last executing test programs: 15.895208075s ago: executing program 1 (id=1761): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009"], 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f00000000c0)={0x84, 0x1, 0x2, 0xe, 0x4}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000000)={0x8000, {"8604a0a71359a294b7585622d5b25618", "398e9cb8b9ef106c55992b65958724b1", "04641700"}, 0x2, 0x6}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001a80)={0x4, 0x0, &(0x7f0000001900)=[@enter_looper], 0x1, 0x0, &(0x7f0000000a80)='h'}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 13.920104032s ago: executing program 4 (id=1765): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r5 = socket$inet6(0xa, 0x3, 0x84) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f00000002c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38f", 0x5}, {&(0x7f0000000140)}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4, 0x0, @mcast1, 0x2}, 0x1c) 12.192750707s ago: executing program 1 (id=1768): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x27) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {&(0x7f00000004c0), 0xffffffffffffffff, 0x2}}, 0x18) syz_open_dev$vcsa(0x0, 0x7b95b611, 0x802) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@delsa={0x28, 0x28, 0x1, 0x70bd27, 0x25dfdbfd, {@in=@remote, 0x4d3, 0xa, 0x3c}}, 0x28}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xb}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0xfffffff8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x50}, 0x4000081) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000000080)={0x3}, 0x1) sendto$inet6(r5, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 12.004843655s ago: executing program 4 (id=1772): r0 = socket$packet(0x11, 0x1, 0x300) close(0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) syz_extract_tcp_res(&(0x7f0000000080), 0x80000000, 0xd) syz_emit_ethernet(0x6e, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x38, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x3, 0x480000) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) 10.488411375s ago: executing program 1 (id=1773): ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x0, 0x4d88, 0x8, &(0x7f0000000640)="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"}, {0x0, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x100d5b6, 0x0}, {0x2, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x6, 0x0, 0x1000, 0x0}, {0x3, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000140)={0xc0, 0x0, 0x2000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) writev(0xffffffffffffffff, &(0x7f0000003ec0)=[{&(0x7f0000002000)='L', 0x1}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r3, 0x402, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x16b) syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000d44ebb40ec188832cf690102030109021b00e0ff00000009040000010e01000009058103ea"], 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000080)=r5, 0x4) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x110, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_STAB={0xdc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0xb, 0x2, 0xa865, 0x1, 0x5, 0x1, 0x4}}, {0xc, 0x2, [0x8, 0x5, 0x0, 0xf]}}, {{0x1c, 0x1, {0x1, 0x5, 0x3, 0x9, 0x1, 0xb6, 0x2, 0xa}}, {0x18, 0x2, [0x4, 0x1, 0x8, 0xbb1e, 0x8, 0xf, 0x3, 0x0, 0xd, 0x6]}}, {{0x1c, 0x1, {0x9c, 0x2, 0x6, 0xfffffff4, 0x2, 0x3, 0xbfa, 0xa}}, {0x18, 0x2, [0x8a, 0x2, 0x3, 0x17cb, 0x4, 0x1, 0x2, 0x4000, 0x0, 0x4]}}, {{0x1c, 0x1, {0x10, 0xe, 0x7, 0xff, 0x2, 0x75b2, 0x4, 0x2}}, {0x8, 0x2, [0x4, 0xb]}}, {{0x1c, 0x1, {0x4, 0x1, 0x1, 0x5, 0x0, 0x3, 0xd, 0x1}}, {0x6, 0x2, [0x6]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xb}]}, 0x110}}, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x8) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@getqdisc={0x34, 0x26, 0x400, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0x5, 0xe}, {0x2, 0xf}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000011) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r7) r8 = creat(&(0x7f0000000000)='./file0\x00', 0x108) r9 = fanotify_init(0xf00, 0x1) fanotify_mark(r9, 0x10, 0x40009974, r8, 0x0) fallocate(r7, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r7, 0x0) 9.670189343s ago: executing program 2 (id=1775): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020ac050f022200e5818301090224000101"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@o_path={0x0, 0x0, 0x4000, r0}, 0x18) bpf$BPF_LINK_CREATE_XDP(0x25, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) shutdown(r2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$NILFS_IOCTL_GET_SUSTAT(0xffffffffffffffff, 0x80306e85, &(0x7f0000000280)) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r6, @ANYBLOB], 0x20}}, 0x4084) 8.824999785s ago: executing program 3 (id=1777): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa20}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r3, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x3938700}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) socket$inet6(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c8c5}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800"], 0x18}}, 0x0) 8.769582695s ago: executing program 2 (id=1778): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) read$nci(r1, &(0x7f0000000100)=""/107, 0x6b) pwritev(r1, &(0x7f0000000480)=[{&(0x7f0000000040)="105e2798ecfdd5d98836f41409df014e76fc04b70a29e197f5d6870b66e992b2005fc185d8b7cf545019", 0x2a}], 0x1, 0x6, 0x5) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) unshare(0x62000000) r2 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000100)={'security\x00', 0x0, [0x3, 0x7, 0x5, 0x209, 0x1]}, &(0x7f0000000180)=0x54) pidfd_getfd(r1, r1, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_freeze_timeout', 0x68a41, 0x3) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r3, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0xa, 0xc, "faf98357e5a1149989fc8dbec3bd02b82a128bbad0099cebdc25f5abb534464c516bdd8a0f3500", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b4100", [0x9, 0xa]}}) pwrite64(r0, &(0x7f0000000000)="37e389b3", 0x4, 0x200) unshare(0xa020480) io_setup(0x5, &(0x7f00000001c0)=0x0) ioctl$PTP_PIN_GETFUNC2(r3, 0xc0603d0f, &(0x7f0000000400)={'\x00', 0x8, 0x3, 0x6}) io_getevents(r4, 0x200000000000008, 0x8, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000280)) io_submit(r4, 0x1, &(0x7f0000000880)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x8, r0, &(0x7f00000004c0)="e4", 0x1, 0x5, 0x0, 0x2}]) 8.079653713s ago: executing program 1 (id=1779): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009"], 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, 0x0) r1 = syz_open_dev$dvb_demux(0x0, 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f00000000c0)={0x84, 0x1, 0x2, 0xe, 0x4}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000000)={0x8000, {"8604a0a71359a294b7585622d5b25618", "398e9cb8b9ef106c55992b65958724b1", "04641700"}, 0x2, 0x6}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001a80)={0x4, 0x0, &(0x7f0000001900)=[@enter_looper], 0x1, 0x0, &(0x7f0000000a80)='h'}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 7.763859448s ago: executing program 3 (id=1780): r0 = syz_open_dev$dvb_frontend(&(0x7f0000002180), 0x7b0c, 0x40000) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f00000024c0)={0x9, &(0x7f0000002200)=[{0x26, '\x00', @st={0x4, [{0x3, @svalue=0xe}, {0x1, @svalue=0x226c76a8}, {0x0, @uvalue=0x101}, {0x3, @svalue=0x7}]}}, {0xd, '\x00', @buffer={"2c308e6149f3cbba06e1a9997ba65799f21a92881135a0baa65aeb105ab531a5", 0x20}, 0x800}, {0x2f, '\x00', @data, 0x1}, {0x21, '\x00', @st={0x4, [{0x1, @svalue=0xfffffffffffff801}, {0x1, @svalue=0x249}, {0x1, @svalue=0xb}, {0x5d1ae71d15d461ec, @uvalue=0x8000}]}, 0x6}, {0x16, '\x00', @buffer={"6286ae8c1979f873ab4c4e4f62f4ee8901a6f20bb586484243639abe77012d1a", 0x20}, 0x6}, {0x11, '\x00', @buffer={"8bf85060e37980b2ca188f430e1a6042d644127f6bdf9e9421b9cb87f1be9fcb", 0x20}, 0x367}, {0x39, '\x00', @st={0x4, [{0x0, @uvalue=0x8000000000000001}, {0x2, @svalue=0x4}, {0x1, @svalue}, {0x2, @uvalue=0x3ff}]}, 0x1b}, {0x1c, '\x00', @data=0x8459, 0x7}, {0x2a, '\x00', @buffer={"ac53aae9f0a254017b766a97a5270885e931d838c418c45c16bb2e2815b99092", 0x20}, 0x3}]}) 7.592593841s ago: executing program 2 (id=1781): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1a, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)={0x1c, r4, 0x321, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24044094}, 0x40000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x403, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x5e801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x48}}, 0x440088c4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x14, r4, 0x200, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000091}, 0x10000010) 7.538050118s ago: executing program 3 (id=1782): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x800005}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x100f00) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f00000000c0)=ANY=[@ANYBLOB="7df693e3a461a04774509f62e2233e62aa342b825ccb19276eaf55fea98574f482d5b376266bf10dc0aeaa1174cc93e74946c0ff9ba05dcbbc9752"]) 6.916031866s ago: executing program 3 (id=1785): landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) recvmmsg(r2, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x1000400000de, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=r6, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000007006c000500190107000000080026006c090000560333"], 0x398}, 0x1, 0x0, 0x0, 0x4094}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2={0xfc, 0x2, '\x00', 0xff}}}]}, 0x68}}, 0x0) 6.291869042s ago: executing program 4 (id=1786): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) syz_io_uring_setup(0x47d3, &(0x7f00000003c0)={0x0, 0xf6a3, 0x10000, 0x0, 0x2f}, &(0x7f0000000440), &(0x7f0000000480), &(0x7f0000000600)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/hardlockup_count', 0x800, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x20000080) read$char_usb(r1, &(0x7f0000000500)=""/238, 0xee) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000) socket$xdp(0x2c, 0x3, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$unix(0x1, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) connect$unix(r5, &(0x7f0000000640)=@file={0x1, './file0\x00'}, 0x6e) close_range(r3, 0xffffffffffffffff, 0x0) 5.975736152s ago: executing program 2 (id=1788): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020ac050f022200e5818301090224000101"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@o_path={0x0, 0x0, 0x4000, r0}, 0x18) bpf$BPF_LINK_CREATE_XDP(0x25, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) shutdown(r2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$NILFS_IOCTL_GET_SUSTAT(0xffffffffffffffff, 0x80306e85, &(0x7f0000000280)) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r6, @ANYBLOB="6ff7f8c05b2d612b"], 0x20}}, 0x4084) 5.924799911s ago: executing program 3 (id=1789): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000080), 0x40002df, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000340)={0x5, {{0x2, 0x0, @multicast1}}, {{0x2, 0xfffc, @empty}}}, 0x108) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x110, 0x0, 0x110, 0x110, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x110, 0x0, 0x0, 0x2, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x2, 0x1}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0xd, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x11}, @dev={0xac, 0x14, 0x14, 0x28}, 0xffffff00, 0xffffffff, 0x6, 0x2d, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x4b, 0x5, 0x10, 0xe, 0x3ff, 0x3, 'bond_slave_1\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x2f6}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) getsockopt$inet_buf(r4, 0x0, 0x27, &(0x7f00000001c0)=""/198, &(0x7f00000002c0)=0xc6) socket(0x2b, 0x1, 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000000)={0x0, 0xd, 0x2, "134604cea4ddbc704c17bc74772190f5070001ebfffdfffffee793000000e000", 0x34324142}) getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f0000000540)) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r8, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r8, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r8, 0x8010500c, &(0x7f00000000c0)) 4.738757079s ago: executing program 0 (id=1790): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa20}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r3, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x3938700}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) socket$inet6(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x404c8c5}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800"], 0x18}}, 0x0) 3.632337798s ago: executing program 1 (id=1791): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7fffffff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x58565559}}) socket$kcm(0x10, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="0402"], 0x9) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d08040e000000010d10a118000c000600142603600e1208000f0000810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee0800080e408e8d8ef52a98516277ce06ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad8099639cace81ed0bffec193e2a9ecbee5de6ccd4d6e4ed6f3d93452a92954b43370e970189", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024001000000080001400000000014000000110001"], 0x68}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x14, 0x17, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r9, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd70000000000101000000adc7000000000000ac091437080006000300"/42], 0x30}, 0x1, 0xff07}, 0x2000000) syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000145f405e04bd84be89010403010902240001000000000904ed0002ff5d810009050303000000050009058a03"], 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="27e000006400010029bd700004a174000308000004004780100001800c00108005000880f3000000"], 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 3.500017756s ago: executing program 0 (id=1792): ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f00000024c0)={0x9, &(0x7f0000002200)=[{0x26, '\x00', @st={0x4, [{0x3, @svalue=0xe}, {0x1, @svalue=0x226c76a8}, {0x0, @uvalue=0x101}, {0x3, @svalue=0x7}]}}, {0xd, '\x00', @buffer={"2c308e6149f3cbba06e1a9997ba65799f21a92881135a0baa65aeb105ab531a5", 0x20}, 0x800}, {0x2f, '\x00', @data, 0x1}, {0x21, '\x00', @st={0x4, [{0x1, @svalue=0xfffffffffffff801}, {0x1, @svalue=0x249}, {0x1, @svalue=0xb}, {0x5d1ae71d15d461ec, @uvalue=0x8000}]}, 0x6}, {0x16, '\x00', @buffer={"6286ae8c1979f873ab4c4e4f62f4ee8901a6f20bb586484243639abe77012d1a", 0x20}, 0x6}, {0x11, '\x00', @buffer={"8bf85060e37980b2ca188f430e1a6042d644127f6bdf9e9421b9cb87f1be9fcb", 0x20}, 0x367}, {0x39, '\x00', @st={0x4, [{0x0, @uvalue=0x8000000000000001}, {0x2, @svalue=0x4}, {0x1, @svalue}, {0x2, @uvalue=0x3ff}]}, 0x1b}, {0x1c, '\x00', @data=0x8459, 0x7}, {0x2a, '\x00', @buffer={"ac53aae9f0a254017b766a97a5270885e931d838c418c45c16bb2e2815b99092", 0x20}, 0x3}]}) 3.33744444s ago: executing program 0 (id=1793): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x27) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {&(0x7f00000004c0), 0xffffffffffffffff, 0x2}}, 0x18) syz_open_dev$vcsa(0x0, 0x7b95b611, 0x802) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@delsa={0x28, 0x28, 0x1, 0x70bd27, 0x25dfdbfd, {@in=@remote, 0x4d3, 0xa, 0x3c}}, 0x28}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xb}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0xfffffff8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x50}, 0x4000081) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000000080)={0x3}, 0x1) sendto$inet6(r5, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.077289616s ago: executing program 4 (id=1794): syz_init_net_socket$x25(0x9, 0x5, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) socket$inet(0x2, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socket$inet(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000), 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000000440)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@void, {0x8100, 0x1, 0x0, 0x8b1}}, {@mpls_uc}}, 0x0) 1.803496177s ago: executing program 0 (id=1795): sysfs$1(0x1, &(0x7f0000000000)='\xc3#-}\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80001) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000013c0)={&(0x7f0000001140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x13e, 0x13e, 0xa, [@enum={0x4, 0x5, 0x0, 0x6, 0x4, [{0xe, 0x5401}, {0xf, 0x9}, {0x3}, {0xe, 0x9}, {0x7, 0x8}]}, @func_proto={0x0, 0x9, 0x0, 0xd, 0x0, [{0x3, 0x3}, {0x9}, {0xd, 0x2}, {0x0, 0x4}, {0x10, 0x3}, {0xf, 0x3}, {0x10, 0x4}, {0x4}, {0x6, 0x4}]}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x9, 0x5}, {0xc, 0x2}]}, @enum={0xd, 0x1, 0x0, 0x6, 0x4, [{0x4, 0xffffffff}]}, @datasec={0xd, 0xa, 0x0, 0xf, 0x2, [{0x4, 0xfffffff9, 0x919b}, {0x2, 0x6, 0xffff8000}, {0x4, 0x7b, 0x5}, {0x2a42de29, 0xa, 0xfffffffb}, {0x5, 0xffffffff}, {0x2, 0x7ff, 0x7}, {0x1, 0x36, 0x3}, {0x1, 0x7, 0x6}, {0x4, 0x3, 0x1}, {0x1, 0xdc9, 0x5}], 'Lg'}]}, {0x0, [0x0, 0x5f, 0x61, 0x2e, 0x30, 0x0, 0x30, 0x5f]}}, &(0x7f00000012c0)=""/198, 0x162, 0xc6, 0x1, 0x111}, 0x28) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001600)=@bpf_lsm={0x1d, 0x8, &(0x7f0000001480)=@raw=[@call={0x85, 0x0, 0x0, 0xc5}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6}, @generic={0x1b, 0x3, 0x2, 0xfff1, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x92}, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7f}], &(0x7f00000014c0)='GPL\x00', 0x6, 0x40, &(0x7f0000001500)=""/64, 0x40f00, 0x48, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001540)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000001580)={0x5, 0x9, 0x9fb8bea, 0xd}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000015c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x1}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=@bloom_filter={0x1e, 0x1, 0x8, 0x5, 0x48001, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0xb}, 0x50) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001780)=@generic={&(0x7f0000001740)='./file0\x00', 0x0, 0x18}, 0x18) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000017c0), 0xa2000, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x11, 0x10, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x8000, 0x1000, &(0x7f0000000140)=""/4096, 0x41000, 0x10, '\x00', 0x0, @fallback=0x23, r1, 0x8, &(0x7f0000001400)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000001440)={0x5, 0xd, 0x1b9a, 0xa}, 0x10, 0xffffffffffffffff, r2, 0x5, &(0x7f0000001800)=[r3, r4, r5], &(0x7f0000001840)=[{0x5, 0x1, 0x4, 0xc}, {0x3, 0x2, 0xb, 0xa}, {0x3, 0x2, 0x1, 0x5}, {0x3, 0x5, 0x0, 0xb}, {0x3, 0x1, 0x2, 0xc}], 0x10, 0x80000001}, 0x94) fcntl$getownex(r0, 0x10, &(0x7f0000001980)={0x0, 0x0}) prlimit64(r7, 0x9, &(0x7f00000019c0)={0x100000000, 0x75}, &(0x7f0000001a00)) sched_setscheduler(r7, 0x3, &(0x7f0000001a40)=0x1000) fcntl$lock(r5, 0x7, &(0x7f0000001a80)={0x2, 0x3, 0x0, 0x8, r7}) ioctl$KVM_CAP_HYPERV_TLBFLUSH(r5, 0x4068aea3, &(0x7f0000001ac0)) r8 = accept(r5, 0x0, &(0x7f0000001b40)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000001b80)=[@in6={0xa, 0x4e22, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x25b}], 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) getpeername$packet(r8, &(0x7f0000001c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001cc0)=0x14) sendto$packet(r6, &(0x7f0000001bc0)="f1acf5b542e9a4834a2aba30a0e116cf7ed6d58038b15a35cb25f6befb0095305cf432324a5fc7cd4174778931c5f03f22d3b106a15d64f13d2aad7b767fc49288171fa93d8adfedb1907e8a8615d98a86a178c0fe67d92b8cea57b4ae34e827949305a2f11138dce3a7cf8ea3a5a34218be962ad0c24834c2871b091c0ad5acf5f9b68745766e6dc32953277e7a061dcc96360d23b360d24ace748d41e716f4c2af06bd6438", 0xa6, 0x8800, &(0x7f0000001d00)={0x11, 0xf5, r9, 0x1, 0xf9, 0x6, @local}, 0x14) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001d80), r5) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x1c, r10, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000080) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001f00)={{r3}, &(0x7f0000001e80), &(0x7f0000001ec0)=r0}, 0x20) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000001f40)=0x0) syz_open_procfs$userns(r11, &(0x7f0000001f80)) r12 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001fc0), 0x2400, 0x0) ioctl$RTC_UIE_ON(r12, 0x7003) ioctl$RTC_WIE_OFF(r12, 0x7010) ioctl(r0, 0x0, &(0x7f0000002000)="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") io_uring_setup(0x2d32, &(0x7f0000002100)={0x0, 0xa2cb, 0x1000, 0x3, 0x34}) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000002180)={@empty, @private1, @mcast2, 0x0, 0x401, 0x9, 0x0, 0x4, 0x40, r9}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f0000002200)={0x0, 0x81}, &(0x7f0000002240)=0x8) 1.731358008s ago: executing program 2 (id=1796): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$rds(0x15, 0x5, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0x2, 0x400, 0x3, 0x253, 0x0, r2}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x10, 0x1000000, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xacd, 0x20000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x81f70, 0x2, 0x1, 0x1aa, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x1000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{}], 0x1}, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg$inet(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10, 0x0}, 0x8007) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) 1.679167944s ago: executing program 4 (id=1797): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) syz_io_uring_setup(0x47d3, &(0x7f00000003c0)={0x0, 0xf6a3, 0x10000, 0x0, 0x2f}, &(0x7f0000000440), &(0x7f0000000480), &(0x7f0000000600)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/hardlockup_count', 0x800, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x20000080) read$char_usb(r1, &(0x7f0000000500)=""/238, 0xee) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000) socket$xdp(0x2c, 0x3, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) 1.5402959s ago: executing program 0 (id=1798): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0xad792c8538197037}, 0x0) r0 = syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xc81, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x193}}}, &(0x7f0000000480)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/diskstats\x00', 0x0, 0x0) close(r3) r4 = syz_open_dev$ublk_chdev(&(0x7f0000000080), r0, 0x0) r5 = io_uring_setup(0x6d8d, &(0x7f0000000380)={0x0, 0x552, 0x10, 0x2, 0xc3}) syz_io_uring_setup(0x34bc, &(0x7f0000000200)={0x0, 0xcb7c, 0x100, 0x1, 0x173, 0x0, r5}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f00000000c0)=0x0) r9 = memfd_secret(0x80000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x4}, 0x1, {0x0, r10}}) syz_ublk_setup_queues(r4, r1, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x5, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r10, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000340)={0x2001}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000340)='1', 0x1}], 0x1, 0x0, 0x0, 0x48044}}], 0x1, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000016c0)={0xffffffffffffffff, 0xfffffe00}, 0xc) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001700)={&(0x7f0000000040)="80fdcd6279b7d26a6802a5", &(0x7f0000000500)=""/4096, &(0x7f0000001740)="8956f66a57e92cb116e5fdc28af230b9bad7e797a2cccc06f508ba8aa17106c1f3276a79ee75a668bf865858e338a972e62603f987a71d1677e3a40d653bd779ca415eb845a28d9a4d54226c61953a11639ad6f8831365b982f41a11a1d2a651dc9115d56acd967ffc37be4061ac767066001d0f6848972faaccaf96a63ea787e377aa4d53546305303171bc61f8550e55903391d003bbcfff158805b490ff7fdb6cf38feef4e1a047d1651ff219284920633bf07c3c738095ce49348e9adf9981849f059663960597a14268aa046412ad98bfe75f43463b14c2cd154c4b80c495e38697854296909c35a89b724d8390f58321c8", &(0x7f0000001600)="9c7980c4a16e275c663d6efa39c7cbc877b9ee56d1aa1c3e85ee3b1826ed8030fbce729a6de84547fec73572d6994faaa90c3499e1de98b4f9fd7ac60ebb088d8eddab05f988890f4785f54d9810842ee6f2fae8f572c25f9fb2a163f82b30d9a954c11add9634b0bc5205b08fb4b0fe0e9978510ed452ebc27065c01a9054ff3b925a8f18b1089c237062831b530b", 0x2, r11, 0x4}, 0x38) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r12 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r12, &(0x7f0000019680)=""/102392, 0x18ff8) r13 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='gid_map\x00') setresuid(0xee01, 0xee00, 0x0) fchown(r13, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 1.409331008s ago: executing program 3 (id=1799): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x103001) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000140)={0x9392, 0xdc, 0x7, {0x1, 0x12}, 0x0, 0x5}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003f40)={&(0x7f0000000100)={0x28, r2, 0x701, 0x0, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x8, 0x2c}}}}}, 0x28}}, 0x40) r3 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) r5 = timerfd_create(0x0, 0x0) timerfd_settime(r5, 0x3, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x8004, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) clock_adjtime(0x0, &(0x7f0000000280)={0xc979, 0x1, 0xbf, 0x8, 0x8, 0x1, 0x0, 0x4, 0xf27, 0x80000000, 0x6, 0x3ff, 0x8a8, 0x6, 0x5, 0x413, 0x69, 0x2, 0x6, 0x6, 0x10000, 0x168, 0x2cbf, 0x7, 0xe, 0x5}) r6 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x8, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) 711.713845ms ago: executing program 0 (id=1800): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{0x0}], 0x1, 0x91, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x1ffffffffffffe, 0x0) read$msr(r1, &(0x7f000004b680)=""/102392, 0x18ff8) r2 = openat$comedi(0xffffffffffffff9c, 0x0, 0x222180, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000340)={0x0, 0x10005}, &(0x7f0000000380)=0x8) r4 = dup2(r3, r3) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000100)={'\x00', 0x42, 0xa, 0x3, 0x40000000, 0x800000000000010}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x700, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x70bd2d, 0x25dfdbfd, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x81, 0xffffadf3, 0xffffffffffffffff, 0x3, 0x10000}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x31e728a5b70dda2, 0x0) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) 622.737117ms ago: executing program 2 (id=1801): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{0x0}], 0x1, 0x91, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x1ffffffffffffe, 0x0) read$msr(r1, &(0x7f000004b680)=""/102392, 0x18ff8) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"}) r2 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000880)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b02000105200809c04e143900000000092401fdff0811004708240a0000097f000904010000010220000904010101010220000905"], 0x0) syz_usb_control_io$uac2(r2, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io$uac2(r2, 0x0, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) write$uinput_user_dev(r3, &(0x7f0000000240)={'syz1\x00', {0x3, 0x6, 0x6, 0x60}, 0x3b, [0x9a, 0x2, 0xfffff9f5, 0x5, 0x5, 0x6, 0x9, 0x1, 0x4, 0x400, 0xfffffffc, 0x2a98, 0x8001, 0x7c1, 0xbb, 0x1, 0xc4, 0xe283, 0x8, 0x4, 0x5, 0xb5d7, 0x1862, 0x8, 0x0, 0x7, 0x6, 0x8, 0x7, 0x7, 0x6, 0x3, 0x7fff, 0x40000000, 0x3e, 0x2, 0x3, 0xa8, 0x941, 0xd, 0x1c7, 0x2, 0x5, 0x4, 0x448, 0x4, 0x3, 0x8, 0x9, 0x8001, 0xd, 0x8, 0x1, 0x736, 0x19, 0xd, 0x2, 0x2, 0x3e, 0x8, 0x13, 0x8, 0x6, 0x7f], [0xffdfb66f, 0x6, 0x19, 0xea, 0x6, 0xfffffffa, 0xde63, 0x6, 0x6, 0x1, 0x100, 0x9, 0x2, 0x9, 0xf37, 0x80000001, 0x4, 0x8, 0x1, 0x2, 0x9, 0xb3d9, 0x6, 0x8, 0x62, 0x10001, 0x8, 0x6, 0x8, 0x3ff, 0x9, 0xd, 0x4, 0xb, 0x0, 0x5, 0x7, 0xfff, 0x8, 0x80000001, 0xc, 0x1000, 0x0, 0x7, 0xc0000, 0x40, 0x71370264, 0xfff, 0x7bd20710, 0x0, 0x8001, 0x80000000, 0x2, 0xfffffffb, 0x0, 0x358e, 0x1, 0xfffffffa, 0x0, 0x4, 0xffffff62, 0x8, 0x0, 0x5], [0x23a, 0x1, 0x1ff, 0x4, 0x1, 0x3, 0x5, 0x401, 0xff, 0x7, 0x4, 0x6, 0x3, 0x7fffffff, 0x6f, 0xeb, 0x2, 0x0, 0x7f, 0xbe, 0x3, 0x3, 0x8ff, 0xffffffc0, 0x22, 0x7, 0x3, 0x80000000, 0x1, 0x9, 0x101, 0xaf7, 0x81, 0x5, 0x80, 0x8000, 0xe, 0x3, 0x4, 0x5, 0x26f3, 0x3, 0xfffffffe, 0xf, 0x7, 0x2, 0x4, 0x6, 0x3fc, 0x10001, 0x719, 0x0, 0x10000200, 0x8, 0x3ff, 0x800, 0x80000001, 0xffffffff, 0x3, 0x6, 0xfffffffc, 0x6, 0x13, 0x4], [0x401, 0x100, 0x8, 0x2, 0x7f, 0x8, 0x8, 0x7, 0x70, 0xfffff800, 0x7c, 0x4, 0x2, 0x4, 0x9, 0x9, 0x7fff, 0x32e, 0x6812, 0x10, 0x1, 0xfffffffa, 0x3, 0x0, 0x25d, 0x100, 0xffffffff, 0x8, 0x0, 0x5, 0x6, 0x2, 0x5, 0x3, 0x171, 0x5c, 0x2, 0x3, 0x5, 0x0, 0x8a, 0x63, 0x0, 0x7fffffff, 0x5, 0x4, 0x6, 0x1, 0x401, 0xd52, 0x10000, 0x4, 0x1, 0x7, 0x4, 0xfffffe11, 0xe, 0x8, 0x2d8, 0x8000, 0x7, 0x4, 0xd, 0x8000]}, 0x45c) r4 = openat$comedi(0xffffffffffffff9c, 0x0, 0x222180, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000340)={0x0, 0x10005}, &(0x7f0000000380)=0x8) r6 = dup2(r5, r5) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000100)={'\x00', 0x42, 0xa, 0x3, 0x40000000, 0x800000000000010}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) 614.755694ms ago: executing program 4 (id=1802): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa20}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r3, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x3938700}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) socket$inet6(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x404c8c5}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800"], 0x18}}, 0x0) 0s ago: executing program 1 (id=1803): ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f00000024c0)={0x9, &(0x7f0000002200)=[{0x26, '\x00', @st={0x4, [{0x3, @svalue=0xe}, {0x1, @svalue=0x226c76a8}, {0x0, @uvalue=0x101}, {0x3, @svalue=0x7}]}}, {0xd, '\x00', @buffer={"2c308e6149f3cbba06e1a9997ba65799f21a92881135a0baa65aeb105ab531a5", 0x20}, 0x800}, {0x2f, '\x00', @data, 0x1}, {0x21, '\x00', @st={0x4, [{0x1, @svalue=0xfffffffffffff801}, {0x1, @svalue=0x249}, {0x1, @svalue=0xb}, {0x5d1ae71d15d461ec, @uvalue=0x8000}]}, 0x6}, {0x16, '\x00', @buffer={"6286ae8c1979f873ab4c4e4f62f4ee8901a6f20bb586484243639abe77012d1a", 0x20}, 0x6}, {0x11, '\x00', @buffer={"8bf85060e37980b2ca188f430e1a6042d644127f6bdf9e9421b9cb87f1be9fcb", 0x20}, 0x367}, {0x39, '\x00', @st={0x4, [{0x0, @uvalue=0x8000000000000001}, {0x2, @svalue=0x4}, {0x1, @svalue}, {0x2, @uvalue=0x3ff}]}, 0x1b}, {0x1c, '\x00', @data=0x8459, 0x7}, {0x2a, '\x00', @buffer={"ac53aae9f0a254017b766a97a5270885e931d838c418c45c16bb2e2815b99092", 0x20}, 0x3}]}) kernel console output (not intermixed with test programs): 7][ T1222] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 444.057581][ T1222] usb 1-1: Using ep0 maxpacket: 32 [ 444.066936][ T1222] usb 1-1: too many configurations: 169, using maximum allowed: 8 [ 444.109150][ T1222] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 444.119152][ T1222] usb 1-1: can't read configurations, error -61 [ 444.275968][ T1222] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 444.318360][ T1222] usb 1-1: Using ep0 maxpacket: 32 [ 444.328346][ T1222] usb 1-1: too many configurations: 169, using maximum allowed: 8 [ 444.349136][ T1222] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 444.357817][ T1222] usb 1-1: can't read configurations, error -61 [ 444.374959][ T1222] usb usb1-port1: unable to enumerate USB device [ 445.436272][T10112] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1089'. [ 445.560984][ T9] usb 2-1: USB disconnect, device number 36 [ 445.984491][ T5809] usb 4-1: USB disconnect, device number 24 [ 446.614940][T10134] xt_hashlimit: size too large, truncated to 1048576 [ 447.264497][ T4927] Bluetooth: hci4: Opcode 0x206a failed: -110 [ 447.273310][ T5617] Bluetooth: hci4: command 0x0406 tx timeout [ 447.553340][T10139] syz.0.1095 (10139): drop_caches: 2 [ 447.694517][ T5809] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 447.865365][ T5809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 447.877813][ T5809] usb 4-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 447.889173][ T5809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.912535][ T5809] usb 4-1: config 0 descriptor?? [ 447.919276][T10147] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 448.003956][ T5796] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 448.167899][ T5796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.182079][ T5796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.207897][ T5796] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 448.224282][ T5796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.354229][ T5809] asus 0003:0B05:1ABE.0010: unknown main item tag 0x0 [ 448.366402][ T5796] usb 2-1: config 0 descriptor?? [ 448.859572][ T5809] asus 0003:0B05:1ABE.0010: unknown main item tag 0x0 [ 448.866697][ T5809] asus 0003:0B05:1ABE.0010: unknown main item tag 0x0 [ 448.874828][ T5809] asus 0003:0B05:1ABE.0010: unknown main item tag 0x0 [ 448.881679][ T5809] asus 0003:0B05:1ABE.0010: unknown main item tag 0x0 [ 448.891538][ T5809] asus 0003:0B05:1ABE.0010: unknown main item tag 0x0 [ 448.903210][ T5809] asus 0003:0B05:1ABE.0010: unknown main item tag 0x0 [ 448.951435][ T5809] asus 0003:0B05:1ABE.0010: unknown main item tag 0x0 [ 448.971540][ T5809] asus 0003:0B05:1ABE.0010: unknown main item tag 0x0 [ 448.998374][ T5809] asus 0003:0B05:1ABE.0010: unknown main item tag 0x0 [ 449.029034][ T5809] asus 0003:0B05:1ABE.0010: unexpected long global item [ 449.060181][ T5809] asus 0003:0B05:1ABE.0010: Asus hid parse failed: -22 [ 449.086629][ T5809] asus 0003:0B05:1ABE.0010: probe with driver asus failed with error -22 [ 449.124528][ T5809] usb 4-1: USB disconnect, device number 25 [ 449.341253][ T5796] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0011/input/input27 [ 449.396393][ T5796] cm6533_jd 0003:0D8C:0022.0011: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 450.918296][ T5722] usb 2-1: reset high-speed USB device number 37 using dummy_hcd [ 453.976203][ T5703] usb 2-1: USB disconnect, device number 37 [ 454.428754][ T5722] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 454.657752][ T5722] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 454.684621][ T5722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.701747][ T5722] usb 1-1: Product: syz [ 454.735559][ T5809] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 454.750426][ T5722] usb 1-1: Manufacturer: syz [ 454.763489][ T5722] usb 1-1: SerialNumber: syz [ 454.868433][ T5722] usb 1-1: config 0 descriptor?? [ 454.879532][T10209] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=10209 comm=syz.3.1116 [ 454.915437][ T5809] usb 2-1: device descriptor read/64, error -71 [ 454.920912][T10209] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=10209 comm=syz.3.1116 [ 454.965969][T10209] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=10209 comm=syz.3.1116 [ 454.999043][T10209] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=10209 comm=syz.3.1116 [ 455.025011][T10209] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=10209 comm=syz.3.1116 [ 455.051226][T10209] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=10209 comm=syz.3.1116 [ 455.070525][T10209] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=10209 comm=syz.3.1116 [ 455.097497][T10209] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=10209 comm=syz.3.1116 [ 455.106032][ T5722] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 455.121933][T10209] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=10209 comm=syz.3.1116 [ 455.163925][ T5809] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 455.346840][ T5809] usb 2-1: device descriptor read/64, error -71 [ 455.464319][ T5809] usb usb2-port1: attempt power cycle [ 455.814311][ T5809] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 455.846692][ T5809] usb 2-1: device descriptor read/8, error -71 [ 456.330142][ T5809] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 456.354931][ T5809] usb 2-1: device descriptor read/8, error -71 [ 457.230315][ T5809] usb usb2-port1: unable to enumerate USB device [ 457.428175][ T5722] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 458.516386][ T5809] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 458.766236][ T5809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.817431][ T5809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.834724][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 458.834739][ T30] audit: type=1400 audit(1783885734.212:772): avc: denied { connect } for pid=10241 comm="syz.2.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 458.838857][ T5722] usb 1-1: USB disconnect, device number 31 [ 458.842172][ T5809] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 458.884123][T10245] FAULT_INJECTION: forcing a failure. [ 458.884123][T10245] name failslab, interval 1, probability 0, space 0, times 0 [ 458.892614][ T5809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.922228][ T5809] usb 4-1: config 0 descriptor?? [ 458.989977][T10245] CPU: 0 UID: 0 PID: 10245 Comm: syz.1.1126 Tainted: G L syzkaller #0 PREEMPT(full) [ 458.990007][T10245] Tainted: [L]=SOFTLOCKUP [ 458.990013][T10245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 458.990023][T10245] Call Trace: [ 458.990029][T10245] [ 458.990036][T10245] dump_stack_lvl+0x100/0x190 [ 458.990062][T10245] should_fail_ex.cold+0x5/0xa [ 458.990084][T10245] should_failslab+0xc2/0x120 [ 458.990104][T10245] kmem_cache_alloc_noprof+0x91/0x6a0 [ 458.990124][T10245] ? vm_area_dup+0x27/0x8e0 [ 458.990152][T10245] vm_area_dup+0x27/0x8e0 [ 458.990178][T10245] __split_vma+0x18c/0xda0 [ 458.990201][T10245] ? __lock_acquire+0x49f/0x1a40 [ 458.990223][T10245] ? __pfx___split_vma+0x10/0x10 [ 458.990247][T10245] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 458.990279][T10245] vma_modify+0x12ad/0x25c0 [ 458.990313][T10245] ? __pfx_vma_modify+0x10/0x10 [ 458.990336][T10245] ? __lock_acquire+0x49f/0x1a40 [ 458.990354][T10245] ? validate_mm+0x392/0x4e0 [ 458.990388][T10245] vma_modify_flags+0x257/0x3d0 [ 458.990414][T10245] ? __pfx_vma_modify_flags+0x10/0x10 [ 458.990451][T10245] ? rcu_is_watching+0x12/0xc0 [ 458.990473][T10245] ? percpu_counter_add_batch+0xb9/0x230 [ 458.990500][T10245] mprotect_fixup+0x27a/0xe30 [ 458.990529][T10245] ? __pfx_mprotect_fixup+0x10/0x10 [ 458.990570][T10245] ? selinux_file_mprotect+0x18c/0x610 [ 458.990592][T10245] ? __pfx_mas_prev+0x10/0x10 [ 458.990615][T10245] do_mprotect_pkey+0xa4b/0xef0 [ 458.990648][T10245] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 458.990679][T10245] ? __vm_munmap+0x1d2/0x390 [ 458.990695][T10245] ? __pfx___vm_munmap+0x10/0x10 [ 458.990726][T10245] __x64_sys_mprotect+0x78/0xc0 [ 458.990749][T10245] ? lockdep_hardirqs_on+0x78/0x100 [ 458.990773][T10245] do_syscall_64+0x115/0x870 [ 458.990797][T10245] ? clear_bhb_loop+0x40/0x90 [ 458.990817][T10245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.990834][T10245] RIP: 0033:0x7f6274f9dc57 [ 458.990850][T10245] Code: 89 38 eb 84 0f 1f 80 00 00 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff e9 7a ff ff ff b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.990871][T10245] RSP: 002b:00007f6275edad18 EFLAGS: 00000217 ORIG_RAX: 000000000000000a [ 458.990888][T10245] RAX: ffffffffffffffda RBX: 00007f626c000000 RCX: 00007f6274f9dc57 [ 458.990899][T10245] RDX: 0000000000000003 RSI: 0000000000021000 RDI: 00007f626c000000 [ 458.990908][T10245] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 458.990917][T10245] R10: 0000000000000022 R11: 0000000000000217 R12: 0000000004000000 [ 458.990927][T10245] R13: 0000000000001000 R14: 00007f6270000000 R15: 0000000001000000 [ 458.990950][T10245] [ 459.447815][ T7428] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 459.857507][ T30] audit: type=1400 audit(1783885735.232:773): avc: denied { watch_sb } for pid=10250 comm="syz.2.1128" path="/249/file0" dev="tmpfs" ino=1360 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 459.953543][ T5809] hid_parser_main: 53 callbacks suppressed [ 459.953556][ T5809] cm6533_jd 0003:0D8C:0022.0012: unknown main item tag 0x0 [ 460.007083][ T5809] cm6533_jd 0003:0D8C:0022.0012: unknown main item tag 0x0 [ 460.041269][ T5809] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0012/input/input28 [ 460.116947][ T5809] cm6533_jd 0003:0D8C:0022.0012: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 461.363911][ T5722] usb 4-1: reset high-speed USB device number 26 using dummy_hcd [ 461.373500][T10270] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1131'. [ 461.802737][T10281] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1135'. [ 462.233082][T10281] tipc: Enabled bearer , priority 0 [ 462.276745][T10283] syz.1.1136 (10283): drop_caches: 2 [ 462.330708][T10276] tipc: Disabling bearer [ 463.854373][ T5750] usb 4-1: USB disconnect, device number 26 [ 463.939947][T10311] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1144'. [ 464.140029][T10313] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1144'. [ 464.256852][T10315] overlayfs: failed to clone upperpath [ 464.712018][T10311] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.721526][T10311] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.397606][T10325] SELinux: policydb magic number 0xffff does not match expected magic number 0xf97cff8c [ 465.529032][T10325] SELinux: failed to load policy [ 465.910700][ T30] audit: type=1400 audit(1783885740.842:774): avc: denied { create } for pid=10321 comm="syz.4.1148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 465.994201][T10330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1150'. [ 466.327992][T10330] team0: Port device team_slave_0 removed [ 466.502406][ T30] audit: type=1400 audit(1783885741.872:775): avc: denied { read } for pid=10334 comm="syz.4.1151" lport=51211 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 466.601402][T10341] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.608622][T10341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.617083][T10341] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.624272][T10341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.352168][T10351] overlayfs: failed to clone upperpath [ 467.483102][ T5750] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 467.645137][ T5750] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.675940][ T5750] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.958169][ T5750] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 467.995476][ T5750] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.124641][ T5750] usb 2-1: config 0 descriptor?? [ 469.044073][ T5750] cm6533_jd 0003:0D8C:0022.0013: unknown main item tag 0x0 [ 469.071684][ T5750] cm6533_jd 0003:0D8C:0022.0013: unknown main item tag 0x0 [ 469.106969][ T5750] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0013/input/input29 [ 469.227929][ T5750] cm6533_jd 0003:0D8C:0022.0013: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 470.634335][T10378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1161'. [ 470.659018][T10379] netlink: 'syz.2.1163': attribute type 10 has an invalid length. [ 470.748247][T10379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.958347][T10379] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 471.094876][ T10] usb 2-1: USB disconnect, device number 42 [ 474.324125][T10413] lo speed is unknown, defaulting to 1000 [ 475.794660][ T30] audit: type=1400 audit(1783885751.162:776): avc: denied { bind } for pid=10429 comm="syz.1.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 475.823741][T10427] syz.0.1173 (10427): drop_caches: 2 [ 475.870218][ T30] audit: type=1400 audit(1783885751.162:777): avc: denied { name_bind } for pid=10429 comm="syz.1.1175" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 475.951532][ T30] audit: type=1400 audit(1783885751.162:778): avc: denied { node_bind } for pid=10429 comm="syz.1.1175" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 476.028840][ T30] audit: type=1400 audit(1783885751.172:779): avc: denied { connect } for pid=10429 comm="syz.1.1175" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 476.123894][ T5809] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 476.289911][ T5809] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 476.326852][ T5809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.368011][ T5809] usb 2-1: Product: syz [ 476.383986][ T5809] usb 2-1: Manufacturer: syz [ 476.403254][ T5809] usb 2-1: SerialNumber: syz [ 476.438274][ T5809] usb 2-1: config 0 descriptor?? [ 477.025590][ T5809] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 477.152901][ T30] audit: type=1400 audit(1783885752.522:780): avc: denied { mount } for pid=10434 comm="syz.4.1177" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 477.267411][ T30] audit: type=1400 audit(1783885752.632:781): avc: denied { getopt } for pid=10429 comm="syz.1.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 477.443301][ T5809] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 477.478581][ T5809] usb 2-1: USB disconnect, device number 43 [ 477.531584][ T30] audit: type=1400 audit(1783885752.902:782): avc: denied { mounton } for pid=10434 comm="syz.4.1177" path="/222/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 478.232154][ C1] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 478.490085][ T30] audit: type=1400 audit(1783885753.852:783): avc: denied { unmount } for pid=5620 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 479.179135][ T30] audit: type=1400 audit(1783885754.142:784): avc: denied { bind } for pid=10445 comm="syz.1.1179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 479.908608][T10464] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.915702][T10464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.923904][T10464] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.930967][T10464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.014679][T10454] ALSA: mixer_oss: invalid OSS volume '' [ 481.064690][T10483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1187'. [ 482.264166][ T5722] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 482.443874][ T5722] usb 2-1: Using ep0 maxpacket: 8 [ 482.462628][ T5722] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.494141][ T5722] usb 2-1: config 0 interface 0 has no altsetting 0 [ 482.515847][ T5722] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 482.539902][ T5722] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.573508][ T5722] usb 2-1: config 0 descriptor?? [ 483.301685][ T5722] lua 0003:1E7D:2C2E.0014: unknown main item tag 0x7 [ 483.356673][ T5722] lua 0003:1E7D:2C2E.0014: unknown global tag 0xe [ 483.408189][ T5722] lua 0003:1E7D:2C2E.0014: item 0 4 1 14 parsing failed [ 483.565569][ T5722] lua 0003:1E7D:2C2E.0014: parse failed [ 483.621762][ T5722] lua 0003:1E7D:2C2E.0014: probe with driver lua failed with error -22 [ 483.759027][ T5722] usb 2-1: USB disconnect, device number 44 [ 484.267627][T10522] A link change request failed with some changes committed already. Interface batadv1 may have been left with an inconsistent configuration, please check. [ 485.003043][T10528] serio: Serial port ptm0 [ 486.240071][T10542] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 486.266606][T10542] overlayfs: missing 'lowerdir' [ 486.513543][T10542] IPVS: Scheduler module ip_vs_ not found [ 486.653978][ T24] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 486.823931][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 486.842241][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 486.887112][ T24] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 487.179599][ T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 487.271029][ T24] usb 1-1: New USB device strings: Mfr=229, Product=129, SerialNumber=131 [ 487.280804][ T24] usb 1-1: Product: syz [ 487.285438][ T24] usb 1-1: Manufacturer: syz [ 487.291824][ T24] usb 1-1: SerialNumber: syz [ 487.456578][ T30] audit: type=1400 audit(1783885762.832:785): avc: denied { setopt } for pid=10565 comm="syz.3.1211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 487.713941][ T24] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 487.805993][ T5796] usb 1-1: USB disconnect, device number 32 [ 487.969582][ T24] usb 4-1: config 1 interface 0 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 32 [ 487.981192][ T24] usb 4-1: config 1 interface 0 altsetting 4 bulk endpoint 0x3 has invalid maxpacket 528 [ 487.996212][ T24] usb 4-1: config 1 interface 0 has no altsetting 0 [ 488.013042][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 488.023885][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.031982][ T24] usb 4-1: Product: 嚁鹈렆螎⇵씰矼연⨼凃ꞥ䯓泜꫿ꡅﶃ也溳㔚᪮䀝킶⯻᜙庱⪠牵鮝姴㸏Σ搰㔆쬞恨籽Ԏࣅ遲ሀ긢ꖮ슀憆蛈梞ꂝꍶ㷊돽Ȧ趐颙透盛שּׂﻨꆨ㵇뤧哾ל❹ [ 488.100116][T10574] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1212'. [ 488.113316][T10574] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40051 sclass=netlink_route_socket pid=10574 comm=syz.1.1212 [ 489.009448][ T24] usb 4-1: Manufacturer: ࠝ [ 489.022067][ T24] usb 4-1: SerialNumber: 䍞㧎冊䱊ᬜ쇏禟롩稼鰃⍿㓔讇椐䥆塀╪⾵인躉ꧮ庪ﳒ뚽듋뉶膧闤♀婐珂箃᙭鐺滮놦葒ℝ忦飥鐵ꗢ燰주劒棪싙퐘 [ 489.117945][ T30] audit: type=1400 audit(1783885764.482:786): avc: denied { listen } for pid=10575 comm="syz.2.1213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 489.189859][T10566] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 489.210723][T10566] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 489.221978][ T30] audit: type=1400 audit(1783885764.482:787): avc: denied { accept } for pid=10575 comm="syz.2.1213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 489.283914][ T30] audit: type=1400 audit(1783885764.572:788): avc: denied { write } for pid=10575 comm="syz.2.1213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 490.352587][ T30] audit: type=1400 audit(1783885764.902:789): avc: denied { read } for pid=10565 comm="syz.3.1211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 490.374087][ T24] usb 4-1: No union descriptors [ 490.403201][ T24] usb 4-1: USB disconnect, device number 27 [ 490.428468][T10593] netlink: 'syz.1.1218': attribute type 10 has an invalid length. [ 490.429192][ T4927] Bluetooth: hci0: ISO packet for unknown connection handle 1039 [ 490.480705][T10593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 490.536598][T10594] netlink: 'syz.1.1218': attribute type 10 has an invalid length. [ 490.584474][ T4927] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 490.587157][T10593] team0: Port device netdevsim1 added [ 490.727056][ T7428] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 491.692558][T10607] fuse: fd is not a fuse device [ 491.718738][T10607] netlink: 'syz.2.1222': attribute type 1 has an invalid length. [ 491.829148][T10610] Invalid source name [ 491.833213][T10610] UBIFS error (pid: 10610): cannot open "ubifs", error -22 [ 491.840333][ T30] audit: type=1400 audit(1783885767.192:790): avc: denied { getopt } for pid=10602 comm="syz.3.1220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 493.193287][T10594] team0: Port device netdevsim1 removed [ 493.212156][T10594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 493.222973][T10594] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 493.330219][T10607] 8021q: adding VLAN 0 to HW filter on device bond1 [ 493.356178][T10611] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1222'. [ 493.438390][T10613] bond1: (slave geneve2): making interface the new active one [ 493.452275][T10613] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 494.558339][ T1222] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 494.983972][ T1222] usb 1-1: Using ep0 maxpacket: 32 [ 495.026965][ T1222] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 495.049592][ T1222] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 495.096100][ T1222] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 495.106314][ T1222] usb 1-1: New USB device strings: Mfr=229, Product=129, SerialNumber=131 [ 495.117604][ T1222] usb 1-1: Product: syz [ 495.142656][ T1222] usb 1-1: Manufacturer: syz [ 495.157190][ T1222] usb 1-1: SerialNumber: syz [ 495.653203][ T5722] usb 1-1: USB disconnect, device number 33 [ 496.226798][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 496.620411][T10663] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1234'. [ 497.296902][ T10] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 497.400058][T10679] TCP: TCP_TX_DELAY enabled [ 497.465558][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 497.480879][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 497.491795][ T10] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 497.503150][ T10] usb 2-1: config 0 has no interface number 0 [ 497.510792][ T10] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 497.521751][ T10] usb 2-1: config 0 interface 88 has no altsetting 0 [ 497.532120][ T10] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 497.541675][ T10] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 497.550977][ T10] usb 2-1: Product: syz [ 497.557537][ T10] usb 2-1: Manufacturer: syz [ 497.562250][ T10] usb 2-1: SerialNumber: syz [ 497.569977][ T10] usb 2-1: config 0 descriptor?? [ 497.603936][T10674] overlayfs: statfs failed on './file0' [ 497.794335][ T24] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 498.368343][ T24] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 498.372243][ T10] usb 2-1: USB disconnect, device number 45 [ 498.630397][ T24] usb 4-1: config 0 has no interface number 0 [ 498.663138][ T24] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 498.682622][T10694] syz.4.1242 (10694): drop_caches: 2 [ 498.688224][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.696797][ T24] usb 4-1: Product: syz [ 498.701009][ T24] usb 4-1: Manufacturer: syz [ 498.714246][ T24] usb 4-1: SerialNumber: syz [ 498.746522][ T24] usb 4-1: config 0 descriptor?? [ 498.851211][T10699] syz.0.1243 (10699): drop_caches: 2 [ 499.046881][ T24] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 499.067227][ T24] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 499.078905][ T24] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 499.220364][ T24] usb 4-1: media controller created [ 499.317567][T10705] overlayfs: failed to clone upperpath [ 499.768615][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 500.015681][T10714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1249'. [ 500.072257][ T30] audit: type=1400 audit(1783885775.442:791): avc: denied { ioctl } for pid=10703 comm="syz.1.1246" path="socket:[28255]" dev="sockfs" ino=28255 ioctlcmd=0x5522 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 500.124560][ T5809] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 500.273945][ T5809] usb 1-1: Using ep0 maxpacket: 8 [ 500.282609][ T5809] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 500.291245][ T5809] usb 1-1: config 179 has no interface number 0 [ 500.302277][ T5809] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 500.314291][ T5809] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 500.326506][ T5809] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 500.343204][ T5809] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 500.361754][ T5809] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 500.379109][ T5809] usb 1-1: config 179 interface 65 has no altsetting 0 [ 500.392450][ T5809] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 500.403803][ T5809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.429824][ T5809] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input30 [ 500.496027][ T4962] input input30: unable to receive magic message: -110 [ 500.524053][ T4962] input input30: unable to receive magic message: -32 [ 500.537503][ T4962] input input30: unable to receive magic message: -32 [ 500.552083][ T4962] input input30: unable to receive magic message: -32 [ 500.569349][ T4962] input input30: unable to receive magic message: -32 [ 500.584781][ T4962] input input30: unable to receive magic message: -32 [ 500.694400][T10721] netlink: 'syz.2.1251': attribute type 10 has an invalid length. [ 500.723552][T10721] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.731113][T10721] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.747244][T10721] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1251'. [ 500.913118][ T24] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 501.014287][ T5809] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 501.104426][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 501.298958][ T24] usb 4-1: USB disconnect, device number 28 [ 501.393888][ T5809] usb 2-1: Using ep0 maxpacket: 16 [ 501.405301][ T5809] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 502.060222][ T5809] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 502.070770][ T5809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.079182][ T5809] usb 2-1: Product: syz [ 502.083459][ T5809] usb 2-1: Manufacturer: syz [ 502.090072][T10711] syz_tun: entered allmulticast mode [ 502.096707][ T5809] usb 2-1: SerialNumber: syz [ 502.106112][ T5809] usb 2-1: config 0 descriptor?? [ 502.113279][ T5722] usb 1-1: USB disconnect, device number 34 [ 502.113323][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 502.137697][ T5809] asix 2-1:0.0: probe with driver asix failed with error -22 [ 503.012609][T10746] syz.3.1257 (10746): drop_caches: 2 [ 503.193401][T10724] overlayfs: failed to resolve './file0': -2 [ 503.225788][ T5750] usb 2-1: USB disconnect, device number 46 [ 503.368883][T10753] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1260'. [ 503.377957][T10753] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1260'. [ 503.389886][T10753] netlink: 'syz.3.1260': attribute type 1 has an invalid length. [ 503.397752][T10753] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1260'. [ 503.815731][T10763] netlink: 'syz.3.1263': attribute type 10 has an invalid length. [ 503.827286][T10763] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1263'. [ 503.904105][ T1222] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 504.338735][ T1222] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 504.361057][ T1222] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 504.373474][ T1222] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 504.387905][ T1222] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 504.405499][ T1222] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 504.414936][ T1222] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.424078][ T1222] usb 1-1: Product: syz [ 504.433122][ T1222] usb 1-1: Manufacturer: syz [ 504.438622][ T1222] usb 1-1: SerialNumber: syz [ 504.457195][T10761] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 504.663860][ T5750] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 504.679081][T10761] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 504.846720][ T5750] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 504.856332][ T10] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 504.871598][ T5750] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.887112][ T5750] usb 4-1: Product: syz [ 505.835121][ T5750] usb 4-1: Manufacturer: syz [ 505.839778][ T5750] usb 4-1: SerialNumber: syz [ 505.848930][ T5750] usb 4-1: config 0 descriptor?? [ 505.862783][ T5750] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 505.880881][ T5750] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 506.849715][ T5750] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 506.859042][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 506.881452][ T5750] usb 4-1: media controller created [ 506.887484][ T10] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 506.913836][ T10] usb 2-1: config 179 has no interface number 0 [ 506.928735][ T10] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 506.941218][ T5750] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 506.950710][ T10] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 506.971847][ T10] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 506.986385][ T10] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 507.021073][ T1222] cdc_ncm 1-1:1.0: bind() failure [ 507.040777][ T10] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 507.181503][ T10] usb 2-1: config 179 interface 65 has no altsetting 0 [ 507.190874][T10788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1266'. [ 507.208733][T10788] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.215916][T10788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.223388][T10788] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.230531][T10788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.350358][ T10] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 507.432467][T10788] dvb-usb: bulk message failed: -22 (7/0) [ 507.499331][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.550471][ T5750] DVB: Unable to find symbol mt352_attach() [ 507.706263][T10794] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1272'. [ 507.715690][T10794] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1272'. [ 507.830499][ T1222] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 508.496897][ T1222] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 508.531064][ T10] usb 2-1: can't set config #179, error -71 [ 508.561515][ T1222] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 508.663569][ T5750] DVB: Unable to find symbol nxt6000_attach() [ 508.693377][ T1222] usb 1-1: USB disconnect, device number 35 [ 508.703167][T10800] fuse: fd is not a fuse device [ 508.716419][ T5750] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 508.725845][ T10] usb 2-1: USB disconnect, device number 47 [ 508.867429][T10795] input: syz0 as /devices/virtual/input/input32 [ 508.881938][ T5750] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input33 [ 508.923714][T10805] bridge_slave_1: left allmulticast mode [ 508.949047][T10805] bridge_slave_1: left promiscuous mode [ 508.985194][T10805] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.118720][ T5750] dvb-usb: schedule remote query interval to 1000 msecs. [ 509.132052][ T5750] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 509.142252][ T5750] dvb-usb: bulk message failed: -22 (7/0) [ 509.148507][ T5750] dvb-usb: bulk message failed: -22 (7/0) [ 509.159344][T10805] bridge_slave_0: left allmulticast mode [ 509.172382][ T5750] usb 4-1: USB disconnect, device number 29 [ 509.181365][T10805] bridge_slave_0: left promiscuous mode [ 509.184127][T10808] netlink: 'syz.1.1276': attribute type 10 has an invalid length. [ 509.215146][T10805] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.280339][T10809] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1276'. [ 509.329746][ T5750] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 509.359810][T10805] bond0: (slave bridge0): Releasing backup interface [ 510.443436][T10808] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.456241][T10808] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.691256][T10827] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 510.701304][T10827] overlayfs: missing 'lowerdir' [ 510.746843][ T5750] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 511.428740][ T5750] usb 4-1: unable to get BOS descriptor or descriptor too short [ 511.450731][ T5750] usb 4-1: config 1 has an invalid descriptor of length 121, skipping remainder of the config [ 511.524572][T10827] IPVS: Scheduler module ip_vs_ not found [ 511.539421][ T5750] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 511.665780][T10835] syz.0.1282 (10835): drop_caches: 2 [ 512.053700][ T5750] usb 4-1: string descriptor 0 read error: -22 [ 512.079070][ T5750] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 512.124030][ T5750] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.195090][ T5750] usb 4-1: selecting invalid altsetting 1 [ 512.240341][ T5750] usb 4-1: unit 3 not found! [ 512.267712][T10837] netlink: 'syz.2.1284': attribute type 1 has an invalid length. [ 512.299018][T10837] bond2: entered promiscuous mode [ 512.306095][T10837] 8021q: adding VLAN 0 to HW filter on device bond2 [ 512.323233][T10839] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1283'. [ 512.333704][T10839] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1283'. [ 512.347321][T10839] netlink: 'syz.4.1283': attribute type 1 has an invalid length. [ 512.355404][T10839] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1283'. [ 512.416113][ T5750] usb 4-1: cannot request logical cluster ID: 3840 (err: -5) [ 512.473198][ T5750] usb 4-1: invalid MIXER UNIT descriptor 6 [ 512.742713][ T5750] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -5 [ 512.793371][ T5750] usb 4-1: USB disconnect, device number 30 [ 512.799538][ T5703] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 512.842817][T10849] netlink: 'syz.2.1288': attribute type 10 has an invalid length. [ 512.872114][T10849] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1288'. [ 513.077598][T10854] netlink: 'syz.1.1289': attribute type 11 has an invalid length. [ 513.085747][ T5703] usb 1-1: Using ep0 maxpacket: 8 [ 513.092888][ T5703] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 513.102812][ T5703] usb 1-1: config 179 has no interface number 0 [ 513.116095][ T5703] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 513.138249][ T5703] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 513.166945][ T5703] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 513.178343][ T5703] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 513.188702][ T5703] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 513.202223][ T5703] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 513.211388][ T5703] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.229851][T10843] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 513.239943][ T5703] xpad 1-1:179.65: probe with driver xpad failed with error -5 [ 513.866305][ T10] usb 1-1: USB disconnect, device number 36 [ 515.403212][T10880] syz.0.1295 (10880): drop_caches: 2 [ 515.836647][T10882] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1296'. [ 515.845960][T10882] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1296'. [ 515.856381][T10882] netlink: 'syz.1.1296': attribute type 1 has an invalid length. [ 515.864173][T10882] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1296'. [ 516.326671][T10888] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 516.337542][T10888] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 516.350841][T10888] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 516.431551][ T30] audit: type=1400 audit(1783885791.722:792): avc: denied { firmware_load } for pid=10883 comm="syz.4.1297" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 517.769465][T10895] netlink: 'syz.3.1300': attribute type 10 has an invalid length. [ 517.817378][T10895] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.825087][T10895] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.864571][T10895] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1300'. [ 518.030600][T10888] Process accounting resumed [ 518.141632][T10903] fuse: fd is not a fuse device [ 520.545166][T10933] syz.0.1310 (10933): drop_caches: 2 [ 520.603528][T10936] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 520.612401][T10936] overlayfs: missing 'lowerdir' [ 520.869245][T10936] IPVS: Scheduler module ip_vs_ not found [ 522.291199][T10955] netlink: 'syz.0.1317': attribute type 10 has an invalid length. [ 522.301296][T10955] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.310596][T10955] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.329443][T10955] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1317'. [ 522.381921][T10958] serio: Serial port ptm0 [ 523.218227][ T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 523.986085][T10972] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 525.492304][T10984] FAULT_INJECTION: forcing a failure. [ 525.492304][T10984] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 525.551434][T10984] CPU: 1 UID: 0 PID: 10984 Comm: syz.4.1325 Tainted: G L syzkaller #0 PREEMPT(full) [ 525.551464][T10984] Tainted: [L]=SOFTLOCKUP [ 525.551469][T10984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 525.551479][T10984] Call Trace: [ 525.551484][T10984] [ 525.551491][T10984] dump_stack_lvl+0x100/0x190 [ 525.551517][T10984] should_fail_ex.cold+0x5/0xa [ 525.551538][T10984] _copy_from_user+0x2e/0xd0 [ 525.551560][T10984] move_addr_to_kernel+0x65/0x170 [ 525.551584][T10984] copy_msghdr_from_user+0x3f0/0x4c0 [ 525.551607][T10984] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 525.551643][T10984] ___sys_sendmsg+0x106/0x1e0 [ 525.551668][T10984] ? __pfx____sys_sendmsg+0x10/0x10 [ 525.551690][T10984] ? __lock_acquire+0x49f/0x1a40 [ 525.551709][T10984] ? get_pid_task+0x106/0x250 [ 525.551761][T10984] __sys_sendmsg+0x160/0x210 [ 525.551780][T10984] ? __pfx___sys_sendmsg+0x10/0x10 [ 525.551810][T10984] do_syscall_64+0x115/0x870 [ 525.551836][T10984] ? clear_bhb_loop+0x40/0x90 [ 525.551858][T10984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.551875][T10984] RIP: 0033:0x7fae0059de59 [ 525.551891][T10984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 525.551908][T10984] RSP: 002b:00007fae014a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 525.551925][T10984] RAX: ffffffffffffffda RBX: 00007fae00825fa0 RCX: 00007fae0059de59 [ 525.551937][T10984] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 525.551947][T10984] RBP: 00007fae014a5090 R08: 0000000000000000 R09: 0000000000000000 [ 525.551964][T10984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 525.551974][T10984] R13: 00007fae00826038 R14: 00007fae00825fa0 R15: 00007ffecf38b8a8 [ 525.551998][T10984] [ 526.113202][T11005] fuse: Bad value for 'fd' [ 526.694634][ T5722] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 526.759780][T11002] kvm: kvm [10996]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x50 [ 527.331721][ T5722] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 527.385906][ T5722] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 527.410367][ T5722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.455774][ T5722] usb 1-1: Product: syz [ 527.489174][ T5722] usb 1-1: Manufacturer: syz [ 527.539762][ T5722] usb 1-1: SerialNumber: syz [ 527.555965][ T30] audit: type=1400 audit(1783885802.912:793): avc: denied { write } for pid=10993 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 527.630247][ T5722] usb 1-1: config 0 descriptor?? [ 527.676446][ T30] audit: type=1400 audit(1783885802.982:794): avc: denied { write } for pid=11024 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 528.177751][ T30] audit: type=1400 audit(1783885803.552:795): avc: denied { setopt } for pid=11036 comm="syz.4.1335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 528.395562][ T10] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 528.561715][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 528.591103][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 528.613056][ T10] usb 2-1: config 204 has an invalid interface number: 8 but max is 1 [ 528.637876][ T10] usb 2-1: config 204 has an invalid interface number: 8 but max is 1 [ 528.670172][ T10] usb 2-1: config 204 has 1 interface, different from the descriptor's value: 2 [ 528.706408][ T10] usb 2-1: config 204 has no interface number 0 [ 528.729356][ T10] usb 2-1: Duplicate descriptor for config 204 interface 8 altsetting 9, skipping [ 528.758716][ T10] usb 2-1: config 204 interface 8 has no altsetting 0 [ 528.807936][ T10] usb 2-1: New USB device found, idVendor=1199, idProduct=9091, bcdDevice=6b.dd [ 528.834762][ T5703] usb 1-1: USB disconnect, device number 37 [ 528.852937][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.881497][ T10] usb 2-1: Product: syz [ 528.891045][ T10] usb 2-1: Manufacturer: syz [ 528.904469][ T10] usb 2-1: SerialNumber: syz [ 529.633514][T11053] netlink: 'syz.3.1340': attribute type 10 has an invalid length. [ 529.670043][T11053] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1340'. [ 529.708912][T11053] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1340'. [ 529.740292][ T10] usb 2-1: USB disconnect, device number 48 [ 530.279916][ T30] audit: type=1400 audit(1783885805.652:796): avc: denied { create } for pid=11063 comm="syz.0.1342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 530.413540][T11075] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1345'. [ 530.485566][ T5722] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 530.659669][T11069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1343'. [ 533.427149][ T5722] usb 4-1: unable to get BOS descriptor or descriptor too short [ 533.460534][ T5722] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 533.490245][ T5722] usb 4-1: can't read configurations, error -71 [ 534.483923][ T5750] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 534.723104][T11115] IPv6: sit1: Disabled Multicast RS [ 534.945035][ T5722] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 534.967354][ T5750] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.995628][ T5750] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 535.018436][ T5750] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 535.028182][ T5750] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.041177][ T5750] usb 2-1: config 0 descriptor?? [ 535.099716][ T5722] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 535.138022][ T5722] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 535.260874][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.293213][ T5722] usb 4-1: Product: syz [ 535.305796][ T5722] usb 4-1: Manufacturer: syz [ 535.315181][ T5722] usb 4-1: SerialNumber: syz [ 535.335583][ T5722] usb 4-1: config 0 descriptor?? [ 535.510089][ T5750] cm6533_jd 0003:0D8C:0022.0015: unknown main item tag 0x0 [ 535.524738][ T5750] cm6533_jd 0003:0D8C:0022.0015: unknown main item tag 0x0 [ 535.581137][ T5750] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0015/input/input38 [ 535.735853][ T5750] cm6533_jd 0003:0D8C:0022.0015: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 536.679762][ T29] usb 4-1: USB disconnect, device number 33 [ 536.774302][ T5750] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 536.948547][ T5750] usb 1-1: Using ep0 maxpacket: 16 [ 536.954868][T11133] fuse: fd is not a fuse device [ 536.965964][ T5750] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 536.989546][ T5750] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 537.001235][ T5750] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.017222][ T5750] usb 1-1: Product: syz [ 537.026104][ T5750] usb 1-1: Manufacturer: syz [ 537.034671][ T5750] usb 1-1: SerialNumber: syz [ 537.050932][ T5750] usb 1-1: config 0 descriptor?? [ 537.096606][ T5750] asix 1-1:0.0: probe with driver asix failed with error -22 [ 537.646128][ T5809] usb 2-1: USB disconnect, device number 49 [ 537.918261][T11140] fuse: fd is not a fuse device [ 538.118152][T11128] overlayfs: failed to resolve './file0': -2 [ 538.239899][ T30] audit: type=1400 audit(1783885813.612:797): avc: denied { write } for pid=11144 comm="syz.2.1365" path="socket:[30973]" dev="sockfs" ino=30973 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 538.405709][ T5750] usb 1-1: USB disconnect, device number 38 [ 538.423921][ T29] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 538.616158][ T29] usb 4-1: Using ep0 maxpacket: 16 [ 538.632903][ T29] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 538.666611][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.682016][ T29] usb 4-1: Product: syz [ 538.691988][ T29] usb 4-1: Manufacturer: syz [ 538.700436][ T29] usb 4-1: SerialNumber: syz [ 538.717658][ T29] usb 4-1: config 0 descriptor?? [ 538.872960][ T30] audit: type=1400 audit(1783885814.242:798): avc: denied { read } for pid=11157 comm="syz.0.1370" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 538.997225][ T30] audit: type=1400 audit(1783885814.242:799): avc: denied { open } for pid=11157 comm="syz.0.1370" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 539.859838][T11146] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1366'. [ 540.426833][ T30] audit: type=1400 audit(1783885815.632:800): avc: denied { ioctl } for pid=11157 comm="syz.0.1370" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 540.459475][ T29] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 540.477323][ T29] usb 4-1: Detected FT-X [ 540.482809][ T29] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 540.542631][ T29] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 540.565214][ T29] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 540.576124][ T29] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 540.651180][ T29] usb 4-1: USB disconnect, device number 34 [ 540.692715][ T29] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 540.744302][ T29] ftdi_sio 4-1:0.0: device disconnected [ 541.451213][T11186] fuse: Bad value for 'fd' [ 541.734146][ T29] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 541.945506][ T29] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 541.982835][ T29] usb 4-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 542.039686][ T29] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 542.050657][ T30] audit: type=1400 audit(1783885817.412:801): avc: denied { write } for pid=11165 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 542.086129][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.100024][ T29] usb 4-1: Product: syz [ 542.137704][ T29] usb 4-1: Manufacturer: syz [ 542.173096][ T29] usb 4-1: SerialNumber: syz [ 542.179149][ T30] audit: type=1400 audit(1783885817.552:802): avc: denied { lock } for pid=11194 comm="syz.2.1379" path="socket:[31080]" dev="sockfs" ino=31080 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 542.295766][ T30] audit: type=1400 audit(1783885817.662:803): avc: denied { write } for pid=11198 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 542.395666][T11195] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1379'. [ 542.861660][T11208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1377'. [ 543.734909][ T5703] usb 4-1: USB disconnect, device number 35 [ 543.951158][T11232] fuse: fd is not a fuse device [ 544.000622][T11218] fuse: Bad value for 'fd' [ 544.139448][T11232] overlayfs: failed to resolve './cgroup': -2 [ 544.882031][T11238] lo speed is unknown, defaulting to 1000 [ 545.087232][ T30] audit: type=1400 audit(1783885820.462:804): avc: denied { getopt } for pid=11240 comm="syz.2.1392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 545.109360][T11242] fuse: Bad value for 'fd' [ 545.178448][T11245] FAULT_INJECTION: forcing a failure. [ 545.178448][T11245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 545.191650][T11245] CPU: 0 UID: 0 PID: 11245 Comm: syz.0.1391 Tainted: G L syzkaller #0 PREEMPT(full) [ 545.191680][T11245] Tainted: [L]=SOFTLOCKUP [ 545.191685][T11245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 545.191695][T11245] Call Trace: [ 545.191701][T11245] [ 545.191708][T11245] dump_stack_lvl+0x100/0x190 [ 545.191735][T11245] should_fail_ex.cold+0x5/0xa [ 545.191763][T11245] _copy_to_iter+0x5a4/0x1720 [ 545.191789][T11245] ? __pfx__copy_to_iter+0x10/0x10 [ 545.191812][T11245] ? rcu_is_watching+0x12/0xc0 [ 545.191837][T11245] ? __up_read+0x333/0x980 [ 545.191864][T11245] copy_page_to_iter+0x285/0x370 [ 545.191887][T11245] process_vm_rw_core.constprop.0+0x5a3/0x950 [ 545.191917][T11245] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 545.191949][T11245] ? iovec_from_user+0xda/0x140 [ 545.191973][T11245] process_vm_rw+0x309/0x370 [ 545.191992][T11245] ? __pfx_process_vm_rw+0x10/0x10 [ 545.192014][T11245] ? find_held_lock+0x2b/0x80 [ 545.192038][T11245] ? ksys_write+0x190/0x250 [ 545.192061][T11245] ? ksys_write+0x190/0x250 [ 545.192093][T11245] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 545.192130][T11245] ? ksys_write+0x1ac/0x250 [ 545.192153][T11245] ? __pfx_ksys_write+0x10/0x10 [ 545.192179][T11245] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 545.192197][T11245] ? do_syscall_64+0x90/0x870 [ 545.192221][T11245] ? lockdep_hardirqs_on+0x78/0x100 [ 545.192245][T11245] do_syscall_64+0x115/0x870 [ 545.192268][T11245] ? clear_bhb_loop+0x40/0x90 [ 545.192288][T11245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.192306][T11245] RIP: 0033:0x7fedf6b9de59 [ 545.192320][T11245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 545.192337][T11245] RSP: 002b:00007fedf79c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 545.192353][T11245] RAX: ffffffffffffffda RBX: 00007fedf6e26180 RCX: 00007fedf6b9de59 [ 545.192364][T11245] RDX: 0000000000000062 RSI: 0000200000008400 RDI: 0000000000000385 [ 545.192374][T11245] RBP: 00007fedf79c6090 R08: 0000000000000286 R09: 0000000000000000 [ 545.192384][T11245] R10: 0000200000008640 R11: 0000000000000246 R12: 0000000000000002 [ 545.192394][T11245] R13: 00007fedf6e26218 R14: 00007fedf6e26180 R15: 00007ffe0bc318d8 [ 545.192417][T11245] [ 546.840975][T11257] Process accounting resumed [ 547.965066][T11261] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 547.974946][T11261] overlayfs: missing 'lowerdir' [ 548.140430][T11261] IPVS: Scheduler module ip_vs_ not found [ 548.256824][T11239] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1390'. [ 548.304198][T11239] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.311370][T11239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.318880][T11239] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.326032][T11239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 549.457567][T11286] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 549.466711][T11286] overlayfs: missing 'lowerdir' [ 549.759868][T11286] IPVS: Scheduler module ip_vs_ not found [ 549.954648][T11291] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 549.963731][T11291] overlayfs: missing 'lowerdir' [ 550.022741][T11297] program syz.1.1406 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 550.113904][T11291] IPVS: Scheduler module ip_vs_ not found [ 550.191339][T11297] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=990 sclass=netlink_route_socket pid=11297 comm=syz.1.1406 [ 550.210867][T11297] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1406'. [ 550.876310][ T24] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 551.217839][T11318] capability: warning: `syz.2.1413' uses 32-bit capabilities (legacy support in use) [ 552.372840][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 552.386637][ T24] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 552.397454][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.441119][ T24] usb 1-1: config 0 descriptor?? [ 552.476406][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 552.891393][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 552.908056][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 552.920444][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 552.933090][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 552.945970][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 552.960483][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 553.176909][ T24] pwc: recv_control_msg error -71 req 02 val 2100 [ 553.191441][ T24] pwc: recv_control_msg error -71 req 04 val 1500 [ 553.231717][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 553.258646][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 553.285228][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 553.302329][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 553.317663][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 553.332646][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 553.390858][T11328] fuse: fd is not a fuse device [ 553.447952][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 553.459049][ T24] pwc: Registered as video103. [ 553.479992][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input40 [ 553.704033][T11334] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1416'. [ 553.720855][T11334] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1416'. [ 553.755728][T11334] netlink: 'syz.3.1416': attribute type 1 has an invalid length. [ 553.775909][T11334] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1416'. [ 554.329369][ T7422] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 554.656315][ T24] usb 1-1: USB disconnect, device number 39 [ 555.691354][T11356] x_tables: duplicate underflow at hook 3 [ 557.574278][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 559.539436][T11396] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.546602][T11396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 559.554076][T11396] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.561216][T11396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 559.667312][T11400] serio: Serial port ptm0 [ 562.085062][T11423] serio: Serial port ptm0 [ 562.086817][T11425] netlink: 'syz.1.1441': attribute type 10 has an invalid length. [ 562.123259][T11425] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1441'. [ 562.256746][T11425] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1441'. [ 562.337677][T11418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 563.184481][ T5722] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 563.353925][ T5722] usb 4-1: Using ep0 maxpacket: 32 [ 563.373704][ T5722] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 563.411258][ T5722] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 563.449417][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 563.532762][ T5722] usb 4-1: Product: syz [ 563.574545][ T5722] usb 4-1: Manufacturer: syz [ 563.650400][ T5722] usb 4-1: SerialNumber: syz [ 563.734508][ T5722] usb 4-1: config 0 descriptor?? [ 563.798548][T11442] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 564.069508][ T5722] usb 4-1: USB disconnect, device number 36 [ 564.482453][ T30] audit: type=1400 audit(1783885839.852:805): avc: denied { mounton } for pid=11439 comm="syz.1.1444" path="/296/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 564.483520][T11440] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 565.292518][T11484] overlayfs: missing 'lowerdir' [ 565.301185][T11484] netlink: 'syz.4.1453': attribute type 8 has an invalid length. [ 565.340499][ T30] audit: type=1400 audit(1783885840.712:806): avc: denied { read write } for pid=11483 comm="syz.4.1453" name="usbmon4" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 565.575532][ T30] audit: type=1400 audit(1783885840.742:807): avc: denied { ioctl open } for pid=11483 comm="syz.4.1453" path="/dev/usbmon4" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 565.651323][T11491] fuse: Bad value for 'rootmode' [ 565.767813][T11493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1452'. [ 565.780280][T11484] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1453'. [ 566.017949][T11501] 8021q: adding VLAN 0 to HW filter on device bond3 [ 566.059066][T11499] bond3: (slave veth3): Enslaving as an active interface with an up link [ 566.171865][T11507] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1459'. [ 566.196293][ T29] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 566.565804][ T30] audit: type=1400 audit(1783885841.932:808): avc: denied { write } for pid=11508 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 566.674058][ T30] audit: type=1400 audit(1783885842.042:809): avc: denied { write } for pid=11527 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 566.778827][ T29] usb 4-1: Using ep0 maxpacket: 16 [ 567.050423][ T24] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 567.078632][ T30] audit: type=1400 audit(1783885842.452:810): avc: denied { write } for pid=11529 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 567.235682][ T30] audit: type=1400 audit(1783885842.562:811): avc: denied { write } for pid=11546 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 567.405730][T11556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1465'. [ 567.468095][ T30] audit: type=1400 audit(1783885842.842:812): avc: denied { write } for pid=11544 comm="syz.1.1465" lport=40939 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 567.561139][ T30] audit: type=1400 audit(1783885842.842:813): avc: denied { setopt } for pid=11544 comm="syz.1.1465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 567.684331][ T30] audit: type=1400 audit(1783885843.062:814): avc: denied { write } for pid=11548 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 567.950658][ T29] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 567.962979][ T29] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 567.977916][ T29] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 567.988600][ T29] usb 4-1: config 1 interface 1 has no altsetting 0 [ 568.136430][ T29] usb 4-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 568.153883][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 568.160011][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.176434][ T29] usb 4-1: Product: syz [ 568.181125][ T29] usb 4-1: Manufacturer: syz [ 568.187909][ T29] usb 4-1: SerialNumber: syz [ 568.193346][ T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 568.210766][ T24] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 568.223351][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 568.254908][ T24] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 568.299770][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.344138][ T29] usb 4-1: selecting invalid altsetting 0 [ 568.417913][ T24] usb 1-1: Product: syz [ 568.516189][ T24] usb 1-1: Manufacturer: syz [ 568.573666][ T24] usb 1-1: SerialNumber: syz [ 568.941072][ T24] usb 1-1: config 0 descriptor?? [ 569.135148][ T29] usb 4-1: USB disconnect, device number 37 [ 569.375877][T11523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.723507][T11598] SELinux: policydb version 1697621877 does not match my version range 15-35 [ 569.732549][T11598] SELinux: failed to load policy [ 569.748973][T11523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.343872][ T24] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 570.720415][T11602] fuse: Bad value for 'fd' [ 570.780092][ T6337] udevd[6337]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 571.217681][ T24] usb 1-1: USB disconnect, device number 40 [ 571.351334][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 571.351349][ T30] audit: type=1400 audit(1783885846.722:816): avc: denied { write } for pid=11571 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 571.391501][T11623] overlayfs: failed to clone upperpath [ 571.398235][ T5703] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 571.500111][ T30] audit: type=1400 audit(1783885846.872:817): avc: denied { write } for pid=11625 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 571.582052][ T5703] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 571.621309][ T5703] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 571.649971][ T5703] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 571.700469][ T5703] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 571.730112][ T5703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.774606][ T5703] usb 2-1: Product: syz [ 571.787008][ T5703] usb 2-1: Manufacturer: syz [ 571.799513][ T5703] usb 2-1: SerialNumber: syz [ 571.823241][ T5703] usb 2-1: config 0 descriptor?? [ 572.041361][ T5703] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 572.513205][ T5703] usb 2-1: USB disconnect, device number 50 [ 573.102080][ T30] audit: type=1400 audit(1783885848.462:818): avc: denied { write } for pid=11629 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 573.227924][T11659] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 573.322009][T11664] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1486'. [ 573.699709][ T30] audit: type=1400 audit(1783885849.072:819): avc: denied { write } for pid=11670 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 574.028327][T11674] serio: Serial port ptm0 [ 574.434284][ T5703] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 574.617029][ T5703] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 574.729381][ T5703] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 574.833090][ T5703] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 574.869131][ T5703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.907028][ T5703] usb 4-1: Product: syz [ 574.948921][ T5703] usb 4-1: Manufacturer: syz [ 574.963322][ T5703] usb 4-1: SerialNumber: syz [ 575.007855][T11697] netlink: 132732 bytes leftover after parsing attributes in process `syz.1.1493'. [ 575.020011][ T5703] usb 4-1: config 0 descriptor?? [ 575.196731][ T30] audit: type=1400 audit(1783885850.572:820): avc: denied { write } for pid=11677 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 575.227039][T11692] can0: slcan on ttyS3. [ 575.523723][ T30] audit: type=1400 audit(1783885850.892:821): avc: denied { write } for pid=11704 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 575.885628][T11692] can0 (unregistered): slcan off ttyS3. [ 576.121617][ T5703] usb 4-1: USB disconnect, device number 38 [ 576.297462][T11709] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1494'. [ 577.217904][T11692] Process accounting resumed [ 579.576009][T11751] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1507'. [ 579.586042][T11751] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1507'. [ 579.614122][T11751] netlink: 'syz.3.1507': attribute type 1 has an invalid length. [ 579.622711][T11751] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1507'. [ 581.324174][ T5796] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 581.495346][ T5796] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 581.525409][ T5796] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 581.561510][ T5796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.599596][ T5796] usb 4-1: Product: syz [ 581.620072][ T5796] usb 4-1: Manufacturer: syz [ 581.646112][ T5796] usb 4-1: SerialNumber: syz [ 581.684694][ T5796] usb 4-1: config 0 descriptor?? [ 584.058316][ T30] audit: type=1400 audit(1783885859.432:822): avc: denied { associate } for pid=11771 comm="syz.1.1512" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 584.235844][ T5722] usb 4-1: USB disconnect, device number 39 [ 584.534685][T11777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1515'. [ 584.883918][ T24] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 584.963905][ T5722] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 585.068296][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 585.087752][ T24] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 585.123599][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 585.147189][ T24] usb 2-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 585.164036][ T5722] usb 4-1: Using ep0 maxpacket: 32 [ 585.169246][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.203202][ T5722] usb 4-1: unable to get BOS descriptor or descriptor too short [ 585.221800][ T5722] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 585.241960][ T24] usb 2-1: config 0 descriptor?? [ 585.245026][ T5722] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 585.306051][ T5722] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 585.328667][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.355936][ T5722] usb 4-1: Product: syz [ 585.372282][ T5722] usb 4-1: Manufacturer: syz [ 585.387880][ T5722] usb 4-1: SerialNumber: syz [ 585.639086][ T5722] usb 4-1: unit 4 not found! [ 585.657159][ T5722] usb 4-1: unit 0 not found! [ 585.713145][ T24] belkin 0003:050D:3201.0016: global environment stack underflow [ 585.753958][ T24] belkin 0003:050D:3201.0016: item 0 4 1 11 parsing failed [ 585.791213][ T24] belkin 0003:050D:3201.0016: parse failed [ 585.817593][ T24] belkin 0003:050D:3201.0016: probe with driver belkin failed with error -22 [ 585.919332][ T24] usb 2-1: USB disconnect, device number 51 [ 586.036304][ T5722] usb 4-1: USB disconnect, device number 40 [ 586.143963][ T5628] udevd[5628]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 586.985234][T11806] serio: Serial port ptm0 [ 587.806062][ T5796] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 587.995554][ T5796] usb 2-1: Using ep0 maxpacket: 32 [ 588.460201][ T5796] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 588.478514][ T5796] usb 2-1: config 0 has no interface number 0 [ 588.494805][ T5796] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 588.513970][ T5796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.543930][ T5796] usb 2-1: Product: syz [ 588.559920][ T5796] usb 2-1: Manufacturer: syz [ 588.573021][ T5796] usb 2-1: SerialNumber: syz [ 588.599150][ T5796] usb 2-1: config 0 descriptor?? [ 589.109753][ T5796] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 589.156572][ T5796] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 589.396632][T11831] syz.3.1531 (11831): drop_caches: 2 [ 590.177203][T11840] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1535'. [ 590.186165][T11840] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1535'. [ 590.604727][ T5722] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 590.966723][ T5722] usb 4-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 591.109367][ T5722] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 591.134811][T11810] kvm: kvm [11808]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x80ffffff [ 591.149775][ T5722] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 4 [ 591.192144][ T5722] usb 4-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40 [ 591.204943][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.239044][ T5722] usb 4-1: Product: syz [ 591.257373][ T5722] usb 4-1: Manufacturer: syz [ 591.274376][T11834] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 591.324109][T11810] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 591.362357][ T5722] usb 4-1: SerialNumber: syz [ 591.488441][ T5796] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71 [ 591.517264][ T5796] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 591.554084][ T5796] usb 2-1: USB disconnect, device number 52 [ 591.808452][ T5722] usb 4-1: Can't get UAC3 power state for id 10 [ 591.898397][T11858] lo speed is unknown, defaulting to 1000 [ 591.905375][T11858] lo speed is unknown, defaulting to 1000 [ 591.923271][T11858] lo speed is unknown, defaulting to 1000 [ 591.938769][T11858] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 591.954334][T11858] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 591.972817][T11858] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 592.090358][T11858] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 592.125622][T11858] lo speed is unknown, defaulting to 1000 [ 592.132847][T11858] lo speed is unknown, defaulting to 1000 [ 592.139928][T11858] lo speed is unknown, defaulting to 1000 [ 592.148979][T11858] lo speed is unknown, defaulting to 1000 [ 592.156089][T11858] lo speed is unknown, defaulting to 1000 [ 592.230266][ T5722] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 592.260432][ T5722] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 592.283197][ T5722] usb 4-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 592.316666][ T5722] usb 4-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 592.791208][ T5722] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 592.863111][ T5722] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 592.938626][ T5722] usb 4-1: USB disconnect, device number 41 [ 593.227462][T11869] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.234650][T11869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 593.508753][T11873] syz.0.1543 (11873): drop_caches: 2 [ 594.023874][ T5722] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 594.130932][T11869] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 594.203866][ T5722] usb 4-1: Using ep0 maxpacket: 32 [ 594.219594][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.229484][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 594.274823][ T5722] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 594.309613][ T5722] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 594.343546][ T5722] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 594.370226][ T5722] usb 4-1: New USB device strings: Mfr=229, Product=129, SerialNumber=131 [ 594.401725][ T5722] usb 4-1: Product: syz [ 594.415515][T11879] input: syz0 as /devices/virtual/input/input42 [ 594.432582][ T5722] usb 4-1: Manufacturer: syz [ 594.443054][ T5722] usb 4-1: SerialNumber: syz [ 594.644277][T11884] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1547'. [ 594.653397][T11884] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1547'. [ 594.674852][T11884] netlink: 'syz.4.1547': attribute type 1 has an invalid length. [ 594.682689][T11884] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1547'. [ 595.623028][ T5722] usb 4-1: USB disconnect, device number 42 [ 595.730304][T11894] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 598.195169][T11922] trusted_key: encrypted_key: insufficient parameters specified [ 598.207859][T11922] netlink: 'syz.4.1556': attribute type 49 has an invalid length. [ 598.651988][T11922] bond0: (slave bond_slave_0): Releasing backup interface [ 598.770407][T11922] bond_slave_0: entered promiscuous mode [ 598.799775][T11922] bond_slave_0: entered allmulticast mode [ 601.553020][T11952] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 601.564762][T11952] overlayfs: missing 'lowerdir' [ 602.133789][ T24] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 602.271688][T11958] IPVS: Scheduler module ip_vs_ not found [ 602.474859][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 602.483723][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 602.523346][ T24] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 602.566542][ T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 602.576394][ T24] usb 1-1: New USB device strings: Mfr=229, Product=129, SerialNumber=131 [ 602.586887][ T24] usb 1-1: Product: syz [ 602.602030][ T30] audit: type=1400 audit(1783885877.962:823): avc: denied { listen } for pid=11962 comm="syz.1.1565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 602.628662][ T24] usb 1-1: Manufacturer: syz [ 602.638671][ T24] usb 1-1: SerialNumber: syz [ 602.673534][ T30] audit: type=1400 audit(1783885878.022:824): avc: denied { accept } for pid=11962 comm="syz.1.1565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 602.724046][T11970] netlink: 'syz.3.1566': attribute type 10 has an invalid length. [ 602.733873][T11970] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.741196][T11970] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.755907][T11970] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1566'. [ 602.919315][ T30] audit: type=1400 audit(1783885878.292:825): avc: denied { create } for pid=11977 comm="syz.4.1567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 602.945802][ T30] audit: type=1400 audit(1783885878.322:826): avc: denied { connect } for pid=11977 comm="syz.4.1567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 603.041288][ T30] audit: type=1400 audit(1783885878.412:827): avc: denied { write } for pid=11950 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 603.297689][T11986] serio: Serial port ptm0 [ 603.313456][ T5722] usb 1-1: USB disconnect, device number 41 [ 603.379264][ T30] audit: type=1400 audit(1783885878.752:828): avc: denied { write } for pid=11984 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 606.205400][T11998] loop5: detected capacity change from 0 to 2640 [ 606.344643][T11998] buffer_io_error: 10 callbacks suppressed [ 606.344661][T11998] Buffer I/O error on dev loop5, logical block 0, async page read [ 606.527772][T12006] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 606.547404][T12006] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 606.618124][T12006] Buffer I/O error on dev loop5, logical block 2, lost async page write [ 606.674187][T12006] Buffer I/O error on dev loop5, logical block 3, lost async page write [ 606.717279][T12006] Buffer I/O error on dev loop5, logical block 4, lost async page write [ 606.745044][T12006] Buffer I/O error on dev loop5, logical block 5, lost async page write [ 606.764612][T12006] Buffer I/O error on dev loop5, logical block 6, lost async page write [ 606.773276][T12006] Buffer I/O error on dev loop5, logical block 7, lost async page write [ 606.781819][T12006] Buffer I/O error on dev loop5, logical block 8, lost async page write [ 608.326474][ T10] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 608.502652][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 608.544652][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 608.572242][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.587415][ T10] usb 2-1: Product: syz [ 608.593695][ T10] usb 2-1: Manufacturer: syz [ 608.606541][ T10] usb 2-1: SerialNumber: syz [ 608.646880][ T10] usb 2-1: config 0 descriptor?? [ 608.752552][T12038] overlayfs: failed to clone upperpath [ 609.047324][T12041] FAULT_INJECTION: forcing a failure. [ 609.047324][T12041] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 609.060446][T12041] CPU: 0 UID: 0 PID: 12041 Comm: syz.0.1584 Tainted: G L syzkaller #0 PREEMPT(full) [ 609.060473][T12041] Tainted: [L]=SOFTLOCKUP [ 609.060479][T12041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 609.060489][T12041] Call Trace: [ 609.060495][T12041] [ 609.060501][T12041] dump_stack_lvl+0x100/0x190 [ 609.060528][T12041] should_fail_ex.cold+0x5/0xa [ 609.060555][T12041] _copy_from_user+0x2e/0xd0 [ 609.060576][T12041] move_addr_to_kernel+0x65/0x170 [ 609.060601][T12041] copy_msghdr_from_user+0x3f0/0x4c0 [ 609.060624][T12041] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 609.060650][T12041] ? __pfx__kstrtoull+0x10/0x10 [ 609.060678][T12041] ___sys_sendmsg+0x106/0x1e0 [ 609.060713][T12041] ? __pfx____sys_sendmsg+0x10/0x10 [ 609.060746][T12041] ? find_held_lock+0x2b/0x80 [ 609.060784][T12041] __sys_sendmmsg+0x20c/0x440 [ 609.060804][T12041] ? __pfx___sys_sendmmsg+0x10/0x10 [ 609.060820][T12041] ? ksys_write+0x190/0x250 [ 609.060860][T12041] ? fput+0x79/0x100 [ 609.060876][T12041] ? ksys_write+0x1ac/0x250 [ 609.060898][T12041] ? __pfx_ksys_write+0x10/0x10 [ 609.060924][T12041] __x64_sys_sendmmsg+0x9c/0x100 [ 609.060940][T12041] ? lockdep_hardirqs_on+0x78/0x100 [ 609.060964][T12041] do_syscall_64+0x115/0x870 [ 609.060988][T12041] ? clear_bhb_loop+0x40/0x90 [ 609.061007][T12041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.061024][T12041] RIP: 0033:0x7fedf6b9de59 [ 609.061038][T12041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 609.061054][T12041] RSP: 002b:00007fedf7a08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 609.061070][T12041] RAX: ffffffffffffffda RBX: 00007fedf6e25fa0 RCX: 00007fedf6b9de59 [ 609.061081][T12041] RDX: 0000000000000001 RSI: 0000200000003740 RDI: 0000000000000007 [ 609.061090][T12041] RBP: 00007fedf7a08090 R08: 0000000000000000 R09: 0000000000000000 [ 609.061100][T12041] R10: 0000000020000800 R11: 0000000000000246 R12: 0000000000000001 [ 609.061109][T12041] R13: 00007fedf6e26038 R14: 00007fedf6e25fa0 R15: 00007ffe0bc318d8 [ 609.061132][T12041] [ 609.523604][T10789] usb 2-1: USB disconnect, device number 53 [ 609.596583][ T30] audit: type=1400 audit(1783885884.932:829): avc: denied { bind } for pid=12048 comm="syz.2.1587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 609.599063][T12049] netlink: 'syz.2.1587': attribute type 23 has an invalid length. [ 609.626467][T12049] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1587'. [ 609.724109][ T5722] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 609.883962][ T5722] usb 1-1: Using ep0 maxpacket: 32 [ 609.900354][ T5722] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 609.911042][ T5722] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 609.940409][ T5722] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 609.957353][ T5722] usb 1-1: New USB device strings: Mfr=229, Product=129, SerialNumber=131 [ 609.973902][ T5722] usb 1-1: Product: syz [ 609.985488][ T5722] usb 1-1: Manufacturer: syz [ 610.003462][ T5722] usb 1-1: SerialNumber: syz [ 610.958355][ T30] audit: type=1400 audit(1783885886.332:830): avc: denied { write } for pid=12069 comm="syz.1.1591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 610.990411][ T5722] usb 1-1: USB disconnect, device number 42 [ 611.255442][ T30] audit: type=1400 audit(1783885886.632:831): avc: denied { ioctl } for pid=12077 comm="syz.3.1593" path="/dev/sg0" dev="devtmpfs" ino=816 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 611.365195][ T30] audit: type=1400 audit(1783885886.712:832): avc: denied { create } for pid=12077 comm="syz.3.1593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 611.432760][ T30] audit: type=1326 audit(1783885886.712:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12077 comm="syz.3.1593" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcb119de59 code=0x7ff00000 [ 611.483353][T12088] serio: Serial port ptm0 [ 611.494083][T12086] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1595'. [ 611.504443][T12086] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1595'. [ 611.561090][ T30] audit: type=1326 audit(1783885886.712:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12077 comm="syz.3.1593" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcb119de59 code=0x7ff00000 [ 611.667617][ T30] audit: type=1326 audit(1783885886.712:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12077 comm="syz.3.1593" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcb119de59 code=0x7ff00000 [ 611.752833][ T30] audit: type=1326 audit(1783885886.712:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12077 comm="syz.3.1593" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcb119de59 code=0x7ff00000 [ 611.889075][ T30] audit: type=1326 audit(1783885886.712:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12077 comm="syz.3.1593" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcb119de59 code=0x7ff00000 [ 611.984989][ T30] audit: type=1326 audit(1783885886.712:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12077 comm="syz.3.1593" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcb119de59 code=0x7ff00000 [ 612.163976][T12102] bridge1: entered promiscuous mode [ 612.169472][T12102] bridge1: entered allmulticast mode [ 612.189399][T12102] team0: Port device bridge1 added [ 612.227253][T12102] bridge0: port 3(team0) entered blocking state [ 612.235680][T12102] bridge0: port 3(team0) entered disabled state [ 612.247742][T12102] team0: entered allmulticast mode [ 612.253041][T12102] team_slave_0: entered allmulticast mode [ 612.259098][T12102] team_slave_1: entered allmulticast mode [ 612.301602][T12102] team0: entered promiscuous mode [ 612.307186][T12102] team_slave_0: entered promiscuous mode [ 612.314345][T12102] team_slave_1: entered promiscuous mode [ 612.329051][T12102] bridge0: port 3(team0) entered blocking state [ 612.335527][T12102] bridge0: port 3(team0) entered forwarding state [ 613.011494][T12107] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 613.088066][T12111] netlink: 'syz.3.1605': attribute type 1 has an invalid length. [ 614.209024][T12124] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 614.226471][ T24] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 614.249226][T12124] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 614.429303][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 614.652821][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 615.003424][ T24] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 615.221365][T12128] IPVS: Scheduler module ip_vs_ not found [ 615.260464][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 615.283461][ T30] kauditd_printk_skb: 250 callbacks suppressed [ 615.283492][ T30] audit: type=1400 audit(1783885890.652:1089): avc: denied { connect } for pid=12123 comm="syz.2.1607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 615.323905][ T24] usb 4-1: New USB device strings: Mfr=229, Product=129, SerialNumber=131 [ 615.344254][ T24] usb 4-1: Product: syz [ 615.348995][ T24] usb 4-1: Manufacturer: syz [ 615.366226][ T24] usb 4-1: SerialNumber: syz [ 617.386697][T12144] serio: Serial port ptm0 [ 617.443416][ T24] usb 4-1: USB disconnect, device number 43 [ 618.889430][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 619.245682][ T30] audit: type=1400 audit(1783885894.622:1090): avc: denied { write } for pid=12130 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 619.557748][ T30] audit: type=1400 audit(1783885894.932:1091): avc: denied { write } for pid=12173 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 621.193955][ T5722] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 621.549582][ T5722] usb 2-1: Using ep0 maxpacket: 8 [ 621.690223][ T30] audit: type=1400 audit(1783885897.062:1092): avc: denied { connect } for pid=12199 comm="syz.3.1624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 621.953835][ T5750] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 622.103862][ T5750] usb 1-1: Using ep0 maxpacket: 16 [ 622.115777][ T5750] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 622.135552][ T5750] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 622.153314][ T5750] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 622.178309][ T5750] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.207903][ T5750] usb 1-1: Product: syz [ 622.222500][ T5750] usb 1-1: Manufacturer: syz [ 622.235126][ T5750] usb 1-1: SerialNumber: syz [ 622.262577][ T5750] usb 1-1: config 0 descriptor?? [ 623.036117][ T30] audit: type=1400 audit(1783885898.392:1093): avc: denied { write } for pid=12208 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 623.334557][ T5722] usb 2-1: unable to get BOS descriptor or descriptor too short [ 623.362657][ T5722] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 623.406184][ T5722] usb 2-1: can't read configurations, error -71 [ 623.465655][ T30] audit: type=1400 audit(1783885898.832:1094): avc: denied { write } for pid=12236 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 623.733141][T12249] xt_TCPMSS: Only works on TCP SYN packets [ 623.976466][T12252] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 623.983129][T12252] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 623.995688][T12252] vhci_hcd vhci_hcd.0: Device attached [ 624.005802][T12254] netlink: 'syz.2.1635': attribute type 9 has an invalid length. [ 624.274057][ T29] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 624.613394][T12255] vhci_hcd: connection reset by peer [ 624.665241][ T1161] vhci_hcd vhci_hcd.3: stop threads [ 624.699619][ T1161] vhci_hcd vhci_hcd.3: release socket [ 624.858953][ T1161] vhci_hcd vhci_hcd.3: disconnect device [ 625.887673][ T5722] usb 1-1: USB disconnect, device number 43 [ 626.972223][ T5722] usb 2-1: new low-speed USB device number 56 using dummy_hcd [ 627.120234][ T5722] usb 2-1: device descriptor read/64, error -71 [ 627.443860][ T5722] usb 2-1: new low-speed USB device number 57 using dummy_hcd [ 627.653913][ T5722] usb 2-1: device descriptor read/64, error -71 [ 627.768753][ T5722] usb usb2-port1: attempt power cycle [ 627.890861][ T30] audit: type=1400 audit(1783885903.262:1095): avc: denied { write } for pid=12287 comm="syz.2.1647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 628.113915][ T5722] usb 2-1: new low-speed USB device number 58 using dummy_hcd [ 628.134241][ T5722] usb 2-1: device descriptor read/8, error -71 [ 628.373868][ T5722] usb 2-1: new low-speed USB device number 59 using dummy_hcd [ 628.396085][ T5722] usb 2-1: device descriptor read/8, error -71 [ 628.520046][ T5722] usb usb2-port1: unable to enumerate USB device [ 629.308099][T12304] fuse: fd is not a fuse device [ 629.357032][T12302] syz.0.1651 (12302): drop_caches: 2 [ 629.416466][ T29] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 629.441784][T12304] overlayfs: failed to resolve './cgroup': -2 [ 630.024764][T12310] netlink: 'syz.1.1654': attribute type 5 has an invalid length. [ 630.095067][ T30] audit: type=1400 audit(1783885905.472:1096): avc: denied { set_context_mgr } for pid=12309 comm="syz.1.1654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 630.097884][T12310] ip6erspan0: entered promiscuous mode [ 630.134056][T12310] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1654'. [ 630.434786][ T5750] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 630.523700][T12315] overlayfs: failed to clone upperpath [ 630.597979][ T5750] usb 2-1: Using ep0 maxpacket: 16 [ 630.602325][ T5750] usb 2-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 630.602360][ T5750] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.602378][ T5750] usb 2-1: Product: syz [ 630.602392][ T5750] usb 2-1: Manufacturer: syz [ 630.602406][ T5750] usb 2-1: SerialNumber: syz [ 630.620727][ T5750] usb 2-1: config 0 descriptor?? [ 630.717261][ T5750] gspca_main: spca508-2.14.0 probing 041e:4018 [ 631.039039][ T5750] gspca_spca508: reg_read err -71 [ 631.039353][ T5750] gspca_spca508: reg_read err -71 [ 631.039641][ T5750] gspca_spca508: reg_read err -71 [ 631.039929][ T5750] gspca_spca508: reg_read err -71 [ 631.040213][ T5750] gspca_spca508: reg write: error -71 [ 631.040275][ T5750] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 631.042214][ T5750] usb 2-1: USB disconnect, device number 60 [ 631.393874][ T5722] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 631.560564][ T5722] usb 1-1: config 0 has no interfaces? [ 631.590166][ T5722] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 631.620054][ T5722] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.664984][ T5722] usb 1-1: config 0 descriptor?? [ 631.918045][T12321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.951472][T12321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.225749][T12321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.539433][T12321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.842069][T12328] netlink: 'syz.3.1660': attribute type 10 has an invalid length. [ 632.932048][ T29] usb 1-1: USB disconnect, device number 44 [ 634.347868][T12355] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1667'. [ 635.894468][T12361] xt_TCPMSS: Only works on TCP SYN packets [ 636.682935][ T30] audit: type=1400 audit(1783885912.052:1097): avc: denied { ioctl } for pid=12365 comm="syz.4.1671" path="socket:[35034]" dev="sockfs" ino=35034 ioctlcmd=0xaf03 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 637.014374][T12380] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1673'. [ 637.039092][T12378] netlink: 'syz.2.1675': attribute type 10 has an invalid length. [ 638.488886][T12394] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1679'. [ 639.448327][T12395] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1678'. [ 639.459310][T12395] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1678'. [ 639.511670][T12395] netlink: 'syz.3.1678': attribute type 1 has an invalid length. [ 639.520210][T12395] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1678'. [ 641.153883][ T29] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 641.326308][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 641.362455][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 641.417030][ T29] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 641.445672][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.491629][ T29] usb 1-1: config 0 descriptor?? [ 641.927908][T12416] netlink: 'syz.3.1686': attribute type 10 has an invalid length. [ 641.993918][ T29] cm6533_jd 0003:0D8C:0022.0017: unknown main item tag 0x0 [ 642.044747][ T29] cm6533_jd 0003:0D8C:0022.0017: unknown main item tag 0x0 [ 642.111367][ T29] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0017/input/input47 [ 642.279800][ T29] cm6533_jd 0003:0D8C:0022.0017: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 643.656495][ T5703] usb 1-1: reset high-speed USB device number 45 using dummy_hcd [ 643.990038][T12430] syz.1.1688 (12430): drop_caches: 2 [ 644.270410][T12436] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1691'. [ 644.320656][T12436] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1691'. [ 644.624357][T12440] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1692'. [ 646.112113][T12442] FAT-fs (nbd3): unable to read boot sector [ 646.157560][T12442] syz_tun: left allmulticast mode [ 646.174668][T12442] atomic_op ffff88802d761198 conn xmit_atomic 0000000000000000 [ 646.463971][T10789] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 646.604886][ T5750] usb 1-1: USB disconnect, device number 45 [ 646.633914][T10789] usb 4-1: Using ep0 maxpacket: 32 [ 646.685748][T10789] usb 4-1: unable to get BOS descriptor or descriptor too short [ 646.726355][T10789] usb 4-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice= 0.40 [ 646.758151][T10789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.790815][T10789] usb 4-1: Product: ꦪ㏋瀇됅꽣猊涮㗈彾쾖몸椰쯃녑ᙹ걈ꎢ굷ꍪ—傁烩鴧岦矔꧐駋纍昁ࣂ碥⛐奃 [ 646.846241][T10789] usb 4-1: Manufacturer: ⠊ [ 646.864641][T10789] usb 4-1: SerialNumber: Ꟙ꼪繾 [ 646.931361][T12452] netlink: 'syz.2.1697': attribute type 10 has an invalid length. [ 646.946723][T10789] gspca_main: STV06xx-2.14.0 probing 046d:08f6 [ 646.961784][T10789] gspca_stv06xx: st6422 sensor detected [ 647.215729][T12456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1694'. [ 647.391990][T12458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1698'. [ 647.598946][T10789] STV06xx 4-1:1.0: probe with driver STV06xx failed with error -71 [ 647.636252][T10789] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 647.769532][T10789] usb 4-1: USB disconnect, device number 44 [ 647.919675][ T5628] udevd[5628]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 648.313049][T12476] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1702'. [ 648.322031][T12476] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1702'. [ 648.331068][T12476] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1702'. [ 648.340034][T12476] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1702'. [ 648.948687][T12489] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1703'. [ 650.411682][T12496] SELinux: invalid class [ 650.441358][T12496] SELinux: failed to load policy [ 650.617778][T12501] tipc: Started in network mode [ 650.640989][T12501] tipc: Node identity 4, cluster identity 4711 [ 650.890338][T12501] tipc: Node number set to 4 [ 651.971361][T12521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1712'. [ 651.981763][T12521] bridge_slave_1: left allmulticast mode [ 651.987482][T12521] bridge_slave_1: left promiscuous mode [ 651.995865][T12521] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.021570][T12521] bridge_slave_0: left allmulticast mode [ 652.027313][T12521] bridge_slave_0: left promiscuous mode [ 652.033708][T12521] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.171805][T12521] : (slave bridge0): Releasing backup interface [ 652.522113][T12524] efs: cannot read volume header [ 652.898150][T12524] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 652.963694][ T30] audit: type=1400 audit(1783885928.292:1098): avc: denied { relabelto } for pid=12518 comm="syz.3.1712" name="midiC2D0" dev="devtmpfs" ino=1302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 653.156754][ T30] audit: type=1400 audit(1783885928.292:1099): avc: denied { associate } for pid=12518 comm="syz.3.1712" name="midiC2D0" dev="devtmpfs" ino=1302 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 655.253824][ T5750] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 655.318652][ T30] audit: type=1400 audit(1783885930.692:1100): avc: denied { map } for pid=12541 comm="syz.3.1719" path="socket:[35895]" dev="sockfs" ino=35895 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 655.354765][ T30] audit: type=1400 audit(1783885930.692:1101): avc: denied { read accept } for pid=12541 comm="syz.3.1719" path="socket:[35895]" dev="sockfs" ino=35895 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 655.424219][ T5750] usb 2-1: Using ep0 maxpacket: 8 [ 655.431116][ T5750] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 655.439812][ T5750] usb 2-1: config 179 has no interface number 0 [ 655.460866][ T5750] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 655.510311][ T5750] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 655.548651][ T5750] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 655.587421][ T5750] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 655.614868][ T5750] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 655.650579][ T5750] usb 2-1: config 179 interface 65 has no altsetting 0 [ 655.673989][ T5750] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 655.703564][ T5750] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.867262][ T5750] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input48 [ 655.925422][ T4962] input input48: unable to receive magic message: -110 [ 655.989842][ T4962] input input48: unable to receive magic message: -32 [ 656.055473][ T4962] input input48: unable to receive magic message: -32 [ 656.105840][ T4962] input input48: unable to receive magic message: -32 [ 656.123692][ T4962] input input48: unable to receive magic message: -32 [ 656.160737][ T4962] input input48: unable to receive magic message: -32 [ 656.783980][T12562] netlink: 'syz.3.1724': attribute type 1 has an invalid length. [ 656.827033][ T5796] usb 2-1: USB disconnect, device number 61 [ 656.827045][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 656.978133][T12562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 657.185307][T12566] netlink: 'syz.3.1725': attribute type 10 has an invalid length. [ 657.566347][T12577] serio: Serial port ptm0 [ 657.713819][ T5722] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 657.726108][ T30] audit: type=1400 audit(1783885933.032:1102): avc: denied { read write } for pid=12576 comm="syz.3.1729" name="midiC2D0" dev="devtmpfs" ino=1302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 657.977627][ T5722] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 657.993679][ T30] audit: type=1400 audit(1783885933.032:1103): avc: denied { open } for pid=12576 comm="syz.3.1729" path="/dev/snd/midiC2D0" dev="devtmpfs" ino=1302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 658.067337][ T5722] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 658.163204][ T5722] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 658.241827][ T5722] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.260437][T12585] hsr0: entered allmulticast mode [ 658.299699][T12585] hsr_slave_0: entered allmulticast mode [ 658.380979][T12585] hsr_slave_1: entered allmulticast mode [ 658.390398][ T5722] usb 2-1: config 0 descriptor?? [ 658.447076][T12587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1731'. [ 658.841391][T12587] hsr_slave_0: left promiscuous mode [ 659.018670][T12587] hsr_slave_1: left promiscuous mode [ 659.039449][ T5722] cm6533_jd 0003:0D8C:0022.0018: unknown main item tag 0x0 [ 659.120803][ T5722] cm6533_jd 0003:0D8C:0022.0018: unknown main item tag 0x0 [ 659.598657][ T5722] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0018/input/input50 [ 659.687964][T12587] hsr0 (unregistering): left allmulticast mode [ 659.721875][ T5722] cm6533_jd 0003:0D8C:0022.0018: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 659.999459][T12600] FAULT_INJECTION: forcing a failure. [ 659.999459][T12600] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 660.014358][T12600] CPU: 1 UID: 0 PID: 12600 Comm: syz.4.1734 Tainted: G L syzkaller #0 PREEMPT(full) [ 660.014385][T12600] Tainted: [L]=SOFTLOCKUP [ 660.014392][T12600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 660.014402][T12600] Call Trace: [ 660.014407][T12600] [ 660.014414][T12600] dump_stack_lvl+0x100/0x190 [ 660.014441][T12600] should_fail_ex.cold+0x5/0xa [ 660.014462][T12600] _copy_from_user+0x2e/0xd0 [ 660.014483][T12600] snd_pcm_oss_write2+0x1c2/0x400 [ 660.014506][T12600] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 660.014525][T12600] ? snd_pcm_oss_make_ready_locked+0x78/0x130 [ 660.014547][T12600] ? snd_pcm_oss_make_ready_locked+0x7d/0x130 [ 660.014579][T12600] snd_pcm_oss_write+0x729/0xa30 [ 660.014601][T12600] ? security_file_permission+0x76/0x210 [ 660.014629][T12600] vfs_write+0x2aa/0x1050 [ 660.014653][T12600] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 660.014675][T12600] ? __pfx_vfs_write+0x10/0x10 [ 660.014694][T12600] ? find_held_lock+0x2b/0x80 [ 660.014717][T12600] ? __fget_files+0x215/0x3d0 [ 660.014739][T12600] ? __fget_files+0x215/0x3d0 [ 660.014766][T12600] ? __fget_files+0x21f/0x3d0 [ 660.014796][T12600] ksys_write+0x12a/0x250 [ 660.014816][T12600] ? __pfx_ksys_write+0x10/0x10 [ 660.014845][T12600] do_syscall_64+0x115/0x870 [ 660.014868][T12600] ? clear_bhb_loop+0x40/0x90 [ 660.014887][T12600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.014902][T12600] RIP: 0033:0x7fae0059de59 [ 660.014917][T12600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 660.014932][T12600] RSP: 002b:00007fae014a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 660.014948][T12600] RAX: ffffffffffffffda RBX: 00007fae00825fa0 RCX: 00007fae0059de59 [ 660.014959][T12600] RDX: 0000000000004000 RSI: 00002000000012c0 RDI: 0000000000000004 [ 660.014968][T12600] RBP: 00007fae014a5090 R08: 0000000000000000 R09: 0000000000000000 [ 660.014977][T12600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.014987][T12600] R13: 00007fae00826038 R14: 00007fae00825fa0 R15: 00007ffecf38b8a8 [ 660.015009][T12600] [ 660.857027][ T5722] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 660.923938][ T5809] usb 2-1: reset high-speed USB device number 62 using dummy_hcd [ 661.028264][ T5722] usb 4-1: Using ep0 maxpacket: 16 [ 661.040525][ T5722] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 661.067907][ T5722] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 661.104525][ T5722] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 661.115708][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.125404][ T5722] usb 4-1: Product: syz [ 661.140748][ T5722] usb 4-1: Manufacturer: syz [ 661.162730][ T5722] usb 4-1: SerialNumber: syz [ 661.193176][ T5722] usb 4-1: config 0 descriptor?? [ 661.454644][T12619] netlink: 'syz.4.1740': attribute type 10 has an invalid length. [ 661.486195][T12619] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.493558][T12619] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.580445][T12619] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.587658][T12619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 661.595151][T12619] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.602299][T12619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 661.719990][T12619] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 661.811519][T12621] overlayfs: statfs failed on './file0' [ 661.867432][ T5722] usb 4-1: USB disconnect, device number 45 [ 662.744877][ T24] usb 2-1: USB disconnect, device number 62 [ 665.115739][T12651] hsr0: entered promiscuous mode [ 665.678930][T12674] netlink: 'syz.1.1754': attribute type 10 has an invalid length. [ 665.726283][T12674] bridge0: port 3(team0) entered disabled state [ 665.732795][T12674] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.740301][T12674] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.801572][ T30] audit: type=1400 audit(1783885941.172:1104): avc: denied { listen } for pid=12673 comm="syz.4.1755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 665.888803][ T30] audit: type=1400 audit(1783885941.192:1105): avc: denied { accept } for pid=12673 comm="syz.4.1755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 666.493318][ T30] audit: type=1400 audit(1783885941.862:1106): avc: denied { view } for pid=12690 comm="syz.1.1760" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 666.808957][T12694] NILFS (nullb0): couldn't find nilfs on the device [ 666.990368][ T5722] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 667.181232][ T5722] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 667.224565][ T5722] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 667.391678][ T5722] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 667.453311][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.490360][ T5722] usb 4-1: Product: syz [ 667.518069][ T5722] usb 4-1: Manufacturer: syz [ 667.535511][ T5722] usb 4-1: SerialNumber: syz [ 667.564206][ T5722] usb 4-1: config 0 descriptor?? [ 667.743891][T11574] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 667.963997][T11574] usb 2-1: Using ep0 maxpacket: 16 [ 667.998825][T11574] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 668.053560][T11574] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 668.100651][T11574] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 668.137314][T11574] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.175133][T11574] usb 2-1: Product: syz [ 668.196688][T11574] usb 2-1: Manufacturer: syz [ 668.212925][T11574] usb 2-1: SerialNumber: syz [ 668.249934][T11574] usb 2-1: config 0 descriptor?? [ 668.259680][T12699] fuse: fd is not a fuse device [ 668.551315][T12699] xt_hashlimit: size too large, truncated to 1048576 [ 668.558834][T12699] xt_NFQUEUE: number of queues (10) out of range (got 65542) [ 669.065323][T12707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1763'. [ 669.699840][T12703] overlayfs: statfs failed on './file0' [ 669.722477][ T29] usb 2-1: USB disconnect, device number 63 [ 669.886714][T11574] usb 4-1: USB disconnect, device number 46 [ 671.442167][T12730] netlink: 'syz.2.1770': attribute type 10 has an invalid length. [ 671.526390][T12733] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1768'. [ 672.434179][ T5750] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 672.923959][ T5750] usb 1-1: Using ep0 maxpacket: 32 [ 672.932608][T12737] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1771'. [ 672.954209][ T5750] usb 1-1: too many configurations: 233, using maximum allowed: 8 [ 672.982003][ T5750] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 673.009379][ T5750] usb 1-1: can't read configurations, error -22 [ 673.163895][ T5750] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 673.436246][T12744] siw: device registration error -23 [ 673.449787][T12732] loop5: detected capacity change from 0 to 2640 [ 673.523869][T10789] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 673.577751][T12732] buffer_io_error: 321 callbacks suppressed [ 673.577771][T12732] Buffer I/O error on dev loop5, logical block 0, async page read [ 673.621428][T12732] Buffer I/O error on dev loop5, logical block 0, async page read [ 673.631201][T12732] Buffer I/O error on dev loop5, logical block 0, async page read [ 673.641292][T12732] Buffer I/O error on dev loop5, logical block 0, async page read [ 673.643816][ T5750] usb 1-1: Using ep0 maxpacket: 32 [ 673.658467][T12732] Buffer I/O error on dev loop5, logical block 0, async page read [ 673.676814][T12732] Buffer I/O error on dev loop5, logical block 0, async page read [ 673.695715][ T5750] usb 1-1: too many configurations: 233, using maximum allowed: 8 [ 673.697101][T12732] Buffer I/O error on dev loop5, logical block 0, async page read [ 673.737810][ T5750] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 673.761985][T10789] usb 2-1: config 255 has too many interfaces: 224, using maximum allowed: 32 [ 673.774632][T12732] Buffer I/O error on dev loop5, logical block 0, async page read [ 673.784001][ T5750] usb 1-1: can't read configurations, error -22 [ 673.795179][T10789] usb 2-1: config 255 has 1 interface, different from the descriptor's value: 224 [ 673.809239][ T5750] usb usb1-port1: attempt power cycle [ 673.833862][T10789] usb 2-1: config 255 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 673.840885][T12732] ldm_validate_partition_table(): Disk read failed. [ 673.855274][T12732] Buffer I/O error on dev loop5, logical block 0, async page read [ 673.864227][T12732] Buffer I/O error on dev loop5, logical block 0, async page read [ 673.876738][T12732] Dev loop5: unable to read RDB block 0 [ 673.894395][T10789] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 673.916755][T10789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.936327][T10789] usb 2-1: Product: syz [ 673.950664][T12732] loop5: unable to read partition table [ 673.950924][T10789] usb 2-1: Manufacturer: syz [ 673.984033][T10789] usb 2-1: SerialNumber: syz [ 673.994079][T12732] loop_reread_partitions: partition scan of loop5 (3 ) failed (rc=-5) [ 674.030072][T10789] uvcvideo 2-1:255.0: Found UVC 0.00 device syz (18ec:3288) [ 674.054790][T10789] uvcvideo 2-1:255.0: No valid video chain found. [ 674.183816][ T5750] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 674.276416][ T5750] usb 1-1: device descriptor read/8, error -71 [ 674.386002][T10789] usb 2-1: USB disconnect, device number 64 [ 675.224186][T12764] lo speed is unknown, defaulting to 1000 [ 675.231299][T12764] lo speed is unknown, defaulting to 1000 [ 675.581631][T12756] syz.4.1772 (12756): drop_caches: 2 [ 675.615532][ T10] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 675.824922][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 675.860842][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 675.912015][ T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 675.939536][ T10] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 675.970795][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.009929][ T10] usb 2-1: Product: syz [ 676.031897][ T10] usb 2-1: Manufacturer: syz [ 676.046178][ T10] usb 2-1: SerialNumber: syz [ 676.070228][ T10] usb 2-1: config 0 descriptor?? [ 676.767284][T12779] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 678.406601][T12783] overlayfs: statfs failed on './file0' [ 678.588127][T11574] usb 2-1: USB disconnect, device number 65 [ 680.288680][T12819] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1793'. [ 680.449213][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 682.737386][ T30] audit: type=1400 audit(1783885958.102:1107): avc: denied { write } for pid=12836 comm="syz.0.1800" name="file0" dev="tmpfs" ino=1801 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 683.019643][ T30] audit: type=1400 audit(1783885958.102:1108): avc: denied { open } for pid=12836 comm="syz.0.1800" path="/333/file0" dev="tmpfs" ino=1801 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 683.231230][ T30] audit: type=1400 audit(1783885958.142:1109): avc: denied { ioctl } for pid=12836 comm="syz.0.1800" path="/333/file0" dev="tmpfs" ino=1801 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 767.373968][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 788.323688][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 788.330657][ C0] rcu: 1-...!: (1 GPs behind) idle=a304/1/0x4000000000000000 softirq=67394/67396 fqs=1 [ 788.341410][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P12702/1:b..l P12654/1:b..l P4977/1:b..l [ 788.351800][ C0] rcu: (detected by 0, t=10506 jiffies, g=72305, q=516 ncpus=2) [ 788.359506][ C0] Sending NMI from CPU 0 to CPUs 1: [ 788.359536][ C1] NMI backtrace for cpu 1 [ 788.359552][ C1] CPU: 1 UID: 0 PID: 12841 Comm: syz.3.1799 Tainted: G L syzkaller #0 PREEMPT(full) [ 788.359572][ C1] Tainted: [L]=SOFTLOCKUP [ 788.359577][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 788.359586][ C1] RIP: 0010:lock_acquire+0x15d/0x370 [ 788.359610][ C1] Code: 0d 6c f6 3c 0f 85 c9 0f 84 bd 00 00 00 65 8b 05 c9 24 7e 12 85 c0 0f 85 ae 00 00 00 65 48 8b 05 01 de 7d 12 8b 90 9c 0b 00 00 <85> d2 0f 85 98 00 00 00 9c 8f 04 24 fa 48 c7 c7 9f 96 29 8e e8 3a [ 788.359622][ C1] RSP: 0018:ffffc90000a08d70 EFLAGS: 00000046 [ 788.359635][ C1] RAX: ffff88802f54a540 RBX: 0000000000000000 RCX: 0000000000000001 [ 788.359644][ C1] RDX: 0000000000000000 RSI: ffffffff89c700b8 RDI: fffffbfff1d7cc20 [ 788.359653][ C1] RBP: ffffffff8ebe6100 R08: 0000000000000000 R09: 0000000000000000 [ 788.359661][ C1] R10: ffff8880292d12ab R11: 0000000000000000 R12: 0000000000000002 [ 788.359669][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 788.359678][ C1] FS: 00007fbcaf3b46c0(0000) GS:ffff888123eeb000(0000) knlGS:0000000000000000 [ 788.359692][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 788.359702][ C1] CR2: 00007f9c3175da08 CR3: 00000000735ff000 CR4: 00000000003526f0 [ 788.359710][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 788.359718][ C1] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 788.359726][ C1] Call Trace: [ 788.359732][ C1] [ 788.359740][ C1] ? advance_sched+0x6a2/0xd20 [ 788.359757][ C1] advance_sched+0x718/0xd20 [ 788.359769][ C1] ? advance_sched+0x707/0xd20 [ 788.359783][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 788.359801][ C1] ? __pfx_advance_sched+0x10/0x10 [ 788.359814][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 788.359837][ C1] hrtimer_interrupt+0x3e5/0x940 [ 788.359860][ C1] __sysvec_apic_timer_interrupt+0x109/0x470 [ 788.359882][ C1] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 788.359903][ C1] [ 788.359907][ C1] [ 788.359912][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 788.359929][ C1] RIP: 0010:write_comp_data+0x3a/0x90 [ 788.359944][ C1] Code: 65 48 8b 3d f0 7b 59 12 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 00 ff 00 74 05 c3 cc cc cc cc 8b 87 24 17 00 00 85 c0 74 f1 <8b> 87 f8 16 00 00 83 f8 03 75 e6 48 8b 87 00 17 00 00 8b bf fc 16 [ 788.359956][ C1] RSP: 0018:ffffc900034f79f8 EFLAGS: 00000246 [ 788.359967][ C1] RAX: 0000000080000001 RBX: 0000000000000000 RCX: ffffffff81fd45bd [ 788.359976][ C1] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff88802f54a540 [ 788.359985][ C1] RBP: ffff8880b8443680 R08: 0000000000000005 R09: 0000000000000000 [ 788.359993][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 788.360001][ C1] R13: ffffed10170886d1 R14: 0000000000000001 R15: ffff8880b853c880 [ 788.360013][ C1] ? smp_call_function_many_cond+0x5ad/0x16c0 [ 788.360032][ C1] smp_call_function_many_cond+0x5ad/0x16c0 [ 788.360047][ C1] ? __pfx_retrigger_next_event+0x10/0x10 [ 788.360067][ C1] ? clock_was_set+0x1c3/0x850 [ 788.360086][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 788.360104][ C1] ? mark_held_locks+0x40/0x70 [ 788.360118][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 788.360137][ C1] clock_was_set+0x61c/0x850 [ 788.360158][ C1] ? __pfx_clock_was_set+0x10/0x10 [ 788.360176][ C1] ? __lock_acquire+0x49f/0x1a40 [ 788.360191][ C1] do_adjtimex+0x302/0x370 [ 788.360209][ C1] ? __pfx_do_adjtimex+0x10/0x10 [ 788.360229][ C1] ? __pfx_posix_clock_realtime_adj+0x10/0x10 [ 788.360248][ C1] __do_sys_clock_adjtime+0x177/0x290 [ 788.360265][ C1] ? __pfx___do_sys_clock_adjtime+0x10/0x10 [ 788.360283][ C1] ? __pfx_do_futex+0x10/0x10 [ 788.360308][ C1] ? __sys_socketpair+0x493/0x5b0 [ 788.360335][ C1] do_syscall_64+0x115/0x870 [ 788.360354][ C1] ? clear_bhb_loop+0x40/0x90 [ 788.360369][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.360382][ C1] RIP: 0033:0x7fbcb119de59 [ 788.360394][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 788.360406][ C1] RSP: 002b:00007fbcaf3b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 [ 788.360418][ C1] RAX: ffffffffffffffda RBX: 00007fbcb1426180 RCX: 00007fbcb119de59 [ 788.360427][ C1] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000000 [ 788.360435][ C1] RBP: 00007fbcb1233e6f R08: 0000000000000000 R09: 0000000000000000 [ 788.360443][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 788.360450][ C1] R13: 00007fbcb1426218 R14: 00007fbcb1426180 R15: 00007ffedea04d78 [ 788.360464][ C1] [ 788.360528][ C0] task:udevd state:R running task stack:23480 pid:4977 tgid:4977 ppid:1 task_flags:0x400140 flags:0x00080000 [ 788.833079][ C0] Call Trace: [ 788.836347][ C0] [ 788.839272][ C0] __schedule+0x125c/0x6730 [ 788.843774][ C0] ? __pfx_clockevents_program_event+0x10/0x10 [ 788.849942][ C0] ? __pfx___schedule+0x10/0x10 [ 788.854790][ C0] ? irqentry_exit+0x24d/0xa00 [ 788.859555][ C0] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 788.865612][ C0] preempt_schedule_notrace+0x5f/0xd0 [ 788.870980][ C0] preempt_schedule_notrace_thunk+0x16/0x30 [ 788.876865][ C0] rcu_is_watching+0x8e/0xc0 [ 788.881453][ C0] unwind_next_frame+0x745/0x2090 [ 788.886479][ C0] ? ksys_write+0x12a/0x250 [ 788.890984][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 788.897138][ C0] arch_stack_walk+0x94/0xf0 [ 788.901727][ C0] ? do_syscall_64+0x115/0x870 [ 788.906488][ C0] ? kobject_uevent_env+0x2e2/0x18b0 [ 788.911765][ C0] stack_trace_save+0x8e/0xc0 [ 788.916443][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 788.921815][ C0] ? __lock_acquire+0x49f/0x1a40 [ 788.926741][ C0] ? kobject_uevent_env+0x2d8/0x18b0 [ 788.932034][ C0] kasan_save_stack+0x30/0x50 [ 788.936702][ C0] ? kasan_save_stack+0x30/0x50 [ 788.941542][ C0] ? kasan_save_track+0x14/0x30 [ 788.946382][ C0] ? kasan_save_free_info+0x3b/0x70 [ 788.951572][ C0] ? __kasan_slab_free+0x5f/0x80 [ 788.956498][ C0] ? kfree+0x22b/0x6c0 [ 788.960562][ C0] ? kobject_uevent_env+0x2e2/0x18b0 [ 788.965838][ C0] ? kobject_synth_uevent+0x6f0/0x7d0 [ 788.971201][ C0] ? uevent_store+0x24/0x50 [ 788.975700][ C0] ? dev_attr_store+0x58/0x80 [ 788.980368][ C0] ? sysfs_kf_write+0xf2/0x150 [ 788.985123][ C0] ? kernfs_fop_write_iter+0x3e0/0x5f0 [ 788.990572][ C0] ? vfs_write+0x6ac/0x1050 [ 788.995070][ C0] ? ksys_write+0x12a/0x250 [ 788.999601][ C0] kasan_save_track+0x14/0x30 [ 789.004269][ C0] kasan_save_free_info+0x3b/0x70 [ 789.009290][ C0] __kasan_slab_free+0x5f/0x80 [ 789.014044][ C0] ? kobject_uevent_env+0x280/0x18b0 [ 789.019322][ C0] kfree+0x22b/0x6c0 [ 789.023216][ C0] kobject_uevent_env+0x2e2/0x18b0 [ 789.028329][ C0] kobject_synth_uevent+0x6f0/0x7d0 [ 789.033526][ C0] ? __pfx_kobject_synth_uevent+0x10/0x10 [ 789.039243][ C0] ? find_held_lock+0x2b/0x80 [ 789.043919][ C0] ? __pfx_uevent_store+0x10/0x10 [ 789.048941][ C0] uevent_store+0x24/0x50 [ 789.053268][ C0] dev_attr_store+0x58/0x80 [ 789.057763][ C0] ? __pfx_dev_attr_store+0x10/0x10 [ 789.062961][ C0] sysfs_kf_write+0xf2/0x150 [ 789.067548][ C0] kernfs_fop_write_iter+0x3e0/0x5f0 [ 789.072821][ C0] ? __pfx_sysfs_kf_write+0x10/0x10 [ 789.078015][ C0] vfs_write+0x6ac/0x1050 [ 789.082343][ C0] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 789.088143][ C0] ? __pfx_vfs_write+0x10/0x10 [ 789.092906][ C0] ? __pfx___do_sys_newfstat+0x10/0x10 [ 789.098367][ C0] ksys_write+0x12a/0x250 [ 789.102695][ C0] ? __pfx_ksys_write+0x10/0x10 [ 789.107550][ C0] do_syscall_64+0x115/0x870 [ 789.112166][ C0] ? clear_bhb_loop+0x40/0x90 [ 789.116838][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.122723][ C0] RIP: 0033:0x7f002d0a7407 [ 789.127125][ C0] RSP: 002b:00007ffcea003280 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 789.135540][ C0] RAX: ffffffffffffffda RBX: 00007f002d78e880 RCX: 00007f002d0a7407 [ 789.143501][ C0] RDX: 0000000000000007 RSI: 0000559bdf69f060 RDI: 000000000000000c [ 789.151457][ C0] RBP: 0000559bdf69f060 R08: 0000000000000000 R09: 0000000000000000 [ 789.159414][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000007 [ 789.167371][ C0] R13: 0000559bdf6981e0 R14: 00007f002d1efea0 R15: 00007ffcea0035c0 [ 789.175430][ C0] [ 789.178437][ C0] task:syz.3.1746 state:R running task stack:22856 pid:12654 tgid:12654 ppid:5607 task_flags:0x40064c flags:0x00080001 [ 789.191910][ C0] Call Trace: [ 789.195176][ C0] [ 789.198097][ C0] __schedule+0x125c/0x6730 [ 789.202609][ C0] ? __pfx___schedule+0x10/0x10 [ 789.207455][ C0] ? rcu_is_watching+0x12/0xc0 [ 789.212215][ C0] preempt_schedule_irq+0x50/0x90 [ 789.217236][ C0] irqentry_exit+0x205/0xa00 [ 789.221827][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 789.227797][ C0] RIP: 0010:unwind_next_frame+0x1500/0x2090 [ 789.233689][ C0] Code: ff 48 ba 00 00 00 00 00 fc ff df 48 8d 79 02 48 89 f8 48 c1 e8 03 0f b6 34 10 48 8d 41 03 49 89 c0 49 c1 e8 03 41 0f b6 14 10 <49> 89 f8 41 83 e0 07 44 38 c6 41 0f 9e c0 40 84 f6 40 0f 95 c6 41 [ 789.253288][ C0] RSP: 0018:ffffc9001068ef30 EFLAGS: 00000a02 [ 789.259347][ C0] RAX: ffffffff91d57901 RBX: 0000000000000001 RCX: ffffffff91d578fe [ 789.267305][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff91d57900 [ 789.275261][ C0] RBP: ffffc9001068efe8 R08: 1ffffffff23aaf20 R09: 0000000000000007 [ 789.283218][ C0] R10: 0000000000000200 R11: 0000000000019569 R12: ffffc9001068eff0 [ 789.291178][ C0] R13: ffffc9001068efa0 R14: ffffc9001068fa30 R15: ffffc9001068efd4 [ 789.299151][ C0] ? dentry_unlink_inode+0x284/0x470 [ 789.304432][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 789.310583][ C0] arch_stack_walk+0x94/0xf0 [ 789.315173][ C0] ? dentry_kill+0x25d/0xc20 [ 789.319758][ C0] stack_trace_save+0x8e/0xc0 [ 789.324438][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 789.329811][ C0] ? __lock_acquire+0x49f/0x1a40 [ 789.334739][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 789.339936][ C0] save_stack+0x162/0x1e0 [ 789.344256][ C0] ? __pfx_save_stack+0x10/0x10 [ 789.349095][ C0] ? free_unref_folios+0xa44/0x1710 [ 789.354290][ C0] ? folios_put_refs+0x585/0xaa0 [ 789.359221][ C0] ? shmem_undo_range+0x5e5/0x1570 [ 789.364326][ C0] ? shmem_evict_inode+0x3a5/0xbe0 [ 789.369434][ C0] ? evict+0x3c2/0xad0 [ 789.373492][ C0] ? iput.part.0+0x989/0x1050 [ 789.378157][ C0] ? iput+0x35/0x40 [ 789.381954][ C0] ? dentry_unlink_inode+0x284/0x470 [ 789.387232][ C0] ? page_ext_put+0x3e/0xd0 [ 789.391733][ C0] __reset_page_owner+0x84/0x190 [ 789.396668][ C0] free_unref_folios+0xa44/0x1710 [ 789.401694][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 789.407498][ C0] folios_put_refs+0x585/0xaa0 [ 789.412261][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 789.417545][ C0] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 789.423873][ C0] shmem_undo_range+0x5e5/0x1570 [ 789.428823][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 789.434245][ C0] shmem_evict_inode+0x3a5/0xbe0 [ 789.439183][ C0] ? inode_wait_for_writeback+0x171/0x390 [ 789.444898][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 789.450356][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 789.456423][ C0] ? find_held_lock+0x2b/0x80 [ 789.461110][ C0] ? evict+0x37e/0xad0 [ 789.465170][ C0] ? evict+0x37e/0xad0 [ 789.469230][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 789.474685][ C0] evict+0x3c2/0xad0 [ 789.478576][ C0] ? __pfx_evict+0x10/0x10 [ 789.482988][ C0] ? iput.part.0+0x981/0x1050 [ 789.487662][ C0] iput.part.0+0x989/0x1050 [ 789.492172][ C0] iput+0x35/0x40 [ 789.495799][ C0] dentry_unlink_inode+0x284/0x470 [ 789.500906][ C0] dentry_kill+0x25d/0xc20 [ 789.505318][ C0] dput.part.0+0xd7/0x240 [ 789.509639][ C0] dput+0x1f/0x30 [ 789.513266][ C0] __fput+0x519/0xb50 [ 789.517240][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 789.522432][ C0] task_work_run+0x150/0x240 [ 789.527014][ C0] ? __pfx_task_work_run+0x10/0x10 [ 789.532117][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 789.537314][ C0] do_exit+0x951/0x2ae0 [ 789.541473][ C0] ? __pfx_do_exit+0x10/0x10 [ 789.546055][ C0] ? __pfx_proc_coredump_connector+0x10/0x10 [ 789.552038][ C0] do_group_exit+0xd5/0x2a0 [ 789.556538][ C0] get_signal+0x1ec7/0x21e0 [ 789.561042][ C0] ? __pfx_get_signal+0x10/0x10 [ 789.565891][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 789.571429][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 789.577585][ C0] irqentry_exit+0x402/0xa00 [ 789.582177][ C0] asm_exc_page_fault+0x26/0x30 [ 789.587016][ C0] RIP: 0033:0x7fbcb119de61 [ 789.591420][ C0] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 789.597477][ C0] RAX: 0000000000000000 RBX: 00007fbcb1426090 RCX: 00007fbcb119de59 [ 789.605433][ C0] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 789.613391][ C0] RBP: 00007fbcb1233e6f R08: 0000000000000000 R09: 0000000000000000 [ 789.621349][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 789.629313][ C0] R13: 00007fbcb1426128 R14: 00007fbcb1426090 R15: 00007ffedea04d78 [ 789.637660][ C0] [ 789.640674][ C0] task:syz.2.1762 state:R running task stack:23016 pid:12702 tgid:12702 ppid:5621 task_flags:0x40064c flags:0x00080001 [ 789.654238][ C0] Call Trace: [ 789.657505][ C0] [ 789.660429][ C0] __schedule+0x125c/0x6730 [ 789.664930][ C0] ? ktime_get+0x9f/0x320 [ 789.669248][ C0] ? ktime_get+0x1a4/0x320 [ 789.673666][ C0] ? __pfx___schedule+0x10/0x10 [ 789.678511][ C0] ? rcu_is_watching+0x12/0xc0 [ 789.683271][ C0] preempt_schedule_irq+0x50/0x90 [ 789.688289][ C0] irqentry_exit+0x205/0xa00 [ 789.692888][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 789.698860][ C0] RIP: 0010:__orc_find+0x97/0xf0 [ 789.703797][ C0] Code: b6 34 0a 48 89 da 83 e2 07 83 c2 03 40 38 f2 7c 05 40 84 f6 75 4b 48 63 13 48 01 da 49 39 d5 73 af 4c 8d 63 fc 49 39 ec 73 b2 <4d> 29 f7 49 c1 ff 02 4b 8d 14 7f 48 8d 04 50 48 83 c4 08 5b 5d 41 [ 789.723480][ C0] RSP: 0018:ffffc9001a7a6ef0 EFLAGS: 00000297 [ 789.729537][ C0] RAX: ffffffff91d09c0a RBX: ffffffff91437080 RCX: dffffc0000000000 [ 789.737497][ C0] RDX: ffffffff825584e7 RSI: 0000000000000000 RDI: ffffffff91437080 [ 789.745478][ C0] RBP: ffffffff91437084 R08: ffffffff91d09c10 R09: 0000000000000007 [ 789.753437][ C0] R10: 0000000000000200 R11: 0000000000015585 R12: ffffffff91437080 [ 789.761395][ C0] R13: ffffffff825585d4 R14: ffffffff91437080 R15: ffffffff91437080 [ 789.769355][ C0] ? shmem_evict_inode+0x3a4/0xbe0 [ 789.774470][ C0] ? shmem_evict_inode+0x2b7/0xbe0 [ 789.779587][ C0] ? shmem_evict_inode+0x3a4/0xbe0 [ 789.784693][ C0] unwind_next_frame+0x2ec/0x2090 [ 789.789730][ C0] ? shmem_evict_inode+0x3a5/0xbe0 [ 789.794847][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 789.800998][ C0] arch_stack_walk+0x94/0xf0 [ 789.805587][ C0] ? shmem_evict_inode+0x3a5/0xbe0 [ 789.810700][ C0] stack_trace_save+0x8e/0xc0 [ 789.815374][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 789.820745][ C0] ? __lock_acquire+0x49f/0x1a40 [ 789.825678][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 789.830874][ C0] save_stack+0x162/0x1e0 [ 789.835195][ C0] ? __pfx_save_stack+0x10/0x10 [ 789.840034][ C0] ? free_unref_folios+0xa44/0x1710 [ 789.845228][ C0] ? folios_put_refs+0x585/0xaa0 [ 789.850176][ C0] ? shmem_undo_range+0x5e5/0x1570 [ 789.855286][ C0] ? shmem_evict_inode+0x3a5/0xbe0 [ 789.860403][ C0] ? page_ext_put+0x3e/0xd0 [ 789.864905][ C0] __reset_page_owner+0x84/0x190 [ 789.869841][ C0] free_unref_folios+0xa44/0x1710 [ 789.874869][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 789.880672][ C0] folios_put_refs+0x585/0xaa0 [ 789.885435][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 789.890720][ C0] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 789.897050][ C0] shmem_undo_range+0x5e5/0x1570 [ 789.901994][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 789.907409][ C0] ? percpu_counter_add_batch+0xb9/0x230 [ 789.913037][ C0] shmem_evict_inode+0x3a5/0xbe0 [ 789.917973][ C0] ? inode_wait_for_writeback+0x171/0x390 [ 789.923690][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 789.929148][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 789.935218][ C0] ? find_held_lock+0x2b/0x80 [ 789.939893][ C0] ? evict+0x37e/0xad0 [ 789.943953][ C0] ? evict+0x37e/0xad0 [ 789.948018][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 789.953474][ C0] evict+0x3c2/0xad0 [ 789.957366][ C0] ? __pfx_evict+0x10/0x10 [ 789.961790][ C0] ? iput.part.0+0x981/0x1050 [ 789.966467][ C0] iput.part.0+0x989/0x1050 [ 789.970967][ C0] iput+0x35/0x40 [ 789.974602][ C0] dentry_unlink_inode+0x284/0x470 [ 789.979706][ C0] dentry_kill+0x25d/0xc20 [ 789.984120][ C0] dput.part.0+0xd7/0x240 [ 789.988445][ C0] dput+0x1f/0x30 [ 789.992075][ C0] __fput+0x519/0xb50 [ 789.996053][ C0] task_work_run+0x150/0x240 [ 790.000638][ C0] ? __pfx_task_work_run+0x10/0x10 [ 790.005741][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 790.010944][ C0] do_exit+0x951/0x2ae0 [ 790.015101][ C0] ? __pfx_do_exit+0x10/0x10 [ 790.019684][ C0] ? __pfx_proc_coredump_connector+0x10/0x10 [ 790.025665][ C0] do_group_exit+0xd5/0x2a0 [ 790.030166][ C0] get_signal+0x1ec7/0x21e0 [ 790.034668][ C0] ? __pfx_get_signal+0x10/0x10 [ 790.039517][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 790.045055][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 790.051208][ C0] irqentry_exit+0x402/0xa00 [ 790.055798][ C0] asm_exc_page_fault+0x26/0x30 [ 790.060638][ C0] RIP: 0033:0x7f9c3099de61 [ 790.065042][ C0] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 790.071096][ C0] RAX: 0000000000000000 RBX: 00007f9c30c26090 RCX: 00007f9c3099de59 [ 790.079050][ C0] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 790.087008][ C0] RBP: 00007f9c30a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 790.094969][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 790.102929][ C0] R13: 00007f9c30c26128 R14: 00007f9c30c26090 R15: 00007ffdbd366248 [ 790.110904][ C0] [ 790.113912][ C0] rcu: rcu_preempt kthread starved for 10500 jiffies! g72305 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 790.125090][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 790.135040][ C0] rcu: RCU grace-period kthread stack dump: [ 790.140910][ C0] task:rcu_preempt state:R running task stack:27528 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 790.154388][ C0] Call Trace: [ 790.157656][ C0] [ 790.160576][ C0] __schedule+0x125c/0x6730 [ 790.165091][ C0] ? __pfx___schedule+0x10/0x10 [ 790.169945][ C0] ? find_held_lock+0x2b/0x80 [ 790.174631][ C0] ? schedule+0x225/0x2c0 [ 790.178959][ C0] schedule+0xdd/0x2c0 [ 790.183030][ C0] schedule_timeout+0x127/0x280 [ 790.187874][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 790.193237][ C0] ? __pfx_process_timeout+0x10/0x10 [ 790.198532][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 790.204333][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 790.209790][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 790.214546][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 790.219826][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 790.224754][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 790.229945][ C0] ? rcu_is_watching+0x12/0xc0 [ 790.234705][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 790.240519][ C0] rcu_gp_kthread+0x179/0x230 [ 790.245190][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 790.250378][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 790.256183][ C0] ? __kthread_parkme+0x18c/0x230 [ 790.261205][ C0] ? kthread+0x13a/0x450 [ 790.265448][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 790.270633][ C0] kthread+0x370/0x450 [ 790.274702][ C0] ? __pfx_kthread+0x10/0x10 [ 790.279292][ C0] ret_from_fork+0x72b/0xd50 [ 790.283880][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 790.288989][ C0] ? __switch_to+0x800/0x10f0 [ 790.293661][ C0] ? __pfx_kthread+0x10/0x10 [ 790.298248][ C0] ret_from_fork_asm+0x1a/0x30 [ 790.303019][ C0] [ 790.306024][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 790.312339][ C0] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 790.323172][ C0] Tainted: [L]=SOFTLOCKUP [ 790.327480][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 790.337524][ C0] Workqueue: events_unbound toggle_allocation_gate [ 790.344023][ C0] RIP: 0010:smp_call_function_many_cond+0x587/0x16c0 [ 790.350689][ C0] Code: 54 48 b8 00 00 00 00 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 c9 95 0c 00 90 41 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 2c 0f 00 00 8b 45 [ 790.370285][ C0] RSP: 0000:ffffc90000117878 EFLAGS: 00000293 [ 790.376340][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff81fd45bd [ 790.384303][ C0] RDX: ffff88801e6aca80 RSI: ffffffff81fd4597 RDI: ffff88801e6aca80 [ 790.392261][ C0] RBP: ffff8880b8541240 R08: 0000000000000005 R09: 0000000000000000 [ 790.400219][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 790.408176][ C0] R13: ffffed10170a8249 R14: 0000000000000001 R15: ffff8880b843c880 [ 790.416158][ C0] FS: 0000000000000000(0000) GS:ffff888123deb000(0000) knlGS:0000000000000000 [ 790.425088][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 790.431664][ C0] CR2: 00007f9c30978240 CR3: 000000000e992000 CR4: 00000000003526f0 [ 790.439625][ C0] Call Trace: [ 790.442900][ C0] [ 790.445821][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 790.450849][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 790.457167][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 790.462541][ C0] ? __pfx___text_poke+0x10/0x10 [ 790.467477][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 790.472499][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 790.477605][ C0] ? __kmalloc_cache_node_noprof+0xab/0x6c0 [ 790.483488][ C0] smp_text_poke_batch_finish+0x337/0xc60 [ 790.489198][ C0] ? __kmalloc_cache_node_noprof+0xab/0x6c0 [ 790.495083][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 790.501316][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 790.507560][ C0] ? find_held_lock+0x2b/0x80 [ 790.512242][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 790.518210][ C0] jump_label_update+0x37a/0x550 [ 790.523155][ C0] static_key_enable_cpuslocked+0x1bc/0x270 [ 790.529040][ C0] static_key_enable+0x1a/0x20 [ 790.533797][ C0] toggle_allocation_gate+0xfe/0x2d0 [ 790.539078][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 790.544968][ C0] ? rcu_is_watching+0x12/0xc0 [ 790.549729][ C0] process_one_work+0xa23/0x1940 [ 790.554668][ C0] ? __pfx_process_one_work+0x10/0x10 [ 790.560037][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 790.565943][ C0] worker_thread+0x5ef/0xe50 [ 790.570531][ C0] ? kthread+0x13a/0x450 [ 790.574774][ C0] ? __pfx_worker_thread+0x10/0x10 [ 790.579875][ C0] kthread+0x370/0x450 [ 790.583939][ C0] ? __pfx_kthread+0x10/0x10 [ 790.588526][ C0] ret_from_fork+0x72b/0xd50 [ 790.593109][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 790.598214][ C0] ? __switch_to+0x800/0x10f0 [ 790.602888][ C0] ? __pfx_kthread+0x10/0x10 [ 790.607474][ C0] ret_from_fork_asm+0x1a/0x30 [ 790.612246][ C0]