last executing test programs: 14.83425796s ago: executing program 0 (id=946): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x0, 0x60, 0xd0e0000, 0x0, 0x100, 0x390, 0x1d8, 0x1d8, 0x390, 0x1d8, 0x7fffffe, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x21}, @private=0xa010101, 0xffffffff, 0xff000000, 'vxcan1\x00', 'nr0\x00', {0xff}, {0xff}, 0x88, 0x0, 0x60}, 0xee02, 0x2a0, 0x2c0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{0x3, 0x77, 0x7, 0x2}, {0x6, 0x5d, 0x8, 0xf}, {0x0, 0x7, 0x4, 0x5}, {0x200, 0x10, 0x4, 0x2}, {0x2, 0x7, 0x9, 0x7}, {0x8, 0x2, 0x40, 0x80}, {0x7, 0x10, 0x4, 0xc27b}, {0x0, 0x8, 0x1, 0x9}, {0xa66, 0xf9, 0x2, 0x40}, {0xf207, 0x18, 0x1, 0x6}, {0x2, 0x8, 0x6, 0xb6}, {0x0, 0x5, 0x5, 0x4}, {0x9, 0x7f, 0x5, 0x2}, {0x5, 0x2, 0xf, 0xc00}, {0x1, 0x9, 0x2, 0x54}, {0x3, 0x2b, 0x2, 0x3}, {0xffff, 0x5, 0x6d, 0x7}, {0x6, 0xa, 0x5, 0x3}, {0x8, 0xe, 0x5}, {0x0, 0x40, 0x7, 0x88}, {0x7, 0x2, 0x6, 0x3}, {0x98d, 0x2, 0xff, 0x5}, {0x81, 0x1, 0x11, 0x7f}, {0x1, 0x2, 0xc0, 0x86f}, {0x8, 0x2, 0x9, 0x6}, {0x7, 0x75, 0x7, 0x9}, {0x9, 0x6, 0x6, 0x8001}, {0x120, 0x4, 0x2, 0x3dbd}, {0x5, 0x8, 0x9, 0x1}, {0x0, 0x3, 0x9, 0xff}, {0x0, 0x4, 0x0, 0xfffffff8}, {0x7, 0x1, 0x9, 0xd}, {0xfff, 0x7, 0x0, 0xbc}, {0x0, 0x4c, 0x8, 0xff}, {0x8, 0xc0, 0x80, 0x4}, {0x1, 0x1, 0x0, 0x508d}, {0x1ff, 0x5, 0x81, 0xd}, {0x0, 0x0, 0x2, 0x5}, {0x401, 0x3, 0x80, 0x9}, {0x9, 0x2, 0x0, 0x8}, {0x0, 0x1, 0xfb, 0x7}, {0xa, 0xff, 0x1, 0x7fffffff}, {0x7, 0x4, 0x7, 0x40}, {0xa, 0xc, 0x6, 0x5}, {0x9, 0x8, 0x7, 0x10000}, {0xe9, 0x6, 0x3, 0x3}, {0xb, 0x7, 0x7, 0x200}, {0xe, 0x5, 0x6, 0x1ff}, {0x9, 0x5, 0x0, 0x1}, {0x9, 0x1, 0x7, 0x1}, {0x1c0, 0x5, 0x2, 0x8e1}, {0x0, 0x5, 0x0, 0x7f07}, {0x6, 0x10, 0x1, 0x201}, {0x2, 0x28, 0xfc, 0x8}, {0x6, 0x3, 0x7, 0x2}, {0xa, 0xc5, 0x4, 0x28}, {0x3, 0x71, 0x8, 0x7}, {0x6e, 0x2, 0x0, 0x8}, {0x0, 0x7, 0x7, 0x10000}, {0x9, 0x7, 0x5, 0x4800000}, {0x100, 0x8, 0x3}, {0xd34, 0x7, 0x8}, {0x9, 0x9, 0x1, 0x80000001}, {0x6, 0xfe, 0x3, 0x3}], {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@multicast2, @empty, 0xffffffff, 0xffffff00, 'veth1_virt_wifi\x00', 'xfrm0\x00', {}, {}, 0x1, 0x1, 0x6c}, 0x9400, 0x70, 0xd0, 0x94}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x5, 0x0, 0x6, 0x4, 0x6], 0x0, 0x3}, {0x0, [0x5, 0x1, 0x6, 0x0, 0x3, 0x1]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) 14.580742027s ago: executing program 0 (id=947): prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x28b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x6a040000) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000, 0x8000}], 0x0) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x7f}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 11.756575251s ago: executing program 2 (id=951): syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) getsockopt$inet6_buf(r0, 0x3a, 0x20, 0x0, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x7a) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000380)="8908617d3ca9c65cf7fd64094150076787f115b8441968d7fe4ff10af24f09c1267138d00948d9ae45efccf99baee8e9606f4073b116638b2fe6d81f525272950a10683356a48175466ac0b768c066eeee4f6bf80ee08fc61b21eef10b4b28457a87b332ae564bfae5fcfbc1040327e464582e5161482ef36f3d4e38ea6617dc", 0x80}], 0x2}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/8, 0x8}, {&(0x7f0000001400)=""/4096, 0x1000}], 0x2}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x121100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x800001000091}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) mount(&(0x7f00000003c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)='nilfs2\x00', 0x200480, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r5, 0x8800000) sendfile(0xffffffffffffffff, r5, 0x0, 0x578410eb) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000080)=@hopopts={0x21}, 0x8) 10.816882622s ago: executing program 2 (id=953): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) readv(r0, &(0x7f0000000840)=[{&(0x7f0000000100)=""/204, 0xcc}, {&(0x7f0000000240)=""/80, 0x50}, {&(0x7f00000002c0)=""/131, 0x83}, {&(0x7f0000000380)=""/49, 0x31}, {&(0x7f00000003c0)=""/172, 0xac}, {&(0x7f0000000480)=""/183, 0xb7}, {&(0x7f0000000640)=""/203, 0xcb}, {&(0x7f0000000740)=""/236, 0xec}], 0x8) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="81100000080000000000000007000000"], &(0x7f0000000280)='GPL\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0x13, &(0x7f0000000480)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000005}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000540)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x800, 0x0, 0x2, 0x1}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r6, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0xf, 0x400000000000, 0x25, 0x7, 0x8, r5, 0x0, 0x0, 0x40000000000e7, 0x0, 0x2, r5}]) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000300)={'fscrypt:', @desc3}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff) mmap(&(0x7f0000541000/0x3000)=nil, 0x3000, 0x3, 0x30, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 10.315779123s ago: executing program 0 (id=956): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x35451d7003101a08, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x3f, &(0x7f00000025c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3fffffff}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xb}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fb}}, @alu={0x4, 0x1, 0x9, 0x2, 0x1, 0x20, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}}]}, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x31, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000001}, 0x94) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) r3 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000040)={0x1, 0x0, 0x6, {0x200809, 0xbdd, 0x200, 0x1}}) 9.972180117s ago: executing program 0 (id=957): mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) r1 = getpid() r2 = getpgrp(r1) syz_usb_control_io$printer(r0, &(0x7f0000000800)={0x14, &(0x7f00000006c0)={0x0, 0x0, 0x6f, {0x6f, 0x8, "a55475c3cc061a244a9014ba1acfe582a826d31f3b4095ed72ea0e0f6a3f76d8a2bf747d66f1ac74906ffbf699029aea5e158b3829620f0dc37afd143e4fde53549af6ad00acd397ea9a20411e98a1eef7b80736e23ff974f1bfaf5e6c1abd8da3ebb80b8ed094394ff0ab0d10"}}, &(0x7f0000000740)={0x0, 0x3, 0xa5, @string={0xa5, 0x3, "edaa9b24d9eaee06e9bd2bbb85c9f696b8464c51b8f631fff21e61edeb032e89305485105f44e11c448e466a24af16629b6210afcfa53a9739536237468450b51730300adacb93fe46fdbb31e94628f1db6751f21f1e7e67b49f333357cebdc54f42d8959cc125239f36526df5f0f332e9a1445b2ba91947081c8b252bf522c18e1818d67acaccd35bbf431ff651bbe4dd3baa4feb0d2421b4df7b7655d20f4aee4994"}}}, &(0x7f0000000a00)={0x34, &(0x7f0000000840)={0x0, 0x1, 0x14, "39529d42ee2c41de346f1652907710715e2d21f3"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000900)={0x20, 0x0, 0x45, {0x43, "2170dc61cec22e47bd40ea5a70537673d3ae8058ca772280ff14d7b300201e65ab48806823910cb6ef7a48a000b090933646bb530878632fb12c011bdd3d6489d7dc0e"}}, &(0x7f0000000980)={0x20, 0x1, 0x1, 0x37}, &(0x7f00000009c0)={0x20, 0x0, 0x1, 0x9}}) kcmp(r1, r2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) rseq(0xfffffffffffffffe, 0x20, 0x0, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x2081) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x15, 0x9, 0x800}, 0x50) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xe138, 0x198, 0x198, 0x198, 0x268, 0x358, 0x358, 0x268, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @private=0xa010100, 0x0, 0x0, 'tunl0\x00', 'veth0_to_bond\x00', {}, {}, 0x21, 0x0, 0x4}, 0x0, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d03e814d000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x0, 0xfffff4a5, 0x4, 'snmp_trap\x00', 'syz0\x00', {0x7}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0x0, 0xc, [0xf, 0x17, 0x2e, 0x18, 0x119, 0x32, 0xe, 0x23, 0x28, 0x28, 0x3, 0x15, 0x1b, 0x21, 0x23, 0x3c], 0x1, 0x6a, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) r7 = dup(r5) write$UHID_INPUT(r7, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r8, 0x5522) ioctl$USBDEVFS_BULK(r8, 0x5523, 0x0) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000340)) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000200)={&(0x7f0000000100)=[{0xfffa, 0x800, 0xfe, &(0x7f0000000240)="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"}], 0x1}) 9.215948105s ago: executing program 2 (id=958): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc) mount$nfs4(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='tcp']) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt(r3, 0x5, 0x8, 0x0, 0x0) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r4, &(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0) listen(r2, 0xf5f) 8.952366559s ago: executing program 3 (id=959): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r1, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="12000000080000000400000002"], 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) pselect6(0x40, &(0x7f0000000240)={0x800, 0x0, 0x1ff, 0x7d, 0x3, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) 7.941828583s ago: executing program 2 (id=960): r0 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000001040)=ANY=[@ANYBLOB="12010003000000103d100001400001020301090285000301d8100c080b0102010130020904000000010130000a2401100a00070000000904010000010230000904010101010230000905010920000e00030a2525ffffff7f0c8001090404ba0720023000090402010101023000172401060080000007000200000000000000064a0900100905820920007f"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_clone(0x10208880, 0x0, 0x0, &(0x7f0000004480), 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000023c0)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}, 0x6}], 0x1, 0x2, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x40, 0x6, 0xf5, {0xf5, 0xa, "fdee0b014c15942b75bbc026e619d38cf2f750deb10613932dee0d5e8c1c4ac75dbce13039904634721de8ede75a5e5de4fc94c01b382cd0fe9ff9e6456244f236eca2560bb26e79c963d8728099d1bc58b2c776e19ce8abc38b56851765f20df6168c9d15be40eedad9c4a9a74f31128395aebac97f68013a3e54be41acf97ec05efbbc95707ecc44b154e7ba267c6143d597b52ec80e3f4f01460b56756bb6dfee0ea8407c00ef29b48b5e578b888a6bfccd385f5665d2ac3707cab2aaf211ddd76e41e3ea734b1f52821ac04f0361b50a25b03c3eacebdbdb12c22f4dcf1f9a9d52451723fb843d92bb381400ffd5686d9b"}}, &(0x7f0000000100)={0x0, 0x3, 0x19, @string={0x19, 0x3, "11dac3405144e4212bca7be6b08cf099237948c4c05f19"}}}, &(0x7f0000000380)={0x44, &(0x7f0000000180)={0x0, 0x4, 0x28, "dd4756c3d265131f5316aee9b374ecee7e47aad3179fd796d9d03006ca712023e452307d95845b46a64a67"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0xfd}, &(0x7f0000000200)={0x0, 0x8, 0x1}, &(0x7f0000000240)={0x20, 0x81, 0x2, "6c9c"}, &(0x7f0000000280)={0x20, 0x82, 0x3, "a77feb"}, &(0x7f00000002c0)={0x20, 0x83, 0x2, "5a17"}, &(0x7f0000000300)={0x20, 0x84, 0x3, "0cc246"}, &(0x7f0000000340)={0x20, 0x85, 0x3, "e6a44d"}}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000010c0)=ANY=[@ANYBLOB="bc0000001900010000000000000000001d010900580011"], 0xbc}}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getgid() 7.940665313s ago: executing program 3 (id=961): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000780)=0xc) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x802) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x4e21, 0x3, 'sh\x00', 0x1d, 0x9d43, 0x75}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x2f, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'lc\x00', 0x32, 0x8, 0x77}, {@remote, 0x4e1a, 0x10000, 0xcd, 0xfffffffe}}, 0x44) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000200)=[{0x6, 0x36, 0x0, 0x1007}]}) syz_open_dev$MSR(0x0, 0xc, 0x0) 7.174793287s ago: executing program 1 (id=962): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f00000004c0)=0x72, 0x4) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0xffffffffffffff00}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x6) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000009b80)=""/102392, 0x18ff8) socket$tipc(0x1e, 0x5, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[@ANYRES64=r1], 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}, 0xb}, 0x28) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xac}}, 0x2204c001) sendmsg$IPCTNL_MSG_CT_GET(r3, 0x0, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)=0x0) clock_nanosleep(0x2, 0x0, 0x0, 0x0) timer_settime(r4, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x18, r6, 0x1, 0x0, 0x3, {}, [@IPVS_CMD_ATTR_DEST={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8091}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[]) write(r5, 0x0, 0x0) 6.37018969s ago: executing program 3 (id=963): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) sendmmsg$inet6(r0, &(0x7f0000001280)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x8, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x240c089d) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000040)={{@host, 0xfffff800}, 0x3a, 0x39e, 0x9, 0x5}) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x96, 0x47, 0x3f, 0x20, 0x10c4, 0x8244, 0x7275, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8b, 0x4b, 0x28, 0x6, "", [{{0x9, 0x4, 0x31, 0xe, 0x0, 0x3, 0x0, 0x0, 0x1}}]}}]}}, 0x0) 5.929357353s ago: executing program 1 (id=964): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f00000001c0)={0x5, 0x5}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) r1 = socket(0x11, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)) socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000021bf0000000000000300000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000200)='syzkaller\x00', 0xb, 0x0, 0x0, 0x41000}, 0x94) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x100000002, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xfffffffd}) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x17) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000100)={0xa, 0xffffffffffffffff, 0x1}) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r5, 0x40086e81, &(0x7f0000000140)=0x9) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0x6, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x10000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r9}}) write$P9_RVERSION(r8, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x80000, 0x8, '9P2000.u'}, 0x15) ioctl$sock_inet6_udp_SIOCINQ(r6, 0x7b9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r10, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8937, &(0x7f0000000040)={'veth0_to_batadv\x00', @random="010000201000"}) 5.597700054s ago: executing program 0 (id=965): syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f00000000c0)={0x1, &(0x7f0000000500)=[{0x6, 0x4, 0x40, 0x7ffeffff}]}) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)=""/79, 0x4f) socket$nl_generic(0x10, 0x3, 0x10) lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200), &(0x7f0000000240)={'U+', 0x400}, 0x16, 0x3) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) rt_sigpending(0x0, 0x1000000) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x458a40, 0x0) fcntl$setlease(r1, 0x400, 0x0) exit(0xfffffffffffffffd) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) sched_getscheduler(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x6ab, 0x24018080) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) io_setup(0x4005, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) 4.820133233s ago: executing program 2 (id=966): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0)={0xa}, 0x1) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x12c, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x12c}}, 0x1c) 4.620191908s ago: executing program 3 (id=967): r0 = semget$private(0x0, 0x6, 0x431) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000240)=[0xfff6, 0x400, 0xe40, 0x1d7, 0xca2, 0x5, 0x5]) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) syz_emit_ethernet(0x46, &(0x7f0000000180)={@local, @random, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x41}, {[@lsrr={0x83, 0x7, 0xd0, [@multicast2]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80}}}}}}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002e40)={r6, 0x58, &(0x7f0000002dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmmsg$inet6(r5, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="b481678b7eb1576a06d23428f6a97a768f18e62d7c25899d1eaa790e6e23885932eab98406eb430c46d872078f14d09bf2ad9a6247dbbb422dab8b60fc120a8451802bf73ceacbdf3cd83888adbb526d5671c737c6ead282d72d1dc1250120cfa7f80698aa01772d9de3614cc6243e0b8def623f5fd6325a9a5430dab4ab824e3facf68e0b4e0ae8180485b8dae1ea0f0faa5c1444858182e26e4eb3", 0x9c}, {&(0x7f0000000500)="d2c3159c5f14748c485ab682341671f77746eb9ebc654f199070ebb7bcaf2f348ef2315f65a1724e06fdda42b67f6de20b18ae15a1508ff54964eb852a8bea1c7bc8157159d5637c87571d38883e1290c9d128ccde33d9c79ba519192b6dbd0dfd7c35367c20b86ac1d9fd15d89ea63ed2869f7bdd481ac683fb1a055467e6c98e4e91a6a85d5e9b7cfaf1c60bb369f416636f02f526e5941575ad", 0x9b}], 0x2}}, {{0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f0000000600)="04a2bc22ffe8d179a95ce775a3ed255e2ecdc9eb72c6016bd2905d469bfea340a0d242c93729bca1e1a0c0d873757dbc4d3f148002b3601e7ee61d093911c5a335987987866e22a75e5d1b333a49035621e8e94ac7178b8f868791caa1887949d43616495c197a92472ad4c65c30697e1f144455bbe9653ba8794ba3e9bb6612d0a590bda52a57af5b8b07174b4589ef4660586ff4e89527cc556432c1c1eb2e25c165e2b6667e", 0xa7}, {&(0x7f00000006c0)="99f897af6b14f7521c85c501d59db19f8f0de1194919ded7f179c82e5512992e8ea9d2f3fba4daccca3eee", 0x2b}, {&(0x7f0000000bc0)="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", 0xe00}, {&(0x7f0000001bc0)="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", 0x1000}, {&(0x7f0000002bc0)="044c234860cedb3da29665ac8680df054414254ff2fcd59c5fdb3cbdbc40fa32ae3bbd46734e71fa1a1c65206ed112759364450241c607b3ea668181ca545fcbd4b4096f2b03cf49942d545a981cd63e006504", 0x53}, {&(0x7f0000002c40)="dea2cf07f6b14d91484d501f44", 0xd}, {&(0x7f0000002c80)="241e4d7f9d7cb328693055c0556e2d048dbf35fd27601bda72f4dcdf38904d6454cbbdb15dd9f2133862981e69f76ced4b3b6ccbbf1b721b45347c8be076529fe980117b5b6383c24c375142bcc8051d027d8279f1a87fcb21dab68f1437409840b0ddb39fc883ea21c56baa577428cbe8f9d69610761c776da737fc0b69f4915126cb87e4cc56", 0x87}], 0x7, &(0x7f0000002e80)=ANY=[@ANYBLOB="14000000000000002900000043000000877f0600000000000000e0000000000000002900000037000000671900000000000005020d20010100f94d9d754101f789366603e4ff8cc93e07ab6c366b851d9911c1d5dad373b4bdcd5a028f1c48221535e6408dab97a4c70e9129de4f3bb797b6dcc62565b7397430f09de1aebea9bb031cd996218bf7c91000000000000000000000ffff64010101075800000000140f01000700000000000000005c7ff51dc36aca4b00000000000000f7ffffffffffffff0600000000000000000000000000000007000000000000000b00000000000000feffffffffffffff0700000000000000000100000100500000000000000029000000040000003b07000000000000c910ff010000000000000000000000000001c910fe8000000000000000000000000000bb05020008000100050200adc204000000060001001400000000000000290000000b000000000000000000000024000000000000002900000032000000ff0100"/384, @ANYRES32=r7, @ANYBLOB="00000000380000000000000029000000370000001d0300000000000005020006050207e7040103c910ff020000000000000000000000000001000000140000000000000029000000080000000c00000000000000"], 0x1d8}}, {{&(0x7f0000003080)={0xa, 0x4e20, 0x56, @mcast1, 0x2}, 0x1c, &(0x7f0000003280)=[{&(0x7f00000030c0)="ba9d48954674d9f44636d2e7b8362ea98b4b17a555ccf4c5d42a369e69ca2b9bc4a43ff878f629991a8d787c13e5417c9ae65e9a81861da16bfd5ab32acd574e0268aa19879186c683267c470561fee4fe97700cc8dbacbf90765a2bdd3407a414ef82ac518ee7321716e92b58d1cb99620b41c35f70065fb181a5a02369c2a0f44cda066a938ea6d2cf03e6f2cc101df5a140ad9fcccf7ec76a23474e1d68f814b2ac58001b83458bf80751870a0f8041793036a0132211989d731fd29211b0ed010ae62e338c6490bc9bb46d88440036c148c7", 0xd4}, {&(0x7f00000031c0)="80cfec2930becb5374cde5bca7c7cfc0e97d595ce037839a1d8e64a83ddb279171e68f3a608da40af1312848da51320fb5600e5de145b29a7b26e168cf7a13cb25b807b030359ac38ebc18cf803a695f0df8f0a2e8577e9494930a93cdc30296c3251fda16f255e73905d14c617e8012e6e073a8c6e9965274e7132a7ff45a043a8450817fd621a921f9337db09a747251879f0883092c6fbe3bcacb48", 0x9d}], 0x2, &(0x7f00000032c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x595}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x29, 0x8, 0x1, 0x6, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote]}}}], 0x70}}, {{&(0x7f0000003340)={0xa, 0x4e22, 0x1ff, @private1, 0x4}, 0x1c, &(0x7f0000003880)=[{&(0x7f0000003380)="0e17586a7eb30259c7f364c499e43d91d74d56e6d76cb35246ea28be771031e9c415efa9d6a2536f488f14a8e26dda87cd4ce8f9d4065046d08f4c9861f59a7d97d5889b6fd2a5fedcb2726d37e9389680fda609b47f8c652ac7ebeef7c158c5dfb34813ee43dccc495e1d46f2dc4ac66092db550bf8189e17ac49110854bc73790cc5acf16dd36a0d1130a970f4cd4f4b7056383ab505ca356c10d9d37d8e39477cbd3e714d35c734637ac3433ffb505fae20c31a6d4f822a5bb300a9a1", 0xbe}, {&(0x7f0000003440)="fbd004b0ef5dc298f7954b1d3f55b6a0aaf0261b7f6f6c5844e4f3ced6974edc479fb9df8814d03e931307d3475d10eae4432ea03bbdb7ffdc6f99e3b7aa42a0e65c74df4a2e059d0796f2df7fb6e990de1b3e5d4bc41f4e6833116466b4bb5942709e35f5d5ac66", 0x68}, {&(0x7f00000034c0)="be92947675bd1c4131e0b2d3b1c2bf4b49f58fec1f6abf07cc67180034d19a33c69482ff0e53703d08f817a5359efb3a546a87b8666d26d7c87fd30032108493b6c78242433810294a72defa5bae075b22196dbbadf0cc3ce3af030ad03ff424623a6472d4876aa6f1a3084e90ee7aff2383bff3075221876ed47893874e3c9013", 0x81}, {&(0x7f0000003580)="32371ea696efe2c95b3ef7488745d5bf757f8936b56f548888fba8157e29b45d02dca396ee4641d2aaab21144078448f3af12c6ffc3c2990668bc1958d4249e9d57c5022c20bf7d30c095f5cd88a8d7eb731ebca3ca7cb320d65048bf363b4a8b8f16d7e7a53e0bcf0cf9e44c2d09c3a5d6ff439afe5a57193346e2ffdf2b18500e744c4ab6220793dc17a50f69c6663d0780586334f7d83018746", 0x9b}, {&(0x7f0000003640)="e4f4a2f3259f73310fd4bc2046865b0952901666beeff00b51de999a62941e91fc5e06bc54fe437cd119eb5bce", 0x2d}, {&(0x7f0000003680)="b0475733e2e6cb9ee226897056e9c8fca03a0795e9a14233f6d39a1cd75519fcb7fc485d23d97997a2e400035cb1e95b193ff0ae5bd507fa39a35b723c33526c02bc4f7a4a0de973bc2b287985e924d10c365150d5942fce0d6c34d10cb16a3b9d2e6ac7899504c1b14fe4da5491080dc78f009129662401075ffc776594131b7c906592bbc170f8d32b3686cca39bd4daec2dd7f405378b29f68ec165ad2d6a861da388f51e6ed81678b3851bbc8418863ce44e9610b91e52fdb578273c0694408ecda0a1244dbf325f0d50c94e9854ad504813a6a5c2f1077c60712029bd9a6f85daff6805eaa1", 0xe8}, {&(0x7f0000003780)="5213260612f3e36e31a51b3bb42b9f47cdacc6fad34d55a1765a89f41928381283dc8d8e395f2504747413c77d7293e849bba0df58e8bfa5c69db5095b342aa4344f9eea9cfcc650b89a2bd1903dd782fc3db01c711480ad16862455dafb6cb3df06f3fad4ae45f560a4957fc76d17d92fd5a702928db9271e8db84432d8ddab29f66febcfae71b6d46d7b380c0f423e5eda7715c800cfe12219983b9d958ead380879d1f1b7aec7833851b152c12f6a2dcf53e971934f6cb70eaa748c14b2f137d6e4d7e2c788f9471ee464b0abc023d4995b34c9a7", 0xd6}], 0x7, &(0x7f0000003900)=[@hopopts={{0x160, 0x29, 0x36, {0x88, 0x28, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x7, 0xad, "a2d925d3648233dde34c8e2414e164fc138d72432777487de258ca5e267c7a96d5f6a24c5053636b5401e026bed3b5fca9b8ac584e3de63b05eb149265fa8dd3d32af49c2f9d0afaa8634401731a2e50abcdc44c8bb3cb6610e6192ff04beabbaba83d2d122c0ea88a36226fd671e4915c4218cf1a3c0115c9a027f3e7c881dbaadbab1c0678d8466f3362edf78730189ea4a2cd954f10c0cfec3b0573fa837f106ca3cbf6ced9aee612daf110"}, @calipso={0x7, 0x30, {0x3, 0xa, 0xb, 0x8, [0x9, 0x0, 0x4, 0x5, 0x10]}}, @generic={0x3c, 0x49, "84fee841207410325082dc23a516ff8f9b7866a268fb58a8525777e2955441ab30ee0c21d0fae0e2a7c5de335c0470c9c535104976b312003c7738156e7684b2d547112a7d138fe7b0"}, @calipso={0x7, 0x10, {0x3, 0x2, 0x1, 0x3, [0x5]}}]}}}, @hoplimit_2292={{0x14}}, @dstopts={{0x28, 0x29, 0x37, {0x9d, 0x1, '\x00', [@jumbo, @pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x8}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6}}], 0x1d0}}, {{&(0x7f0000003b00)={0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c, &(0x7f0000005680)=[{&(0x7f0000004500)="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", 0x400}, {&(0x7f0000005500)="1477b1cb88f1f3e9738129eca0a10fb9145428b12f561f4d62d127d17429a15ea777b2097a8859735cc4d754ec21bfc773b817228c2fae3b75608afcbd3d6ea1df32b1c8442f3221ad4f092bfae714b00a2d8aa736698faa", 0x58}, {&(0x7f0000005580)="a6c3bfa7551382fd8207cc0dd9097106150a8a284f57671aaad9c7eac90b2d9bb46508574dad21981622edfbd30af57240e75684255c8fbee2cc768fb2f2dde1d137ad679c39b4161737c1d4fc5ec2ef6a19cc1065ba9d777f191ff51b19b29153d0c9f44af3be7d47a65d02bf9cef97d0220c8ba1fd43b30337bcfaadba35510f30ee0a6e23e569b9f85b7e666edc0ed5e4a9a74d9870cf52480acbd0c0f90a", 0xa0}, {&(0x7f0000005640)="4d643c2d578af46c889b4c2ea7e5", 0xe}], 0x4, &(0x7f00000056c0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @hopopts={{0x28, 0x29, 0x36, {0x33, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}]}}}], 0x40}}], 0x5, 0x10) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file2/../file0\x00', 0x2028, 0x150) setsockopt$inet6_int(r5, 0x29, 0x33, &(0x7f0000000000)=0x2, 0x4) sendmmsg$inet6(r5, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x3f, &(0x7f0000000180)=0x79cf, 0x4) 4.195279107s ago: executing program 4 (id=968): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x12}}}}, [""]}, 0x20}}, 0x80) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) sendmsg$NFC_CMD_ENABLE_SE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010007000000fcdbdf2511000000080001"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 4.011944966s ago: executing program 4 (id=969): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x208000, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x2}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000200b7030000ffffff90850000000f00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=@newtfilter={0x48, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "079fbc52a59e95308b48f6f98f948671"}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 3.818384268s ago: executing program 2 (id=970): prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x28b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x6a040000) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000, 0x8000}], 0x0) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x7f}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.370281345s ago: executing program 4 (id=971): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x18, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000170000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009b00000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5e}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00'}, 0x27) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000009000000000000000a14000000140a0300000000000000000002000000140000001100010000000000000000000000010a"], 0x3c}}, 0x0) 2.877434906s ago: executing program 1 (id=972): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x10000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x4004804) 2.796650042s ago: executing program 0 (id=973): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000540)={0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffd0c}) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss, @window={0x3, 0x7}, @window={0x3, 0x0, 0x401}, @window], 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x4b, 0x0, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000000)={0xc}) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f00000001c0)={0x33, 0x2, 0x0, 0x4, 0x0, [@private0]}, 0x18) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0xc9100120, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000380)=""/149, 0x95}], 0x1, 0x4, 0x3) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 2.275697242s ago: executing program 4 (id=974): socket$xdp(0x2c, 0x3, 0x0) io_uring_setup(0xf04, &(0x7f0000000180)={0x0, 0x4f81, 0x80, 0x4004, 0x183}) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000440)=0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="54000000020605000000000000000000070000000c00078008001240000000060500010006000000050005000200000005000400000000000900020073797a310000000010000300686173683a6d702c6d616300fd646aa891b6c870de9cf9f213bbf53ef216fa5e5fe942239c65d8a0af4aa262744b4cefddc54c0734d6c6611821b367e61e73e7e901d0b664fd64510a3eb081bcbbd9e55cd794db89f260c0a9ed03839c6dc2d7d63ba7acf8988ba86e2278bc36289c8205b4d60007deb14a1836bf30d816589573254252ae8ab12c0b858251"], 0x54}, 0x1, 0x0, 0x0, 0xc854}, 0x4084) syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(0x0, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000ff080800080018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_BLANKSCREEN(r6, 0x560e, &(0x7f00000000c0)) move_pages(r0, 0x1, &(0x7f0000000000)=[&(0x7f000044c000/0x3000)=nil], 0x0, &(0x7f0000000040), 0x2) r7 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r7, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r7, 0xc0945662, &(0x7f0000000240)={0x40, 0x0, '\x00', {0x0, @reserved}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f00007ac000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f00004ef000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000765000/0x4000)=nil, 0x0}, 0x68) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.199339465s ago: executing program 1 (id=975): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f00000004c0)=0x72, 0x4) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0xffffffffffffff00}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x6) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000009b80)=""/102392, 0x18ff8) socket$tipc(0x1e, 0x5, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[@ANYRES64=r1], 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}, 0xb}, 0x28) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xac}}, 0x2204c001) sendmsg$IPCTNL_MSG_CT_GET(r3, 0x0, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)=0x0) clock_nanosleep(0x2, 0x0, 0x0, 0x0) timer_settime(r4, 0x0, 0x0, 0x0) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x18, r5, 0x1, 0x0, 0x3, {}, [@IPVS_CMD_ATTR_DEST={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8091}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[]) write(0xffffffffffffffff, 0x0, 0x0) 1.091379092s ago: executing program 4 (id=976): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000400)={0x1, 0x1, 0x0, &(0x7f00000021c0)=""/78, 0x0, 0x8000000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x801, 0x80000) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002500)={{r5}, &(0x7f0000002480), &(0x7f00000024c0)=r4}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r5, &(0x7f0000000180), &(0x7f0000000040)=@udp6=r4}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000340)=r3, 0x4) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000000)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000002280)=0x1) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040080000000"], 0x6) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) 1.012426507s ago: executing program 1 (id=977): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x190) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) execve(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r1, 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket(0x2b, 0x1, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000180)={r3, r4}) sendmmsg$inet(r5, &(0x7f0000003d80)=[{{0x0, 0x0, &(0x7f0000003800)=[{&(0x7f00000002c0)="1e1c7f", 0x3}], 0x1}}], 0x1, 0x40) openat$cgroup_procs(r2, 0x0, 0x2, 0x0) r6 = openat$cgroup_procs(r2, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) pread64(r6, &(0x7f0000001840)=""/4096, 0x1000, 0x1) 399.976692ms ago: executing program 3 (id=978): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000001440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x2, 0x0, 0x0, 0xf, 0x1, [], 'D'}]}}, 0x0, 0x2a, 0x0, 0x9}, 0x28) r1 = socket(0x10, 0x3, 0x0) sendmmsg$unix(r1, &(0x7f00000109c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="46169d", 0x3}], 0x1, 0x0, 0x0, 0x1}}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000500)="c69854", 0x3}], 0x1, &(0x7f0000003900)=[@cred={{0x1c}}], 0x20, 0x800}}], 0x2, 0x4004804) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000002c80)=@gcm_128={{0x304}, '\x00', "362574ad5924c0c5aedd72261081b10f", "0700d871", "d97ab19fbd9a8e17"}, 0x28) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) 209.20541ms ago: executing program 1 (id=979): connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1fe, 0x6, 0xd000, 0x2000, &(0x7f00008f6000/0x2000)=nil}) syz_open_dev$evdev(0x0, 0x200, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x6000) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0x82, 0x0, 0xfffffffffffffdf7) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) socket$netlink(0x10, 0x3, 0xb) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x5000c0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r5, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000001c0)=0x9) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c582", 0xfffffffffffffe6a) r8 = accept4(r7, 0x0, 0x0, 0x0) ioctl$int_in(r8, 0x5452, &(0x7f0000000500)=0xd0) recvmsg$can_raw(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000140)=""/3}, {&(0x7f0000000640)=""/211}], 0x131e}, 0x40000003) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 72.98231ms ago: executing program 3 (id=980): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000000206010000000700000000000000000a140007800800124000060000080008400000003715000300686173683a69702c706f72742c6e657400000000050005000a00000005000400000000000900020073797a31000000000500010007"], 0x64}}, 0x0) 0s ago: executing program 4 (id=981): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x5, 0x100, 0x7f}) getrandom(0x0, 0x0, 0xd86b31f1268e345c) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000010c0)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000001100)={0x73622a85, 0x1, 0x1}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000001200)={0x1}) timer_settime(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x100000000) write$P9_RGETLOCK(r0, &(0x7f00000000c0)=ANY=[], 0xffffff6a) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) kernel console output (not intermixed with test programs): idge_slave_1: left allmulticast mode [ 184.259272][ T7247] bridge_slave_1: left promiscuous mode [ 184.274117][ T7273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.301657][ T7247] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.325343][ T7273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.395504][ T7247] bond0: (slave bond_slave_0): Releasing backup interface [ 184.482565][ T7247] bond0: (slave bond_slave_1): Releasing backup interface [ 184.656620][ T7247] team0: Port device team_slave_0 removed [ 185.046724][ T7247] team0: Port device team_slave_1 removed [ 185.066684][ T7247] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.075011][ T7247] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.096792][ T7247] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.122939][ T7247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.160470][ T7247] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 185.299058][ T7272] team0: Mode changed to "activebackup" [ 185.479498][ T5781] gs_usb 3-1:0.0: Disabling termination support for channel 0 (-ETIMEDOUT) [ 185.587963][ T7289] netlink: 'syz.1.409': attribute type 2 has an invalid length. [ 185.595729][ T7289] netlink: 'syz.1.409': attribute type 2 has an invalid length. [ 185.805527][ T5781] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 1 (-EPIPE) [ 185.980573][ T5781] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -32 [ 186.032025][ T5781] usb 3-1: USB disconnect, device number 16 [ 186.408717][ T804] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 186.520603][ T7317] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 186.595507][ T804] usb 1-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 186.619149][ T804] usb 1-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 186.656170][ T804] usb 1-1: Product: syz [ 186.679914][ T804] usb 1-1: config 0 descriptor?? [ 186.705579][ T804] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 186.731474][ T804] usb 1-1: Detected FT232H [ 186.818049][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 186.913061][ T804] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 186.939348][ T804] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 186.967836][ T804] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 187.040514][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 187.238029][ T24] usb 5-1: config 0 has no interfaces? [ 187.334010][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 187.364411][ T804] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 187.393754][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.409039][ T804] usb 1-1: USB disconnect, device number 12 [ 187.434323][ T24] usb 5-1: Product: syz [ 187.447368][ T804] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 187.460877][ T24] usb 5-1: Manufacturer: syz [ 187.473592][ T24] usb 5-1: SerialNumber: syz [ 187.493052][ T804] ftdi_sio 1-1:0.0: device disconnected [ 187.502214][ T24] usb 5-1: config 0 descriptor?? [ 187.655347][ T30] kauditd_printk_skb: 211 callbacks suppressed [ 187.655364][ T30] audit: type=1400 audit(1777272594.038:624): avc: denied { read } for pid=7325 comm="syz.3.420" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 187.754909][ T30] audit: type=1400 audit(1777272594.078:625): avc: denied { open } for pid=7325 comm="syz.3.420" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 187.804937][ T30] audit: type=1400 audit(1777272594.098:626): avc: denied { ioctl } for pid=7325 comm="syz.3.420" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 188.000692][ T7339] netlink: 'syz.2.424': attribute type 2 has an invalid length. [ 188.008578][ T7339] netlink: 'syz.2.424': attribute type 2 has an invalid length. [ 188.612838][ T30] audit: type=1400 audit(1777272594.858:627): avc: denied { connect } for pid=7345 comm="syz.0.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 188.719566][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.733641][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.804360][ T7349] /dev/nullb0: Can't open blockdev [ 189.304102][ T7359] netlink: 'syz.1.429': attribute type 2 has an invalid length. [ 189.313704][ T7359] netlink: 'syz.1.429': attribute type 2 has an invalid length. [ 189.350745][ T29] usb 5-1: USB disconnect, device number 12 [ 190.191125][ T7376] random: crng reseeded on system resumption [ 190.358490][ T30] audit: type=1400 audit(1777272596.568:628): avc: denied { write } for pid=7372 comm="syz.2.434" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 190.520319][ T7378] netlink: 12 bytes leftover after parsing attributes in process `syz.0.435'. [ 190.600508][ T30] audit: type=1400 audit(1777272596.568:629): avc: denied { open } for pid=7372 comm="syz.2.434" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 190.877985][ T29] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 191.388682][ T29] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 191.397852][ T29] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 191.408245][ T29] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 105, changing to 10 [ 191.421910][ T29] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 25222, setting to 1024 [ 191.436372][ T29] usb 1-1: config 0 interface 0 has no altsetting 0 [ 191.460856][ T29] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 191.470155][ T29] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 105, changing to 10 [ 191.485111][ T29] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 25222, setting to 1024 [ 191.498594][ T29] usb 1-1: config 0 interface 0 has no altsetting 0 [ 191.554892][ T29] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 191.567686][ T29] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 105, changing to 10 [ 191.581205][ T29] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 25222, setting to 1024 [ 191.595681][ T29] usb 1-1: config 0 interface 0 has no altsetting 0 [ 191.613126][ T29] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 191.694881][ T29] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 105, changing to 10 [ 192.297644][ T29] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 25222, setting to 1024 [ 192.299789][ T30] audit: type=1400 audit(1777272598.678:630): avc: denied { read } for pid=7395 comm="syz.1.441" name="uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 192.310841][ T29] usb 1-1: config 0 interface 0 has no altsetting 0 [ 192.340376][ T30] audit: type=1400 audit(1777272598.678:631): avc: denied { open } for pid=7395 comm="syz.1.441" path="/dev/uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 192.341193][ T29] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 192.341234][ T29] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 105, changing to 10 [ 192.341257][ T29] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 25222, setting to 1024 [ 192.341280][ T29] usb 1-1: config 0 interface 0 has no altsetting 0 [ 192.342082][ T29] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 192.342118][ T29] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 105, changing to 10 [ 192.342139][ T29] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 25222, setting to 1024 [ 192.342162][ T29] usb 1-1: config 0 interface 0 has no altsetting 0 [ 192.342938][ T29] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 192.459752][ T29] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 105, changing to 10 [ 192.495968][ T29] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 25222, setting to 1024 [ 192.525367][ T29] usb 1-1: config 0 interface 0 has no altsetting 0 [ 192.537054][ T29] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 192.548687][ T29] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 105, changing to 10 [ 192.576636][ T29] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 25222, setting to 1024 [ 192.742897][ T7412] netlink: 'syz.1.444': attribute type 58 has an invalid length. [ 192.767984][ T804] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 192.832892][ T7412] netlink: 'syz.1.444': attribute type 58 has an invalid length. [ 192.881249][ T7410] syzkaller0: entered promiscuous mode [ 192.902289][ T7410] syzkaller0: entered allmulticast mode [ 193.212712][ T804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.486640][ T29] usb 1-1: config 0 interface 0 has no altsetting 0 [ 193.493913][ T29] usb 1-1: string descriptor 0 read error: -71 [ 193.500286][ T29] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 193.509376][ T29] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 193.528068][ T804] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 193.541117][ T804] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 193.549227][ T804] usb 5-1: Manufacturer: syz [ 193.554555][ T29] usb 1-1: config 0 descriptor?? [ 193.562150][ T29] usb 1-1: can't set config #0, error -71 [ 193.572288][ T804] usb 5-1: config 0 descriptor?? [ 193.577790][ T29] usb 1-1: USB disconnect, device number 13 [ 193.930923][ T30] audit: type=1326 audit(1777272600.288:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7418 comm="syz.3.445" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f17faf9cdd9 code=0x0 [ 193.997724][ T30] audit: type=1400 audit(1777272600.378:633): avc: denied { setattr } for pid=7422 comm="syz.2.447" name="vbi8" dev="devtmpfs" ino=1006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 194.060695][ T30] audit: type=1400 audit(1777272600.448:634): avc: denied { getopt } for pid=7424 comm="syz.1.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 194.206906][ T30] audit: type=1400 audit(1777272600.588:635): avc: denied { append } for pid=7416 comm="syz.0.446" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 194.560087][ T30] audit: type=1400 audit(1777272600.938:636): avc: denied { read } for pid=7435 comm="syz.2.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 194.756347][ T804] uclogic 0003:256C:006D.0004: v1 frame probing failed: -71 [ 194.781336][ T804] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 194.810609][ T804] uclogic 0003:256C:006D.0004: probe with driver uclogic failed with error -71 [ 194.871003][ T804] usb 5-1: USB disconnect, device number 13 [ 196.317988][ T803] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 196.343427][ T7464] netlink: 'syz.0.457': attribute type 10 has an invalid length. [ 196.372143][ T7464] netlink: 40 bytes leftover after parsing attributes in process `syz.0.457'. [ 196.487989][ T803] usb 4-1: Using ep0 maxpacket: 16 [ 196.499052][ T803] usb 4-1: config 157 has an invalid descriptor of length 0, skipping remainder of the config [ 196.521924][ T803] usb 4-1: config 157 has 0 interfaces, different from the descriptor's value: 1 [ 196.539696][ T803] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 196.556668][ T803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.564783][ T803] usb 4-1: Product: syz [ 196.568974][ T803] usb 4-1: Manufacturer: syz [ 196.573565][ T803] usb 4-1: SerialNumber: syz [ 196.967652][ T7469] netlink: 60 bytes leftover after parsing attributes in process `syz.4.458'. [ 197.003335][ T10] usb 4-1: USB disconnect, device number 10 [ 197.017121][ T7469] netlink: 'syz.4.458': attribute type 89 has an invalid length. [ 197.482934][ T7475] netlink: 'syz.2.461': attribute type 3 has an invalid length. [ 197.746659][ T7483] sch_tbf: peakrate 7 is lower than or equals to rate 2877955052750397629 ! [ 198.628205][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 199.218213][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 199.257738][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 199.321815][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.322982][ T7501] syzkaller0: entered promiscuous mode [ 199.342857][ T7501] syzkaller0: entered allmulticast mode [ 199.390091][ T10] usb 3-1: Product: syz [ 199.415133][ T10] usb 3-1: Manufacturer: syz [ 199.428417][ T10] usb 3-1: SerialNumber: syz [ 199.447035][ T10] usb 3-1: config 0 descriptor?? [ 199.476063][ T30] audit: type=1800 audit(1777272605.858:637): pid=7504 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.468" name="file1" dev="tmpfs" ino=497 res=0 errno=0 [ 199.662685][ T10] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 199.747999][ T29] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 199.775029][ T30] audit: type=1400 audit(1777272606.158:638): avc: denied { map } for pid=7509 comm="syz.1.470" path="socket:[15900]" dev="sockfs" ino=15900 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 199.914886][ T29] usb 1-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 199.945310][ T29] usb 1-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 199.964227][ T29] usb 1-1: Product: syz [ 199.998823][ T29] usb 1-1: config 0 descriptor?? [ 200.007233][ T29] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 200.008781][ T29] usb 1-1: Detected FT232H [ 200.134030][ T30] audit: type=1400 audit(1777272606.508:639): avc: denied { view } for pid=7511 comm="syz.1.471" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 200.413052][ T29] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 200.420667][ T29] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 200.441259][ T29] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 200.454575][ T29] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 200.904678][ T10] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 201.003724][ T29] usb 1-1: USB disconnect, device number 14 [ 201.080150][ T29] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 201.100000][ T29] ftdi_sio 1-1:0.0: device disconnected [ 201.465797][ T30] audit: type=1400 audit(1777272607.658:640): avc: denied { write } for pid=7521 comm="syz.3.473" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 201.509637][ T5757] usb 3-1: USB disconnect, device number 17 [ 202.738060][ T804] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 202.853050][ T7548] netlink: 'syz.4.483': attribute type 10 has an invalid length. [ 202.862189][ T7548] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.870385][ T7548] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.919480][ T804] usb 4-1: Using ep0 maxpacket: 16 [ 202.949653][ T804] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 202.977838][ T7553] NILFS (nullb0): couldn't find nilfs on the device [ 202.984813][ T5802] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 202.995937][ T804] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 203.163991][ T804] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 203.164559][ T7548] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.179582][ T7548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.186889][ T7548] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.193958][ T7548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.237368][ T5802] usb 1-1: unable to get BOS descriptor or descriptor too short [ 203.247480][ T7548] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 203.256388][ T804] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 203.264737][ T7555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.275531][ T5802] usb 1-1: not running at top speed; connect to a high speed hub [ 203.283339][ T804] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 203.284526][ T7555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.294643][ T5802] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.312075][ T804] usb 4-1: config 0 has no interface number 0 [ 203.324100][ T804] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 203.348965][ T5802] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 203.384532][ T804] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 203.401214][ T7537] can0: slcan on ptm0. [ 203.412940][ T7551] netlink: 'syz.1.484': attribute type 2 has an invalid length. [ 203.420616][ T7551] netlink: 'syz.1.484': attribute type 2 has an invalid length. [ 203.435848][ T5802] usb 1-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40 [ 203.440173][ T30] audit: type=1400 audit(1777272609.818:641): avc: denied { search } for pid=5271 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.468022][ T5802] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.477096][ T804] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 203.498996][ T5802] usb 1-1: Product: syz [ 203.503213][ T804] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 203.516500][ T5802] usb 1-1: Manufacturer: syz [ 203.528064][ T5802] usb 1-1: SerialNumber: syz [ 203.534086][ T804] usb 4-1: config 0 interface 125 has no altsetting 0 [ 203.585000][ T30] audit: type=1400 audit(1777272609.818:642): avc: denied { search } for pid=5271 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.671446][ T30] audit: type=1400 audit(1777272609.818:643): avc: denied { search } for pid=5271 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.674191][ T804] usb 4-1: config 0 interface 125 has no altsetting 2 [ 203.767244][ T804] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 203.776358][ T30] audit: type=1400 audit(1777272609.818:644): avc: denied { read } for pid=5271 comm="dhcpcd" name="n33" dev="tmpfs" ino=4085 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 203.776400][ T30] audit: type=1400 audit(1777272609.818:645): avc: denied { open } for pid=5271 comm="dhcpcd" path="/run/udev/data/n33" dev="tmpfs" ino=4085 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 203.776435][ T30] audit: type=1400 audit(1777272609.818:646): avc: denied { getattr } for pid=5271 comm="dhcpcd" path="/run/udev/data/n33" dev="tmpfs" ino=4085 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 203.842597][ T7545] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 203.856280][ T804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.872894][ T7545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.874359][ T804] usb 4-1: Product: syz [ 203.895860][ T804] usb 4-1: Manufacturer: syz [ 203.906217][ T804] usb 4-1: SerialNumber: syz [ 203.948600][ T7545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.996077][ T5757] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 204.035982][ T804] usb 4-1: config 0 descriptor?? [ 204.158062][ T5757] usb 5-1: Using ep0 maxpacket: 8 [ 204.525786][ T804] usb 4-1: selecting invalid altsetting 2 [ 204.532889][ T5802] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 204.544002][ T5802] usb 1-1: MIDIStreaming interface descriptor not found [ 204.559780][ T5757] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 204.578006][ T5757] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 204.633017][ T5757] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 204.673613][ T5757] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 204.686693][ T803] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 204.723110][ T5757] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 204.778402][ T5802] usb 1-1: USB disconnect, device number 15 [ 204.807115][ T5757] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 204.856887][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 204.856901][ T30] audit: type=1400 audit(1777272611.238:649): avc: denied { setopt } for pid=7540 comm="syz.3.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 204.884171][ T803] usb 2-1: Using ep0 maxpacket: 8 [ 204.905387][ T5757] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 204.919030][ T803] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 204.942957][ T803] usb 2-1: config 0 has no interface number 0 [ 204.953237][ T5757] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.972986][ T803] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 205.102283][ T803] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 205.117743][ T803] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 205.173239][ T803] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 205.198200][ T803] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 205.227476][ T803] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 205.240953][ T803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.286211][ T803] usb 2-1: Product: syz [ 205.309062][ T30] audit: type=1400 audit(1777272611.698:650): avc: denied { add_name } for pid=7562 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.337181][ T5757] usb 5-1: GET_CAPABILITIES returned 0 [ 205.347862][ T803] usb 2-1: Manufacturer: syz [ 205.359706][ T5757] usbtmc 5-1:16.0: can't read capabilities [ 205.365615][ T803] usb 2-1: SerialNumber: syz [ 205.391515][ T30] audit: type=1400 audit(1777272611.728:651): avc: denied { create } for pid=7562 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 205.469904][ T803] usb 2-1: config 0 descriptor?? [ 205.795794][ T804] get_1284_register timeout [ 205.911787][ T30] audit: type=1400 audit(1777272611.728:652): avc: denied { write } for pid=7562 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.can0.link" dev="tmpfs" ino=4111 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 205.939862][ T30] audit: type=1400 audit(1777272611.728:653): avc: denied { append } for pid=7562 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" dev="tmpfs" ino=4111 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 205.967151][ C1] usb 4-1: async_complete: urb error -104 [ 205.973034][ C1] usb 4-1: async_complete: urb error -104 [ 205.978867][ C1] usb 4-1: async_complete: urb error -104 [ 205.984692][ C1] usb 4-1: async_complete: urb error -104 [ 206.183089][ T30] audit: type=1400 audit(1777272612.418:654): avc: denied { ioctl } for pid=7560 comm="syz.4.486" path="socket:[16581]" dev="sockfs" ino=16581 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 206.226105][ T803] iowarrior 2-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior1 [ 206.277119][ T30] audit: type=1400 audit(1777272612.508:655): avc: denied { remove_name } for pid=7587 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=4111 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.325079][ T803] usb 4-1: USB disconnect, device number 11 [ 206.353865][ C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 206.363830][ T7568] usbtmc 5-1:16.0: Unable to send data, error -71 [ 206.452956][ T30] audit: type=1400 audit(1777272612.508:656): avc: denied { unlink } for pid=7587 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=4111 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 206.539031][ T7594] IPVS: ip_vs_edit_dest(): server weight less than zero [ 206.551747][ T5757] IPVS: starting estimator thread 0... [ 206.708024][ T7595] IPVS: using max 42 ests per chain, 100800 per kthread [ 207.502791][ T5757] usb 2-1: USB disconnect, device number 16 [ 211.020472][ T7647] netlink: 'syz.1.503': attribute type 2 has an invalid length. [ 211.028378][ T7647] netlink: 'syz.1.503': attribute type 2 has an invalid length. [ 211.396566][ T30] audit: type=1400 audit(1777272617.778:657): avc: denied { validate_trans } for pid=7648 comm="syz.2.504" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 213.007163][ T30] audit: type=1400 audit(1777272619.388:658): avc: denied { accept } for pid=7660 comm="syz.0.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 213.035853][ T7663] capability: warning: `syz.4.509' uses 32-bit capabilities (legacy support in use) [ 213.332839][ T30] audit: type=1400 audit(1777272619.628:659): avc: denied { setopt } for pid=7662 comm="syz.4.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 214.858101][ T7693] FAULT_INJECTION: forcing a failure. [ 214.858101][ T7693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.906966][ T7693] CPU: 0 UID: 0 PID: 7693 Comm: syz.0.516 Tainted: G L syzkaller #0 PREEMPT(full) [ 214.906993][ T7693] Tainted: [L]=SOFTLOCKUP [ 214.906998][ T7693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 214.907006][ T7693] Call Trace: [ 214.907011][ T7693] [ 214.907018][ T7693] dump_stack_lvl+0x100/0x190 [ 214.907043][ T7693] should_fail_ex.cold+0x5/0xa [ 214.907063][ T7693] _copy_to_user+0x32/0xd0 [ 214.907084][ T7693] snd_pcm_oss_read2+0x294/0x400 [ 214.907104][ T7693] ? __pfx_snd_pcm_oss_read2+0x10/0x10 [ 214.907123][ T7693] ? snd_pcm_kernel_ioctl+0x14a/0x2e0 [ 214.907154][ T7693] snd_pcm_oss_read+0x5aa/0x730 [ 214.907178][ T7693] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 214.907199][ T7693] vfs_read+0x1e4/0xb30 [ 214.907221][ T7693] ? __pfx_vfs_read+0x10/0x10 [ 214.907236][ T7693] ? find_held_lock+0x2b/0x80 [ 214.907251][ T7693] ? __fget_files+0x215/0x3d0 [ 214.907271][ T7693] ? __fget_files+0x215/0x3d0 [ 214.907296][ T7693] ? __fget_files+0x21f/0x3d0 [ 214.907321][ T7693] ksys_read+0x12a/0x250 [ 214.907339][ T7693] ? __pfx_ksys_read+0x10/0x10 [ 214.907357][ T7693] ? rcu_is_watching+0x12/0xc0 [ 214.907390][ T7693] do_syscall_64+0x10b/0xf80 [ 214.907409][ T7693] ? clear_bhb_loop+0x40/0x90 [ 214.907430][ T7693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.907448][ T7693] RIP: 0033:0x7fe65239cdd9 [ 214.907463][ T7693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.907480][ T7693] RSP: 002b:00007fe653222028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 214.907497][ T7693] RAX: ffffffffffffffda RBX: 00007fe652615fa0 RCX: 00007fe65239cdd9 [ 214.907509][ T7693] RDX: 0000000000000024 RSI: 0000200000000340 RDI: 0000000000000005 [ 214.907519][ T7693] RBP: 00007fe653222090 R08: 0000000000000000 R09: 0000000000000000 [ 214.907528][ T7693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 214.907538][ T7693] R13: 00007fe652616038 R14: 00007fe652615fa0 R15: 00007ffdbd1dca28 [ 214.907562][ T7693] [ 215.488577][ T7698] netlink: 60 bytes leftover after parsing attributes in process `syz.0.517'. [ 215.558883][ T7698] netlink: 'syz.0.517': attribute type 89 has an invalid length. [ 215.769193][ T5802] libceph: connect (1)[c::]:6789 error -101 [ 215.797373][ T7712] dlm: no locking on control device [ 215.810326][ T5802] libceph: mon0 (1)[c::]:6789 connect error [ 215.989546][ T7700] ceph: No mds server is up or the cluster is laggy [ 216.128630][ T5713] libceph: connect (1)[c::]:6789 error -101 [ 216.141147][ T5713] libceph: mon0 (1)[c::]:6789 connect error [ 216.386052][ T30] audit: type=1400 audit(1777272622.758:660): avc: denied { ioctl } for pid=7699 comm="syz.3.518" path="socket:[16789]" dev="sockfs" ino=16789 ioctlcmd=0x941d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 216.693430][ T30] audit: type=1400 audit(1777272623.078:661): avc: denied { shutdown } for pid=7717 comm="syz.1.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 217.468113][ T7730] netlink: 'syz.4.525': attribute type 4 has an invalid length. [ 218.260224][ T7558] can0 (unregistered): slcan off ptm0. [ 220.463651][ T30] audit: type=1400 audit(1777272626.838:662): avc: denied { write } for pid=7792 comm="syz.0.539" name="sg0" dev="devtmpfs" ino=800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 220.542012][ T30] audit: type=1400 audit(1777272626.838:663): avc: denied { ioctl } for pid=7792 comm="syz.0.539" path="/dev/sg0" dev="devtmpfs" ino=800 ioctlcmd=0x2203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 220.711682][ T30] audit: type=1400 audit(1777272626.888:664): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 220.967156][ T7804] netlink: 'syz.2.535': attribute type 10 has an invalid length. [ 224.019850][ T7847] tipc: Started in network mode [ 224.052470][ T7847] tipc: Node identity ac14140f, cluster identity 4711 [ 224.096790][ T7847] tipc: New replicast peer: 255.255.255.255 [ 224.117294][ T7847] tipc: Enabled bearer , priority 10 [ 224.622954][ T7788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.608018][ T5713] tipc: Node number set to 2886997007 [ 225.754956][ T7877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.550'. [ 225.767732][ T30] audit: type=1400 audit(1777272632.158:665): avc: denied { bind } for pid=7878 comm="syz.1.551" lport=64 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 226.071109][ T30] audit: type=1400 audit(1777272632.158:666): avc: denied { node_bind } for pid=7878 comm="syz.1.551" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 226.466679][ T7886] netlink: 268 bytes leftover after parsing attributes in process `syz.1.552'. [ 226.857990][ T804] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 227.428005][ T5713] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 227.458803][ T804] usb 3-1: Using ep0 maxpacket: 16 [ 227.474367][ T804] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 130, using maximum allowed: 30 [ 227.486609][ T804] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 227.499958][ T804] usb 3-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 227.509348][ T804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.520749][ T804] usb 3-1: config 0 descriptor?? [ 227.629850][ T5713] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 227.646379][ T5713] usb 2-1: config 0 has no interface number 0 [ 227.661467][ T5713] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 227.688091][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.696910][ T5713] usb 2-1: Product: syz [ 227.703146][ T5713] usb 2-1: Manufacturer: syz [ 227.707790][ T5713] usb 2-1: SerialNumber: syz [ 227.717168][ T5713] usb 2-1: config 0 descriptor?? [ 229.043854][ T5713] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 229.076034][ T5713] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 229.087189][ T5713] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 229.096482][ T5713] usb 2-1: media controller created [ 229.140746][ T5713] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 229.168069][ T5802] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 229.249900][ T5713] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 229.356398][ T5713] usb 2-1: USB disconnect, device number 17 [ 229.409361][ T30] audit: type=1400 audit(1777272635.798:667): avc: denied { ioctl } for pid=7915 comm="syz.4.558" path="socket:[17152]" dev="sockfs" ino=17152 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 229.705541][ T7916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.558'. [ 230.023191][ T804] usbhid 3-1:0.0: can't add hid device: -71 [ 230.029538][ T804] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 230.046075][ T804] usb 3-1: USB disconnect, device number 18 [ 231.244676][ T7935] netlink: 'syz.3.562': attribute type 10 has an invalid length. [ 231.261475][ T7935] netlink: 'syz.3.562': attribute type 10 has an invalid length. [ 231.269310][ T7935] netlink: 40 bytes leftover after parsing attributes in process `syz.3.562'. [ 231.278486][ T7935] vxcan0: entered promiscuous mode [ 231.283825][ T7935] vxcan0: entered allmulticast mode [ 231.289723][ T7935] A link change request failed with some changes committed already. Interface vxcan0 may have been left with an inconsistent configuration, please check. [ 231.721189][ T30] audit: type=1400 audit(1777272637.648:668): avc: denied { append } for pid=7931 comm="syz.3.562" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 233.497667][ T7958] netlink: 'syz.3.568': attribute type 2 has an invalid length. [ 233.509536][ T7958] netlink: 'syz.3.568': attribute type 2 has an invalid length. [ 233.517011][ T7954] netlink: 'syz.4.564': attribute type 2 has an invalid length. [ 233.631625][ T7954] netlink: 'syz.4.564': attribute type 1 has an invalid length. [ 233.842801][ T7954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.564'. [ 234.138273][ T5713] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 234.190864][ T48] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.213990][ T48] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.242759][ T48] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.285475][ T30] audit: type=1326 audit(1777272640.658:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7963 comm="syz.3.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17faf9cdd9 code=0x7ffc0000 [ 234.334260][ T5713] usb 2-1: Using ep0 maxpacket: 16 [ 234.347656][ T48] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.389539][ T5713] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 234.399991][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.408155][ T30] audit: type=1326 audit(1777272640.658:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7963 comm="syz.3.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17faf9cdd9 code=0x7ffc0000 [ 234.530367][ T5713] usb 2-1: Product: syz [ 234.551318][ T5713] usb 2-1: Manufacturer: syz [ 234.596791][ T5713] usb 2-1: SerialNumber: syz [ 234.641670][ T30] audit: type=1326 audit(1777272640.658:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7963 comm="syz.3.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f17faf9cdd9 code=0x7ffc0000 [ 234.748663][ T30] audit: type=1400 audit(1777272640.798:672): avc: denied { write } for pid=7973 comm="syz.2.572" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 234.861217][ T30] audit: type=1400 audit(1777272640.958:673): avc: denied { create } for pid=7973 comm="syz.2.572" name="#2b" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 234.921820][ T30] audit: type=1400 audit(1777272640.958:674): avc: denied { link } for pid=7973 comm="syz.2.572" name="#2b" dev="tmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 234.961550][ T30] audit: type=1400 audit(1777272640.958:675): avc: denied { rename } for pid=7973 comm="syz.2.572" name="#2c" dev="tmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 234.985741][ T5713] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 234.997819][ T30] audit: type=1326 audit(1777272640.958:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7963 comm="syz.3.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17faf9cdd9 code=0x7ffc0000 [ 235.021940][ T5713] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 235.043913][ T5713] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 235.062375][ T5713] usb 2-1: media controller created [ 235.185707][ T7981] qrtr: Invalid version 0 [ 235.232737][ T30] audit: type=1326 audit(1777272640.958:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7963 comm="syz.3.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17faf9cdd9 code=0x7ffc0000 [ 235.301207][ T5713] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 235.382919][ T7984] netlink: 'syz.3.573': attribute type 4 has an invalid length. [ 235.849397][ T7985] netlink: 'syz.4.575': attribute type 7 has an invalid length. [ 235.882548][ T5713] zl10353_read_register: readreg error (reg=127, ret==-71) [ 236.566751][ T7994] batman_adv: batadv0: Adding interface: wlan1 [ 236.573719][ T5713] dvb_usb_gl861 2-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 236.585495][ T7994] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.628648][ T5713] usb 2-1: USB disconnect, device number 18 [ 236.643608][ T7994] batman_adv: batadv0: Interface activated: wlan1 [ 236.815251][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 236.815266][ T30] audit: type=1400 audit(1777272643.198:679): avc: denied { nlmsg_write } for pid=7998 comm="syz.3.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 237.525337][ T8012] netlink: 'syz.1.582': attribute type 1 has an invalid length. [ 237.592711][ T8012] 8021q: adding VLAN 0 to HW filter on device bond1 [ 237.639101][ T8019] vlan2: entered allmulticast mode [ 237.683714][ T8019] bond1: entered allmulticast mode [ 237.769994][ T8024] netlink: 60 bytes leftover after parsing attributes in process `syz.4.585'. [ 237.789482][ T8012] bond1: (slave geneve2): making interface the new active one [ 237.801748][ T8012] geneve2: entered allmulticast mode [ 237.822284][ T8024] netlink: 'syz.4.585': attribute type 89 has an invalid length. [ 237.832171][ T8012] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 237.916789][ T8031] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 238.055426][ T8040] netlink: 'syz.3.588': attribute type 10 has an invalid length. [ 238.069429][ T8040] team0: Device veth1_virt_wifi failed to register rx_handler [ 242.676632][ T8095] syzkaller0: entered promiscuous mode [ 242.682234][ T8095] syzkaller0: entered allmulticast mode [ 243.448850][ T8114] netlink: 'syz.1.605': attribute type 2 has an invalid length. [ 243.456629][ T8114] netlink: 'syz.1.605': attribute type 2 has an invalid length. [ 243.773463][ T8120] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19714 sclass=netlink_route_socket pid=8120 comm=syz.0.606 [ 244.500019][ T30] audit: type=1400 audit(1777272650.498:680): avc: denied { name_connect } for pid=8124 comm="syz.1.607" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 244.566985][ T8132] netlink: 100 bytes leftover after parsing attributes in process `syz.4.608'. [ 244.932865][ T30] audit: type=1400 audit(1777272651.308:681): avc: denied { read } for pid=8134 comm="syz.4.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 245.743745][ T8148] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 246.026107][ T30] audit: type=1326 audit(1777272652.408:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8147 comm="syz.3.612" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f17faf9cdd9 code=0x0 [ 247.023788][ T8178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.618'. [ 247.033908][ T8178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.618'. [ 247.115869][ T8178] team0: Port device team_slave_1 removed [ 247.199847][ T8178] bond2: (slave team_slave_1): making interface the new active one [ 247.237667][ T8178] bond2: (slave team_slave_1): Enslaving as an active interface with an up link [ 247.269479][ T8181] netlink: 16 bytes leftover after parsing attributes in process `syz.4.620'. [ 248.499092][ T8182] FAULT_INJECTION: forcing a failure. [ 248.499092][ T8182] name failslab, interval 1, probability 0, space 0, times 0 [ 248.512118][ T8182] CPU: 1 UID: 0 PID: 8182 Comm: syz.2.619 Tainted: G L syzkaller #0 PREEMPT(full) [ 248.512146][ T8182] Tainted: [L]=SOFTLOCKUP [ 248.512151][ T8182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 248.512161][ T8182] Call Trace: [ 248.512167][ T8182] [ 248.512173][ T8182] dump_stack_lvl+0x100/0x190 [ 248.512199][ T8182] should_fail_ex.cold+0x5/0xa [ 248.512223][ T8182] should_failslab+0xc2/0x120 [ 248.512243][ T8182] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 248.512268][ T8182] ? __d_alloc+0x34/0xa40 [ 248.512311][ T8182] __d_alloc+0x34/0xa40 [ 248.512338][ T8182] d_alloc_parallel+0x111/0x14e0 [ 248.512362][ T8182] ? find_held_lock+0x2b/0x80 [ 248.512379][ T8182] ? __d_lookup+0x25c/0x4a0 [ 248.512397][ T8182] ? __pfx_d_alloc_parallel+0x10/0x10 [ 248.512418][ T8182] ? __d_lookup+0x266/0x4a0 [ 248.512443][ T8182] lookup_open.isra.0+0x57c/0x11b0 [ 248.512472][ T8182] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 248.512501][ T8182] ? mnt_get_write_access+0x1e9/0x2f0 [ 248.512535][ T8182] path_openat+0xa98/0x31a0 [ 248.512565][ T8182] ? __pfx_path_openat+0x10/0x10 [ 248.512596][ T8182] do_file_open+0x20e/0x430 [ 248.512620][ T8182] ? __pfx_do_file_open+0x10/0x10 [ 248.512661][ T8182] ? alloc_fd+0x476/0x790 [ 248.512685][ T8182] ? do_getname+0x191/0x390 [ 248.512713][ T8182] do_sys_openat2+0x10d/0x1e0 [ 248.512736][ T8182] ? __pfx_do_sys_openat2+0x10/0x10 [ 248.512758][ T8182] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 248.512780][ T8182] ? __fget_files+0x21f/0x3d0 [ 248.512805][ T8182] __x64_sys_openat+0x12d/0x210 [ 248.512830][ T8182] ? __pfx___x64_sys_openat+0x10/0x10 [ 248.512853][ T8182] ? ksys_write+0x1ac/0x250 [ 248.512875][ T8182] ? rcu_is_watching+0x12/0xc0 [ 248.512905][ T8182] do_syscall_64+0x10b/0xf80 [ 248.512922][ T8182] ? clear_bhb_loop+0x40/0x90 [ 248.512943][ T8182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.512961][ T8182] RIP: 0033:0x7f2aff19cdd9 [ 248.512975][ T8182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.512991][ T8182] RSP: 002b:00007f2affff5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 248.513007][ T8182] RAX: ffffffffffffffda RBX: 00007f2aff415fa0 RCX: 00007f2aff19cdd9 [ 248.513018][ T8182] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 248.513028][ T8182] RBP: 00007f2affff5090 R08: 0000000000000000 R09: 0000000000000000 [ 248.513037][ T8182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.513045][ T8182] R13: 00007f2aff416038 R14: 00007f2aff415fa0 R15: 00007ffd4ec16918 [ 248.513068][ T8182] [ 248.758039][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 249.924058][ T30] audit: type=1400 audit(1777272656.308:683): avc: denied { create } for pid=8231 comm="syz.1.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 250.113003][ T8238] netlink: 'syz.4.630': attribute type 2 has an invalid length. [ 250.127012][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.135478][ T8238] netlink: 'syz.4.630': attribute type 2 has an invalid length. [ 250.135821][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.147371][ T30] audit: type=1400 audit(1777272656.358:684): avc: denied { ioctl } for pid=8231 comm="syz.1.631" path="socket:[19156]" dev="sockfs" ino=19156 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 250.612150][ T8247] netlink: 'syz.0.633': attribute type 2 has an invalid length. [ 250.620486][ T8247] netlink: 'syz.0.633': attribute type 2 has an invalid length. [ 250.896452][ T8249] netlink: 60 bytes leftover after parsing attributes in process `syz.4.634'. [ 250.953662][ T8249] netlink: 'syz.4.634': attribute type 89 has an invalid length. [ 251.270301][ T8260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.635'. [ 251.630626][ T8263] netlink: 'syz.0.637': attribute type 10 has an invalid length. [ 251.745374][ T8263] team0: Port device veth0_to_hsr added [ 252.276578][ T8268] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 252.283255][ T8268] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 252.292615][ T5713] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 252.335840][ T8268] vhci_hcd vhci_hcd.0: Device attached [ 252.601231][ T5713] usb 4-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB [ 252.628726][ T24] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 252.700413][ T5713] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64 [ 252.750157][ T5713] usb 4-1: config 0 interface 0 has no altsetting 0 [ 252.782368][ T5713] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 252.814895][ T5713] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 252.912212][ T30] audit: type=1400 audit(1777272659.298:685): avc: denied { getopt } for pid=8274 comm="syz.0.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 252.936670][ T5713] usb 4-1: Product: syz [ 252.951911][ T5713] usb 4-1: Manufacturer: syz [ 252.971292][ T5713] usb 4-1: SerialNumber: syz [ 253.034614][ T5713] usb 4-1: config 0 descriptor?? [ 253.067587][ T8265] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 253.153065][ T5713] usb 4-1: selecting invalid altsetting 0 [ 253.373467][ T8269] vhci_hcd: connection reset by peer [ 253.411337][ T48] vhci_hcd vhci_hcd.1: stop threads [ 253.450564][ T48] vhci_hcd vhci_hcd.1: release socket [ 253.486837][ T48] vhci_hcd vhci_hcd.1: disconnect device [ 253.530616][ T8265] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 254.193186][ T5713] usb 4-1: USB disconnect, device number 13 [ 255.280054][ T8289] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 256.152937][ T8304] netlink: 'syz.0.647': attribute type 3 has an invalid length. [ 257.382349][ T8313] netlink: 'syz.1.649': attribute type 4 has an invalid length. [ 257.878092][ T24] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 258.143620][ T8327] netlink: 'syz.1.654': attribute type 2 has an invalid length. [ 258.151488][ T8327] netlink: 'syz.1.654': attribute type 2 has an invalid length. [ 258.586039][ T8337] netlink: 'syz.0.655': attribute type 2 has an invalid length. [ 258.596929][ T8337] netlink: 'syz.0.655': attribute type 2 has an invalid length. [ 259.038929][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 259.199698][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.212244][ T10] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 259.243606][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.282119][ T10] usb 2-1: config 0 descriptor?? [ 259.468097][ T5757] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 259.489630][ T30] audit: type=1400 audit(1777272665.878:686): avc: denied { ioctl } for pid=8351 comm="syz.3.659" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 259.838341][ T5757] usb 1-1: Using ep0 maxpacket: 32 [ 259.839813][ T8341] netlink: 12 bytes leftover after parsing attributes in process `syz.1.656'. [ 259.861965][ T5757] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 259.887263][ T5757] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.907773][ T5757] usb 1-1: Product: syz [ 259.921883][ T5757] usb 1-1: Manufacturer: syz [ 259.933110][ T5757] usb 1-1: SerialNumber: syz [ 259.951424][ T5757] usb 1-1: config 0 descriptor?? [ 260.027322][ T30] audit: type=1400 audit(1777272666.408:687): avc: denied { mount } for pid=8351 comm="syz.3.659" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 260.052032][ T8352] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 260.067140][ T30] audit: type=1400 audit(1777272666.438:688): avc: denied { mounton } for pid=8351 comm="syz.3.659" path="/151/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 260.112983][ T30] audit: type=1400 audit(1777272666.478:689): avc: denied { read } for pid=8351 comm="syz.3.659" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 260.136690][ T30] audit: type=1400 audit(1777272666.478:690): avc: denied { read } for pid=8351 comm="syz.3.659" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 260.160127][ T30] audit: type=1400 audit(1777272666.478:691): avc: denied { open } for pid=8351 comm="syz.3.659" path="/151/file0" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 260.186090][ T30] audit: type=1400 audit(1777272666.478:692): avc: denied { read } for pid=8351 comm="syz.3.659" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 260.208696][ T30] audit: type=1400 audit(1777272666.478:693): avc: denied { read } for pid=8351 comm="syz.3.659" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 260.215983][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 260.230904][ T30] audit: type=1400 audit(1777272666.488:694): avc: denied { getattr } for pid=8351 comm="syz.3.659" name="saved_tgids" dev="tracefs" ino=3833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 260.299178][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 260.315046][ T10] usb 2-1: USB disconnect, device number 19 [ 260.357661][ T30] audit: type=1400 audit(1777272666.728:695): avc: denied { unmount } for pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 260.374970][ T5757] airspy 1-1:0.0: Board ID: 00 [ 260.400183][ T5757] airspy 1-1:0.0: Firmware version: [ 260.444058][ T5609] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 260.708173][ T5713] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 260.890161][ T5713] usb 4-1: Using ep0 maxpacket: 32 [ 260.897291][ T5713] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 260.926076][ T5713] usb 4-1: config 0 has no interface number 0 [ 260.932346][ T24] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 260.960448][ T5713] usb 4-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 261.010260][ T5713] usb 4-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 261.043788][ T5713] usb 4-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 261.089173][ T8371] netlink: 'syz.4.665': attribute type 3 has an invalid length. [ 261.187201][ T5713] usb 4-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 261.202793][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 261.211198][ T5713] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 261.222547][ T24] usb 3-1: not running at top speed; connect to a high speed hub [ 261.230359][ T5713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.238763][ T5713] usb 4-1: Product: syz [ 261.243079][ T5713] usb 4-1: Manufacturer: syz [ 261.248246][ T5713] usb 4-1: SerialNumber: syz [ 261.252965][ T24] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 261.267200][ T5713] usb 4-1: config 0 descriptor?? [ 261.281738][ T24] usb 3-1: language id specifier not provided by device, defaulting to English [ 261.304830][ T8363] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 261.378602][ T24] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 261.414078][ T5713] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input10 [ 261.436731][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.473991][ T24] usb 3-1: Manufacturer: 홢릫伝擻璺㈣헟ꄥ [ 261.731402][ T4961] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 261.735937][ T24] usb 3-1: SerialNumber: syz [ 261.823855][ T10] usb 4-1: USB disconnect, device number 14 [ 261.849736][ T5757] airspy 1-1:0.0: usb_control_msg() failed -71 request 10 [ 261.975445][ T5757] airspy 1-1:0.0: Registered as swradio24 [ 261.985887][ T5757] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 262.002909][ T5757] usb 1-1: USB disconnect, device number 16 [ 262.046468][ T24] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 262.078865][ T24] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 262.165444][ T24] usb 3-1: USB disconnect, device number 19 [ 262.543409][ T5874] udevd[5874]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 263.143468][ T8404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.677'. [ 263.168318][ T8404] netlink: 24 bytes leftover after parsing attributes in process `syz.4.677'. [ 263.598626][ T8413] tmpfs: Unknown parameter 'tmpfs' [ 263.870723][ T8424] netlink: 52 bytes leftover after parsing attributes in process `syz.3.683'. [ 265.218015][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 265.389619][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 265.410004][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 265.432590][ T10] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 265.456948][ T10] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 265.473241][ T10] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 265.487183][ T10] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 265.498142][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 265.527939][ T24] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 265.549424][ T10] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 265.583566][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.616241][ T10] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 265.717962][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 265.729514][ T24] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.750842][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 265.767116][ T24] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 265.778100][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.813672][ T24] usb 2-1: config 0 descriptor?? [ 265.898424][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 265.898439][ T30] audit: type=1400 audit(1777272671.287:706): avc: denied { getopt } for pid=8438 comm="syz.3.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 265.983880][ T30] audit: type=1326 audit(1777272671.367:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8441 comm="syz.2.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aff19cdd9 code=0x7fc00000 [ 266.020105][ T30] audit: type=1326 audit(1777272671.367:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8441 comm="syz.2.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2aff19cdd9 code=0x7fc00000 [ 266.111698][ T10] ums-sddr09 4-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 266.121096][ T30] audit: type=1326 audit(1777272671.367:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8441 comm="syz.2.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aff19cdd9 code=0x7fc00000 [ 266.172312][ T30] audit: type=1326 audit(1777272671.367:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8441 comm="syz.2.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aff19cdd9 code=0x7fc00000 [ 266.181659][ T10] usb 4-1: USB disconnect, device number 15 [ 266.217981][ T30] audit: type=1326 audit(1777272671.367:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8441 comm="syz.2.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aff19cdd9 code=0x7fc00000 [ 266.262759][ T30] audit: type=1326 audit(1777272671.367:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8441 comm="syz.2.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aff19cdd9 code=0x7fc00000 [ 266.361257][ T30] audit: type=1326 audit(1777272671.367:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8441 comm="syz.2.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aff19cdd9 code=0x7fc00000 [ 266.391209][ T24] nzxt-smart2 0003:1E71:2009.0005: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 266.418102][ T30] audit: type=1326 audit(1777272671.367:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8441 comm="syz.2.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aff19cdd9 code=0x7fc00000 [ 266.441810][ T30] audit: type=1326 audit(1777272671.367:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8441 comm="syz.2.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aff19cdd9 code=0x7fc00000 [ 267.158036][ T5607] Bluetooth: hci0: command 0x0406 tx timeout [ 267.266085][ T5609] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 267.716903][ T8470] omfs: Invalid superblock (0) [ 268.395101][ T8477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.406689][ T8477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.529146][ T8479] binder: 8478:8479 ioctl c018620b 0 returned -14 [ 268.565262][ T8483] 8021q: VLANs not supported on gre0 [ 269.971509][ T803] usb 2-1: USB disconnect, device number 20 [ 270.430705][ T803] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 270.539758][ T8513] netlink: 16 bytes leftover after parsing attributes in process `syz.3.710'. [ 270.562080][ T8513] netlink: 64 bytes leftover after parsing attributes in process `syz.3.710'. [ 270.601291][ T8513] netlink: 16 bytes leftover after parsing attributes in process `syz.3.710'. [ 270.617468][ T803] usb 1-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 270.654347][ T803] usb 1-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 270.682175][ T803] usb 1-1: Product: syz [ 270.717986][ T803] usb 1-1: config 0 descriptor?? [ 270.734238][ T803] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 270.832288][ T8522] netlink: 'syz.1.712': attribute type 2 has an invalid length. [ 270.840320][ T8522] netlink: 'syz.1.712': attribute type 2 has an invalid length. [ 270.988309][ T803] usb 1-1: Detected FT232H [ 271.126519][ T803] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 271.134365][ T803] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 271.155896][ T803] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 271.184578][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 271.184593][ T30] audit: type=1326 audit(1777272676.577:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8525 comm="syz.4.713" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f40f859cdd9 code=0x0 [ 271.213654][ T803] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 271.224363][ T803] usb 1-1: USB disconnect, device number 17 [ 271.236496][ T803] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 271.256299][ T803] ftdi_sio 1-1:0.0: device disconnected [ 271.301686][ T30] audit: type=1400 audit(1777272676.697:776): avc: denied { connect } for pid=8525 comm="syz.4.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 271.410283][ T30] audit: type=1400 audit(1777272676.777:777): avc: denied { listen } for pid=8525 comm="syz.4.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 271.412405][ T8531] netlink: 16 bytes leftover after parsing attributes in process `syz.2.714'. [ 271.484490][ T8534] netlink: 20 bytes leftover after parsing attributes in process `syz.3.715'. [ 271.574762][ T8542] netlink: 'syz.1.716': attribute type 2 has an invalid length. [ 271.582757][ T8542] netlink: 'syz.1.716': attribute type 2 has an invalid length. [ 272.035642][ T8553] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8553 comm=syz.0.717 [ 272.137120][ T8556] netlink: 60 bytes leftover after parsing attributes in process `syz.4.718'. [ 272.194947][ T8556] netlink: 'syz.4.718': attribute type 89 has an invalid length. [ 272.204150][ T8558] netlink: 60 bytes leftover after parsing attributes in process `syz.1.719'. [ 272.272139][ T8558] netlink: 'syz.1.719': attribute type 89 has an invalid length. [ 272.368310][ T24] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 272.508005][ T24] usb 3-1: device descriptor read/64, error -71 [ 272.810390][ T24] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 273.477943][ T24] usb 3-1: device descriptor read/64, error -71 [ 273.608154][ T24] usb usb3-port1: attempt power cycle [ 273.969043][ T24] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 274.019790][ T24] usb 3-1: device descriptor read/8, error -71 [ 274.409695][ T8600] netlink: 'syz.4.726': attribute type 4 has an invalid length. [ 275.012767][ T24] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 275.101131][ T8597] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 275.261543][ T5781] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 275.431027][ T24] usb 3-1: device not accepting address 23, error -71 [ 275.458447][ T5781] usb 1-1: Using ep0 maxpacket: 16 [ 275.939593][ T5781] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.009246][ T8606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.053487][ T5781] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.143340][ T5781] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 276.185055][ T5781] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.462649][ T24] usb usb3-port1: unable to enumerate USB device [ 276.463260][ T5781] usb 1-1: config 0 descriptor?? [ 277.278928][ T8620] lo speed is unknown, defaulting to 1000 [ 277.291751][ T8620] lo speed is unknown, defaulting to 1000 [ 277.401625][ T8620] lo speed is unknown, defaulting to 1000 [ 277.434077][ T8620] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 277.448990][ T8620] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 277.466011][ T8620] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 277.505681][ T8620] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 277.622338][ T8620] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 277.820908][ T8623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.867102][ T8623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.985788][ T8620] lo speed is unknown, defaulting to 1000 [ 278.013973][ T8620] lo speed is unknown, defaulting to 1000 [ 278.030601][ T8620] lo speed is unknown, defaulting to 1000 [ 278.105430][ T8620] lo speed is unknown, defaulting to 1000 [ 278.179463][ T8624] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 278.425543][ T8625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.732'. [ 278.457297][ T8620] lo speed is unknown, defaulting to 1000 [ 278.630249][ T8625] openvswitch: netlink: Key 8 has unexpected len 4 expected 40 [ 278.674811][ T8632] 9p: Bad value for 'wfdno' [ 278.721649][ T8635] overlay: Unknown parameter 'subj_role' [ 278.987905][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 279.912424][ T8640] netlink: 'syz.3.735': attribute type 2 has an invalid length. [ 279.920439][ T8640] netlink: 'syz.3.735': attribute type 2 has an invalid length. [ 280.607700][ T8644] netlink: 'syz.4.736': attribute type 2 has an invalid length. [ 280.616103][ T8644] netlink: 'syz.4.736': attribute type 2 has an invalid length. [ 281.115254][ T5781] usbhid 1-1:0.0: can't add hid device: -71 [ 281.138713][ T5781] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 281.163255][ T5781] usb 1-1: USB disconnect, device number 18 [ 281.604936][ T8661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.741'. [ 281.639862][ T8661] netlink: 24 bytes leftover after parsing attributes in process `syz.2.741'. [ 281.728617][ T8665] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 281.736495][ T8665] UDF-fs: Scanning with blocksize 512 failed [ 281.748611][ T8665] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 281.756157][ T8665] UDF-fs: Scanning with blocksize 1024 failed [ 281.828636][ T8665] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 281.838668][ T8665] UDF-fs: Scanning with blocksize 2048 failed [ 281.847235][ T8665] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 281.854883][ T8665] UDF-fs: Scanning with blocksize 4096 failed [ 284.400938][ T30] audit: type=1326 audit(1777272689.787:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8708 comm="syz.3.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17faf9cdd9 code=0x7ffc0000 [ 284.618844][ T30] audit: type=1326 audit(1777272689.787:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8708 comm="syz.3.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f17faf9cdd9 code=0x7ffc0000 [ 284.827197][ T30] audit: type=1326 audit(1777272690.017:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8708 comm="syz.3.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17faf9cdd9 code=0x7ffc0000 [ 284.855558][ T8710] lo speed is unknown, defaulting to 1000 [ 284.955949][ T8728] netlink: 'syz.1.760': attribute type 4 has an invalid length. [ 285.375766][ T30] audit: type=1326 audit(1777272690.017:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8708 comm="syz.3.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f17faf9cdd9 code=0x7ffc0000 [ 285.399596][ T30] audit: type=1326 audit(1777272690.017:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8708 comm="syz.3.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17faf9cdd9 code=0x7ffc0000 [ 285.600811][ T8731] netlink: 'syz.2.761': attribute type 2 has an invalid length. [ 285.608591][ T8731] netlink: 'syz.2.761': attribute type 2 has an invalid length. [ 285.830822][ T30] audit: type=1326 audit(1777272690.017:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8708 comm="syz.3.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17faf9cdd9 code=0x7ffc0000 [ 285.922432][ T30] audit: type=1326 audit(1777272690.067:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8708 comm="syz.3.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f17faf9cdd9 code=0x7ffc0000 [ 286.474051][ T30] audit: type=1326 audit(1777272690.087:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8708 comm="syz.3.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17faf9cdd9 code=0x7ffc0000 [ 286.497971][ T30] audit: type=1326 audit(1777272690.087:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8708 comm="syz.3.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f17faf9cdd9 code=0x7ffc0000 [ 286.528316][ T804] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 286.546582][ T30] audit: type=1326 audit(1777272690.087:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8708 comm="syz.3.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17faf9cdd9 code=0x7ffc0000 [ 286.797988][ T804] usb 2-1: Using ep0 maxpacket: 32 [ 286.814865][ T804] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 286.834165][ T804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.835192][ T8739] netlink: 16 bytes leftover after parsing attributes in process `syz.2.764'. [ 287.156618][ T804] usb 2-1: config 0 descriptor?? [ 287.198919][ T804] as10x_usb: device has been detected [ 287.219894][ T804] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 287.270464][ T804] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 287.396897][ T804] as10x_usb: error during firmware upload part1 [ 287.403770][ T804] Registered device nBox DVB-T Dongle [ 287.488492][ T8735] bridge1: entered promiscuous mode [ 287.547595][ T8735] bridge1: entered allmulticast mode [ 287.602631][ T8735] team0: Port device bridge1 added [ 287.672720][ T803] usb 2-1: USB disconnect, device number 21 [ 288.004490][ T803] Unregistered device nBox DVB-T Dongle [ 288.096245][ T803] as10x_usb: device has been disconnected [ 288.808020][ T24] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 289.039957][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.413272][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 289.487717][ T24] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 289.525531][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.603575][ T24] usb 4-1: config 0 descriptor?? [ 289.835684][ T24] Bluetooth: Can't get state to change to load ram patch err [ 289.860333][ T24] Bluetooth: Loading patch file failed [ 289.884538][ T24] ath3k 4-1:0.0: probe with driver ath3k failed with error -71 [ 289.936446][ T24] usb 4-1: USB disconnect, device number 16 [ 290.864921][ T8790] NILFS (nullb0): couldn't find nilfs on the device [ 290.901574][ T8790] netlink: 'syz.3.775': attribute type 2 has an invalid length. [ 290.909493][ T8790] netlink: 'syz.3.775': attribute type 2 has an invalid length. [ 291.018286][ T24] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 291.249777][ T24] usb 2-1: device descriptor read/64, error -71 [ 291.558736][ T24] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 291.637523][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 291.637540][ T30] audit: type=1400 audit(1777272697.027:794): avc: denied { read append } for pid=8798 comm="syz.2.778" name="btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 291.742278][ T24] usb 2-1: device descriptor read/64, error -71 [ 291.986267][ T30] audit: type=1400 audit(1777272697.027:795): avc: denied { open } for pid=8798 comm="syz.2.778" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 292.048414][ T24] usb usb2-port1: attempt power cycle [ 292.234187][ T8805] netlink: 60 bytes leftover after parsing attributes in process `syz.3.779'. [ 292.493037][ T30] audit: type=1400 audit(1777272697.887:796): avc: denied { write } for pid=8808 comm="syz.3.780" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 292.498161][ T24] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 292.669232][ T24] usb 2-1: device descriptor read/8, error -71 [ 292.677942][ T30] audit: type=1400 audit(1777272697.887:797): avc: denied { open } for pid=8808 comm="syz.3.780" path="/178/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 292.830263][ T8817] netlink: 'syz.0.782': attribute type 2 has an invalid length. [ 292.838068][ T8817] netlink: 'syz.0.782': attribute type 2 has an invalid length. [ 292.940663][ T30] audit: type=1400 audit(1777272697.917:798): avc: denied { ioctl } for pid=8808 comm="syz.3.780" path="/178/file0/file0" dev="fuse" ino=64 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 293.040333][ T24] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 293.170109][ T8809] @0fLՈ: renamed from virt_wifi0 [ 293.177021][ T30] audit: type=1400 audit(1777272698.547:799): avc: denied { audit_write } for pid=8811 comm="syz.2.781" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 293.248846][ T24] usb 2-1: device descriptor read/8, error -71 [ 293.368962][ T24] usb usb2-port1: unable to enumerate USB device [ 293.793081][ T8834] NILFS (nullb0): couldn't find nilfs on the device [ 293.855756][ T8834] netlink: 'syz.1.786': attribute type 2 has an invalid length. [ 293.863585][ T8834] netlink: 'syz.1.786': attribute type 2 has an invalid length. [ 294.057789][ T8838] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 294.347966][ T804] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 294.497983][ T5781] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 294.509271][ T804] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 294.545498][ T804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.591457][ T804] usb 4-1: config 0 descriptor?? [ 294.678533][ T5781] usb 2-1: Using ep0 maxpacket: 32 [ 294.692273][ T5781] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.726651][ T5781] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 294.747094][ T5781] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.756672][ T803] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 294.784553][ T5781] usb 2-1: Product: syz [ 294.808187][ T5781] usb 2-1: Manufacturer: syz [ 294.823855][ T804] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 294.827345][ T5781] usb 2-1: SerialNumber: syz [ 294.891531][ T5781] usb 2-1: config 0 descriptor?? [ 294.909916][ T5781] cdc_ether 2-1:0.0: missing cdc header descriptor [ 294.944214][ T5781] usb 2-1: unsupported MDLM descriptors [ 294.949940][ T803] usb 1-1: Using ep0 maxpacket: 16 [ 294.974982][ T803] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.016422][ T803] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 295.082180][ T803] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 295.099663][ T803] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.412143][ T804] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 295.438632][ T24] usb 2-1: USB disconnect, device number 26 [ 295.449852][ T804] [drm] Initialized udl on minor 2 [ 295.490962][ T804] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 295.537174][ T804] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 295.564974][ T803] usb 1-1: config 0 descriptor?? [ 295.710544][ T5713] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 295.748746][ T5713] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 295.778607][ T5713] usb 4-1: USB disconnect, device number 17 [ 296.123323][ T803] HID 045e:07da: Invalid code 65791 type 1 [ 296.625881][ T803] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0006/input/input11 [ 296.650013][ T803] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 297.160867][ T30] audit: type=1400 audit(1777272702.477:800): avc: denied { create } for pid=8852 comm="syz.4.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 297.187395][ T804] usb 1-1: USB disconnect, device number 19 [ 297.201959][ T30] audit: type=1400 audit(1777272702.477:801): avc: denied { getopt } for pid=8852 comm="syz.4.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 297.225196][ T8864] netlink: 60 bytes leftover after parsing attributes in process `syz.1.795'. [ 297.271511][ T8864] netlink: 'syz.1.795': attribute type 89 has an invalid length. [ 297.298151][ T5713] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 297.457971][ T5713] usb 3-1: Using ep0 maxpacket: 16 [ 297.472832][ T5713] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.485905][ T5713] usb 3-1: config 0 interface 0 has no altsetting 0 [ 297.493638][ T5713] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 297.504041][ T5713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.555018][ T5713] usb 3-1: config 0 descriptor?? [ 297.594623][ T8867] netlink: 60 bytes leftover after parsing attributes in process `syz.4.796'. [ 297.666501][ T8867] netlink: 'syz.4.796': attribute type 89 has an invalid length. [ 297.888355][ T803] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 298.219584][ T5713] nzxt-smart2 0003:1E71:2009.0007: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 298.390967][ T803] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 298.418166][ T8877] netlink: 60 bytes leftover after parsing attributes in process `syz.1.799'. [ 298.432481][ T803] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 255, setting to 8 [ 298.455545][ T803] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 298.455794][ T8877] netlink: 'syz.1.799': attribute type 89 has an invalid length. [ 298.482686][ T803] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.510744][ T8869] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 298.938836][ T8869] netlink: 'syz.3.797': attribute type 1 has an invalid length. [ 298.963295][ T8869] netlink: 4 bytes leftover after parsing attributes in process `syz.3.797'. [ 299.010366][ T5781] usb 3-1: USB disconnect, device number 24 [ 299.186034][ T803] usb 4-1: string descriptor 0 read error: -71 [ 299.202395][ T803] hub 4-1:32.0: USB hub found [ 299.230167][ T803] hub 4-1:32.0: config failed, can't read hub descriptor (err -22) [ 299.406501][ T30] audit: type=1400 audit(1777272704.797:802): avc: denied { read } for pid=8885 comm="syz.4.801" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 299.444090][ T803] usb 4-1: USB disconnect, device number 18 [ 299.491300][ T8887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.511156][ T30] audit: type=1400 audit(1777272704.797:803): avc: denied { open } for pid=8885 comm="syz.4.801" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 299.561807][ T8887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.659100][ T30] audit: type=1400 audit(1777272705.457:804): avc: denied { ioctl } for pid=8888 comm="syz.3.803" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 300.780427][ T30] audit: type=1400 audit(1777272706.157:805): avc: denied { append } for pid=8882 comm="syz.0.800" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 301.246581][ T30] audit: type=1400 audit(1777272706.197:806): avc: denied { getopt } for pid=8889 comm="syz.2.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 302.439911][ T803] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 302.597942][ T803] usb 3-1: Using ep0 maxpacket: 16 [ 302.662317][ T803] usb 3-1: unable to get BOS descriptor or descriptor too short [ 302.673135][ T803] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 302.689896][ T803] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0203, bcdDevice=56.2b [ 302.699952][ T803] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.728097][ T803] usb 3-1: Product: syz [ 302.742797][ T803] usb 3-1: Manufacturer: syz [ 302.762407][ T803] usb 3-1: SerialNumber: syz [ 302.779245][ T8914] netlink: 60 bytes leftover after parsing attributes in process `syz.4.809'. [ 302.856152][ T8914] netlink: 'syz.4.809': attribute type 89 has an invalid length. [ 302.960617][ T8918] netlink: 'syz.3.804': attribute type 2 has an invalid length. [ 302.969655][ T8918] netlink: 'syz.3.804': attribute type 2 has an invalid length. [ 303.201280][ T803] usb 3-1: USB disconnect, device number 25 [ 303.495058][ T5609] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 303.792051][ T8924] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 303.799728][ T8924] UDF-fs: Scanning with blocksize 512 failed [ 303.806033][ T8924] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 303.813510][ T8924] UDF-fs: Scanning with blocksize 1024 failed [ 303.819786][ T8924] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 303.827488][ T8924] UDF-fs: Scanning with blocksize 2048 failed [ 303.833748][ T8924] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 303.841228][ T8924] UDF-fs: Scanning with blocksize 4096 failed [ 303.895519][ T8924] netlink: 20 bytes leftover after parsing attributes in process `syz.2.811'. [ 304.099725][ T8934] NILFS (nullb0): couldn't find nilfs on the device [ 304.145583][ T8934] netlink: 'syz.2.814': attribute type 2 has an invalid length. [ 304.153360][ T8934] netlink: 'syz.2.814': attribute type 2 has an invalid length. [ 304.258079][ T24] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 304.428572][ T8936] netlink: 'syz.3.815': attribute type 3 has an invalid length. [ 304.497961][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 304.509884][ T24] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.522189][ T8938] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 304.531777][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 304.551261][ T24] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 304.560869][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.585746][ T24] usb 2-1: config 0 descriptor?? [ 306.435502][ T24] nzxt-smart2 0003:1E71:2009.0008: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 306.552237][ T24] usb 2-1: USB disconnect, device number 27 [ 306.599122][ T8954] Set syz1 is full, maxelem 0 reached [ 306.635407][ T8953] fido_id[8953]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 307.159750][ T30] audit: type=1400 audit(1777272712.557:807): avc: denied { write } for pid=8959 comm="syz.4.822" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 308.445731][ T8974] netlink: 32 bytes leftover after parsing attributes in process `syz.0.826'. [ 309.838757][ T30] audit: type=1400 audit(1777272715.237:808): avc: denied { getopt } for pid=8988 comm="syz.2.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 309.840239][ T8990] netlink: 'syz.2.832': attribute type 29 has an invalid length. [ 309.894860][ T8992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.910958][ T8992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.980742][ T8990] lo speed is unknown, defaulting to 1000 [ 310.232748][ T803] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 310.318872][ T804] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 310.398691][ T803] usb 1-1: device descriptor read/64, error -71 [ 310.529284][ T804] usb 3-1: Using ep0 maxpacket: 32 [ 310.576110][ T804] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 310.604425][ T804] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.617655][ T804] usb 3-1: config 0 has no interface number 0 [ 310.635650][ T804] usb 3-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 310.668650][ T804] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 310.679231][ T804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.688803][ T804] usb 3-1: Product: syz [ 310.703996][ T804] usb 3-1: Manufacturer: syz [ 310.713609][ T804] usb 3-1: SerialNumber: syz [ 310.731829][ T803] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 310.802905][ T804] usb 3-1: config 0 descriptor?? [ 310.849846][ T30] audit: type=1400 audit(1777272716.207:809): avc: denied { connect } for pid=9002 comm="syz.4.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 310.856797][ T804] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 310.994439][ T804] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5 [ 311.019269][ T803] usb 1-1: device descriptor read/64, error -71 [ 311.171519][ T803] usb usb1-port1: attempt power cycle [ 311.335353][ T804] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 311.344409][ T804] usbhid 3-1:0.35: couldn't find an input interrupt endpoint [ 311.360493][ T804] usb 3-1: USB disconnect, device number 26 [ 311.364295][ T9007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.836'. [ 311.398973][ T8770] wlan0: Trigger new scan to find an IBSS to join [ 311.464206][ T9010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.836'. [ 311.514392][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.538341][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.572144][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.573659][ T9009] syzkaller0: entered promiscuous mode [ 311.584073][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.584126][ T803] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 311.608032][ T9009] syzkaller0: entered allmulticast mode [ 311.632962][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.655917][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.677296][ T803] usb 1-1: device descriptor read/8, error -71 [ 311.693850][ T9009] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9009 comm=syz.3.837 [ 311.700697][ T9007] team0: Device gtp0 is up. Set it down before adding it as a team port [ 311.847976][ T10] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 311.929661][ T803] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 311.958485][ T803] usb 1-1: device descriptor read/8, error -71 [ 312.011877][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 312.023358][ T10] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 312.036848][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.060420][ T10] usb 2-1: config 0 descriptor?? [ 312.068345][ T803] usb usb1-port1: unable to enumerate USB device [ 312.283192][ T10] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 312.292435][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 312.303612][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 312.315289][ T10] usb 2-1: media controller created [ 312.329582][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 312.409273][ T10] DVB: Unable to find symbol dib7000p_attach() [ 312.416958][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 312.547959][ T10] rc_core: IR keymap rc-dib0700-rc5 not found [ 312.563427][ T10] Registered IR keymap rc-empty [ 312.569136][ T10] dvb-usb: could not initialize remote control. [ 312.589530][ T10] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 312.947211][ T9026] netlink: 156 bytes leftover after parsing attributes in process `syz.0.842'. [ 313.022854][ T5609] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 313.798627][ T9040] NILFS (nullb0): couldn't find nilfs on the device [ 313.820089][ T9040] netlink: 'syz.4.845': attribute type 2 has an invalid length. [ 313.827853][ T9040] netlink: 'syz.4.845': attribute type 2 has an invalid length. [ 314.475344][ T5997] wlan0: Trigger new scan to find an IBSS to join [ 314.621241][ T9047] netlink: 'syz.3.846': attribute type 4 has an invalid length. [ 314.896818][ T804] usb 2-1: USB disconnect, device number 28 [ 315.034720][ T30] audit: type=1400 audit(1777272720.397:810): avc: denied { read append } for pid=9048 comm="syz.4.848" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 315.090467][ T5781] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 315.109270][ T9050] netlink: 12 bytes leftover after parsing attributes in process `syz.4.848'. [ 315.118834][ T9050] netlink: 12 bytes leftover after parsing attributes in process `syz.4.848'. [ 315.781555][ T30] audit: type=1400 audit(1777272720.697:811): avc: denied { bind } for pid=9048 comm="syz.4.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 316.207958][ T5781] usb 3-1: device descriptor read/64, error -71 [ 316.227647][ T804] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 316.240167][ T196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.307164][ T9061] netlink: 60 bytes leftover after parsing attributes in process `syz.1.852'. [ 316.346219][ T9061] netlink: 'syz.1.852': attribute type 89 has an invalid length. [ 316.448021][ T5781] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 317.017986][ T5781] usb 3-1: device descriptor read/64, error -71 [ 317.101662][ T5609] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 317.158489][ T5781] usb usb3-port1: attempt power cycle [ 317.374438][ T9079] Illegal XDP return value 2702446419 on prog (id 90) dev N/A, expect packet loss! [ 317.450021][ T9080] netlink: 'syz.4.859': attribute type 3 has an invalid length. [ 317.519039][ T9079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.539489][ T9079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.563326][ T9079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.587489][ T9079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.044731][ T9088] netlink: 'syz.2.861': attribute type 4 has an invalid length. [ 318.457903][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 318.642444][ T9098] NILFS (nullb0): couldn't find nilfs on the device [ 318.697895][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 318.757894][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 318.862565][ T9100] netlink: 'syz.1.865': attribute type 2 has an invalid length. [ 318.870420][ T9100] netlink: 'syz.1.865': attribute type 2 has an invalid length. [ 319.865286][ T9104] virt_wifi0: entered allmulticast mode [ 320.988870][ T9120] netlink: 60 bytes leftover after parsing attributes in process `syz.2.872'. [ 321.049140][ T9120] netlink: 'syz.2.872': attribute type 89 has an invalid length. [ 321.178129][ T5781] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 321.208547][ T5609] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 321.359629][ T5781] usb 4-1: device descriptor read/64, error -71 [ 321.619187][ T5781] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 321.883438][ T9129] netlink: 'syz.0.874': attribute type 4 has an invalid length. [ 322.128049][ T5781] usb 4-1: device descriptor read/64, error -71 [ 322.153678][ T5712] lo speed is unknown, defaulting to 1000 [ 322.166654][ T5712] syz2: Port: 1 Link DOWN [ 322.252261][ T5781] usb usb4-port1: attempt power cycle [ 322.668909][ T5781] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 322.698963][ T5781] usb 4-1: device descriptor read/8, error -71 [ 322.898313][ T9142] binder: 9140:9142 ioctl c0306201 0 returned -14 [ 322.914679][ T9142] PKCS7: Unknown OID: [4] (bad) [ 322.920435][ T9142] PKCS7: Only support pkcs7_signedData type [ 323.048350][ T804] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 323.066288][ T5781] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 323.156372][ T5781] usb 4-1: device descriptor read/8, error -71 [ 323.308064][ T5781] usb usb4-port1: unable to enumerate USB device [ 323.330622][ T804] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 323.342746][ T804] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 323.356175][ T804] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 323.366564][ T804] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 323.379079][ T804] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 323.406269][ T804] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 323.428920][ T804] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 323.449820][ T804] usb 3-1: Product: syz [ 323.463890][ T804] usb 3-1: Manufacturer: syz [ 323.490163][ T804] cdc_wdm 3-1:1.0: skipping garbage [ 323.508252][ T804] cdc_wdm 3-1:1.0: skipping garbage [ 323.527404][ T804] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 323.542428][ T804] cdc_wdm 3-1:1.0: Unknown control protocol [ 324.038356][ T9154] netlink: 'syz.3.881': attribute type 2 has an invalid length. [ 324.046180][ T9154] netlink: 'syz.3.881': attribute type 2 has an invalid length. [ 324.597621][ T9157] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -71 [ 324.702703][ T9164] NILFS (nullb0): couldn't find nilfs on the device [ 324.724848][ T9164] netlink: 'syz.1.884': attribute type 2 has an invalid length. [ 324.733016][ T9164] netlink: 'syz.1.884': attribute type 2 has an invalid length. [ 325.232245][ T5609] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 326.350939][ T30] audit: type=1326 audit(1777272731.747:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9189 comm="syz.4.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f859cdd9 code=0x7ffc0000 [ 326.383925][ T30] audit: type=1326 audit(1777272731.747:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9189 comm="syz.4.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f859cdd9 code=0x7ffc0000 [ 326.384544][ T9198] input: syz1 as /devices/virtual/input/input13 [ 326.416266][ T5713] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 326.459503][ T9198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.472658][ T30] audit: type=1326 audit(1777272731.767:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9189 comm="syz.4.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f40f859cdd9 code=0x7ffc0000 [ 326.497612][ T30] audit: type=1326 audit(1777272731.767:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9189 comm="syz.4.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f859cdd9 code=0x7ffc0000 [ 326.497819][ T9198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.541856][ T30] audit: type=1326 audit(1777272731.767:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9189 comm="syz.4.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f859cdd9 code=0x7ffc0000 [ 326.567672][ T30] audit: type=1326 audit(1777272731.767:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9189 comm="syz.4.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f40f859cdd9 code=0x7ffc0000 [ 326.592682][ T30] audit: type=1326 audit(1777272731.767:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9189 comm="syz.4.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f859cdd9 code=0x7ffc0000 [ 326.626852][ T30] audit: type=1326 audit(1777272731.767:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9189 comm="syz.4.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f859cdd9 code=0x7ffc0000 [ 326.652636][ T5713] usb 1-1: Using ep0 maxpacket: 32 [ 326.653964][ T30] audit: type=1326 audit(1777272731.767:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9189 comm="syz.4.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f40f859cdd9 code=0x7ffc0000 [ 326.664328][ T5713] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 326.688198][ T9207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.895'. [ 326.707098][ T5713] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 326.723289][ T10] usb 3-1: USB disconnect, device number 30 [ 326.737363][ T30] audit: type=1326 audit(1777272731.777:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9189 comm="syz.4.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f859cdd9 code=0x7ffc0000 [ 326.755263][ T5713] usb 1-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40 [ 326.782662][ T5713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.792218][ T5713] usb 1-1: Product: syz [ 326.797041][ T5713] usb 1-1: Manufacturer: syz [ 326.803830][ T5713] usb 1-1: SerialNumber: syz [ 326.883825][ T9210] NILFS (nullb0): couldn't find nilfs on the device [ 326.907698][ T9210] netlink: 'syz.2.896': attribute type 2 has an invalid length. [ 326.916113][ T9210] netlink: 'syz.2.896': attribute type 2 has an invalid length. [ 326.948474][ T5781] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 327.118203][ T5781] usb 2-1: Using ep0 maxpacket: 16 [ 327.182955][ T5781] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 327.254988][ T5781] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 327.396720][ T5781] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 327.453837][ T5781] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.491449][ T5781] usb 2-1: Product: syz [ 327.512033][ T5713] usb 1-1: 0:1 : does not exist [ 327.516091][ T5781] usb 2-1: Manufacturer: syz [ 327.519086][ T5713] usb 1-1: unit 8 not found! [ 327.545797][ T5781] usb 2-1: SerialNumber: syz [ 327.572713][ T5781] usb 2-1: config 0 descriptor?? [ 327.601445][ T5781] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 327.625520][ T5781] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 327.666540][ T5713] usb 1-1: USB disconnect, device number 24 [ 327.751279][ T5611] udevd[5611]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 328.347827][ T5781] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 328.354934][ T5781] em28xx 2-1:0.0: Config register raw data: 0x00 [ 328.489281][ T9223] netlink: 148 bytes leftover after parsing attributes in process `syz.0.900'. [ 329.035870][ T9228] netlink: 60 bytes leftover after parsing attributes in process `syz.2.901'. [ 329.063093][ T9228] netlink: 'syz.2.901': attribute type 89 has an invalid length. [ 329.110427][ T5609] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 329.516575][ T9244] FAULT_INJECTION: forcing a failure. [ 329.516575][ T9244] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 329.530940][ T9244] CPU: 1 UID: 0 PID: 9244 Comm: syz.0.907 Tainted: G L syzkaller #0 PREEMPT(full) [ 329.530961][ T9244] Tainted: [L]=SOFTLOCKUP [ 329.530964][ T9244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 329.530971][ T9244] Call Trace: [ 329.530975][ T9244] [ 329.530979][ T9244] dump_stack_lvl+0x100/0x190 [ 329.530997][ T9244] should_fail_ex.cold+0x5/0xa [ 329.531012][ T9244] _copy_from_user+0x2e/0xd0 [ 329.531028][ T9244] memdup_user+0x6b/0xe0 [ 329.531038][ T9244] strndup_user+0x78/0xe0 [ 329.531049][ T9244] __do_sys_fsconfig+0x276/0xcb0 [ 329.531061][ T9244] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 329.531071][ T9244] ? fput+0x79/0x100 [ 329.531094][ T9244] ? rcu_is_watching+0x12/0xc0 [ 329.531112][ T9244] do_syscall_64+0x10b/0xf80 [ 329.531125][ T9244] ? clear_bhb_loop+0x40/0x90 [ 329.531138][ T9244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.531149][ T9244] RIP: 0033:0x7fe65239cdd9 [ 329.531158][ T9244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.531168][ T9244] RSP: 002b:00007fe653222028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 329.531179][ T9244] RAX: ffffffffffffffda RBX: 00007fe652615fa0 RCX: 00007fe65239cdd9 [ 329.531186][ T9244] RDX: 00002000000001c0 RSI: 0000000000000001 RDI: 0000000000000003 [ 329.531192][ T9244] RBP: 00007fe653222090 R08: 0000000000000000 R09: 0000000000000000 [ 329.531197][ T9244] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 329.531203][ T9244] R13: 00007fe652616038 R14: 00007fe652615fa0 R15: 00007ffdbd1dca28 [ 329.531217][ T9244] [ 329.757451][ T9247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.908'. [ 329.901231][ T5781] IPVS: starting estimator thread 0... [ 329.988097][ T9254] IPVS: using max 45 ests per chain, 108000 per kthread [ 330.081771][ T9256] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 330.285574][ T9262] FAULT_INJECTION: forcing a failure. [ 330.285574][ T9262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 330.299910][ T9262] CPU: 1 UID: 0 PID: 9262 Comm: syz.4.912 Tainted: G L syzkaller #0 PREEMPT(full) [ 330.299935][ T9262] Tainted: [L]=SOFTLOCKUP [ 330.299942][ T9262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 330.299951][ T9262] Call Trace: [ 330.299956][ T9262] [ 330.299962][ T9262] dump_stack_lvl+0x100/0x190 [ 330.299986][ T9262] should_fail_ex.cold+0x5/0xa [ 330.300009][ T9262] _copy_to_user+0x32/0xd0 [ 330.300034][ T9262] simple_read_from_buffer+0xcb/0x170 [ 330.300056][ T9262] proc_fail_nth_read+0x1af/0x230 [ 330.300075][ T9262] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 330.300095][ T9262] ? rw_verify_area+0xce/0x6d0 [ 330.300119][ T9262] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 330.300136][ T9262] vfs_read+0x1e4/0xb30 [ 330.300157][ T9262] ? __pfx_vfs_read+0x10/0x10 [ 330.300174][ T9262] ? __fget_files+0x215/0x3d0 [ 330.300200][ T9262] ? __fget_files+0x21f/0x3d0 [ 330.300225][ T9262] ksys_read+0x12a/0x250 [ 330.300242][ T9262] ? __pfx_ksys_read+0x10/0x10 [ 330.300261][ T9262] ? rcu_is_watching+0x12/0xc0 [ 330.300290][ T9262] do_syscall_64+0x10b/0xf80 [ 330.300308][ T9262] ? clear_bhb_loop+0x40/0x90 [ 330.300329][ T9262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.300346][ T9262] RIP: 0033:0x7f40f855d60e [ 330.300360][ T9262] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 330.300375][ T9262] RSP: 002b:00007f40f94c2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 330.300390][ T9262] RAX: ffffffffffffffda RBX: 00007f40f94c36c0 RCX: 00007f40f855d60e [ 330.300400][ T9262] RDX: 000000000000000f RSI: 00007f40f94c30a0 RDI: 0000000000000004 [ 330.300410][ T9262] RBP: 00007f40f94c3090 R08: 0000000000000000 R09: 0000000000000000 [ 330.300419][ T9262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.300429][ T9262] R13: 00007f40f8816038 R14: 00007f40f8815fa0 R15: 00007ffc2dfa5de8 [ 330.300452][ T9262] [ 330.536604][ T5781] usb 2-1: USB disconnect, device number 29 [ 330.544937][ T5781] em28xx 2-1:0.0: Disconnecting em28xx [ 330.645684][ T5781] em28xx 2-1:0.0: Freeing device [ 330.711495][ T9269] NILFS (nullb0): couldn't find nilfs on the device [ 331.137465][ T9269] netlink: 'syz.1.915': attribute type 2 has an invalid length. [ 331.161677][ T9269] netlink: 'syz.1.915': attribute type 2 has an invalid length. [ 331.226500][ T9265] netlink: 'syz.3.913': attribute type 89 has an invalid length. [ 331.522411][ T9274] syzkaller0: entered promiscuous mode [ 331.543492][ T9274] syzkaller0: entered allmulticast mode [ 331.565261][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 331.565291][ T30] audit: type=1400 audit(1777272736.957:862): avc: denied { append } for pid=9275 comm="syz.4.917" path="socket:[24754]" dev="sockfs" ino=24754 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 332.921426][ T9291] netlink: 'syz.2.920': attribute type 2 has an invalid length. [ 332.929230][ T9291] netlink: 'syz.2.920': attribute type 2 has an invalid length. [ 333.581308][ T9293] bridge1: entered promiscuous mode [ 333.811457][ T9302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.846801][ T9302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.948690][ T9307] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 334.018444][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 334.705352][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 334.717408][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 334.718330][ T30] audit: type=1400 audit(1777272740.097:863): avc: denied { write } for pid=9295 comm="syz.2.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 334.846653][ T9314] netlink: 4 bytes leftover after parsing attributes in process `syz.4.921'. [ 334.879529][ T9314] netlink: 12 bytes leftover after parsing attributes in process `syz.4.921'. [ 335.174354][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 335.186921][ T9] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 335.196101][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.204136][ T9] usb 4-1: Product: syz [ 335.208321][ T9] usb 4-1: Manufacturer: syz [ 335.212908][ T9] usb 4-1: SerialNumber: syz [ 335.246717][ T9] usb 4-1: config 0 descriptor?? [ 335.281500][ T9301] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 335.319329][ T9301] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 335.346871][ T9] usb 4-1: ucan: probing device on interface #0 [ 335.457889][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 336.448501][ T9] usb 4-1: ucan: could not read protocol version, ret=-110 [ 336.455756][ T9] usb 4-1: ucan: probe failed; try to update the device firmware [ 336.508859][ T9] usb 4-1: USB disconnect, device number 23 [ 337.781639][ T9323] netlink: 40 bytes leftover after parsing attributes in process `syz.0.929'. [ 339.858387][ T9344] netlink: 'syz.0.934': attribute type 2 has an invalid length. [ 339.867078][ T9344] netlink: 'syz.0.934': attribute type 2 has an invalid length. [ 340.600431][ T30] audit: type=1400 audit(1777272745.997:864): avc: denied { setattr } for pid=9349 comm="syz.3.936" name="/" dev="configfs" ino=1109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 341.557651][ T9350] syzkaller0: entered promiscuous mode [ 341.598237][ T9350] syzkaller0: entered allmulticast mode [ 344.298182][ T9] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 344.518536][ T9] usb 2-1: device descriptor read/64, error -71 [ 344.751293][ T9387] SET target dimension over the limit! [ 344.834435][ T30] audit: type=1400 audit(1777272750.177:865): avc: denied { lock } for pid=9389 comm="syz.2.943" path="socket:[24569]" dev="sockfs" ino=24569 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 344.835539][ T9390] loop5: detected capacity change from 0 to 7 [ 344.866660][ T9] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 345.060306][ T9] usb 2-1: device descriptor read/64, error -71 [ 345.169356][ T9] usb usb2-port1: attempt power cycle [ 345.262008][ T9390] Dev loop5: unable to read RDB block 7 [ 345.267691][ T9390] loop5: unable to read partition table [ 345.273932][ T9390] loop5: partition table beyond EOD, truncated [ 345.280472][ T5781] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 345.289599][ T9390] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 345.472433][ T5781] usb 3-1: Using ep0 maxpacket: 32 [ 345.484431][ T5781] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 30768, setting to 1024 [ 345.507590][ T5781] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024 [ 345.526184][ T5781] usb 3-1: config 0 interface 0 has no altsetting 0 [ 345.539635][ T5781] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 345.551257][ T5781] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.559644][ T5781] usb 3-1: Product: syz [ 345.563864][ T5781] usb 3-1: Manufacturer: syz [ 345.585368][ T5781] usb 3-1: SerialNumber: syz [ 345.618027][ T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 345.633213][ T5781] usb 3-1: config 0 descriptor?? [ 345.649092][ T9394] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 345.669867][ T9] usb 2-1: device descriptor read/8, error -71 [ 345.959961][ T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 346.008669][ T9] usb 2-1: device descriptor read/8, error -71 [ 346.084096][ T5781] gs_usb 3-1:0.0: Configuring for 5 interfaces [ 346.136497][ T9] usb usb2-port1: unable to enumerate USB device [ 348.087158][ T9413] NILFS (nullb0): couldn't find nilfs on the device [ 348.105729][ T9413] netlink: 'syz.2.951': attribute type 2 has an invalid length. [ 348.113636][ T9413] netlink: 'syz.2.951': attribute type 2 has an invalid length. [ 348.632863][ T5781] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 348.695333][ T5997] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 348.797665][ T5781] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 348.837352][ T5781] usb 3-1: USB disconnect, device number 31 [ 348.946210][ T9417] lo speed is unknown, defaulting to 1000 [ 349.048286][ T9] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 349.147919][ T10] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 349.221093][ T9] usb 4-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 349.234765][ T30] audit: type=1400 audit(1777272754.627:866): avc: denied { relabelfrom } for pid=9427 comm="syz.0.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 349.253341][ T9] usb 4-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 349.260193][ T30] audit: type=1400 audit(1777272754.627:867): avc: denied { relabelto } for pid=9427 comm="syz.0.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 349.297234][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 349.323161][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 349.350575][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 349.363141][ T10] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 349.382122][ T9] usb 4-1: SerialNumber: syz [ 349.398082][ T10] usb 2-1: config 1 has no interface number 0 [ 349.414631][ T9] hub 4-1:1.0: bad descriptor, ignoring hub [ 349.423469][ T10] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 349.450975][ T9] hub 4-1:1.0: probe with driver hub failed with error -5 [ 349.471163][ T10] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 349.491176][ T9] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 349.517388][ T10] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.537008][ T10] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 349.546851][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.556739][ T10] usb 2-1: Product: syz [ 349.562239][ T10] usb 2-1: Manufacturer: syz [ 349.607945][ T10] usb 2-1: SerialNumber: syz [ 349.623262][ T9425] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 349.635884][ T9] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 349.668817][ T9] usb 4-1: USB disconnect, device number 24 [ 349.705654][ T9433] NILFS (nullb0): couldn't find nilfs on the device [ 349.900155][ T9425] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 350.222881][ T5712] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 350.310326][ T10] sierra_net 2-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 350.343430][ T9425] qnx6: unable to read the first superblock [ 350.377141][ T9425] qnx6: unable to read the first superblock [ 350.413959][ T9425] qnx6: unable to read the first superblock [ 350.567964][ T5712] usb 1-1: Using ep0 maxpacket: 32 [ 350.575763][ T5712] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 350.585945][ T5712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.596155][ T5712] usb 1-1: config 0 descriptor?? [ 350.972991][ T9425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.000011][ T9425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.127713][ T5712] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 351.141224][ T5712] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 351.237922][ T5712] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 351.246473][ T5712] usb 1-1: media controller created [ 351.259918][ T5712] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 351.396584][ T5712] DVB: Unable to find symbol dib7000p_attach() [ 351.402758][ T5712] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 351.451460][ T9] usb 2-1: USB disconnect, device number 34 [ 351.480243][ T9] sierra_net 2-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem [ 351.553650][ T5712] rc_core: IR keymap rc-dib0700-rc5 not found [ 351.559757][ T5712] Registered IR keymap rc-empty [ 351.564799][ T5712] dvb-usb: could not initialize remote control. [ 351.571037][ T5712] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 351.702859][ T10] IPVS: starting estimator thread 0... [ 351.712168][ T30] audit: type=1326 audit(1777272757.077:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9458 comm="syz.3.961" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f17faf9cdd9 code=0x0 [ 351.859942][ T9462] IPVS: using max 47 ests per chain, 112800 per kthread [ 352.178256][ T10] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 352.309065][ T9] sierra_net 2-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 352.399532][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 352.401320][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 352.402167][ T10] usb 3-1: config 1 has an invalid interface number: 4 but max is 2 [ 352.402189][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 352.402207][ T10] usb 3-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 352.402226][ T10] usb 3-1: config 1 has no interface number 3 [ 352.402287][ T10] usb 3-1: config 1 interface 4 altsetting 186 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 352.402318][ T10] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 352.402341][ T10] usb 3-1: config 1 interface 4 has no altsetting 0 [ 352.402356][ T10] usb 3-1: config 1 interface 2 has no altsetting 0 [ 352.415652][ T10] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 353.140315][ T9] usb 1-1: USB disconnect, device number 25 [ 353.151816][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.477775][ T10] usb 3-1: Product: syz [ 353.507152][ T10] usb 3-1: Manufacturer: syz [ 353.557813][ T10] usb 3-1: SerialNumber: syz [ 353.602753][ T9] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 353.627939][ T803] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 353.813225][ T803] usb 4-1: Using ep0 maxpacket: 32 [ 353.860683][ T803] usb 4-1: config 139 has an invalid interface number: 49 but max is 0 [ 353.897399][ T803] usb 4-1: config 139 has no interface number 0 [ 353.923312][ T803] usb 4-1: config 139 interface 49 has no altsetting 0 [ 353.931818][ T10] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 353.946629][ T803] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75 [ 353.963992][ T10] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 353.976014][ T803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.003702][ T803] usb 4-1: Product: syz [ 354.016946][ T10] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 354.033020][ T803] usb 4-1: Manufacturer: syz [ 354.045884][ T803] usb 4-1: SerialNumber: syz [ 354.052518][ T10] snd-usb-audio 3-1:1.4: probe with driver snd-usb-audio failed with error -22 [ 354.092771][ T30] audit: type=1326 audit(1777272759.487:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9490 comm="syz.0.965" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe65239cdd9 code=0x7ffe0000 [ 354.314886][ T803] radio-usb-si4713 4-1:139.49: Si4713 development board discovered: (10C4:8244) [ 354.335726][ T10] usb 3-1: USB disconnect, device number 32 [ 354.365588][ T803] radio-usb-si4713 4-1:139.49: probe with driver radio-usb-si4713 failed with error -71 [ 354.403735][ T803] usbhid 4-1:139.49: couldn't find an input interrupt endpoint [ 354.459877][ T5621] udevd[5621]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 354.489235][ T803] usb 4-1: USB disconnect, device number 25 [ 355.345308][ T9506] netlink: 24 bytes leftover after parsing attributes in process `syz.4.968'. [ 355.712601][ T9508] syzkaller0: entered promiscuous mode [ 355.741411][ T9508] syzkaller0: entered allmulticast mode [ 356.133011][ T9515] lo speed is unknown, defaulting to 1000 [ 358.142395][ T9527] Can't find ip_set type hash:mp,mac [ 358.788568][ T5609] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 464.457823][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 464.464794][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5602/1:b..l [ 464.473163][ C0] rcu: (detected by 0, t=10502 jiffies, g=41013, q=356 ncpus=2) [ 464.480960][ C0] task:syz-executor state:R running task stack:23320 pid:5602 tgid:5602 ppid:5599 task_flags:0x400140 flags:0x00080000 [ 464.494935][ C0] Call Trace: [ 464.498212][ C0] [ 464.501138][ C0] __schedule+0x10e9/0x6820 [ 464.505654][ C0] ? page_table_check_set+0x477/0x920 [ 464.511022][ C0] ? __pfx___schedule+0x10/0x10 [ 464.515865][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 464.521230][ C0] preempt_schedule_common+0x42/0xc0 [ 464.526507][ C0] preempt_schedule_thunk+0x16/0x30 [ 464.531705][ C0] _raw_spin_unlock+0x3e/0x50 [ 464.536382][ C0] copy_page_range+0x1c02/0x5b00 [ 464.541343][ C0] ? mas_wr_store_entry+0xa1/0x1e80 [ 464.546541][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 464.551834][ C0] ? __pfx___might_resched+0x10/0x10 [ 464.557126][ C0] ? up_write+0x28c/0x4f0 [ 464.561462][ C0] dup_mmap+0xd25/0x2180 [ 464.565711][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 464.570378][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 464.576190][ C0] ? __lock_acquire+0x4a5/0x2630 [ 464.581134][ C0] ? find_held_lock+0x2b/0x80 [ 464.585800][ C0] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 464.591714][ C0] copy_process+0x7b37/0x7fa0 [ 464.596405][ C0] ? __pfx_copy_process+0x10/0x10 [ 464.601427][ C0] ? do_raw_spin_lock+0x128/0x260 [ 464.606460][ C0] kernel_clone+0x12e/0x9c0 [ 464.610955][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 464.615967][ C0] ? __lock_acquire+0x4a5/0x2630 [ 464.620910][ C0] ? find_held_lock+0x2b/0x80 [ 464.625579][ C0] ? __might_fault+0xc5/0x140 [ 464.630258][ C0] __do_sys_clone+0xd9/0x120 [ 464.634841][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 464.640042][ C0] ? rcu_is_watching+0x12/0xc0 [ 464.644808][ C0] do_syscall_64+0x10b/0xf80 [ 464.649396][ C0] ? clear_bhb_loop+0x40/0x90 [ 464.654065][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.659946][ C0] RIP: 0033:0x7f17fafc5852 [ 464.664348][ C0] RSP: 002b:00007fff410c32a0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 464.672834][ C0] RAX: ffffffffffffffda RBX: 00007fff410c32a0 RCX: 00007f17fafc5852 [ 464.680795][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 464.688754][ C0] RBP: 00007fff410c342c R08: 0000000000000000 R09: 0000000000000001 [ 464.696723][ C0] R10: 00005555875277d0 R11: 0000000000000246 R12: 0000000000000001 [ 464.704694][ C0] R13: 00000000000927c0 R14: 0000000000057b14 R15: 00007fff410c3480 [ 464.712681][ C0] [ 464.715706][ C0] rcu: rcu_preempt kthread starved for 10495 jiffies! g41013 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 464.726887][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 464.736929][ C0] rcu: RCU grace-period kthread stack dump: [ 464.742800][ C0] task:rcu_preempt state:R running task stack:27752 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 464.756283][ C0] Call Trace: [ 464.759548][ C0] [ 464.762474][ C0] __schedule+0x10e9/0x6820 [ 464.766988][ C0] ? __pfx___schedule+0x10/0x10 [ 464.771830][ C0] ? find_held_lock+0x2b/0x80 [ 464.776496][ C0] ? schedule+0x2bf/0x390 [ 464.780822][ C0] schedule+0xdd/0x390 [ 464.784881][ C0] schedule_timeout+0x127/0x280 [ 464.789728][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 464.795106][ C0] ? __pfx_process_timeout+0x10/0x10 [ 464.800385][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 464.806181][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 464.811636][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 464.816396][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 464.821676][ C0] ? prepare_to_swait_event+0xae/0x4a0 [ 464.827127][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 464.832060][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 464.837255][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 464.843075][ C0] rcu_gp_kthread+0x179/0x230 [ 464.847752][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 464.852944][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 464.858742][ C0] ? __kthread_parkme+0x18c/0x230 [ 464.863762][ C0] ? kthread+0x13a/0x450 [ 464.867994][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 464.873185][ C0] kthread+0x370/0x450 [ 464.877245][ C0] ? __pfx_kthread+0x10/0x10 [ 464.881828][ C0] ret_from_fork+0x72b/0xd50 [ 464.886423][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 464.891550][ C0] ? __switch_to+0x800/0x1100 [ 464.896244][ C0] ? __pfx_kthread+0x10/0x10 [ 464.900842][ C0] ret_from_fork_asm+0x1a/0x30 [ 464.905618][ C0] [ 464.908627][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 464.914932][ C0] Sending NMI from CPU 0 to CPUs 1: [ 464.920129][ C1] NMI backtrace for cpu 1 [ 464.920142][ C1] CPU: 1 UID: 0 PID: 9545 Comm: syz.0.973 Tainted: G L syzkaller #0 PREEMPT(full) [ 464.920162][ C1] Tainted: [L]=SOFTLOCKUP [ 464.920167][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 464.920174][ C1] RIP: 0010:__raw_callee_save___pv_queued_spin_unlock+0x10/0x18 [ 464.920194][ C1] Code: 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 52 b8 01 00 00 00 31 d2 f0 0f b0 17 <75> 06 5a c3 cc cc cc cc 56 0f b6 f0 e8 9f ff ff ff 5e 5a e9 d8 40 [ 464.920207][ C1] RSP: 0018:ffffc90000a08e40 EFLAGS: 00000046 [ 464.920218][ C1] RAX: 0000000000000001 RBX: ffff8880b85284c0 RCX: ffffffff81e4c7a3 [ 464.920227][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8880b85284c0 [ 464.920235][ C1] RBP: ffff8880b85284c8 R08: 0000000000000000 R09: ffffed10170a5098 [ 464.920243][ C1] R10: ffff8880b85284c3 R11: 0000000000000001 R12: ffff8880b85284d0 [ 464.920252][ C1] R13: 0000000000000001 R14: dffffc0000000000 R15: ffff8880b8528650 [ 464.920261][ C1] FS: 00007fe6532226c0(0000) GS:ffff888124479000(0000) knlGS:0000000000000000 [ 464.920275][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 464.920284][ C1] CR2: 0000000000000000 CR3: 000000003411d000 CR4: 00000000003526f0 [ 464.920292][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 464.920299][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 464.920307][ C1] Call Trace: [ 464.920314][ C1] [ 464.920319][ C1] do_raw_spin_unlock+0x145/0x1e0 [ 464.920339][ C1] _raw_spin_unlock_irqrestore+0x22/0x80 [ 464.920351][ C1] ? __pfx_advance_sched+0x10/0x10 [ 464.920369][ C1] __hrtimer_run_queues+0x383/0xa00 [ 464.920393][ C1] hrtimer_interrupt+0x3e5/0x940 [ 464.920410][ C1] __sysvec_apic_timer_interrupt+0x10b/0x460 [ 464.920430][ C1] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 464.920444][ C1] [ 464.920448][ C1] [ 464.920453][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 464.920468][ C1] RIP: 0010:finish_task_switch.isra.0+0x2d3/0x1010 [ 464.920484][ C1] Code: 2f 0a 00 00 41 c7 87 e0 0d 00 00 00 00 00 00 e9 0f 04 00 00 49 8d 7f 48 e8 fa 4b b7 09 e8 35 8d 3b 00 fb 48 8d bb a8 16 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 [ 464.920495][ C1] RSP: 0018:ffffc9000848f4c8 EFLAGS: 00000202 [ 464.920505][ C1] RAX: 00000000000107b5 RBX: ffff8880294f8000 RCX: 0000000000000000 [ 464.920513][ C1] RDX: 0000000000000000 RSI: ffffffff8df1e366 RDI: ffff8880294f96a8 [ 464.920521][ C1] RBP: ffffc9000848f520 R08: 0000000000000001 R09: 0000000000000000 [ 464.920530][ C1] R10: 0000000000000001 R11: ffffffff81d54282 R12: ffff888054aeca00 [ 464.920538][ C1] R13: 0000000000000001 R14: ffffffff90d7b9e4 R15: ffff8880b853b240 [ 464.920548][ C1] ? finish_task_switch.isra.0+0x152/0x1010 [ 464.920565][ C1] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 464.920580][ C1] __schedule+0x10f1/0x6820 [ 464.920599][ C1] ? __pfx___schedule+0x10/0x10 [ 464.920610][ C1] ? find_held_lock+0x2b/0x80 [ 464.920622][ C1] ? schedule+0x2bf/0x390 [ 464.920636][ C1] schedule+0xdd/0x390 [ 464.920648][ C1] schedule_timeout+0x1b2/0x280 [ 464.920666][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 464.920686][ C1] ? unix_wait_for_peer+0x260/0x2a0 [ 464.920700][ C1] ? unix_wait_for_peer+0x260/0x2a0 [ 464.920713][ C1] ? prepare_to_wait_exclusive+0xdc/0x2c0 [ 464.920731][ C1] unix_wait_for_peer+0x268/0x2a0 [ 464.920746][ C1] ? __pfx_unix_wait_for_peer+0x10/0x10 [ 464.920760][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 464.920776][ C1] ? unix_dgram_sendmsg+0x108b/0x1810 [ 464.920794][ C1] unix_dgram_sendmsg+0x1696/0x1810 [ 464.920819][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 464.920835][ C1] ? pti_set_user_pgtbl+0x50/0x50 [ 464.920857][ C1] ____sys_sendmsg+0x9e1/0xb70 [ 464.920871][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 464.920888][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 464.920903][ C1] ? rcu_is_watching+0x12/0xc0 [ 464.920922][ C1] ? ___sys_sendmsg+0x19d/0x1e0 [ 464.920935][ C1] ? kfree+0x1dd/0x6c0 [ 464.920953][ C1] ___sys_sendmsg+0x190/0x1e0 [ 464.920968][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 464.920992][ C1] ? __pfx___might_resched+0x10/0x10 [ 464.921013][ C1] __sys_sendmmsg+0x205/0x430 [ 464.921033][ C1] ? __pfx___sys_sendmmsg+0x10/0x10 [ 464.921054][ C1] ? __pfx_do_futex+0x10/0x10 [ 464.921077][ C1] ? __pfx___x64_sys_futex+0x10/0x10 [ 464.921098][ C1] __x64_sys_sendmmsg+0x9c/0x100 [ 464.921116][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 464.921129][ C1] do_syscall_64+0x10b/0xf80 [ 464.921143][ C1] ? clear_bhb_loop+0x40/0x90 [ 464.921158][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.921172][ C1] RIP: 0033:0x7fe65239cdd9 [ 464.921183][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.921195][ C1] RSP: 002b:00007fe653222028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 464.921207][ C1] RAX: ffffffffffffffda RBX: 00007fe652615fa0 RCX: 00007fe65239cdd9 [ 464.921215][ C1] RDX: 0400000000000041 RSI: 0000200000000000 RDI: 0000000000000007 [ 464.921224][ C1] RBP: 00007fe652432d69 R08: 0000000000000000 R09: 0000000000000000 [ 464.921232][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 464.921240][ C1] R13: 00007fe652616038 R14: 00007fe652615fa0 R15: 00007ffdbd1dca28 [ 464.921254][ C1]