last executing test programs: 28.29228575s ago: executing program 4 (id=711): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x9, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}, {0x0, 0xa00, 0x407ffffffffffd, 0x800000000000000}, 0x40, 0x80}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x3, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="cc0000002100010000000000fefff7ff00000000000000000000000000000000fc020000000000000000000000000001fffc0000000000000a00e0800000", @ANYRES32=0x0, @ANYRES32=0x0], 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x42000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) accept4$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @rose}, [@default, @rose, @null, @null, @bcast, @rose, @netrom, @null]}, &(0x7f0000000140)=0x48, 0x100800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r4}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f0000000000)={0x8000000, 0x308000, 0x8}) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0x201, 0x0, &(0x7f0000000c40)="63ecedae46dc4314fbb9111a30ac", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRESOCT=r5, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000557588b9d789bb4498078e70a263c448f9110d408980c9cd6248acb6d645034238831fbe8c7bb490", @ANYRES16=r4, @ANYRES64=r5, @ANYRESHEX=0x0], 0x50) socket$inet(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000", @ANYRESOCT=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) setrlimit(0xe, &(0x7f0000000200)={0x7ff, 0x2}) r6 = socket$inet6(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$sock_inet6_SIOCDELRT(r7, 0x890c, &(0x7f00000000c0)={@remote, @private0, @empty, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x590043}) 26.828225956s ago: executing program 4 (id=713): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, 0x0, 0x0) syz_open_dev$loop(0x0, 0xfa, 0x2000) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r3, 0x2}}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)}, 0x40) r5 = syz_usb_connect$uac1(0x2, 0x115, &(0x7f0000000640)=ANY=[@ANYBLOB="12010003000000406b1d010140000904000000010100000a24010800010201020c2407060100034dd52ecef707240701050004092408050900032e900c24020200000300070001f38c240806f40008dec60924030301010403040904010000010200000904010101010200000c24020103020b0a2ee5f9220d2402020080030016624c95e90724018004030009050109000280020307250104060000090402000001020000090402010101020000112402010703a2000c073fc3d44f756673112402020400fdffcb9910d4f3a85dcc7c0924020104040702e60c2402010f030707d7da751d0a240201980104051f9c0924020102031a006709058209ff0302e00407250100040000000000000000000000000000000485d4dcc0d8e962"], &(0x7f0000000500)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x9, 0xd, 0x3, 0x40, 0x2}, 0xf6, &(0x7f0000000200)={0x5, 0xf, 0xf6, 0x3, [@generic={0xd7, 0x10, 0x2, "55769a9f242d57c654a3758027374abeba5df3a2e93bd162b59c85c05dfbc69527e35a1b51023af3c77523a37ad17594e5943fa7250e4188e2eed099504e9c538f65bbfc73c77a752810c0b0c6bbed0377dd8be72436d5e35764f75050edaff1ec56f28655b46fd86018317295ddc9e9fe449487b9d576672bb18f908cec68e1a46bd58efd4dc17ba7e2db8fd8f5c3416099cda60690fcba88eb1fd155a66c6771728e134b69c5f18cc6b1de1f155b92b98c3489ef3505a7516689ed47a15dfc32d24ae5ee7e8deec93738a283fbceadc40dda63"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x6, 0x4, 0x4}, @ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0x7ffff81, 0xf00, 0x100, [0x0]}]}, 0x4, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x202}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x44e}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x67}}, {0x39, &(0x7f0000000480)=@string={0x39, 0x3, "ae174e44ee175b4a9eb793ba18924cf0bd9a9814ecda64b5670a2138d9cc0f190d6b02ef3bb6cc1cdf4774c5ccecbe51deecb93df76d11"}}]}) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f00000000c0)={0x0, 0x11, 0x5, {0x5, 0xe, "2ff465"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e20, 0x82000000, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xb851}, 0x1c) r6 = getpid() syz_pidfd_open(r6, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000400009002bbd7000fddbdf250200", @ANYRES16=r7], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(0x0, r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r8) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211"], 0x6f4}}, 0x0) 18.369835437s ago: executing program 0 (id=732): openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_dev$cec(0x0, 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000080)=0xf0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8082, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0xb2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xe, &(0x7f0000000400)=ANY=[@ANYRES16=r6, @ANYRES16=r5, @ANYRES64=r0, @ANYBLOB="fded2e2915eaa827a3827b455043299f10813dda1f549bde6ee13bc977f3358d7d26df0744c511", @ANYRES8=r7, @ANYRESOCT=r6], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r7, 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000002c0)) unshare(0x42000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x6, &(0x7f0000000100)=[{0x81, 0x5a, 0xa, 0x8}, {0x9, 0x94, 0xd9, 0x50}, {0x101, 0x15, 0x7, 0x2}, {0xff8c, 0x0, 0xa9, 0x7ff}, {0x2, 0x2, 0x4, 0x9}, {0xfffc, 0x5, 0x9, 0x6}]}) 17.482603265s ago: executing program 4 (id=733): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000001c80)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x70bd29, 0x25dfdbff, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x4, 0x1200}, [@RTA_MARK={0x8, 0x10, 0x7}, @RTA_UID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000001}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0003800800", @ANYRES64=r2], 0x34}, 0x1, 0x0, 0x0, 0x4048010}, 0x8000) r3 = syz_io_uring_setup(0x2f38, &(0x7f00000001c0)={0x0, 0x3a9a, 0x200, 0x2, 0x17b, 0x0, r1}, &(0x7f0000000000), &(0x7f00000000c0)) syz_io_uring_setup(0x32ee, &(0x7f0000000240)={0x0, 0x916a, 0x8000, 0x0, 0x179, 0x0, r3}, &(0x7f0000000140), &(0x7f00000002c0)) r4 = epoll_create1(0x80000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x6, 0x4, 0x0, 0x1}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xd, 0x20000, 0x4, 0x3, 0x141, r5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x42, r6}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r5}, &(0x7f0000000300), &(0x7f0000000400)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) epoll_pwait(r4, &(0x7f0000000280)=[{}], 0x1, 0x40, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x13, r9, 0x2000) r10 = dup(r9) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r10, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="340300002e00090027bd70000000000004000000bb0018004fbc9f57ee8418c3f3b076e93e980d81ce9092bbe7de4221d1b7acb6ea3dc246f0dbdd1375374d14c8d0b7dbf41cd4506aea75db159ddeb4f68be90b42cd242bd8328b6d85d75f2fec1c0f0f4254bcc7b1031b6ccb7ab94c82f30eef011cbe183f101ef9bf9fbe4a11119845e6e00413ce446aef9cf676f68e0f5d538e6c42144c6d73f1e6b2c322f2e9255705752ca2e453eb9d780a438ae9f237497cb4e515c9c0d6c325f33e4e03e4a434ec9a86391d9d5c4831f4830064021780040011", @ANYBLOB], 0x334}, 0x1, 0x0, 0x0, 0x42804}, 0x4000) 16.351695148s ago: executing program 2 (id=734): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0xb4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x60}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) lsm_list_modules(0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)="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", 0xfb, 0xd1) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000300)={{0xeeef0000, 0xdddd1000, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0xd000, 0xa, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, 0x0, 0xff}, {0x3000, 0x0, 0x9, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x0, 0x4, 0xff}, {0xdddd0000, 0x10000, 0x9, 0x0, 0xff, 0x4, 0x6, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x8000000, 0x0, 0x0, 0x1, 0x1, 0x83, 0xa, 0x26, 0x5}, {0x4000}, {0xdddd1000, 0xff}, 0xddf9ffdb, 0x0, 0x0, 0x70, 0xfffffffffffffffe, 0xd801, 0x0, [0x0, 0x0, 0x1]}) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_NMI(r9, 0xae9a) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 16.062196469s ago: executing program 1 (id=736): r0 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, 0x0) getsockopt$rose(r0, 0x104, 0x1, &(0x7f0000000040), 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket(0x40000000015, 0x5, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r0}, 0x8) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000380)={0x1, @sliced={0x6, [0xff7d, 0x1ff, 0x2, 0xfae2, 0x3, 0xff, 0x200, 0xa, 0x50f, 0x8000, 0x401, 0x7, 0x5, 0x7, 0x2, 0xffe7, 0x1ff, 0x3, 0x4a75, 0x0, 0x1, 0x100, 0xed4f, 0xd987, 0x401, 0x48, 0x4, 0x9, 0x3, 0x0, 0x9, 0x101, 0x7d68, 0x2, 0x1800, 0x43be, 0x6, 0x4, 0xfc01, 0x4, 0x101, 0x9, 0xfffe, 0x7, 0x4, 0xf6, 0xf7, 0x10], 0x6b32}}) socket$inet6(0xa, 0x2, 0xffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 10.781235346s ago: executing program 2 (id=738): pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x40000, 0x0, 0x1000000, 0x0, 0xfffffffffffffffe, 0x2}, 0x0, 0x0) 10.649202535s ago: executing program 2 (id=739): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYRES64=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b00"], 0xfc}, 0x1, 0x0, 0x0, 0x2000c050}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) poll(&(0x7f0000000140)=[{r2, 0x14}], 0x1, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x30, 0x0, &(0x7f0000000040)=0x90) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c000280080001400000000208000240000000070500030001000000200001800700010063740000140002800800024000000011080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2e, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x105, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)=0x15) pipe2$9p(&(0x7f00000027c0)={0xffffffffffffffff}, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r10, 0x400, 0x1) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r11, &(0x7f0000001440)=""/126, 0x7e, 0x41) close_range(r9, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r8, 0x404c4701, &(0x7f0000000380)={0x5, 0xfffffffd, 0x0, 0x3, 0x12, "3e04000000000000000600000000000400"}) socket$inet6(0xa, 0x1, 0x80000000) 10.050765807s ago: executing program 0 (id=740): openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000080)=0xf0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0xb2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xe, &(0x7f0000000400)=ANY=[@ANYRES16=r5, @ANYRES16=r4, @ANYRES64=r0, @ANYBLOB="fded2e2915eaa827a3827b455043299f10813dda1f549bde6ee13bc977f3358d7d26df0744c511", @ANYRES8=r6, @ANYRESOCT=r5], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r6, 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000002c0)) unshare(0x42000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x6, &(0x7f0000000100)=[{0x81, 0x5a, 0xa, 0x8}, {0x9, 0x94, 0xd9, 0x50}, {0x101, 0x15, 0x7, 0x2}, {0xff8c, 0x0, 0xa9, 0x7ff}, {0x2, 0x2, 0x4, 0x9}, {0xfffc, 0x5, 0x9, 0x6}]}) 9.033316518s ago: executing program 2 (id=741): r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 9.008675907s ago: executing program 4 (id=742): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fc00000000000000000000000000000164010101000000000000000000000000000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0) socket$inet6(0xa, 0x1, 0x403a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x18) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, 0x0, 0x0) connect$inet(r7, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) ioctl$VIDIOC_S_EDID(r2, 0xc0285629, &(0x7f0000000100)={0x0, 0x7, 0x0, '\x00', &(0x7f0000000040)=0xdd}) 9.006487415s ago: executing program 3 (id=743): syz_open_dev$sndpcmp(&(0x7f0000000100), 0x8, 0x2000) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xffffffffffffbffc) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x3) splice(r2, 0x0, r1, 0x0, 0x406f413, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, 0x0, &(0x7f0000000100)) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0100000003000000060000000b"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r7}, 0xc) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000140)={'dt2814\x00', [0xb02f, 0x401, 0xe2, 0x3, 0x88d7, 0x80000001, 0x1007, 0x1, 0x1002, 0xffffffff, 0x200, 0x7, 0x10000007, 0x1, 0x5, 0x1ff, 0x8, 0x3, 0x9, 0x8e, 0x10c, 0x4005, 0x2, 0xa, 0x5, 0x1, 0xb0c4, 0xe, 0xff, 0x400002, 0x4000004]}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x2) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCVHANGUP(r9, 0x5437, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 8.877173295s ago: executing program 2 (id=744): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, 0x0, 0x0) syz_open_dev$loop(0x0, 0xfa, 0x2000) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r3, 0x2}}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)}, 0x40) r5 = syz_usb_connect$uac1(0x2, 0x115, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x9, 0xd, 0x3, 0x40, 0x2}, 0xf6, &(0x7f0000000200)={0x5, 0xf, 0xf6, 0x3, [@generic={0xd7, 0x10, 0x2, "55769a9f242d57c654a3758027374abeba5df3a2e93bd162b59c85c05dfbc69527e35a1b51023af3c77523a37ad17594e5943fa7250e4188e2eed099504e9c538f65bbfc73c77a752810c0b0c6bbed0377dd8be72436d5e35764f75050edaff1ec56f28655b46fd86018317295ddc9e9fe449487b9d576672bb18f908cec68e1a46bd58efd4dc17ba7e2db8fd8f5c3416099cda60690fcba88eb1fd155a66c6771728e134b69c5f18cc6b1de1f155b92b98c3489ef3505a7516689ed47a15dfc32d24ae5ee7e8deec93738a283fbceadc40dda63"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x6, 0x4, 0x4}, @ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0x7ffff81, 0xf00, 0x100, [0x0]}]}, 0x4, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x202}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x44e}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x67}}, {0x39, &(0x7f0000000480)=@string={0x39, 0x3, "ae174e44ee175b4a9eb793ba18924cf0bd9a9814ecda64b5670a2138d9cc0f190d6b02ef3bb6cc1cdf4774c5ccecbe51deecb93df76d11"}}]}) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f00000000c0)={0x0, 0x11, 0x5, {0x5, 0xe, "2ff465"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e20, 0x82000000, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xb851}, 0x1c) r6 = getpid() syz_pidfd_open(r6, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000400009002bbd7000fddbdf250200000004001f00080001", @ANYRES16=r7], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(0x0, r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r8) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211"], 0x6f4}}, 0x0) 8.151361855s ago: executing program 3 (id=745): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x22c240, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r6, r6, 0x0) ioctl$TUNSETOWNER(r1, 0x400454cc, r6) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r8 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) write$binfmt_script(r8, &(0x7f00000010c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x106) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000380)=@gcm_128={{0x303}, "ec104bcd6488d2f6", "8f8c2a478c4e48f9575d967978dd13c9", "980900", "c69df17e8d1b3a58"}, 0x28) 7.218029976s ago: executing program 3 (id=746): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0xffffffffffffff66) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3e, 0x0, 0x0) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r3, 0x541b, &(0x7f0000000000)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x100c8a2, 0xc000, 0x8, 0x328}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x8005, 0x0, 0x0, 0x0, 0x76, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x7, 0x4, 0x5, 0x5}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=')'], 0x50) io_uring_enter(r4, 0x2219, 0xcf74, 0x16, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) syz_io_uring_setup(0xac9, &(0x7f00000002c0)={0x0, 0x3594, 0x10, 0x1103, 0x21e}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x3938700}, 0x1, 0x8}) mkdir(&(0x7f0000000300)='./bus\x00', 0x82) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) 6.654008566s ago: executing program 0 (id=747): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x2b) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0xc3, &(0x7f0000000180)={0x0, 0x18}}, 0x0) socket$packet(0x11, 0x3, 0x300) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x2000802, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) socket$inet(0x2, 0x2, 0x1) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x7}, 0x90) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000e70c00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x4004892, &(0x7f00000001c0)={0x11, 0x1, r2, 0x1, 0x8, 0x6, @remote}, 0x14) 6.443860104s ago: executing program 1 (id=748): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0xb4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x60}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x20780, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r7}, 0x10) lsm_list_modules(0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)="abe220280ae1c4a2dd3bfcbaeb621c4f985ad1db8e7742a6f2878b06f07480d262aaca3af61d58bfc17ad4fbab0e561c72310f9bc6603ed8bbfebed66b9ebe3518197bc55a3a3c4c2bb125716b5c28754f36eac0682b8545902f5b9527ad8a92d02719f3eb43b3bd370529bdaf40fac2b7ee05ce4ba94b82213d7ae93673a359fa88ad0805ab1b1d3b4401b75b2ee1f90f2ef485340e08eb1611966d52b7a59ef749ba63d5c64a7aa7e3a7d5ba2d73a39959aad613da4d4b5570032871f0a2db98d35ec4abe1bf10985733d3a8ae70716d8b323437dd6c03eb5c31a2fc3b590e4edbcd94f631c986cf169da2466f75c38f25fa6bd6e38756c9319c", 0xfb, 0xd1) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000300)={{0xeeef0000, 0xdddd1000, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0xd000, 0xa, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, 0x0, 0xff}, {0x3000, 0x0, 0x9, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x0, 0x4, 0xff}, {0xdddd0000, 0x10000, 0x9, 0x0, 0xff, 0x4, 0x6, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x8000000, 0x0, 0x0, 0x1, 0x1, 0x83, 0xa, 0x26, 0x5}, {0x4000}, {0xdddd1000, 0xff}, 0xddf9ffdb, 0x0, 0x0, 0x70, 0xfffffffffffffffe, 0xd801, 0x0, [0x0, 0x0, 0x1]}) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_NMI(r9, 0xae9a) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 4.937806504s ago: executing program 1 (id=749): pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x40000, 0x0, 0x1000000, 0x0, 0xfffffffffffffffe, 0x2}, 0x0, 0x0) 4.801435963s ago: executing program 1 (id=750): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x2b) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0xc3, &(0x7f0000000180)={0x0, 0x18}}, 0x0) socket$packet(0x11, 0x3, 0x300) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x2000802, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) socket$inet(0x2, 0x2, 0x1) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000e70c00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x0) 4.690559105s ago: executing program 0 (id=751): openat$kvm(0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8082, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket(0x1000000010, 0x80002, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x6, &(0x7f0000000100)=[{0x81, 0x5a, 0xa, 0x8}, {0x9, 0x94, 0xd9, 0x50}, {0x101, 0x15, 0x7, 0x2}, {0xff8c, 0x0, 0xa9, 0x7ff}, {0x2, 0x2, 0x4, 0x9}, {0xfffc, 0x5, 0x9, 0x6}]}) 4.680220288s ago: executing program 3 (id=752): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYRES64=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b00"], 0xfc}, 0x1, 0x0, 0x0, 0x2000c050}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) poll(&(0x7f0000000140)=[{r2, 0x14}], 0x1, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x30, 0x0, &(0x7f0000000040)=0x90) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c000280080001400000000208000240000000070500030001000000200001800700010063740000140002800800024000000011080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2e, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x105, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)=0x15) pipe2$9p(&(0x7f00000027c0)={0xffffffffffffffff}, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r10, 0x400, 0x1) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r11, &(0x7f0000001440)=""/126, 0x7e, 0x41) close_range(r9, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r8, 0x404c4701, &(0x7f0000000380)={0x5, 0xfffffffd, 0x0, 0x3, 0x12, "3e04000000000000000600000000000400"}) socket$inet6(0xa, 0x1, 0x80000000) 3.795484148s ago: executing program 2 (id=753): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000001c80)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x70bd29, 0x25dfdbff, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x4, 0x1200}, [@RTA_MARK={0x8, 0x10, 0x7}, @RTA_UID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000001}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0003800800", @ANYRES64=r2], 0x34}, 0x1, 0x0, 0x0, 0x4048010}, 0x8000) r3 = syz_io_uring_setup(0x2f38, &(0x7f00000001c0)={0x0, 0x3a9a, 0x200, 0x2, 0x17b, 0x0, r1}, &(0x7f0000000000), &(0x7f00000000c0)) syz_io_uring_setup(0x32ee, &(0x7f0000000240)={0x0, 0x916a, 0x8000, 0x0, 0x179, 0x0, r3}, &(0x7f0000000140), &(0x7f00000002c0)) r4 = epoll_create1(0x80000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x6, 0x4, 0x0, 0x1}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xd, 0x20000, 0x4, 0x3, 0x141, r5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x42, r6}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r5}, &(0x7f0000000300), &(0x7f0000000400)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000680)='sys_exit\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) epoll_pwait(r4, &(0x7f0000000280)=[{}], 0x1, 0x40, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x13, r9, 0x2000) r10 = dup(r9) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r10, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="340300002e00090027bd70000000000004000000bb0018004fbc9f57ee8418c3f3b076e93e980d81ce9092bbe7de4221d1b7acb6ea3dc246f0dbdd1375374d14c8d0b7dbf41cd4506aea75db159ddeb4f68be90b42cd242bd8328b6d85d75f2fec1c0f0f4254bcc7b1031b6ccb7ab94c82f30eef011cbe183f101ef9bf9fbe4a11119845e6e00413ce446aef9cf676f68e0f5d538e6c42144c6d73f1e6b2c322f2e9255705752ca2e453eb9d780a438ae9f237497cb4e515c9c0d6c325f33e4e03e4a434ec9a86391d9d5c4831f4830064021780040011", @ANYBLOB], 0x334}, 0x1, 0x0, 0x0, 0x42804}, 0x4000) 3.212413743s ago: executing program 1 (id=754): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x2b) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0xc3, &(0x7f0000000180)={0x0, 0x18}}, 0x0) socket$packet(0x11, 0x3, 0x300) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x2000802, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) socket$inet(0x2, 0x2, 0x1) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x7}, 0x90) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000e70c00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x4004892, &(0x7f00000001c0)={0x11, 0x1, r2, 0x1, 0x8, 0x6, @remote}, 0x14) 3.187157414s ago: executing program 4 (id=755): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000e40)={&(0x7f0000000200)={0x50, 0x0, 0xec6e, {0x7, 0x2b, 0x6, 0x1040, 0x100, 0x5, 0x9, 0x81, 0x0, 0x0, 0x8, 0xffffffff}}, &(0x7f00000000c0)={0x18, 0x0, 0x3, {0xffff}}, &(0x7f0000000180)={0x18, 0x0, 0x1, {0x373}}, &(0x7f0000000280)={0x18, 0x0, 0xfffffffffffff801, {0x7}}, &(0x7f00000002c0)={0x18, 0x0, 0xff, {0xe}}, &(0x7f0000000300)={0x28, 0x24, 0x5, {{0x9, 0x3, 0x1, r4}}}, &(0x7f0000000340)={0x60, 0x0, 0x60, {{0xa5, 0x3, 0x4, 0x9563, 0x2, 0x8, 0x1305}}}, &(0x7f00000003c0)={0x18, 0x0, 0x6, {0xfff}}, &(0x7f0000000400)={0x12, 0x0, 0x1, {'!\x00'}}, &(0x7f0000000440)={0x20, 0xfffffffffffffffe, 0xa948, {0x0, 0x6}}, &(0x7f0000000500)={0x78, 0x0, 0x1, {0xffffffffffffffff, 0x3, 0x0, {0x2, 0x101, 0x4533, 0xcc0, 0xfffffffffffffff7, 0x100, 0x4, 0xb55, 0x0, 0x0, 0x1, r2, r3, 0x2, 0x2}}}, &(0x7f0000000680)={0x90, 0x0, 0x2, {0x5, 0x2, 0x9, 0xf, 0xffff2b12, 0x80000001, {0x2, 0x6a, 0x10001, 0x1, 0x7, 0x4, 0x9b, 0x9, 0xa5, 0xc000, 0x91, 0x0, r3, 0x6, 0x4}}}, &(0x7f0000000740)={0x58, 0x0, 0x2, [{0x2, 0x4, 0xa, 0x2, '/dev/fuse\x00'}, {0x6, 0x7edd, 0x5, 0x3, '/@${,'}]}, &(0x7f0000000900)={0x338, 0x0, 0x7, [{{0x3, 0x2, 0xfff, 0xd, 0x64, 0x1, {0x0, 0x4, 0x3, 0x1, 0x2, 0x8, 0x7f, 0x7, 0xf, 0x6000, 0x9, r6, r3, 0xa}}, {0x0, 0x0, 0xa, 0x1, '/dev/fuse\x00'}}, {{0x5, 0x3, 0xffffffffffffffff, 0x965, 0x2004, 0x3, {0x5, 0x9, 0x2, 0x5, 0x1, 0x9, 0x26, 0x0, 0x8, 0x1000, 0x7ff, r2, r3, 0x6, 0x1}}, {0x0, 0xffffffffffff037f, 0x5, 0x1, 'fuse\x00'}}, {{0x6, 0x1, 0x6, 0x1a4, 0x6, 0xfffff642, {0x1, 0x1d, 0x7, 0x6, 0x4, 0x1, 0xe9, 0x800, 0x6, 0x6000, 0x30, r2, r3, 0x3ff, 0x6}}, {0x5, 0x0, 0x1, 0x8, '\x00'}}, {{0x3, 0x1, 0x2, 0x3, 0x4f, 0x0, {0x2, 0x40, 0x4, 0x400, 0x1, 0x4000, 0x0, 0x8001, 0xe2, 0x6000, 0x50, r2, r3, 0x5, 0x4}}, {0x2, 0x1, 0x5, 0x6, '-+]R%'}}, {{0x6, 0x1, 0xe, 0xcaa, 0x8, 0x5, {0x4, 0x7, 0x2, 0x800, 0x1000, 0xe, 0x7, 0x8, 0x9, 0xc000, 0xffff, r2, r3, 0x10000, 0x9da}}, {0x3, 0x3, 0x5, 0x3, 'fuse\x00'}}]}, &(0x7f0000000c40)={0xa0, 0x0, 0x9e7, {{0x1, 0xfa8, 0x7fffffffffffffff, 0x3, 0x6, 0x3, {0xffffffffffff0001, 0x7, 0x0, 0x5, 0x80, 0x7, 0x1, 0x9, 0x4, 0x8000, 0xfffffffd, 0x0, r3, 0x7fffffff, 0x7fffffff}}, {0x0, 0x16}}}, &(0x7f0000000580)={0x20, 0xfffffffffffffffe, 0x9, {0xfffffffa, 0x0, 0x6, 0x3}}, &(0x7f0000000d00)={0x130, 0xfffffffffffffff5, 0x2, {0x6, 0xd2, 0x0, '\x00', {0x80, 0x7fffffff, 0x3, 0x8, r2, r3, 0xc000, '\x00', 0x7, 0x3, 0xe9, 0x6, {0x3, 0x1000000}, {0x5, 0x132}, {0x136, 0x4966}, {0xfffffffffffffffa, 0x4}, 0xa69, 0x6, 0x800, 0x1}}}}) close_range(r5, 0xffffffffffffffff, 0x0) 2.895073347s ago: executing program 3 (id=756): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7ffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, 0x0, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, 0x0) writev(r1, &(0x7f0000002340)=[{&(0x7f00000000c0)}, {0x0}, {&(0x7f0000002140)="d4e313897ba92abab9c6583cddfbf1f4b390d6384d4189fc285bfd1db0a938013ef24cd269cd536ca80a89137d5aa380120d7111ad9e2e3312deebb72711e2bfdddf651604b872294c921b9a98940e8fff6928666bf0722b7a18f3968806b39a3621ddd9aec7c9830c92c4c4", 0x6c}, {0x0}, {&(0x7f0000002280)="d8d36f6ba46a391b430b4958b58cef93a7c4b042205d569cdd6650ec9748c1", 0x1f}, {&(0x7f00000022c0)="028bb81475e1e09a81dd", 0xa}], 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) ioctl$TUNGETVNETLE(r3, 0x40047451, &(0x7f0000001200)) 2.291849201s ago: executing program 0 (id=757): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x44080) r1 = getpid() setrlimit(0xb, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000100)={0xf030000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x9, '\x00', @p_u8=0x0}}) mlock2(&(0x7f0000a20000/0x1000)=nil, 0x1000, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000040)="42d7386debb9c100", 0x8, 0xfffffffffffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = getpid() kcmp(r7, r7, 0x0, r6, r5) keyctl$read(0xb, r4, 0x0, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e29, 0x6, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xf}, 0x1c) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000100)=0xc081, 0x4) 2.289580353s ago: executing program 3 (id=758): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0xb4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x60}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x20780, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r7}, 0x10) lsm_list_modules(0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)="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", 0xfb, 0xd1) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000300)={{0xeeef0000, 0xdddd1000, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0xd000, 0xa, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, 0x0, 0xff}, {0x3000, 0x0, 0x9, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x0, 0x4, 0xff}, {0xdddd0000, 0x10000, 0x9, 0x0, 0xff, 0x4, 0x6, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x8000000, 0x0, 0x0, 0x1, 0x1, 0x83, 0xa, 0x26, 0x5}, {0x4000}, {0xdddd1000, 0xff}, 0xddf9ffdb, 0x0, 0x0, 0x70, 0xfffffffffffffffe, 0xd801, 0x0, [0x0, 0x0, 0x1]}) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_NMI(r9, 0xae9a) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 1.651783209s ago: executing program 4 (id=759): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x44080) r1 = getpid() setrlimit(0xb, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000100)={0xf030000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x9, '\x00', @p_u8=0x0}}) mlock2(&(0x7f0000a20000/0x1000)=nil, 0x1000, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000040)="42d7386debb9c100", 0x8, 0xfffffffffffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = getpid() kcmp(r7, r7, 0x0, r6, r5) keyctl$read(0xb, r4, 0x0, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e29, 0x6, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xf}, 0x1c) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000100)=0xc081, 0x4) 1.63579ms ago: executing program 1 (id=760): syz_open_dev$sndpcmp(&(0x7f0000000100), 0x8, 0x2000) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xffffffffffffbffc) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x3) splice(r2, 0x0, r1, 0x0, 0x406f413, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, 0x0, &(0x7f0000000100)) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0100000003000000060000000b"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r7}, 0xc) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000140)={'dt2814\x00', [0xb02f, 0x401, 0xe2, 0x3, 0x88d7, 0x80000001, 0x1007, 0x1, 0x1002, 0xffffffff, 0x200, 0x7, 0x10000007, 0x1, 0x5, 0x1ff, 0x8, 0x3, 0x9, 0x8e, 0x10c, 0x4005, 0x2, 0xa, 0x5, 0x1, 0xb0c4, 0xe, 0xff, 0x400002, 0x4000004]}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x2) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCVHANGUP(r9, 0x5437, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 0s ago: executing program 0 (id=770): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_open_dev$sndpcmc(&(0x7f0000000740), 0x1, 0x2000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r3) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x44, r4, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x100003}]}, 0x44}, 0x1f, 0x0, 0x0, 0x4001}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mount(&(0x7f0000000140)=@nullb, 0x0, &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) r5 = socket$kcm(0x2, 0x2, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0), 0x161) unshare(0x40020000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x480000, 0x0, 0x0, 0x41000, 0x3e}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) kernel console output (not intermixed with test programs): 124.282853][ T89] usb 2-1: setting power ON [ 124.287663][ T89] dvb-usb: bulk message failed: -22 (2/0) [ 124.297278][ T89] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 124.308729][ T89] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 124.317291][ T89] usb 2-1: media controller created [ 124.335656][ T89] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 124.369072][ T89] usb 2-1: selecting invalid altsetting 6 [ 124.375798][ T89] usb 2-1: digital interface selection failed (-22) [ 124.455019][ T89] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 124.722666][ T6661] mkiss: ax0: crc mode is auto. [ 124.795603][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 124.795618][ T30] audit: type=1400 audit(1765176561.820:283): avc: denied { write } for pid=6653 comm="syz.1.139" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 124.813408][ T89] usb 2-1: setting power OFF [ 124.854648][ T89] dvb-usb: bulk message failed: -22 (2/0) [ 124.901018][ T89] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 124.952929][ T89] (NULL device *): no alternate interface [ 125.005188][ T30] audit: type=1400 audit(1765176562.050:284): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 125.032730][ T5884] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 125.223329][ T89] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 125.233628][ T30] audit: type=1400 audit(1765176562.240:285): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 125.310408][ T89] usb 2-1: USB disconnect, device number 6 [ 125.342599][ T5884] usb 1-1: Using ep0 maxpacket: 32 [ 125.350644][ T5884] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 125.368597][ T30] audit: type=1400 audit(1765176562.410:286): avc: denied { setopt } for pid=6664 comm="syz.2.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 125.398795][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.503416][ T30] audit: type=1400 audit(1765176562.460:287): avc: denied { write } for pid=6668 comm="syz.3.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 125.526893][ T5884] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 125.534058][ T30] audit: type=1400 audit(1765176562.460:288): avc: denied { read } for pid=6668 comm="syz.3.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 125.628985][ T6671] 8021q: VLANs not supported on ip_vti0 [ 126.078847][ T5884] gspca_nw80x: reg_w err -110 [ 126.083697][ T5884] nw80x 1-1:3.0: probe with driver nw80x failed with error -110 [ 126.252686][ T30] audit: type=1400 audit(1765176563.290:289): avc: denied { write } for pid=6668 comm="syz.3.142" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 126.567271][ T6677] FAULT_INJECTION: forcing a failure. [ 126.567271][ T6677] name failslab, interval 1, probability 0, space 0, times 1 [ 126.588490][ T6677] CPU: 0 UID: 0 PID: 6677 Comm: syz.2.143 Tainted: G L syzkaller #0 PREEMPT(full) [ 126.588517][ T6677] Tainted: [L]=SOFTLOCKUP [ 126.588523][ T6677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 126.588532][ T6677] Call Trace: [ 126.588542][ T6677] [ 126.588548][ T6677] dump_stack_lvl+0x16c/0x1f0 [ 126.588579][ T6677] should_fail_ex+0x512/0x640 [ 126.588596][ T6677] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 126.588617][ T6677] should_failslab+0xc2/0x120 [ 126.588640][ T6677] kmem_cache_alloc_node_noprof+0x86/0x800 [ 126.588657][ T6677] ? copy_process+0x4b5/0x7430 [ 126.588687][ T6677] ? copy_process+0x4b5/0x7430 [ 126.588711][ T6677] copy_process+0x4b5/0x7430 [ 126.588749][ T6677] ? __pfx_copy_process+0x10/0x10 [ 126.588778][ T6677] ? lockdep_init_map_type+0x5c/0x270 [ 126.588801][ T6677] ? lockdep_init_map_type+0x5c/0x270 [ 126.588822][ T6677] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 126.588849][ T6677] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 126.588873][ T6677] vhost_task_create+0x1d2/0x370 [ 126.588896][ T6677] ? __pfx_vhost_task_create+0x10/0x10 [ 126.588925][ T6677] ? __pfx_vhost_task_fn+0x10/0x10 [ 126.588951][ T6677] ? __pfx___mutex_lock+0x10/0x10 [ 126.588985][ T6677] kvm_mmu_post_init_vm+0x1b7/0x380 [ 126.589008][ T6677] kvm_arch_vcpu_ioctl_run+0x66/0x1860 [ 126.589031][ T6677] ? kvm_vcpu_ioctl+0x14f8/0x16d0 [ 126.589064][ T6677] kvm_vcpu_ioctl+0x76d/0x16d0 [ 126.589092][ T6677] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 126.589120][ T6677] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 126.589141][ T6677] ? do_vfs_ioctl+0x128/0x14f0 [ 126.589162][ T6677] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 126.589181][ T6677] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 126.589217][ T6677] ? hook_file_ioctl_common+0x144/0x410 [ 126.589245][ T6677] ? selinux_file_ioctl+0x180/0x270 [ 126.589269][ T6677] ? selinux_file_ioctl+0xb4/0x270 [ 126.589295][ T6677] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 126.589322][ T6677] __x64_sys_ioctl+0x18e/0x210 [ 126.589342][ T6677] do_syscall_64+0xcd/0xf80 [ 126.589375][ T6677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.589392][ T6677] RIP: 0033:0x7fbca318f749 [ 126.589407][ T6677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.589422][ T6677] RSP: 002b:00007fbca13f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 126.589438][ T6677] RAX: ffffffffffffffda RBX: 00007fbca33e5fa0 RCX: 00007fbca318f749 [ 126.589449][ T6677] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 126.589458][ T6677] RBP: 00007fbca13f6090 R08: 0000000000000000 R09: 0000000000000000 [ 126.589467][ T6677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.589477][ T6677] R13: 00007fbca33e6038 R14: 00007fbca33e5fa0 R15: 00007fff0f134708 [ 126.589502][ T6677] [ 126.918323][ T30] audit: type=1400 audit(1765176563.960:290): avc: denied { setopt } for pid=6680 comm="syz.3.144" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 126.942592][ T30] audit: type=1400 audit(1765176563.980:291): avc: denied { read } for pid=6680 comm="syz.3.144" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 126.966378][ T30] audit: type=1400 audit(1765176563.990:292): avc: denied { open } for pid=6680 comm="syz.3.144" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 126.999583][ T6684] netlink: 20 bytes leftover after parsing attributes in process `syz.3.144'. [ 127.029791][ T6686] binder: 6685:6686 ioctl c0306201 200000000640 returned -22 [ 127.140548][ T6688] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.282659][ T89] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 127.431086][ T117] usb 1-1: USB disconnect, device number 5 [ 127.443722][ T89] usb 3-1: Using ep0 maxpacket: 32 [ 127.469423][ T89] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 127.492605][ T89] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.512277][ T89] usb 3-1: config 0 descriptor?? [ 127.524786][ T89] gspca_main: sunplus-2.14.0 probing 041e:400b [ 127.532510][ T6691] /dev/nullb0: Can't open blockdev [ 128.572022][ T89] gspca_sunplus: reg_w_riv err -110 [ 128.628682][ T89] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 129.886925][ T6699] mkiss: ax0: crc mode is auto. [ 130.694086][ T48] usb 3-1: USB disconnect, device number 7 [ 130.803327][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 130.803342][ T30] audit: type=1400 audit(1765176567.750:295): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 130.855427][ T6705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.151'. [ 130.907910][ T6707] netlink: 12 bytes leftover after parsing attributes in process `syz.4.151'. [ 130.921506][ T30] audit: type=1400 audit(1765176567.900:296): avc: denied { ioctl } for pid=6704 comm="syz.4.151" path="socket:[11481]" dev="sockfs" ino=11481 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 131.214229][ T30] audit: type=1400 audit(1765176568.260:297): avc: denied { create } for pid=6711 comm="syz.2.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 131.378006][ T30] audit: type=1400 audit(1765176568.300:298): avc: denied { write } for pid=6711 comm="syz.2.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 131.432881][ T30] audit: type=1400 audit(1765176568.330:299): avc: denied { connect } for pid=6711 comm="syz.2.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 132.357205][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.382819][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.515614][ T6743] fuse: Unknown parameter '000000000000000000050x0000000000000003' [ 132.545750][ T30] audit: type=1400 audit(1765176569.590:300): avc: denied { append } for pid=6742 comm="syz.4.159" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 132.627288][ T6745] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 132.902205][ T6752] 8021q: VLANs not supported on ip_vti0 [ 133.714483][ T30] audit: type=1400 audit(1765176570.760:301): avc: denied { ioctl } for pid=6714 comm="syz.1.153" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=11580 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 133.845186][ T6757] mkiss: ax0: crc mode is auto. [ 133.857194][ T6755] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.153'. [ 134.129309][ T30] audit: type=1400 audit(1765176571.170:302): avc: denied { accept } for pid=6762 comm="syz.3.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 134.389358][ T30] audit: type=1400 audit(1765176571.430:303): avc: denied { setopt } for pid=6765 comm="syz.1.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 134.458570][ T30] audit: type=1400 audit(1765176571.500:304): avc: denied { create } for pid=6771 comm="syz.4.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 134.483608][ T6774] netlink: 124 bytes leftover after parsing attributes in process `syz.0.167'. [ 134.666363][ T5927] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 134.941963][ T5927] usb 2-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.991901][ T5927] usb 2-1: config 0 interface 0 has no altsetting 0 [ 135.041991][ T5927] usb 2-1: New USB device found, idVendor=056a, idProduct=00d2, bcdDevice= 0.00 [ 135.088745][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.210128][ T5927] usb 2-1: config 0 descriptor?? [ 135.572804][ T89] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 135.691967][ T6770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.693812][ T6770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.752642][ T89] usb 5-1: Using ep0 maxpacket: 16 [ 135.754011][ T89] usb 5-1: config 9 has an invalid interface number: 27 but max is 0 [ 135.754035][ T89] usb 5-1: config 9 has no interface number 0 [ 135.754068][ T89] usb 5-1: config 9 interface 27 has no altsetting 0 [ 135.754518][ T89] usb 5-1: language id specifier not provided by device, defaulting to English [ 135.852530][ T89] usb 5-1: New USB device found, idVendor=16ab, idProduct=7811, bcdDevice=6d.12 [ 135.852609][ T89] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.852621][ T89] usb 5-1: Product: syz [ 135.852631][ T89] usb 5-1: Manufacturer: ⤃䱹ꚭ䒎ᴢ⎞ᮄ駒䓄眠몕艂▖⻗帖㌈屏巴᰸ᴩ恰靰뉬ࡍ湛톈ꂄ舟谶☍㇮띵엑濉▬⛕匽﷢찁㛾䈷র診䟩쟬਌匈쒍꥕竨볨咤岀衣邃盡낌狽䖟찾沏탚鵵ⴽ랮ᔵ畵ॖ㋘ [ 135.852648][ T89] usb 5-1: SerialNumber: syz [ 136.064663][ T89] usb 5-1: Could not find all expected endpoints [ 136.105892][ T89] usb 5-1: USB disconnect, device number 5 [ 136.314948][ T6798] mkiss: ax0: crc mode is auto. [ 137.178963][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 137.178980][ T30] audit: type=1400 audit(1765176573.950:307): avc: denied { remount } for pid=6800 comm="syz.2.176" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 138.614970][ T5927] usbhid 2-1:0.0: can't add hid device: -71 [ 138.620983][ T5927] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 138.794664][ T30] audit: type=1400 audit(1765176575.840:308): avc: denied { create } for pid=6821 comm="syz.2.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 139.035419][ T5927] usb 2-1: USB disconnect, device number 7 [ 139.050436][ T30] audit: type=1400 audit(1765176575.860:309): avc: denied { getopt } for pid=6821 comm="syz.2.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 139.226799][ T6829] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 139.248763][ T30] audit: type=1400 audit(1765176576.290:310): avc: denied { name_bind } for pid=6823 comm="syz.0.181" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 139.271233][ T6340] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 139.292439][ T6831] FAULT_INJECTION: forcing a failure. [ 139.292439][ T6831] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.313869][ T30] audit: type=1400 audit(1765176576.330:311): avc: denied { node_bind } for pid=6823 comm="syz.0.181" saddr=::ffff:224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 139.336884][ T6831] CPU: 0 UID: 0 PID: 6831 Comm: syz.4.183 Tainted: G L syzkaller #0 PREEMPT(full) [ 139.336913][ T6831] Tainted: [L]=SOFTLOCKUP [ 139.336919][ T6831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 139.336929][ T6831] Call Trace: [ 139.336935][ T6831] [ 139.336942][ T6831] dump_stack_lvl+0x16c/0x1f0 [ 139.336974][ T6831] should_fail_ex+0x512/0x640 [ 139.336997][ T6831] _copy_from_iter+0x2a4/0x16c0 [ 139.337020][ T6831] ? __alloc_skb+0x220/0x410 [ 139.337039][ T6831] ? __alloc_skb+0x35d/0x410 [ 139.337058][ T6831] ? __pfx__copy_from_iter+0x10/0x10 [ 139.337077][ T6831] ? netlink_autobind.isra.0+0x158/0x370 [ 139.337112][ T6831] netlink_sendmsg+0x820/0xdd0 [ 139.337143][ T6831] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.337178][ T6831] ____sys_sendmsg+0xa5d/0xc30 [ 139.337207][ T6831] ? copy_msghdr_from_user+0x10a/0x160 [ 139.337228][ T6831] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.337266][ T6831] ___sys_sendmsg+0x134/0x1d0 [ 139.337296][ T6831] ? __pfx____sys_sendmsg+0x10/0x10 [ 139.337350][ T6831] __sys_sendmsg+0x16d/0x220 [ 139.337372][ T6831] ? __pfx___sys_sendmsg+0x10/0x10 [ 139.337411][ T6831] do_syscall_64+0xcd/0xf80 [ 139.337440][ T6831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.337458][ T6831] RIP: 0033:0x7f32c058f749 [ 139.337473][ T6831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.337489][ T6831] RSP: 002b:00007f32c14f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.337507][ T6831] RAX: ffffffffffffffda RBX: 00007f32c07e5fa0 RCX: 00007f32c058f749 [ 139.337519][ T6831] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 139.337529][ T6831] RBP: 00007f32c14f4090 R08: 0000000000000000 R09: 0000000000000000 [ 139.337539][ T6831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.337549][ T6831] R13: 00007f32c07e6038 R14: 00007f32c07e5fa0 R15: 00007ffd391f8088 [ 139.337573][ T6831] [ 139.575745][ T6835] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 139.583552][ T6835] audit: out of memory in audit_log_start [ 139.627098][ T30] audit: type=1400 audit(1765176576.670:312): avc: denied { nlmsg_read } for pid=6832 comm="syz.1.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 139.912983][ T6340] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 139.922032][ T6340] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.976458][ T6340] usb 3-1: config 0 descriptor?? [ 140.016884][ T6843] Bluetooth: MGMT ver 1.23 [ 140.104075][ T6845] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 140.116294][ T6845] qnx6: wrong signature (magic) in superblock #1. [ 140.123845][ T6845] qnx6: unable to read the first superblock [ 140.200706][ T6822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.209377][ T6822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.231181][ T6340] usb 3-1: string descriptor 0 read error: -71 [ 140.272309][ T6848] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 140.305359][ T6340] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 140.434727][ T6848] qnx6: wrong signature (magic) in superblock #1. [ 140.449344][ T6340] usb 3-1: USB disconnect, device number 8 [ 140.465749][ T6848] qnx6: unable to read the first superblock [ 140.850783][ T6858] netlink: 124 bytes leftover after parsing attributes in process `syz.0.190'. [ 141.033275][ T30] audit: type=1400 audit(1765176578.080:313): avc: denied { ioctl } for pid=6859 comm="syz.4.191" path="socket:[11931]" dev="sockfs" ino=11931 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 141.206664][ T6861] netlink: 4 bytes leftover after parsing attributes in process `syz.4.191'. [ 141.216542][ T6861] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.361427][ T6864] netlink: 4 bytes leftover after parsing attributes in process `syz.4.191'. [ 141.497824][ T30] audit: type=1400 audit(1765176578.250:314): avc: denied { ioctl } for pid=6859 comm="syz.4.191" path="socket:[10998]" dev="sockfs" ino=10998 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 141.794332][ T6861] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.298569][ T30] audit: type=1400 audit(1765176579.340:315): avc: denied { create } for pid=6872 comm="syz.2.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 142.347931][ T6875] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.502884][ T5927] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 142.643023][ T6881] netlink: 'syz.4.196': attribute type 23 has an invalid length. [ 142.662208][ T30] audit: type=1400 audit(1765176579.700:316): avc: denied { map } for pid=6885 comm="syz.3.198" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 142.663757][ T6886] binder: BINDER_SET_CONTEXT_MGR already set [ 142.685997][ T5927] usb 1-1: Using ep0 maxpacket: 32 [ 142.698601][ T6887] binder: 6885:6887 ioctl c0306201 200000000440 returned -14 [ 142.707902][ T6886] binder: 6885:6886 ioctl 4018620d 2000000002c0 returned -16 [ 142.731332][ T30] audit: type=1400 audit(1765176579.740:317): avc: denied { call } for pid=6885 comm="syz.3.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 142.829000][ T5927] usb 1-1: config 5 has an invalid interface number: 245 but max is 1 [ 142.840087][ T5927] usb 1-1: config 5 has an invalid interface number: 70 but max is 1 [ 142.967941][ T5927] usb 1-1: config 5 has an invalid interface number: 4 but max is 1 [ 142.976329][ T5927] usb 1-1: config 5 has 3 interfaces, different from the descriptor's value: 2 [ 142.986339][ T5927] usb 1-1: config 5 has no interface number 0 [ 142.994504][ T5927] usb 1-1: config 5 has no interface number 1 [ 143.001113][ T5927] usb 1-1: config 5 has no interface number 2 [ 143.008261][ T5927] usb 1-1: config 5 interface 245 altsetting 0 endpoint 0xB has an invalid bInterval 158, changing to 11 [ 143.020391][ T5927] usb 1-1: config 5 interface 245 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 143.201493][ T5927] usb 1-1: config 5 interface 245 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 32 [ 143.232177][ T5927] usb 1-1: config 5 interface 245 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 143.281489][ T5927] usb 1-1: config 5 interface 245 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 143.309849][ T5927] usb 1-1: config 5 interface 245 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 143.341903][ T5927] usb 1-1: config 5 interface 245 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 143.357523][ T5927] usb 1-1: config 5 interface 245 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 143.370164][ T5927] usb 1-1: config 5 interface 245 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 143.448249][ T6895] FAULT_INJECTION: forcing a failure. [ 143.448249][ T6895] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 143.464034][ T6895] CPU: 0 UID: 0 PID: 6895 Comm: syz.2.199 Tainted: G L syzkaller #0 PREEMPT(full) [ 143.464061][ T6895] Tainted: [L]=SOFTLOCKUP [ 143.464067][ T6895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 143.464076][ T6895] Call Trace: [ 143.464080][ T6895] [ 143.464086][ T6895] dump_stack_lvl+0x16c/0x1f0 [ 143.464113][ T6895] should_fail_ex+0x512/0x640 [ 143.464133][ T6895] should_fail_alloc_page+0xe7/0x130 [ 143.464153][ T6895] prepare_alloc_pages+0x401/0x670 [ 143.464177][ T6895] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 143.464192][ T6895] ? trace_sched_exit_tp+0xd1/0x110 [ 143.464208][ T6895] ? __schedule+0x114c/0x6150 [ 143.464227][ T6895] ? __request_resource+0x242/0x2e0 [ 143.464249][ T6895] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 143.464266][ T6895] ? __pfx___schedule+0x10/0x10 [ 143.464289][ T6895] ? preempt_schedule_thunk+0x16/0x30 [ 143.464305][ T6895] ? preempt_schedule_common+0x44/0xc0 [ 143.464326][ T6895] ? preempt_schedule_thunk+0x16/0x30 [ 143.464338][ T6895] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 143.464356][ T6895] ? policy_nodemask+0xea/0x4e0 [ 143.464377][ T6895] alloc_pages_mpol+0x1fb/0x550 [ 143.464397][ T6895] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 143.464421][ T6895] alloc_pages_noprof+0x131/0x390 [ 143.464440][ T6895] get_zeroed_page_noprof+0x18/0xb0 [ 143.464458][ T6895] uart_startup+0x1f3/0x1300 [ 143.464486][ T6895] uart_ioctl+0x10a0/0x3070 [ 143.464508][ T6895] ? lockdep_hardirqs_on+0x7c/0x110 [ 143.464533][ T6895] ? __pfx_uart_ioctl+0x10/0x10 [ 143.464563][ T6895] ? tty_jobctrl_ioctl+0x2f/0xe00 [ 143.464579][ T6895] ? __pfx_uart_ioctl+0x10/0x10 [ 143.464600][ T6895] tty_ioctl+0x661/0x1650 [ 143.464620][ T6895] ? __pfx___schedule+0x10/0x10 [ 143.464638][ T6895] ? __pfx_tty_ioctl+0x10/0x10 [ 143.464657][ T6895] ? trace_irq_enable.constprop.0+0x2f/0x110 [ 143.464677][ T6895] ? rcu_is_watching+0x12/0xc0 [ 143.464690][ T6895] ? irqentry_exit+0x1dd/0x8c0 [ 143.464711][ T6895] ? lockdep_hardirqs_on+0x7c/0x110 [ 143.464731][ T6895] ? irqentry_exit+0x1dd/0x8c0 [ 143.464758][ T6895] ? __pfx_tty_ioctl+0x10/0x10 [ 143.464778][ T6895] ? __x64_sys_ioctl+0x123/0x210 [ 143.464796][ T6895] ? __pfx_tty_ioctl+0x10/0x10 [ 143.464816][ T6895] __x64_sys_ioctl+0x18e/0x210 [ 143.464833][ T6895] do_syscall_64+0xcd/0xf80 [ 143.464856][ T6895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.464871][ T6895] RIP: 0033:0x7fbca318f749 [ 143.464883][ T6895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.464897][ T6895] RSP: 002b:00007fbca13d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 143.464911][ T6895] RAX: ffffffffffffffda RBX: 00007fbca33e6090 RCX: 00007fbca318f749 [ 143.464921][ T6895] RDX: 9999999999999999 RSI: 0000000000005453 RDI: 0000000000000006 [ 143.464929][ T6895] RBP: 00007fbca13d5090 R08: 0000000000000000 R09: 0000000000000000 [ 143.464937][ T6895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.464945][ T6895] R13: 00007fbca33e6128 R14: 00007fbca33e6090 R15: 00007fff0f134708 [ 143.464966][ T6895] [ 144.019166][ T5927] usb 1-1: config 5 interface 70 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 144.151576][ T5927] usb 1-1: too many endpoints for config 5 interface 4 altsetting 249: 186, using maximum allowed: 30 [ 144.299200][ T5927] usb 1-1: config 5 interface 4 altsetting 249 has an invalid descriptor for endpoint zero, skipping [ 144.350702][ T5927] usb 1-1: config 5 interface 4 altsetting 249 has 2 endpoint descriptors, different from the interface descriptor's value: 186 [ 144.382687][ T5927] usb 1-1: config 5 interface 70 has no altsetting 0 [ 144.390114][ T5927] usb 1-1: config 5 interface 4 has no altsetting 0 [ 144.407245][ T6899] mkiss: ax0: crc mode is auto. [ 144.450500][ T5927] usb 1-1: New USB device found, idVendor=045e, idProduct=04e8, bcdDevice=66.8b [ 144.470078][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.482325][ T5927] usb 1-1: Product: 鸨蕠坈徒璯؂뛈擹଎鱆褵薈遙㧱뾢륇恇䬣უ浭湶㭂斝ﲹτ웆͊乧ꃷ荓ܴ㧀␰階ᮭᕦ款뾎﶐ﲫ뺛Ⅎ좁箟ॆ쉄⨶ႄ⁁⾛첟㌣ﻛ炏㩘즠騿㬫젺嘴ᩎ⣀⣜沼쥶넉褽ꯃ汀並䓳囈摰㺂啣⬸쉂㩡槸š콁 [ 144.522961][ T5927] usb 1-1: Manufacturer: 㠊 [ 144.540518][ T5927] usb 1-1: SerialNumber: 㻕힥죴︢諠덖趩赣Ḛ퉔ᤔ௺ꑖ䄝볘鄢㺱墏率汭㏃㚼﷙锦俪႗犷觉⇳䭍ᇕ㮰翇埛鷥锾⢖鈂⻸䊵ੑ㪆凕ꙉ횣誜텦Ꝺ姞㳆헂曫쇒짱㯱軠卯摕鑑뫙聜뢲Ⰸ쳉럤扟ခ軣ꧽ⍦텐虛ᗾ硯噖᯷懾ḩￊ硽ￅﵑ垣呎〃㲨努峇멸 [ 144.584958][ T6871] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 144.606467][ T30] audit: type=1400 audit(1765176581.640:318): avc: denied { mounton } for pid=6905 comm="syz.3.204" path="/48/file0" dev="tmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 144.636879][ T6906] 9p: Bad value for 'cachetag' [ 144.692636][ T5822] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 144.852191][ T6912] 8021q: VLANs not supported on ip_vti0 [ 144.952022][ T5822] usb 3-1: Using ep0 maxpacket: 16 [ 145.048049][ T5822] usb 3-1: config 9 has an invalid interface number: 27 but max is 0 [ 145.134425][ T5822] usb 3-1: config 9 has no interface number 0 [ 145.215428][ T5927] usb 1-1: USB disconnect, device number 6 [ 145.228535][ T5822] usb 3-1: config 9 interface 27 has no altsetting 0 [ 145.265093][ T5822] usb 3-1: language id specifier not provided by device, defaulting to English [ 145.280491][ T5822] usb 3-1: New USB device found, idVendor=16ab, idProduct=7811, bcdDevice=6d.12 [ 145.291626][ T5822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.301110][ T5822] usb 3-1: Product: syz [ 145.311402][ T5822] usb 3-1: Manufacturer: ⤃䱹ꚭ䒎ᴢ⎞ᮄ駒䓄眠몕艂▖⻗帖㌈屏巴᰸ᴩ恰靰뉬ࡍ湛톈ꂄ舟谶☍㇮띵엑濉▬⛕匽﷢찁㛾䈷র診䟩쟬਌匈쒍꥕竨볨咤岀衣邃盡낌狽䖟찾沏탚鵵ⴽ랮ᔵ畵ॖ㋘ [ 145.336029][ T5822] usb 3-1: SerialNumber: syz [ 145.387375][ T30] audit: type=1400 audit(1765176582.430:319): avc: denied { create } for pid=6917 comm="syz.4.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 145.469930][ T6920] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 145.480899][ T6920] qnx6: wrong signature (magic) in superblock #1. [ 145.487909][ T6920] qnx6: unable to read the first superblock [ 145.547189][ T5897] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 145.632610][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 146.039846][ T5897] usb 4-1: device descriptor read/64, error -71 [ 146.210987][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 146.219827][ T5822] usb 3-1: Could not find all expected endpoints [ 146.229972][ T10] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 146.230813][ T5822] usb 3-1: USB disconnect, device number 9 [ 146.239110][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.254800][ T10] usb 5-1: Product: syz [ 146.259418][ T10] usb 5-1: Manufacturer: syz [ 146.265473][ T10] usb 5-1: SerialNumber: syz [ 146.279818][ T10] r8152-cfgselector 5-1: Unknown version 0x0000 [ 146.282624][ T5897] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 146.286207][ T10] r8152-cfgselector 5-1: config 0 descriptor?? [ 146.464187][ T5897] usb 4-1: device descriptor read/64, error -71 [ 146.651040][ T5897] usb usb4-port1: attempt power cycle [ 146.996933][ T30] audit: type=1400 audit(1765176584.040:320): avc: denied { write } for pid=6917 comm="syz.4.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 147.038514][ T30] audit: type=1400 audit(1765176584.080:321): avc: denied { setopt } for pid=6917 comm="syz.4.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 147.067432][ T5822] r8152-cfgselector 5-1: USB disconnect, device number 6 [ 147.342638][ T5897] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 147.352620][ T5927] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 147.372965][ T5897] usb 4-1: device descriptor read/8, error -71 [ 147.573821][ T5927] usb 1-1: Using ep0 maxpacket: 16 [ 147.580296][ T5927] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 148.262979][ T30] audit: type=1400 audit(1765176585.280:322): avc: denied { connect } for pid=6928 comm="syz.2.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 148.263029][ T30] audit: type=1400 audit(1765176585.280:323): avc: denied { bind } for pid=6928 comm="syz.2.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 148.268964][ T5927] usb 1-1: config 0 has no interface number 0 [ 148.269010][ T5927] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.269034][ T5927] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.269069][ T5927] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 148.269089][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.289381][ T5927] usb 1-1: config 0 descriptor?? [ 148.389579][ T5897] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 148.444472][ T6938] netlink: 124 bytes leftover after parsing attributes in process `syz.1.212'. [ 148.493281][ T5897] usb 4-1: device descriptor read/8, error -71 [ 148.723628][ T5897] usb usb4-port1: unable to enumerate USB device [ 148.890474][ T30] audit: type=1400 audit(1765176585.930:324): avc: denied { ioctl } for pid=6939 comm="syz.3.215" path="socket:[11214]" dev="sockfs" ino=11214 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 149.357478][ T6948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.367020][ T6948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.673193][ T30] audit: type=1400 audit(1765176586.450:325): avc: denied { create } for pid=6939 comm="syz.3.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 149.746270][ T30] audit: type=1400 audit(1765176586.460:326): avc: denied { ioctl } for pid=6939 comm="syz.3.215" path="socket:[12200]" dev="sockfs" ino=12200 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 150.257533][ T6965] mkiss: ax0: crc mode is auto. [ 150.366699][ T6960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.216'. [ 150.375568][ T6960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.216'. [ 150.603613][ T6968] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 150.618736][ T6968] qnx6: wrong signature (magic) in superblock #1. [ 150.627419][ T6968] qnx6: unable to read the first superblock [ 151.046490][ T6973] mkiss: ax0: crc mode is auto. [ 151.247469][ T6974] tmpfs: Bad value for 'mpol' [ 151.273613][ T6974] netlink: 28 bytes leftover after parsing attributes in process `syz.2.222'. [ 151.396913][ T5927] usbhid 1-1:0.1: can't add hid device: -71 [ 151.457783][ T5927] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 151.874744][ T5927] usb 1-1: USB disconnect, device number 7 [ 152.620317][ T30] audit: type=1400 audit(1765176589.660:327): avc: denied { listen } for pid=6982 comm="syz.0.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 152.695763][ T6987] 8021q: VLANs not supported on ip_vti0 [ 153.399680][ T30] audit: type=1400 audit(1765176590.360:328): avc: denied { write } for pid=6995 comm="syz.2.228" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 153.461911][ T6985] process 'syz.0.224' launched '/dev/fd/11' with NULL argv: empty string added [ 153.474327][ T30] audit: type=1400 audit(1765176590.520:329): avc: denied { execute_no_trans } for pid=6982 comm="syz.0.224" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 154.000990][ T30] audit: type=1400 audit(1765176591.040:330): avc: denied { accept } for pid=6982 comm="syz.0.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 154.646293][ T30] audit: type=1400 audit(1765176591.480:331): avc: denied { bind } for pid=6992 comm="syz.1.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 155.139834][ T7015] netlink: 12 bytes leftover after parsing attributes in process `syz.4.231'. [ 155.169674][ T30] audit: type=1400 audit(1765176592.210:332): avc: denied { connect } for pid=7012 comm="syz.3.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 155.902644][ T5927] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 156.092602][ T5927] usb 2-1: Using ep0 maxpacket: 16 [ 156.193839][ T5927] usb 2-1: config 9 has an invalid interface number: 27 but max is 0 [ 156.203891][ T5927] usb 2-1: config 9 has no interface number 0 [ 156.217171][ T5927] usb 2-1: config 9 interface 27 has no altsetting 0 [ 157.112266][ T5927] usb 2-1: language id specifier not provided by device, defaulting to English [ 157.183620][ T5927] usb 2-1: New USB device found, idVendor=16ab, idProduct=7811, bcdDevice=6d.12 [ 157.214152][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.222341][ T5927] usb 2-1: Product: syz [ 157.229623][ T5927] usb 2-1: Manufacturer: ⤃䱹ꚭ䒎ᴢ⎞ᮄ駒䓄眠몕艂▖⻗帖㌈屏巴᰸ᴩ恰靰뉬ࡍ湛톈ꂄ舟谶☍㇮띵엑濉▬⛕匽﷢찁㛾䈷র診䟩쟬਌匈쒍꥕竨볨咤岀衣邃盡낌狽䖟찾沏탚鵵ⴽ랮ᔵ畵ॖ㋘ [ 157.272611][ T5927] usb 2-1: SerialNumber: syz [ 157.681841][ T5927] usb 2-1: Could not find all expected endpoints [ 157.917796][ T6340] IPVS: starting estimator thread 0... [ 158.032900][ T7053] IPVS: using max 36 ests per chain, 86400 per kthread [ 158.289240][ T5927] usb 2-1: USB disconnect, device number 8 [ 158.397275][ T7050] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 160.117406][ T7076] netlink: 4436 bytes leftover after parsing attributes in process `syz.1.245'. [ 160.127247][ T7076] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 160.302600][ T7077] netlink: 4436 bytes leftover after parsing attributes in process `syz.4.246'. [ 160.312285][ T7077] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 161.473891][ T5927] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 161.970922][ T5927] usb 4-1: Using ep0 maxpacket: 16 [ 162.010667][ T5927] usb 4-1: config 9 has an invalid interface number: 27 but max is 0 [ 162.128983][ T5927] usb 4-1: config 9 has no interface number 0 [ 162.212727][ T5927] usb 4-1: config 9 interface 27 has no altsetting 0 [ 162.225313][ T5927] usb 4-1: language id specifier not provided by device, defaulting to English [ 162.240026][ T5927] usb 4-1: New USB device found, idVendor=16ab, idProduct=7811, bcdDevice=6d.12 [ 162.271497][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.288533][ T5927] usb 4-1: Product: syz [ 162.300034][ T5927] usb 4-1: Manufacturer: ⤃䱹ꚭ䒎ᴢ⎞ᮄ駒䓄眠몕艂▖⻗帖㌈屏巴᰸ᴩ恰靰뉬ࡍ湛톈ꂄ舟谶☍㇮띵엑濉▬⛕匽﷢찁㛾䈷র診䟩쟬਌匈쒍꥕竨볨咤岀衣邃盡낌狽䖟찾沏탚鵵ⴽ랮ᔵ畵ॖ㋘ [ 163.280345][ T5927] usb 4-1: SerialNumber: syz [ 163.332610][ T89] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 165.442990][ T89] usb 2-1: Using ep0 maxpacket: 16 [ 165.507393][ T89] usb 2-1: config 9 has an invalid interface number: 27 but max is 0 [ 165.516073][ T89] usb 2-1: config 9 has no interface number 0 [ 165.522256][ T89] usb 2-1: config 9 interface 27 has no altsetting 0 [ 165.530610][ T89] usb 2-1: language id specifier not provided by device, defaulting to English [ 165.605159][ T5927] usb 4-1: Could not find all expected endpoints [ 165.653123][ T5927] usb 4-1: USB disconnect, device number 8 [ 165.670451][ T89] usb 2-1: New USB device found, idVendor=16ab, idProduct=7811, bcdDevice=6d.12 [ 165.697700][ T89] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.764215][ T89] usb 2-1: can't set config #9, error -71 [ 165.780785][ T89] usb 2-1: USB disconnect, device number 9 [ 166.595299][ T7114] mkiss: ax0: crc mode is auto. [ 167.012610][ T5988] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 167.084724][ T7123] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 167.168583][ T7123] qnx6: wrong signature (magic) in superblock #1. [ 167.175304][ T5988] usb 4-1: Using ep0 maxpacket: 16 [ 167.185226][ T7123] qnx6: unable to read the first superblock [ 167.202364][ T5988] usb 4-1: config 9 has an invalid interface number: 27 but max is 0 [ 167.215325][ T30] audit: type=1400 audit(1765176604.260:333): avc: denied { getopt } for pid=7124 comm="syz.1.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 167.238618][ T5988] usb 4-1: config 9 has no interface number 0 [ 167.251204][ T5988] usb 4-1: config 9 interface 27 has no altsetting 0 [ 167.261159][ T7128] netlink: 'syz.1.258': attribute type 10 has an invalid length. [ 167.268935][ T7128] netlink: 228 bytes leftover after parsing attributes in process `syz.1.258'. [ 167.284079][ T5988] usb 4-1: language id specifier not provided by device, defaulting to English [ 167.314803][ T5988] usb 4-1: New USB device found, idVendor=16ab, idProduct=7811, bcdDevice=6d.12 [ 167.324071][ T5988] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.343359][ T5988] usb 4-1: Product: syz [ 167.359247][ T5988] usb 4-1: Manufacturer: ⤃䱹ꚭ䒎ᴢ⎞ᮄ駒䓄眠몕艂▖⻗帖㌈屏巴᰸ᴩ恰靰뉬ࡍ湛톈ꂄ舟谶☍㇮띵엑濉▬⛕匽﷢찁㛾䈷র診䟩쟬਌匈쒍꥕竨볨咤岀衣邃盡낌狽䖟찾沏탚鵵ⴽ랮ᔵ畵ॖ㋘ [ 167.408831][ T5988] usb 4-1: SerialNumber: syz [ 167.640583][ T7117] fuse: Bad value for 'fd' [ 167.682050][ T7138] xt_SECMARK: invalid security context 'unconfined' [ 167.697291][ T30] audit: type=1400 audit(1765176604.720:334): avc: denied { block_suspend } for pid=7125 comm="syz.2.259" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 168.038750][ T5988] usb 4-1: Could not find all expected endpoints [ 168.062290][ T5988] usb 4-1: USB disconnect, device number 9 [ 168.271684][ T7142] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.719114][ T7147] netlink: 'syz.4.261': attribute type 23 has an invalid length. [ 168.770782][ T30] audit: type=1400 audit(1765176605.810:335): avc: denied { ioctl } for pid=7148 comm="syz.0.263" path="socket:[14342]" dev="sockfs" ino=14342 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 168.943468][ T7149] netlink: 'syz.0.263': attribute type 10 has an invalid length. [ 168.978499][ T7149] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 170.078171][ T5927] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 170.252774][ T5927] usb 2-1: Using ep0 maxpacket: 16 [ 170.291747][ T5927] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 170.590492][ T5927] usb 2-1: config 0 has no interface number 0 [ 170.602891][ T5927] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.628113][ T5927] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.812721][ T7171] mkiss: ax0: crc mode is auto. [ 170.906065][ T5927] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 170.975030][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.987893][ T7173] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.008171][ T5927] usb 2-1: config 0 descriptor?? [ 171.350527][ T7184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.360864][ T7184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.546680][ T7177] netlink: 'syz.4.270': attribute type 23 has an invalid length. [ 173.072656][ T5824] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 173.265089][ T7195] mkiss: ax0: crc mode is auto. [ 173.532585][ T5824] usb 1-1: Using ep0 maxpacket: 8 [ 173.543660][ T5824] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.564207][ T5824] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 173.574697][ T5824] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.575108][ T5927] usbhid 2-1:0.1: can't add hid device: -71 [ 173.619025][ T5927] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 173.644345][ T5824] usb 1-1: config 0 descriptor?? [ 173.659384][ T5927] usb 2-1: USB disconnect, device number 10 [ 173.683899][ T5824] uvcvideo 1-1:0.0: Found UVC 0.00 device (2833:0201) [ 173.701783][ T5824] uvcvideo 1-1:0.0: No valid video chain found. [ 173.727552][ T7199] netlink: 'syz.1.276': attribute type 10 has an invalid length. [ 173.740607][ T7199] netlink: 228 bytes leftover after parsing attributes in process `syz.1.276'. [ 173.937806][ T30] audit: type=1400 audit(1765176610.980:336): avc: denied { setopt } for pid=7174 comm="syz.0.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 173.974999][ T5884] usb 1-1: USB disconnect, device number 8 [ 174.033625][ T30] audit: type=1400 audit(1765176611.000:337): avc: denied { shutdown } for pid=7174 comm="syz.0.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 174.167641][ T30] audit: type=1400 audit(1765176611.000:338): avc: denied { setopt } for pid=7174 comm="syz.0.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 174.253087][ T5925] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 174.903282][ T5925] usb 3-1: Using ep0 maxpacket: 16 [ 175.095100][ T5925] usb 3-1: config 9 has an invalid interface number: 27 but max is 0 [ 175.121887][ T5925] usb 3-1: config 9 has no interface number 0 [ 175.133734][ T5925] usb 3-1: config 9 interface 27 has no altsetting 0 [ 175.330954][ T5925] usb 3-1: language id specifier not provided by device, defaulting to English [ 175.543559][ T5925] usb 3-1: New USB device found, idVendor=16ab, idProduct=7811, bcdDevice=6d.12 [ 175.638067][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.817391][ T5925] usb 3-1: Product: syz [ 175.821947][ T5925] usb 3-1: Manufacturer: ⤃䱹ꚭ䒎ᴢ⎞ᮄ駒䓄眠몕艂▖⻗帖㌈屏巴᰸ᴩ恰靰뉬ࡍ湛톈ꂄ舟谶☍㇮띵엑濉▬⛕匽﷢찁㛾䈷র診䟩쟬਌匈쒍꥕竨볨咤岀衣邃盡낌狽䖟찾沏탚鵵ⴽ랮ᔵ畵ॖ㋘ [ 175.846368][ T5925] usb 3-1: SerialNumber: syz [ 176.641568][ T7228] mkiss: ax0: crc mode is auto. [ 176.796241][ T7208] fuse: Bad value for 'fd' [ 176.892159][ T7231] netlink: 124 bytes leftover after parsing attributes in process `syz.0.284'. [ 176.892327][ T5925] usb 3-1: Could not find all expected endpoints [ 177.209843][ T5925] usb 3-1: USB disconnect, device number 10 [ 177.534910][ T30] audit: type=1400 audit(1765176614.580:339): avc: denied { write } for pid=7244 comm="syz.0.288" path="socket:[14901]" dev="sockfs" ino=14901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 177.614719][ T30] audit: type=1400 audit(1765176614.610:340): avc: denied { setopt } for pid=7240 comm="syz.3.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 178.142946][ T30] audit: type=1400 audit(1765176614.690:341): avc: denied { kexec_image_load } for pid=7242 comm="syz.1.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 178.196064][ T30] audit: type=1400 audit(1765176614.710:342): avc: denied { setopt } for pid=7244 comm="syz.0.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 178.302769][ T5988] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 178.313230][ T7253] netlink: 'syz.2.290': attribute type 10 has an invalid length. [ 178.320968][ T7253] netlink: 228 bytes leftover after parsing attributes in process `syz.2.290'. [ 178.496442][ T5988] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 178.508792][ T5988] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 178.545871][ T30] audit: type=1400 audit(1765176615.590:343): avc: denied { wake_alarm } for pid=7254 comm="syz.0.289" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 178.772577][ T5988] usb 4-1: config 8 has no interface number 0 [ 178.804878][ T5988] usb 4-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 178.820553][ T5988] usb 4-1: config 8 interface 177 has no altsetting 0 [ 178.827732][ T5988] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 178.868160][ T5988] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.893564][ T7263] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.052678][ T7266] netlink: 'syz.1.292': attribute type 23 has an invalid length. [ 179.679327][ T5927] usb 4-1: USB disconnect, device number 10 [ 179.878448][ T7276] mkiss: ax0: crc mode is auto. [ 180.522177][ T7284] netlink: 4436 bytes leftover after parsing attributes in process `syz.2.298'. [ 180.531598][ T7284] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 181.015528][ T7288] netlink: 4436 bytes leftover after parsing attributes in process `syz.4.299'. [ 181.025283][ T7288] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 181.514177][ T5960] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 181.792601][ T5960] usb 2-1: Using ep0 maxpacket: 16 [ 181.848348][ T5960] usb 2-1: config 9 has an invalid interface number: 27 but max is 0 [ 181.875550][ T5960] usb 2-1: config 9 has no interface number 0 [ 182.050479][ T5960] usb 2-1: config 9 interface 27 has no altsetting 0 [ 182.070340][ T5960] usb 2-1: language id specifier not provided by device, defaulting to English [ 182.084336][ T5960] usb 2-1: New USB device found, idVendor=16ab, idProduct=7811, bcdDevice=6d.12 [ 182.100802][ T5960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.110770][ T5960] usb 2-1: Product: syz [ 182.140007][ T5960] usb 2-1: Manufacturer: ⤃䱹ꚭ䒎ᴢ⎞ᮄ駒䓄眠몕艂▖⻗帖㌈屏巴᰸ᴩ恰靰뉬ࡍ湛톈ꂄ舟谶☍㇮띵엑濉▬⛕匽﷢찁㛾䈷র診䟩쟬਌匈쒍꥕竨볨咤岀衣邃盡낌狽䖟찾沏탚鵵ⴽ랮ᔵ畵ॖ㋘ [ 182.167760][ T5960] usb 2-1: SerialNumber: syz [ 182.278947][ T7307] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 182.307909][ T7307] qnx6: wrong signature (magic) in superblock #1. [ 182.319955][ T7307] qnx6: unable to read the first superblock [ 182.407223][ T7290] fuse: Bad value for 'fd' [ 182.470545][ T5960] usb 2-1: Could not find all expected endpoints [ 182.489592][ T5960] usb 2-1: USB disconnect, device number 11 [ 182.869610][ T7317] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.128327][ T7317] netlink: 'syz.4.307': attribute type 23 has an invalid length. [ 183.426810][ T7328] 8021q: VLANs not supported on ip_vti0 [ 183.888324][ T7331] mkiss: ax0: crc mode is auto. [ 184.337923][ T30] audit: type=1400 audit(1765176621.380:344): avc: denied { read write } for pid=7337 comm="syz.1.312" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 184.572833][ T30] audit: type=1400 audit(1765176621.380:345): avc: denied { open } for pid=7337 comm="syz.1.312" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 185.792644][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 185.872821][ T5830] Bluetooth: hci0: command 0x0406 tx timeout [ 185.874659][ T5827] Bluetooth: hci3: command 0x0406 tx timeout [ 185.878890][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 185.884996][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 186.641217][ T7370] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 186.672836][ T7370] qnx6: wrong signature (magic) in superblock #1. [ 186.689878][ T7371] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.699236][ T7370] qnx6: unable to read the first superblock [ 187.058472][ T7371] netlink: 'syz.1.319': attribute type 23 has an invalid length. [ 187.330710][ T7381] mkiss: ax0: crc mode is auto. [ 187.787043][ T7393] FAULT_INJECTION: forcing a failure. [ 187.787043][ T7393] name failslab, interval 1, probability 0, space 0, times 0 [ 187.801395][ T89] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 187.906577][ T7393] CPU: 0 UID: 0 PID: 7393 Comm: syz.2.326 Tainted: G L syzkaller #0 PREEMPT(full) [ 187.906604][ T7393] Tainted: [L]=SOFTLOCKUP [ 187.906610][ T7393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 187.906620][ T7393] Call Trace: [ 187.906626][ T7393] [ 187.906632][ T7393] dump_stack_lvl+0x16c/0x1f0 [ 187.906665][ T7393] should_fail_ex+0x512/0x640 [ 187.906689][ T7393] should_failslab+0xc2/0x120 [ 187.906712][ T7393] __kmalloc_cache_noprof+0x80/0x800 [ 187.906741][ T7393] ? selinux_netlbl_sock_genattr+0xe7/0x4e0 [ 187.906772][ T7393] ? selinux_netlbl_sock_genattr+0xe7/0x4e0 [ 187.906798][ T7393] selinux_netlbl_sock_genattr+0xe7/0x4e0 [ 187.906826][ T7393] selinux_netlbl_socket_post_create+0xb0/0x1b0 [ 187.906855][ T7393] selinux_socket_post_create+0x2f7/0x7d0 [ 187.906882][ T7393] ? __pfx_selinux_socket_post_create+0x10/0x10 [ 187.906906][ T7393] ? udp_init_sock+0x384/0x450 [ 187.906932][ T7393] ? inet_create+0x94f/0x1040 [ 187.906954][ T7393] security_socket_post_create+0x247/0x260 [ 187.906981][ T7393] __sock_create+0x70b/0x8a0 [ 187.907014][ T7393] udp_sock_create4+0xa6/0x450 [ 187.907045][ T7393] ? __pfx_udp_sock_create4+0x10/0x10 [ 187.907081][ T7393] fou_create.constprop.0+0x752/0x910 [ 187.907103][ T7393] ? __pfx_fou_create.constprop.0+0x10/0x10 [ 187.907124][ T7393] ? parse_nl_config+0x15b/0xa90 [ 187.907155][ T7393] fou_nl_add_doit+0xcf/0x130 [ 187.907174][ T7393] ? __pfx_fou_nl_add_doit+0x10/0x10 [ 187.907191][ T7393] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 187.907208][ T7393] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 187.907223][ T7393] genl_family_rcv_msg_doit+0x209/0x2f0 [ 187.907235][ T7393] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 187.907257][ T7393] ? bpf_lsm_capable+0x9/0x10 [ 187.907277][ T7393] ? security_capable+0x7e/0x260 [ 187.907303][ T7393] genl_rcv_msg+0x55c/0x800 [ 187.907323][ T7393] ? __pfx_genl_rcv_msg+0x10/0x10 [ 187.907336][ T7393] ? __pfx_fou_nl_add_doit+0x10/0x10 [ 187.907354][ T7393] netlink_rcv_skb+0x158/0x420 [ 187.907371][ T7393] ? __pfx_genl_rcv_msg+0x10/0x10 [ 187.907382][ T7393] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 187.907415][ T7393] ? netlink_deliver_tap+0x1ae/0xd30 [ 187.907442][ T7393] genl_rcv+0x28/0x40 [ 187.907465][ T7393] netlink_unicast+0x5aa/0x870 [ 187.907485][ T7393] ? __pfx_netlink_unicast+0x10/0x10 [ 187.907507][ T7393] netlink_sendmsg+0x8c8/0xdd0 [ 187.907525][ T7393] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.907555][ T7393] ____sys_sendmsg+0xa5d/0xc30 [ 187.907582][ T7393] ? copy_msghdr_from_user+0x10a/0x160 [ 187.907602][ T7393] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.907630][ T7393] ___sys_sendmsg+0x134/0x1d0 [ 187.907645][ T7393] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.907676][ T7393] __sys_sendmsg+0x16d/0x220 [ 187.907697][ T7393] ? __pfx___sys_sendmsg+0x10/0x10 [ 187.907734][ T7393] do_syscall_64+0xcd/0xf80 [ 187.907761][ T7393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.907772][ T7393] RIP: 0033:0x7fbca318f749 [ 187.907782][ T7393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.907793][ T7393] RSP: 002b:00007fbca13f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.907804][ T7393] RAX: ffffffffffffffda RBX: 00007fbca33e5fa0 RCX: 00007fbca318f749 [ 187.907811][ T7393] RDX: 0000000000000090 RSI: 00002000000001c0 RDI: 0000000000000003 [ 187.907817][ T7393] RBP: 00007fbca13f6090 R08: 0000000000000000 R09: 0000000000000000 [ 187.907824][ T7393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 187.907834][ T7393] R13: 00007fbca33e6038 R14: 00007fbca33e5fa0 R15: 00007fff0f134708 [ 187.907859][ T7393] [ 188.402632][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 188.582594][ T10] usb 4-1: Invalid ep0 maxpacket: 9 [ 188.748626][ T30] audit: type=1400 audit(1765176625.790:346): avc: denied { load_policy } for pid=7402 comm="syz.2.330" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 188.804724][ T7405] 8021q: VLANs not supported on ip_vti0 [ 188.818741][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 188.894878][ T7403] SELinux: failed to load policy [ 189.075037][ T89] usb 2-1: Using ep0 maxpacket: 16 [ 189.081698][ T89] usb 2-1: config 9 has an invalid interface number: 27 but max is 0 [ 189.089973][ T89] usb 2-1: config 9 has no interface number 0 [ 189.096284][ T89] usb 2-1: config 9 interface 27 has no altsetting 0 [ 189.103695][ T89] usb 2-1: language id specifier not provided by device, defaulting to English [ 189.114271][ T89] usb 2-1: New USB device found, idVendor=16ab, idProduct=7811, bcdDevice=6d.12 [ 189.124795][ T89] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.135975][ T89] usb 2-1: Product: syz [ 189.140419][ T89] usb 2-1: Manufacturer: ⤃䱹ꚭ䒎ᴢ⎞ᮄ駒䓄眠몕艂▖⻗帖㌈屏巴᰸ᴩ恰靰뉬ࡍ湛톈ꂄ舟谶☍㇮띵엑濉▬⛕匽﷢찁㛾䈷র診䟩쟬਌匈쒍꥕竨볨咤岀衣邃盡낌狽䖟찾沏탚鵵ⴽ랮ᔵ畵ॖ㋘ [ 189.152634][ T10] usb 4-1: Invalid ep0 maxpacket: 9 [ 189.171223][ T89] usb 2-1: SerialNumber: syz [ 189.182110][ T10] usb usb4-port1: attempt power cycle [ 189.219288][ T7412] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.349563][ T7412] netlink: 'syz.2.333': attribute type 23 has an invalid length. [ 189.390016][ T89] usb 2-1: Could not find all expected endpoints [ 189.406065][ T89] usb 2-1: USB disconnect, device number 12 [ 189.537327][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 189.563217][ T10] usb 4-1: Invalid ep0 maxpacket: 9 [ 189.668281][ T7416] FAULT_INJECTION: forcing a failure. [ 189.668281][ T7416] name fail_futex, interval 1, probability 0, space 0, times 1 [ 189.681209][ T7416] CPU: 0 UID: 0 PID: 7416 Comm: syz.2.334 Tainted: G L syzkaller #0 PREEMPT(full) [ 189.681238][ T7416] Tainted: [L]=SOFTLOCKUP [ 189.681244][ T7416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 189.681254][ T7416] Call Trace: [ 189.681260][ T7416] [ 189.681266][ T7416] dump_stack_lvl+0x16c/0x1f0 [ 189.681288][ T7416] should_fail_ex+0x512/0x640 [ 189.681303][ T7416] get_futex_key+0x1d0/0x15f0 [ 189.681320][ T7416] ? __pfx_get_futex_key+0x10/0x10 [ 189.681335][ T7416] ? get_pid_task+0xfc/0x250 [ 189.681351][ T7416] futex_wake+0xea/0x530 [ 189.681360][ T7416] ? proc_fail_nth_write+0x9f/0x220 [ 189.681373][ T7416] ? __pfx_futex_wake+0x10/0x10 [ 189.681386][ T7416] ? ksys_write+0x190/0x250 [ 189.681402][ T7416] do_futex+0x1e3/0x350 [ 189.681418][ T7416] ? __pfx_do_futex+0x10/0x10 [ 189.681437][ T7416] __x64_sys_futex+0x1e0/0x4c0 [ 189.681453][ T7416] ? fput+0x70/0xf0 [ 189.681469][ T7416] ? __pfx___x64_sys_futex+0x10/0x10 [ 189.681483][ T7416] ? ksys_write+0x1ac/0x250 [ 189.681496][ T7416] ? __pfx_ksys_write+0x10/0x10 [ 189.681515][ T7416] do_syscall_64+0xcd/0xf80 [ 189.681532][ T7416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.681544][ T7416] RIP: 0033:0x7fbca318f749 [ 189.681553][ T7416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.681563][ T7416] RSP: 002b:00007fbca13d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 189.681574][ T7416] RAX: ffffffffffffffda RBX: 00007fbca33e6090 RCX: 00007fbca318f749 [ 189.681581][ T7416] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000020000000cffc [ 189.681587][ T7416] RBP: 00007fbca13d5090 R08: 0000000000000000 R09: 0000000000000000 [ 189.681593][ T7416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.681600][ T7416] R13: 00007fbca33e6128 R14: 00007fbca33e6090 R15: 00007fff0f134708 [ 189.681614][ T7416] [ 189.875491][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 189.903337][ T10] usb 4-1: Invalid ep0 maxpacket: 9 [ 189.908953][ T10] usb usb4-port1: unable to enumerate USB device [ 190.457984][ T7424] mkiss: ax0: crc mode is auto. [ 190.773991][ T7429] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 190.791733][ T7429] qnx6: wrong signature (magic) in superblock #1. [ 190.909910][ T7429] qnx6: unable to read the first superblock [ 191.092383][ T7436] sctp: [Deprecated]: syz.2.337 (pid 7436) Use of struct sctp_assoc_value in delayed_ack socket option. [ 191.092383][ T7436] Use struct sctp_sack_info instead [ 191.418942][ T30] audit: type=1400 audit(1765176628.460:347): avc: denied { bind } for pid=7426 comm="syz.1.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 191.790495][ T7446] netlink: 12 bytes leftover after parsing attributes in process `syz.2.342'. [ 192.777086][ T7456] netlink: 12 bytes leftover after parsing attributes in process `syz.2.344'. [ 192.912832][ T5939] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 192.965214][ T7465] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.047555][ T30] audit: type=1400 audit(1765176630.090:348): avc: denied { append } for pid=7466 comm="syz.2.348" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 193.048006][ T7468] random: crng reseeded on system resumption [ 193.144041][ T30] audit: type=1400 audit(1765176630.090:349): avc: denied { open } for pid=7466 comm="syz.2.348" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 193.167427][ T5939] usb 4-1: Using ep0 maxpacket: 16 [ 193.175875][ T5939] usb 4-1: config 9 has an invalid interface number: 27 but max is 0 [ 193.183982][ T5939] usb 4-1: config 9 has no interface number 0 [ 193.190232][ T5939] usb 4-1: config 9 interface 27 has no altsetting 0 [ 193.198172][ T5939] usb 4-1: language id specifier not provided by device, defaulting to English [ 193.201097][ T7470] netlink: 'syz.1.347': attribute type 23 has an invalid length. [ 193.208801][ T5939] usb 4-1: New USB device found, idVendor=16ab, idProduct=7811, bcdDevice=6d.12 [ 193.225069][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.234467][ T5939] usb 4-1: Product: syz [ 193.238629][ T5939] usb 4-1: Manufacturer: ⤃䱹ꚭ䒎ᴢ⎞ᮄ駒䓄眠몕艂▖⻗帖㌈屏巴᰸ᴩ恰靰뉬ࡍ湛톈ꂄ舟谶☍㇮띵엑濉▬⛕匽﷢찁㛾䈷র診䟩쟬਌匈쒍꥕竨볨咤岀衣邃盡낌狽䖟찾沏탚鵵ⴽ랮ᔵ畵ॖ㋘ [ 193.262999][ T5939] usb 4-1: SerialNumber: syz [ 193.503327][ T5939] usb 4-1: Could not find all expected endpoints [ 193.764098][ T7475] mkiss: ax0: crc mode is auto. [ 193.805192][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.811072][ T5939] usb 4-1: USB disconnect, device number 15 [ 193.817353][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.143066][ T7481] 8021q: VLANs not supported on ip_vti0 [ 195.484859][ T7494] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 195.528213][ T7494] qnx6: wrong signature (magic) in superblock #1. [ 195.558830][ T7494] qnx6: unable to read the first superblock [ 195.806002][ T30] audit: type=1400 audit(1765176632.800:350): avc: denied { relabelfrom } for pid=7495 comm="syz.1.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 195.952253][ T30] audit: type=1400 audit(1765176632.800:351): avc: denied { relabelto } for pid=7495 comm="syz.1.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 196.328397][ T30] audit: type=1400 audit(1765176633.370:352): avc: denied { getopt } for pid=7506 comm="syz.2.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 197.488785][ T5939] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 197.672870][ T5939] usb 5-1: Using ep0 maxpacket: 16 [ 197.679433][ T5939] usb 5-1: config 9 has an invalid interface number: 27 but max is 0 [ 197.682632][ T5898] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 197.698472][ T5939] usb 5-1: config 9 has no interface number 0 [ 197.926275][ T5898] usb 3-1: Using ep0 maxpacket: 16 [ 197.978388][ T5939] usb 5-1: config 9 interface 27 has no altsetting 0 [ 197.999187][ T5939] usb 5-1: language id specifier not provided by device, defaulting to English [ 198.026796][ T5898] usb 3-1: unable to get BOS descriptor or descriptor too short [ 198.027474][ T5939] usb 5-1: New USB device found, idVendor=16ab, idProduct=7811, bcdDevice=6d.12 [ 198.087173][ T5898] usb 3-1: config 191 has an invalid interface number: 143 but max is 0 [ 198.106505][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.130030][ T5898] usb 3-1: config 191 has no interface number 0 [ 198.151211][ T7544] mkiss: ax0: crc mode is auto. [ 198.172686][ T5939] usb 5-1: Product: syz [ 198.188901][ T5898] usb 3-1: config 191 interface 143 has no altsetting 0 [ 198.190525][ T5939] usb 5-1: Manufacturer: ⤃䱹ꚭ䒎ᴢ⎞ᮄ駒䓄眠몕艂▖⻗帖㌈屏巴᰸ᴩ恰靰뉬ࡍ湛톈ꂄ舟谶☍㇮띵엑濉▬⛕匽﷢찁㛾䈷র診䟩쟬਌匈쒍꥕竨볨咤岀衣邃盡낌狽䖟찾沏탚鵵ⴽ랮ᔵ畵ॖ㋘ [ 198.274967][ T7553] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.326580][ T5898] usb 3-1: New USB device found, idVendor=12d1, idProduct=1c19, bcdDevice=23.2e [ 198.353644][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.372829][ T5898] usb 3-1: Product: syz [ 198.377037][ T5898] usb 3-1: Manufacturer: syz [ 198.381623][ T5898] usb 3-1: SerialNumber: syz [ 198.411953][ T5939] usb 5-1: SerialNumber: syz [ 198.580580][ T7556] netlink: 'syz.0.367': attribute type 23 has an invalid length. [ 198.605364][ T7537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.362'. [ 198.617444][ T7537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.629841][ T7537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.734061][ T5939] usb 5-1: Could not find all expected endpoints [ 198.756324][ T5939] usb 5-1: USB disconnect, device number 7 [ 199.415006][ T5898] usb-storage 3-1:191.143: USB Mass Storage device detected [ 199.560489][ T7581] /dev/nullb0: Can't open blockdev [ 199.589191][ T30] audit: type=1400 audit(1765176636.630:353): avc: denied { getopt } for pid=7576 comm="syz.4.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 199.696202][ T30] audit: type=1400 audit(1765176636.710:354): avc: denied { ioctl } for pid=7576 comm="syz.4.370" path="socket:[15901]" dev="sockfs" ino=15901 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 200.294853][ T5898] usb 3-1: USB disconnect, device number 11 [ 200.548135][ T7601] 8021q: VLANs not supported on ip_vti0 [ 200.847940][ T30] audit: type=1400 audit(1765176637.890:355): avc: denied { ioctl } for pid=7607 comm="syz.3.378" path="socket:[17042]" dev="sockfs" ino=17042 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 201.295495][ T7614] mkiss: ax0: crc mode is auto. [ 202.153167][ T5960] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 202.353603][ T5960] usb 3-1: Using ep0 maxpacket: 16 [ 202.370458][ T5960] usb 3-1: config 9 has an invalid interface number: 27 but max is 0 [ 202.380168][ T5960] usb 3-1: config 9 has no interface number 0 [ 202.389172][ T5960] usb 3-1: config 9 interface 27 has no altsetting 0 [ 202.396373][ T5960] usb 3-1: language id specifier not provided by device, defaulting to English [ 202.409888][ T5960] usb 3-1: New USB device found, idVendor=16ab, idProduct=7811, bcdDevice=6d.12 [ 202.419021][ T5960] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.429125][ T5960] usb 3-1: Product: syz [ 202.438071][ T5960] usb 3-1: Manufacturer: ⤃䱹ꚭ䒎ᴢ⎞ᮄ駒䓄眠몕艂▖⻗帖㌈屏巴᰸ᴩ恰靰뉬ࡍ湛톈ꂄ舟谶☍㇮띵엑濉▬⛕匽﷢찁㛾䈷র診䟩쟬਌匈쒍꥕竨볨咤岀衣邃盡낌狽䖟찾沏탚鵵ⴽ랮ᔵ畵ॖ㋘ [ 202.475981][ T5960] usb 3-1: SerialNumber: syz [ 202.523020][ T30] audit: type=1400 audit(1765176639.570:356): avc: denied { read } for pid=7636 comm="syz.0.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 202.689047][ T7640] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.853903][ T5960] usb 3-1: Could not find all expected endpoints [ 202.890024][ T5960] usb 3-1: USB disconnect, device number 12 [ 203.078222][ T7640] netlink: 'syz.4.386': attribute type 23 has an invalid length. [ 203.250017][ T7653] /dev/nullb0: Can't open blockdev [ 204.359774][ T30] audit: type=1400 audit(1765176641.400:357): avc: denied { execute } for pid=7665 comm="syz.4.393" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 204.504271][ T7671] mkiss: ax0: crc mode is auto. [ 205.152597][ T89] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 205.488448][ T89] usb 1-1: Using ep0 maxpacket: 32 [ 205.510656][ T89] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 205.521588][ T89] usb 1-1: config 0 has no interface number 0 [ 205.641966][ T89] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 205.738042][ T7701] 8021q: VLANs not supported on ip_vti0 [ 206.116251][ T89] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.136280][ T89] usb 1-1: Product: syz [ 206.162587][ T89] usb 1-1: Manufacturer: syz [ 206.236669][ T89] usb 1-1: SerialNumber: syz [ 206.302124][ T89] usb 1-1: config 0 descriptor?? [ 206.309808][ T89] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 206.515934][ T89] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 206.576515][ T89] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 206.923243][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 206.931769][ T117] usb 1-1: USB disconnect, device number 9 [ 206.941620][ T117] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 206.953288][ T5988] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 206.971963][ T117] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 207.007150][ T117] quatech2 1-1:0.51: device disconnected [ 207.080655][ T7713] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.112583][ T5988] usb 5-1: Using ep0 maxpacket: 16 [ 207.123214][ T5988] usb 5-1: config 9 has an invalid interface number: 27 but max is 0 [ 207.131503][ T5988] usb 5-1: config 9 has no interface number 0 [ 207.140468][ T5988] usb 5-1: config 9 interface 27 has no altsetting 0 [ 207.150505][ T5988] usb 5-1: language id specifier not provided by device, defaulting to English [ 207.177856][ T5988] usb 5-1: New USB device found, idVendor=16ab, idProduct=7811, bcdDevice=6d.12 [ 207.192729][ T5988] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.200726][ T5988] usb 5-1: Product: syz [ 207.205867][ T5988] usb 5-1: Manufacturer: ⤃䱹ꚭ䒎ᴢ⎞ᮄ駒䓄眠몕艂▖⻗帖㌈屏巴᰸ᴩ恰靰뉬ࡍ湛톈ꂄ舟谶☍㇮띵엑濉▬⛕匽﷢찁㛾䈷র診䟩쟬਌匈쒍꥕竨볨咤岀衣邃盡낌狽䖟찾沏탚鵵ⴽ랮ᔵ畵ॖ㋘ [ 207.232089][ T5988] usb 5-1: SerialNumber: syz [ 207.354154][ T30] audit: type=1400 audit(1765176644.390:358): avc: denied { ioctl } for pid=7717 comm="syz.3.405" path="socket:[17165]" dev="sockfs" ino=17165 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 207.417798][ T7713] netlink: 'syz.1.403': attribute type 23 has an invalid length. [ 207.597274][ T7725] comedi comedi3: comedi_test: 6 microvolt, 2047 microsecond waveform attached [ 207.649273][ T5988] usb 5-1: Could not find all expected endpoints [ 207.807583][ T5988] usb 5-1: USB disconnect, device number 8 [ 207.821281][ T7729] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 207.847130][ T7729] qnx6: wrong signature (magic) in superblock #1. [ 207.906307][ T7729] qnx6: unable to read the first superblock [ 208.471031][ T7738] mkiss: ax0: crc mode is auto. [ 210.347127][ T30] audit: type=1400 audit(1765176646.990:359): avc: denied { bind } for pid=7759 comm="syz.4.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 210.434656][ T7766] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.969617][ T7766] netlink: 'syz.2.417': attribute type 23 has an invalid length. [ 212.068920][ T7788] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28963 sclass=netlink_route_socket pid=7788 comm=syz.1.423 [ 212.100527][ T7788] vivid-003: disconnect [ 212.631291][ T7785] vivid-003: reconnect [ 213.633415][ T5939] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 214.519523][ T7798] /dev/nullb0: Can't open blockdev [ 214.652601][ T5939] usb 5-1: Using ep0 maxpacket: 16 [ 215.046943][ T5939] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 215.887627][ T5939] usb 5-1: config 0 has no interface number 0 [ 215.899318][ T5939] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.910264][ T5939] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.920021][ T5939] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 215.934566][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.937849][ T89] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 215.944333][ T5939] usb 5-1: config 0 descriptor?? [ 215.972676][ T5939] usb 5-1: can't set config #0, error -71 [ 216.002984][ T5939] usb 5-1: USB disconnect, device number 9 [ 216.170649][ T7808] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.352855][ T89] usb 3-1: Using ep0 maxpacket: 32 [ 216.874678][ T89] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 217.006281][ T89] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.530167][ T7826] 8021q: VLANs not supported on ip_vti0 [ 217.587160][ T89] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 218.122810][ T89] gspca_nw80x: reg_w err -110 [ 218.129530][ T89] nw80x 3-1:3.0: probe with driver nw80x failed with error -110 [ 218.166664][ T7832] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 218.201586][ T7832] qnx6: wrong signature (magic) in superblock #1. [ 218.217678][ T7832] qnx6: unable to read the first superblock [ 222.375457][ T5988] usb 3-1: USB disconnect, device number 13 [ 222.564586][ T30] audit: type=1400 audit(1765176659.610:360): avc: denied { setopt } for pid=7847 comm="syz.1.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 222.662695][ T30] audit: type=1400 audit(1765176659.630:361): avc: denied { bind } for pid=7847 comm="syz.1.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 223.621743][ T5988] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 223.893217][ T5988] usb 3-1: Using ep0 maxpacket: 16 [ 223.903987][ T5988] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 223.911953][ T5988] usb 3-1: config 0 has no interface number 0 [ 223.932584][ T5988] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.959645][ T5988] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.015546][ T5988] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 224.061974][ T5988] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.382252][ T5988] usb 3-1: config 0 descriptor?? [ 224.786185][ T7873] netlink: 'syz.2.442': attribute type 10 has an invalid length. [ 224.852049][ T7874] netlink: 'syz.2.442': attribute type 10 has an invalid length. [ 224.907332][ T7873] team0: Port device dummy0 added [ 224.910421][ T7879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.042115][ T7879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.820622][ T7874] team0: Port device dummy0 removed [ 226.278232][ T7873] netlink: 16 bytes leftover after parsing attributes in process `syz.2.442'. [ 226.296916][ T7874] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 226.318679][ T7893] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 226.333171][ T7888] 8021q: VLANs not supported on ip_vti0 [ 226.372876][ T7893] qnx6: wrong signature (magic) in superblock #1. [ 226.394984][ T7893] qnx6: unable to read the first superblock [ 226.904779][ T5988] usbhid 3-1:0.1: can't add hid device: -71 [ 226.914284][ T5988] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 226.924765][ T5988] usb 3-1: USB disconnect, device number 14 [ 230.074238][ T7934] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.098473][ T7937] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.199768][ T7935] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 230.278011][ T7935] qnx6: wrong signature (magic) in superblock #1. [ 230.486295][ T7935] qnx6: unable to read the first superblock [ 232.040528][ T7962] netlink: 'syz.4.464': attribute type 23 has an invalid length. [ 232.642405][ T117] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 232.878734][ T117] usb 3-1: Using ep0 maxpacket: 16 [ 233.037758][ T117] usb 3-1: config 9 has an invalid interface number: 27 but max is 0 [ 233.044990][ T7967] mkiss: ax0: crc mode is auto. [ 233.050813][ T117] usb 3-1: config 9 has no interface number 0 [ 233.057028][ T117] usb 3-1: config 9 interface 27 has no altsetting 0 [ 233.065342][ T117] usb 3-1: language id specifier not provided by device, defaulting to English [ 233.079542][ T117] usb 3-1: New USB device found, idVendor=16ab, idProduct=7811, bcdDevice=6d.12 [ 233.171633][ T117] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.191852][ T117] usb 3-1: Product: syz [ 233.919251][ T117] usb 3-1: Manufacturer: ⤃䱹ꚭ䒎ᴢ⎞ᮄ駒䓄眠몕艂▖⻗帖㌈屏巴᰸ᴩ恰靰뉬ࡍ湛톈ꂄ舟谶☍㇮띵엑濉▬⛕匽﷢찁㛾䈷র診䟩쟬਌匈쒍꥕竨볨咤岀衣邃盡낌狽䖟찾沏탚鵵ⴽ랮ᔵ畵ॖ㋘ [ 234.122930][ T117] usb 3-1: SerialNumber: syz [ 234.369982][ T7983] 8021q: VLANs not supported on ip_vti0 [ 235.097879][ T117] usb 3-1: Could not find all expected endpoints [ 235.124851][ T117] usb 3-1: USB disconnect, device number 15 [ 235.545283][ T7994] mkiss: ax0: crc mode is auto. [ 236.846928][ T8010] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 236.874313][ T8010] qnx6: wrong signature (magic) in superblock #1. [ 236.898813][ T8010] qnx6: unable to read the first superblock [ 240.439313][ T8033] mkiss: ax0: crc mode is auto. [ 240.753379][ T5939] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 240.943501][ T5939] usb 4-1: Using ep0 maxpacket: 16 [ 240.986548][ T5939] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 240.995725][ T5939] usb 4-1: config 0 has no interface number 0 [ 241.006706][ T5939] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.021860][ T5939] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.038163][ T5939] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 241.054523][ T5939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.215054][ T5939] usb 4-1: config 0 descriptor?? [ 241.547376][ T8063] netlink: 'syz.3.487': attribute type 10 has an invalid length. [ 241.644830][ T8065] netlink: 'syz.3.487': attribute type 10 has an invalid length. [ 241.752765][ T8063] team0: Port device dummy0 added [ 241.805883][ T8067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.816937][ T8067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.915592][ T8065] team0: Port device dummy0 removed [ 241.973525][ T8065] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 242.074146][ T8069] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 242.109765][ T8069] qnx6: wrong signature (magic) in superblock #1. [ 242.150576][ T8069] qnx6: unable to read the first superblock [ 242.238936][ T8072] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 242.282885][ T8072] qnx6: wrong signature (magic) in superblock #1. [ 242.312185][ T8063] netlink: 16 bytes leftover after parsing attributes in process `syz.3.487'. [ 242.527357][ T8072] qnx6: unable to read the first superblock [ 245.328637][ T8089] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.602618][ T89] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 245.903786][ T89] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 245.928889][ T89] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.947919][ T8099] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.999102][ T89] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 246.031362][ T89] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 246.085395][ T5939] usbhid 4-1:0.1: can't add hid device: -71 [ 246.089609][ T89] usb 3-1: Manufacturer: syz [ 246.118135][ T5939] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 246.150013][ T89] usb 3-1: config 0 descriptor?? [ 246.184992][ T5939] usb 4-1: USB disconnect, device number 16 [ 246.401491][ T89] rc_core: IR keymap rc-hauppauge not found [ 246.421811][ T89] Registered IR keymap rc-empty [ 246.862955][ T89] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 246.885722][ T89] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input5 [ 246.909547][ T89] usb 3-1: USB disconnect, device number 16 [ 247.061782][ T8089] netlink: 'syz.1.499': attribute type 23 has an invalid length. [ 247.257813][ T8099] netlink: 'syz.4.501': attribute type 23 has an invalid length. [ 247.594249][ T89] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 247.772614][ T5927] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 247.860916][ T89] usb 4-1: Using ep0 maxpacket: 16 [ 247.871584][ T89] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 247.891308][ T89] usb 4-1: config 0 has no interface number 0 [ 247.920358][ T89] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.932570][ T5927] usb 2-1: Using ep0 maxpacket: 16 [ 247.939735][ T5927] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 247.948091][ T5927] usb 2-1: config 0 has no interface number 0 [ 247.954321][ T5927] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.979712][ T89] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.033755][ T89] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 248.043413][ T5927] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.054382][ T5927] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 248.063721][ T89] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.077066][ T89] usb 4-1: config 0 descriptor?? [ 248.082065][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.109650][ T5927] usb 2-1: config 0 descriptor?? [ 248.369321][ T8132] netlink: 'syz.3.505': attribute type 10 has an invalid length. [ 248.391645][ T8133] netlink: 'syz.1.507': attribute type 10 has an invalid length. [ 248.467326][ T8134] netlink: 'syz.1.507': attribute type 10 has an invalid length. [ 248.471997][ T8133] team0: Port device dummy0 added [ 248.673525][ T8134] team0: Port device dummy0 removed [ 248.700158][ T8134] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 248.785686][ T8136] netlink: 'syz.3.505': attribute type 10 has an invalid length. [ 248.826681][ T8132] bond0: (slave dummy0): Releasing backup interface [ 248.905332][ T8137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.914094][ T8137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.942151][ T8133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.035335][ T8132] team0: Port device dummy0 added [ 249.046837][ T8133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.253577][ T8136] team0: Port device dummy0 removed [ 249.681681][ T8132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.505'. [ 249.708507][ T8133] netlink: 16 bytes leftover after parsing attributes in process `syz.1.507'. [ 249.735212][ T8132] openvswitch: netlink: Key type 4127 is out of range max 32 [ 249.820855][ T8143] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 249.851710][ T8143] qnx6: wrong signature (magic) in superblock #1. [ 249.871472][ T8136] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 249.873230][ T8143] qnx6: unable to read the first superblock [ 250.177917][ T8151] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 250.209683][ T8151] qnx6: wrong signature (magic) in superblock #1. [ 250.232680][ T8151] qnx6: unable to read the first superblock [ 250.327121][ T8148] mkiss: ax0: crc mode is auto. [ 251.301971][ T8157] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 251.344782][ T8157] qnx6: wrong signature (magic) in superblock #1. [ 251.400300][ T8157] qnx6: unable to read the first superblock [ 251.621612][ T89] usbhid 4-1:0.1: can't add hid device: -71 [ 251.644297][ T89] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 251.681475][ T89] usb 4-1: USB disconnect, device number 17 [ 252.309272][ T5927] usbhid 2-1:0.1: can't add hid device: -71 [ 252.333481][ T5927] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 252.366442][ T5927] usb 2-1: USB disconnect, device number 13 [ 252.390479][ T8171] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.111972][ T8176] netlink: 4436 bytes leftover after parsing attributes in process `syz.2.516'. [ 253.121728][ T8176] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 253.632355][ T8187] netlink: 'syz.0.517': attribute type 23 has an invalid length. [ 254.025737][ T8190] mkiss: ax0: crc mode is auto. [ 254.778407][ T8197] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 254.953382][ T8197] qnx6: wrong signature (magic) in superblock #1. [ 255.103976][ T8197] qnx6: unable to read the first superblock [ 255.235060][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.275858][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.133245][ T8214] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 256.191140][ T8214] qnx6: wrong signature (magic) in superblock #1. [ 256.226004][ T8214] qnx6: unable to read the first superblock [ 257.291321][ T8225] overlayfs: failed to get inode (-116) [ 257.302334][ T8225] overlayfs: failed to get inode (-116) [ 257.308373][ T8225] overlayfs: failed to get inode (-116) [ 257.321313][ T8225] overlayfs: failed to get inode (-116) [ 257.327581][ T8225] overlayfs: failed to get inode (-116) [ 257.341450][ T8225] overlayfs: failed to get inode (-116) [ 257.347590][ T8225] overlayfs: failed to get inode (-116) [ 257.847912][ T8232] netlink: 4436 bytes leftover after parsing attributes in process `syz.4.532'. [ 257.857583][ T8232] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 258.374562][ T8241] mkiss: ax0: crc mode is auto. [ 258.899357][ T8251] mkiss: ax0: crc mode is auto. [ 259.092000][ T8258] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 259.132896][ T8258] qnx6: wrong signature (magic) in superblock #1. [ 259.156891][ T8258] qnx6: unable to read the first superblock [ 261.493665][ T8266] mkiss: ax0: crc mode is auto. [ 261.665371][ T8278] FAULT_INJECTION: forcing a failure. [ 261.665371][ T8278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.678668][ T8278] CPU: 1 UID: 0 PID: 8278 Comm: syz.3.545 Tainted: G L syzkaller #0 PREEMPT(full) [ 261.678691][ T8278] Tainted: [L]=SOFTLOCKUP [ 261.678694][ T8278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 261.678701][ T8278] Call Trace: [ 261.678705][ T8278] [ 261.678709][ T8278] dump_stack_lvl+0x16c/0x1f0 [ 261.678731][ T8278] should_fail_ex+0x512/0x640 [ 261.678746][ T8278] _copy_from_user+0x2e/0xd0 [ 261.678759][ T8278] kstrtouint_from_user+0xd6/0x1d0 [ 261.678774][ T8278] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 261.678789][ T8278] ? __lock_acquire+0x436/0x2890 [ 261.678804][ T8278] ? lock_acquire+0x179/0x330 [ 261.678820][ T8278] proc_fail_nth_write+0x83/0x220 [ 261.678832][ T8278] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 261.678846][ T8278] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 261.678857][ T8278] vfs_write+0x2a0/0x11d0 [ 261.678871][ T8278] ? __pfx___mutex_lock+0x10/0x10 [ 261.678891][ T8278] ? __pfx_vfs_write+0x10/0x10 [ 261.678908][ T8278] ? __fget_files+0x20e/0x3c0 [ 261.678927][ T8278] ksys_write+0x12a/0x250 [ 261.678940][ T8278] ? __pfx_ksys_write+0x10/0x10 [ 261.678957][ T8278] do_syscall_64+0xcd/0xf80 [ 261.678975][ T8278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.678987][ T8278] RIP: 0033:0x7fdf0398e1ff [ 261.678996][ T8278] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 261.679007][ T8278] RSP: 002b:00007fdf047cb030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 261.679017][ T8278] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdf0398e1ff [ 261.679024][ T8278] RDX: 0000000000000001 RSI: 00007fdf047cb0a0 RDI: 0000000000000003 [ 261.679030][ T8278] RBP: 00007fdf047cb090 R08: 0000000000000000 R09: 0000000000000000 [ 261.679037][ T8278] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 261.679043][ T8278] R13: 00007fdf03be6218 R14: 00007fdf03be6180 R15: 00007ffe40496838 [ 261.679057][ T8278] [ 261.964098][ T5927] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 262.126532][ T5927] usb 5-1: Using ep0 maxpacket: 16 [ 262.144276][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.167519][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.182099][ T5927] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 262.195664][ T5927] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 262.205371][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.253595][ T5927] usb 5-1: config 0 descriptor?? [ 262.399968][ T5824] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 262.562552][ T5824] usb 2-1: Using ep0 maxpacket: 16 [ 262.581591][ T5824] usb 2-1: config 9 has an invalid interface number: 27 but max is 0 [ 262.591659][ T5824] usb 2-1: config 9 has no interface number 0 [ 262.610736][ T5824] usb 2-1: config 9 interface 27 has no altsetting 0 [ 262.628757][ T5824] usb 2-1: language id specifier not provided by device, defaulting to English [ 262.649917][ T5824] usb 2-1: New USB device found, idVendor=16ab, idProduct=7811, bcdDevice=6d.12 [ 262.680386][ T5824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.704282][ T5824] usb 2-1: Product: syz [ 262.709332][ T5824] usb 2-1: Manufacturer: ⤃䱹ꚭ䒎ᴢ⎞ᮄ駒䓄眠몕艂▖⻗帖㌈屏巴᰸ᴩ恰靰뉬ࡍ湛톈ꂄ舟谶☍㇮띵엑濉▬⛕匽﷢찁㛾䈷র診䟩쟬਌匈쒍꥕竨볨咤岀衣邃盡낌狽䖟찾沏탚鵵ⴽ랮ᔵ畵ॖ㋘ [ 262.737933][ T5824] usb 2-1: SerialNumber: syz [ 262.769691][ T8295] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 262.798103][ T8295] qnx6: wrong signature (magic) in superblock #1. [ 262.848892][ T8295] qnx6: unable to read the first superblock [ 263.818227][ T30] audit: type=1400 audit(1765176700.130:362): avc: denied { map } for pid=8270 comm="syz.4.544" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 263.841507][ T5927] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 263.869782][ T5927] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 263.899356][ T5927] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 263.933976][ T30] audit: type=1400 audit(1765176700.130:363): avc: denied { execute } for pid=8270 comm="syz.4.544" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 264.001305][ T5927] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 264.038590][ T5927] microsoft 0003:045E:07DA.0001: no inputs found [ 264.280827][ T5927] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 265.109819][ T8312] 8021q: VLANs not supported on ip_vti0 [ 265.132644][ T6340] usb 5-1: USB disconnect, device number 10 [ 265.287256][ T5824] usb 2-1: Could not find all expected endpoints [ 265.318563][ T5824] usb 2-1: USB disconnect, device number 14 [ 265.344609][ T5816] udevd[5816]: setting owner of /dev/bus/usb/002/014 to uid=0, gid=0 failed: No such file or directory [ 265.350848][ T8322] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 265.373791][ T8322] qnx6: wrong signature (magic) in superblock #1. [ 265.380295][ T8322] qnx6: unable to read the first superblock [ 268.645353][ T8336] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.584759][ T5927] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 270.743906][ T8366] netlink: 4436 bytes leftover after parsing attributes in process `syz.1.565'. [ 270.753397][ T8366] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 270.813443][ T5927] usb 4-1: Using ep0 maxpacket: 16 [ 271.030214][ T5927] usb 4-1: config 9 has an invalid interface number: 27 but max is 0 [ 271.042569][ T5927] usb 4-1: config 9 has no interface number 0 [ 271.048654][ T5927] usb 4-1: config 9 interface 27 has no altsetting 0 [ 271.134031][ T5927] usb 4-1: language id specifier not provided by device, defaulting to English [ 271.193067][ T5927] usb 4-1: New USB device found, idVendor=16ab, idProduct=7811, bcdDevice=6d.12 [ 271.220676][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.238261][ T5927] usb 4-1: Product: syz [ 271.242475][ T5927] usb 4-1: Manufacturer: ⤃䱹ꚭ䒎ᴢ⎞ᮄ駒䓄眠몕艂▖⻗帖㌈屏巴᰸ᴩ恰靰뉬ࡍ湛톈ꂄ舟谶☍㇮띵엑濉▬⛕匽﷢찁㛾䈷র診䟩쟬਌匈쒍꥕竨볨咤岀衣邃盡낌狽䖟찾沏탚鵵ⴽ랮ᔵ畵ॖ㋘ [ 271.361413][ T5927] usb 4-1: SerialNumber: syz [ 271.882001][ T8381] mkiss: ax0: crc mode is auto. [ 271.969268][ T5927] usb 4-1: Could not find all expected endpoints [ 271.982248][ T5927] usb 4-1: USB disconnect, device number 18 [ 272.992300][ T8385] mkiss: ax0: crc mode is auto. [ 274.525015][ T8410] mkiss: ax0: crc mode is auto. [ 275.660260][ T8420] 8021q: VLANs not supported on ip_vti0 [ 276.309829][ T8424] 8021q: VLANs not supported on ip_vti0 [ 277.010495][ T8427] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.194755][ T8432] /dev/nullb0: Can't open blockdev [ 277.996989][ T8444] sock: sock_timestamping_bind_phc: sock not bind to device [ 279.875682][ T8465] binder: 8464:8465 unknown command 0 [ 280.047392][ T8465] binder: 8464:8465 ioctl c0306201 200000000080 returned -22 [ 281.668567][ T30] audit: type=1400 audit(1765176718.710:364): avc: denied { ioctl } for pid=8475 comm="syz.0.593" path="socket:[20032]" dev="sockfs" ino=20032 ioctlcmd=0x941d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 281.764413][ T8488] mkiss: ax0: crc mode is auto. [ 282.072801][ T8499] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 282.688869][ T8505] ceph: No mds server is up or the cluster is laggy [ 282.696725][ T5960] libceph: connect (1)[c::]:6789 error -101 [ 282.709919][ T5960] libceph: mon0 (1)[c::]:6789 connect error [ 283.532322][ T30] audit: type=1400 audit(1765176720.570:365): avc: denied { mount } for pid=8517 comm="syz.0.600" name="/" dev="autofs" ino=20059 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 283.634829][ T8510] netlink: 'syz.4.596': attribute type 23 has an invalid length. [ 283.738086][ T30] audit: type=1400 audit(1765176720.690:366): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 285.542627][ T7795] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 286.046167][ T7795] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 286.069928][ T7795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.099402][ T7795] usb 2-1: Product: syz [ 286.133474][ T7795] usb 2-1: Manufacturer: syz [ 286.140422][ T30] audit: type=1400 audit(1765176723.180:367): avc: denied { create } for pid=8546 comm="syz.2.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 286.351010][ T7795] usb 2-1: SerialNumber: syz [ 286.408072][ T7795] usb 2-1: config 0 descriptor?? [ 286.424226][ T7795] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 286.437332][ T30] audit: type=1400 audit(1765176723.180:368): avc: denied { ioctl } for pid=8546 comm="syz.2.608" path="socket:[21253]" dev="sockfs" ino=21253 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 287.609548][ T8541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.627390][ T8541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.639968][ T7795] gspca_stk1135: reg_w 0x7 err -71 [ 287.646247][ T7795] gspca_stk1135: serial bus timeout: status=0x00 [ 287.653255][ T7795] gspca_stk1135: Sensor write failed [ 287.658611][ T7795] gspca_stk1135: serial bus timeout: status=0x00 [ 287.672694][ T7795] gspca_stk1135: Sensor write failed [ 287.678241][ T7795] gspca_stk1135: serial bus timeout: status=0x00 [ 287.684894][ T7795] gspca_stk1135: Sensor read failed [ 287.690248][ T7795] gspca_stk1135: serial bus timeout: status=0x00 [ 287.695306][ T30] audit: type=1400 audit(1765176724.740:369): avc: denied { mount } for pid=8572 comm="syz.4.615" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 287.696949][ T7795] gspca_stk1135: Sensor read failed [ 287.723611][ T7795] gspca_stk1135: Detected sensor type unknown (0x0) [ 287.730257][ T7795] gspca_stk1135: serial bus timeout: status=0x00 [ 287.738074][ T7795] gspca_stk1135: Sensor read failed [ 287.744225][ T7795] gspca_stk1135: serial bus timeout: status=0x00 [ 287.750724][ T7795] gspca_stk1135: Sensor read failed [ 287.756272][ T7795] gspca_stk1135: serial bus timeout: status=0x00 [ 287.763106][ T7795] gspca_stk1135: Sensor write failed [ 287.768468][ T7795] gspca_stk1135: serial bus timeout: status=0x00 [ 287.775266][ T7795] gspca_stk1135: Sensor write failed [ 287.780611][ T7795] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 287.809890][ T7795] usb 2-1: USB disconnect, device number 15 [ 287.872602][ T5939] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 288.046278][ T5939] usb 3-1: Using ep0 maxpacket: 32 [ 288.058715][ T5939] usb 3-1: config index 0 descriptor too short (expected 255, got 27) [ 288.067703][ T5939] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.080114][ T5939] usb 3-1: config 0 has no interfaces? [ 288.097609][ T5939] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 288.107207][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.116322][ T5939] usb 3-1: Product: syz [ 288.122473][ T5939] usb 3-1: Manufacturer: syz [ 288.131372][ T5939] usb 3-1: SerialNumber: syz [ 288.181836][ T5939] usb 3-1: config 0 descriptor?? [ 288.519792][ T8571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.530045][ T8571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.560223][ T8571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.593156][ T8571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.645912][ T5898] usb 3-1: USB disconnect, device number 17 [ 289.542745][ T30] audit: type=1400 audit(1765176726.580:370): avc: denied { bind } for pid=8601 comm="syz.0.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 289.649739][ T30] audit: type=1400 audit(1765176726.580:371): avc: denied { ioctl } for pid=8601 comm="syz.0.625" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5566 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 289.996666][ T5898] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 290.034056][ T8615] syzkaller1: entered promiscuous mode [ 290.043591][ T8615] syzkaller1: entered allmulticast mode [ 290.154206][ T5898] usb 5-1: config 0 has an invalid interface number: 78 but max is 0 [ 290.162591][ T5898] usb 5-1: config 0 has no interface number 0 [ 290.171340][ T5898] usb 5-1: New USB device found, idVendor=413c, idProduct=8138, bcdDevice=e1.2f [ 290.182009][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.190215][ T5898] usb 5-1: Product: syz [ 290.195003][ T5898] usb 5-1: Manufacturer: syz [ 290.199846][ T5898] usb 5-1: SerialNumber: syz [ 290.256180][ T5898] usb 5-1: config 0 descriptor?? [ 290.430537][ T30] audit: type=1400 audit(1765176727.470:372): avc: denied { create } for pid=8622 comm="syz.2.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 290.486715][ T5898] usb 5-1: USB disconnect, device number 11 [ 290.560562][ T30] audit: type=1400 audit(1765176727.500:373): avc: denied { write } for pid=8622 comm="syz.2.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 290.861291][ T30] audit: type=1400 audit(1765176727.900:374): avc: denied { write } for pid=8628 comm="syz.3.633" path="socket:[20359]" dev="sockfs" ino=20359 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 291.067571][ T8635] FAULT_INJECTION: forcing a failure. [ 291.067571][ T8635] name failslab, interval 1, probability 0, space 0, times 0 [ 291.067596][ T8635] CPU: 0 UID: 0 PID: 8635 Comm: syz.2.634 Tainted: G L syzkaller #0 PREEMPT(full) [ 291.067612][ T8635] Tainted: [L]=SOFTLOCKUP [ 291.067615][ T8635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 291.067622][ T8635] Call Trace: [ 291.067626][ T8635] [ 291.067630][ T8635] dump_stack_lvl+0x16c/0x1f0 [ 291.067650][ T8635] should_fail_ex+0x512/0x640 [ 291.067663][ T8635] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 291.067678][ T8635] should_failslab+0xc2/0x120 [ 291.067693][ T8635] kmem_cache_alloc_noprof+0x83/0x770 [ 291.067705][ T8635] ? skb_clone+0x190/0x3f0 [ 291.067722][ T8635] ? skb_clone+0x190/0x3f0 [ 291.067735][ T8635] skb_clone+0x190/0x3f0 [ 291.067749][ T8635] netlink_deliver_tap+0xabd/0xd30 [ 291.067769][ T8635] netlink_unicast+0x64c/0x870 [ 291.067787][ T8635] ? __pfx_netlink_unicast+0x10/0x10 [ 291.067808][ T8635] netlink_sendmsg+0x8c8/0xdd0 [ 291.067827][ T8635] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.067848][ T8635] ____sys_sendmsg+0xa5d/0xc30 [ 291.067866][ T8635] ? copy_msghdr_from_user+0x10a/0x160 [ 291.067880][ T8635] ? __pfx_____sys_sendmsg+0x10/0x10 [ 291.067903][ T8635] ___sys_sendmsg+0x134/0x1d0 [ 291.067917][ T8635] ? __pfx____sys_sendmsg+0x10/0x10 [ 291.067948][ T8635] __sys_sendmsg+0x16d/0x220 [ 291.067962][ T8635] ? __pfx___sys_sendmsg+0x10/0x10 [ 291.067984][ T8635] do_syscall_64+0xcd/0xf80 [ 291.068002][ T8635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.068013][ T8635] RIP: 0033:0x7fbca318f749 [ 291.068022][ T8635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.068033][ T8635] RSP: 002b:00007fbca13f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 291.068044][ T8635] RAX: ffffffffffffffda RBX: 00007fbca33e5fa0 RCX: 00007fbca318f749 [ 291.068051][ T8635] RDX: 0000000000008000 RSI: 0000200000000340 RDI: 0000000000000005 [ 291.068057][ T8635] RBP: 00007fbca13f6090 R08: 0000000000000000 R09: 0000000000000000 [ 291.068064][ T8635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.068070][ T8635] R13: 00007fbca33e6038 R14: 00007fbca33e5fa0 R15: 00007fff0f134708 [ 291.068084][ T8635] [ 291.360144][ T8647] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=42590 sclass=netlink_route_socket pid=8647 comm=syz.1.636 [ 292.132864][ T8639] MPI: mpi too large (130952 bits) [ 292.285061][ T30] audit: type=1400 audit(1765176729.330:375): avc: denied { ioctl } for pid=8638 comm="syz.3.637" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 292.837573][ T8667] overlay: filesystem on ./bus not supported as upperdir [ 292.937518][ T30] audit: type=1400 audit(1765176729.980:376): avc: denied { mounton } for pid=8670 comm="syz.1.647" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 292.937902][ T8672] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 292.972032][ T8672] qnx6: wrong signature (magic) in superblock #1. [ 292.987034][ T8673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.643'. [ 293.001454][ T8672] qnx6: unable to read the first superblock [ 293.832868][ T5898] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 294.039841][ T5898] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 294.115523][ T5898] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.272161][ T5898] usb 1-1: config 0 has no interface number 0 [ 294.372742][ T5898] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 28515, setting to 64 [ 294.472571][ T5898] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 294.516051][ T5898] usb 1-1: config 0 interface 52 has no altsetting 0 [ 294.546720][ T5898] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 294.582574][ T5898] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 294.627031][ T5898] usb 1-1: Manufacturer: syz [ 294.680158][ T5898] usb 1-1: config 0 descriptor?? [ 294.921140][ T5898] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input8 [ 295.179673][ T5928] usb 1-1: USB disconnect, device number 10 [ 295.179719][ C1] synaptics_usb 1-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 295.432643][ T30] audit: type=1400 audit(1765176732.440:377): avc: denied { create } for pid=8686 comm="syz.4.652" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 296.049197][ T30] audit: type=1400 audit(1765176733.090:378): avc: denied { unlink } for pid=5812 comm="syz-executor" name="file0" dev="tmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 296.236506][ T30] audit: type=1400 audit(1765176733.280:379): avc: denied { ioctl } for pid=8713 comm="syz.4.660" path="socket:[22552]" dev="sockfs" ino=22552 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 296.642637][ T5939] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 296.782613][ T5939] usb 4-1: device descriptor read/64, error -71 [ 297.092688][ T30] audit: type=1400 audit(1765176733.990:380): avc: denied { firmware_load } for pid=8728 comm="syz.1.664" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 297.222595][ T5939] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 297.231433][ T8737] mkiss: ax0: crc mode is auto. [ 297.352962][ T5939] usb 4-1: device descriptor read/64, error -71 [ 297.472954][ T5939] usb usb4-port1: attempt power cycle [ 297.753042][ T5928] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 297.812804][ T5939] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 297.857422][ T5939] usb 4-1: device descriptor read/8, error -71 [ 297.884276][ T8731] syz.1.664 (8731) used greatest stack depth: 18600 bytes left [ 298.082550][ T5928] usb 5-1: Invalid ep0 maxpacket: 64 [ 298.609091][ T5939] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 298.641291][ T5939] usb 4-1: device descriptor read/8, error -71 [ 298.666429][ T5928] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 298.763306][ T5939] usb usb4-port1: unable to enumerate USB device [ 298.872546][ T5928] usb 5-1: Invalid ep0 maxpacket: 64 [ 298.878648][ T5928] usb usb5-port1: attempt power cycle [ 299.242864][ T5928] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 299.500958][ T5927] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 299.516214][ T5928] usb 5-1: Invalid ep0 maxpacket: 64 [ 299.662656][ T5927] usb 2-1: Using ep0 maxpacket: 16 [ 299.669132][ T5927] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 299.677775][ T5927] usb 2-1: config 0 has no interface number 0 [ 299.684760][ T5927] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.708117][ T5927] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.735362][ T5927] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 299.746241][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.762628][ T5928] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 299.769185][ T5927] usb 2-1: config 0 descriptor?? [ 299.872203][ T5928] usb 5-1: Invalid ep0 maxpacket: 64 [ 299.878535][ T5928] usb usb5-port1: unable to enumerate USB device [ 299.919839][ T8774] netlink: 'syz.2.676': attribute type 10 has an invalid length. [ 299.927673][ T8774] netlink: 228 bytes leftover after parsing attributes in process `syz.2.676'. [ 300.177753][ T8779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.187174][ T8779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.401812][ T8779] netlink: 24 bytes leftover after parsing attributes in process `syz.1.672'. [ 301.393970][ T5960] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 301.421856][ T30] audit: type=1400 audit(1765176738.320:381): avc: denied { setopt } for pid=8790 comm="syz.3.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 301.662579][ T5960] usb 1-1: Using ep0 maxpacket: 16 [ 301.669679][ T5960] usb 1-1: config 9 has an invalid interface number: 27 but max is 0 [ 301.678140][ T5960] usb 1-1: config 9 has no interface number 0 [ 301.743378][ T5960] usb 1-1: config 9 interface 27 has no altsetting 0 [ 301.750774][ T5960] usb 1-1: language id specifier not provided by device, defaulting to English [ 302.225268][ T5960] usb 1-1: New USB device found, idVendor=16ab, idProduct=7811, bcdDevice=6d.12 [ 302.245108][ T5960] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.256663][ T5960] usb 1-1: Product: syz [ 302.369016][ T5960] usb 1-1: Manufacturer: ⤃䱹ꚭ䒎ᴢ⎞ᮄ駒䓄眠몕艂▖⻗帖㌈屏巴᰸ᴩ恰靰뉬ࡍ湛톈ꂄ舟谶☍㇮띵엑濉▬⛕匽﷢찁㛾䈷র診䟩쟬਌匈쒍꥕竨볨咤岀衣邃盡낌狽䖟찾沏탚鵵ⴽ랮ᔵ畵ॖ㋘ [ 302.467552][ T5927] usbhid 2-1:0.1: can't add hid device: -71 [ 302.505919][ T5927] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 302.529230][ T5960] usb 1-1: SerialNumber: syz [ 302.539401][ T5927] usb 2-1: USB disconnect, device number 16 [ 304.037338][ T5960] usb 1-1: Could not find all expected endpoints [ 304.055513][ T5960] usb 1-1: USB disconnect, device number 11 [ 304.171099][ T8816] mkiss: ax0: crc mode is auto. [ 304.216442][ T8822] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 304.327733][ T8822] qnx6: wrong signature (magic) in superblock #1. [ 304.355026][ T8822] qnx6: unable to read the first superblock [ 305.727474][ T8833] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 305.752382][ T8835] netlink: 'syz.0.692': attribute type 10 has an invalid length. [ 305.760266][ T8835] netlink: 228 bytes leftover after parsing attributes in process `syz.0.692'. [ 305.787054][ T8833] qnx6: wrong signature (magic) in superblock #1. [ 305.811304][ T8833] qnx6: unable to read the first superblock [ 306.462891][ T5960] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 306.620956][ T5960] usb 3-1: Using ep0 maxpacket: 16 [ 306.627516][ T5960] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 306.637012][ T8853] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 306.650600][ T5960] usb 3-1: config 0 has no interface number 0 [ 306.661945][ T5960] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.674364][ T8853] qnx6: wrong signature (magic) in superblock #1. [ 306.686758][ T8853] qnx6: unable to read the first superblock [ 306.695468][ T5960] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.892971][ T5960] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 306.902124][ T5960] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.934823][ T5960] usb 3-1: config 0 descriptor?? [ 307.216885][ T8858] mkiss: ax0: crc mode is auto. [ 307.222863][ T8854] 8021q: VLANs not supported on gre0 [ 307.315636][ T8860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.325398][ T8860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.586374][ T8860] netlink: 24 bytes leftover after parsing attributes in process `syz.2.695'. [ 309.582231][ T5960] usbhid 3-1:0.1: can't add hid device: -71 [ 309.602806][ T5960] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 309.634872][ T5960] usb 3-1: USB disconnect, device number 18 [ 310.089744][ T8887] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 310.135236][ T8887] qnx6: wrong signature (magic) in superblock #1. [ 310.153192][ T8887] qnx6: unable to read the first superblock [ 310.236770][ T8892] netlink: 'syz.1.705': attribute type 10 has an invalid length. [ 310.248818][ T8892] netlink: 228 bytes leftover after parsing attributes in process `syz.1.705'. [ 310.748488][ T5960] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 310.932656][ T5960] usb 3-1: Using ep0 maxpacket: 16 [ 310.939105][ T5960] usb 3-1: config 9 has an invalid interface number: 27 but max is 0 [ 310.947651][ T5960] usb 3-1: config 9 has no interface number 0 [ 310.954678][ T5960] usb 3-1: config 9 interface 27 has no altsetting 0 [ 310.961967][ T5960] usb 3-1: language id specifier not provided by device, defaulting to English [ 310.975557][ T5960] usb 3-1: New USB device found, idVendor=16ab, idProduct=7811, bcdDevice=6d.12 [ 310.985507][ T5960] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.994283][ T5960] usb 3-1: Product: syz [ 310.998472][ T5960] usb 3-1: Manufacturer: ⤃䱹ꚭ䒎ᴢ⎞ᮄ駒䓄眠몕艂▖⻗帖㌈屏巴᰸ᴩ恰靰뉬ࡍ湛톈ꂄ舟谶☍㇮띵엑濉▬⛕匽﷢찁㛾䈷র診䟩쟬਌匈쒍꥕竨볨咤岀衣邃盡낌狽䖟찾沏탚鵵ⴽ랮ᔵ畵ॖ㋘ [ 311.076128][ T5960] usb 3-1: SerialNumber: syz [ 311.089558][ T8902] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.799839][ T5960] usb 3-1: Could not find all expected endpoints [ 311.825811][ T5960] usb 3-1: USB disconnect, device number 19 [ 312.108269][ T8913] /dev/nullb0: Can't open blockdev [ 312.112722][ T8911] netlink: 124 bytes leftover after parsing attributes in process `syz.4.711'. [ 312.154944][ T8914] netlink: 'syz.1.708': attribute type 23 has an invalid length. [ 314.172627][ T7795] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 314.852603][ T7795] usb 5-1: Using ep0 maxpacket: 16 [ 314.928170][ T7795] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 314.955594][ T7795] usb 5-1: config 0 has no interface number 0 [ 315.076676][ T7795] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.098029][ T7795] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.108598][ T7795] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 315.129469][ T8938] netlink: 'syz.1.718': attribute type 10 has an invalid length. [ 315.137366][ T8938] netlink: 228 bytes leftover after parsing attributes in process `syz.1.718'. [ 315.167657][ T7795] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.427910][ T5928] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 315.445150][ T7795] usb 5-1: config 0 descriptor?? [ 315.582540][ T5928] usb 4-1: Using ep0 maxpacket: 16 [ 315.589611][ T5928] usb 4-1: unable to get BOS descriptor or descriptor too short [ 315.598661][ T5928] usb 4-1: config 159 has an invalid interface number: 195 but max is 0 [ 315.613455][ T5928] usb 4-1: config 159 has no interface number 0 [ 315.642672][ T5928] usb 4-1: config 159 interface 195 altsetting 5 endpoint 0x1 has invalid wMaxPacketSize 0 [ 315.673519][ T5928] usb 4-1: config 159 interface 195 has no altsetting 0 [ 315.722352][ T5928] usb 4-1: New USB device found, idVendor=17e9, idProduct=b889, bcdDevice=ec.5c [ 315.956213][ T8949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.021351][ T8949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.030932][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.049252][ T5928] usb 4-1: Product: syz [ 316.054293][ T5928] usb 4-1: Manufacturer: syz [ 316.058909][ T5928] usb 4-1: SerialNumber: syz [ 317.061540][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.070015][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.099635][ T5928] udl 4-1:159.195: [drm] Unrecognized vendor firmware descriptor [ 318.131188][ T5928] [drm:udl_init] *ERROR* Selecting channel failed [ 318.206687][ T5824] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 318.266910][ T5928] [drm] Initialized udl 0.0.1 for 4-1:159.195 on minor 2 [ 318.299867][ T5928] [drm] Initialized udl on minor 2 [ 318.406387][ T8962] netlink: 4436 bytes leftover after parsing attributes in process `syz.0.724'. [ 318.416299][ T8962] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 318.464307][ T5928] udl 4-1:159.195: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 318.472945][ T5824] usb 3-1: Using ep0 maxpacket: 16 [ 318.480344][ T5824] usb 3-1: config 9 has an invalid interface number: 27 but max is 0 [ 318.490882][ T5928] udl 4-1:159.195: [drm] Cannot find any crtc or sizes [ 318.498155][ T5824] usb 3-1: config 9 has no interface number 0 [ 318.505079][ T5939] udl 4-1:159.195: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 318.516936][ T5824] usb 3-1: config 9 interface 27 has no altsetting 0 [ 318.622874][ T5939] udl 4-1:159.195: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 318.631336][ T5928] usb 4-1: USB disconnect, device number 23 [ 318.637723][ T5824] usb 3-1: language id specifier not provided by device, defaulting to English [ 318.658839][ T5824] usb 3-1: New USB device found, idVendor=16ab, idProduct=7811, bcdDevice=6d.12 [ 318.780873][ T5939] udl 4-1:159.195: [drm] Cannot find any crtc or sizes [ 318.788207][ T5824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.801219][ T5824] usb 3-1: Product: syz [ 318.812552][ T5824] usb 3-1: Manufacturer: ⤃䱹ꚭ䒎ᴢ⎞ᮄ駒䓄眠몕艂▖⻗帖㌈屏巴᰸ᴩ恰靰뉬ࡍ湛톈ꂄ舟谶☍㇮띵엑濉▬⛕匽﷢찁㛾䈷র診䟩쟬਌匈쒍꥕竨볨咤岀衣邃盡낌狽䖟찾沏탚鵵ⴽ랮ᔵ畵ॖ㋘ [ 318.848609][ T5824] usb 3-1: SerialNumber: syz [ 319.188354][ T5824] usb 3-1: Could not find all expected endpoints [ 319.253406][ T5824] usb 3-1: USB disconnect, device number 20 [ 320.367735][ T8977] netlink: 4436 bytes leftover after parsing attributes in process `syz.2.726'. [ 320.377391][ T8977] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 321.104456][ T7795] usbhid 5-1:0.1: can't add hid device: -32 [ 321.275481][ T7795] usbhid 5-1:0.1: probe with driver usbhid failed with error -32 [ 321.752101][ T8990] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 321.789344][ T8990] qnx6: wrong signature (magic) in superblock #1. [ 321.862555][ T8990] qnx6: unable to read the first superblock [ 322.830809][ T6915] usb 5-1: USB disconnect, device number 16 [ 323.927742][ T9003] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.312192][ T9008] netlink: 'syz.4.733': attribute type 23 has an invalid length. [ 329.405231][ T9020] /dev/nullb0: Can't open blockdev [ 330.164783][ T9029] netlink: 'syz.2.739': attribute type 10 has an invalid length. [ 330.205983][ T9029] netlink: 228 bytes leftover after parsing attributes in process `syz.2.739'. [ 331.690138][ T9042] mkiss: ax0: crc mode is auto. [ 332.192694][ T9016] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 332.952560][ T9016] usb 3-1: Using ep0 maxpacket: 16 [ 332.976300][ T9016] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 332.996367][ T9016] usb 3-1: config 0 has no interface number 0 [ 333.003611][ T9016] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.016987][ T9016] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.042041][ T9016] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 333.052543][ T9016] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.064463][ T9016] usb 3-1: config 0 descriptor?? [ 333.698963][ T9060] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 333.711058][ T9060] qnx6: wrong signature (magic) in superblock #1. [ 333.742327][ T9060] qnx6: unable to read the first superblock [ 333.798649][ T9058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.833493][ T9058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.095611][ T9058] netlink: 16 bytes leftover after parsing attributes in process `syz.2.744'. [ 335.574652][ T9071] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 335.599229][ T9071] qnx6: wrong signature (magic) in superblock #1. [ 335.615717][ T9071] qnx6: unable to read the first superblock [ 336.522056][ T9016] usbhid 3-1:0.1: can't add hid device: -71 [ 336.528269][ T9016] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 336.701208][ T9080] netlink: 'syz.3.752': attribute type 10 has an invalid length. [ 336.742463][ T9080] netlink: 228 bytes leftover after parsing attributes in process `syz.3.752'. [ 337.155630][ T9016] usb 3-1: USB disconnect, device number 21 [ 337.193791][ T9084] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 337.209904][ T9086] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 337.248126][ T9086] qnx6: wrong signature (magic) in superblock #1. [ 337.262569][ T9086] qnx6: unable to read the first superblock [ 340.339841][ T9084] netlink: 'syz.2.753': attribute type 23 has an invalid length. [ 445.392453][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 445.399431][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9107/1:b..l [ 445.407670][ C1] rcu: (detected by 1, t=10502 jiffies, g=27289, q=464 ncpus=2) [ 445.415382][ C1] task:syz.2.753 state:R running task stack:26072 pid:9107 tgid:9083 ppid:5815 task_flags:0x400040 flags:0x00080000 [ 445.429430][ C1] Call Trace: [ 445.432716][ C1] [ 445.435641][ C1] ? __schedule+0x10b9/0x6150 [ 445.440323][ C1] __schedule+0x1139/0x6150 [ 445.444837][ C1] ? __pfx___schedule+0x10/0x10 [ 445.449687][ C1] ? mark_held_locks+0x49/0x80 [ 445.454450][ C1] preempt_schedule_irq+0x51/0x90 [ 445.459475][ C1] irqentry_exit+0x1d8/0x8c0 [ 445.464071][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 445.470044][ C1] RIP: 0010:lock_acquire+0x10/0x330 [ 445.475241][ C1] Code: 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 4d 89 cf 41 56 41 89 f6 41 55 <41> 89 d5 41 54 45 89 c4 55 89 cd 53 48 89 fb 48 83 ec 38 65 48 8b [ 445.494840][ C1] RSP: 0018:ffffc900045d72b0 EFLAGS: 00000246 [ 445.500904][ C1] RAX: ffffffff8232b7e3 RBX: 0000000000040004 RCX: 0000000000000002 [ 445.508868][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e3c9620 [ 445.516831][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 445.524791][ C1] R10: 0000000000000179 R11: ffff88801bbcd4b0 R12: ffffea0001409b00 [ 445.532752][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 445.540743][ C1] ? __mem_cgroup_uncharge_swap+0x23/0xf0 [ 445.546477][ C1] __mem_cgroup_uncharge_swap+0x37/0xf0 [ 445.552019][ C1] ? __mem_cgroup_uncharge_swap+0x23/0xf0 [ 445.557742][ C1] __read_swap_cache_async+0x3d0/0x500 [ 445.563195][ C1] ? __pfx___read_swap_cache_async+0x10/0x10 [ 445.569173][ C1] ? mlock_drain_local+0x22d/0x4e0 [ 445.574284][ C1] swap_cluster_readahead+0x432/0x770 [ 445.579654][ C1] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 445.585545][ C1] ? __lock_acquire+0x436/0x2890 [ 445.590494][ C1] ? get_vma_policy+0x242/0x3c0 [ 445.595346][ C1] swapin_readahead+0x160/0x1220 [ 445.600283][ C1] ? __pfx_swapin_readahead+0x10/0x10 [ 445.605649][ C1] ? swap_cache_get_folio+0x267/0x8e0 [ 445.611012][ C1] ? swap_cache_get_folio+0x267/0x8e0 [ 445.616373][ C1] ? swap_cache_get_folio+0x267/0x8e0 [ 445.621737][ C1] ? swap_cache_get_folio+0x267/0x8e0 [ 445.627099][ C1] ? swap_cache_get_folio+0x293/0x8e0 [ 445.632460][ C1] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 445.638168][ C1] ? __pfx_get_swap_device+0x10/0x10 [ 445.643449][ C1] ? rcu_read_unlock+0x2d/0xb0 [ 445.648207][ C1] ? do_swap_page+0x962/0x64a0 [ 445.652973][ C1] do_swap_page+0x962/0x64a0 [ 445.657564][ C1] ? __lock_acquire+0x436/0x2890 [ 445.662504][ C1] ? __pfx_do_swap_page+0x10/0x10 [ 445.667530][ C1] ? __pfx_default_wake_function+0x10/0x10 [ 445.673358][ C1] ? __lock_acquire+0x436/0x2890 [ 445.678295][ C1] ? rcu_is_watching+0x12/0xc0 [ 445.683054][ C1] ? ___pte_offset_map+0x175/0x380 [ 445.688165][ C1] __handle_mm_fault+0x19cb/0x2bb0 [ 445.693282][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 445.698742][ C1] ? __pte_offset_map_lock+0x174/0x310 [ 445.704194][ C1] ? find_held_lock+0x2b/0x80 [ 445.708876][ C1] ? follow_page_pte+0x5cf/0x1390 [ 445.713900][ C1] handle_mm_fault+0x3fe/0xad0 [ 445.718670][ C1] __get_user_pages+0x54e/0x3590 [ 445.723611][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 445.728988][ C1] populate_vma_page_range+0x267/0x3f0 [ 445.734449][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 445.740421][ C1] ? __pfx_find_vma_intersection+0x10/0x10 [ 445.746228][ C1] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 445.751941][ C1] __mm_populate+0x1d8/0x380 [ 445.756531][ C1] ? __pfx___mm_populate+0x10/0x10 [ 445.761639][ C1] ? up_write+0x282/0x4e0 [ 445.765967][ C1] do_mlock+0x441/0x800 [ 445.770117][ C1] ? __pfx_do_mlock+0x10/0x10 [ 445.774780][ C1] ? find_held_lock+0x2b/0x80 [ 445.779456][ C1] ? exc_page_fault+0x64/0xc0 [ 445.784135][ C1] ? do_user_addr_fault+0x843/0x1370 [ 445.789424][ C1] __x64_sys_mlock+0x59/0x80 [ 445.794012][ C1] do_syscall_64+0xcd/0xf80 [ 445.798517][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.804401][ C1] RIP: 0033:0x7fbca318f749 [ 445.808809][ C1] RSP: 002b:00007fbca13b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 445.817213][ C1] RAX: ffffffffffffffda RBX: 00007fbca33e6180 RCX: 00007fbca318f749 [ 445.825176][ C1] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 445.833136][ C1] RBP: 00007fbca3213f91 R08: 0000000000000000 R09: 0000000000000000 [ 445.841105][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 445.849076][ C1] R13: 00007fbca33e6218 R14: 00007fbca33e6180 R15: 00007fff0f134708 [ 445.857061][ C1] [ 445.860077][ C1] rcu: rcu_preempt kthread starved for 10531 jiffies! g27289 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 445.871263][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 445.881220][ C1] rcu: RCU grace-period kthread stack dump: [ 445.887089][ C1] task:rcu_preempt state:R running task stack:28440 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 445.900571][ C1] Call Trace: [ 445.903838][ C1] [ 445.906770][ C1] ? __schedule+0x10b9/0x6150 [ 445.911463][ C1] __schedule+0x1139/0x6150 [ 445.915972][ C1] ? __lock_acquire+0x436/0x2890 [ 445.920917][ C1] ? __mod_timer+0x8f2/0xd30 [ 445.925517][ C1] ? __pfx___schedule+0x10/0x10 [ 445.930367][ C1] ? find_held_lock+0x2b/0x80 [ 445.935045][ C1] ? schedule+0x2d7/0x3a0 [ 445.939374][ C1] schedule+0xe7/0x3a0 [ 445.943448][ C1] schedule_timeout+0x123/0x290 [ 445.948294][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 445.953661][ C1] ? __pfx_process_timeout+0x10/0x10 [ 445.958942][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 445.964751][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 445.970204][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 445.974966][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 445.980246][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 445.985449][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 445.990379][ C1] ? rcu_gp_cleanup+0x7c1/0xe90 [ 445.995232][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 446.001039][ C1] rcu_gp_kthread+0x26d/0x380 [ 446.005714][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 446.010907][ C1] ? rcu_is_watching+0x12/0xc0 [ 446.015661][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 446.020860][ C1] ? __kthread_parkme+0x19e/0x250 [ 446.025879][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 446.031075][ C1] kthread+0x3c5/0x780 [ 446.035143][ C1] ? __pfx_kthread+0x10/0x10 [ 446.039729][ C1] ? rcu_is_watching+0x12/0xc0 [ 446.044487][ C1] ? __pfx_kthread+0x10/0x10 [ 446.049072][ C1] ret_from_fork+0x983/0xb10 [ 446.053660][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 446.058769][ C1] ? __switch_to+0x7af/0x10d0 [ 446.063445][ C1] ? __pfx_kthread+0x10/0x10 [ 446.068032][ C1] ret_from_fork_asm+0x1a/0x30 [ 446.072806][ C1] [ 446.075816][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 446.082129][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 446.092618][ C1] Tainted: [L]=SOFTLOCKUP [ 446.096925][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 446.106969][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 446.112601][ C1] Code: 06 60 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 59 13 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 446.132200][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 446.138261][ C1] RAX: 0000000001ccfc25 RBX: 0000000000000001 RCX: ffffffff8b7706d9 [ 446.146226][ C1] RDX: 0000000000000000 RSI: ffffffff8dac200a RDI: ffffffff8bf24280 [ 446.154186][ C1] RBP: ffffed1003b56498 R08: 0000000000000001 R09: ffffed10170a673d [ 446.162147][ C1] R10: ffff8880b85339eb R11: ffff88801dab2ff0 R12: 0000000000000001 [ 446.170106][ C1] R13: ffff88801dab24c0 R14: ffffffff9087f7d0 R15: 0000000000000000 [ 446.178071][ C1] FS: 0000000000000000(0000) GS:ffff888124a09000(0000) knlGS:0000000000000000 [ 446.186994][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 446.193570][ C1] CR2: 0000001b303f8ff8 CR3: 0000000069c2d000 CR4: 00000000003526f0 [ 446.201534][ C1] Call Trace: [ 446.204808][ C1] [ 446.207732][ C1] default_idle+0x13/0x20 [ 446.212052][ C1] default_idle_call+0x6c/0xb0 [ 446.216808][ C1] do_idle+0x38d/0x510 [ 446.220883][ C1] ? __pfx_do_idle+0x10/0x10 [ 446.225470][ C1] ? do_idle+0x2e2/0x510 [ 446.229714][ C1] cpu_startup_entry+0x4f/0x60 [ 446.234475][ C1] start_secondary+0x21d/0x2d0 [ 446.239231][ C1] ? __pfx_start_secondary+0x10/0x10 [ 446.244514][ C1] common_startup_64+0x13e/0x148 [ 446.249459][ C1]