last executing test programs: 5m44.398555728s ago: executing program 1 (id=43): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000001b000)={0x16, 0x3, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f000001b0c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60ff, 0x0, 0x0, 0xfffffffffffffdcd, 0x0, 0x0, 0x2}, 0x50) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r5 = gettid() prlimit64(r5, 0x5, &(0x7f000001b140)={0x2, 0x1}, &(0x7f000001b180)) r6 = accept(r4, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r6) pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r7 = fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40081271, &(0x7f0000000000)=0x4000) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='gfs2\x00', 0x2208004, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r7, 0x0, 0x8e) mknodat$loop(r9, &(0x7f0000000140)='./file0\x00', 0x4, 0x1) r10 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x66ae57821630c605, 0x0) bind(r9, &(0x7f0000000280)=@hci={0x1f, 0x1}, 0x80) write$selinux_create(r10, &(0x7f0000000200)=@objname={'system_u:object_r:auditd_etc_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5', 0x20, 0x9, 0x20, './file0\x00'}, 0x64) 5m43.172628933s ago: executing program 1 (id=49): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x100010, 0xffffffffffffffff, 0x0) r3 = socket(0x2b, 0x1, 0x0) r4 = syz_io_uring_setup(0x110, &(0x7f0000000480)={0x0, 0xfad6, 0x400, 0x2}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000004340)=""/102376, 0x18fe8) io_uring_enter(r4, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000000000)={0xfeffffff, r3, 0x23, {0x3b4, 0x6d3}, 0x6}, 0x1) r8 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f7", 0xf4240}], 0x1}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x4, 0x4, 0x7ffc0002}]}) set_robust_list(0x0, 0x0) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) 5m42.226289828s ago: executing program 1 (id=52): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002580)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x400c491}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="54000000090605fb0000002000000000010000050900020073797a30000000000500010007000000080009400000000124000880100007800a0011000180c20000000000100007800a0011"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f0000000280)={0x6, 0x4, 0xbfc, 0x1, 0x6, 0x7f, 0x8, 0x7f, 0x8b, 0x0, 0x4, "1ee8ce6cb068b4e94bc1ed584ba7226d5666cc8d752f62a584de6bcd3b9903a7"}) unshare(0x6a040000) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) prlimit64(r5, 0x2, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f00000027c0)=""/102394, 0x18ffa) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TIOCPKT(r6, 0x5420, &(0x7f0000000200)=0x1b) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000024c0)={[0x35, 0x9, 0x2, 0x180, 0x3, 0xd, 0xf1, 0x50, 0x7fffffffffffb, 0x5, 0x6, 0x9, 0x8000000000000000, 0xf4a, 0x0, 0xbdb], 0xffff1001}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 5m39.164322473s ago: executing program 1 (id=62): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_setup(0x6, &(0x7f0000000100)) io_setup(0x6, &(0x7f0000001000)=0x0) io_getevents(r0, 0x3, 0xb3d, &(0x7f00000010c0)=[{}, {}, {}], &(0x7f0000001140)={0x0, 0x989680}) io_destroy(r0) 5m38.580381035s ago: executing program 1 (id=65): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000329bd7000fddbdf254400000008000300", @ANYRES32=r1, @ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x2000c050}, 0x40) symlink(&(0x7f0000000040)='./file0/file0/..\x00', &(0x7f0000000180)='./file0/file0/..\x00') r4 = getpid() r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x200, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x6032, 0x2021}, [@IFLA_LINK={0x8}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x15}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/timer\x00', 0x1800, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0xffffffffffffffff, 0x0}) io_uring_enter(r10, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x1511ccf5c96368b, 0x0, '\x00', r7, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_enter\x00', r13}, 0x18) setresgid(0xffffffffffffffff, 0x0, 0x0) syz_pidfd_open(r4, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 5m37.078207531s ago: executing program 1 (id=74): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x72, 0x2, 0x9, 0xa932}]}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce2200302b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r4, 0x400}, 0x14}, 0x1, 0xff1f, 0x0, 0x48050}, 0x4024091) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r5, 0x541c, &(0x7f0000000040)={0x5, 0x745, 0x5, 0xc262, 0x9}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x1c, r8, 0x303, 0x70bd2a, 0x25dfdbfb, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0xf0}, 0x8010) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r8, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x48}}, 0x1) 5m20.917335084s ago: executing program 32 (id=74): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x72, 0x2, 0x9, 0xa932}]}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce2200302b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r4, 0x400}, 0x14}, 0x1, 0xff1f, 0x0, 0x48050}, 0x4024091) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r5, 0x541c, &(0x7f0000000040)={0x5, 0x745, 0x5, 0xc262, 0x9}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x1c, r8, 0x303, 0x70bd2a, 0x25dfdbfb, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0xf0}, 0x8010) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r8, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x48}}, 0x1) 2m45.138425237s ago: executing program 3 (id=920): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x248}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (rerun: 64) r0 = getpid() r1 = syz_open_dev$loop(&(0x7f0000000680), 0x9, 0x103480) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x5, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a01000000000b0000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) (async) close(0x3) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff}, {0x0, 0x0, 0x40000000000000}, 0x0, 0xfffffffd, 0x0, 0x1, 0x2}}, 0xb8}}, 0x0) syz_emit_ethernet(0x396, &(0x7f0000000c80)=ANY=[@ANYBLOB="0180c20000050180c200000286dd6000000003603afffe800000000000000000000000000000ff020000000000000000000000000001"], 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000004940), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000004a40)={0x0, 0x0, &(0x7f0000004a00)={&(0x7f0000004980)={0x30, r6, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c080}, 0x4020) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000880)=@base={0x1e, 0x100, 0x80008, 0x2, 0xf002, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @value=r2}, 0x50) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000240)={0x7fff, 0x0}, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r0, r2, 0x0, 0x3, &(0x7f0000000580)=')}\x00'}, 0x30) (async) bpf$BPF_PROG_ATTACH(0x1c, &(0x7f0000000400)={@cgroup=r2, 0xffffffffffffffff, 0x30, 0x202c, 0xffffffffffffffff, @void, @void, @value=r8}, 0x20) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) (rerun: 64) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a3a0000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000054000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xf0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2m45.131270102s ago: executing program 3 (id=921): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) io_uring_setup(0x493d, &(0x7f00000002c0)={0x0, 0x6c02, 0x10000, 0x0, 0x20000404}) (async) r3 = io_uring_setup(0x493d, &(0x7f00000002c0)={0x0, 0x6c02, 0x10000, 0x0, 0x20000404}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$netlink(0x10, 0x3, 0x0) r4 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) quotactl$Q_SETQUOTA(0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x20000008001, 0x8, 0x400, 0x1ff, 0x3, 0x8, 0xcf, 0xff}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x7863cd0dcba64900, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x7863cd0dcba64900, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x0, 0x175f9c33697d48c5) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 2m44.790168024s ago: executing program 3 (id=923): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r1 = dup(r0) mmap(&(0x7f0000097000/0x1000)=nil, 0x1000, 0x4, 0x28011, r1, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_sctp(0x2, 0x1, 0x84) unshare(0x22020400) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xc3ac, 0xfffffffffffffff9, 0x0, 0x0, 0x4}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x2, 0x1, 0x0, "81914800fcffffffffffffa7d9fcea57000900000000000000000000002000", 0x7741611}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) setfsgid(r3) 2m44.78989068s ago: executing program 3 (id=924): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x18, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 2m44.782471571s ago: executing program 3 (id=925): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x442, 0x0) mmap(&(0x7f000081f000/0x2000)=nil, 0x2000, 0x3, 0x110, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, 0xffffffffffffffff, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0xffff}) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@deltaction={0x180, 0x31, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x70, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x79}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x68, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x100}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000180)=' ', 0x1}], 0x1}, 0x0) r8 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r8, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r8, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m41.175577697s ago: executing program 3 (id=939): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) bind$xdp(r0, &(0x7f0000000180)={0x2c, 0x1, r2}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f0000000000)=0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000007d000000000006536ca49c65eb576bfd26b292313e8a5cd9c504ad76815139a3c8c6a4656b2c1c59f7af805431c6c4e5dd67dc8be4e52aef98fa9c94fac6d64104fc4564acbac5ee72feddbfe04ddd01f400"/107, @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'tunl0\x00'}) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r7, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x400000000000000, 0x0, 0x493, 0x8000000, 0x0, 0x0, 0x0, 0xfffffffe, 0x400, 0x6000, 0x3, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r7, &(0x7f0000000340)={0x50, 0x0, r8, {0x7, 0x29, 0x0, 0x40, 0x80}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) 2m26.052969675s ago: executing program 33 (id=939): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) bind$xdp(r0, &(0x7f0000000180)={0x2c, 0x1, r2}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f0000000000)=0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000007d000000000006536ca49c65eb576bfd26b292313e8a5cd9c504ad76815139a3c8c6a4656b2c1c59f7af805431c6c4e5dd67dc8be4e52aef98fa9c94fac6d64104fc4564acbac5ee72feddbfe04ddd01f400"/107, @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'tunl0\x00'}) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r7, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x400000000000000, 0x0, 0x493, 0x8000000, 0x0, 0x0, 0x0, 0xfffffffe, 0x400, 0x6000, 0x3, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r7, &(0x7f0000000340)={0x50, 0x0, r8, {0x7, 0x29, 0x0, 0x40, 0x80}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) 5.126812281s ago: executing program 4 (id=1703): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008001}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x20}}, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000080)='\x00\x00\xef\xfaCvu\xb5i\x80\xab=-2\xb1\xc2\xab\\\xd6\x9c\xce\x15OW\xc7\xcb\xb5\"D\xf7\x15o\n\x80/\"6U\x8d\x0fY\x8cT\xdb%*3\xde\xea.\xdex\xd9\x9e{e\x9b\xf7\xf6\x14x~\x95\xe1w\x19\x8f\x0f\xf4h\x82)\x97\xcdA\x1f\xe0\xb1\a\x81n\xe0\x84\x14,9\xde9\xcd\xa2\x10\x19|\x00\x00P\xeaJ;*\x91\x91\xb7\xf8\x97\xabR|\xbc2\x8aG\xae\xf7\xee\xbb\xa7!\xaf\xce\x9e7\x18\xf0M-\xd2~\xb1\x001\v\xe1\xeb\xec\xd2H\xb8\xc4\x9b\xfe\xd7\n\x10\xc3\x88\x97\xd0*y\xb1\x1c\xed\xd9\x85\x8f`?H%\xe5\xf6Ai`\x9e\x9e\x9c\x1an\x04\xf0\x03\xcc}\x7fG:\xe2\xde\xda2\x14\x00i_\xae\xf2\xeb_ijn%\xe6\x84IB+/\xc4\x85\xe1\xb1\x04\xd65M\x00\xe2\x907j') (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000080)='\x00\x00\xef\xfaCvu\xb5i\x80\xab=-2\xb1\xc2\xab\\\xd6\x9c\xce\x15OW\xc7\xcb\xb5\"D\xf7\x15o\n\x80/\"6U\x8d\x0fY\x8cT\xdb%*3\xde\xea.\xdex\xd9\x9e{e\x9b\xf7\xf6\x14x~\x95\xe1w\x19\x8f\x0f\xf4h\x82)\x97\xcdA\x1f\xe0\xb1\a\x81n\xe0\x84\x14,9\xde9\xcd\xa2\x10\x19|\x00\x00P\xeaJ;*\x91\x91\xb7\xf8\x97\xabR|\xbc2\x8aG\xae\xf7\xee\xbb\xa7!\xaf\xce\x9e7\x18\xf0M-\xd2~\xb1\x001\v\xe1\xeb\xec\xd2H\xb8\xc4\x9b\xfe\xd7\n\x10\xc3\x88\x97\xd0*y\xb1\x1c\xed\xd9\x85\x8f`?H%\xe5\xf6Ai`\x9e\x9e\x9c\x1an\x04\xf0\x03\xcc}\x7fG:\xe2\xde\xda2\x14\x00i_\xae\xf2\xeb_ijn%\xe6\x84IB+/\xc4\x85\xe1\xb1\x04\xd65M\x00\xe2\x907j') prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={&(0x7f0000001400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2}}, &(0x7f00000014c0)=""/218, 0x1a, 0xda, 0x1}, 0x20) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)=0x0) sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0x2ba8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) (async) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) signalfd(0xffffffffffffffff, 0x0, 0x0) close_range(r2, r4, 0x2) inotify_init1(0x800) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rmdir(&(0x7f0000000100)='./control\x00') (async) rmdir(&(0x7f0000000100)='./control\x00') socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001900010000200000000000001c140000fe000001fdd26488366cd1b5d9c269e24bfb1abd0000000008000100000001003f5bd403cb8edb00229fdf1cc81cef"], 0x24}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x400000000000009, 0x7ffc, 0x80000001, 0x800000010000, 0x4, 0x4002004c2, 0x0, 0x5, 0x0, 0x3ffffc, 0xfffffffffffffffd, 0x7fffffff, 0x20000000009, 0xffff, 0xfffffffffffffff7], 0x100000}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300), 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000400)=0x2000108) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000400)=0x2000108) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3.651450109s ago: executing program 4 (id=1710): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) inotify_init() ioprio_set$pid(0x1, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 3.550780833s ago: executing program 2 (id=1712): socket$kcm(0x29, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r0, &(0x7f0000000180), 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_usb_connect(0x3, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000d3ccb510b1134200292b0102030109021b0001fc00000009040f0001e711e10009058317ff"], 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000000040)) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000440)=0xc, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000006c0)={{0x6, 0x5, 0x4, 0x7fff, 'syz0\x00', 0x2}, 0x0, [0x7ff, 0x6, 0xcc5, 0x63, 0x4, 0x8001, 0x7, 0x3, 0x7, 0x5d, 0x101, 0x7, 0x8, 0x8000000000000000, 0x8, 0x4, 0x6, 0x10001, 0x2, 0xd, 0x7, 0x1, 0x0, 0x1, 0x3, 0x4, 0xc187, 0x8, 0x7f, 0x3, 0x8000000000000001, 0x7ff, 0x40, 0x100000001, 0x6000000000000, 0x5, 0x5, 0x10000, 0x7fffffffffffffff, 0x5, 0x9, 0x2, 0xe1cc, 0x38, 0x6, 0x55, 0x8, 0x401, 0xffffffffffffffff, 0xffffffffffffffff, 0x7fffffff, 0xffffffffffff0001, 0x4, 0x8, 0x1, 0x7, 0x80000000, 0x5, 0x0, 0x8, 0x5, 0x7fffffffffffffff, 0xffffffff, 0x5, 0x3, 0x8, 0x3, 0x7, 0x400, 0x81, 0xa53c, 0xfff, 0xffff, 0x4, 0x4, 0x8001, 0x5, 0x4, 0x8, 0xfffffffffffffff9, 0x6, 0x5, 0x4, 0x0, 0x4, 0x9, 0xffffffffffffffff, 0x7, 0x200, 0x7e5f9488, 0x2, 0x2, 0x18, 0xfffffffffffffff7, 0x2, 0x7, 0x2, 0x5, 0x1, 0x1000, 0x8000000000000001, 0x5, 0x2e6, 0x4d800, 0x7, 0x2, 0x4, 0xdec6, 0x6, 0x0, 0x6, 0x6, 0x7, 0x9, 0x7, 0x5, 0x64a, 0x6, 0x7, 0x3ff, 0xffffffff, 0x401, 0x9f2b, 0xcc26, 0x1, 0x4, 0xe, 0x81]}) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x17ef, 0x60b5, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0xe8, 0x6, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x3, 0xe1, {0x9, 0x21, 0x1b74, 0xf, 0x1, {0x22, 0xbbe}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0x40}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x8, 0x5, 0xd0, 0xff, 0x79}, 0x137, &(0x7f00000001c0)={0x5, 0xf, 0x137, 0x5, [@generic={0x5b, 0x10, 0x3, "c14253e8e34820bbcd9f318681780ab1f9ff39156f4c533680682ac4682731921db3b730e854cd8396a0289e1531f705b3d9bf862dc040bed57972dd5cc79e1ca821675ec5588bf3f87b95de421cfedaff23f912874d9fad"}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x3, 0xff00, 0x55de, [0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x9, 0x5, 0x9}, @generic={0xa9, 0x10, 0x4, "750d179d40552273f5e78ec6197dcef577c8fd89e76e31c26ff2775efd98adc4e39001461df326bb5bfb1815a2dabec8bc45f1c61352e29cabc4566c38ca5471abc2df973f935ade9f6dccd6d061a735a570d9d90240f6aa663cbee8f101fdedfe822555b830a1cf0fa73495f5e13d5f64086c66646c22842140ba94b30f7f1ec28ddf765b058ec2ba2dc3b47063de918189fb84b4201b1853ee3033af18451dd90383e9b563"}, @ss_container_id={0x14, 0x10, 0x4, 0xa, "a891594c503ec47f8ce2a0c7b4f839f3"}]}, 0xa, [{0x4, &(0x7f0000000080)=@lang_id={0x4}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x80a}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0xc01}}, {0x4c, &(0x7f0000000340)=@string={0x4c, 0x3, "406abfa7cb09f245b50673dbdad89749bcffd2523388b5cef8113c9822b3f3b8d6e5d093ce2547167c579babd9fc3e7dac41d3f4eadfec7d6ab078755a311b2b5dfd06434c1c8bb856c8"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x380a}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x41b}}, {0x40, &(0x7f0000000500)=@string={0x40, 0x3, "08a74f8b95099ceedde7cc16458e00ae79bb1894bdac037d611b3423ed6d2f3565f51f5f9f7258a06c77ad50edb32834e8b244ca07791fd98fa79645549c"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x77, &(0x7f0000000580)=@string={0x77, 0x3, "a5b9dfa27c0e9bd5e725bbde076dd3cadfc6bbe65a0b26c786612ef472efc77a490c8879168c198a2f86d5e06a2a0db6ed2ca471303987aa2ceac1a1a3f6422877c4ea1e506e9dbbed8efd02bf5d8ead5c2cac0deef8611fc75cc8c9fd56d7311a05af48bfd3454cac897d28a899cc07df44382bc8"}}]}) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x400c0) 3.411042035s ago: executing program 4 (id=1715): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x6, "ffbc0d86e93a"}, 0x0}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000400000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a3a0000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000054000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000020000480140003"], 0xf0}}, 0x0) 3.118698112s ago: executing program 6 (id=1721): r0 = epoll_create1(0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000280)=[@nested_create_vm={0x12d, 0x18, 0x3}, @wr_drn={0x68, 0x20, {0x5, 0xf}}, @rdmsr={0x66, 0x18, {0x80f}}, @cpuid={0x64, 0x18, {0x400, 0xe4}}, @wr_crn={0x67, 0x20, {0x4, 0xfffffffffffffffc}}, @nested_create_vm={0x12d, 0x18}, @wrmsr={0x65, 0x20, {0x9b3, 0x6e000000}}, @nested_load_code={0x12e, 0x59, {0x2, "260f07b9800000c00f3235001000000f300f20d835200000000f22d82ef3430f09470f017b2367260f01f8c422fd4719b9660200000f320f01c566bad104b000ee"}}, @nested_load_code={0x12e, 0x84, {0x1, "364f0fc7680d48b800000100000000000f23c00f21f835010002000f23f8c7442400e4000000c7442402ad6ad161ff2c240f30c74424005b000000c744240200000000ff1c24d1949700000080660f38804fa8440f20c03505000000440f22c0470f30f04321848201000000"}}, @code={0xa, 0x3c, {"420f01c266471d0e00410f64f70f2181670f3266b8a9000f00d00f060f01c42ef30faed766bad004b000ee"}}, @nested_load_code={0x12e, 0x4c, {0x1, "f2adb9200800000f3266b801000f00d83e41f48fc808a2c83c66b81b008ec042d07df7660fda308f49e09890217b0000430f2219"}}, @set_irq_handler={0xc8, 0x20, {0x17, 0x1}}, @nested_create_vm={0x12d, 0x18, 0x1}], 0x25d}) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000100)={0x8, 0x0, [{0xbfc, 0x0, 0x9}, {0x393}, {0x1, 0x0, 0x6}, {0x94e, 0x0, 0x4}, {0x3f1, 0x0, 0xfffffffffffffffa}, {0xbaa, 0x0, 0x5}, {0x3be, 0x0, 0x7fffffffffffffff}, {0x619, 0x0, 0x8000000000000000}]}) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/dev_mcast\x00') pread64(r4, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) io_uring_register$IORING_REGISTER_NAPI(r4, 0x1b, &(0x7f0000000040)={0x3}, 0x1) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000000)=0x5, 0x4) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) epoll_create1(0x0) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000280)=[@nested_create_vm={0x12d, 0x18, 0x3}, @wr_drn={0x68, 0x20, {0x5, 0xf}}, @rdmsr={0x66, 0x18, {0x80f}}, @cpuid={0x64, 0x18, {0x400, 0xe4}}, @wr_crn={0x67, 0x20, {0x4, 0xfffffffffffffffc}}, @nested_create_vm={0x12d, 0x18}, @wrmsr={0x65, 0x20, {0x9b3, 0x6e000000}}, @nested_load_code={0x12e, 0x59, {0x2, "260f07b9800000c00f3235001000000f300f20d835200000000f22d82ef3430f09470f017b2367260f01f8c422fd4719b9660200000f320f01c566bad104b000ee"}}, @nested_load_code={0x12e, 0x84, {0x1, "364f0fc7680d48b800000100000000000f23c00f21f835010002000f23f8c7442400e4000000c7442402ad6ad161ff2c240f30c74424005b000000c744240200000000ff1c24d1949700000080660f38804fa8440f20c03505000000440f22c0470f30f04321848201000000"}}, @code={0xa, 0x3c, {"420f01c266471d0e00410f64f70f2181670f3266b8a9000f00d00f060f01c42ef30faed766bad004b000ee"}}, @nested_load_code={0x12e, 0x4c, {0x1, "f2adb9200800000f3266b801000f00d83e41f48fc808a2c83c66b81b008ec042d07df7660fda308f49e09890217b0000430f2219"}}, @set_irq_handler={0xc8, 0x20, {0x17, 0x1}}, @nested_create_vm={0x12d, 0x18, 0x1}], 0x25d}) (async) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000100)={0x8, 0x0, [{0xbfc, 0x0, 0x9}, {0x393}, {0x1, 0x0, 0x6}, {0x94e, 0x0, 0x4}, {0x3f1, 0x0, 0xfffffffffffffffa}, {0xbaa, 0x0, 0x5}, {0x3be, 0x0, 0x7fffffffffffffff}, {0x619, 0x0, 0x8000000000000000}]}) (async) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) (async) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/dev_mcast\x00') (async) pread64(r4, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) (async) io_uring_register$IORING_REGISTER_NAPI(r4, 0x1b, &(0x7f0000000040)={0x3}, 0x1) (async) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000000)=0x5, 0x4) (async) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async) 3.117084884s ago: executing program 0 (id=1722): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x8000000, 0x50) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xd2d9c0600356dfed, &(0x7f0000000180)={0x5, &(0x7f0000000140)=[{0x2, 0x0, 0x5, 0x2}, {0x3, 0x6d, 0xe2, 0xffff8000}, {0x2, 0x9a, 0x81, 0xe}, {0x7, 0x6, 0x2, 0x3}, {0x101, 0xe, 0x5, 0x1}]}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000300)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000680)=[@ip_tos_int={{0x18, 0x0, 0x1, 0x81}}], 0x18}}], 0x1, 0x20080000) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x8, 0xffffffff}]}, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x80000000}}, './file0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setresuid(0xffffffffffffffff, 0xee00, 0x0) syz_emit_ethernet(0x256, &(0x7f00000020c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "430093", 0x220, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x22, 0xa, "a78ce5400659808000ffffc0fe4023493b87aafaffffffffffffff2373247202fa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0502"}, {0x0, 0x1, "00000000000000000800ee00"}, {0x4, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x2, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}]}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r7, 0x89f4, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x1, 0x470bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r6, 0x64e10, 0x36a01}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PRIORITY={0x6, 0x2, 0xe}, @IFLA_BRPORT_BACKUP_PORT={0x8, 0x22, r6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c080}, 0x8002) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) 3.086184131s ago: executing program 6 (id=1723): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 64) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0xbe7, &(0x7f0000000400)={0x0, 0xe7a8, 0x80, 0x3, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) (async, rerun: 32) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) (async, rerun: 32) r5 = eventfd2(0xff, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000300)=r5, 0x1) socket(0x2b, 0x80801, 0x1) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async, rerun: 64) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 64) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r2, 0x0, 0x0, 0x0, 0x2}) (async) io_uring_enter(r2, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) 3.081385032s ago: executing program 0 (id=1724): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x101000) ptrace$ARCH_SET_CPUID(0x1e, r0, 0x0, 0x1012) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0445624, &(0x7f0000000300)={0xc0000000, 0x8, "9a555c14c966ee34d198b9aaaa7da81000000000000000fdb507a3c83e48e128", 0xffffffffffffffff, 0x204, 0x7f, 0x0, 0x9, 0x5, 0x2, 0x2, [0x80000009, 0x9, 0x4, 0xfffffffd]}) 3.001895167s ago: executing program 6 (id=1725): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={0x1}, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) fcntl$setstatus(r2, 0x4, 0x40800) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='veth0_to_batadv\x00', 0x10) ftruncate(r3, 0x2000009) sendfile(r2, r3, 0x0, 0x7ffff004) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, &(0x7f0000000440), &(0x7f0000000000)='GPL\x00', 0x3}, 0x94) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f00000001c0)=0xfffffffffffffff7, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000040)={'virt_wifi0\x00', @random="7c008dff00"}) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGSERIAL(r6, 0x541e, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/169}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='cubic', 0x6) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x14000, 0x0) ioctl$BLKGETSIZE64(r7, 0x80081272, &(0x7f00000003c0)) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r8, 0x5416, &(0x7f0000001100)) 2.925772314s ago: executing program 0 (id=1726): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d972a640b72040155ab7010243010902120000000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r2) sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000885}, 0x44040) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}) 2.879063013s ago: executing program 6 (id=1727): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) capset(&(0x7f0000000dc0)={0x20080522}, &(0x7f0000000e00)={0x0, 0x4, 0x4, 0x0, 0x80000, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) mount$nfs(0x0, 0x0, &(0x7f0000000680), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='acl,fsc=u']) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) 2.856559776s ago: executing program 4 (id=1729): r0 = syz_usb_connect(0x0, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000092e1300833280102d52a0000000109022200010000000009040000000e0100ed0724030100021007f8bcdda0e6f470b3"], 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000380)='pids.max\x00', 0x2, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000280)={@local, @dev, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x80, 0x11, 0x0, @private2, @ipv4={'\x00', '\xff\xff', @dev}, [], "17c11d58674e624c1a146558aab57fff"}}}}}}}, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0x100000001, 0x12) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0xd, 0x13, {0x13, 0x91534ee1db484f2b, "4aebced69f486f919c2be161e35cc280e2"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000300)={0x44, &(0x7f0000000100)={0x20, 0x14, 0x2b, "3fd2a671b7f533cd17cae93123b8571ab275cc5cb458614252919021c2d8923450b212eb6b6e355c0ab092"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000001c0)={0x20, 0x80, 0x1c, {0x1, 0x9, 0xfff, 0xfffc, 0x8000, 0x250a, 0x5, 0x3, 0x5, 0x310, 0x2, 0xfff2}}, &(0x7f0000000200)={0x20, 0x85, 0x4}, &(0x7f0000000240)={0x20, 0x83, 0x2}, &(0x7f0000000280)={0x20, 0x87, 0x2, 0x81}, &(0x7f00000002c0)={0x20, 0x89, 0x2, 0x1}}) 2.726544761s ago: executing program 5 (id=1731): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000380)={r0, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) sendmmsg(0xffffffffffffffff, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000016c0)}], 0x5}}], 0x1, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r1 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x8f) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r5}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r3, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x18, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xb, 0x10000}}}}}}}}, 0x52) 2.311767598s ago: executing program 0 (id=1732): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000202dd4ecc570a42900"/28, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYRESOCT=0x0, @ANYRES64=r3, @ANYBLOB="00000000100000001c001a80080002"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000bf080000000000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf91000000000000b6080000000000008500000085170000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.105048479s ago: executing program 5 (id=1733): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="84010000190001002abd7000fbdbdf251d0109004d0012800c00bf000d00000000000000ee3993ff3938adb6737c778a96d7a74496e2d0f798a5f4b66128566dfe72d4679e27fc2d7f86b4ca81ccc0e63e000000200106801c01a98018013e8014"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x404c81d) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x14, r1, 0x1, 0x2, 0x0, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x4008890}, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0xd0, r1, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000090}, 0x20000840) socket$inet6_mptcp(0xa, 0x1, 0x106) 1.638673691s ago: executing program 6 (id=1734): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000040)=0xfffbffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c520000c2", @ANYRES16=r4], 0x1c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4, @empty}, 0x10, 0x0, 0x0, &(0x7f0000001d00)=[@rdma_args={0x48, 0x114, 0x1, {{0x8000, 0xfffffffd}, {0x0}, 0x0, 0x0, 0x1b, 0x3}}], 0x48, 0x4008000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x44004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000054) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000900)=[{{&(0x7f0000000240)=@hci={0x1f, 0x3, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="fbeb2b4a2446520636018a69b752e5bac93def791c742d37bce0a8e53ecdd6d40aa392219f355a0135e065eaf8e5818e496841e44720891020e70d47621ffe0a87093e80d56ec5d56d56d443b725d3995855621b597b0d1bbb81e9fdd9da976c6d1ad7429c5d039c6a5c809236b861386f75e1c906a5e35d995940e9ac860dc3b662fc81a79fe34ecee3a0bb2ee051121a088a158f619600bb1569db5f6223d733fa681380fa43b273761c57ea24d22bd3222aeca809da6b37347e31125ba48130fcd05af716", 0xc6}, {&(0x7f0000000440)="80203e420dacfbbfaaf7cb44708d86c1923c4254237043f9a7b40fc63bb7c85dddf5c64b1beaa1b31d628b177cb24d2b9c6c28c0fe4665334a21c96166b1ead09a40dfceb138c7417430663a472e", 0x4e}, {&(0x7f00000004c0)="4eafacbfe257eda8afef587dfc9405d0392fc0dfa071152c938153881e5e1c41820d27c644f675b382f24b9719e0c1c41564fb9b0c907fe8429486362cb4e144af0f87bca8431b2b488c9f5b0a26f94f6cc2432edd3aef70dd3965f39b878e755f968ecacb60023b3eb15303213544ae62ce19ac5db11f9f54", 0x79}], 0x3, &(0x7f0000000600)=[{0x50, 0x102, 0x8, "cb62cdc409812efda8365439a9f2c67d48df77fda9542e8129c49c9bb51f5fbfa3b437f44ea235299dfa790ec68a273911836fe264e8e82fbccd86e74e84f291"}, {0x58, 0x6, 0x0, "a38037f4f95f6a8750688920c45e61351f2994d886c4451a776e6eeb3953e3487a63db6da32c5517f818318d5bb225e85b4bcf62d0c085df8dff7a9de1cfb8a305"}], 0xa8}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000006c0)="1d8479f7c6010b7054d166f5c532d73e5d376bc3dd684dd9f9133fb76d3497e4efe9ff3a0c65012fee8b2d2a61087cab3266dbd83c63b56bae66616c7672800ba46400cc92c607a134aa8f1a02e8de82917c6ec0f4d068f35f577b105914c8442085d1dd14421c52f6c5ee18b6e5bb5e2029066f5e02493718ccc546d5a2952d7e273f179cea7f92342d14415f34971f21135aadf099dda957d3541658cf34857e", 0xa1}, {&(0x7f0000000540)="00ce82dde32695d34ddd9c0e0516814736b7135d89b4c79f960c99fc0af2a24d5c0fa58e1da005a30f27f3c87d074bab3b94", 0x32}, {&(0x7f0000000780)="1f43fcc0aba8ee31c38148d9236dd1155bd6085c9ea0fcaf0f0ffdbbdcdbd2632a68f8cb227bb75124fe8c005e730bfaf728ad04e91486b0e4bf31c023df0137a0ed509678503aca74b31d110804ba01ba11851da17eb9ad5050b124dc00420ebc3c66f2a37cac116dae0a9c8adc041b5b2644c4641a30fafce1fc61989640d0f58a308b18147103e4058d1e1012ea01861dc007cfc74b366c1debbdd50732b6f160faa935cefef3a65f32233f47f846a0896e8af1cddeb91e", 0xb9}], 0x3, &(0x7f00000008c0)}}], 0x2, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, 0x0) ioctl$FIONREAD(r8, 0x541b, 0xfffffffffffffffe) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0xffffffffffffffff, 0xfffffffffffffe84) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$watch_queue(0x0, 0x80) 1.63839858s ago: executing program 5 (id=1735): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2a3003, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) quotactl_fd$Q_GETFMT(r1, 0x80000c02, r4, &(0x7f0000000080)) fchdir(r1) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x4c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4810}, 0x20000004) 1.611537205s ago: executing program 2 (id=1736): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x480, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000100)) ioprio_get$uid(0x3, 0xee01) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x101000) r2 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x22, 0x17, 0x4a, 0x20, 0x4b4, 0x861f, 0xf9d6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x73, 0xa7, 0x7a}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)={0x0, 0xd, 0x2, "f3a2"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0445624, &(0x7f0000000300)={0xc0000000, 0x8, "9a555c14c966ee34d198b9aaaa7da81000000000000000fdb507a3c83e48e128", 0xffffffffffffffff, 0x200, 0x7f, 0x0, 0x9, 0x5, 0x2, 0x2, [0x80008009, 0x2, 0x0, 0xfffffffd]}) 1.552380956s ago: executing program 5 (id=1737): r0 = socket$packet(0x11, 0x3, 0x300) bind$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNGETSNDBUF(r1, 0x800454d3, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/10, 0xa}}], 0x1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7}, 0x94) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000020000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000280)="0f01fab80d0000000f23c00f21f835020005000f23f864f30fc7b078f500549afdffffffc800efc4e2b137bd0800000066baf80cb8cafb2b8cef66befced66ed66660fc7b000a000000fc79fc7000000b91c0a0000b80070000066b8b4000f00d00f30670f01c30f30", 0x69}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000180)={0x0, 0x10d000}) sendmsg$key(0xffffffffffffffff, 0x0, 0x40000) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f00000000c0)={0x1fe, 0x0, &(0x7f0000001000/0x2000)=nil}) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x60, 0x10, 0x1, 0x0, 0x4, {0x6, 0x0, 0x8100, 0x0, {0xc3, 0xa}, {0x0, 0xe}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}}, {0xa, 0x1b, [0x0, 0x0, 0x7]}}]}, @TCA_RATE={0x6, 0x5, {0x9, 0x3}}]}, 0x60}}, 0x0) 1.321686167s ago: executing program 0 (id=1738): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0, 0xfffffffffffffdd3, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x20000015}, 0x4050) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000280)={0x0, 0x0, 0x80000}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000300)={0x0, 0x0, 0x0}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_uring_setup(0x3c91, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000340)=ANY=[@ANYRESOCT=r2], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f00000001c0)="b336cb41", 0x4}], 0x1) bind$bt_hci(r4, &(0x7f0000000200)={0x1f, 0xffff}, 0x6) r6 = getpgrp(0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xd, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) symlink(&(0x7f0000000140)='.\x00', &(0x7f0000000100)='./file0\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_clone(0x80000000, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0xfffffffffffffff7, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 1.275963334s ago: executing program 5 (id=1739): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303"], 0x0) syz_usb_connect$cdc_ncm(0x2, 0x97, &(0x7f0000000100)={{0x12, 0x1, 0x140, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x2, 0x1, 0xb, 0x10, 0xf, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, '0)C'}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x9, 0x4, 0x3}, {0x6, 0x24, 0x1a, 0x3, 0x25}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x8}, @mbim={0xc, 0x24, 0x1b, 0xbbc, 0x7, 0x9, 0x8d, 0x1, 0x6}, @mdlm={0x15, 0x24, 0x12, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0x2, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x5, 0x8f, 0xf0}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x5, 0x41}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x6, 0xff, 0xb, 0x10, 0x6}, 0x10, &(0x7f0000000200)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x3d, 0x7f, 0x9, 0x9}]}, 0x4, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x401}}, {0x22, &(0x7f0000000280)=@string={0x22, 0x3, "c06e5b44d92dcf361da0ccbe0948c998d3deecd520ac4ce828aea7c2e1626e6b"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x43f}}]}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_read(r0, 0xf, 0xffffffffffffffd2, 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='\x00', &(0x7f0000000080), 0x6000) 911.731382ms ago: executing program 4 (id=1740): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x6, "ffbc0d86e93a"}, 0x0}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000040000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a3a0000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000054000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000020000480140003"], 0xf0}}, 0x0) 606.72475ms ago: executing program 6 (id=1741): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @ldst={0x3, 0x0, 0x6}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000010ac054402000000002d7b0902240001000000000904000000030002bafc843be5e3ec7e4ad60816f080a5af5fd70513f804eb2aa5158b9b1c4e31896c9cb043d2e942f3f90f396918c05f24b448529e489832fd30e483f61329f64294f6f4093834141ee953e9c4be1e2cacaf707688c9c96065d7fda1192dd2ba318085ce"], 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd1, 0x0, 0x0) ioctl$SIOCGETSGCNT(r1, 0x89e1, &(0x7f0000000540)={@rand_addr=0x64010100, @rand_addr=0x64010102}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r5}, 0x10) listen(r4, 0x2) shutdown(r3, 0x0) connect$unix(r3, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r6 = accept(r4, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000002240)="ee", 0x1, 0x4404c0a8, 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x5, 0xffff, 0x2000}, 'syz0\x00', 0x10000032}) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, r0, 0x0, &(0x7f0000000040)) 606.368569ms ago: executing program 5 (id=1742): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x36, [{{0x9, 0x4, 0x0, 0xb9, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x800, 0x5, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x2, 0x1}}}}}]}}]}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x8, ':S`\v'}, @main=@item_4={0x3, 0x0, 0xa, "770146a1"}]}}, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="2101852c07c771d6b582b092d664bb287abc6537ab7f28749424ddf17d435b70a3e12f960bca2a944eaacf04c5f535dc7d24803811e2a8c7dd57da149ae53e26d5d50830c539ca2c09d9fff09e25f70076c6e8a7cddacd8ffe97a8be190d02147d1550b17b17d196c0c31ccb0f087f932d37e4ae6097491845520710b00c3b4ea4ebcfccf3efea070bdc480a581efc88516bca661dc10aec8069f8c22bc013a2e94702949e50012acd4a956260364fec68153fabe56df5afb646aa20b00ac25e9754025cf38e930844c7bb0ace15f549beaf20ccdd97ef77cfdb5375b8e109cb609a176befc833a2e1feef43a842a778a0b026a6427755c97000e185"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r4, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0xc04c000}, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x0, 0x1}, 0x8) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x10000}, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) lsm_get_self_attr(0x67, 0x0, &(0x7f0000000080), 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB="2800000000080d020000000000000000030000020600024088f700000900010073797a300000000049e119597e1bc4a7f4921f97881658a7471c9348d42531fce5f2de59874806cd4d9b9b815648a9e921fa66a66e59d4778f3e00bbd59d4883a0843567c3f58666b5f225d59406cd5d0fcb5033c2d8e68ad18c9547b4a2dd662863036af93063a4ac585c2cad6cf376291d84050617d78fbc8bea48088fce188d78757d9221aeee4dc8adbde413e03181b7b310d3b9d1e2fa9d82e1b925c283bbe35f87e2f7200ecb0e1fa1390c4af560353651bb2ce94fe978f964e9e4fe328b112bddfe0f8f584ce66ac000"], 0x28}, 0x1, 0x0, 0x0, 0x40005}, 0x4) r5 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r5, 0x110, 0x1, &(0x7f0000000080)='@%#$\x00', 0x5) 534.052701ms ago: executing program 2 (id=1743): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001100010025bd7000fedbdf25ac14140e00000000000004b43900ff002b85997edb8fd142daad7b8ed7f30553c61e83d440021ba0cac266c59416dfdf33442fa92a4810ca70258a95ee35b5a16a1561b6c0c916b0b23c9ad93910dada123c3b02f251cc4f3f3b1be487f719bcdcd653de058e92d601c997db8a151670568f30e6b877fb72d6ea6db36c"], 0x28}}, 0x4000) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = socket$kcm(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYRESOCT=r0], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000005600)='sys_enter\x00', r6, 0x0, 0x2}, 0x18) readahead(0xffffffffffffffff, 0x7, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="1400000016004163d25a80648c2594f91724fc60", 0x14}], 0x1}, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r7 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x138) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a00000040000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000800000000080000000006e"], 0x50) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x0) close(r8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x2000000000000366, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c01250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 183.298262ms ago: executing program 4 (id=1744): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000001b000)={0x16, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000950000000000000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f000001b0c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60ff, 0x0, 0x0, 0xfffffffffffffdcd, 0x0, 0x0, 0x2}, 0x50) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r4 = gettid() prlimit64(r4, 0x5, &(0x7f000001b140)={0x2, 0x1}, &(0x7f000001b180)) r5 = accept(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r5) pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r6 = fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40081271, &(0x7f0000000000)=0x4000) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='gfs2\x00', 0x2208004, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r6, 0x0, 0x8e) mknodat$loop(r8, &(0x7f0000000140)='./file0\x00', 0x4, 0x1) r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x66ae57821630c605, 0x0) bind(r8, &(0x7f0000000280)=@hci={0x1f, 0x1}, 0x80) write$selinux_create(r9, &(0x7f0000000200)=@objname={'system_u:object_r:auditd_etc_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5', 0x20, 0x9, 0x20, './file0\x00'}, 0x64) 118.818478ms ago: executing program 2 (id=1745): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r1, 0x1, 0x15, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x20}}, 0x20008845) 115.627319ms ago: executing program 0 (id=1746): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000980)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x50]}, 0x2a) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r5, 0x0, &(0x7f0000000280)=""/73}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000005000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r8, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x20000000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='ext4_sync_fs\x00', r9}, 0x10) sync() 94.267728ms ago: executing program 2 (id=1747): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xd) (async) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f0000000100)=""/190) 0s ago: executing program 2 (id=1748): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000000000040c50f80b000000000000109022400010000000009040000010300000009210000000122030009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) getpgrp(0xffffffffffffffff) (async) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) preadv(r2, &(0x7f0000000340)=[{&(0x7f0000000000)=""/135, 0x87}], 0x1, 0x5d, 0x40000003) syz_usb_control_io(r1, &(0x7f0000000f00)={0x2c, &(0x7f0000000d00)=ANY=[@ANYBLOB="0000000d2378d9ca42a24c92d311f15c"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r5, 0x0, 0x9, &(0x7f0000032680)="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", 0x1000) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r6, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) (async) inotify_init() (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES8=r0], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6022c00f8ffffffb703000008000000b70400000200000085000000330000009500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r8, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) ioctl$sock_ax25_SIOCDELRT(r6, 0x890c, &(0x7f0000000080)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @default, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) (async) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) (async) socket$inet6_tcp(0xa, 0x1, 0x0) kernel console output (not intermixed with test programs): 00200000 (at-a2150c) [ 270.450238][ T5896] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 270.605609][ T9585] netlink: 'syz.2.971': attribute type 4 has an invalid length. [ 270.640451][ T5896] usb 5-1: Using ep0 maxpacket: 8 [ 270.647068][ T5896] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 270.661109][ T5896] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 270.691318][ T9580] netlink: 76 bytes leftover after parsing attributes in process `syz.2.971'. [ 270.701348][ T5896] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 270.728961][ T5896] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 10982, setting to 1024 [ 270.741471][ T5896] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 270.770081][ T5896] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 270.794385][ T5896] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 270.812095][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.034967][ T5896] usb 5-1: usb_control_msg returned -32 [ 271.040951][ T5896] usbtmc 5-1:16.0: can't read capabilities [ 271.350678][ T9601] netlink: 4456 bytes leftover after parsing attributes in process `syz.2.980'. [ 271.362392][ T9602] netlink: 4456 bytes leftover after parsing attributes in process `syz.2.980'. [ 271.402066][ T9604] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 271.411956][ T44] usb 5-1: USB disconnect, device number 39 [ 271.692917][ T9610] 9p: Bad value for 'rfdno' [ 271.740796][ T9612] netlink: 'syz.0.984': attribute type 3 has an invalid length. [ 271.930232][ T5940] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 272.091428][ T5940] usb 3-1: Using ep0 maxpacket: 32 [ 272.097826][ T5940] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 272.106586][ T5940] usb 3-1: config 0 has no interface number 0 [ 272.118572][ T5940] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 272.128024][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.136497][ T5940] usb 3-1: Product: syz [ 272.140785][ T5940] usb 3-1: Manufacturer: syz [ 272.145396][ T5940] usb 3-1: SerialNumber: syz [ 272.153183][ T5940] usb 3-1: config 0 descriptor?? [ 272.163579][ T5940] smsc95xx v2.0.0 [ 272.620226][ T30] audit: type=1400 audit(1765534867.205:957): avc: denied { watch_mount } for pid=9644 comm="syz.0.996" path="/257" dev="tmpfs" ino=1350 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 272.830338][ T5940] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 272.853621][ T5940] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 273.065251][ T5940] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 273.090041][ T5940] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 273.108074][ T5940] usb 3-1: USB disconnect, device number 25 [ 273.930191][ T5940] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 274.100536][ T9705] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.1014'. [ 274.116901][ T5940] usb 3-1: Using ep0 maxpacket: 16 [ 274.224278][ T9706] netlink: 'syz.5.1013': attribute type 4 has an invalid length. [ 274.390442][ T44] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 274.590994][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 274.597791][ T44] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 274.610392][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 274.622683][ T44] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 274.643055][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.655626][ T44] usb 5-1: Product: syz [ 274.659947][ T44] usb 5-1: Manufacturer: syz [ 274.665475][ T44] usb 5-1: SerialNumber: syz [ 274.676304][ T44] usb 5-1: config 0 descriptor?? [ 274.800589][ T44] em28xx 5-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 275.524942][ T5940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.536035][ T5940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.539188][ T44] usb 5-1: USB disconnect, device number 40 [ 275.546178][ T5940] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 275.565013][ T5940] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 275.578466][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.596997][ T5940] usb 3-1: config 0 descriptor?? [ 276.149305][ T5940] HID 045e:07da: Invalid code 65791 type 1 [ 276.159689][ T5940] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000F/input/input16 [ 276.205118][ T5940] microsoft 0003:045E:07DA.000F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 276.562182][ T5940] usb 3-1: USB disconnect, device number 26 [ 277.798880][ T5940] usb 5-1: new low-speed USB device number 41 using dummy_hcd [ 277.806899][ T30] audit: type=1326 audit(1765534872.025:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9741 comm="syz.5.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e22f8f749 code=0x7ffc0000 [ 277.852811][ T30] audit: type=1326 audit(1765534872.025:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9741 comm="syz.5.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f5e22f8f749 code=0x7ffc0000 [ 277.891436][ T30] audit: type=1326 audit(1765534872.025:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9741 comm="syz.5.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e22f8f749 code=0x7ffc0000 [ 277.921027][ T30] audit: type=1326 audit(1765534872.025:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9741 comm="syz.5.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f5e22f8f749 code=0x7ffc0000 [ 277.947325][ T30] audit: type=1326 audit(1765534872.035:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9741 comm="syz.5.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e22f8f749 code=0x7ffc0000 [ 277.994861][ T5940] usb 5-1: Invalid ep0 maxpacket: 32 [ 277.999860][ T30] audit: type=1326 audit(1765534872.035:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9741 comm="syz.5.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f5e22f8f749 code=0x7ffc0000 [ 278.030422][ T30] audit: type=1326 audit(1765534872.035:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9741 comm="syz.5.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e22f8f749 code=0x7ffc0000 [ 278.055458][ T30] audit: type=1326 audit(1765534872.035:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9741 comm="syz.5.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e22f8f749 code=0x7ffc0000 [ 278.140215][ T5940] usb 5-1: new low-speed USB device number 42 using dummy_hcd [ 278.196900][ T9760] overlayfs: unescaped trailing colons in lowerdir mount option. [ 278.278567][ T30] audit: type=1400 audit(1765534872.895:966): avc: denied { read } for pid=9765 comm="syz.5.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 278.279345][ T9767] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1030'. [ 278.310280][ T9767] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1030'. [ 278.333550][ T5940] usb 5-1: Invalid ep0 maxpacket: 32 [ 278.339359][ T5940] usb usb5-port1: attempt power cycle [ 278.345935][ T9767] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1030'. [ 278.374380][ T9767] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1030'. [ 278.655150][ T9769] overlay: filesystem on ./bus is read-only [ 278.680263][ T5940] usb 5-1: new low-speed USB device number 43 using dummy_hcd [ 278.735094][ T5940] usb 5-1: Invalid ep0 maxpacket: 32 [ 278.900363][ T5940] usb 5-1: new low-speed USB device number 44 using dummy_hcd [ 278.931102][ T5940] usb 5-1: Invalid ep0 maxpacket: 32 [ 278.936730][ T5940] usb usb5-port1: unable to enumerate USB device [ 279.275344][ T9787] overlayfs: failed to clone upperpath [ 279.686013][ T30] audit: type=1400 audit(1765534874.305:967): avc: denied { lock } for pid=9798 comm="syz.2.1040" path="socket:[25211]" dev="sockfs" ino=25211 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 280.905565][ T5822] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 280.924659][ T5822] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 280.933112][ T5822] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 280.945294][ T5822] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 280.952944][ T5822] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 280.998900][ T9815] lo speed is unknown, defaulting to 1000 [ 281.171039][ T9815] chnl_net:caif_netlink_parms(): no params data found [ 281.190420][ T5925] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 281.253277][ T9828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1045'. [ 281.264789][ T9815] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.272599][ T9815] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.279777][ T9815] bridge_slave_0: entered allmulticast mode [ 281.286875][ T9815] bridge_slave_0: entered promiscuous mode [ 281.294378][ T9815] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.302380][ T9815] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.309484][ T9815] bridge_slave_1: entered allmulticast mode [ 281.327348][ T9815] bridge_slave_1: entered promiscuous mode [ 281.350300][ T5925] usb 3-1: Using ep0 maxpacket: 8 [ 281.356724][ T5925] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 281.374071][ T5925] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 281.388654][ T9815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.398976][ T5925] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 281.410835][ T9815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.429738][ T5925] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 281.455378][ T5925] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 281.468344][ T9815] team0: Port device team_slave_0 added [ 281.475327][ T9815] team0: Port device team_slave_1 added [ 281.482875][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.549181][ T9815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.561798][ T9815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.591325][ T9815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.620235][ T9815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.627248][ T9815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.657895][ T9815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.709782][ T9815] hsr_slave_0: entered promiscuous mode [ 281.719749][ T9815] hsr_slave_1: entered promiscuous mode [ 281.727006][ T9820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.750495][ T9820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.871967][ T9843] block nbd2: shutting down sockets [ 282.010242][ T9820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.029123][ T9820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.671350][ T9820] openvswitch: netlink: Missing key (keys=40, expected=100) [ 282.685257][ T5925] usb 3-1: usb_control_msg returned -71 [ 282.751366][ T5925] usbtmc 3-1:16.0: can't read capabilities [ 282.771549][ T5925] usb 3-1: USB disconnect, device number 27 [ 283.112181][ T5822] Bluetooth: hci2: command tx timeout [ 283.387375][ T9815] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 283.427757][ T9815] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 283.498276][ T9815] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 283.752071][ T9815] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 283.875709][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 283.875724][ T30] audit: type=1400 audit(1765534878.495:970): avc: denied { getattr } for pid=9860 comm="syz.4.1055" path="socket:[25509]" dev="sockfs" ino=25509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 283.948192][ T9873] gfs2: block size(16384) > page size(4096) not supported by filesystem [ 283.998611][ T9815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.009356][ T11] block nbd0: Possible stuck request ffff8880261a0000: control (read@0,1024B). Runtime 60 seconds [ 284.023451][ T11] block nbd0: Possible stuck request ffff8880261a0200: control (read@1024,1024B). Runtime 60 seconds [ 284.037865][ T11] block nbd0: Possible stuck request ffff8880261a0400: control (read@2048,1024B). Runtime 60 seconds [ 284.051883][ T11] block nbd0: Possible stuck request ffff8880261a0600: control (read@3072,1024B). Runtime 60 seconds [ 284.074600][ T9815] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.586322][ T6032] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.593408][ T6032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.658369][ T6032] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.665470][ T6032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.131442][ T5822] Bluetooth: hci2: command tx timeout [ 285.213802][ T9815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.339855][ T30] audit: type=1400 audit(1765534879.955:971): avc: denied { ioctl } for pid=9896 comm="syz.0.1065" path="socket:[25552]" dev="sockfs" ino=25552 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 285.372437][ T9897] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 285.447986][ T9897] CIFS mount error: No usable UNC path provided in device string! [ 285.447986][ T9897] [ 285.462072][ T9897] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 285.725064][ T9815] veth0_vlan: entered promiscuous mode [ 285.771651][ T9815] veth1_vlan: entered promiscuous mode [ 285.806252][ T9910] gfs2: block size(16384) > page size(4096) not supported by filesystem [ 285.880659][ T9815] veth0_macvtap: entered promiscuous mode [ 285.903174][ T9815] veth1_macvtap: entered promiscuous mode [ 285.948211][ T9815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.991139][ T9815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.032683][ T195] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.117981][ T195] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.137595][ T195] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.207490][ T195] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.341878][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.359124][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.399316][ T9920] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1071'. [ 286.507235][ T1528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.535042][ T1528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.576523][ T30] audit: type=1400 audit(1765534881.195:972): avc: denied { mounton } for pid=9815 comm="syz-executor" path="/root/syzkaller.CJVmty/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 286.789887][ T9926] uprobe: syz.0.1073:9926 failed to unregister, leaking uprobe [ 287.201834][ T5822] Bluetooth: hci2: command tx timeout [ 287.226794][ T30] audit: type=1400 audit(1765534881.255:973): avc: denied { mounton } for pid=9815 comm="syz-executor" path="/root/syzkaller.CJVmty/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=27109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 287.325642][ T30] audit: type=1400 audit(1765534881.395:974): avc: denied { mounton } for pid=9815 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 287.670038][ T6552] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 287.852914][ T9952] macvlan3: entered promiscuous mode [ 288.185893][ T9954] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1080'. [ 288.223173][ T9945] gfs2: block size(16384) > page size(4096) not supported by filesystem [ 288.280204][ T6552] usb 7-1: Using ep0 maxpacket: 16 [ 288.349626][ T6552] usb 7-1: New USB device found, idVendor=0b95, idProduct=178a, bcdDevice=fc.30 [ 288.365136][ T6552] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.382855][ T6552] usb 7-1: Product: syz [ 288.393495][ T6552] usb 7-1: Manufacturer: syz [ 288.406255][ T6552] usb 7-1: SerialNumber: syz [ 288.433410][ T6552] usb 7-1: config 0 descriptor?? [ 288.448323][ T6552] ax88179_178a 7-1:0.0: probe with driver ax88179_178a failed with error -22 [ 288.680541][ T6552] usb 7-1: USB disconnect, device number 2 [ 288.704022][ T30] audit: type=1400 audit(1765534883.315:975): avc: denied { getopt } for pid=9959 comm="syz.5.1084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 289.280942][ T5822] Bluetooth: hci2: command tx timeout [ 289.440927][ T5896] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 289.643178][ T5896] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 289.865084][ T6552] IPVS: starting estimator thread 0... [ 289.874493][ T5896] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 289.897029][ T9985] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1089'. [ 289.916496][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 289.940212][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 255, setting to 64 [ 289.959204][ T9991] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 289.971245][ T9991] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 289.981989][ T9986] IPVS: using max 44 ests per chain, 105600 per kthread [ 289.999143][ T5896] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 290.070187][ T5896] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 290.096252][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.119089][ T5896] usb 5-1: Product: syz [ 290.129341][ T5896] usb 5-1: Manufacturer: syz [ 290.148874][ T5896] usb 5-1: SerialNumber: syz [ 290.166236][ T5896] usb 5-1: config 0 descriptor?? [ 290.177794][ T9973] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 290.223686][ T5896] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input17 [ 290.268299][ C1] kbtab 5-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 290.356457][T10012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1098'. [ 290.502384][ T5896] usb 5-1: USB disconnect, device number 45 [ 290.502521][ C1] kbtab 5-1:0.0: kbtab_irq - usb_submit_urb failed with result -19 [ 291.014942][T10041] gfs2: block size(16384) > page size(4096) not supported by filesystem [ 291.268674][T10046] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1104'. [ 291.610960][T10052] bond3: entered promiscuous mode [ 291.615995][T10052] bond3: entered allmulticast mode [ 291.639395][T10052] 8021q: adding VLAN 0 to HW filter on device bond3 [ 291.761559][T10057] lo speed is unknown, defaulting to 1000 [ 291.795553][ T30] audit: type=1400 audit(1765534886.415:976): avc: denied { getopt } for pid=10063 comm="syz.0.1111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 291.862496][ T30] audit: type=1400 audit(1765534886.485:977): avc: denied { getopt } for pid=10074 comm="syz.4.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 292.464030][ T30] audit: type=1400 audit(1765534887.085:978): avc: denied { read append } for pid=10088 comm="syz.4.1117" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 292.630238][ T30] audit: type=1400 audit(1765534887.135:979): avc: denied { open } for pid=10088 comm="syz.4.1117" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 292.985826][T10111] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1123'. [ 292.997253][T10111] openvswitch: netlink: Tunnel attr 123 out of range max 16 [ 293.087638][T10113] lo speed is unknown, defaulting to 1000 [ 293.093541][ T976] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 293.155139][ T30] audit: type=1326 audit(1765534887.775:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10112 comm="syz.2.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de478f749 code=0x7ffc0000 [ 293.203135][ T30] audit: type=1326 audit(1765534887.775:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10112 comm="syz.2.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f7de478f749 code=0x7ffc0000 [ 293.251439][ T976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 293.283274][ T5896] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 293.296656][ T30] audit: type=1326 audit(1765534887.775:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10112 comm="syz.2.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de478f749 code=0x7ffc0000 [ 293.330446][ T30] audit: type=1326 audit(1765534887.775:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10112 comm="syz.2.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de478f749 code=0x7ffc0000 [ 293.333159][ T976] usb 5-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 293.365856][ T30] audit: type=1326 audit(1765534887.835:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10112 comm="syz.2.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7de478f749 code=0x7ffc0000 [ 293.389452][ T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.390498][ T30] audit: type=1326 audit(1765534887.845:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10112 comm="syz.2.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de478f749 code=0x7ffc0000 [ 293.423694][ T976] usb 5-1: config 0 descriptor?? [ 293.460453][ T5896] usb 7-1: Using ep0 maxpacket: 32 [ 293.466889][ T5896] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 293.475020][ T5896] usb 7-1: config 0 has no interface number 0 [ 293.483347][ T5896] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 293.490456][ T5935] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 293.500100][ T5896] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.517714][ T5896] usb 7-1: Product: syz [ 293.527151][ T5896] usb 7-1: Manufacturer: syz [ 293.534212][ T5896] usb 7-1: SerialNumber: syz [ 293.548832][ T5896] usb 7-1: config 0 descriptor?? [ 293.561024][ T5896] smsc95xx v2.0.0 [ 293.653782][ T5935] usb 3-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.666375][ T5935] usb 3-1: config 0 interface 0 has no altsetting 0 [ 293.673252][ T5935] usb 3-1: New USB device found, idVendor=056a, idProduct=00d2, bcdDevice= 0.00 [ 293.686836][ T5935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.699002][ T5935] usb 3-1: config 0 descriptor?? [ 293.845150][ T976] logitech 0003:046D:CA03.0010: unbalanced collection at end of report description [ 293.859373][ T976] logitech 0003:046D:CA03.0010: parse failed [ 293.865770][ T976] logitech 0003:046D:CA03.0010: probe with driver logitech failed with error -22 [ 293.966667][ T5896] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 293.977533][ T5896] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 294.079088][ T976] usb 5-1: USB disconnect, device number 46 [ 294.355366][T10113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1124'. [ 294.365693][T10113] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 294.392537][ T5896] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 294.421632][ T5896] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 294.445153][ T5896] usb 7-1: USB disconnect, device number 3 [ 294.454062][ T976] usb 3-1: USB disconnect, device number 28 [ 294.930065][ T5896] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 295.170495][ T5896] usb 5-1: Using ep0 maxpacket: 8 [ 295.453571][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 295.586666][ T5896] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 295.601325][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.611614][ T5896] usb 5-1: config 0 descriptor?? [ 295.955827][ T5896] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 296.428640][T10160] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1139'. [ 296.480186][T10165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1139'. [ 296.947994][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 296.948006][ T30] audit: type=1400 audit(1765534891.565:1014): avc: denied { remount } for pid=10169 comm="syz.6.1142" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 297.625547][T10188] netem: change failed [ 297.637608][T10188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.691038][T10188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.927471][T10188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.938674][T10188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.036929][ T5896] usb 5-1: USB disconnect, device number 47 [ 298.421868][T10203] gfs2: block size(16384) > page size(4096) not supported by filesystem [ 298.695246][T10206] gfs2: block size(16384) > page size(4096) not supported by filesystem [ 299.092785][ T30] audit: type=1400 audit(1765534893.695:1015): avc: denied { getopt } for pid=10207 comm="syz.2.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 299.806330][T10225] xt_CT: You must specify a L4 protocol and not use inversions on it [ 300.253220][ T30] audit: type=1400 audit(1765534894.875:1016): avc: denied { mount } for pid=10233 comm="syz.0.1163" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 300.471757][T10237] lo speed is unknown, defaulting to 1000 [ 301.092193][T10254] siw: device registration error -23 [ 301.444261][ T976] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 301.534943][T10253] syz.0.1170 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 301.630251][ T976] usb 3-1: Using ep0 maxpacket: 8 [ 301.645433][ T976] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 301.660432][ T976] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 301.920301][ T976] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 301.950352][ T976] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 10982, setting to 1024 [ 302.001319][ T976] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 302.042711][ T976] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 302.096688][ T976] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 302.125572][ T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.195992][ T30] audit: type=1400 audit(1765534896.815:1017): avc: denied { getopt } for pid=10267 comm="syz.6.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 302.369957][ T976] usb 3-1: usb_control_msg returned -32 [ 302.399355][ T976] usbtmc 3-1:16.0: can't read capabilities [ 302.590361][ T5896] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 302.729746][T10284] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 302.741098][ T44] usb 3-1: USB disconnect, device number 29 [ 302.761593][ T5896] usb 7-1: config 0 has an invalid interface number: 190 but max is 0 [ 302.771745][ T5896] usb 7-1: config 0 has an invalid descriptor of length 188, skipping remainder of the config [ 302.783112][ T5896] usb 7-1: config 0 has no interface number 0 [ 302.792747][ T5896] usb 7-1: too many endpoints for config 0 interface 190 altsetting 210: 235, using maximum allowed: 30 [ 302.812205][ T5896] usb 7-1: config 0 interface 190 altsetting 210 has 0 endpoint descriptors, different from the interface descriptor's value: 235 [ 302.826577][ T5896] usb 7-1: config 0 interface 190 has no altsetting 0 [ 302.836337][ T5896] usb 7-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 302.845691][ T5896] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.853967][ T5896] usb 7-1: Product: syz [ 302.858636][ T5896] usb 7-1: Manufacturer: syz [ 302.864762][ T5896] usb 7-1: SerialNumber: syz [ 302.878533][ T5896] usb 7-1: config 0 descriptor?? [ 303.458969][ T5896] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 303.523076][ T5896] snd-usb-audio 7-1:0.190: probe with driver snd-usb-audio failed with error -2 [ 303.533547][ T30] audit: type=1400 audit(1765534898.145:1018): avc: denied { create } for pid=10287 comm="syz.5.1180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 303.565743][ T6039] udevd[6039]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.190/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 303.583149][ T5896] usb 7-1: USB disconnect, device number 4 [ 303.710385][ T30] audit: type=1400 audit(1765534898.335:1019): avc: denied { bind } for pid=10294 comm="syz.5.1182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 304.065398][T10299] gfs2: block size(16384) > page size(4096) not supported by filesystem [ 304.468303][T10308] netlink: 27 bytes leftover after parsing attributes in process `syz.5.1185'. [ 304.552607][ T5822] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 305.231390][T10327] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 305.239862][T10327] overlayfs: overlapping lowerdir path [ 306.050225][ T5896] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 306.350754][ T6552] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 306.360200][ T5896] usb 3-1: Using ep0 maxpacket: 16 [ 306.366842][ T5896] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.418989][ T5896] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.438924][ T5896] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 306.462552][ T5896] usb 3-1: config 0 interface 0 has no altsetting 0 [ 306.480723][ T5896] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 306.494619][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.520387][ T5896] usb 3-1: config 0 descriptor?? [ 306.521676][ T6552] usb 7-1: config 0 has an invalid interface number: 190 but max is 0 [ 306.575640][ T6552] usb 7-1: config 0 has an invalid descriptor of length 188, skipping remainder of the config [ 306.625224][ T6552] usb 7-1: config 0 has no interface number 0 [ 306.631723][ T6552] usb 7-1: too many endpoints for config 0 interface 190 altsetting 210: 235, using maximum allowed: 30 [ 306.644112][ T6552] usb 7-1: config 0 interface 190 altsetting 210 has 0 endpoint descriptors, different from the interface descriptor's value: 235 [ 306.667989][ T6552] usb 7-1: config 0 interface 190 has no altsetting 0 [ 306.679992][ T6552] usb 7-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 306.690203][ T6552] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.708796][ T6552] usb 7-1: Product: syz [ 306.714356][ T6552] usb 7-1: Manufacturer: syz [ 306.719172][ T6552] usb 7-1: SerialNumber: syz [ 306.728001][ T6552] usb 7-1: config 0 descriptor?? [ 306.939509][ T5896] hid (null): unknown global tag 0x40 [ 306.946564][ T5896] hid (null): invalid report_count 29955 [ 306.955026][ T5896] hid (null): bogus close delimiter [ 306.964308][T10334] netlink: 'syz.6.1194': attribute type 1 has an invalid length. [ 306.972139][ T5896] hid (null): invalid report_size -1695756178 [ 307.000897][ T5896] hid (null): usage index exceeded [ 307.012385][T10334] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1194'. [ 307.352751][ T6552] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 307.378769][ T6552] snd-usb-audio 7-1:0.190: probe with driver snd-usb-audio failed with error -2 [ 307.397329][ T6552] usb 7-1: USB disconnect, device number 5 [ 307.522752][T10358] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1200'. [ 307.576483][ T6039] udevd[6039]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.190/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 307.798747][ T30] audit: type=1400 audit(1765534902.415:1020): avc: denied { watch_with_perm } for pid=10365 comm="syz.4.1203" path="/216/bus" dev="tmpfs" ino=1150 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 307.823976][T10368] overlayfs: missing 'lowerdir' [ 307.834046][ T30] audit: type=1400 audit(1765534902.445:1021): avc: denied { append } for pid=10365 comm="syz.4.1203" name="pfkey" dev="proc" ino=4026533059 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 307.931892][T10370] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1204'. [ 308.036815][ T30] audit: type=1400 audit(1765534902.645:1022): avc: denied { read } for pid=10371 comm="syz.6.1205" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 308.076628][ T30] audit: type=1400 audit(1765534902.645:1023): avc: denied { open } for pid=10371 comm="syz.6.1205" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 308.922115][ T6552] usb 3-1: USB disconnect, device number 30 [ 309.204042][ T976] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 309.652166][ T6552] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 309.671772][ T976] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.687186][ T976] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 309.700343][ T976] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 309.711604][ T976] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 309.732125][ T976] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 309.793460][ T976] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 309.812221][ T6552] usb 5-1: Using ep0 maxpacket: 32 [ 309.884315][ T976] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 309.893413][ T6552] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.906844][ T6552] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.947882][ T30] audit: type=1400 audit(1765534904.565:1024): avc: denied { relabelfrom } for pid=10393 comm="syz.0.1212" name="NETLINK" dev="sockfs" ino=29224 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 309.948105][T10394] SELinux: Context system_u:object_r:var_auth_t:s0 is not valid (left unmapped). [ 309.982327][ T30] audit: type=1400 audit(1765534904.605:1025): avc: denied { relabelto } for pid=10393 comm="syz.0.1212" name="NETLINK" dev="sockfs" ino=29224 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:var_auth_t:s0" [ 310.034838][ T976] usb 7-1: Product: syz [ 310.040207][ T976] usb 7-1: Manufacturer: syz [ 310.045229][ T6552] usb 5-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 310.054769][ T976] usb 7-1: SerialNumber: syz [ 310.060986][ T6552] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.079815][ T976] usb 7-1: config 0 descriptor?? [ 310.088822][ T6552] usb 5-1: config 0 descriptor?? [ 310.347871][T10389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.681743][ T976] radio-si470x 7-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 310.688574][ T976] radio-si470x 7-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 310.692115][T10389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.712382][T10401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1215'. [ 310.724711][ T976] radio-si470x 7-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 310.739395][ T976] radio-si470x 7-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 310.748634][ T976] radio-si470x 7-1:0.0: probe with driver radio-si470x failed with error -5 [ 310.772858][T10401] netlink: 'syz.2.1215': attribute type 30 has an invalid length. [ 310.781218][ T976] usb 7-1: USB disconnect, device number 6 [ 310.818135][ T6569] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.828714][T10401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1215'. [ 310.838127][ T6569] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.851657][T10401] netlink: 'syz.2.1215': attribute type 30 has an invalid length. [ 310.859566][ T6569] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.872842][ T6569] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.881844][T10401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1215'. [ 310.890768][T10401] netlink: 'syz.2.1215': attribute type 30 has an invalid length. [ 310.904582][T10401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1215'. [ 310.913612][T10401] netlink: 'syz.2.1215': attribute type 30 has an invalid length. [ 310.933575][T10401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1215'. [ 310.945190][ T6552] hid_parser_main: 8 callbacks suppressed [ 310.945206][ T6552] elo 0003:04E7:0009.0013: unknown main item tag 0x0 [ 310.969965][ T6552] elo 0003:04E7:0009.0013: unknown main item tag 0x0 [ 310.978225][T10401] netlink: 'syz.2.1215': attribute type 30 has an invalid length. [ 310.986394][ T6552] elo 0003:04E7:0009.0013: unknown main item tag 0x0 [ 310.995275][ T6552] elo 0003:04E7:0009.0013: unknown main item tag 0x0 [ 311.011876][ T6552] elo 0003:04E7:0009.0013: hidraw0: USB HID v0.00 Device [HID 04e7:0009] on usb-dummy_hcd.4-1/input0 [ 311.123884][ T976] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 311.146001][T10389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.154720][T10389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.164485][ T6552] usb 5-1: USB disconnect, device number 48 [ 311.284890][ T976] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 311.297279][ T976] usb 7-1: config 0 has no interface number 0 [ 311.309302][T10423] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1221'. [ 311.318195][ T976] usb 7-1: config 0 interface 1 altsetting 33 has 0 endpoint descriptors, different from the interface descriptor's value: 19 [ 311.334132][ T976] usb 7-1: config 0 interface 1 has no altsetting 0 [ 311.341639][ T976] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 311.351629][ T976] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.364897][ T976] usb 7-1: config 0 descriptor?? [ 311.406215][T10425] xt_socket: unknown flags 0x4 [ 312.587079][T10432] lo speed is unknown, defaulting to 1000 [ 313.524539][T10451] netlink: 'syz.0.1227': attribute type 4 has an invalid length. [ 313.532450][T10451] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1227'. [ 314.385881][ T11] block nbd0: Possible stuck request ffff8880261a0000: control (read@0,1024B). Runtime 90 seconds [ 314.396689][ T11] block nbd0: Possible stuck request ffff8880261a0200: control (read@1024,1024B). Runtime 90 seconds [ 314.408286][ T11] block nbd0: Possible stuck request ffff8880261a0400: control (read@2048,1024B). Runtime 90 seconds [ 314.419145][ T11] block nbd0: Possible stuck request ffff8880261a0600: control (read@3072,1024B). Runtime 90 seconds [ 314.781801][ T5822] Bluetooth: hci0: unexpected Set CIG Parameters response data [ 314.793008][ T5822] Bluetooth: hci0: unexpected event for opcode 0x2062 [ 314.859005][ T976] usb 7-1: string descriptor 0 read error: -71 [ 314.900703][ T976] usb 7-1: selecting invalid altsetting 1 [ 314.906998][ T976] dvb_ttusb_budget: ttusb_init_controller: error [ 314.925822][ T976] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 315.000294][ T44] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 315.009587][ T976] DVB: Unable to find symbol cx22700_attach() [ 315.037731][T10461] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5129 sclass=netlink_route_socket pid=10461 comm=syz.6.1232 [ 315.085556][ T976] DVB: Unable to find symbol tda10046_attach() [ 315.095275][T10461] binder: 10460:10461 ioctl 6611 0 returned -22 [ 315.118769][ T976] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 315.137066][ T976] usb 7-1: USB disconnect, device number 7 [ 315.300332][ T44] usb 3-1: Using ep0 maxpacket: 8 [ 315.309881][T10468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1226'. [ 315.323494][ T44] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 315.331974][T10468] netlink: 'syz.4.1226': attribute type 5 has an invalid length. [ 315.332314][ T44] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 315.513978][T10468] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1226'. [ 315.523093][ T44] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 315.534266][ T44] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 10982, setting to 1024 [ 316.054386][ T44] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 316.121964][T10468] geneve2: entered promiscuous mode [ 316.127408][ T44] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 316.167400][T10468] geneve2: entered allmulticast mode [ 316.173115][ T44] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 316.194109][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.221260][ T30] audit: type=1400 audit(1765534910.845:1026): avc: denied { relabelfrom } for pid=10469 comm="syz.6.1234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 316.244153][ T30] audit: type=1400 audit(1765534910.845:1027): avc: denied { relabelto } for pid=10469 comm="syz.6.1234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 316.298584][ T6028] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 316.314294][ T6028] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 316.328781][ T6028] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 316.371164][ T6028] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 316.566737][ T44] usb 3-1: usb_control_msg returned -32 [ 316.578303][ T44] usbtmc 3-1:16.0: can't read capabilities [ 316.644430][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.799008][ T30] audit: type=1400 audit(1765534911.415:1028): avc: denied { bind } for pid=10491 comm="syz.5.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 317.003719][T10503] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 317.013456][ T976] usb 3-1: USB disconnect, device number 31 [ 317.931591][ T976] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 318.019150][ T30] audit: type=1400 audit(1765534912.635:1029): avc: denied { read } for pid=10510 comm="syz.2.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 318.108255][T10511] xt_l2tp: invalid flags combination: 8 [ 318.171290][ T976] usb 7-1: Using ep0 maxpacket: 32 [ 318.290914][ T976] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 318.313209][ T976] usb 7-1: config 0 has no interface number 0 [ 318.322167][ T976] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 318.731291][ T976] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.739306][ T976] usb 7-1: Product: syz [ 318.746912][ T976] usb 7-1: Manufacturer: syz [ 318.752893][ T976] usb 7-1: SerialNumber: syz [ 318.760722][ T976] usb 7-1: config 0 descriptor?? [ 318.767886][ T976] smsc95xx v2.0.0 [ 318.802033][ T5817] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 318.814153][ T5817] Bluetooth: hci0: Injecting HCI hardware error event [ 318.829691][ T5822] Bluetooth: hci0: hardware error 0x00 [ 318.927991][T10532] serio: Serial port ptm1 [ 319.198564][T10509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.246392][T10535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.337352][T10509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.389143][T10535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.472419][T10535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.555615][T10509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.609679][T10535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.648933][T10540] Cannot find add_set index 0 as target [ 319.674613][T10509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.718716][T10509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.748161][ T976] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 319.755240][T10509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.766742][ T976] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 320.207922][ T976] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 320.220979][ T976] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 320.331273][ T976] usb 7-1: USB disconnect, device number 8 [ 320.389818][T10564] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1257'. [ 320.961881][ T5822] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 321.251902][ T30] audit: type=1400 audit(1765534915.865:1030): avc: denied { ioctl } for pid=10571 comm="syz.2.1260" path="/dev/ptyq8" dev="devtmpfs" ino=127 ioctlcmd=0x5430 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 321.303436][ T5896] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 321.466056][T10578] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1261'. [ 321.554773][ T5896] usb 7-1: Using ep0 maxpacket: 8 [ 321.580037][ T5896] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 321.594613][ T5896] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 321.613063][ T5896] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 321.630259][ T5896] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 10982, setting to 1024 [ 321.641898][ T5896] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 321.652348][ T5896] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 321.665738][ T5896] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 321.675902][ T5896] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.973916][ T5896] usb 7-1: usb_control_msg returned -32 [ 321.992597][ T5896] usbtmc 7-1:16.0: can't read capabilities [ 322.820345][T10603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1269'. [ 323.390333][ T5940] lo speed is unknown, defaulting to 1000 [ 323.406549][T10594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.419003][T10594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.428620][T10594] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 323.445365][ T5896] usb 7-1: USB disconnect, device number 9 [ 323.842494][T10607] gfs2: block size(16384) > page size(4096) not supported by filesystem [ 323.974620][T10616] No control pipe specified [ 323.988723][ T30] audit: type=1400 audit(1765534918.605:1031): avc: denied { unmount } for pid=10615 comm="syz.5.1272" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 324.651022][ T5940] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 325.101700][ T5940] usb 5-1: Using ep0 maxpacket: 8 [ 325.260198][ T5940] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 325.293123][ T5940] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 325.311275][ T5940] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 325.330310][ T5940] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 10982, setting to 1024 [ 325.351929][ T5940] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 325.374023][ T5940] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 325.400567][ T5940] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 325.409683][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.926041][T10644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1282'. [ 326.151130][ T5940] usb 5-1: usb_control_msg returned -32 [ 326.156905][ T5940] usbtmc 5-1:16.0: can't read capabilities [ 326.180582][ T6552] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 326.516450][T10650] FAULT_INJECTION: forcing a failure. [ 326.516450][T10650] name failslab, interval 1, probability 0, space 0, times 0 [ 326.594254][T10650] CPU: 0 UID: 0 PID: 10650 Comm: syz.4.1275 Tainted: G L syzkaller #0 PREEMPT(full) [ 326.594274][T10650] Tainted: [L]=SOFTLOCKUP [ 326.594277][T10650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 326.594284][T10650] Call Trace: [ 326.594288][T10650] [ 326.594292][T10650] dump_stack_lvl+0x16c/0x1f0 [ 326.594307][T10650] should_fail_ex+0x512/0x640 [ 326.594323][T10650] should_failslab+0xc2/0x120 [ 326.594337][T10650] __kmalloc_cache_noprof+0x80/0x800 [ 326.594354][T10650] ? usbtmc_ioctl+0x1069/0x2ad0 [ 326.594372][T10650] ? usbtmc_ioctl+0x1069/0x2ad0 [ 326.594386][T10650] usbtmc_ioctl+0x1069/0x2ad0 [ 326.594400][T10650] ? do_vfs_ioctl+0x128/0x14f0 [ 326.594414][T10650] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 326.594425][T10650] ? __pfx_usbtmc_ioctl+0x10/0x10 [ 326.594438][T10650] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 326.594455][T10650] ? hook_file_ioctl_common+0x144/0x410 [ 326.594472][T10650] ? selinux_file_ioctl+0x180/0x270 [ 326.594483][T10650] ? selinux_file_ioctl+0xb4/0x270 [ 326.594494][T10650] ? __pfx_usbtmc_ioctl+0x10/0x10 [ 326.594509][T10650] __x64_sys_ioctl+0x18e/0x210 [ 326.594521][T10650] do_syscall_64+0xcd/0xf80 [ 326.594533][T10650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.594544][T10650] RIP: 0033:0x7f308138f749 [ 326.594553][T10650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.594563][T10650] RSP: 002b:00007f30821c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 326.594573][T10650] RAX: ffffffffffffffda RBX: 00007f30815e6090 RCX: 00007f308138f749 [ 326.594579][T10650] RDX: 0000000000000000 RSI: 0000000000005b02 RDI: 0000000000000005 [ 326.594585][T10650] RBP: 00007f30821c6090 R08: 0000000000000000 R09: 0000000000000000 [ 326.594591][T10650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.594597][T10650] R13: 00007f30815e6128 R14: 00007f30815e6090 R15: 00007ffd85ffb008 [ 326.594611][T10650] [ 326.832711][ T6552] usb 7-1: Using ep0 maxpacket: 8 [ 326.839684][ T6552] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 326.848358][ T6552] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 326.960269][ T6552] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 326.971755][ T6552] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 10982, setting to 1024 [ 326.989603][ T6552] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 327.001305][ T6552] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 327.016306][ T6552] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 327.029819][ T6552] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.190362][ T30] audit: type=1400 audit(1765534921.725:1032): avc: denied { ioctl } for pid=10655 comm="syz.2.1286" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 327.359576][ T6552] usb 7-1: usb_control_msg returned -32 [ 327.366834][ T6552] usbtmc 7-1:16.0: can't read capabilities [ 327.719445][T10663] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 327.726938][ T6552] usb 5-1: USB disconnect, device number 49 [ 328.558948][T10672] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1290'. [ 328.568120][T10672] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1290'. [ 328.871760][T10682] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1293'. [ 328.881047][T10682] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1293'. [ 329.111277][ T976] usb 7-1: USB disconnect, device number 10 [ 329.499984][T10691] FAULT_INJECTION: forcing a failure. [ 329.499984][T10691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 329.513288][T10691] CPU: 0 UID: 0 PID: 10691 Comm: syz.2.1295 Tainted: G L syzkaller #0 PREEMPT(full) [ 329.513314][T10691] Tainted: [L]=SOFTLOCKUP [ 329.513321][T10691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 329.513330][T10691] Call Trace: [ 329.513335][T10691] [ 329.513342][T10691] dump_stack_lvl+0x16c/0x1f0 [ 329.513370][T10691] should_fail_ex+0x512/0x640 [ 329.513395][T10691] _copy_from_user+0x2e/0xd0 [ 329.513416][T10691] video_usercopy+0xee2/0x16c0 [ 329.513434][T10691] ? __pfx___video_do_ioctl+0x10/0x10 [ 329.513461][T10691] ? __pfx_video_usercopy+0x10/0x10 [ 329.513475][T10691] ? rcu_is_watching+0x12/0xc0 [ 329.513502][T10691] ? __pfx_v4l2_ioctl+0x10/0x10 [ 329.513530][T10691] v4l2_ioctl+0x1bd/0x250 [ 329.513553][T10691] ? __pfx_v4l2_ioctl+0x10/0x10 [ 329.513577][T10691] __x64_sys_ioctl+0x18e/0x210 [ 329.513599][T10691] do_syscall_64+0xcd/0xf80 [ 329.513618][T10691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.513635][T10691] RIP: 0033:0x7f7de478f749 [ 329.513648][T10691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.513664][T10691] RSP: 002b:00007f7de553e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 329.513681][T10691] RAX: ffffffffffffffda RBX: 00007f7de49e6180 RCX: 00007f7de478f749 [ 329.513691][T10691] RDX: 0000200000000000 RSI: 00000000c0405602 RDI: 0000000000000006 [ 329.513702][T10691] RBP: 00007f7de553e090 R08: 0000000000000000 R09: 0000000000000000 [ 329.513711][T10691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.513721][T10691] R13: 00007f7de49e6218 R14: 00007f7de49e6180 R15: 00007ffde0c8a028 [ 329.513745][T10691] [ 329.918434][T10693] netlink: 'syz.5.1297': attribute type 1 has an invalid length. [ 330.049045][T10693] bond2: entered promiscuous mode [ 330.191164][T10693] 8021q: adding VLAN 0 to HW filter on device bond2 [ 330.915185][T10717] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 332.176987][T10739] FAULT_INJECTION: forcing a failure. [ 332.176987][T10739] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 332.190274][T10739] CPU: 1 UID: 0 PID: 10739 Comm: syz.2.1309 Tainted: G L syzkaller #0 PREEMPT(full) [ 332.190300][T10739] Tainted: [L]=SOFTLOCKUP [ 332.190306][T10739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 332.190320][T10739] Call Trace: [ 332.190326][T10739] [ 332.190332][T10739] dump_stack_lvl+0x16c/0x1f0 [ 332.190354][T10739] should_fail_ex+0x512/0x640 [ 332.190380][T10739] _copy_to_user+0x32/0xd0 [ 332.190403][T10739] video_usercopy+0xf43/0x16c0 [ 332.190422][T10739] ? __pfx___video_do_ioctl+0x10/0x10 [ 332.190447][T10739] ? selinux_kernel_read_file+0xf0/0x120 [ 332.190465][T10739] ? __pfx_video_usercopy+0x10/0x10 [ 332.190499][T10739] v4l2_ioctl+0x1bd/0x250 [ 332.190522][T10739] ? __pfx_v4l2_ioctl+0x10/0x10 [ 332.190548][T10739] __x64_sys_ioctl+0x18e/0x210 [ 332.190570][T10739] do_syscall_64+0xcd/0xf80 [ 332.190588][T10739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.190605][T10739] RIP: 0033:0x7f7de478f749 [ 332.190619][T10739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.190634][T10739] RSP: 002b:00007f7de553e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 332.190651][T10739] RAX: ffffffffffffffda RBX: 00007f7de49e6180 RCX: 00007f7de478f749 [ 332.190661][T10739] RDX: 0000200000000000 RSI: 00000000c0405602 RDI: 0000000000000006 [ 332.190672][T10739] RBP: 00007f7de553e090 R08: 0000000000000000 R09: 0000000000000000 [ 332.190681][T10739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.190690][T10739] R13: 00007f7de49e6218 R14: 00007f7de49e6180 R15: 00007ffde0c8a028 [ 332.190715][T10739] [ 332.498507][T10749] kAFS: unparsable volume name [ 332.524404][ T44] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 332.576648][ T976] lo speed is unknown, defaulting to 1000 [ 332.621156][ T976] syz0: Port: 1 Link DOWN [ 332.690415][ T44] usb 7-1: Using ep0 maxpacket: 8 [ 332.697311][ T44] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 332.706759][ T44] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 332.717152][ T44] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 332.727729][ T44] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 10982, setting to 1024 [ 332.739853][ T44] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 332.750371][ T44] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 332.781204][ T976] usb 5-1: new low-speed USB device number 50 using dummy_hcd [ 332.814049][ T44] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 332.832306][ T44] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.940226][ T976] usb 5-1: device descriptor read/64, error -71 [ 333.048031][ T44] usb 7-1: usb_control_msg returned -32 [ 333.053693][ T44] usbtmc 7-1:16.0: can't read capabilities [ 333.100384][ T5925] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 333.200207][ T976] usb 5-1: new low-speed USB device number 51 using dummy_hcd [ 333.262054][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.273105][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.283198][ T5925] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 333.292424][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.302889][ T5925] usb 3-1: config 0 descriptor?? [ 333.330309][ T976] usb 5-1: device descriptor read/64, error -71 [ 333.440550][ T976] usb usb5-port1: attempt power cycle [ 333.958819][ T5925] usbhid 3-1:0.0: can't add hid device: -71 [ 333.967189][ T5925] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 333.978917][ T5925] usb 3-1: USB disconnect, device number 32 [ 334.010717][ T976] usb 5-1: new low-speed USB device number 52 using dummy_hcd [ 334.030691][ T976] usb 5-1: device descriptor read/8, error -71 [ 334.270663][ T976] usb 5-1: new low-speed USB device number 53 using dummy_hcd [ 334.291052][ T976] usb 5-1: device descriptor read/8, error -71 [ 334.401664][ T976] usb usb5-port1: unable to enumerate USB device [ 334.747294][T10793] faux_driver vgem: [drm] Unknown color mode 16245; guessing buffer size. [ 334.757220][ T30] audit: type=1400 audit(1765534929.375:1033): avc: denied { map } for pid=10791 comm="syz.2.1329" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 334.787533][T10794] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1328'. [ 334.797159][ T30] audit: type=1400 audit(1765534929.375:1034): avc: denied { execute } for pid=10791 comm="syz.2.1329" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 334.900607][ T6552] usb 7-1: USB disconnect, device number 11 [ 337.400182][ T976] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 337.551840][ T976] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 337.562140][ T976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 56640, setting to 1024 [ 337.574704][ T976] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 337.587513][ T976] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 337.600937][ T976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.609075][ T976] usb 5-1: Product: syz [ 337.613659][ T976] usb 5-1: Manufacturer: syz [ 337.618298][ T976] usb 5-1: SerialNumber: syz [ 337.671014][ T976] usb 5-1: config 0 descriptor?? [ 337.676568][T10829] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 337.686662][T10829] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 337.758663][T10842] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1344'. [ 338.148580][T10829] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 338.180301][T10829] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 339.043945][T10849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.106882][T10849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.153312][T10854] netlink: 'syz.0.1348': attribute type 10 has an invalid length. [ 340.199144][T10854] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 340.262089][ T976] Error reading MAC address [ 340.282137][ T976] usb 5-1: USB disconnect, device number 54 [ 340.649962][T10867] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1351'. [ 340.754299][ T30] audit: type=1400 audit(1765534935.375:1035): avc: denied { getopt } for pid=10862 comm="syz.5.1351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 340.907171][T10867] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1351'. [ 341.256853][T10867] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1351'. [ 343.005608][T10897] gfs2: block size(16384) > page size(4096) not supported by filesystem [ 343.599621][T10902] bond_slave_0: entered promiscuous mode [ 343.605661][T10902] bond_slave_1: entered promiscuous mode [ 343.690676][T10902] macvtap1: entered promiscuous mode [ 343.704357][T10902] bond0: entered promiscuous mode [ 343.715704][T10902] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 343.805275][T10902] bond0: left promiscuous mode [ 343.822640][T10908] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5130 sclass=netlink_route_socket pid=10908 comm=syz.5.1362 [ 343.836999][T10902] bond_slave_0: left promiscuous mode [ 343.842442][T10902] bond_slave_1: left promiscuous mode [ 344.942080][ T11] block nbd0: Possible stuck request ffff8880261a0000: control (read@0,1024B). Runtime 120 seconds [ 344.953457][ T11] block nbd0: Possible stuck request ffff8880261a0200: control (read@1024,1024B). Runtime 120 seconds [ 344.965012][ T11] block nbd0: Possible stuck request ffff8880261a0400: control (read@2048,1024B). Runtime 120 seconds [ 344.976183][ T11] block nbd0: Possible stuck request ffff8880261a0600: control (read@3072,1024B). Runtime 120 seconds [ 345.843967][T10939] gfs2: block size(16384) > page size(4096) not supported by filesystem [ 346.330902][T10949] FAULT_INJECTION: forcing a failure. [ 346.330902][T10949] name failslab, interval 1, probability 0, space 0, times 0 [ 346.343699][T10949] CPU: 0 UID: 0 PID: 10949 Comm: syz.4.1374 Tainted: G L syzkaller #0 PREEMPT(full) [ 346.343725][T10949] Tainted: [L]=SOFTLOCKUP [ 346.343731][T10949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 346.343739][T10949] Call Trace: [ 346.343744][T10949] [ 346.343750][T10949] dump_stack_lvl+0x16c/0x1f0 [ 346.343769][T10949] should_fail_ex+0x512/0x640 [ 346.343789][T10949] ? kmem_cache_alloc_noprof+0x62/0x770 [ 346.343808][T10949] should_failslab+0xc2/0x120 [ 346.343825][T10949] kmem_cache_alloc_noprof+0x83/0x770 [ 346.343835][T10949] ? alloc_empty_file+0x55/0x1e0 [ 346.343848][T10949] ? alloc_empty_file+0x55/0x1e0 [ 346.343856][T10949] alloc_empty_file+0x55/0x1e0 [ 346.343866][T10949] alloc_file_pseudo+0x13a/0x230 [ 346.343877][T10949] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 346.343887][T10949] ? hugetlbfs_get_inode+0x31f/0x700 [ 346.343901][T10949] hugetlb_file_setup+0x4ce/0x620 [ 346.343913][T10949] ksys_mmap_pgoff+0x189/0x5c0 [ 346.343928][T10949] __x64_sys_mmap+0x125/0x190 [ 346.343942][T10949] do_syscall_64+0xcd/0xf80 [ 346.343958][T10949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.343968][T10949] RIP: 0033:0x7f308138f749 [ 346.343977][T10949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.343986][T10949] RSP: 002b:00007f30821c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 346.343997][T10949] RAX: ffffffffffffffda RBX: 00007f30815e6090 RCX: 00007f308138f749 [ 346.344003][T10949] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 346.344009][T10949] RBP: 00007f30821c6090 R08: ffffffffffffffff R09: 0000000000000000 [ 346.344015][T10949] R10: 0000000000048031 R11: 0000000000000246 R12: 0000000000000001 [ 346.344021][T10949] R13: 00007f30815e6128 R14: 00007f30815e6090 R15: 00007ffd85ffb008 [ 346.344034][T10949] [ 348.265440][T10957] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.1376'. [ 348.917095][T10970] gfs2: block size(16384) > page size(4096) not supported by filesystem [ 350.343871][T10984] lo speed is unknown, defaulting to 1000 [ 350.834857][ T30] audit: type=1400 audit(1765534945.455:1036): avc: denied { bind } for pid=10998 comm="syz.6.1386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 350.841464][T10999] futex_wake_op: syz.6.1386 tries to shift op by -1; fix this program [ 351.172394][ T30] audit: type=1400 audit(1765534945.455:1037): avc: denied { node_bind } for pid=10998 comm="syz.6.1386" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 351.290237][T11003] FAULT_INJECTION: forcing a failure. [ 351.290237][T11003] name failslab, interval 1, probability 0, space 0, times 0 [ 351.303167][T11003] CPU: 0 UID: 0 PID: 11003 Comm: syz.2.1387 Tainted: G L syzkaller #0 PREEMPT(full) [ 351.303193][T11003] Tainted: [L]=SOFTLOCKUP [ 351.303198][T11003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 351.303208][T11003] Call Trace: [ 351.303214][T11003] [ 351.303220][T11003] dump_stack_lvl+0x16c/0x1f0 [ 351.303238][T11003] should_fail_ex+0x512/0x640 [ 351.303252][T11003] ? kmem_cache_alloc_noprof+0x62/0x770 [ 351.303264][T11003] should_failslab+0xc2/0x120 [ 351.303278][T11003] kmem_cache_alloc_noprof+0x83/0x770 [ 351.303288][T11003] ? security_file_alloc+0x34/0x2b0 [ 351.303303][T11003] ? security_file_alloc+0x34/0x2b0 [ 351.303314][T11003] security_file_alloc+0x34/0x2b0 [ 351.303325][T11003] init_file+0x93/0x4c0 [ 351.303341][T11003] alloc_empty_file+0x73/0x1e0 [ 351.303351][T11003] alloc_file_pseudo+0x13a/0x230 [ 351.303362][T11003] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 351.303372][T11003] ? hugetlbfs_get_inode+0x31f/0x700 [ 351.303385][T11003] hugetlb_file_setup+0x4ce/0x620 [ 351.303398][T11003] ksys_mmap_pgoff+0x189/0x5c0 [ 351.303413][T11003] __x64_sys_mmap+0x125/0x190 [ 351.303427][T11003] do_syscall_64+0xcd/0xf80 [ 351.303439][T11003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.303449][T11003] RIP: 0033:0x7f7de478f749 [ 351.303458][T11003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.303468][T11003] RSP: 002b:00007f7de555f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 351.303478][T11003] RAX: ffffffffffffffda RBX: 00007f7de49e6090 RCX: 00007f7de478f749 [ 351.303485][T11003] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 351.303491][T11003] RBP: 00007f7de555f090 R08: ffffffffffffffff R09: 0000000000000000 [ 351.303497][T11003] R10: 0000000000048031 R11: 0000000000000246 R12: 0000000000000001 [ 351.303503][T11003] R13: 00007f7de49e6128 R14: 00007f7de49e6090 R15: 00007ffde0c8a028 [ 351.303516][T11003] [ 351.640188][ T44] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 351.820178][ T44] usb 7-1: Using ep0 maxpacket: 16 [ 351.841880][ T44] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 351.889748][ T44] usb 7-1: config 0 has no interface number 0 [ 351.923611][ T44] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 351.952238][ T44] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.972443][ T44] usb 7-1: Product: syz [ 351.980368][ T44] usb 7-1: Manufacturer: syz [ 351.995533][ T44] usb 7-1: SerialNumber: syz [ 352.015638][ T44] usb 7-1: config 0 descriptor?? [ 352.028574][ T44] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 352.554932][ T44] gspca_spca1528: reg_w err -71 [ 352.590596][ T44] spca1528 7-1:0.1: probe with driver spca1528 failed with error -71 [ 352.620647][ T44] usb 7-1: USB disconnect, device number 12 [ 354.168272][ T6552] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 354.330341][ T6552] usb 3-1: device descriptor read/64, error -71 [ 354.640349][ T6552] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 354.900354][ T976] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 354.924589][ T6552] usb 3-1: device descriptor read/64, error -71 [ 355.050679][ T6552] usb usb3-port1: attempt power cycle [ 355.093784][ T976] usb 7-1: unable to get BOS descriptor or descriptor too short [ 355.374197][ T976] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 355.490488][ T6552] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 355.521398][ T976] usb 7-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 355.623257][ T6552] usb 3-1: device descriptor read/8, error -71 [ 355.679390][ T976] usb 7-1: too many endpoints for config 1 interface 0 altsetting 0: 72, using maximum allowed: 30 [ 355.728872][ T976] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 72 [ 355.916199][ T976] usb 7-1: config 1 interface 0 has no altsetting 1 [ 355.933325][ T6552] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 355.977188][ T976] usb 7-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 355.988064][ T6552] usb 3-1: device descriptor read/8, error -71 [ 356.018054][ T976] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.038604][ T976] usb 7-1: Product: syz [ 356.059151][ T976] usb 7-1: Manufacturer: syz [ 356.099709][ T976] usb 7-1: SerialNumber: syz [ 356.120380][ T6552] usb usb3-port1: unable to enumerate USB device [ 356.146451][ T976] smsusb:smsusb_probe: board id=8, interface number 0 [ 356.854144][ T976] smsusb:smsusb_probe: usb_set_interface failed, rc -71 [ 356.873165][ T976] smsusb 7-1:1.0: probe with driver smsusb failed with error -71 [ 356.891704][ T976] usb 7-1: USB disconnect, device number 13 [ 356.943616][T11067] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 356.956017][T11067] block device autoloading is deprecated and will be removed. [ 356.970682][ T30] audit: type=1400 audit(1765534951.595:1038): avc: denied { ioctl } for pid=11056 comm="syz.2.1403" path="/268/file0/file0" dev="fuse" ino=64 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 357.446826][ T976] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 357.620249][ T24] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 357.631371][ T976] usb 3-1: Using ep0 maxpacket: 16 [ 357.640984][ T976] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 357.650318][ T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.658288][ T976] usb 3-1: Product: syz [ 357.662878][ T976] usb 3-1: Manufacturer: syz [ 357.667443][ T976] usb 3-1: SerialNumber: syz [ 357.674726][ T976] r8152-cfgselector 3-1: Unknown version 0x0000 [ 357.689877][ T976] r8152-cfgselector 3-1: config 0 descriptor?? [ 357.815058][T11088] netlink: 'syz.6.1412': attribute type 1 has an invalid length. [ 357.824485][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 357.841931][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.852427][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 357.862194][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.873830][ T24] usb 5-1: config 0 descriptor?? [ 357.883978][ T24] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 357.973936][T11092] overlayfs: failed to clone upperpath [ 358.101557][ T30] audit: type=1400 audit(1765534952.715:1039): avc: denied { write } for pid=11056 comm="syz.2.1403" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 358.126884][ T6552] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 358.136192][T11057] netlink: 'syz.2.1403': attribute type 1 has an invalid length. [ 358.145118][ T976] r8152-cfgselector 3-1: Unknown version 0x0000 [ 358.162410][ T976] r8152-cfgselector 3-1: bad CDC descriptors [ 358.179232][ T976] r8152-cfgselector 3-1: USB disconnect, device number 37 [ 358.310203][ T6552] usb 7-1: Using ep0 maxpacket: 16 [ 358.343355][ T6552] usb 7-1: unable to get BOS descriptor or descriptor too short [ 358.356348][ T6552] usb 7-1: config 0 has an invalid interface number: 3 but max is 0 [ 358.375741][ T6552] usb 7-1: config 0 has no interface number 0 [ 358.618502][ T24] gspca_vc032x: reg_w err -110 [ 358.624624][ T6552] usb 7-1: config 0 interface 3 altsetting 142 bulk endpoint 0x5 has invalid maxpacket 32 [ 358.636173][ T6552] usb 7-1: config 0 interface 3 altsetting 142 bulk endpoint 0x6 has invalid maxpacket 8 [ 358.648745][ T6552] usb 7-1: config 0 interface 3 has no altsetting 0 [ 358.659831][T11098] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1408'. [ 358.669267][ T6552] usb 7-1: New USB device found, idVendor=0bfd, idProduct=000b, bcdDevice=4e.46 [ 358.680985][ T24] vc032x 5-1:0.0: probe with driver vc032x failed with error -110 [ 358.682888][T11098] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1408'. [ 358.710245][ T6552] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.814175][ T6552] usb 7-1: Product: syz [ 358.822807][ T6552] usb 7-1: Manufacturer: syz [ 358.831724][ T6552] usb 7-1: SerialNumber: syz [ 358.849771][ T6552] usb 7-1: config 0 descriptor?? [ 358.859027][T11101] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 358.872628][T11088] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 358.891809][T11088] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 360.763596][ T5896] usb 5-1: USB disconnect, device number 55 [ 360.983936][ T6552] kvaser_usb 7-1:0.3: error -ENODEV: Cannot get usb endpoint(s) [ 360.997860][ T6552] usb 7-1: USB disconnect, device number 14 [ 361.618674][ T30] audit: type=1400 audit(1765534956.235:1040): avc: denied { unmount } for pid=9815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 361.931978][ T5896] usb 5-1: new low-speed USB device number 56 using dummy_hcd [ 362.099287][T11148] gfs2: block size(16384) > page size(4096) not supported by filesystem [ 362.100176][ T5896] usb 5-1: Invalid ep0 maxpacket: 16 [ 362.312188][ T5896] usb 5-1: new low-speed USB device number 57 using dummy_hcd [ 362.333840][T11154] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1432'. [ 362.529347][ T5896] usb 5-1: Invalid ep0 maxpacket: 16 [ 362.539642][ T5896] usb usb5-port1: attempt power cycle [ 362.910625][ T5896] usb 5-1: new low-speed USB device number 58 using dummy_hcd [ 363.023750][ T5896] usb 5-1: Invalid ep0 maxpacket: 16 [ 363.164095][ T5896] usb 5-1: new low-speed USB device number 59 using dummy_hcd [ 363.190617][ T5896] usb 5-1: Invalid ep0 maxpacket: 16 [ 363.196030][ T5896] usb usb5-port1: unable to enumerate USB device [ 363.340799][T11200] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 363.356122][ T30] audit: type=1400 audit(1765534957.965:1041): avc: denied { name_bind } for pid=11199 comm="syz.2.1437" path="socket:[31466]" dev="sockfs" ino=31466 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 364.112749][T11217] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1443'. [ 364.121741][T11217] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1443'. [ 365.110505][ T30] audit: type=1400 audit(1765534959.735:1042): avc: denied { ioctl } for pid=11245 comm="syz.4.1451" path="socket:[32203]" dev="sockfs" ino=32203 ioctlcmd=0x943a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 365.646700][T11262] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1454'. [ 365.655927][T11262] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1454'. [ 365.851027][T11264] input: syz1 as /devices/virtual/input/input18 [ 365.874401][ T30] audit: type=1400 audit(1765534960.315:1043): avc: denied { create } for pid=11252 comm="syz.6.1452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 365.912242][ T30] audit: type=1400 audit(1765534960.325:1044): avc: denied { bind } for pid=11252 comm="syz.6.1452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 365.936052][ T30] audit: type=1400 audit(1765534960.535:1045): avc: denied { getopt } for pid=11257 comm="syz.0.1453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 365.985167][T11268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1456'. [ 366.699068][T11280] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1460'. [ 368.172555][T11305] netlink: 'syz.4.1464': attribute type 21 has an invalid length. [ 368.839707][T11314] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.853473][T11314] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 368.914961][T11314] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.925287][T11314] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 368.976298][T11314] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.988348][T11314] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 369.029588][T11321] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1469'. [ 369.055057][T11314] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.065551][T11314] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 369.136057][T11190] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 369.144319][T11190] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 369.158652][T11190] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 369.166901][T11190] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 369.182492][T11190] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 369.191687][T11190] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 369.207615][ T3958] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 369.215756][ T3958] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 369.258307][T11323] input: syz1 as /devices/virtual/input/input19 [ 369.433568][T11329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1472'. [ 369.442574][T11329] vlan0: entered allmulticast mode [ 369.447667][T11329] veth0_vlan: entered allmulticast mode [ 369.668827][T11335] gfs2: block size(16384) > page size(4096) not supported by filesystem [ 369.947064][T11339] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1475'. [ 369.956216][T11339] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1475'. [ 370.854730][T11354] syzkaller0: entered promiscuous mode [ 370.861522][T11354] syzkaller0: entered allmulticast mode [ 370.877918][T11351] binder: 11350:11351 ioctl 4018620d 0 returned -22 [ 370.885878][T11351] binder: 11350:11351 unknown command 1853191215 [ 370.892655][T11351] binder: 11350:11351 ioctl c0306201 200000000080 returned -22 [ 370.902421][T11351] binder: 11350:11351 ioctl c0306201 2000000003c0 returned -14 [ 371.175936][T11361] devtmpfs: Unknown parameter 'fd' [ 371.544795][T11367] netlink: 'syz.2.1483': attribute type 1 has an invalid length. [ 372.045882][T11373] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1485'. [ 372.111779][T11374] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1485'. [ 372.166040][ T30] audit: type=1400 audit(1765534966.785:1046): avc: denied { write } for pid=11372 comm="syz.5.1485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 372.453173][T11367] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 372.792124][T11391] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1487'. [ 372.809487][T11391] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1487'. [ 374.366644][T11415] IPVS: set_ctl: invalid protocol: 47 172.20.20.11:21 [ 374.530457][T11425] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 2, id = 0 [ 375.557834][ T11] block nbd0: Possible stuck request ffff8880261a0000: control (read@0,1024B). Runtime 150 seconds [ 375.568947][ T11] block nbd0: Possible stuck request ffff8880261a0200: control (read@1024,1024B). Runtime 150 seconds [ 375.587750][ T11] block nbd0: Possible stuck request ffff8880261a0400: control (read@2048,1024B). Runtime 150 seconds [ 375.602415][ T11] block nbd0: Possible stuck request ffff8880261a0600: control (read@3072,1024B). Runtime 150 seconds [ 377.800205][ T976] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 377.964454][ T976] usb 7-1: config 8 has an invalid interface number: 203 but max is 0 [ 378.001037][ T976] usb 7-1: config 8 has no interface number 0 [ 378.034351][ T976] usb 7-1: config 8 interface 203 has no altsetting 0 [ 378.077828][ T976] usb 7-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=ab.16 [ 378.091443][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.139464][ T976] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.188278][ T976] usb 7-1: Product: syz [ 378.210856][ T976] usb 7-1: Manufacturer: syz [ 378.224545][ T976] usb 7-1: SerialNumber: syz [ 378.278653][T11453] tipc: Started in network mode [ 378.293039][T11453] tipc: Node identity ac14140f, cluster identity 4711 [ 378.310618][T11453] tipc: New replicast peer: 255.255.255.255 [ 378.326226][T11453] tipc: Enabled bearer , priority 10 [ 378.341332][T11482] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1503'. [ 378.360581][T11482] tipc: Disabling bearer [ 378.459825][T11462] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 378.576718][T11491] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1517'. [ 378.618911][T11491] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 378.663518][ T976] usb 7-1: selecting invalid altsetting 1 [ 378.669265][ T976] catc 7-1:8.203: Can't set altsetting 1. [ 378.689079][ T976] catc 7-1:8.203: probe with driver catc failed with error -5 [ 378.726675][ T976] usb 7-1: USB disconnect, device number 15 [ 380.309310][T11174] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.351099][T11174] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.482632][T11526] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1525'. [ 380.525211][T11522] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1525'. [ 380.570810][ T30] audit: type=1400 audit(1765534975.185:1047): avc: denied { read } for pid=11520 comm="syz.0.1525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 380.625304][T11526] afs: Unknown parameter 'GPL' [ 380.719028][T11522] 9p: Bad value for 'rfdno' [ 381.292502][T11546] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1528'. [ 381.609599][T11554] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1529'. [ 381.730846][T11554] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1529'. [ 382.179605][T11573] netlink: 'syz.6.1533': attribute type 12 has an invalid length. [ 382.202174][T11573] netlink: 'syz.6.1533': attribute type 29 has an invalid length. [ 382.211009][T11573] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1533'. [ 382.220043][T11573] netlink: 59 bytes leftover after parsing attributes in process `syz.6.1533'. [ 382.259982][T11581] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1534'. [ 382.567754][ T30] audit: type=1400 audit(1765534977.105:1048): avc: denied { ioctl } for pid=11578 comm="syz.2.1535" path="socket:[32666]" dev="sockfs" ino=32666 ioctlcmd=0x6f7c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 382.680383][ T30] audit: type=1400 audit(1765534977.105:1049): avc: denied { accept } for pid=11578 comm="syz.2.1535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 383.000770][ T5896] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 383.223915][ T5896] usb 7-1: Using ep0 maxpacket: 8 [ 383.246089][ T5896] usb 7-1: config 2 has an invalid interface number: 31 but max is 0 [ 383.264646][ T5896] usb 7-1: config 2 has no interface number 0 [ 383.281195][ T5896] usb 7-1: config 2 interface 31 altsetting 2 endpoint 0x82 has invalid maxpacket 64768, setting to 1024 [ 383.292736][ T5896] usb 7-1: config 2 interface 31 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024 [ 383.304441][ T5896] usb 7-1: config 2 interface 31 has no altsetting 0 [ 383.326191][ T5896] usb 7-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 383.373495][ T5896] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.381715][ T5896] usb 7-1: Product: syz [ 383.386628][ T5896] usb 7-1: Manufacturer: syz [ 383.391819][ T5896] usb 7-1: SerialNumber: syz [ 383.399309][T11585] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 383.642666][T11580] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 383.683631][T11602] netlink: 45 bytes leftover after parsing attributes in process `syz.4.1537'. [ 384.773455][ T5896] ch9200 7-1:2.31: probe with driver ch9200 failed with error -22 [ 385.103885][T11623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1544'. [ 385.175445][ T5896] usb 7-1: USB disconnect, device number 16 [ 385.414205][T11632] netlink: 'syz.6.1546': attribute type 10 has an invalid length. [ 385.425430][T11632] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.445790][T11632] bond0: (slave team0): Enslaving as an active interface with an up link [ 385.479866][ T30] audit: type=1400 audit(1765534980.095:1050): avc: denied { setopt } for pid=11630 comm="syz.6.1546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 385.803849][ T30] audit: type=1400 audit(1765534980.425:1051): avc: denied { map } for pid=11638 comm="syz.4.1550" path="/proc/sys/net/ipv4/vs/sync_ports" dev="proc" ino=23347 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=file permissive=1 [ 386.699956][T11642] infiniband syz2: set down [ 386.704706][T11642] infiniband syz2: added ipvlan0 [ 386.840298][T11630] delete_channel: no stack [ 386.869499][T11642] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 386.873543][T11642] infiniband syz2: Couldn't open port 1 [ 386.972631][T11642] RDS/IB: syz2: added [ 386.977081][T11642] smc: adding ib device syz2 with port count 1 [ 386.983481][T11642] smc: ib device syz2 port 1 has no pnetid [ 387.876692][T11658] gfs2: block size(16384) > page size(4096) not supported by filesystem [ 387.911972][T11650] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1553'. [ 388.683102][ T30] audit: type=1326 audit(1765534983.305:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11661 comm="syz.5.1556" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5e22f8f749 code=0x0 [ 388.911514][T11673] overlayfs: failed to clone upperpath [ 389.088617][T11682] netlink: 'syz.0.1560': attribute type 1 has an invalid length. [ 389.966950][T11683] gfs2: block size(16384) > page size(4096) not supported by filesystem [ 389.978155][T11682] 8021q: adding VLAN 0 to HW filter on device bond4 [ 390.278860][T11696] lo speed is unknown, defaulting to 1000 [ 390.669657][T11706] sp0: Synchronizing with TNC [ 390.701280][T11705] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 390.717681][T11708] netlink: 'syz.0.1567': attribute type 14 has an invalid length. [ 390.752620][ T30] audit: type=1400 audit(1765534985.375:1053): avc: denied { mount } for pid=11704 comm="syz.6.1566" name="/" dev="rpc_pipefs" ino=33570 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 391.396818][T11704] [U] è` [ 391.860153][ T44] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 392.065525][ T30] audit: type=1400 audit(1765534986.685:1054): avc: denied { mounton } for pid=11745 comm="syz.2.1577" path="/proc/1038/task" dev="proc" ino=33634 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 392.170161][ T44] usb 7-1: Using ep0 maxpacket: 8 [ 392.178503][ T44] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 392.187699][ T5926] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 392.200126][ T44] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.216986][ T44] usb 7-1: Product: syz [ 392.226115][ T44] usb 7-1: Manufacturer: syz [ 392.235288][ T44] usb 7-1: SerialNumber: syz [ 392.259612][ T44] usb 7-1: config 0 descriptor?? [ 392.350458][ T5896] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 392.362121][ T5926] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 392.373315][ T5926] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 392.396436][ T5926] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 392.415093][T11756] xt_connbytes: Forcing CT accounting to be enabled [ 392.422175][T11756] Cannot find del_set index 1 as target [ 392.438709][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 392.465255][ T5926] usb 5-1: SerialNumber: syz [ 392.472057][ T44] usb 7-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 392.490229][ T5896] usb 3-1: device descriptor read/64, error -71 [ 392.497618][ T5926] usb 5-1: 0:2 : does not exist [ 392.740340][ T5896] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 392.832104][ T30] audit: type=1326 audit(1765534987.455:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11759 comm="syz.0.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a8b38f749 code=0x7ffc0000 [ 392.870497][ T5896] usb 3-1: device descriptor read/64, error -71 [ 392.880947][ T30] audit: type=1326 audit(1765534987.455:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11759 comm="syz.0.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a8b38f749 code=0x7ffc0000 [ 392.950287][ T30] audit: type=1326 audit(1765534987.475:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11759 comm="syz.0.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6a8b38f749 code=0x7ffc0000 [ 393.004624][ T5896] usb usb3-port1: attempt power cycle [ 393.018303][ T30] audit: type=1326 audit(1765534987.495:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11759 comm="syz.0.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a8b38f749 code=0x7ffc0000 [ 393.056236][ T30] audit: type=1326 audit(1765534987.495:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11759 comm="syz.0.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a8b38f749 code=0x7ffc0000 [ 393.084854][ T30] audit: type=1326 audit(1765534987.495:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11759 comm="syz.0.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6a8b38f749 code=0x7ffc0000 [ 393.114890][ T30] audit: type=1326 audit(1765534987.495:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11759 comm="syz.0.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a8b38f749 code=0x7ffc0000 [ 393.170729][ T30] audit: type=1326 audit(1765534987.495:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11759 comm="syz.0.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a8b38f749 code=0x7ffc0000 [ 393.195583][ T30] audit: type=1326 audit(1765534987.495:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11759 comm="syz.0.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6a8b38f749 code=0x7ffc0000 [ 393.350777][ T5896] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 393.376367][ T5896] usb 3-1: device descriptor read/8, error -71 [ 393.521714][ T44] usb write operation failed. (-71) [ 393.532592][ T44] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 393.592774][ T44] dvbdev: DVB: registering new adapter (Terratec H7) [ 393.619749][ T44] usb 7-1: media controller created [ 393.625524][ T5896] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 393.645444][ T44] usb read operation failed. (-71) [ 393.651124][ T5896] usb 3-1: device descriptor read/8, error -71 [ 393.677604][ T44] usb write operation failed. (-71) [ 393.716115][ T44] dvb_usb_az6007 7-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 393.747873][T11782] bridge0: entered promiscuous mode [ 393.748565][ T44] usb 7-1: USB disconnect, device number 17 [ 393.754829][T11782] macsec0: entered promiscuous mode [ 393.770732][ T5896] usb usb3-port1: unable to enumerate USB device [ 394.832613][T11804] bridge3: entered promiscuous mode [ 394.837882][T11804] bridge3: entered allmulticast mode [ 395.282775][ T5926] usb 5-1: USB disconnect, device number 60 [ 397.678890][T11834] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1594'. [ 397.787346][T11831] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 397.803802][T11835] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1594'. [ 397.930239][T11839] gfs2: block size(16384) > page size(4096) not supported by filesystem [ 398.487038][ T6552] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 398.642437][ T6552] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 398.650800][ T6552] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 399.029521][ T6552] usb 5-1: config 0 interface 0 has no altsetting 0 [ 399.049456][ T6552] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 399.059098][ T6552] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 399.075791][ T6552] usb 5-1: Product: syz [ 399.083130][ T6552] usb 5-1: Manufacturer: syz [ 399.091089][ T6552] usb 5-1: SerialNumber: syz [ 399.100830][ T6552] usb 5-1: config 0 descriptor?? [ 399.107728][ T6552] hub 5-1:0.0: bad descriptor, ignoring hub [ 399.116942][ T6552] hub 5-1:0.0: probe with driver hub failed with error -5 [ 399.126407][T11857] netlink: 'syz.5.1598': attribute type 322 has an invalid length. [ 399.128127][ T6552] usb 5-1: selecting invalid altsetting 0 [ 400.121138][ T6552] usb 5-1: reset high-speed USB device number 61 using dummy_hcd [ 400.721789][ T6552] usb 5-1: device descriptor read/64, error -71 [ 400.970889][T11864] snd-usb-audio 5-1:0.0: Runtime PM usage count underflow! [ 400.983140][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 400.983150][ T30] audit: type=1326 audit(1765534995.605:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11877 comm="syz.5.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e22f8f749 code=0x7ffc0000 [ 401.128331][ T30] audit: type=1326 audit(1765534995.615:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11877 comm="syz.5.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e22f8f749 code=0x7ffc0000 [ 401.189491][ T30] audit: type=1326 audit(1765534995.635:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11877 comm="syz.5.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f5e22f8f749 code=0x7ffc0000 [ 401.214136][ T30] audit: type=1326 audit(1765534995.635:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11877 comm="syz.5.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e22f8f749 code=0x7ffc0000 [ 401.238471][ T30] audit: type=1326 audit(1765534995.635:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11877 comm="syz.5.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e22f8f749 code=0x7ffc0000 [ 401.263139][ T30] audit: type=1326 audit(1765534995.635:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11877 comm="syz.5.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5e22f8df90 code=0x7ffc0000 [ 401.882947][ T6552] usb 5-1: USB disconnect, device number 61 [ 401.986362][ T30] audit: type=1326 audit(1765534995.635:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11877 comm="syz.5.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e22f8f749 code=0x7ffc0000 [ 402.085729][ T30] audit: type=1326 audit(1765534995.635:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11877 comm="syz.5.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e22f8f749 code=0x7ffc0000 [ 402.177863][ T30] audit: type=1326 audit(1765534995.635:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11877 comm="syz.5.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f5e22f8f749 code=0x7ffc0000 [ 402.248647][ T30] audit: type=1326 audit(1765534995.635:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11877 comm="syz.5.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e22f8f749 code=0x7ffc0000 [ 403.263647][ T5926] Process accounting resumed [ 403.276489][T11910] tipc: Enabling of bearer rejected, failed to enable media [ 403.618903][T11925] overlayfs: failed to clone upperpath [ 404.820684][ T6552] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 405.270171][ T6552] usb 5-1: Using ep0 maxpacket: 32 [ 405.276740][ T6552] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 405.285397][ T6552] usb 5-1: config 0 has no interface number 0 [ 405.299186][ T6552] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 405.570267][ T6552] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.578941][ T6552] usb 5-1: Product: syz [ 405.588300][ T6552] usb 5-1: Manufacturer: syz [ 405.593027][ T6552] usb 5-1: SerialNumber: syz [ 405.599658][ T6552] usb 5-1: config 0 descriptor?? [ 405.610349][ T11] block nbd0: Possible stuck request ffff8880261a0000: control (read@0,1024B). Runtime 180 seconds [ 405.621076][ T11] block nbd0: Possible stuck request ffff8880261a0200: control (read@1024,1024B). Runtime 180 seconds [ 405.632061][ T11] block nbd0: Possible stuck request ffff8880261a0400: control (read@2048,1024B). Runtime 180 seconds [ 405.721218][ T11] block nbd0: Possible stuck request ffff8880261a0600: control (read@3072,1024B). Runtime 180 seconds [ 405.790522][ T5822] Bluetooth: hci2: command 0x0406 tx timeout [ 405.985178][ T6552] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 405.999196][ T6552] usb 5-1: selecting invalid altsetting 1 [ 406.014610][ T6552] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 406.027521][ T6552] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 406.038465][ T6552] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 406.048038][ T6552] usb 5-1: media controller created [ 406.093051][ T6552] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 406.212207][T11948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.224602][T11948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.234453][T11948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.250759][T11948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.283797][T11976] netlink: 'syz.5.1629': attribute type 9 has an invalid length. [ 406.309807][T11948] overlayfs: failed to clone upperpath [ 406.336210][T11979] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 406.346955][ T30] kauditd_printk_skb: 113 callbacks suppressed [ 406.346970][ T30] audit: type=1400 audit(1765535000.965:1230): avc: denied { getopt } for pid=11974 comm="syz.5.1629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 406.377420][T11980] overlayfs: failed to clone upperpath [ 406.422324][ T6552] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 406.429648][ T6552] zl10353_read_register: readreg error (reg=127, ret==-71) [ 406.450270][ T6552] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 406.490949][ T30] audit: type=1326 audit(1765535001.105:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11975 comm="syz.6.1631" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7938d8f749 code=0x0 [ 406.554118][ T6552] usb 5-1: USB disconnect, device number 62 [ 406.789908][T11996] 9p: Bad value for 'rfdno' [ 407.565110][T12017] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1644'. [ 407.574088][T12017] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1644'. [ 408.044622][T12030] netlink: 'syz.0.1647': attribute type 12 has an invalid length. [ 408.052843][T12030] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.1647'. [ 408.235057][ T30] audit: type=1400 audit(1765535002.855:1232): avc: denied { execute } for pid=12041 comm="syz.6.1649" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 408.600144][ T5896] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 408.913801][T12050] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1652'. [ 409.170928][ T5896] usb 7-1: device descriptor read/64, error -71 [ 409.430134][ T5896] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 409.580163][ T5896] usb 7-1: device descriptor read/64, error -71 [ 409.690351][ T5896] usb usb7-port1: attempt power cycle [ 410.310197][ T5896] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 410.330793][ T5896] usb 7-1: device descriptor read/8, error -71 [ 410.594113][ T5896] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 410.632028][ T5896] usb 7-1: device descriptor read/8, error -71 [ 410.646766][ T30] audit: type=1326 audit(1765535005.265:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12063 comm="syz.2.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de478f749 code=0x7ffc0000 [ 410.677314][ T30] audit: type=1326 audit(1765535005.295:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12063 comm="syz.2.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de478f749 code=0x7ffc0000 [ 410.708584][ T30] audit: type=1326 audit(1765535005.295:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12063 comm="syz.2.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f7de478f749 code=0x7ffc0000 [ 410.733231][ T30] audit: type=1326 audit(1765535005.325:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12063 comm="syz.2.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de478f749 code=0x7ffc0000 [ 410.760500][ T5896] usb usb7-port1: unable to enumerate USB device [ 410.768956][ T30] audit: type=1326 audit(1765535005.325:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12065 comm="syz.2.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7de47c2005 code=0x7ffc0000 [ 410.793946][ T30] audit: type=1326 audit(1765535005.325:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12063 comm="syz.2.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7de4791667 code=0x7ffc0000 [ 410.819057][ T30] audit: type=1326 audit(1765535005.325:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12063 comm="syz.2.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de478f749 code=0x7ffc0000 [ 411.414342][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 411.414357][ T30] audit: type=1400 audit(1765535006.035:1247): avc: denied { mounton } for pid=12076 comm="syz.0.1662" path="/427/file0" dev="tmpfs" ino=2244 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 411.486288][T12077] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 411.493716][T12077] bond2: left promiscuous mode [ 411.498467][T12077] bridge1: left promiscuous mode [ 411.504927][T12077] bond3: left promiscuous mode [ 411.989988][T12077] macsec0: left promiscuous mode [ 411.995703][T12077] bridge3: left promiscuous mode [ 412.033480][ T30] audit: type=1400 audit(1765535006.655:1248): avc: denied { lock } for pid=12076 comm="syz.0.1662" path="socket:[34319]" dev="sockfs" ino=34319 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 412.987613][ T30] audit: type=1326 audit(1765535007.575:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12085 comm="syz.4.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308138f749 code=0x7ffc0000 [ 413.039802][T12097] lo speed is unknown, defaulting to 1000 [ 413.203663][ T30] audit: type=1326 audit(1765535007.575:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12085 comm="syz.4.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308138f749 code=0x7ffc0000 [ 413.228389][ T30] audit: type=1326 audit(1765535007.575:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12085 comm="syz.4.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f308138f749 code=0x7ffc0000 [ 413.363251][ T30] audit: type=1326 audit(1765535007.985:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12085 comm="syz.4.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308138f749 code=0x7ffc0000 [ 413.576882][ T30] audit: type=1326 audit(1765535007.985:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12085 comm="syz.4.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308138f749 code=0x7ffc0000 [ 413.756048][T12122] block device autoloading is deprecated and will be removed. [ 413.981158][ T30] audit: type=1400 audit(1765535008.605:1254): avc: denied { setopt } for pid=12126 comm="syz.4.1675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 413.982562][T12127] Unsupported ieee802154 address type: 0 [ 414.050897][ T30] audit: type=1400 audit(1765535008.605:1255): avc: denied { bind } for pid=12126 comm="syz.4.1675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 414.210585][ T30] audit: type=1400 audit(1765535008.665:1256): avc: denied { map } for pid=12126 comm="syz.4.1675" path="socket:[35268]" dev="sockfs" ino=35268 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 414.304150][T12137] netlink: 'syz.5.1678': attribute type 10 has an invalid length. [ 414.380265][T12137] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1678'. [ 414.436767][T12137] dummy0: entered promiscuous mode [ 415.440334][ T6552] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 415.571777][T12157] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 415.610148][ T6552] usb 5-1: Using ep0 maxpacket: 16 [ 415.617178][ T6552] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 415.628562][ T6552] usb 5-1: config 1 has no interface number 0 [ 415.641254][ T6552] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 415.662254][ T6552] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 415.681574][ T6552] usb 5-1: config 1 interface 105 has no altsetting 0 [ 415.697300][ T6552] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 415.712775][ T6552] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.727052][ T6552] usb 5-1: Product: syz [ 415.734430][ T6552] usb 5-1: Manufacturer: syz [ 415.743271][ T6552] usb 5-1: SerialNumber: syz [ 415.761118][T12145] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 415.777060][T12145] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 416.203881][T12145] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 416.213144][T12145] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 416.580295][ T5896] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 417.201734][T12170] ceph: No mds server is up or the cluster is laggy [ 417.217433][ T5926] libceph: connect (1)[c::]:6789 error -101 [ 417.224190][ T5926] libceph: mon0 (1)[c::]:6789 connect error [ 417.458803][ T5896] usb 3-1: device descriptor read/64, error -71 [ 417.576388][T12185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1691'. [ 417.691573][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 417.691607][ T30] audit: type=1400 audit(1765535012.315:1260): avc: denied { connect } for pid=12184 comm="syz.0.1691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 417.720259][ T5896] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 418.302947][ T5896] usb 3-1: device descriptor read/64, error -71 [ 418.975907][ T6552] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 419.042841][ T5896] usb usb3-port1: attempt power cycle [ 419.114114][ T6552] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 419.175750][ T6552] aqc111 5-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 7e:c0:8e:e8:7b:f1 [ 419.210505][ T6552] usb 5-1: USB disconnect, device number 63 [ 419.259772][ T6552] aqc111 5-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 419.579937][ T5896] usb usb3-port1: Cannot enable. Maybe the USB cable is bad? [ 419.731594][ T5896] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 419.731902][ T6552] aqc111 5-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 419.752732][ T5896] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 419.795081][ T6552] aqc111 5-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 419.797395][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.863556][T12223] overlayfs: failed to clone upperpath [ 419.875150][ T6552] aqc111 5-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 419.893353][ T5896] usb 3-1: config 0 descriptor?? [ 419.911407][ T30] audit: type=1400 audit(1765535014.535:1261): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 419.938427][ T5896] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 420.155102][T12214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.199641][T12214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.242410][T12214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.271878][T12214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.758531][ T5896] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 422.281539][ T5896] gspca_cpia1: usb_control_msg 02, error -110 [ 422.311984][ T5896] gspca_cpia1: usb_control_msg 05, error -32 [ 422.318363][ T5896] gspca_cpia1: usb_control_msg 05, error -32 [ 422.325552][ T5896] gspca_cpia1: usb_control_msg 05, error -32 [ 422.332187][ T5896] gspca_cpia1: usb_control_msg 05, error -32 [ 422.338725][ T5896] cpia1 3-1:0.0: unexpected systemstate: 00 [ 422.406247][ T5896] usb 3-1: USB disconnect, device number 45 [ 422.856209][T12280] rdma_op ffff88802b6731f0 conn xmit_rdma 0000000000000000 [ 423.079042][T12293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1715'. [ 423.177814][T12298] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1716'. [ 423.281522][ T5896] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 423.430293][ T5896] usb 3-1: Using ep0 maxpacket: 16 [ 423.443361][ T5896] usb 3-1: config 252 has an invalid interface number: 15 but max is 0 [ 423.457516][ T5896] usb 3-1: config 252 has no interface number 0 [ 423.468799][ T5896] usb 3-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 423.498973][ T5896] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 423.508406][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.532662][ T5896] usb 3-1: Product: syz [ 423.536836][ T5896] usb 3-1: Manufacturer: syz [ 423.549388][T12329] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 423.551766][ T5896] usb 3-1: SerialNumber: syz [ 423.588345][ T5896] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 423.825335][T12289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.835396][T12289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.919341][ T44] usb 3-1: USB disconnect, device number 46 [ 423.930456][ T5896] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 423.982108][T11166] usb 3-1: Failed to submit usb control message: -71 [ 424.041355][T11166] usb 3-1: unable to send the bmi data to the device: -71 [ 424.070448][T11166] usb 3-1: unable to get target info from device [ 424.115606][T11166] usb 3-1: could not get target info (-71) [ 424.146712][T11166] usb 3-1: could not probe fw (-71) [ 424.179613][ T5896] usb 5-1: Using ep0 maxpacket: 8 [ 424.202534][ T5896] usb 5-1: config 0 has an invalid descriptor of length 112, skipping remainder of the config [ 424.232509][ T5896] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 424.242977][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.270264][ T5896] usb 5-1: config 0 descriptor?? [ 424.906897][ T30] audit: type=1400 audit(1765535019.525:1262): avc: denied { create } for pid=12356 comm="syz.5.1735" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 425.020659][T12365] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 425.058060][ T5896] uvcvideo 5-1:0.0: Found UVC 0.00 device (2833:0201) [ 425.064530][T12366] netlink: 'syz.5.1737': attribute type 13 has an invalid length. [ 425.067590][ T5896] uvcvideo 5-1:0.0: No valid video chain found. [ 425.073912][T12366] netlink: 'syz.5.1737': attribute type 17 has an invalid length. [ 425.140351][T12366] netlink: 'syz.5.1737': attribute type 27 has an invalid length. [ 425.170821][ T5896] usb 5-1: USB disconnect, device number 64 [ 425.172717][T12366] netlink: 'syz.5.1737': attribute type 5 has an invalid length. [ 425.280805][ T44] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 425.370042][T12361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.389608][T12361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.632398][T12376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1740'. [ 426.024327][ T30] audit: type=1400 audit(1765535020.645:1263): avc: denied { setopt } for pid=12379 comm="syz.5.1742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 426.160296][ T5935] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 426.445047][T12390] gfs2: block size(16384) > page size(4096) not supported by filesystem [ 426.500442][ T5935] usb 7-1: Using ep0 maxpacket: 16 [ 426.507375][ T5935] usb 7-1: too many configurations: 123, using maximum allowed: 8 [ 426.516902][ T5935] usb 7-1: config 0 has an invalid descriptor of length 252, skipping remainder of the config [ 426.536302][ T5935] usb 7-1: config 0 has an invalid descriptor of length 252, skipping remainder of the config [ 426.550846][ T5935] usb 7-1: config 0 has an invalid descriptor of length 252, skipping remainder of the config [ 426.567319][ T5935] usb 7-1: config 0 has an invalid descriptor of length 252, skipping remainder of the config [ 426.578921][ T5935] usb 7-1: config 0 has an invalid descriptor of length 252, skipping remainder of the config [ 426.590824][ T5935] usb 7-1: config 0 has an invalid descriptor of length 252, skipping remainder of the config [ 426.602122][ T5935] usb 7-1: config 0 has an invalid descriptor of length 252, skipping remainder of the config [ 426.613492][ T5935] usb 7-1: config 0 has an invalid descriptor of length 252, skipping remainder of the config [ 426.625088][ T5935] usb 7-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 426.635018][ T5935] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 426.645534][ T5935] usb 7-1: SerialNumber: syz [ 426.653939][ T5935] usb 7-1: config 0 descriptor?? [ 426.760211][ T44] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 426.922129][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.940183][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.951230][ T44] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 426.960941][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.988835][T12378] input input20: cannot allocate more than FF_MAX_EFFECTS effects [ 427.013438][ T5935] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input21 [ 427.015585][ T44] usb 3-1: config 0 descriptor?? [ 427.229022][ T5168] bcm5974 7-1:0.0: could not read from device [ 427.246345][ T5168] bcm5974 7-1:0.0: could not read from device [ 427.259177][ T5935] usb 7-1: USB disconnect, device number 22 [ 427.274994][ T5168] bcm5974 7-1:0.0: could not read from device [ 427.360890][ T31] INFO: task syz.3.939:9442 blocked for more than 143 seconds. [ 427.369271][ T31] Tainted: G L syzkaller #0 [ 427.388887][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 427.402990][ T31] task:syz.3.939 state:D stack:24248 pid:9442 tgid:9440 ppid:5808 task_flags:0x480140 flags:0x00080002 [ 427.423182][ T31] Call Trace: [ 427.429855][ T31] [ 427.436435][ T31] ? __schedule+0x10b9/0x6150 [ 427.446597][ T31] __schedule+0x1139/0x6150 [ 427.457621][ T31] ? __lock_acquire+0x436/0x2890 [ 427.468134][ T31] ? __pfx___schedule+0x10/0x10 [ 427.479190][ T31] ? find_held_lock+0x2b/0x80 [ 427.489483][ T31] ? schedule+0x2d7/0x3a0 [ 427.499389][ T31] schedule+0xe7/0x3a0 [ 427.507915][ T31] schedule_timeout+0x257/0x290 [ 427.518324][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 427.537953][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 427.549776][ T31] __wait_for_common+0x2fc/0x4e0 [ 427.562154][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 427.574575][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 427.582809][ T31] ? __pfx_device_del+0x10/0x10 [ 427.587923][ T31] ? kobject_put+0xaf/0x6f0 [ 427.594142][ T31] i2c_del_adapter+0x640/0x850 [ 427.598981][ T31] ? usb_free_stream_buffers.isra.0+0x1b8/0x2b0 [ 427.606280][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 427.612262][ T31] ? rcu_is_watching+0x12/0xc0 [ 427.617125][ T31] ? kfree+0x27d/0x6e0 [ 427.690230][ T31] ? usb_urb_exit+0x1ff/0x2b0 [ 427.702482][ T31] dvb_usb_i2c_exit+0x9f/0xf0 [ 427.734928][ T31] dvb_usb_device_exit+0x334/0x580 [ 427.746058][ T31] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 427.759565][ T31] ? find_held_lock+0x2b/0x80 [ 427.772445][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 427.784854][ T31] ? usb_disable_interface+0x7f/0x4c0 [ 427.794662][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 427.805060][ T31] usb_unbind_interface+0x1dd/0x9e0 [ 427.813752][ T31] ? kernfs_remove_by_name_ns+0xbe/0x100 [ 427.824723][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 427.835351][ T31] device_remove+0x125/0x170 [ 427.845100][ T31] device_release_driver_internal+0x44b/0x620 [ 427.851826][ T31] bus_remove_device+0x22f/0x450 [ 427.858130][ T31] device_del+0x396/0x9f0 [ 427.865544][ T31] ? __pfx_device_del+0x10/0x10 [ 427.874024][ T31] ? __pfx___pm_runtime_barrier+0x10/0x10 [ 427.884239][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 427.900143][ T31] usb_disable_device+0x355/0x820 [ 427.910314][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 427.920553][ T31] usb_disconnect+0x2e1/0x9e0 [ 427.930210][ T31] hub_quiesce+0x170/0x320 [ 427.937992][ T31] hub_disconnect+0xd5/0x500 [ 427.946941][ T31] usb_unbind_interface+0x1dd/0x9e0 [ 427.955994][ T31] ? kernfs_remove_by_name_ns+0xbe/0x100 [ 427.971554][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 427.980605][ T31] device_remove+0x125/0x170 [ 427.993093][ T31] device_release_driver_internal+0x44b/0x620 [ 427.996529][ T44] usbhid 3-1:0.0: can't add hid device: -71 [ 428.010646][ T44] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 428.019718][ T31] ? __might_fault+0xc0/0x190 [ 428.028420][ T31] usb_driver_release_interface+0x109/0x190 [ 428.038775][ T44] usb 3-1: USB disconnect, device number 48 [ 428.047059][ T31] proc_ioctl+0x5c5/0x6f0 [ 428.054707][ T31] usbdev_ioctl+0x1772/0x4070 [ 428.064983][ T31] ? __pfx_usbdev_ioctl+0x10/0x10 [ 428.071223][ T31] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 428.077180][ T31] ? do_vfs_ioctl+0x128/0x14f0 [ 428.082067][ T31] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 428.087090][ T31] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 428.094188][ T31] ? hook_file_ioctl_common+0x144/0x410 [ 428.099746][ T31] ? selinux_file_ioctl+0x180/0x270 [ 428.105466][ T31] ? selinux_file_ioctl+0xb4/0x270 [ 428.110616][ T31] ? __pfx_usbdev_ioctl+0x10/0x10 [ 428.115630][ T31] __x64_sys_ioctl+0x18e/0x210 [ 428.120464][ T31] do_syscall_64+0xcd/0xf80 [ 428.124962][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.130957][ T31] RIP: 0033:0x7f825498f749 [ 428.135364][ T31] RSP: 002b:00007f82557d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 428.144043][ T31] RAX: ffffffffffffffda RBX: 00007f8254be5fa0 RCX: 00007f825498f749 [ 428.152030][ T31] RDX: 0000200000000200 RSI: 00000000c0105512 RDI: 0000000000000005 [ 428.159991][ T31] RBP: 00007f8254a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 428.167988][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 428.176430][ T31] R13: 00007f8254be6038 R14: 00007f8254be5fa0 R15: 00007fff15d8ab68 [ 428.184696][ T31] [ 428.187708][ T31] INFO: task syz.3.939:9445 blocked for more than 144 seconds. [ 428.195317][ T31] Tainted: G L syzkaller #0 [ 428.201826][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 428.210605][ T31] task:syz.3.939 state:D stack:29064 pid:9445 tgid:9440 ppid:5808 task_flags:0x400040 flags:0x00080002 [ 428.223061][ T31] Call Trace: [ 428.226337][ T31] [ 428.229245][ T31] ? __schedule+0x10b9/0x6150 [ 428.233928][ T31] __schedule+0x1139/0x6150 [ 428.238446][ T31] ? __pfx___schedule+0x10/0x10 [ 428.243373][ T31] ? find_held_lock+0x2b/0x80 [ 428.248048][ T31] ? schedule+0x2d7/0x3a0 [ 428.252431][ T31] schedule+0xe7/0x3a0 [ 428.256506][ T31] schedule_preempt_disabled+0x13/0x30 [ 428.262016][ T31] __mutex_lock+0xc69/0x1ca0 [ 428.266597][ T31] ? avc_has_extended_perms+0x47c/0x1090 [ 428.272250][ T31] ? usbdev_ioctl+0x1a8/0x4070 [ 428.277487][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 428.282544][ T31] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 428.288433][ T31] ? find_held_lock+0x2b/0x80 [ 428.293137][ T31] ? usbdev_ioctl+0x1a8/0x4070 [ 428.297902][ T31] usbdev_ioctl+0x1a8/0x4070 [ 428.302550][ T31] ? __pfx_usbdev_ioctl+0x10/0x10 [ 428.307572][ T31] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 428.313542][ T31] ? do_vfs_ioctl+0x128/0x14f0 [ 428.318301][ T31] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 428.323518][ T31] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 428.330415][ T31] ? hook_file_ioctl_common+0x144/0x410 [ 428.335971][ T31] ? selinux_file_ioctl+0x180/0x270 [ 428.341246][ T31] ? selinux_file_ioctl+0xb4/0x270 [ 428.346354][ T31] ? __pfx_usbdev_ioctl+0x10/0x10 [ 428.351480][ T31] __x64_sys_ioctl+0x18e/0x210 [ 428.356240][ T31] do_syscall_64+0xcd/0xf80 [ 428.360743][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.366626][ T31] RIP: 0033:0x7f825498f749 [ 428.371122][ T31] RSP: 002b:00007f82557b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 428.379987][ T31] RAX: ffffffffffffffda RBX: 00007f8254be6090 RCX: 00007f825498f749 [ 428.388028][ T31] RDX: 0000200000000000 RSI: 0000000080045505 RDI: 0000000000000005 [ 428.396067][ T31] RBP: 00007f8254a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 428.404093][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 428.412073][ T31] R13: 00007f8254be6128 R14: 00007f8254be6090 R15: 00007fff15d8ab68 [ 428.420043][ T31] [ 428.423154][ T31] [ 428.423154][ T31] Showing all locks held in the system: [ 428.431653][ T31] 1 lock held by khungtaskd/31: [ 428.436498][ T31] #0: ffffffff8e3c9620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 428.449999][ T31] 2 locks held by getty/5570: [ 428.454706][ T31] #0: ffff88814dadd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 428.464633][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510 [ 428.474746][ T31] 1 lock held by udevd/5815: [ 428.479979][ T31] #0: ffff88814237f358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 428.489528][ T31] 4 locks held by syz.3.939/9442: [ 428.494620][ T31] #0: ffff888144395198 (&dev->mutex){....}-{4:4}, at: usbdev_ioctl+0x1a8/0x4070 [ 428.503941][ T31] #1: ffff888144396160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xa4/0x620 [ 428.514527][ T31] #2: ffff88807784d198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x9e0 [ 428.523777][ T31] #3: ffff888077277160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xa4/0x620 [ 428.534309][ T31] 1 lock held by syz.3.939/9445: [ 428.539227][ T31] #0: ffff888144395198 (&dev->mutex){....}-{4:4}, at: usbdev_ioctl+0x1a8/0x4070 [ 428.548413][ T31] 1 lock held by syz.0.1746/12399: [ 428.553582][ T31] #0: ffff88814237f358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 428.563536][ T31] [ 428.565908][ T31] ============================================= [ 428.565908][ T31] [ 428.574392][ T31] NMI backtrace for cpu 1 [ 428.574406][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 428.574427][ T31] Tainted: [L]=SOFTLOCKUP [ 428.574431][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 428.574440][ T31] Call Trace: [ 428.574450][ T31] [ 428.574456][ T31] dump_stack_lvl+0x116/0x1f0 [ 428.574475][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 428.574495][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 428.574512][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 428.574532][ T31] sys_info+0x133/0x180 [ 428.574549][ T31] watchdog+0xe66/0x1180 [ 428.574569][ T31] ? rcu_is_watching+0x12/0xc0 [ 428.574582][ T31] ? __pfx_watchdog+0x10/0x10 [ 428.574596][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 428.574613][ T31] ? __kthread_parkme+0x19e/0x250 [ 428.574629][ T31] ? __pfx_watchdog+0x10/0x10 [ 428.574644][ T31] kthread+0x3c5/0x780 [ 428.574662][ T31] ? __pfx_kthread+0x10/0x10 [ 428.574679][ T31] ? rcu_is_watching+0x12/0xc0 [ 428.574691][ T31] ? __pfx_kthread+0x10/0x10 [ 428.574708][ T31] ret_from_fork+0x983/0xb10 [ 428.574725][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 428.574741][ T31] ? __switch_to+0x7af/0x10d0 [ 428.574759][ T31] ? __pfx_kthread+0x10/0x10 [ 428.574776][ T31] ret_from_fork_asm+0x1a/0x30 [ 428.574807][ T31] [ 428.574812][ T31] Sending NMI from CPU 1 to CPUs 0: [ 428.715384][ C0] NMI backtrace for cpu 0 [ 428.715398][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 428.715415][ C0] Tainted: [L]=SOFTLOCKUP [ 428.715419][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 428.715427][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 428.715445][ C0] Code: 36 60 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 e9 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 428.715457][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 428.715468][ C0] RAX: 000000000190e689 RBX: 0000000000000000 RCX: ffffffff8b7776d9 [ 428.715481][ C0] RDX: 0000000000000000 RSI: ffffffff8dacb6cd RDI: ffffffff8bf2a580 [ 428.715490][ C0] RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d [ 428.715498][ C0] R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000 [ 428.715506][ C0] R13: ffffffff8e097b40 R14: ffffffff90887cd0 R15: 0000000000000000 [ 428.715515][ C0] FS: 0000000000000000(0000) GS:ffff8881248fd000(0000) knlGS:0000000000000000 [ 428.715527][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 428.715536][ C0] CR2: 00007f7de49b7198 CR3: 000000007cd58000 CR4: 00000000003526f0 [ 428.715544][ C0] Call Trace: [ 428.715548][ C0] [ 428.715553][ C0] default_idle+0x13/0x20 [ 428.715567][ C0] default_idle_call+0x6c/0xb0 [ 428.715580][ C0] do_idle+0x38d/0x510 [ 428.715600][ C0] ? __pfx_do_idle+0x10/0x10 [ 428.715618][ C0] ? do_idle+0x2e3/0x510 [ 428.715636][ C0] cpu_startup_entry+0x4f/0x60 [ 428.715653][ C0] rest_init+0x16b/0x2b0 [ 428.715667][ C0] ? acpi_subsystem_init+0x133/0x180 [ 428.715682][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 428.715697][ C0] start_kernel+0x3ef/0x4d0 [ 428.715711][ C0] x86_64_start_reservations+0x18/0x30 [ 428.715724][ C0] x86_64_start_kernel+0x130/0x190 [ 428.715738][ C0] common_startup_64+0x13e/0x148 [ 428.715758][ C0] [ 428.912005][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 428.918828][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 428.929473][ T31] Tainted: [L]=SOFTLOCKUP [ 428.933783][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 428.943811][ T31] Call Trace: [ 428.947071][ T31] [ 428.949988][ T31] dump_stack_lvl+0x3d/0x1f0 [ 428.954564][ T31] vpanic+0x640/0x6f0 [ 428.958529][ T31] panic+0xca/0xd0 [ 428.962227][ T31] ? __pfx_panic+0x10/0x10 [ 428.966618][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 428.972578][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 428.978713][ T31] ? nmi_trigger_cpumask_backtrace+0x2be/0x300 [ 428.984848][ T31] ? watchdog+0xe83/0x1180 [ 428.989248][ T31] ? watchdog+0xe76/0x1180 [ 428.993650][ T31] watchdog+0xe94/0x1180 [ 428.997879][ T31] ? rcu_is_watching+0x12/0xc0 [ 429.002619][ T31] ? __pfx_watchdog+0x10/0x10 [ 429.007272][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 429.012446][ T31] ? __kthread_parkme+0x19e/0x250 [ 429.017446][ T31] ? __pfx_watchdog+0x10/0x10 [ 429.022101][ T31] kthread+0x3c5/0x780 [ 429.026151][ T31] ? __pfx_kthread+0x10/0x10 [ 429.030720][ T31] ? rcu_is_watching+0x12/0xc0 [ 429.035458][ T31] ? __pfx_kthread+0x10/0x10 [ 429.040026][ T31] ret_from_fork+0x983/0xb10 [ 429.044593][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 429.049685][ T31] ? __switch_to+0x7af/0x10d0 [ 429.054340][ T31] ? __pfx_kthread+0x10/0x10 [ 429.058909][ T31] ret_from_fork_asm+0x1a/0x30 [ 429.063668][ T31] [ 429.066950][ T31] Kernel Offset: disabled [ 429.071245][ T31] Rebooting in 86400 seconds..