716663][ T1205] usb 4-1: config 13 interface 50 has no altsetting 0 [ 756.734971][ T1205] usb 4-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 756.750758][ T1205] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.778423][ T1205] usb 4-1: Product: syz [ 756.791801][ T1205] usb 4-1: Manufacturer: syz [ 756.803328][ T1205] usb 4-1: SerialNumber: syz [ 756.818700][T15086] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 757.162612][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 758.117958][T15109] loop5: detected capacity change from 0 to 7 [ 758.145500][T15109] Dev loop5: unable to read RDB block 7 [ 758.168103][T15109] loop5: unable to read partition table [ 758.192750][T15109] loop5: partition table beyond EOD, truncated [ 758.202588][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 758.236986][T15109] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 758.553001][ T6303] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 758.644800][T15123] netlink: 'syz.4.2660': attribute type 6 has an invalid length. [ 758.676540][T15123] netlink: 'syz.4.2660': attribute type 6 has an invalid length. [ 758.747490][T15127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2663'. [ 758.839449][ T6303] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 758.848747][ T6303] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.864951][ T6303] usb 3-1: config 0 descriptor?? [ 758.874040][ T6303] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 759.242631][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 759.561103][ T1205] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 759.584391][ T1205] usb 4-1: MIDIStreaming interface descriptor not found [ 759.674001][ T1205] usb 4-1: USB disconnect, device number 65 [ 759.744321][ T5828] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 759.754309][ T5828] Bluetooth: hci0: Injecting HCI hardware error event [ 759.764183][ T5815] Bluetooth: hci0: hardware error 0x00 [ 759.818234][ T6303] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 760.282534][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 760.572783][T15113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 760.682957][T15113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 760.722592][ T6303] gspca_cpia1: usb_control_msg 02, error -71 [ 760.978452][ T6303] cpia1 3-1:0.0: only firmware version 1 is supported (got: 46) [ 761.102580][ T6303] usb 3-1: USB disconnect, device number 48 [ 761.322535][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 761.898547][ T5815] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 761.948190][T15166] sctp: [Deprecated]: syz.0.2672 (pid 15166) Use of int in max_burst socket option deprecated. [ 761.948190][T15166] Use struct sctp_assoc_value instead [ 762.362677][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 762.882162][T15186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2678'. [ 763.163487][ T6303] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 763.172526][ T5945] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 763.323047][ T5945] usb 2-1: device descriptor read/64, error -71 [ 763.402545][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 763.500955][ T30] audit: type=1400 audit(2000000097.240:1062): avc: denied { listen } for pid=15193 comm="syz.4.2681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 763.584482][T15203] binder: 15193:15203 ioctl c0306201 0 returned -14 [ 763.603082][ T6303] usb 3-1: device descriptor read/64, error -71 [ 763.936011][ T6303] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 764.133709][ T5945] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 764.192898][ T6303] usb 3-1: device descriptor read/64, error -71 [ 764.295931][ T5945] usb 2-1: device descriptor read/64, error -71 [ 764.313598][ T6303] usb usb3-port1: attempt power cycle [ 764.417289][ T5945] usb usb2-port1: attempt power cycle [ 764.452531][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 764.871309][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 764.884296][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 764.895178][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 764.906001][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 764.918973][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 764.926548][ T6303] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 764.963157][ T6303] usb 3-1: device descriptor read/8, error -71 [ 765.139966][ T30] audit: type=1400 audit(2000000098.880:1063): avc: denied { read } for pid=15220 comm="syz.4.2687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 765.172575][ T5945] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 765.174748][T15221] overlay: Unknown parameter '' [ 765.217127][ T5945] usb 2-1: device descriptor read/8, error -71 [ 765.253317][ T6303] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 765.273431][ T6303] usb 3-1: device descriptor read/8, error -71 [ 765.382580][ T90] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 765.387218][T15225] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2688'. [ 765.400401][ T6303] usb usb3-port1: unable to enumerate USB device [ 765.481990][T15215] chnl_net:caif_netlink_parms(): no params data found [ 765.492540][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 765.542824][ T90] usb 4-1: Using ep0 maxpacket: 32 [ 765.553775][ T90] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 765.565021][ T90] usb 4-1: config 0 interface 0 altsetting 16 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 765.578119][ T90] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 765.590162][ T90] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 765.602150][ T90] usb 4-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 765.615523][ T90] usb 4-1: config 0 interface 0 has no altsetting 0 [ 765.622149][ T90] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 765.631569][ T90] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.686301][ T90] usb 4-1: config 0 descriptor?? [ 765.693981][T15218] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 765.807197][T15242] netlink: 'syz.1.2692': attribute type 9 has an invalid length. [ 765.815122][T15242] netlink: 'syz.1.2692': attribute type 11 has an invalid length. [ 765.823062][T15242] netlink: 'syz.1.2692': attribute type 12 has an invalid length. [ 765.831136][T15242] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.2692'. [ 766.225464][T15215] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.233363][T15215] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.243422][T15215] bridge_slave_0: entered allmulticast mode [ 766.251270][T15215] bridge_slave_0: entered promiscuous mode [ 766.265065][T15215] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.272410][T15215] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.279842][T15215] bridge_slave_1: entered allmulticast mode [ 766.288012][T15215] bridge_slave_1: entered promiscuous mode [ 766.522538][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 766.886130][T15215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 766.909001][T15215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 767.022732][ T5815] Bluetooth: hci3: command tx timeout [ 767.260566][ T90] usbhid 4-1:0.0: can't add hid device: -71 [ 767.288641][ T90] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 767.319386][ T90] usb 4-1: USB disconnect, device number 66 [ 767.337555][T15215] team0: Port device team_slave_0 added [ 767.346118][T15215] team0: Port device team_slave_1 added [ 767.437161][ T30] audit: type=1400 audit(2000000101.180:1064): avc: denied { name_bind } for pid=15257 comm="syz.1.2697" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 767.461137][T15215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 767.468687][T15215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 767.496251][T15215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 767.509466][T15215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 767.516823][T15215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 767.544995][T15215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 767.555696][ T5945] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 767.563432][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 767.579546][T15263] netlink: 'syz.1.2698': attribute type 2 has an invalid length. [ 767.614687][T15215] hsr_slave_0: entered promiscuous mode [ 767.629866][T15215] hsr_slave_1: entered promiscuous mode [ 767.637099][T15215] debugfs: 'hsr0' already exists in 'hsr' [ 767.644543][T15215] Cannot create hsr debugfs directory [ 767.722610][ T5945] usb 3-1: Using ep0 maxpacket: 8 [ 767.729124][ T5945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 767.752555][ T5945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 767.762312][ T5945] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 767.816347][ T5945] usb 3-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 767.840788][T15215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 767.852689][ T5945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.868723][ T5945] usb 3-1: config 0 descriptor?? [ 767.873780][ T90] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 767.881164][T15215] 8021q: adding VLAN 0 to HW filter on device team0 [ 767.920497][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.927733][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 767.945140][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.952328][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 768.032634][ T90] usb 2-1: device descriptor read/64, error -71 [ 768.179527][T15215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 768.272729][ T6303] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 768.273212][ T90] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 768.323132][ T5824] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 768.412783][ T90] usb 2-1: device descriptor read/64, error -71 [ 768.445808][ T6303] usb 5-1: unable to get BOS descriptor or descriptor too short [ 768.465637][ T6303] usb 5-1: config 3 has an invalid interface number: 21 but max is 0 [ 768.483100][ T5824] usb 4-1: Using ep0 maxpacket: 32 [ 768.486870][ T6303] usb 5-1: config 3 has no interface number 0 [ 768.494181][ T5824] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 768.497062][ T6303] usb 5-1: config 3 interface 21 has no altsetting 0 [ 768.510951][ T5824] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 768.519936][T15215] veth0_vlan: entered promiscuous mode [ 768.532202][ T5824] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 768.539878][T15215] veth1_vlan: entered promiscuous mode [ 768.542130][ T90] usb usb2-port1: attempt power cycle [ 768.555255][ T6303] usb 5-1: New USB device found, idVendor=110a, idProduct=1658, bcdDevice=db.db [ 768.555770][ T5824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.564941][ T6303] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.575905][ T5824] usb 4-1: config 0 descriptor?? [ 768.590300][ T5824] hub 4-1:0.0: USB hub found [ 768.602631][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 768.629580][ T6303] usb 5-1: Product: syz [ 768.637649][T15215] veth0_macvtap: entered promiscuous mode [ 768.643516][ T6303] usb 5-1: Manufacturer: syz [ 768.648152][ T6303] usb 5-1: SerialNumber: syz [ 768.712783][ T30] audit: type=1400 audit(2000000102.450:1065): avc: denied { audit_read } for pid=15255 comm="syz.2.2696" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 768.714592][ T5945] hid (null): unknown global tag 0xe [ 768.746320][T15294] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.769512][ T5945] nzxt-kraken2 0003:1E71:170E.0018: unknown global tag 0xe [ 768.784625][ T5945] nzxt-kraken2 0003:1E71:170E.0018: item 0 4 1 14 parsing failed [ 768.800520][ T5945] nzxt-kraken2 0003:1E71:170E.0018: hid parse failed with -22 [ 768.801251][ T5824] hub 4-1:0.0: 1 port detected [ 768.809041][ T5945] nzxt-kraken2 0003:1E71:170E.0018: probe with driver nzxt-kraken2 failed with error -22 [ 768.833291][T15215] veth1_macvtap: entered promiscuous mode [ 768.861885][T15215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 768.886325][T15215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 768.962698][ T90] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 769.024351][T15294] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.057139][ T90] usb 2-1: device descriptor read/8, error -71 [ 769.080047][ T6303] mxuport 5-1:3.21: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 769.082768][ T5815] Bluetooth: hci3: command tx timeout [ 769.097554][ T6303] mxuport 5-1:3.21: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 769.112576][ T6303] mxuport 5-1:3.21: probe with driver mxuport failed with error -71 [ 769.156100][ T6303] usb 5-1: USB disconnect, device number 78 [ 769.224304][T15294] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.302605][ T90] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 769.323401][ T90] usb 2-1: device descriptor read/8, error -71 [ 769.341604][T15294] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.375312][ T3944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 769.383462][ T3944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 769.409719][ T3944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 769.422893][ T3944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 769.434417][ T90] usb usb2-port1: unable to enumerate USB device [ 769.448213][ T30] audit: type=1400 audit(2000000103.190:1066): avc: denied { mounton } for pid=15215 comm="syz-executor" path="/root/syzkaller.D8vPTk/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 769.486280][ T30] audit: type=1400 audit(2000000103.220:1067): avc: denied { mounton } for pid=15215 comm="syz-executor" path="/root/syzkaller.D8vPTk/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 769.549582][ T6304] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.565929][ T6304] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.574691][ T6304] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.583758][ T6304] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.612873][ T30] audit: type=1400 audit(2000000103.220:1068): avc: denied { mounton } for pid=15215 comm="syz-executor" path="/root/syzkaller.D8vPTk/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=54464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 769.642688][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 769.665442][ T5824] hub 4-1:0.0: activate --> -90 [ 769.682577][ T30] audit: type=1400 audit(2000000103.260:1069): avc: denied { mounton } for pid=15215 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 769.708819][ T30] audit: type=1400 audit(2000000103.410:1070): avc: denied { write } for pid=15283 comm="syz.3.2703" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 769.902662][T15296] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 770.074614][T15296] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 770.084042][T15296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.096315][T15296] usb 5-1: config 0 descriptor?? [ 770.114137][ T10] usb 4-1: USB disconnect, device number 67 [ 770.683228][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 771.270047][ T5815] Bluetooth: hci3: command tx timeout [ 771.455194][T15296] usb 5-1: Cannot set autoneg [ 771.467188][T15296] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 771.516014][T15296] usb 5-1: USB disconnect, device number 79 [ 771.532691][ T6539] usb 3-1: USB disconnect, device number 53 [ 771.653018][T15320] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2710'. [ 771.722547][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 772.762533][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 773.812558][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 774.046854][ T5815] Bluetooth: hci3: command tx timeout [ 774.055408][T15296] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 774.158836][ T30] audit: type=1400 audit(2000000107.900:1071): avc: denied { read } for pid=15357 comm="syz.2.2719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 774.292731][T15296] usb 2-1: Using ep0 maxpacket: 16 [ 774.307575][T15296] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 774.341939][T15296] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 774.392774][T15296] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 774.413545][T15296] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 774.463683][T15296] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 774.485129][T15296] usb 2-1: config 0 has no interface number 0 [ 774.501384][T15296] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 774.522764][ T6539] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 774.532550][T15296] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 774.561145][T15296] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 774.589892][T15296] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 774.647989][T15296] usb 2-1: config 0 interface 125 has no altsetting 2 [ 774.673852][T15296] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 774.698690][ T6539] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 774.713434][T15296] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.714521][ T6539] usb 4-1: config 0 has no interface number 0 [ 774.766027][ T6539] usb 4-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 774.768191][T15296] usb 2-1: Product: syz [ 774.800602][T15296] usb 2-1: Manufacturer: syz [ 774.809283][ T6539] usb 4-1: config 0 interface 41 has no altsetting 0 [ 774.832367][T15296] usb 2-1: SerialNumber: syz [ 774.832694][ T6539] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 774.852539][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 774.865175][ T6539] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.885310][ T6539] usb 4-1: Product: syz [ 774.885621][T15296] usb 2-1: config 0 descriptor?? [ 774.889502][ T6539] usb 4-1: Manufacturer: syz [ 774.889525][ T6539] usb 4-1: SerialNumber: syz [ 774.940835][T15296] usb 2-1: selecting invalid altsetting 2 [ 774.940883][ T6539] usb 4-1: config 0 descriptor?? [ 774.985801][ T6539] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -22 [ 775.271003][T15367] tipc: Can't bind to reserved service type 0 [ 775.281441][ T10] usb 2-1: USB disconnect, device number 68 [ 775.882599][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 776.922585][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 777.962546][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 778.184160][ T6303] usb 4-1: USB disconnect, device number 68 [ 779.002539][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 780.042561][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 781.082538][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 782.122538][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 783.162534][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 784.203212][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 785.242536][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 786.282541][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 787.322538][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 788.362536][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 789.402534][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 790.442544][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 791.482534][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 792.522531][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 793.562537][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 794.602530][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 795.642530][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 796.682532][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 797.722544][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 798.762540][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 799.802545][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 800.843523][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 801.882538][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 802.922543][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 803.962544][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 805.002545][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 806.042531][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 807.082539][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 808.122530][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 808.533466][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.539827][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.162563][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 810.202530][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 811.242534][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 812.282535][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 813.322547][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 814.362527][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 815.402539][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 816.442530][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 817.482561][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 818.522532][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 819.562527][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 820.602528][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 821.642531][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 822.682528][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 823.722551][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 824.762527][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 825.802539][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 826.842528][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 827.882525][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 828.922532][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 829.962528][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 831.002526][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 832.042531][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 833.082530][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 834.122528][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 835.162528][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 836.202527][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 837.242525][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 838.282531][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 839.322524][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 840.362528][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 841.402545][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 842.442560][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 843.482527][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 844.522577][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 845.562536][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 846.602536][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 847.642529][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 848.682523][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 849.722541][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 850.762528][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 851.802529][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 852.842530][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 853.882527][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 854.922529][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 855.962527][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 857.002523][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 858.042527][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 859.082531][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 860.122530][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 861.162531][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 862.202524][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 863.242529][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 864.282528][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 865.322537][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 866.362525][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 867.402558][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 868.442525][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 869.482527][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 870.522526][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 871.562540][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 872.602528][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 873.642527][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 874.682526][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 875.722541][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 876.762541][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 877.802535][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 878.842528][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 879.882541][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 880.922529][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 881.962530][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 883.002521][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 883.212458][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 883.219425][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P15374 [ 883.227268][ C1] rcu: (detected by 1, t=10502 jiffies, g=63769, q=530 ncpus=2) [ 883.234963][ C1] task:syz.2.2723 state:R running task stack:26856 pid:15374 tgid:15368 ppid:5821 task_flags:0x400140 flags:0x00080000 [ 883.249548][ C1] Call Trace: [ 883.252819][ C1] [ 883.255642][ C1] sched_show_task+0x423/0x630 [ 883.260392][ C1] ? __pfx_sched_show_task+0x10/0x10 [ 883.265659][ C1] ? rcu_dump_cpu_stacks+0x376/0x530 [ 883.270926][ C1] ? wq_watchdog_touch+0xe2/0x190 [ 883.275926][ C1] rcu_sched_clock_irq+0x2634/0x31f0 [ 883.281199][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 883.286809][ C1] ? __pfx_css_rstat_updated+0x10/0x10 [ 883.292258][ C1] ? __cgroup_account_cputime_field+0x12c/0x1f0 [ 883.298475][ C1] ? rcu_is_watching+0x12/0xc0 [ 883.303212][ C1] update_process_times+0x178/0x2d0 [ 883.308389][ C1] ? __pfx_update_process_times+0x10/0x10 [ 883.314095][ C1] tick_nohz_handler+0x506/0x720 [ 883.319017][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 883.324449][ C1] ? __hrtimer_run_queues+0x58f/0xc40 [ 883.329807][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 883.335254][ C1] __hrtimer_run_queues+0x64e/0xc40 [ 883.340435][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 883.346137][ C1] ? read_tsc+0x9/0x20 [ 883.350189][ C1] hrtimer_interrupt+0x397/0x8e0 [ 883.355106][ C1] __sysvec_apic_timer_interrupt+0x10b/0x3c0 [ 883.361062][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 883.366675][ C1] [ 883.369582][ C1] [ 883.372490][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 883.378448][ C1] RIP: 0010:ktime_get_coarse_ts64+0x8b/0x1a0 [ 883.384403][ C1] Code: 24 40 48 c7 c7 88 6c c2 9a e8 01 62 ee ff 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 8f 4e 13 00 58 48 85 db 0f 85 f2 00 00 00 b0 53 13 00 44 8b 3d b9 d9 16 19 44 89 fb 31 ff 83 e3 01 89 de [ 883.404076][ C1] RSP: 0018:ffffc9000433f928 EFLAGS: 00000246 [ 883.410117][ C1] RAX: 0000000000080000 RBX: 0000000000000000 RCX: ffffc90010342000 [ 883.418070][ C1] RDX: 0000000000080000 RSI: ffffffff81ab939b RDI: 0000000000000007 [ 883.426019][ C1] RBP: 1ffff92000867f2d R08: 0000000000000007 R09: 0000000000000000 [ 883.433963][ C1] R10: 0000000000000000 R11: ffff888030faaff0 R12: 0000000225c17d03 [ 883.441911][ C1] R13: 7fffffffffffffff R14: ffffc9000433fb7a R15: ffff888030faa4c0 [ 883.449875][ C1] ? ktime_get_coarse_ts64+0x16b/0x1a0 [ 883.455317][ C1] ? ktime_get_coarse_ts64+0x16b/0x1a0 [ 883.460750][ C1] bpf_ktime_get_coarse_ns+0x8f/0x100 [ 883.466101][ C1] ? __pfx_bpf_ktime_get_coarse_ns+0x10/0x10 [ 883.472058][ C1] ? bpf_get_current_cgroup_id+0x149/0x3b0 [ 883.477844][ C1] ? __pfx___cant_migrate+0x10/0x10 [ 883.483030][ C1] bpf_prog_ce3dfd7f9330a559+0x1e/0x29 [ 883.488482][ C1] bpf_flow_dissect+0x21b/0x740 [ 883.493326][ C1] bpf_prog_test_run_flow_dissector+0x438/0x980 [ 883.499550][ C1] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 883.506290][ C1] ? find_held_lock+0x2b/0x80 [ 883.510947][ C1] ? __fget_files+0x204/0x3c0 [ 883.515604][ C1] ? __fget_files+0x20e/0x3c0 [ 883.520257][ C1] ? softleaf_type+0x160/0x160 [ 883.524996][ C1] ? fput+0x70/0xf0 [ 883.528777][ C1] ? __bpf_prog_get+0x97/0x2a0 [ 883.533515][ C1] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 883.540253][ C1] __sys_bpf+0x1035/0x4980 [ 883.544651][ C1] ? futex_private_hash_put+0x160/0x1b0 [ 883.550179][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 883.554918][ C1] ? __pfx_futex_wait+0x10/0x10 [ 883.559744][ C1] ? percpu_counter_add_batch+0xca/0x200 [ 883.565354][ C1] ? errseq_sample+0x53/0x70 [ 883.569929][ C1] ? do_futex+0x122/0x350 [ 883.574265][ C1] ? __sys_socket+0xac/0x260 [ 883.578834][ C1] ? xfd_validate_state+0x61/0x180 [ 883.583920][ C1] __x64_sys_bpf+0x78/0xc0 [ 883.588314][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 883.593488][ C1] do_syscall_64+0xcd/0xf80 [ 883.597975][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.603840][ C1] RIP: 0033:0x7f3da318f749 [ 883.608235][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 883.627819][ C1] RSP: 002b:00007f3da4022038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 883.636208][ C1] RAX: ffffffffffffffda RBX: 00007f3da33e6180 RCX: 00007f3da318f749 [ 883.644155][ C1] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 883.652104][ C1] RBP: 00007f3da3213f91 R08: 0000000000000000 R09: 0000000000000000 [ 883.660052][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 883.668004][ C1] R13: 00007f3da33e6218 R14: 00007f3da33e6180 R15: 00007ffc35ea08f8 [ 883.675967][ C1] [ 883.678963][ C1] rcu: rcu_preempt kthread starved for 10182 jiffies! g63769 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 883.690126][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 883.700072][ C1] rcu: RCU grace-period kthread stack dump: [ 883.705948][ C1] task:rcu_preempt state:R running task stack:28064 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 883.719406][ C1] Call Trace: [ 883.722663][ C1] [ 883.725571][ C1] ? __schedule+0x10b9/0x6150 [ 883.730226][ C1] __schedule+0x1139/0x6150 [ 883.734717][ C1] ? __pfx___schedule+0x10/0x10 [ 883.739543][ C1] ? find_held_lock+0x2b/0x80 [ 883.744208][ C1] ? schedule+0x2d7/0x3a0 [ 883.748510][ C1] schedule+0xe7/0x3a0 [ 883.752561][ C1] schedule_timeout+0x123/0x290 [ 883.757390][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 883.762740][ C1] ? __pfx_process_timeout+0x10/0x10 [ 883.768020][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 883.773803][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 883.779238][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 883.783980][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 883.789249][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 883.794425][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 883.799344][ C1] ? rcu_gp_cleanup+0x7c1/0xe90 [ 883.804171][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 883.809957][ C1] rcu_gp_kthread+0x26d/0x380 [ 883.814612][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 883.819786][ C1] ? rcu_is_watching+0x12/0xc0 [ 883.824522][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 883.829700][ C1] ? __kthread_parkme+0x19e/0x250 [ 883.834699][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 883.839875][ C1] kthread+0x3c5/0x780 [ 883.843924][ C1] ? __pfx_kthread+0x10/0x10 [ 883.848489][ C1] ? rcu_is_watching+0x12/0xc0 [ 883.853227][ C1] ? __pfx_kthread+0x10/0x10 [ 883.857798][ C1] ret_from_fork+0x983/0xb10 [ 883.862364][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 883.867454][ C1] ? __switch_to+0x7af/0x10d0 [ 883.872112][ C1] ? __pfx_kthread+0x10/0x10 [ 883.876678][ C1] ret_from_fork_asm+0x1a/0x30 [ 883.881431][ C1] [ 883.884427][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 883.890719][ C1] Sending NMI from CPU 1 to CPUs 0: [ 883.895915][ C0] NMI backtrace for cpu 0 [ 883.895935][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 883.895963][ C0] Tainted: [L]=SOFTLOCKUP [ 883.895970][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 883.895981][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 883.896008][ C0] Code: c6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 49 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 883.896026][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 883.896042][ C0] RAX: 0000000001e668b7 RBX: 0000000000000000 RCX: ffffffff8b7816d9 [ 883.896055][ C0] RDX: 0000000000000000 RSI: ffffffff8dacdf23 RDI: ffffffff8bf2b400 [ 883.896068][ C0] RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d [ 883.896081][ C0] R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000 [ 883.896093][ C0] R13: ffffffff8e097b40 R14: ffffffff9088b4d0 R15: 0000000000000000 [ 883.896106][ C0] FS: 0000000000000000(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 883.896125][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 883.896138][ C0] CR2: 00007fd8bc1156c0 CR3: 000000000e184000 CR4: 00000000003526f0 [ 883.896151][ C0] DR0: 0000000000000000 DR1: 00000000000000a4 DR2: 0000000000000000 [ 883.896162][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 883.896174][ C0] Call Trace: [ 883.896182][ C0] [ 883.896188][ C0] default_idle+0x13/0x20 [ 883.896215][ C0] default_idle_call+0x6c/0xb0 [ 883.896241][ C0] do_idle+0x38d/0x510 [ 883.896271][ C0] ? __pfx_do_idle+0x10/0x10 [ 883.896311][ C0] cpu_startup_entry+0x4f/0x60 [ 883.896338][ C0] rest_init+0x16b/0x2b0 [ 883.896355][ C0] ? acpi_subsystem_init+0x133/0x180 [ 883.896374][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 883.896393][ C0] start_kernel+0x3ef/0x4d0 [ 883.896422][ C0] x86_64_start_reservations+0x18/0x30 [ 883.896451][ C0] x86_64_start_kernel+0x130/0x190 [ 883.896480][ C0] common_startup_64+0x13e/0x148 [ 883.896511][ C0] [ 884.062769][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 885.082535][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 886.122522][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 887.162519][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 887.407775][ T5815] Bluetooth: hci3: command 0x0406 tx timeout [ 888.202530][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 889.242528][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 890.282523][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 891.322524][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 892.362720][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available