last executing test programs: 2m32.212847422s ago: executing program 3 (id=477): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async, rerun: 64) r0 = getpid() (rerun: 64) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (rerun: 32) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = getpid() process_vm_writev(r3, &(0x7f0000001800)=[{&(0x7f00000001c0)=""/62, 0x3e}, {0x0}, {&(0x7f00000003c0)=""/136, 0x88}, {&(0x7f0000000480)=""/133, 0x85}, {&(0x7f0000000580)=""/168, 0xa8}, {&(0x7f0000000640)=""/159, 0x9f}, {&(0x7f0000000700)=""/96, 0x60}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/75, 0x4b}], 0x9, &(0x7f0000001940)=[{&(0x7f0000001980)=""/36, 0x24}, {0x0}], 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (rerun: 64) 2m30.536263428s ago: executing program 3 (id=481): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r5, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x1000000) close_range(r3, 0xffffffffffffffff, 0x0) 2m29.23655545s ago: executing program 3 (id=489): socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x34d000, 0x101f, 0x5, 0x1}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x7, &(0x7f0000000300)=[{0x2, 0x7, 0x95, 0x4584}, {0x3ff, 0x10, 0x6, 0xd}, {0x0, 0xb, 0x5, 0xe66}, {0x0, 0xf, 0x36, 0x7fff}, {0x0, 0x4a, 0x4, 0xd649}, {0x6, 0x78, 0x2, 0x401}, {0xf13c, 0x7, 0x2, 0x8001}]}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010000000000000000000a00000000004e2100000000ffffffff0100000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="ddf6870c03000011000000b9ee00"/24], 0x54}, 0x1, 0x0, 0x0, 0x44044}, 0x20004010) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) unshare(0x40020000) 2m27.787347607s ago: executing program 3 (id=493): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="14000000000000002900000034000000040000000000000014000000000000002900000034000000fdffffff0000000060000000000000002900000004000000040800000000000007100000000102099f000800000000000000fe00801309e12e5f0b6bdcf72f2ec7008a15fa88b025e000010005020bf4c110fc02000000000000000000000000000000000000feff1300000000000000290000003400000000000000000000004e0000000000000029000000360000005e0500000000ff1950d650847249ad288702ead0d654b985e8908defb7ec6c5ff10001"], 0x108}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000000314010000000120000000000900020073797a3000000000080041007278"], 0x38}, 0x1, 0x0, 0x0, 0x808}, 0x4004000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0}}], 0x1, 0x24088804) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) unshare(0x66000080) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'macvlan0\x00'}) gettid() socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b19, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) 2m27.167245153s ago: executing program 3 (id=494): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x2d51, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = syz_io_uring_setup(0x1717, &(0x7f00000020c0)={0x0, 0x4, 0x10000, 0x1, 0xd5}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000380)={&(0x7f0000001000), 0x4}, 0x1) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x49, 0x2, r1, 0x0, 0x0, 0x0, 0x40000000, 0x1}) io_uring_enter(r2, 0x27e2, 0x0, 0xf, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002e80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000640)={0x34, r8, 0x1, 0x30bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048044}, 0x20004014) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, r9, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x34}}, 0x44004) madvise(&(0x7f00000f4000/0x3000)=nil, 0x3000, 0x9) clock_settime(0x100000000000000, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000005c0)={0x2c, &(0x7f0000000040)={0x0, 0xf, 0x7, {0x7, 0x24, "764be4eeec"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0x3, "0ef4e0"}, 0x0}) syz_usb_connect$rtl8150(0x1, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) 2m23.171851222s ago: executing program 3 (id=510): r0 = socket(0x2, 0x5, 0xffffffff) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) r2 = socket(0x2, 0x1, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x100) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r4) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0xfffb, 0x9}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={r5, 0x14000000}, 0x8) ioctl$NBD_SET_BLKSIZE(r3, 0xab01, 0x4a19) ioctl$NBD_DO_IT(r3, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x100000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f0000000100)=0xfffffffb, 0x4) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1e) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) 2m12.619365581s ago: executing program 4 (id=546): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') sendfile(r1, r1, 0x0, 0x8) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000280)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) r3 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_FILES(r3, 0x20, &(0x7f0000000000)=[r3], 0x1) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0xffe0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x400, 0x20000008, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x4040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffe, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x6, 0xfffffffffffffffc, 0x57d, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x18a0, 0x6}}]}, {0x9495838e73e14d0d}, {0xc, 0x3}, {0xc}}}]}]}, 0xd8}}, 0x0) 2m11.849011277s ago: executing program 4 (id=549): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="03000000040000"], 0x50) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x204400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3d, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r2, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x18, 0x30, 0x25, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) close(r5) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000040)='.\x00', &(0x7f0000000080)='devtmpfs\x00', 0x1208c9b, 0x0) pread64(0xffffffffffffffff, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 2m10.5584902s ago: executing program 4 (id=555): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x80000) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, 0x0, 0x108) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000001700)={0x84, @rand_addr=0x64010102, 0x4e21, 0x1, 'nq\x00', 0x1, 0x100, 0x51}, 0x2c) close(0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x601c2, 0x0) open(0x0, 0x4c27e, 0x53) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8982, &(0x7f00000000c0)={0x8, 'dvmrp0\x00', {'bridge0\x00'}, 0x866}) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) 2m9.633295989s ago: executing program 4 (id=557): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0xa02, 0x0) r1 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x7fff, &(0x7f0000000300)=[{&(0x7f0000000180)="1a", 0x1}], 0x1}) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) fanotify_init(0x200, 0x0) gettid() timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) memfd_create(0x0, 0x3) io_uring_enter(r1, 0x5976, 0x9765, 0x2, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="d0325b"]) syz_usb_control_io$lan78xx(r0, &(0x7f0000000180)={0x14, &(0x7f0000000000)={0x20, 0xa, 0x84, {0x84, 0xa, "e7647a554d51113e327e508a10a57c496c50d21710433f0a450f5a45acf6f65fe3ce933716ae907be5ea8b26ea83aba248d00a0c26e27c6010c0fc1a8bad71efae49f5755e96f204002dbc7bc004ac3d7647946fe5814956538d58f9fbad899283b7f27026bed24c01ecedc21242ddba006d4bd29dcbdc7879044ec88d353c4e3638"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40d}}}, &(0x7f0000000400)={0x34, &(0x7f00000001c0)={0x20, 0x1, 0x30, "4eaa6d3edcaf60934fbd25d4aba97656e8b720a72f6bf5a40efd1a6216905ba6e50a3dc4132f920a23d694e685b253b2"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000002c0)={0xc0, 0xa1, 0x4, 0x2}, &(0x7f0000000100)={0x40, 0xa0, 0x4, 0x1c89}, &(0x7f00000003c0)={0xc0, 0xa2, 0x2f, "608c4059f38ccc112e4c7180dee2e5b849b57bc1b296496273f9a5f6f89aad76670eab3ed62b1ad33eba20d60667d5"}}) setsockopt$inet_udp_int(0xffffffffffffffff, 0x88, 0x1, &(0x7f0000000140), 0x4) write(0xffffffffffffffff, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a41", 0x12) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 2m7.988203471s ago: executing program 32 (id=510): r0 = socket(0x2, 0x5, 0xffffffff) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) r2 = socket(0x2, 0x1, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x100) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r4) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0xfffb, 0x9}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={r5, 0x14000000}, 0x8) ioctl$NBD_SET_BLKSIZE(r3, 0xab01, 0x4a19) ioctl$NBD_DO_IT(r3, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x100000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f0000000100)=0xfffffffb, 0x4) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1e) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) 2m6.076319069s ago: executing program 4 (id=573): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000002200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2145c89, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (fail_nth: 5) 2m5.376865811s ago: executing program 4 (id=575): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x100000000000000) 1m49.482174086s ago: executing program 33 (id=575): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x100000000000000) 12.434334765s ago: executing program 6 (id=957): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) gettid() r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r4, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x1000000) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002bc0)=@newsa={0xf0, 0x1a, 0x1, 0xfffffffe, 0xfd, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0x2, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0xfe, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xffffffbffffffffc, 0x4}, {0x10000000000009, 0x7, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}}, 0xf0}}, 0x844) 11.382623205s ago: executing program 6 (id=959): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10.298578658s ago: executing program 1 (id=966): openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x450401, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) ptrace$setsig(0x4203, r1, 0x6, &(0x7f00000000c0)={0x37, 0x1ff, 0x7}) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) tgkill(r1, r1, 0x29) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000060000000000000000000008018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0908000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff10010000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffff770000000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000180000084609f0ff76000000bf9800000000000056080000000018008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.909645297s ago: executing program 5 (id=967): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x23, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 9.724567412s ago: executing program 5 (id=969): sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0xac06) (async) socket$netlink(0x10, 0x3, 0x1) (async) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000000000, 0x0, &(0x7f0000000000)={0x0, 0x0}) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async, rerun: 64) r1 = syz_clone(0x4041400, &(0x7f0000000300)="cb533aec08610f0ee2cf4bc29fe4a94fcf7c1143c5d62b4008400d0f5f65b46dea3c83b0d13bd4d936251156b17b6f215603fe0ac21d861236b9afaebe37a1b3b7fcfd60bacacf1770d1bac143bc5331b691efcdd5379176ac99103d434195120e10913b5fdbbfd281a66fb3c05c5a8202c8b3c90a0d1876bfcc946dbf575b84c8320be185fbd41d97f4968b1d11aa25da2fd57562222d8e5688c567e87b1254984772be2dc71b228d00903a7342b7748c935f67fc2caba0e72b43252c1a501bcd1409d3c563e21dd4e5151d57ecb0726ee7acde51", 0xd5, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)="07a59f7661c315c1eee307552e1ca46af262a4a9dd749131a301fe6f76790439476ddd02b0398b908f86d79433716ca4a23902dce2203fa24b895c089d09681381e1e895484747f7d892bff7cbe77505b5768ecf019b623e052b286d5ebbee9e1eeaf32a102fbffe83bb442382c7c9277d1c700b4344caf8516bb9a25ca71d8aa62d4b4d7ac4852a") (rerun: 64) sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0xa) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0x3, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0xf0822c9bae0a6994, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) (async, rerun: 32) r4 = socket(0x2c, 0x2, 0x2000000) (rerun: 32) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0xa4, 0x5, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7, 0x10, 0xfffffffc, 0x10}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', r5, 0x0, 0x87, 0x7b, 0xfffffffd, 0x3a, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x80, 0x10, 0xfffffffc, 0x6}}) (async, rerun: 64) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x103a02, 0x0) (async, rerun: 64) madvise(&(0x7f00002e3000/0x12000)=nil, 0x12000, 0x4) (async, rerun: 64) syz_clone3(&(0x7f0000000240)={0x4c000000, 0x0, 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async, rerun: 64) lchown(&(0x7f0000000000)='./cgroup\x00', 0x0, 0xee01) 8.604288844s ago: executing program 2 (id=971): socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="050000000100", 0x6) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 8.485536171s ago: executing program 6 (id=972): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="14000000000000002900000034000000040000000000000014000000000000002900000034000000fdffffff0000000060000000000000002900000004000000040800000000000007100000000102099f000800000000000000fe00801309e12e5f0b6bdcf72f2ec7008a15fa88b025e000010005020bf4c110fc02000000000000000000000000000000000000feff1300000000000000290000003400000000000000000000004e0000000000000029000000360000005e0500000000ff1950d650847249ad288702ead0d654b985e8908defb7ec6c5ff10001"], 0x108}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000000314010000000120000000000900020073797a3000000000080041007278"], 0x38}, 0x1, 0x0, 0x0, 0x808}, 0x4004000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0}}], 0x1, 0x24088804) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) unshare(0x66000080) r4 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'macvlan0\x00'}) gettid() socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b19, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) 7.472295533s ago: executing program 2 (id=974): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fanotify_init(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000004c40)=""/102376, 0x18fe8) ioprio_set$pid(0x3, 0x0, 0x6000) socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x5) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) read$FUSE(r0, &(0x7f0000000c40)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000200)={0x50, 0x0, r3, {0x7, 0x2d, 0x0, 0x1002, 0xd6d, 0xc000, 0x2, 0x8, 0x0, 0x0, 0x2, 0x1000}}, 0x50) pipe(&(0x7f0000000540)={0xffffffffffffffff}) syz_io_uring_setup(0x7f30, &(0x7f0000000340)={0x0, 0x2b13, 0x10100, 0x0, 0x25c, 0x0, r4}, &(0x7f0000000180), &(0x7f0000000300)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) 6.831221082s ago: executing program 5 (id=975): openat$iommufd(0xffffffffffffff9c, 0x0, 0x366e18f12b24c7fc, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x3) r5 = epoll_create(0x7e) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r2}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair(0x8, 0x1, 0x4, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_J1939_FILTER(r8, 0x6b, 0x1, 0x0, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r8) sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20001000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r4, @ANYRES16=r9, @ANYBLOB="000428000000fedbdf25e3a7"], 0xcc}, 0x1, 0x0, 0x0, 0x8110}, 0x800) 6.525063135s ago: executing program 1 (id=976): openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f00000005c0)='#.S\xb2j\xcb\xa18:.)\xc7\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd5\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T[\r&\xf0z\xde\xc0\xf3\xcd\x9a\xae\xa8*v_(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ\x95|\xe5\xaa\x0e\xe7{\xd4T\x84\x83\x86\x9d', 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040), 0x6) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r4}, 0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$sock_bt_hci(r4, 0x400448e7, &(0x7f00000001c0)) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) 5.614950495s ago: executing program 1 (id=977): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x34d000, 0x101f, 0x5, 0x1}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x7, &(0x7f0000000300)=[{0x2, 0x7, 0x95, 0x4584}, {0x3ff, 0x10, 0x6, 0xd}, {0x0, 0xb, 0x5, 0xe66}, {0x0, 0xf, 0x36, 0x7fff}, {0x0, 0x4a, 0x4, 0xd649}, {0x6, 0x78, 0x2, 0x401}, {0xf13c, 0x7, 0x2, 0x8001}]}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010000000000000000000a00000000004e2100000000ffffffff0100000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="ddf6870c03000011000000b9ee00"/24], 0x54}, 0x1, 0x0, 0x0, 0x44044}, 0x20004010) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) unshare(0x40020000) 5.607577006s ago: executing program 0 (id=978): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, &(0x7f0000000440)=0xffffffff) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2d}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x4a}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x9c}, 0x1, 0x0, 0x0, 0x10010}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x20, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = socket(0x14, 0x4, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)=@delpolicy={0x230, 0x14, 0x1, 0x70bd25, 0x25dfdbfb, {{@in6=@loopback, @in=@broadcast, 0x4e22, 0x3, 0x4e20, 0x3, 0xa, 0xa0, 0xa0, 0x5c}, 0x6e6bbc, 0x1}, [@tmpl={0x104, 0x5, [{{@in6=@local, 0x4d6, 0x3c}, 0x0, @in6=@mcast1, 0x3500, 0x0, 0x2, 0x9f, 0x8, 0x8, 0x982}, {{@in=@loopback, 0x4d2, 0x6c}, 0x2, @in=@multicast1, 0x3504, 0x3, 0x3, 0x7, 0xe4, 0x5, 0x400}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d2, 0x33}, 0x2, @in=@broadcast, 0x3504, 0x2, 0x0, 0xf, 0x7, 0x8, 0x56}, {{@in6=@loopback, 0x4d3, 0x6c}, 0x2, @in=@broadcast, 0x3502, 0x3, 0x2, 0x9, 0x1000, 0x6, 0x7}]}, @replay_esn_val={0x28, 0x17, {0x3, 0x70bd25, 0x70bd27, 0x70bd2c, 0x70bd29, 0x8, [0x280, 0x5, 0x1]}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xffffff0e}, @replay_thresh={0x8, 0xb, 0x100}, @sec_ctx={0x4b, 0x8, {0x47, 0x8, 0x0, 0x4, 0x3f, "a999238ccda51f9d70fabdcaa94fcf27f23255e5598969f242ebd9e220fa8122cd38122c58b18da2622480053cd126ee7d7aebd56c57217d46aeb7fdc5e8a9"}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @address_filter={0x28, 0x1a, {@in=@private=0xa010100, @in=@loopback, 0xa, 0x6, 0x2}}, @address_filter={0x28, 0x1a, {@in6=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa, 0xfe, 0x9}}]}, 0x230}, 0x1, 0x0, 0x0, 0x884}, 0x400c000) 4.814507503s ago: executing program 6 (id=979): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x4, 0xc0, 0x49, 0x9}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001200010300000000fedbdf25020002004e234e200000000000000000c9cd00000000000000000000fcffffff0600000000000000", @ANYRES32=0x0, @ANYBLOB="0000000011000000ff05fff0000000000800030011000000f2d72ec6eff29a8a5d8e532c"], 0x54}, 0x1, 0x0, 0x0, 0x14}, 0x20000000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1d0, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@multicast1, @empty, 0x0, 0xffffff00, 0xc, 0x0, {@mac=@local, {[0xff, 0x80, 0x0, 0x1fe, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, 0xdfe, 0x2, 0x7, 0xe, 0xfa, 0x8a5c, 'batadv0\x00', 'team0\x00', {0xff}, {}, 0x0, 0x12}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x9}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xfff}}}, {{@arp={@multicast1, @remote, 0xff, 0xff000000, 0xa, 0x6, {@empty, {[0xff, 0xff, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff]}}, 0x1, 0x10, 0x8003, 0x5, 0x4, 0x9e, 'gre0\x00', 'wg0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @rand_addr=0x64010100, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x3, 0x1d}, &(0x7f00000000c0)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x64480000, 0x0, 0x0, 0x7, 0xa19, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008180)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x272, 0x0, 0x0, {0x40000, 0x0, 0x200000000000000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0, &(0x7f0000000780)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@dont_hash}, {@flag='async'}]}}) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r6, 0x0, 0x0, 0x0, 0x40002202, 0x1, {0x1}}) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000000)='\x00', 0x1) io_uring_enter(r7, 0x3516, 0x3e000000, 0x0, 0x0, 0x0) 4.269958791s ago: executing program 2 (id=980): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000077"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)={0x60, 0x17, 0x2, "8c0a"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x41}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.25792605s ago: executing program 1 (id=981): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000077"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)={0x60, 0x17, 0x2, "8c0a"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 4.135807334s ago: executing program 6 (id=982): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.822984139s ago: executing program 0 (id=983): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') sendfile(r1, r1, 0x0, 0x8) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000280)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x20, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0xffe0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x400, 0x20000008, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x4040) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffe, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x6, 0xfffffffffffffffc, 0x57d, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x18a0, 0x6}}]}, {0x9495838e73e14d0d}, {0xc, 0x3}, {0xc}}}]}]}, 0xd8}}, 0x0) 3.730401046s ago: executing program 5 (id=984): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000840)=ANY=[@ANYBLOB="6400000000001d0109004d000f80"], 0x64}}, 0x0) 3.536659305s ago: executing program 0 (id=985): socket$kcm(0xa, 0x5, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000000), 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) unshare(0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r7, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 3.263685953s ago: executing program 0 (id=986): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x8082) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x103401) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) syslog(0x2, 0xffffffffffffffff, 0x1000000) close_range(r3, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r2, {}, {0xafabc05531515610, 0xfff3}, {0xf, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x4008054) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r5, 0x3b87, &(0x7f0000000040)={0x23}) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000040)={@remote, r2}, 0x14) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xb, 0x100010, r1, 0x4f539000) 3.156108514s ago: executing program 0 (id=987): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004844}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.219420977s ago: executing program 5 (id=988): openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8931, &(0x7f00000002c0)={'dummy0\x00', @random}) 2.052791587s ago: executing program 0 (id=989): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="14000000000000002900000034000000040000000000000014000000000000002900000034000000fdffffff0000000060000000000000002900000004000000040800000000000007100000000102099f000800000000000000fe00801309e12e5f0b6bdcf72f2ec7008a15fa88b025e000010005020bf4c110fc02000000000000000000000000000000000000feff1300000000000000290000003400000000000000000000004e0000000000000029000000360000005e0500000000ff1950d650847249ad288702ead0d654b985e8908defb7ec6c5ff10001"], 0x108}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000000314010000000120000000000900020073797a3000000000080041007278"], 0x38}, 0x1, 0x0, 0x0, 0x808}, 0x4004000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0}}], 0x1, 0x24088804) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) unshare(0x66000080) r4 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'macvlan0\x00'}) gettid() socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b19, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) 1.414316136s ago: executing program 2 (id=990): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) gettid() r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r4, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x1000000) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002bc0)=@newsa={0xf0, 0x1a, 0x1, 0xfffffffe, 0xfd, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0x2, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0xfe, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xffffffbffffffffc, 0x4}, {0x10000000000009, 0x7, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}}, 0xf0}}, 0x844) 1.389536201s ago: executing program 1 (id=991): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x34d000, 0x101f, 0x5, 0x1}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x7, &(0x7f0000000300)=[{0x2, 0x7, 0x95, 0x4584}, {0x3ff, 0x10, 0x6, 0xd}, {0x0, 0xb, 0x5, 0xe66}, {0x0, 0xf, 0x36, 0x7fff}, {0x0, 0x4a, 0x4, 0xd649}, {0x6, 0x78, 0x2, 0x401}, {0xf13c, 0x7, 0x2, 0x8001}]}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010000000000000000000a00000000004e2100000000ffffffff0100000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="ddf6870c03000011000000b9ee00"/24], 0x54}, 0x1, 0x0, 0x0, 0x44044}, 0x20004010) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) unshare(0x40020000) 1.132545908s ago: executing program 5 (id=992): openat$tun(0xffffffffffffff9c, &(0x7f0000001800), 0x4f49c0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) open$dir(&(0x7f0000000100)='./file0/../file0\x00', 0x400, 0x82) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x5) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000001c0)) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r4, &(0x7f0000000300)=[{&(0x7f00000000c0)="aefdda9d240300005a90f57f07703aeff0f64ebbee07022c2277ae11b44e65d76641cb010052f436dd2a", 0x2a}], 0x1) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0xa00, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x4000000e42, 0x9, 0xffffffffffffffff, 0x5, 0x10000, 0x3, 0x4002004c2, 0x100000007ff, 0x1, 0x0, 0x10000000000400, 0x8, 0x7, 0x0, 0x8, 0x8b], 0x58000, 0x240046}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.122530952s ago: executing program 6 (id=993): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, &(0x7f0000000440)=0xffffffff) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2d}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x4a}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x9c}, 0x1, 0x0, 0x0, 0x10010}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x20, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = socket(0x14, 0x4, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)=@delpolicy={0x230, 0x14, 0x1, 0x70bd25, 0x25dfdbfb, {{@in6=@loopback, @in=@broadcast, 0x4e22, 0x3, 0x4e20, 0x3, 0xa, 0xa0, 0xa0, 0x5c}, 0x6e6bbc, 0x1}, [@tmpl={0x104, 0x5, [{{@in6=@local, 0x4d6, 0x3c}, 0x0, @in6=@mcast1, 0x3500, 0x0, 0x2, 0x9f, 0x8, 0x8, 0x982}, {{@in=@loopback, 0x4d2, 0x6c}, 0x2, @in=@multicast1, 0x3504, 0x3, 0x3, 0x7, 0xe4, 0x5, 0x400}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d2, 0x33}, 0x2, @in=@broadcast, 0x3504, 0x2, 0x0, 0xf, 0x7, 0x8, 0x56}, {{@in6=@loopback, 0x4d3, 0x6c}, 0x2, @in=@broadcast, 0x3502, 0x3, 0x2, 0x9, 0x1000, 0x6, 0x7}]}, @replay_esn_val={0x28, 0x17, {0x3, 0x70bd25, 0x70bd27, 0x70bd2c, 0x70bd29, 0x8, [0x280, 0x5, 0x1]}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xffffff0e}, @replay_thresh={0x8, 0xb, 0x100}, @sec_ctx={0x4b, 0x8, {0x47, 0x8, 0x0, 0x4, 0x3f, "a999238ccda51f9d70fabdcaa94fcf27f23255e5598969f242ebd9e220fa8122cd38122c58b18da2622480053cd126ee7d7aebd56c57217d46aeb7fdc5e8a9"}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @address_filter={0x28, 0x1a, {@in=@private=0xa010100, @in=@loopback, 0xa, 0x6, 0x2}}, @address_filter={0x28, 0x1a, {@in6=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa, 0xfe, 0x9}}]}, 0x230}, 0x1, 0x0, 0x0, 0x884}, 0x400c000) 420.107674ms ago: executing program 2 (id=994): openat$iommufd(0xffffffffffffff9c, 0x0, 0x366e18f12b24c7fc, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x3) r5 = epoll_create(0x7e) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r2}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair(0x8, 0x1, 0x4, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_J1939_FILTER(r8, 0x6b, 0x1, 0x0, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r8) sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20001000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r4, @ANYRES16=r9, @ANYBLOB="000428000000fedbdf25e3a78c4b"], 0xcc}, 0x1, 0x0, 0x0, 0x8110}, 0x800) 17.518686ms ago: executing program 2 (id=995): socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000000180)={&(0x7f0000000300), 0x10, 0x0, 0x0, &(0x7f0000000340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x18}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0xfffffffd, {{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x33}, @in6=@empty, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffe1, 0x3}, {0x0, 0x0, 0x2, 0x2}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x115) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r6 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000080)=0xfffffff9) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c00818c7e9aa57a0f4ecd61256c01268087b1db2d368b3041107009041278fbea8ecd0f7db726e9648d5bb06d47d137fa089d103c33571d1bebb105c2897a57b4baf5f1087553b6a81d0b328967fa3ac74780c8669b0dcea46c82d734e5896757321e5ceab18d220a619ee4ced3fe8c74e455210ee63d870c6f9abb19ce5dfb8e789a6ccb2ceb70"]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x2b, 0x0, 0x10000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r5, &(0x7f00000062c0)="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", 0x2000, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x100000000003ff, {0x0, 0x12}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f00000088c0)="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", 0x2000, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="9000000000000000ff00000000000000"], 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) 0s ago: executing program 1 (id=996): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) (async) r3 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r3, 0x11, 0x0, 0x4) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x80, 0x0) write$proc_mixer(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="4449474954414c310a424153532027434420436170747572652053776974e368272030303030303004000000303030303030303030300a494741494e0a4c494e4520274c696e6520436170747572658f5de653fac9c61f1cdf1820537769746368272030303030303038"], 0x6d) r6 = dup3(r5, r4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r7 = socket(0x23, 0x5, 0x0) syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x6799, 0x80, 0x4, 0x3ce}, &(0x7f0000000040), &(0x7f0000000140)) (async) r8 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x6799, 0x80, 0x4, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r7, 0x80, &(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfb}}) ioctl$UFFDIO_MOVE(r6, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2}) (async) ioctl$UFFDIO_MOVE(r6, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2}) ioctl$SOUND_OLD_MIXER_INFO(r6, 0x80304d65, &(0x7f0000000200)) io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 88058c7a000: rx timeout, send abort [ 252.402304][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 252.402317][ T30] audit: type=1400 audit(1770885537.249:627): avc: denied { read } for pid=5162 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 252.405258][ T8509] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 252.412554][ T30] audit: type=1400 audit(1770885537.249:628): avc: denied { search } for pid=5162 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.480775][ T30] audit: type=1400 audit(1770885537.249:629): avc: denied { append } for pid=5162 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 252.522666][ T30] audit: type=1400 audit(1770885537.249:630): avc: denied { open } for pid=5162 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 252.576382][ T30] audit: type=1400 audit(1770885537.249:631): avc: denied { getattr } for pid=5162 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 252.616021][ T8509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.620351][ T29] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 252.780376][ T29] usb 1-1: Using ep0 maxpacket: 16 [ 252.796793][ T29] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 252.818340][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.854293][ T8509] veth0_vlan: entered promiscuous mode [ 252.871028][ T29] usb 1-1: Product: syz [ 252.875209][ T29] usb 1-1: Manufacturer: syz [ 252.877208][ T8509] veth1_vlan: entered promiscuous mode [ 252.887734][ T29] usb 1-1: SerialNumber: syz [ 252.895544][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058c7a000: abort rx timeout. Force session deactivation [ 252.901753][ T8509] veth0_macvtap: entered promiscuous mode [ 252.919171][ T29] usb 1-1: config 0 descriptor?? [ 252.922141][ T8509] veth1_macvtap: entered promiscuous mode [ 252.942278][ T29] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 252.964644][ T8509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.975717][ T8509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.988911][ T8009] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.998248][ T8009] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.007352][ T8009] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.016424][ T8009] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.081376][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.096543][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.123388][ T3663] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.133155][ T3663] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.156331][ T3089] pegasus 6-1:0.0: probe with driver pegasus failed with error -32 [ 253.210522][ T5978] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 253.262832][ T5825] Bluetooth: hci2: command tx timeout [ 253.278567][ T8628] lo speed is unknown, defaulting to 1000 [ 253.371744][ T5978] usb 2-1: Using ep0 maxpacket: 32 [ 253.378214][ T5978] usb 2-1: config 0 has no interfaces? [ 253.389572][ T5978] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 253.398869][ T5978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.409285][ T5978] usb 2-1: config 0 descriptor?? [ 253.570036][ T29] ssu100 1-1:0.0: probe with driver ssu100 failed with error -71 [ 253.674286][ T29] usb 1-1: USB disconnect, device number 19 [ 253.744236][ T8624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.795277][ T8624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.861068][ T3089] usb 2-1: USB disconnect, device number 20 [ 254.108727][ T30] audit: type=1400 audit(1770885538.949:632): avc: denied { map_read map_write } for pid=8644 comm="syz.6.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 254.131023][ T30] audit: type=1400 audit(1770885538.969:633): avc: denied { read } for pid=8644 comm="syz.6.659" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 254.157794][ T30] audit: type=1400 audit(1770885538.969:634): avc: denied { open } for pid=8644 comm="syz.6.659" path="/dev/binderfs/binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 254.217825][ T30] audit: type=1400 audit(1770885539.059:635): avc: denied { ioctl } for pid=8644 comm="syz.6.659" path="/dev/binderfs/binder-control" dev="binder" ino=2 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 254.276204][ T8651] netlink: 28 bytes leftover after parsing attributes in process `syz.2.660'. [ 254.296548][ T8651] netlink: 28 bytes leftover after parsing attributes in process `syz.2.660'. [ 254.320080][ T30] audit: type=1400 audit(1770885539.159:636): avc: denied { create } for pid=8652 comm="syz.0.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 254.364088][ T9] usb 6-1: USB disconnect, device number 4 [ 254.480628][ T3089] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 254.481762][ T8009] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 254.512289][ T8660] input: syz1 as /devices/virtual/input/input30 [ 254.650535][ T3089] usb 7-1: device descriptor read/64, error -71 [ 254.661835][ T5978] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 254.695338][ T8664] lo speed is unknown, defaulting to 1000 [ 254.720559][ T5937] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 254.771158][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032ae1c00: rx timeout, send abort [ 254.830558][ T5978] usb 3-1: Using ep0 maxpacket: 32 [ 254.839778][ T5978] usb 3-1: config 0 has no interfaces? [ 254.846709][ T5978] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 254.859474][ T5937] usb 1-1: device descriptor read/64, error -71 [ 254.878257][ T5978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.890869][ T3089] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 254.896524][ T5978] usb 3-1: config 0 descriptor?? [ 255.052052][ T3089] usb 7-1: device descriptor read/64, error -71 [ 255.141099][ T5937] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 255.161410][ T8655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.177096][ T3089] usb usb7-port1: attempt power cycle [ 255.187330][ T8655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.201340][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.207705][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.244927][ T5814] usb 3-1: USB disconnect, device number 19 [ 255.279362][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032ae1c00: abort rx timeout. Force session deactivation [ 255.304079][ T5937] usb 1-1: device descriptor read/64, error -71 [ 255.341117][ T5825] Bluetooth: hci2: command tx timeout [ 255.372879][ T8674] netlink: 8 bytes leftover after parsing attributes in process `syz.5.667'. [ 255.386427][ T8674] netlink: 24 bytes leftover after parsing attributes in process `syz.5.667'. [ 255.397879][ T8659] lec:lec_atm_close: lec0: Shut down! [ 255.420899][ T5937] usb usb1-port1: attempt power cycle [ 255.616133][ T3089] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 255.640773][ T3089] usb 7-1: device descriptor read/8, error -71 [ 255.885760][ T3089] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 256.141498][ T3089] usb 7-1: device descriptor read/8, error -71 [ 256.171240][ T5937] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 256.191196][ T5937] usb 1-1: device descriptor read/8, error -71 [ 256.250907][ T3089] usb usb7-port1: unable to enumerate USB device [ 256.411423][ T5978] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 256.460524][ T5937] usb 1-1: new low-speed USB device number 23 using dummy_hcd [ 256.480733][ T5937] usb 1-1: device descriptor read/8, error -71 [ 256.525713][ T8692] netlink: 28 bytes leftover after parsing attributes in process `syz.5.672'. [ 256.541692][ T8692] netlink: 28 bytes leftover after parsing attributes in process `syz.5.672'. [ 256.590560][ T5937] usb usb1-port1: unable to enumerate USB device [ 256.604611][ T5978] usb 3-1: Using ep0 maxpacket: 16 [ 256.611597][ T5978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.629861][ T5978] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 256.642505][ T5978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.653929][ T5978] usb 3-1: config 0 descriptor?? [ 256.865049][ T5978] usb 3-1: string descriptor 0 read error: -71 [ 256.876535][ T5978] usbhid 3-1:0.0: can't add hid device: -71 [ 256.882611][ T5978] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 256.890966][ T3089] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 256.892607][ T5978] usb 3-1: USB disconnect, device number 20 [ 257.041387][ T3089] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 257.050641][ T3089] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.059951][ T3089] usb 6-1: config 0 descriptor?? [ 257.420726][ T5825] Bluetooth: hci2: command tx timeout [ 257.582544][ T8704] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 257.889993][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 257.890007][ T30] audit: type=1400 audit(1770885542.409:642): avc: denied { create } for pid=8699 comm="syz.0.675" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 257.893520][ T6108] block nbd0: Possible stuck request ffff8880273f0000: control (read@0,1024B). Runtime 60 seconds [ 257.925248][ T30] audit: type=1400 audit(1770885542.409:643): avc: denied { write } for pid=8699 comm="syz.0.675" name="file0" dev="tmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 257.927680][ T6108] block nbd0: Possible stuck request ffff8880273f0200: control (read@1024,1024B). Runtime 60 seconds [ 257.969353][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 257.976861][ T6108] block nbd0: Possible stuck request ffff8880273f0400: control (read@2048,1024B). Runtime 60 seconds [ 257.988265][ T6108] block nbd0: Possible stuck request ffff8880273f0600: control (read@3072,1024B). Runtime 60 seconds [ 257.999536][ T30] audit: type=1400 audit(1770885542.409:644): avc: denied { open } for pid=8699 comm="syz.0.675" path="/131/file0" dev="tmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 258.026326][ T30] audit: type=1400 audit(1770885542.409:645): avc: denied { ioctl } for pid=8699 comm="syz.0.675" path="/131/file0" dev="tmpfs" ino=721 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 258.052709][ T30] audit: type=1400 audit(1770885542.439:646): avc: denied { read } for pid=8699 comm="syz.0.675" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 258.170327][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 258.221200][ T30] audit: type=1400 audit(1770885543.059:647): avc: denied { unlink } for pid=5812 comm="syz-executor" name="file0" dev="tmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 258.248349][ T9] usb 7-1: config 0 has no interfaces? [ 258.263933][ T9] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 258.276402][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.624538][ T3089] pegasus 6-1:0.0: probe with driver pegasus failed with error -32 [ 258.641913][ T9] usb 7-1: config 0 descriptor?? [ 258.675641][ T8710] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 258.699102][ T30] audit: type=1400 audit(1770885543.539:648): avc: denied { write } for pid=8711 comm="syz.2.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 258.729064][ T8714] FAULT_INJECTION: forcing a failure. [ 258.729064][ T8714] name failslab, interval 1, probability 0, space 0, times 0 [ 258.742115][ T8714] CPU: 0 UID: 0 PID: 8714 Comm: syz.0.679 Not tainted syzkaller #0 PREEMPT(full) [ 258.742135][ T8714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 258.742145][ T8714] Call Trace: [ 258.742150][ T8714] [ 258.742157][ T8714] dump_stack_lvl+0x100/0x190 [ 258.742186][ T8714] should_fail_ex.cold+0x5/0xa [ 258.742201][ T8714] should_failslab+0xc2/0x120 [ 258.742214][ T8714] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 258.742224][ T8714] ? skb_clone+0x190/0x400 [ 258.742240][ T8714] skb_clone+0x190/0x400 [ 258.742252][ T8714] netlink_deliver_tap+0xaed/0xcc0 [ 258.742269][ T8714] netlink_unicast+0x650/0x870 [ 258.742285][ T8714] ? __pfx_netlink_unicast+0x10/0x10 [ 258.742298][ T8714] ? __asan_memset+0x23/0x50 [ 258.742314][ T8714] ? __build_skb_around+0x278/0x390 [ 258.742335][ T8714] netlink_sendmsg+0x8b0/0xda0 [ 258.742351][ T8714] ? __pfx_netlink_sendmsg+0x10/0x10 [ 258.742364][ T8714] ? __might_fault+0x70/0x140 [ 258.742386][ T8714] ____sys_sendmsg+0xa54/0xc30 [ 258.742403][ T8714] ? __pfx_____sys_sendmsg+0x10/0x10 [ 258.742425][ T8714] ___sys_sendmsg+0x190/0x1e0 [ 258.742442][ T8714] ? __pfx____sys_sendmsg+0x10/0x10 [ 258.742474][ T8714] __sys_sendmsg+0x170/0x220 [ 258.742487][ T8714] ? __pfx___sys_sendmsg+0x10/0x10 [ 258.742514][ T8714] do_syscall_64+0x106/0xf80 [ 258.742523][ T8714] ? clear_bhb_loop+0x40/0x90 [ 258.742536][ T8714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.742547][ T8714] RIP: 0033:0x7f24ecd9bf79 [ 258.742556][ T8714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.742567][ T8714] RSP: 002b:00007f24edbb6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 258.742578][ T8714] RAX: ffffffffffffffda RBX: 00007f24ed015fa0 RCX: 00007f24ecd9bf79 [ 258.742585][ T8714] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000004 [ 258.742591][ T8714] RBP: 00007f24edbb6090 R08: 0000000000000000 R09: 0000000000000000 [ 258.742597][ T8714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.742603][ T8714] R13: 00007f24ed016038 R14: 00007f24ed015fa0 R15: 00007ffca98a2958 [ 258.742617][ T8714] [ 258.742666][ T8714] netlink: 400 bytes leftover after parsing attributes in process `syz.0.679'. [ 258.971775][ T8698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.010708][ T8698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.022222][ T5937] usb 7-1: USB disconnect, device number 6 [ 259.482815][ T5978] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 259.702739][ T5978] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 15 [ 259.735589][ T9] usb 6-1: USB disconnect, device number 5 [ 259.745114][ T5978] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 259.781935][ T5978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.800906][ T5978] usb 3-1: Product: syz [ 259.808776][ T5978] usb 3-1: Manufacturer: syz [ 259.815125][ T5978] usb 3-1: SerialNumber: syz [ 259.912655][ T8730] input: syz1 as /devices/virtual/input/input31 [ 260.001024][ T5894] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 260.167843][ T5978] usb 3-1: USB disconnect, device number 21 [ 260.175501][ T5894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 260.198944][ T5894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 260.230810][ T5894] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 260.249351][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.266916][ T5894] usb 1-1: Product: syz [ 260.277015][ T5894] usb 1-1: Manufacturer: syz [ 260.285084][ T5894] usb 1-1: SerialNumber: syz [ 260.297783][ T5894] usb 1-1: config 0 descriptor?? [ 260.383575][ T8740] FAULT_INJECTION: forcing a failure. [ 260.383575][ T8740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.400269][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 260.408467][ C0] lec:lec_tx_timeout: lec0 [ 260.413199][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 260.425658][ T8740] CPU: 0 UID: 0 PID: 8740 Comm: syz.1.683 Not tainted syzkaller #0 PREEMPT(full) [ 260.425679][ T8740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 260.425689][ T8740] Call Trace: [ 260.425695][ T8740] [ 260.425701][ T8740] dump_stack_lvl+0x100/0x190 [ 260.425730][ T8740] should_fail_ex.cold+0x5/0xa [ 260.425752][ T8740] _copy_from_user+0x2e/0xd0 [ 260.425780][ T8740] input_event_from_user+0x123/0x310 [ 260.425807][ T8740] ? __pfx_input_event_from_user+0x10/0x10 [ 260.425834][ T8740] ? __pfx___might_resched+0x10/0x10 [ 260.425859][ T8740] ? input_inject_event+0x1c9/0x3b0 [ 260.425887][ T8740] evdev_write+0x342/0x610 [ 260.425917][ T8740] ? __pfx_evdev_write+0x10/0x10 [ 260.425944][ T8740] ? bpf_lsm_file_permission+0x9/0x10 [ 260.425962][ T8740] ? security_file_permission+0x76/0x210 [ 260.425987][ T8740] ? rw_verify_area+0xce/0x6d0 [ 260.426015][ T8740] vfs_write+0x2aa/0x1070 [ 260.426032][ T8740] ? __pfx_evdev_write+0x10/0x10 [ 260.426058][ T8740] ? __pfx_vfs_write+0x10/0x10 [ 260.426072][ T8740] ? find_held_lock+0x2b/0x80 [ 260.426089][ T8740] ? __fget_files+0x215/0x3d0 [ 260.426107][ T8740] ? __fget_files+0x215/0x3d0 [ 260.426130][ T8740] ? __fget_files+0x21f/0x3d0 [ 260.426156][ T8740] ksys_write+0x1f8/0x250 [ 260.426172][ T8740] ? __pfx_ksys_write+0x10/0x10 [ 260.426199][ T8740] do_syscall_64+0x106/0xf80 [ 260.426214][ T8740] ? clear_bhb_loop+0x40/0x90 [ 260.426235][ T8740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.426252][ T8740] RIP: 0033:0x7f2efa79bf79 [ 260.426266][ T8740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.426282][ T8740] RSP: 002b:00007f2efb6ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 260.426298][ T8740] RAX: ffffffffffffffda RBX: 00007f2efaa15fa0 RCX: 00007f2efa79bf79 [ 260.426309][ T8740] RDX: 00000000000012d8 RSI: 0000200000000040 RDI: 0000000000000003 [ 260.426319][ T8740] RBP: 00007f2efb6ca090 R08: 0000000000000000 R09: 0000000000000000 [ 260.426328][ T8740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.426338][ T8740] R13: 00007f2efaa16038 R14: 00007f2efaa15fa0 R15: 00007fff1940e458 [ 260.426362][ T8740] [ 260.650154][ T5795] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 260.671257][ T8723] lo speed is unknown, defaulting to 1000 [ 260.862473][ T5795] usb 7-1: Using ep0 maxpacket: 32 [ 260.868907][ T5795] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 260.877120][ T5795] usb 7-1: config 0 has no interface number 0 [ 260.883446][ T5795] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 260.898823][ T5795] usb 7-1: config 0 interface 85 has no altsetting 0 [ 260.914070][ T5795] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 260.929517][ T5795] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.937651][ T5795] usb 7-1: Product: syz [ 260.942497][ T5795] usb 7-1: Manufacturer: syz [ 260.947092][ T5795] usb 7-1: SerialNumber: syz [ 261.027714][ T8748] blktrace: Concurrent blktraces are not allowed on loop2 [ 261.040210][ T8748] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 261.341042][ T5795] usb 7-1: config 0 descriptor?? [ 262.102415][ T8758] input: syz1 as /devices/virtual/input/input33 [ 262.157709][ T5795] appletouch 7-1:0.85: Geyser mode initialized. [ 262.194936][ T5795] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input32 [ 262.215963][ T5795] usb 7-1: USB disconnect, device number 7 [ 262.245420][ T5795] appletouch 7-1:0.85: input: appletouch disconnected [ 262.292706][ T5978] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 262.374603][ T30] audit: type=1400 audit(1770885547.219:649): avc: denied { shutdown } for pid=8763 comm="syz.1.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 262.463288][ T5978] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 262.473237][ T5978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.568488][ T5978] usb 3-1: config 0 descriptor?? [ 262.725525][ T8768] FAULT_INJECTION: forcing a failure. [ 262.725525][ T8768] name failslab, interval 1, probability 0, space 0, times 0 [ 262.741458][ T8768] CPU: 0 UID: 0 PID: 8768 Comm: syz.0.694 Not tainted syzkaller #0 PREEMPT(full) [ 262.741486][ T8768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 262.741496][ T8768] Call Trace: [ 262.741502][ T8768] [ 262.741508][ T8768] dump_stack_lvl+0x100/0x190 [ 262.741540][ T8768] should_fail_ex.cold+0x5/0xa [ 262.741564][ T8768] should_failslab+0xc2/0x120 [ 262.741582][ T8768] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 262.741598][ T8768] ? skb_clone+0x190/0x400 [ 262.741622][ T8768] skb_clone+0x190/0x400 [ 262.741642][ T8768] netlink_deliver_tap+0xaed/0xcc0 [ 262.741669][ T8768] netlink_unicast+0x650/0x870 [ 262.741693][ T8768] ? __pfx_netlink_unicast+0x10/0x10 [ 262.741723][ T8768] netlink_sendmsg+0x8b0/0xda0 [ 262.741748][ T8768] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.741768][ T8768] ? __might_fault+0x70/0x140 [ 262.741802][ T8768] ____sys_sendmsg+0xa54/0xc30 [ 262.741828][ T8768] ? __pfx_____sys_sendmsg+0x10/0x10 [ 262.741864][ T8768] ___sys_sendmsg+0x190/0x1e0 [ 262.741891][ T8768] ? __pfx____sys_sendmsg+0x10/0x10 [ 262.741945][ T8768] __sys_sendmsg+0x170/0x220 [ 262.741965][ T8768] ? __pfx___sys_sendmsg+0x10/0x10 [ 262.741983][ T8768] ? __pfx___seccomp_filter+0x10/0x10 [ 262.742022][ T8768] do_syscall_64+0x106/0xf80 [ 262.742038][ T8768] ? clear_bhb_loop+0x40/0x90 [ 262.742058][ T8768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.742075][ T8768] RIP: 0033:0x7f24ecd9bf79 [ 262.742089][ T8768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.742105][ T8768] RSP: 002b:00007f24edbb6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 262.742123][ T8768] RAX: ffffffffffffffda RBX: 00007f24ed015fa0 RCX: 00007f24ecd9bf79 [ 262.742134][ T8768] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000005 [ 262.742145][ T8768] RBP: 00007f24edbb6090 R08: 0000000000000000 R09: 0000000000000000 [ 262.742155][ T8768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.742165][ T8768] R13: 00007f24ed016038 R14: 00007f24ed015fa0 R15: 00007ffca98a2958 [ 262.742190][ T8768] [ 262.748434][ T5894] usb 1-1: USB disconnect, device number 24 [ 263.196677][ T30] audit: type=1400 audit(1770885548.029:650): avc: denied { ioctl } for pid=8772 comm="syz.1.695" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=24050 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 263.648026][ T30] audit: type=1400 audit(1770885548.469:651): avc: denied { watch watch_reads } for pid=8783 comm="syz.1.698" path="/147" dev="tmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 263.727942][ T30] audit: type=1400 audit(1770885548.569:652): avc: denied { read } for pid=8783 comm="syz.1.698" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 263.777733][ T5937] libceph: connect (1)[c::]:6789 error -101 [ 263.820798][ T5937] libceph: mon0 (1)[c::]:6789 connect error [ 263.850854][ T5978] pegasus 3-1:0.0: probe with driver pegasus failed with error -32 [ 263.866415][ T8798] net_ratelimit: 6 callbacks suppressed [ 263.866423][ T8798] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 263.938007][ T5937] libceph: connect (1)[c::]:6789 error -101 [ 263.949538][ T30] audit: type=1400 audit(1770885548.569:653): avc: denied { open } for pid=8783 comm="syz.1.698" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 263.974700][ T8787] lo speed is unknown, defaulting to 1000 [ 263.980521][ T5937] libceph: mon0 (1)[c::]:6789 connect error [ 263.991350][ T30] audit: type=1400 audit(1770885548.639:654): avc: denied { ioctl } for pid=8783 comm="syz.1.698" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 264.031539][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056828c00: rx timeout, send abort [ 264.056970][ T8785] ceph: No mds server is up or the cluster is laggy [ 264.140210][ T30] audit: type=1400 audit(1770885548.979:655): avc: denied { setopt } for pid=8803 comm="syz.5.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 264.220728][ T5937] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 264.237190][ T30] audit: type=1400 audit(1770885548.979:656): avc: denied { listen } for pid=8803 comm="syz.5.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 264.433308][ T5937] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 15 [ 264.463075][ T5937] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 264.472817][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.482696][ T5937] usb 1-1: Product: syz [ 264.487087][ T5937] usb 1-1: Manufacturer: syz [ 264.491782][ T5937] usb 1-1: SerialNumber: syz [ 264.539730][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056828c00: abort rx timeout. Force session deactivation [ 264.977752][ T3089] usb 3-1: USB disconnect, device number 22 [ 265.421174][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 265.429204][ C0] lec:lec_tx_timeout: lec0 [ 265.434252][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 265.472766][ T5937] usb 1-1: USB disconnect, device number 25 [ 265.943500][ T3663] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 266.010390][ T10] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 266.202939][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 266.239689][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 266.268065][ T10] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 266.289350][ T30] audit: type=1400 audit(1770885551.129:657): avc: denied { execute_no_trans } for pid=8840 comm="syz.1.707" path="/148/file1" dev="tmpfs" ino=829 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 266.339851][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.356415][ T10] usb 7-1: Product: syz [ 266.362628][ T10] usb 7-1: Manufacturer: syz [ 266.367899][ T10] usb 7-1: SerialNumber: syz [ 266.384206][ T10] usb 7-1: config 0 descriptor?? [ 266.516724][ T30] audit: type=1400 audit(1770885551.309:658): avc: denied { kexec_image_load } for pid=8854 comm="syz.5.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 266.591738][ T8863] netlink: 4 bytes leftover after parsing attributes in process `syz.0.711'. [ 266.611426][ T8824] lo speed is unknown, defaulting to 1000 [ 266.687878][ T8863] gretap0: entered promiscuous mode [ 266.709913][ T8863] macvtap1: entered promiscuous mode [ 266.730099][ T8863] macvtap1: entered allmulticast mode [ 266.751144][ T8863] gretap0: entered allmulticast mode [ 266.889476][ T8867] sp0: Synchronizing with TNC [ 266.924593][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880298c9000: rx timeout, send abort [ 266.953061][ T8862] [U] è [ 267.409078][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880298c9000: abort rx timeout. Force session deactivation [ 267.615285][ T5978] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 267.792012][ T5978] usb 2-1: no configurations [ 267.796825][ T5978] usb 2-1: can't read configurations, error -22 [ 267.944188][ T5978] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 268.132464][ T5978] usb 2-1: no configurations [ 268.137088][ T5978] usb 2-1: can't read configurations, error -22 [ 268.155623][ T5978] usb usb2-port1: attempt power cycle [ 268.180209][ T5937] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 268.247575][ T10] usb 7-1: USB disconnect, device number 8 [ 268.336797][ T8889] lo speed is unknown, defaulting to 1000 [ 268.492691][ T5937] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 268.568079][ T5937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.578715][ T5937] usb 6-1: config 0 descriptor?? [ 268.617384][ T5978] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 268.672166][ T5978] usb 2-1: no configurations [ 268.677009][ T5978] usb 2-1: can't read configurations, error -22 [ 268.710549][ T8882] netlink: 24 bytes leftover after parsing attributes in process `syz.6.716'. [ 268.824953][ T5978] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 268.858935][ T5978] usb 2-1: no configurations [ 268.863626][ T5978] usb 2-1: can't read configurations, error -22 [ 269.030978][ T5978] usb usb2-port1: unable to enumerate USB device [ 269.155444][ T30] audit: type=1400 audit(1770886322.117:659): avc: denied { mounton } for pid=8892 comm="syz.6.717" path="/13/file1" dev="tmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 269.727077][ T5937] pegasus 6-1:0.0: probe with driver pegasus failed with error -32 [ 270.263062][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 270.271106][ C0] lec:lec_tx_timeout: lec0 [ 270.276079][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 270.349342][ T8911] trusted_key: syz.2.722 sent an empty control message without MSG_MORE. [ 270.406131][ T29] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 270.568382][ T29] usb 7-1: Using ep0 maxpacket: 16 [ 270.602653][ T29] usb 7-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 270.612367][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.621274][ T29] usb 7-1: Product: syz [ 270.627549][ T5795] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 270.628922][ T29] usb 7-1: Manufacturer: syz [ 270.640984][ T29] usb 7-1: SerialNumber: syz [ 270.680326][ T29] usb 7-1: config 0 descriptor?? [ 270.707096][ T5937] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 270.711990][ T29] ssu100 7-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 270.804550][ T3089] usb 6-1: USB disconnect, device number 6 [ 270.840491][ T8920] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 270.857435][ T8920] audit: out of memory in audit_log_start [ 270.873769][ T8920] Bluetooth: MGMT ver 1.23 [ 270.891871][ T5795] usb 1-1: Using ep0 maxpacket: 32 [ 270.905475][ T5795] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 270.915755][ T5795] usb 1-1: config 0 has no interface number 0 [ 270.922782][ T5937] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 270.939049][ T5795] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 270.956688][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.966920][ T5937] usb 2-1: Product: syz [ 270.971228][ T5795] usb 1-1: config 0 interface 85 has no altsetting 0 [ 270.978169][ T5937] usb 2-1: Manufacturer: syz [ 270.982805][ T5937] usb 2-1: SerialNumber: syz [ 271.049204][ T5795] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 271.083241][ T5795] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.091317][ T5795] usb 1-1: Product: syz [ 271.095836][ T5795] usb 1-1: Manufacturer: syz [ 271.100437][ T5795] usb 1-1: SerialNumber: syz [ 271.116622][ T5795] usb 1-1: config 0 descriptor?? [ 271.286771][ T29] ssu100 7-1:0.0: probe with driver ssu100 failed with error -71 [ 271.304442][ T29] usb 7-1: USB disconnect, device number 9 [ 271.390336][ T5937] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 271.402882][ T5978] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 271.415978][ T5937] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 271.524995][ T5795] appletouch 1-1:0.85: Geyser mode initialized. [ 271.538103][ T5795] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input34 [ 271.581521][ T5978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 271.612187][ T5795] usb 1-1: USB disconnect, device number 26 [ 271.618256][ T5978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 271.674196][ T5978] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 271.691284][ T5795] appletouch 1-1:0.85: input: appletouch disconnected [ 271.722043][ T5978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.748280][ T5978] usb 3-1: Product: syz [ 271.760591][ T5978] usb 3-1: Manufacturer: syz [ 271.767437][ T5978] usb 3-1: SerialNumber: syz [ 271.772814][ T5911] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 271.791761][ T5978] usb 3-1: config 0 descriptor?? [ 271.835229][ T8908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.863521][ T8908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.926233][ T5911] usb 6-1: config 252 has an invalid interface number: 251 but max is 0 [ 271.935594][ T5911] usb 6-1: config 252 has no interface number 0 [ 271.947043][ T5911] usb 6-1: config 252 interface 251 has no altsetting 0 [ 271.956871][ T5911] usb 6-1: New USB device found, idVendor=0c45, idProduct=6253, bcdDevice=e6.a9 [ 271.969122][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.977207][ T5911] usb 6-1: Product: syz [ 271.982404][ T5911] usb 6-1: Manufacturer: syz [ 271.988565][ T5911] usb 6-1: SerialNumber: syz [ 272.005833][ T8925] lo speed is unknown, defaulting to 1000 [ 272.230975][ T8941] input: syz1 as /devices/virtual/input/input35 [ 272.970014][ T8950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.980085][ T8950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.994826][ T5937] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 273.249199][ T30] audit: type=1400 audit(1770886326.411:660): avc: denied { write } for pid=8946 comm="syz.0.731" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 273.900694][ T5978] usb 3-1: USB disconnect, device number 23 [ 274.240097][ T5937] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -EPROTO [ 274.269749][ T5937] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 274.283296][ T5937] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 274.355031][ T5937] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 274.377958][ T5795] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 274.439490][ T5911] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6253 [ 274.484687][ T5911] gspca_sn9c20x: Write register 1000 failed -71 [ 274.508856][ T5937] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 274.527768][ T5911] gspca_sn9c20x: Device initialization failed [ 274.540270][ T5911] gspca_sn9c20x 6-1:252.251: probe with driver gspca_sn9c20x failed with error -71 [ 274.568867][ T5937] usb 2-1: USB disconnect, device number 25 [ 274.616021][ T5795] usb 1-1: Using ep0 maxpacket: 16 [ 274.647454][ T5911] usb 6-1: USB disconnect, device number 7 [ 274.657950][ T5795] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.679956][ T5795] usb 1-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 274.692167][ T5795] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.730725][ T5795] usb 1-1: config 0 descriptor?? [ 275.038483][ T5911] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 275.046068][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 275.046147][ C0] lec:lec_tx_timeout: lec0 [ 275.056503][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 275.173276][ T8967] FAULT_INJECTION: forcing a failure. [ 275.173276][ T8967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.186327][ T30] audit: type=1400 audit(1770886328.448:661): avc: denied { connect } for pid=8956 comm="syz.0.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 275.206392][ T8967] CPU: 1 UID: 0 PID: 8967 Comm: syz.6.737 Not tainted syzkaller #0 PREEMPT(full) [ 275.206414][ T8967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 275.206425][ T8967] Call Trace: [ 275.206430][ T8967] [ 275.206436][ T8967] dump_stack_lvl+0x100/0x190 [ 275.206466][ T8967] should_fail_ex.cold+0x5/0xa [ 275.206487][ T8967] _copy_from_user+0x2e/0xd0 [ 275.206515][ T8967] do_sys_poll+0x345/0xeb0 [ 275.206533][ T8967] ? bpf_ksym_find+0x128/0x1c0 [ 275.206556][ T8967] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 275.206576][ T8967] ? is_bpf_text_address+0x94/0x1a0 [ 275.206601][ T8967] ? kernel_text_address+0x8d/0x100 [ 275.206627][ T8967] ? __pfx_do_sys_poll+0x10/0x10 [ 275.206645][ T8967] ? arch_stack_walk+0xa6/0xf0 [ 275.206725][ T8967] ? __mutex_unlock_slowpath+0x15c/0x790 [ 275.206745][ T8967] ? __fget_files+0x215/0x3d0 [ 275.206764][ T8967] ? set_user_sigmask+0x1e1/0x270 [ 275.206790][ T8967] ? __pfx_set_user_sigmask+0x10/0x10 [ 275.206819][ T8967] __x64_sys_ppoll+0x2b5/0x350 [ 275.206839][ T8967] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 275.206857][ T8967] ? ksys_write+0x1ac/0x250 [ 275.206873][ T8967] ? __pfx_ksys_write+0x10/0x10 [ 275.206895][ T8967] do_syscall_64+0x106/0xf80 [ 275.206910][ T8967] ? clear_bhb_loop+0x40/0x90 [ 275.206931][ T8967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.206947][ T8967] RIP: 0033:0x7f244879bf79 [ 275.206961][ T8967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.206976][ T8967] RSP: 002b:00007f24496c1028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 275.206992][ T8967] RAX: ffffffffffffffda RBX: 00007f2448a15fa0 RCX: 00007f244879bf79 [ 275.207002][ T8967] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000740 [ 275.207012][ T8967] RBP: 00007f24496c1090 R08: 0000000000000000 R09: 0000000000000000 [ 275.207022][ T8967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.207031][ T8967] R13: 00007f2448a16038 R14: 00007f2448a15fa0 R15: 00007ffe46e6bb38 [ 275.207054][ T8967] [ 275.557161][ T3596] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 275.568163][ T5795] usb 1-1: string descriptor 0 read error: -71 [ 275.587606][ T30] audit: type=1400 audit(1770886328.868:662): avc: denied { write } for pid=8971 comm="syz.2.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 275.633778][ T5795] usbhid 1-1:0.0: can't add hid device: -71 [ 275.730497][ T5795] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 275.743910][ T5911] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 276.208434][ T5795] usb 1-1: USB disconnect, device number 27 [ 276.215583][ T5911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.245625][ T5911] usb 6-1: config 0 descriptor?? [ 276.274322][ T5814] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 276.452149][ T6108] block nbd3: Possible stuck request ffff888027550000: control (read@0,4096B). Runtime 60 seconds [ 276.524115][ T5814] usb 3-1: Using ep0 maxpacket: 32 [ 276.531002][ T5814] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 168 [ 276.929630][ T5814] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 276.938731][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.946736][ T5814] usb 3-1: Product: syz [ 276.973571][ T5814] usb 3-1: Manufacturer: syz [ 276.986159][ T5814] usb 3-1: SerialNumber: syz [ 276.999719][ T5814] usb 3-1: config 0 descriptor?? [ 277.011650][ T8976] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 277.031209][ T5814] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 278.009936][ T5911] pegasus 6-1:0.0: probe with driver pegasus failed with error -32 [ 278.053475][ T3596] usb 3-1: Failed to submit usb control message: -110 [ 278.079642][ T3596] usb 3-1: unable to send the bmi data to the device: -110 [ 278.092382][ T3596] usb 3-1: unable to get target info from device [ 278.108732][ T3596] usb 3-1: could not get target info (-110) [ 278.125619][ T3596] usb 3-1: could not probe fw (-110) [ 278.277827][ T9009] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 278.332734][ T5814] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 278.359621][ T5894] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 278.448574][ T5911] usb 3-1: USB disconnect, device number 24 [ 278.496981][ T30] audit: type=1400 audit(1770886331.934:663): avc: denied { name_bind } for pid=9008 comm="syz.6.746" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 278.617262][ T5894] usb 1-1: Using ep0 maxpacket: 32 [ 278.623987][ T5814] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 278.634207][ T5814] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 278.646094][ T5894] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 278.657485][ T5894] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 278.668931][ T5894] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 278.683693][ T5814] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 278.740509][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.759166][ T5894] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 278.774323][ T5814] usb 2-1: Product: syz [ 278.986474][ T9018] lo speed is unknown, defaulting to 1000 [ 279.276123][ T9015] netlink: 8 bytes leftover after parsing attributes in process `syz.6.748'. [ 279.288277][ T5814] usb 2-1: Manufacturer: syz [ 279.299268][ T5894] usb 1-1: config 0 interface 0 has no altsetting 0 [ 279.313191][ T5810] usb 6-1: USB disconnect, device number 8 [ 279.319987][ T5814] usb 2-1: SerialNumber: syz [ 279.378824][ T5814] usb 2-1: config 0 descriptor?? [ 279.389247][ T5894] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 279.438565][ T9015] netlink: 12 bytes leftover after parsing attributes in process `syz.6.748'. [ 279.440527][ T5894] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 279.473992][ T5894] usb 1-1: Product: syz [ 279.478210][ T5894] usb 1-1: Manufacturer: syz [ 279.484061][ T5894] usb 1-1: SerialNumber: syz [ 279.593151][ T5894] usb 1-1: config 0 descriptor?? [ 279.621063][ T30] audit: type=1400 audit(1770886333.110:664): avc: denied { create } for pid=9029 comm="syz.2.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 279.642914][ T30] audit: type=1400 audit(1770886333.110:665): avc: denied { connect } for pid=9029 comm="syz.2.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 279.691733][ T5894] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 279.729333][ T8995] lo speed is unknown, defaulting to 1000 [ 279.781749][ T5894] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 279.826001][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 279.833985][ C0] lec:lec_tx_timeout: lec0 [ 279.838497][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 279.854858][ T9005] FAULT_INJECTION: forcing a failure. [ 279.854858][ T9005] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.868052][ T9005] CPU: 1 UID: 0 PID: 9005 Comm: syz.0.744 Not tainted syzkaller #0 PREEMPT(full) [ 279.868066][ T9005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 279.868073][ T9005] Call Trace: [ 279.868077][ T9005] [ 279.868080][ T9005] dump_stack_lvl+0x100/0x190 [ 279.868101][ T9005] should_fail_ex.cold+0x5/0xa [ 279.868114][ T9005] _copy_to_user+0x32/0xd0 [ 279.868126][ T9005] simple_read_from_buffer+0xcb/0x170 [ 279.868142][ T9005] proc_fail_nth_read+0x1af/0x230 [ 279.868158][ T9005] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 279.868181][ T9005] ? rw_verify_area+0xce/0x6d0 [ 279.868197][ T9005] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 279.868211][ T9005] vfs_read+0x1e4/0xb30 [ 279.868223][ T9005] ? __pfx_vfs_read+0x10/0x10 [ 279.868233][ T9005] ? __fget_files+0x215/0x3d0 [ 279.868249][ T9005] ? __fget_files+0x21f/0x3d0 [ 279.868265][ T9005] ksys_read+0x12a/0x250 [ 279.868275][ T9005] ? __pfx_ksys_read+0x10/0x10 [ 279.868289][ T9005] do_syscall_64+0x106/0xf80 [ 279.868299][ T9005] ? clear_bhb_loop+0x40/0x90 [ 279.868312][ T9005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.868323][ T9005] RIP: 0033:0x7f24ecd5c84e [ 279.868331][ T9005] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 279.868342][ T9005] RSP: 002b:00007f24edbb5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 279.868353][ T9005] RAX: ffffffffffffffda RBX: 00007f24edbb66c0 RCX: 00007f24ecd5c84e [ 279.868360][ T9005] RDX: 000000000000000f RSI: 00007f24edbb60a0 RDI: 0000000000000005 [ 279.868366][ T9005] RBP: 00007f24edbb6090 R08: 0000000000000000 R09: 0000000000000000 [ 279.868372][ T9005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.868378][ T9005] R13: 00007f24ed016038 R14: 00007f24ed015fa0 R15: 00007ffca98a2958 [ 279.868393][ T9005] [ 280.072165][ T5894] usb 1-1: USB disconnect, device number 28 [ 280.082109][ T5894] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 280.307915][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 280.530684][ T5937] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 280.614422][ T9049] input: syz1 as /devices/virtual/input/input36 [ 280.767347][ T5937] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 280.834295][ T5937] usb 3-1: config 0 has no interface number 0 [ 280.842711][ T5937] usb 3-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 280.856315][ T5937] usb 3-1: config 0 interface 255 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 281.133787][ T5937] usb 3-1: config 0 interface 255 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 281.149714][ T5937] usb 3-1: config 0 interface 255 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 281.289379][ T5937] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 281.302497][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.310478][ T5937] usb 3-1: Product: syz [ 281.320714][ T5937] usb 3-1: Manufacturer: syz [ 281.429740][ T30] audit: type=1400 audit(1770886335.020:666): avc: denied { getopt } for pid=9055 comm="syz.0.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 281.472854][ T5814] usb 2-1: USB disconnect, device number 26 [ 281.488640][ T5937] usb 3-1: SerialNumber: syz [ 281.527710][ T5937] usb 3-1: config 0 descriptor?? [ 281.561887][ T8551] udevd[8551]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 281.563458][ T5937] iguanair 3-1:0.255: failed to get version [ 281.600263][ T9066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.631722][ T9066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.648520][ T5937] iguanair 3-1:0.255: probe with driver iguanair failed with error -90 [ 281.800665][ T9038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.824479][ T9038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.835606][ T5937] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 281.847666][ T9038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.865655][ T9038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.892095][ T5894] usb 3-1: USB disconnect, device number 25 [ 281.898049][ T5814] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 281.971684][ T5937] usb 7-1: device descriptor read/64, error -71 [ 282.057136][ T5814] usb 2-1: config 252 has an invalid interface number: 251 but max is 0 [ 282.082867][ T5814] usb 2-1: config 252 has no interface number 0 [ 282.098397][ T5814] usb 2-1: config 252 interface 251 has no altsetting 0 [ 282.117702][ T5814] usb 2-1: New USB device found, idVendor=0c45, idProduct=6253, bcdDevice=e6.a9 [ 282.127399][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.135656][ T5814] usb 2-1: Product: syz [ 282.139962][ T5814] usb 2-1: Manufacturer: syz [ 282.144815][ T5814] usb 2-1: SerialNumber: syz [ 282.181950][ T9073] xt_bpf: check failed: parse error [ 282.207847][ T5937] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 282.340969][ T5937] usb 7-1: device descriptor read/64, error -71 [ 282.468042][ T5937] usb usb7-port1: attempt power cycle [ 283.253803][ T5937] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 283.307561][ T5937] usb 7-1: device descriptor read/8, error -71 [ 283.570859][ T5937] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 283.643246][ T5937] usb 7-1: device descriptor read/8, error -71 [ 283.771841][ T5937] usb usb7-port1: unable to enumerate USB device [ 284.607446][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 284.615448][ C0] lec:lec_tx_timeout: lec0 [ 284.626354][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 284.705734][ T5814] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6253 [ 284.713804][ T5814] gspca_sn9c20x: Write register 1000 failed -71 [ 284.721189][ T5814] gspca_sn9c20x: Device initialization failed [ 284.728131][ T5814] gspca_sn9c20x 2-1:252.251: probe with driver gspca_sn9c20x failed with error -71 [ 284.793200][ T5814] usb 2-1: USB disconnect, device number 27 [ 285.422003][ T30] audit: type=1400 audit(1770886339.199:667): avc: denied { accept } for pid=9124 comm="syz.6.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 285.540507][ T5814] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 285.982862][ T9136] input: syz1 as /devices/virtual/input/input38 [ 286.154647][ T5814] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 286.314905][ T5814] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 286.381069][ T5814] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 286.410614][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.436183][ T5814] usb 2-1: Product: syz [ 286.440350][ T5814] usb 2-1: Manufacturer: syz [ 286.444924][ T5814] usb 2-1: SerialNumber: syz [ 286.486436][ T9138] lo speed is unknown, defaulting to 1000 [ 286.608687][ T5814] usb 2-1: config 0 descriptor?? [ 286.867174][ T9152] binder: 9151:9152 ioctl c0046209 0 returned -22 [ 286.898179][ T9108] lo speed is unknown, defaulting to 1000 [ 287.160077][ T5937] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 287.373006][ T5937] usb 6-1: Using ep0 maxpacket: 8 [ 287.443341][ T6108] block nbd0: Possible stuck request ffff8880273f0000: control (read@0,1024B). Runtime 90 seconds [ 287.453999][ T6108] block nbd0: Possible stuck request ffff8880273f0200: control (read@1024,1024B). Runtime 90 seconds [ 287.464928][ T6108] block nbd0: Possible stuck request ffff8880273f0400: control (read@2048,1024B). Runtime 90 seconds [ 287.475812][ T6108] block nbd0: Possible stuck request ffff8880273f0600: control (read@3072,1024B). Runtime 90 seconds [ 287.491023][ T5937] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 287.510279][ T5937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.020694][ T5937] pvrusb2: Hardware description: Terratec Grabster AV400 [ 288.035750][ T5937] pvrusb2: ********** [ 288.153548][ T5937] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 288.190152][ T5937] pvrusb2: Important functionality might not be entirely working. [ 288.275026][ T5937] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 288.404982][ T5937] pvrusb2: ********** [ 288.424271][ T2323] pvrusb2: Invalid write control endpoint [ 288.467760][ T5814] usb 2-1: USB disconnect, device number 28 [ 288.932104][ T9152] pvrusb2: Invalid write control endpoint [ 288.952422][ T5798] udevd[5798]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 288.981986][ T5894] usb 6-1: USB disconnect, device number 9 [ 289.170057][ T2323] pvrusb2: Invalid write control endpoint [ 289.175947][ T2323] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 289.207791][ T2323] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 289.229709][ T2323] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 289.293625][ T2323] pvrusb2: Device being rendered inoperable [ 289.397959][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 289.406016][ C0] lec:lec_tx_timeout: lec0 [ 289.410559][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 289.429153][ T2323] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 289.452921][ T2323] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 289.460854][ T5814] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 289.548143][ T2323] pvrusb2: Attached sub-driver cx25840 [ 289.577099][ T2323] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 289.604562][ T2323] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 289.719513][ T5814] usb 2-1: config 252 has an invalid interface number: 251 but max is 0 [ 289.801727][ T5814] usb 2-1: config 252 has no interface number 0 [ 289.946892][ T5814] usb 2-1: config 252 interface 251 has no altsetting 0 [ 289.968125][ T5814] usb 2-1: New USB device found, idVendor=0c45, idProduct=6253, bcdDevice=e6.a9 [ 289.987635][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.023290][ T5814] usb 2-1: Product: syz [ 290.037654][ T5814] usb 2-1: Manufacturer: syz [ 290.047818][ T30] audit: type=1400 audit(1770886344.071:668): avc: denied { write } for pid=9196 comm="syz.2.788" name="sg0" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 290.083389][ T5814] usb 2-1: SerialNumber: syz [ 290.127820][ T30] audit: type=1400 audit(1770886344.092:669): avc: denied { open } for pid=9196 comm="syz.2.788" path="/dev/sg0" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 291.579030][ T5873] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 291.928019][ T9207] kvm: kvm [9204]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xfff8000067d1 [ 291.945231][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 291.983776][ T9207] kvm: kvm [9204]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x8b0e [ 291.994335][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 292.022758][ T5873] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 292.041213][ T9207] kvm: kvm [9204]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80d0 [ 292.085068][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.090219][ T9207] kvm: kvm [9204]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xf000006a64 [ 292.143137][ T5814] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6253 [ 292.158177][ T5873] usb 1-1: Product: syz [ 292.162782][ T5873] usb 1-1: Manufacturer: syz [ 292.167474][ T5814] gspca_sn9c20x: Write register 1000 failed -71 [ 292.180346][ T5873] usb 1-1: SerialNumber: syz [ 292.197081][ T5814] gspca_sn9c20x: Device initialization failed [ 292.213003][ T5873] usb 1-1: config 0 descriptor?? [ 292.227750][ T5814] gspca_sn9c20x 2-1:252.251: probe with driver gspca_sn9c20x failed with error -71 [ 292.279637][ T5814] usb 2-1: USB disconnect, device number 29 [ 292.354657][ T9247] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 292.451066][ T9217] lo speed is unknown, defaulting to 1000 [ 294.358881][ T5873] usb 1-1: USB disconnect, device number 29 [ 294.460009][ T5798] udevd[5798]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 294.931715][ T9277] No control pipe specified [ 294.960537][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 294.968545][ C0] lec:lec_tx_timeout: lec0 [ 294.973288][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 295.287126][ T30] audit: type=1400 audit(1770886349.530:670): avc: denied { read } for pid=9278 comm="syz.5.799" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 295.287175][ T30] audit: type=1400 audit(1770886349.530:671): avc: denied { open } for pid=9278 comm="syz.5.799" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 296.143298][ T9286] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 296.169362][ T9286] CIFS mount error: No usable UNC path provided in device string! [ 296.169362][ T9286] [ 296.179557][ T9286] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 296.378250][ T9301] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 296.496121][ T9309] netlink: 28 bytes leftover after parsing attributes in process `syz.6.804'. [ 296.505254][ T9309] netlink: 28 bytes leftover after parsing attributes in process `syz.6.804'. [ 296.691887][ T5814] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 296.701500][ T9310] FAULT_INJECTION: forcing a failure. [ 296.701500][ T9310] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 296.777249][ T9310] CPU: 0 UID: 0 PID: 9310 Comm: syz.0.809 Not tainted syzkaller #0 PREEMPT(full) [ 296.777272][ T9310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 296.777282][ T9310] Call Trace: [ 296.777288][ T9310] [ 296.777295][ T9310] dump_stack_lvl+0x100/0x190 [ 296.777327][ T9310] should_fail_ex.cold+0x5/0xa [ 296.777349][ T9310] _copy_from_iter+0x1f4/0x1690 [ 296.777373][ T9310] ? __pfx__copy_from_iter+0x10/0x10 [ 296.777391][ T9310] ? rcu_is_watching+0x12/0xc0 [ 296.777409][ T9310] ? rcu_is_watching+0x12/0xc0 [ 296.777425][ T9310] ? kfree+0x2a0/0x670 [ 296.777454][ T9310] file_tty_write.isra.0+0x45b/0x890 [ 296.777487][ T9310] vfs_write+0x6ac/0x1070 [ 296.777505][ T9310] ? __pfx_tty_write+0x10/0x10 [ 296.777524][ T9310] ? __pfx_vfs_write+0x10/0x10 [ 296.777540][ T9310] ? find_held_lock+0x2b/0x80 [ 296.777575][ T9310] ksys_write+0x12a/0x250 [ 296.777592][ T9310] ? __pfx_ksys_write+0x10/0x10 [ 296.777616][ T9310] do_syscall_64+0x106/0xf80 [ 296.777632][ T9310] ? clear_bhb_loop+0x40/0x90 [ 296.777653][ T9310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.777670][ T9310] RIP: 0033:0x7f24ecd9bf79 [ 296.777684][ T9310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.777700][ T9310] RSP: 002b:00007f24edbb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 296.777717][ T9310] RAX: ffffffffffffffda RBX: 00007f24ed015fa0 RCX: 00007f24ecd9bf79 [ 296.777728][ T9310] RDX: 000000000000ff2e RSI: 0000200000000140 RDI: 0000000000000003 [ 296.777738][ T9310] RBP: 00007f24edbb6090 R08: 0000000000000000 R09: 0000000000000000 [ 296.777748][ T9310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.777758][ T9310] R13: 00007f24ed016038 R14: 00007f24ed015fa0 R15: 00007ffca98a2958 [ 296.777783][ T9310] [ 296.977851][ T5911] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 296.996394][ T5814] usb 3-1: Using ep0 maxpacket: 16 [ 297.016884][ T5814] usb 3-1: config 157 has an invalid descriptor of length 0, skipping remainder of the config [ 297.180568][ T5814] usb 3-1: config 157 has 0 interfaces, different from the descriptor's value: 1 [ 297.322403][ T5911] usb 2-1: Using ep0 maxpacket: 8 [ 297.331108][ T5911] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 297.341844][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.982129][ T5814] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 297.991282][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.999541][ T5814] usb 3-1: Product: syz [ 298.006265][ T5814] usb 3-1: Manufacturer: syz [ 298.011478][ T5814] usb 3-1: SerialNumber: syz [ 298.062245][ T5911] pvrusb2: Hardware description: Terratec Grabster AV400 [ 298.456102][ T5911] pvrusb2: ********** [ 298.460758][ T5911] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 298.493203][ T5937] usb 3-1: USB disconnect, device number 26 [ 298.531303][ T5911] pvrusb2: Important functionality might not be entirely working. [ 298.551118][ T5911] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 298.803585][ T5911] pvrusb2: ********** [ 298.818387][ T2323] pvrusb2: Invalid write control endpoint [ 298.951622][ T2323] pvrusb2: Invalid write control endpoint [ 298.987656][ T2323] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 299.014835][ T2323] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 299.037947][ T5911] usb 2-1: USB disconnect, device number 30 [ 299.043874][ T2323] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 299.097368][ T2323] pvrusb2: Device being rendered inoperable [ 299.110014][ T2323] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 299.133618][ T2323] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 299.173763][ T2323] pvrusb2: Attached sub-driver cx25840 [ 299.181233][ T9341] No control pipe specified [ 299.208591][ T2323] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 299.225634][ T2323] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 299.646106][ T30] audit: type=1400 audit(1770886354.139:672): avc: denied { connect } for pid=9347 comm="syz.1.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 299.741499][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 299.749486][ C0] lec:lec_tx_timeout: lec0 [ 299.753961][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 300.084599][ T5937] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 300.579725][ T5937] usb 2-1: Using ep0 maxpacket: 32 [ 300.596253][ T5937] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 300.610882][ T5937] usb 2-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 300.643401][ T5937] usb 2-1: config 0 has no interface number 0 [ 300.676056][ T5937] usb 2-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid maxpacket 14129, setting to 64 [ 300.695970][ T5937] usb 2-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 300.709674][ T5937] usb 2-1: config 0 interface 196 has no altsetting 0 [ 300.740270][ T30] audit: type=1400 audit(1770886355.273:673): avc: denied { read } for pid=9375 comm="syz.0.825" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 300.790541][ T9381] netlink: 28 bytes leftover after parsing attributes in process `syz.0.825'. [ 300.806011][ T30] audit: type=1400 audit(1770886355.273:674): avc: denied { open } for pid=9375 comm="syz.0.825" path="/168/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 300.806691][ T9379] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 300.831973][ T5937] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 300.851808][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.860194][ T5937] usb 2-1: Product: syz [ 300.864345][ T5937] usb 2-1: Manufacturer: syz [ 300.869203][ T5937] usb 2-1: SerialNumber: syz [ 300.884539][ T9] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 300.916568][ T9379] block device autoloading is deprecated and will be removed. [ 300.934454][ T5937] usb 2-1: config 0 descriptor?? [ 301.027317][ T5911] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 301.037970][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 301.051647][ T9389] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 301.052372][ T9] usb 7-1: config 1 has an invalid interface number: 69 but max is 0 [ 301.070271][ T9] usb 7-1: config 1 has no interface number 0 [ 301.076477][ T9] usb 7-1: config 1 interface 69 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 301.092069][ T9] usb 7-1: config 1 interface 69 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 301.103313][ T9] usb 7-1: config 1 interface 69 has no altsetting 0 [ 301.112525][ T9] usb 7-1: New USB device found, idVendor=0bb4, idProduct=0a7e, bcdDevice=60.c4 [ 301.130582][ T30] audit: type=1400 audit(1770886355.704:675): avc: denied { getopt } for pid=9388 comm="syz.5.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 301.159580][ T5937] ipheth 2-1:0.196: Unable to find endpoints [ 301.165787][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.184046][ T5937] usb 2-1: USB disconnect, device number 31 [ 301.195402][ T9] usb 7-1: Product: syz [ 301.201151][ T9] usb 7-1: Manufacturer: syz [ 301.208285][ T5911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 140, setting to 64 [ 301.220584][ T9] usb 7-1: SerialNumber: syz [ 301.238109][ T9367] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 301.245433][ T5911] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 301.283462][ T9367] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 301.328522][ T9] ipaq 7-1:1.69: PocketPC PDA converter detected [ 301.338845][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.357260][ T5911] usb 1-1: Product: syz [ 301.361673][ T5911] usb 1-1: Manufacturer: syz [ 301.366377][ T5911] usb 1-1: SerialNumber: syz [ 301.381673][ T5911] usb 1-1: config 0 descriptor?? [ 301.393929][ T5911] hub 1-1:0.0: bad descriptor, ignoring hub [ 301.400378][ T5911] hub 1-1:0.0: probe with driver hub failed with error -5 [ 301.418487][ T5911] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input39 [ 301.540281][ T9] ipaq 7-1:1.69: probe with driver ipaq failed with error -71 [ 301.567361][ T9402] FAULT_INJECTION: forcing a failure. [ 301.567361][ T9402] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 301.579727][ T9] usb 7-1: USB disconnect, device number 14 [ 301.629572][ T30] audit: type=1400 audit(1770886356.229:676): avc: denied { read } for pid=9375 comm="syz.0.825" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 301.653347][ T30] audit: type=1400 audit(1770886356.260:677): avc: denied { open } for pid=9375 comm="syz.0.825" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 301.707836][ T9402] CPU: 0 UID: 0 PID: 9402 Comm: syz.2.832 Not tainted syzkaller #0 PREEMPT(full) [ 301.707860][ T9402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 301.707870][ T9402] Call Trace: [ 301.707876][ T9402] [ 301.707883][ T9402] dump_stack_lvl+0x100/0x190 [ 301.707916][ T9402] should_fail_ex.cold+0x5/0xa [ 301.707935][ T9402] ? prepare_alloc_pages+0x16d/0x5f0 [ 301.707959][ T9402] should_fail_alloc_page+0xeb/0x140 [ 301.707981][ T9402] prepare_alloc_pages+0x1f0/0x5f0 [ 301.708008][ T9402] __alloc_frozen_pages_noprof+0x193/0x2410 [ 301.708035][ T9402] ? unwind_get_return_address+0x59/0xa0 [ 301.708066][ T9402] ? arch_stack_walk+0xa6/0xf0 [ 301.708097][ T9402] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 301.708127][ T9402] ? stack_depot_save_flags+0x27/0x9d0 [ 301.708145][ T9402] ? __alloc_frozen_pages_noprof+0x2a0/0x2410 [ 301.708176][ T9402] ? kasan_save_stack+0x3f/0x50 [ 301.708192][ T9402] ? kasan_save_stack+0x30/0x50 [ 301.708206][ T9402] ? kasan_save_track+0x14/0x30 [ 301.708221][ T9402] ? __kasan_slab_alloc+0x89/0x90 [ 301.708238][ T9402] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 301.708252][ T9402] ? __pmd_alloc+0xbf/0x9c0 [ 301.708273][ T9402] ? __handle_mm_fault+0xa99/0x2b50 [ 301.708297][ T9402] ? handle_mm_fault+0x36d/0xa20 [ 301.708320][ T9402] ? do_user_addr_fault+0x74c/0x12f0 [ 301.708335][ T9402] ? exc_page_fault+0x6f/0xd0 [ 301.708359][ T9402] ? asm_exc_page_fault+0x26/0x30 [ 301.708374][ T9402] ? strncpy_from_user+0xfd/0x2d0 [ 301.708399][ T9402] ? path_getxattrat+0x102/0x430 [ 301.708420][ T9402] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 301.708441][ T9402] ? policy_nodemask+0xed/0x4f0 [ 301.708470][ T9402] alloc_pages_mpol+0x1fb/0x550 [ 301.708490][ T9402] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 301.708519][ T9402] alloc_pages_noprof+0x131/0x390 [ 301.708540][ T9402] pte_alloc_one+0x1e/0x3e0 [ 301.708560][ T9402] __pte_alloc+0x6d/0x3f0 [ 301.708579][ T9402] ? __pfx___pte_alloc+0x10/0x10 [ 301.708600][ T9402] ? do_raw_spin_lock+0x128/0x260 [ 301.708625][ T9402] ? find_held_lock+0x2b/0x80 [ 301.708644][ T9402] do_anonymous_page+0x13a2/0x1f40 [ 301.708670][ T9402] ? do_raw_spin_unlock+0x145/0x1e0 [ 301.708697][ T9402] ? _raw_spin_unlock+0x28/0x50 [ 301.708721][ T9402] ? __pmd_alloc+0x6aa/0x9c0 [ 301.708745][ T9402] __handle_mm_fault+0x1d3a/0x2b50 [ 301.708775][ T9402] ? mt_find+0x45e/0x8e0 [ 301.708794][ T9402] ? __pfx___handle_mm_fault+0x10/0x10 [ 301.708817][ T9402] ? __pfx_mt_find+0x10/0x10 [ 301.708853][ T9402] ? find_vma+0xbf/0x140 [ 301.708871][ T9402] ? __pfx_find_vma+0x10/0x10 [ 301.708892][ T9402] handle_mm_fault+0x36d/0xa20 [ 301.708923][ T9402] do_user_addr_fault+0x74c/0x12f0 [ 301.708947][ T9402] exc_page_fault+0x6f/0xd0 [ 301.708974][ T9402] asm_exc_page_fault+0x26/0x30 [ 301.708990][ T9402] RIP: 0010:strncpy_from_user+0xfd/0x2d0 [ 301.709016][ T9402] Code: 00 4d 89 64 1d 00 48 83 ed 08 bf 07 00 00 00 48 83 c3 08 48 89 ee e8 82 76 e7 fc 48 83 fd 07 0f 86 bb 00 00 00 e8 93 7b e7 fc <4d> 8b 24 1e e8 8a 7b e7 fc 4c 89 e2 31 ff 4d 8d 7c 1d 00 48 b8 ff [ 301.709032][ T9402] RSP: 0018:ffffc900035d7c90 EFLAGS: 00050293 [ 301.709047][ T9402] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff851fa256 [ 301.709058][ T9402] RDX: ffff888031cc4900 RSI: ffffffff851fa2ad RDI: ffff888031cc4900 [ 301.709068][ T9402] RBP: 0000000000000100 R08: 0000000000000007 R09: 0000000000000007 [ 301.709078][ T9402] R10: 0000000000000100 R11: 0000000000000000 R12: 0000000000000100 [ 301.709087][ T9402] R13: ffffc900035d7d70 R14: 0000200000000680 R15: 0000000000000100 [ 301.709105][ T9402] ? strncpy_from_user+0xa6/0x2d0 [ 301.709130][ T9402] ? strncpy_from_user+0xfd/0x2d0 [ 301.709158][ T9402] ? find_held_lock+0x2b/0x80 [ 301.709178][ T9402] path_getxattrat+0x102/0x430 [ 301.709202][ T9402] ? __pfx_path_getxattrat+0x10/0x10 [ 301.709222][ T9402] ? ksys_write+0x190/0x250 [ 301.709244][ T9402] ? __mutex_unlock_slowpath+0x15c/0x790 [ 301.709280][ T9402] ? __pfx_ksys_write+0x10/0x10 [ 301.709305][ T9402] do_syscall_64+0x106/0xf80 [ 301.709320][ T9402] ? clear_bhb_loop+0x40/0x90 [ 301.709341][ T9402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.709357][ T9402] RIP: 0033:0x7fe71a59bf79 [ 301.709371][ T9402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.709386][ T9402] RSP: 002b:00007fe71b4a8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c0 [ 301.709401][ T9402] RAX: ffffffffffffffda RBX: 00007fe71a815fa0 RCX: 00007fe71a59bf79 [ 301.709413][ T9402] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000000000 [ 301.709423][ T9402] RBP: 00007fe71b4a8090 R08: 0000000000000000 R09: 0000000000000000 [ 301.709433][ T9402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.709443][ T9402] R13: 00007fe71a816038 R14: 00007fe71a815fa0 R15: 00007ffd45eb0e98 [ 301.709472][ T9402] [ 302.365876][ T30] audit: type=1400 audit(1770886356.953:678): avc: denied { block_suspend } for pid=9399 comm="syz.5.831" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 302.614938][ T9410] No control pipe specified [ 302.652716][ T9409] netlink: 80 bytes leftover after parsing attributes in process `syz.1.833'. [ 302.674817][ T30] audit: type=1400 audit(1770886357.300:679): avc: denied { getopt } for pid=9404 comm="syz.1.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 302.928622][ T5911] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 303.307682][ T5911] usb 2-1: config 0 interface 0 has no altsetting 0 [ 303.327623][ T5911] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 303.377015][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.423707][ T5911] usb 2-1: config 0 descriptor?? [ 303.598895][ T5795] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 304.522759][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 304.530781][ C0] lec:lec_tx_timeout: lec0 [ 304.535337][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 304.851181][ T9424] Set syz1 is full, maxelem 65536 reached [ 305.017469][ T5795] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 305.193530][ T5795] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 305.204917][ T6108] block nbd3: Possible stuck request ffff888027550000: control (read@0,4096B). Runtime 90 seconds [ 306.293608][ T9440] lo speed is unknown, defaulting to 1000 [ 306.554369][ T5911] (null): keene_cmd_main failed (-110) [ 306.862249][ T5911] video4linux radio48: keene_cmd_main failed (-32) [ 306.912731][ T5911] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 306.922600][ T5795] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 306.934136][ T5795] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.942251][ T5795] usb 6-1: Product: syz [ 306.946458][ T5795] usb 6-1: Manufacturer: syz [ 306.951088][ T5795] usb 6-1: SerialNumber: syz [ 306.961351][ T5795] usb 6-1: config 0 descriptor?? [ 307.357823][ T5894] usb 2-1: USB disconnect, device number 32 [ 308.161563][ T5795] usb 6-1: USB disconnect, device number 10 [ 308.190284][ T5894] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 308.254832][ T9460] autofs: Bad value for 'fd' [ 308.368466][ T5894] usb 7-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 308.391857][ T5894] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.425475][ T5798] udevd[5798]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 308.596728][ T5894] usb 7-1: config 0 descriptor?? [ 309.185715][ T9] usb 1-1: USB disconnect, device number 30 [ 309.304095][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 309.312117][ C0] lec:lec_tx_timeout: lec0 [ 309.316630][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 309.859426][ T5894] pegasus 7-1:0.0: probe with driver pegasus failed with error -121 [ 310.220704][ T9483] FAULT_INJECTION: forcing a failure. [ 310.220704][ T9483] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 310.266750][ T9483] CPU: 0 UID: 0 PID: 9483 Comm: syz.1.851 Not tainted syzkaller #0 PREEMPT(full) [ 310.266774][ T9483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 310.266785][ T9483] Call Trace: [ 310.266791][ T9483] [ 310.266798][ T9483] dump_stack_lvl+0x100/0x190 [ 310.266829][ T9483] should_fail_ex.cold+0x5/0xa [ 310.266852][ T9483] _copy_from_user+0x2e/0xd0 [ 310.266880][ T9483] copy_msghdr_from_user+0x9f/0x4f0 [ 310.266907][ T9483] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 310.266944][ T9483] ___sys_sendmsg+0x106/0x1e0 [ 310.266972][ T9483] ? __pfx____sys_sendmsg+0x10/0x10 [ 310.267027][ T9483] __sys_sendmsg+0x170/0x220 [ 310.267048][ T9483] ? __pfx___sys_sendmsg+0x10/0x10 [ 310.267083][ T9483] do_syscall_64+0x106/0xf80 [ 310.267098][ T9483] ? clear_bhb_loop+0x40/0x90 [ 310.267120][ T9483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.267137][ T9483] RIP: 0033:0x7f2efa79bf79 [ 310.267156][ T9483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.267173][ T9483] RSP: 002b:00007f2efb6ca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 310.267189][ T9483] RAX: ffffffffffffffda RBX: 00007f2efaa15fa0 RCX: 00007f2efa79bf79 [ 310.267201][ T9483] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 310.267211][ T9483] RBP: 00007f2efb6ca090 R08: 0000000000000000 R09: 0000000000000000 [ 310.267222][ T9483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.267232][ T9483] R13: 00007f2efaa16038 R14: 00007f2efaa15fa0 R15: 00007fff1940e458 [ 310.267256][ T9483] [ 311.291003][ T9491] capability: warning: `syz.2.852' uses 32-bit capabilities (legacy support in use) [ 311.812008][ T9] usb 7-1: USB disconnect, device number 15 [ 311.824208][ T30] audit: type=1400 audit(1770886366.308:680): avc: denied { create } for pid=9484 comm="syz.2.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 311.824248][ T30] audit: type=1400 audit(1770886366.308:681): avc: denied { sys_admin } for pid=9484 comm="syz.2.852" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 311.867797][ T5873] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 311.872863][ T9490] netlink: 'syz.1.853': attribute type 1 has an invalid length. [ 311.872909][ T9490] netlink: 'syz.1.853': attribute type 2 has an invalid length. [ 311.872923][ T9490] netlink: 'syz.1.853': attribute type 1 has an invalid length. [ 311.872935][ T9490] netlink: 16 bytes leftover after parsing attributes in process `syz.1.853'. [ 312.027605][ T5873] usb 6-1: Using ep0 maxpacket: 8 [ 312.059307][ T5873] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 312.059351][ T5873] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 312.059373][ T5873] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 312.059395][ T5873] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 312.059416][ T5873] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 312.059453][ T5873] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 312.059474][ T5873] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.103184][ T30] audit: type=1400 audit(1770886367.221:682): avc: denied { ioctl } for pid=9489 comm="syz.1.853" path="socket:[26714]" dev="sockfs" ino=26714 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 312.103248][ T30] audit: type=1400 audit(1770886367.221:683): avc: denied { ioctl } for pid=9489 comm="syz.1.853" path="socket:[26712]" dev="sockfs" ino=26712 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 312.640686][ T9502] FAULT_INJECTION: forcing a failure. [ 312.640686][ T9502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.640706][ T9502] CPU: 0 UID: 0 PID: 9502 Comm: syz.6.857 Not tainted syzkaller #0 PREEMPT(full) [ 312.640719][ T9502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 312.640725][ T9502] Call Trace: [ 312.640729][ T9502] [ 312.640733][ T9502] dump_stack_lvl+0x100/0x190 [ 312.640753][ T9502] should_fail_ex.cold+0x5/0xa [ 312.640767][ T9502] _copy_from_user+0x2e/0xd0 [ 312.640786][ T9502] copy_msghdr_from_user+0x9f/0x4f0 [ 312.640804][ T9502] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 312.640826][ T9502] ___sys_sendmsg+0x106/0x1e0 [ 312.640843][ T9502] ? __pfx____sys_sendmsg+0x10/0x10 [ 312.640875][ T9502] __sys_sendmsg+0x170/0x220 [ 312.640888][ T9502] ? __pfx___sys_sendmsg+0x10/0x10 [ 312.640905][ T9502] ? fput+0x79/0x100 [ 312.640922][ T9502] do_syscall_64+0x106/0xf80 [ 312.640931][ T9502] ? clear_bhb_loop+0x40/0x90 [ 312.640944][ T9502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.640955][ T9502] RIP: 0033:0x7f244879bf79 [ 312.640964][ T9502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.640975][ T9502] RSP: 002b:00007f24496c1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.640985][ T9502] RAX: ffffffffffffffda RBX: 00007f2448a15fa0 RCX: 00007f244879bf79 [ 312.640992][ T9502] RDX: 0000000020000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 312.640999][ T9502] RBP: 00007f24496c1090 R08: 0000000000000000 R09: 0000000000000000 [ 312.641005][ T9502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.641011][ T9502] R13: 00007f2448a16038 R14: 00007f2448a15fa0 R15: 00007ffe46e6bb38 [ 312.641024][ T9502] [ 313.324338][ T5937] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 313.414249][ T9] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 313.515995][ T5937] usb 2-1: config 0 interface 0 has no altsetting 0 [ 313.516029][ T5937] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 313.516051][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.518200][ T5937] usb 2-1: config 0 descriptor?? [ 313.580671][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 313.598683][ T9] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 313.598707][ T9] usb 7-1: config 0 has no interface number 0 [ 313.598739][ T9] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 313.598783][ T9] usb 7-1: config 0 interface 85 has no altsetting 0 [ 313.608060][ T9] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 313.608086][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.608105][ T9] usb 7-1: Product: syz [ 313.608135][ T9] usb 7-1: Manufacturer: syz [ 313.608150][ T9] usb 7-1: SerialNumber: syz [ 313.610766][ T9] usb 7-1: config 0 descriptor?? [ 314.085455][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 314.085484][ C0] lec:lec_tx_timeout: lec0 [ 314.085549][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 314.470414][ T9509] netlink: 72 bytes leftover after parsing attributes in process `syz.2.855'. [ 314.471621][ T5937] (null): keene_cmd_main failed (-110) [ 314.474198][ T5937] video4linux radio48: keene_cmd_main failed (-32) [ 314.474234][ T5937] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 314.481891][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 314.481949][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 314.548904][ T5937] usb 6-1: USB disconnect, device number 11 [ 314.700961][ T30] audit: type=1400 audit(1770886369.951:684): avc: denied { ioctl } for pid=9513 comm="syz.5.859" path="socket:[26616]" dev="sockfs" ino=26616 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 314.846494][ T9] appletouch 7-1:0.85: Geyser mode initialized. [ 314.847339][ T9] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input40 [ 314.921499][ T5814] usb 7-1: USB disconnect, device number 16 [ 314.949517][ T5814] appletouch 7-1:0.85: input: appletouch disconnected [ 315.793818][ T9529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.862'. [ 316.175991][ T9538] netlink: 12 bytes leftover after parsing attributes in process `syz.5.864'. [ 317.019678][ T6108] block nbd0: Possible stuck request ffff8880273f0000: control (read@0,1024B). Runtime 120 seconds [ 317.030435][ T6108] block nbd0: Possible stuck request ffff8880273f0200: control (read@1024,1024B). Runtime 120 seconds [ 317.041426][ T6108] block nbd0: Possible stuck request ffff8880273f0400: control (read@2048,1024B). Runtime 120 seconds [ 317.053648][ T6108] block nbd0: Possible stuck request ffff8880273f0600: control (read@3072,1024B). Runtime 120 seconds [ 317.075881][ T5894] usb 2-1: USB disconnect, device number 33 [ 317.997322][ T9552] FAULT_INJECTION: forcing a failure. [ 317.997322][ T9552] name failslab, interval 1, probability 0, space 0, times 0 [ 318.036504][ T9552] CPU: 0 UID: 0 PID: 9552 Comm: syz.5.869 Not tainted syzkaller #0 PREEMPT(full) [ 318.036525][ T9552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 318.036534][ T9552] Call Trace: [ 318.036539][ T9552] [ 318.036545][ T9552] dump_stack_lvl+0x100/0x190 [ 318.036573][ T9552] should_fail_ex.cold+0x5/0xa [ 318.036593][ T9552] ? lsm_blob_alloc+0x68/0x90 [ 318.036606][ T9552] should_failslab+0xc2/0x120 [ 318.036627][ T9552] __kmalloc_noprof+0xe0/0x850 [ 318.036649][ T9552] lsm_blob_alloc+0x68/0x90 [ 318.036665][ T9552] security_sk_alloc+0x2d/0x290 [ 318.036687][ T9552] sk_prot_alloc+0x12a/0x2a0 [ 318.036713][ T9552] sk_alloc+0x36/0xe80 [ 318.036732][ T9552] bpf_prog_test_run_skb+0x4cd/0x3140 [ 318.036761][ T9552] ? find_held_lock+0x2b/0x80 [ 318.036779][ T9552] ? __fget_files+0x215/0x3d0 [ 318.036805][ T9552] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 318.036830][ T9552] ? fput+0x79/0x100 [ 318.036854][ T9552] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 318.036875][ T9552] __sys_bpf+0x1725/0x4b90 [ 318.036903][ T9552] ? __pfx___sys_bpf+0x10/0x10 [ 318.036924][ T9552] ? proc_fail_nth_write+0x9f/0x220 [ 318.036945][ T9552] ? find_held_lock+0x2b/0x80 [ 318.036967][ T9552] ? find_held_lock+0x2b/0x80 [ 318.036984][ T9552] ? ksys_write+0x190/0x250 [ 318.037006][ T9552] ? __mutex_unlock_slowpath+0x15c/0x790 [ 318.037023][ T9552] ? __fget_files+0x215/0x3d0 [ 318.037054][ T9552] ? fput+0x79/0x100 [ 318.037074][ T9552] ? ksys_write+0x1ac/0x250 [ 318.037090][ T9552] ? __pfx_ksys_write+0x10/0x10 [ 318.037117][ T9552] __x64_sys_bpf+0x7b/0xc0 [ 318.037140][ T9552] ? lockdep_hardirqs_on+0x78/0x100 [ 318.037166][ T9552] do_syscall_64+0x106/0xf80 [ 318.037180][ T9552] ? clear_bhb_loop+0x40/0x90 [ 318.037200][ T9552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.037217][ T9552] RIP: 0033:0x7f0a4f79bf79 [ 318.037231][ T9552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.037247][ T9552] RSP: 002b:00007f0a506dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 318.037264][ T9552] RAX: ffffffffffffffda RBX: 00007f0a4fa15fa0 RCX: 00007f0a4f79bf79 [ 318.037275][ T9552] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 318.037284][ T9552] RBP: 00007f0a506dc090 R08: 0000000000000000 R09: 0000000000000000 [ 318.037294][ T9552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.037303][ T9552] R13: 00007f0a4fa16038 R14: 00007f0a4fa15fa0 R15: 00007ffd05e7d628 [ 318.037327][ T9552] [ 318.708195][ T30] audit: type=1804 audit(1770886374.161:685): pid=9556 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.870" name="/newroot/55/file1" dev="fuse" ino=1 res=1 errno=0 [ 318.857650][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 318.865650][ C0] lec:lec_tx_timeout: lec0 [ 318.870148][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 319.194033][ T9566] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 319.968055][ T9578] FAULT_INJECTION: forcing a failure. [ 319.968055][ T9578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.981244][ T9578] CPU: 0 UID: 0 PID: 9578 Comm: syz.5.879 Not tainted syzkaller #0 PREEMPT(full) [ 319.981267][ T9578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 319.981277][ T9578] Call Trace: [ 319.981283][ T9578] [ 319.981289][ T9578] dump_stack_lvl+0x100/0x190 [ 319.981320][ T9578] should_fail_ex.cold+0x5/0xa [ 319.981341][ T9578] _copy_to_user+0x32/0xd0 [ 319.981360][ T9578] ucma_create_id+0x254/0x380 [ 319.981384][ T9578] ? __pfx_ucma_create_id+0x10/0x10 [ 319.981406][ T9578] ? __might_fault+0xc5/0x140 [ 319.981441][ T9578] ? __pfx_ucma_create_id+0x10/0x10 [ 319.981464][ T9578] ucma_write+0x1fb/0x330 [ 319.981483][ T9578] ? __pfx_ucma_write+0x10/0x10 [ 319.981501][ T9578] ? bpf_lsm_file_permission+0x9/0x10 [ 319.981520][ T9578] ? security_file_permission+0x76/0x210 [ 319.981545][ T9578] ? rw_verify_area+0xce/0x6d0 [ 319.981573][ T9578] ? __pfx_ucma_write+0x10/0x10 [ 319.981590][ T9578] vfs_writev+0x5ea/0xe10 [ 319.981611][ T9578] ? __pfx_vfs_writev+0x10/0x10 [ 319.981628][ T9578] ? find_held_lock+0x2b/0x80 [ 319.981661][ T9578] ? __fget_files+0x21f/0x3d0 [ 319.981687][ T9578] ? do_writev+0x28a/0x340 [ 319.981701][ T9578] do_writev+0x28a/0x340 [ 319.981717][ T9578] ? __pfx_do_writev+0x10/0x10 [ 319.981739][ T9578] do_syscall_64+0x106/0xf80 [ 319.981755][ T9578] ? clear_bhb_loop+0x40/0x90 [ 319.981777][ T9578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.981794][ T9578] RIP: 0033:0x7f0a4f79bf79 [ 319.981809][ T9578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.981825][ T9578] RSP: 002b:00007f0a506dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 319.981842][ T9578] RAX: ffffffffffffffda RBX: 00007f0a4fa15fa0 RCX: 00007f0a4f79bf79 [ 319.981853][ T9578] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 000000000000000c [ 319.981863][ T9578] RBP: 00007f0a506dc090 R08: 0000000000000000 R09: 0000000000000000 [ 319.981873][ T9578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.981883][ T9578] R13: 00007f0a4fa16038 R14: 00007f0a4fa15fa0 R15: 00007ffd05e7d628 [ 319.981907][ T9578] [ 320.229998][ T9575] kvm: kvm [9568]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x166 [ 323.576677][ T9604] 9p: Bad value for 'rfdno' [ 323.585520][ T9604] ªªªªªª¼§dõŒ‘¬T?: renamed from lo (while UP) [ 323.648065][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 323.656121][ C0] lec:lec_tx_timeout: lec0 [ 323.660787][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 324.216790][ T30] audit: type=1400 audit(1770886379.915:686): avc: denied { ioctl } for pid=9613 comm="syz.1.888" path="socket:[28024]" dev="sockfs" ino=28024 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 324.640642][ T9627] block device autoloading is deprecated and will be removed. [ 324.678691][ T9627] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 328.252230][ T9678] kvm: kvm [9677]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xffd900008e63 [ 328.264073][ T9678] kvm: kvm [9677]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x83f6 [ 328.273523][ T9678] kvm: kvm [9677]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x8d00006d51 [ 328.284783][ T9678] kvm: kvm [9677]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x4a000083df [ 328.315058][ T5911] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 328.429337][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 328.437402][ C0] lec:lec_tx_timeout: lec0 [ 328.441968][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 328.469185][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.482345][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.494323][ T5911] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 328.507662][ T5911] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 328.518905][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.536117][ T5911] usb 2-1: config 0 descriptor?? [ 331.678552][ T5810] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 331.703174][ T30] audit: type=1400 audit(1770886387.800:687): avc: denied { create } for pid=9696 comm="syz.5.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 331.724141][ T9699] dlm: non-version read from control device 8224 [ 331.737785][ T9702] tipc: Started in network mode [ 331.743435][ T9702] tipc: Node identity 080211000001, cluster identity 4711 [ 331.751732][ T9702] tipc: Enabled bearer , priority 0 [ 331.822536][ T9705] FAULT_INJECTION: forcing a failure. [ 331.822536][ T9705] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 331.835732][ T9705] CPU: 0 UID: 0 PID: 9705 Comm: syz.0.912 Not tainted syzkaller #0 PREEMPT(full) [ 331.835753][ T9705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 331.835767][ T9705] Call Trace: [ 331.835773][ T9705] [ 331.835778][ T5810] usb 3-1: Using ep0 maxpacket: 16 [ 331.835779][ T9705] dump_stack_lvl+0x100/0x190 [ 331.835811][ T9705] should_fail_ex.cold+0x5/0xa [ 331.835831][ T9705] _copy_from_iter+0x1f4/0x1690 [ 331.835849][ T9705] ? __alloc_skb+0x220/0x410 [ 331.835864][ T9705] ? __alloc_skb+0x35d/0x410 [ 331.835879][ T9705] ? __pfx__copy_from_iter+0x10/0x10 [ 331.835893][ T9705] ? netlink_autobind.isra.0+0xd0/0x370 [ 331.835921][ T9705] netlink_sendmsg+0x808/0xda0 [ 331.835943][ T9705] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.835962][ T9705] ? __might_fault+0x70/0x140 [ 331.835992][ T9705] ____sys_sendmsg+0xa54/0xc30 [ 331.836015][ T9705] ? __pfx_____sys_sendmsg+0x10/0x10 [ 331.836046][ T9705] ___sys_sendmsg+0x190/0x1e0 [ 331.836070][ T9705] ? __pfx____sys_sendmsg+0x10/0x10 [ 331.836116][ T9705] __sys_sendmsg+0x170/0x220 [ 331.836134][ T9705] ? __pfx___sys_sendmsg+0x10/0x10 [ 331.836164][ T9705] do_syscall_64+0x106/0xf80 [ 331.836178][ T9705] ? clear_bhb_loop+0x40/0x90 [ 331.836196][ T9705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.836211][ T9705] RIP: 0033:0x7f24ecd9bf79 [ 331.836224][ T9705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.836238][ T9705] RSP: 002b:00007f24edbb6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.836254][ T9705] RAX: ffffffffffffffda RBX: 00007f24ed015fa0 RCX: 00007f24ecd9bf79 [ 331.836264][ T9705] RDX: 0000000000000000 RSI: 0000200000002f80 RDI: 0000000000000003 [ 331.836273][ T9705] RBP: 00007f24edbb6090 R08: 0000000000000000 R09: 0000000000000000 [ 331.836287][ T9705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.836296][ T9705] R13: 00007f24ed016038 R14: 00007f24ed015fa0 R15: 00007ffca98a2958 [ 331.836317][ T9705] [ 332.060744][ T5810] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 332.070963][ T5810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.078974][ T5810] usb 3-1: Product: syz [ 332.086248][ T5810] usb 3-1: Manufacturer: syz [ 332.145587][ T5810] usb 3-1: SerialNumber: syz [ 332.161949][ T5810] usb 3-1: config 0 descriptor?? [ 332.176876][ T5810] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 332.370275][ T5810] ssu100 3-1:0.0: probe with driver ssu100 failed with error -32 [ 332.831969][ T5810] tipc: Node number set to 134418688 [ 333.121255][ T5911] usbhid 2-1:0.0: can't add hid device: -71 [ 333.137070][ T5911] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 333.210758][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 333.218750][ C0] lec:lec_tx_timeout: lec0 [ 333.223302][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 333.349783][ T5911] usb 2-1: USB disconnect, device number 34 [ 333.400939][ T9725] autofs: Unknown parameter '0x0000000000000000' [ 334.214090][ T9737] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 334.224072][ T9737] team0: Port device batadv1 added [ 334.256181][ T9737] hub 9-0:1.0: USB hub found [ 334.268557][ T9737] hub 9-0:1.0: 1 port detected [ 334.320395][ T5810] usb 3-1: USB disconnect, device number 27 [ 334.363322][ T6108] block nbd3: Possible stuck request ffff888027550000: control (read@0,4096B). Runtime 120 seconds [ 336.120640][ T9746] syz.6.923 (9746): drop_caches: 2 [ 337.216807][ T30] audit: type=1400 audit(1770886393.134:688): avc: denied { shutdown } for pid=9748 comm="syz.0.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 337.273305][ T9756] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 337.411515][ T30] audit: type=1400 audit(1770886393.669:689): avc: denied { read } for pid=9752 comm="syz.6.926" name="sg0" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 337.746044][ T5978] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 338.028088][ T5911] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 338.058684][ T5978] usb 1-1: Using ep0 maxpacket: 16 [ 338.066542][ T5978] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 338.138770][ T9779] blktrace: Concurrent blktraces are not allowed on loop2 [ 338.156089][ T9779] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 338.490433][ T5978] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 338.501289][ T5978] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 338.510620][ T5978] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 338.519896][ T5978] usb 1-1: Product: syz [ 338.525731][ T5978] usb 1-1: Manufacturer: syz [ 338.533132][ T5978] usb 1-1: SerialNumber: syz [ 338.563859][ T5911] usb 6-1: Using ep0 maxpacket: 32 [ 338.718654][ T5911] usb 6-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 338.727875][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.737807][ T5911] usb 6-1: Product: syz [ 338.741967][ T5911] usb 6-1: Manufacturer: syz [ 338.746785][ T5911] usb 6-1: SerialNumber: syz [ 338.782531][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 338.790523][ C0] lec:lec_tx_timeout: lec0 [ 338.796929][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 338.814108][ T5978] usb 1-1: config 0 descriptor?? [ 338.849620][ T5911] usb 6-1: config 0 descriptor?? [ 338.874651][ T5911] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 338.890216][ T5911] dvb-usb: bulk message failed: -22 (2/0) [ 338.922045][ T5911] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 338.939039][ T5911] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 338.963835][ T5911] usb 6-1: media controller created [ 338.975018][ T5911] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 339.046491][ T5911] usb 6-1: selecting invalid altsetting 7 [ 339.063655][ T9770] cxusb: i2c wr: len=80 is too big! [ 339.063655][ T9770] [ 339.076059][ T5911] cxusb: set interface failed [ 339.084007][ T5911] dvb-usb: bulk message failed: -22 (1/0) [ 339.161576][ T5911] DVB: Unable to find symbol lgdt330x_attach() [ 339.176087][ T30] audit: type=1400 audit(1770886395.653:690): avc: denied { write } for pid=9763 comm="syz.0.927" path="socket:[27410]" dev="sockfs" ino=27410 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 339.202570][ T5911] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 339.221132][ T5814] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 339.420834][ T5911] rc_core: IR keymap rc-dvico-portable not found [ 339.427197][ T5911] Registered IR keymap rc-empty [ 339.439605][ T5911] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 339.464590][ T5911] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input41 [ 339.477978][ T5814] usb 7-1: Using ep0 maxpacket: 16 [ 339.493328][ T5814] usb 7-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 339.503991][ T5814] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.523841][ T5911] dvb-usb: schedule remote query interval to 100 msecs. [ 339.530996][ T5814] usb 7-1: Product: syz [ 339.559040][ T5911] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 339.569579][ T5814] usb 7-1: Manufacturer: syz [ 339.659937][ T5795] dvb-usb: bulk message failed: -22 (1/0) [ 339.700743][ T5814] usb 7-1: SerialNumber: syz [ 339.741725][ T5911] usb 6-1: USB disconnect, device number 12 [ 339.741779][ T5814] usb 7-1: config 0 descriptor?? [ 339.830342][ T5814] ssu100 7-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 339.920384][ T5911] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 340.023488][ T5814] ssu100 7-1:0.0: probe with driver ssu100 failed with error -32 [ 340.080189][ T9796] input: syz1 as /devices/virtual/input/input42 [ 341.313470][ T9815] FAULT_INJECTION: forcing a failure. [ 341.313470][ T9815] name failslab, interval 1, probability 0, space 0, times 0 [ 341.352548][ T9815] CPU: 1 UID: 0 PID: 9815 Comm: syz.2.943 Not tainted syzkaller #0 PREEMPT(full) [ 341.352570][ T9815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 341.352581][ T9815] Call Trace: [ 341.352586][ T9815] [ 341.352593][ T9815] dump_stack_lvl+0x100/0x190 [ 341.352622][ T9815] should_fail_ex.cold+0x5/0xa [ 341.352643][ T9815] should_failslab+0xc2/0x120 [ 341.352662][ T9815] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 341.352678][ T9815] ? skb_clone+0x190/0x400 [ 341.352700][ T9815] skb_clone+0x190/0x400 [ 341.352720][ T9815] nfnetlink_rcv_batch+0x1cc/0x2880 [ 341.352749][ T9815] ? kfree_skbmem+0x19a/0x210 [ 341.352775][ T9815] ? __lock_acquire+0x4a5/0x2630 [ 341.352797][ T9815] ? kfree_skbmem+0x19f/0x210 [ 341.352820][ T9815] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 341.352846][ T9815] ? find_held_lock+0x2b/0x80 [ 341.352876][ T9815] ? avc_has_perm_noaudit+0x145/0x3b0 [ 341.352894][ T9815] ? __asan_memset+0x23/0x50 [ 341.352918][ T9815] ? __nla_validate_parse+0x1e7/0x28b0 [ 341.352945][ T9815] ? __pfx___nla_validate_parse+0x10/0x10 [ 341.352967][ T9815] ? rcu_is_watching+0x12/0xc0 [ 341.352981][ T9815] ? cap_capable+0x107/0x3f0 [ 341.353004][ T9815] ? __nla_parse+0x40/0x60 [ 341.353027][ T9815] nfnetlink_rcv+0x3bd/0x440 [ 341.353042][ T9815] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 341.353073][ T9815] netlink_unicast+0x5aa/0x870 [ 341.353099][ T9815] ? __pfx_netlink_unicast+0x10/0x10 [ 341.353127][ T9815] netlink_sendmsg+0x8b0/0xda0 [ 341.353152][ T9815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.353172][ T9815] ? __might_fault+0x70/0x140 [ 341.353203][ T9815] ____sys_sendmsg+0xa54/0xc30 [ 341.353235][ T9815] ? __pfx_____sys_sendmsg+0x10/0x10 [ 341.353271][ T9815] ___sys_sendmsg+0x190/0x1e0 [ 341.353298][ T9815] ? __pfx____sys_sendmsg+0x10/0x10 [ 341.353350][ T9815] __sys_sendmsg+0x170/0x220 [ 341.353369][ T9815] ? __pfx___sys_sendmsg+0x10/0x10 [ 341.353403][ T9815] do_syscall_64+0x106/0xf80 [ 341.353417][ T9815] ? clear_bhb_loop+0x40/0x90 [ 341.353437][ T9815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.353453][ T9815] RIP: 0033:0x7fe71a59bf79 [ 341.353467][ T9815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.353484][ T9815] RSP: 002b:00007fe71b4a8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 341.353500][ T9815] RAX: ffffffffffffffda RBX: 00007fe71a815fa0 RCX: 00007fe71a59bf79 [ 341.353511][ T9815] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 341.353521][ T9815] RBP: 00007fe71b4a8090 R08: 0000000000000000 R09: 0000000000000000 [ 341.353530][ T9815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.353540][ T9815] R13: 00007fe71a816038 R14: 00007fe71a815fa0 R15: 00007ffd45eb0e98 [ 341.353562][ T9815] [ 341.840784][ T5810] usb 1-1: USB disconnect, device number 31 [ 341.916853][ T9823] FAULT_INJECTION: forcing a failure. [ 341.916853][ T9823] name failslab, interval 1, probability 0, space 0, times 0 [ 341.929651][ T9823] CPU: 0 UID: 0 PID: 9823 Comm: syz.0.946 Not tainted syzkaller #0 PREEMPT(full) [ 341.929672][ T9823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 341.929682][ T9823] Call Trace: [ 341.929687][ T9823] [ 341.929691][ T9823] dump_stack_lvl+0x100/0x190 [ 341.929710][ T9823] should_fail_ex.cold+0x5/0xa [ 341.929724][ T9823] should_failslab+0xc2/0x120 [ 341.929737][ T9823] __kmalloc_cache_noprof+0x7a/0x6f0 [ 341.929753][ T9823] ? ceph_alloc_options+0x43/0x310 [ 341.929772][ T9823] ceph_alloc_options+0x43/0x310 [ 341.929786][ T9823] ceph_init_fs_context+0x61/0x530 [ 341.929801][ T9823] alloc_fs_context+0x60c/0xf40 [ 341.929819][ T9823] __x64_sys_fsopen+0xed/0x220 [ 341.929836][ T9823] do_syscall_64+0x106/0xf80 [ 341.929846][ T9823] ? clear_bhb_loop+0x40/0x90 [ 341.929858][ T9823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.929869][ T9823] RIP: 0033:0x7f24ecd9bf79 [ 341.929878][ T9823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.929889][ T9823] RSP: 002b:00007f24edb95028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 341.929901][ T9823] RAX: ffffffffffffffda RBX: 00007f24ed016090 RCX: 00007f24ecd9bf79 [ 341.929908][ T9823] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000280 [ 341.929914][ T9823] RBP: 00007f24edb95090 R08: 0000000000000000 R09: 0000000000000000 [ 341.929920][ T9823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.929926][ T9823] R13: 00007f24ed016128 R14: 00007f24ed016090 R15: 00007ffca98a2958 [ 341.929940][ T9823] [ 342.164311][ T5814] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 342.217274][ T30] audit: type=1400 audit(1770886398.614:691): avc: denied { write } for pid=9822 comm="syz.5.945" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 342.240690][ T30] audit: type=1400 audit(1770886398.614:692): avc: denied { ioctl } for pid=9822 comm="syz.5.945" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 342.372443][ T5814] usb 3-1: config 252 has an invalid interface number: 251 but max is 0 [ 342.383271][ T5978] usb 7-1: USB disconnect, device number 17 [ 342.402037][ T5814] usb 3-1: config 252 has no interface number 0 [ 342.428353][ T5814] usb 3-1: config 252 interface 251 has no altsetting 0 [ 342.509121][ T5814] usb 3-1: New USB device found, idVendor=0c45, idProduct=6253, bcdDevice=e6.a9 [ 342.523762][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.523896][ T9831] netlink: 112 bytes leftover after parsing attributes in process `syz.0.950'. [ 342.535566][ T5814] usb 3-1: Product: syz [ 343.417603][ T30] audit: type=1400 audit(1770886400.105:693): avc: denied { append } for pid=9829 comm="syz.0.950" name="pfkey" dev="proc" ino=4026533366 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 343.451463][ T9830] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 343.479065][ T5814] usb 3-1: Manufacturer: syz [ 343.499496][ T5814] usb 3-1: SerialNumber: syz [ 343.546701][ T30] audit: type=1400 audit(1770886400.231:694): avc: denied { map } for pid=9829 comm="syz.0.950" path="/dev/vbi1" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 343.573651][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 343.581673][ C0] lec:lec_tx_timeout: lec0 [ 343.586920][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 343.930450][ T5978] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 344.364766][ T5978] usb 7-1: Using ep0 maxpacket: 32 [ 344.373025][ T5978] usb 7-1: config 0 has no interfaces? [ 344.378926][ T5978] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 344.396670][ T5978] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.422807][ T5978] usb 7-1: config 0 descriptor?? [ 344.638555][ T9837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.662619][ T9837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.721378][ T5937] usb 7-1: USB disconnect, device number 18 [ 344.773474][ T5978] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 344.936839][ T9857] kvm: kvm [9856]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x166 [ 344.945432][ T5978] usb 1-1: Using ep0 maxpacket: 32 [ 344.954279][ T5978] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 344.971185][ T5978] usb 1-1: config 0 has no interface number 0 [ 345.296745][ T5978] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 345.373381][ T5978] usb 1-1: config 0 interface 85 has no altsetting 0 [ 345.384127][ T5978] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 345.385613][ T5814] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6253 [ 345.393574][ T5978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.419093][ T5978] usb 1-1: Product: syz [ 345.422375][ T5814] gspca_sn9c20x: Write register 1000 failed -71 [ 345.423535][ T5978] usb 1-1: Manufacturer: syz [ 345.452048][ T5978] usb 1-1: SerialNumber: syz [ 345.547599][ T5814] gspca_sn9c20x: Device initialization failed [ 345.559001][ T5814] gspca_sn9c20x 3-1:252.251: probe with driver gspca_sn9c20x failed with error -71 [ 345.602184][ T5978] usb 1-1: config 0 descriptor?? [ 345.611809][ T5814] usb 3-1: USB disconnect, device number 28 [ 345.829283][ T30] audit: type=1400 audit(1770886402.625:695): avc: denied { append } for pid=9866 comm="syz.1.958" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 345.935639][ T6108] block nbd0: Possible stuck request ffff8880273f0000: control (read@0,1024B). Runtime 150 seconds [ 345.948178][ T6108] block nbd0: Possible stuck request ffff8880273f0200: control (read@1024,1024B). Runtime 150 seconds [ 345.959163][ T6108] block nbd0: Possible stuck request ffff8880273f0400: control (read@2048,1024B). Runtime 150 seconds [ 345.970116][ T6108] block nbd0: Possible stuck request ffff8880273f0600: control (read@3072,1024B). Runtime 150 seconds [ 346.030221][ T5978] appletouch 1-1:0.85: Geyser mode initialized. [ 346.038716][ T5978] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input43 [ 346.167965][ T5978] usb 1-1: USB disconnect, device number 32 [ 346.208927][ T5978] appletouch 1-1:0.85: input: appletouch disconnected [ 346.728146][ T30] audit: type=1400 audit(1770886403.580:696): avc: denied { connect } for pid=9878 comm="syz.5.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 346.821889][ T5894] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 346.974341][ T5894] usb 7-1: Using ep0 maxpacket: 16 [ 346.984867][ T5894] usb 7-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 346.994122][ T5894] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.040224][ T5894] usb 7-1: Product: syz [ 347.047465][ T9884] input: syz1 as /devices/virtual/input/input44 [ 347.064988][ T5894] usb 7-1: Manufacturer: syz [ 347.108816][ T5894] usb 7-1: SerialNumber: syz [ 347.134339][ T5894] usb 7-1: config 0 descriptor?? [ 347.158250][ T5894] ssu100 7-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 347.414086][ T5894] ssu100 7-1:0.0: probe with driver ssu100 failed with error -32 [ 347.790003][ T9900] netlink: 28 bytes leftover after parsing attributes in process `syz.2.962'. [ 347.821310][ T5795] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 347.973954][ T5795] usb 2-1: Using ep0 maxpacket: 8 [ 348.021374][ T5795] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 348.057425][ T5795] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 348.108864][ T5795] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.144964][ T5795] usb 2-1: config 0 descriptor?? [ 348.364585][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 348.372598][ C0] lec:lec_tx_timeout: lec0 [ 348.383561][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 349.229739][ T5795] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 349.240260][ T5894] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 349.364161][ T5795] usb 7-1: USB disconnect, device number 19 [ 349.436738][ T5894] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 349.708891][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.719991][ T5894] usb 6-1: config 0 descriptor?? [ 349.726855][ T5894] cp210x 6-1:0.0: cp210x converter detected [ 349.749074][ T9922] lo speed is unknown, defaulting to 1000 [ 350.286408][ T5894] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 350.340818][ T5894] cp210x 6-1:0.0: querying part number failed [ 350.356874][ T5894] usb 6-1: cp210x converter now attached to ttyUSB0 [ 350.593053][ T5795] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 350.771752][ T5795] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 15 [ 350.785961][ T5795] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 350.796164][ T5795] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.809661][ T5795] usb 7-1: Product: syz [ 350.819919][ T5795] usb 7-1: Manufacturer: syz [ 350.828235][ T5795] usb 7-1: SerialNumber: syz [ 350.901073][ T5825] Bluetooth: hci5: command 0x0406 tx timeout [ 350.985006][ T9940] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 350.991718][ T9940] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 351.000134][ T9940] vhci_hcd vhci_hcd.0: Device attached [ 351.115139][ T9940] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(16) [ 351.121745][ T9940] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 351.131489][ T9940] vhci_hcd vhci_hcd.0: Device attached [ 351.140717][ T9947] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(13) [ 351.147294][ T9947] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 351.155356][ T9947] vhci_hcd vhci_hcd.0: Device attached [ 351.317128][ T5894] usb 2-1: USB disconnect, device number 35 [ 351.354926][ T5937] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 351.902304][ T5795] usb 7-1: USB disconnect, device number 20 [ 351.975161][ T9935] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(15) [ 351.981743][ T9935] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 351.990198][ T9935] vhci_hcd vhci_hcd.0: Device attached [ 352.004380][ T9935] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(19) [ 352.010954][ T9935] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 352.018644][ T9935] vhci_hcd vhci_hcd.0: Device attached [ 352.042127][ T9935] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(21) [ 352.048695][ T9935] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 352.056437][ T9935] vhci_hcd vhci_hcd.0: Device attached [ 352.090326][ T9935] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 352.100090][ T9935] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 352.118456][ T9935] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 352.156355][ T9960] vhci_hcd: connection closed [ 352.174463][ T12] vhci_hcd vhci_hcd.2: stop threads [ 352.175280][ T9948] vhci_hcd: connection closed [ 352.179499][ T9945] vhci_hcd: connection reset by peer [ 352.184436][ T9962] vhci_hcd: connection closed [ 352.189054][ T9958] vhci_hcd: connection closed [ 352.194584][ T9949] vhci_hcd: connection closed [ 352.199431][ T12] vhci_hcd vhci_hcd.2: release socket [ 352.241179][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 352.298261][ T12] vhci_hcd vhci_hcd.2: stop threads [ 352.312200][ T12] vhci_hcd vhci_hcd.2: release socket [ 352.330380][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 352.365640][ T12] vhci_hcd vhci_hcd.2: stop threads [ 352.370876][ T12] vhci_hcd vhci_hcd.2: release socket [ 352.376635][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 352.458026][ T12] vhci_hcd vhci_hcd.2: stop threads [ 352.698155][ T9976] lo speed is unknown, defaulting to 1000 [ 352.950262][ T12] vhci_hcd vhci_hcd.2: release socket [ 352.996613][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 353.027943][ T12] vhci_hcd vhci_hcd.2: stop threads [ 353.089856][ T12] vhci_hcd vhci_hcd.2: release socket [ 353.155374][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 353.163425][ C0] lec:lec_tx_timeout: lec0 [ 353.168102][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 353.279122][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 353.297090][ T12] vhci_hcd vhci_hcd.2: stop threads [ 353.315230][ T12] vhci_hcd vhci_hcd.2: release socket [ 353.406813][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 353.849358][ T9968] lec:lec_atm_close: lec0: Shut down! [ 353.956110][ T5814] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 353.965373][ T5810] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 354.012807][ T5873] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 354.139106][ T5810] usb 7-1: Using ep0 maxpacket: 16 [ 354.145458][ T5814] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 354.156342][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.170380][ T5810] usb 7-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 354.180893][ T5873] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 354.190015][ T5810] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.198931][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.209555][ T5814] usb 2-1: config 0 descriptor?? [ 354.217640][ T5810] usb 7-1: Product: syz [ 354.225066][ T5810] usb 7-1: Manufacturer: syz [ 354.230255][ T5810] usb 7-1: SerialNumber: syz [ 354.235526][ T5873] usb 3-1: config 0 descriptor?? [ 354.258646][ T5810] usb 7-1: config 0 descriptor?? [ 354.268626][ T5810] ssu100 7-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 354.288702][T10001] netlink: 28 bytes leftover after parsing attributes in process `syz.0.983'. [ 354.297770][T10001] netlink: 28 bytes leftover after parsing attributes in process `syz.0.983'. [ 354.458484][ T5810] ssu100 7-1:0.0: probe with driver ssu100 failed with error -32 [ 354.624809][ T30] audit: type=1400 audit(1770886411.875:697): avc: denied { append } for pid=10008 comm="syz.0.986" name="sg0" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 354.707723][ T30] audit: type=1400 audit(1770886411.938:698): avc: denied { map } for pid=10008 comm="syz.0.986" path="socket:[29809]" dev="sockfs" ino=29809 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 354.776236][T10011] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10011 comm=syz.5.984 [ 354.920580][T10015] kvm: kvm [10014]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x166 [ 355.570448][ T5814] pegasus 2-1:0.0: can't reset MAC [ 355.576354][ T5814] pegasus 2-1:0.0: probe with driver pegasus failed with error -5 [ 355.597541][ T5814] usb 2-1: USB disconnect, device number 36 [ 355.605628][ T5873] pegasus 3-1:0.0: can't reset MAC [ 355.612160][ T5873] pegasus 3-1:0.0: probe with driver pegasus failed with error -5 [ 355.631004][ T5873] usb 3-1: USB disconnect, device number 29 [ 356.189365][ T30] audit: type=1400 audit(1770886413.481:699): avc: denied { recv } for pid=10018 comm="syz.5.988" saddr=10.128.0.169 src=37522 daddr=10.128.0.232 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 356.469597][ T5937] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 356.473782][T10024] lo speed is unknown, defaulting to 1000 [ 356.688728][ T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 356.740497][ T5795] usb 7-1: USB disconnect, device number 21 [ 357.265026][ T9] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 15 [ 357.286883][T10038] lo speed is unknown, defaulting to 1000 [ 357.332112][ T9] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 357.402224][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.412595][ T9] usb 1-1: Product: syz [ 357.416762][ T9] usb 1-1: Manufacturer: syz [ 357.421340][ T9] usb 1-1: SerialNumber: syz [ 357.808965][ T9] usb 1-1: USB disconnect, device number 33 [ 357.826960][ T5894] usb usb38-port1: attempt power cycle [ 358.736632][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5140 ms [ 358.744660][ C0] lec:lec_tx_timeout: lec0 [ 358.749517][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 358.801862][ T31] INFO: task syz.3.510:8010 blocked for more than 143 seconds. [ 358.837043][ T31] Not tainted syzkaller #0 [ 358.854775][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 358.866393][ T31] task:syz.3.510 state:D stack:25816 pid:8010 tgid:8010 ppid:5807 task_flags:0x400040 flags:0x00080002 [ 358.878394][ T31] Call Trace: [ 358.882052][ T31] [ 358.884995][ T31] __schedule+0x1023/0x6000 [ 358.891741][ T31] ? __lock_acquire+0x4a5/0x2630 [ 358.945551][ T31] ? stack_depot_save_flags+0x27/0x9d0 [ 358.955462][ T31] ? __pfx___schedule+0x10/0x10 [ 358.960523][ T31] ? find_held_lock+0x2b/0x80 [ 358.980240][ T31] ? schedule+0x2bf/0x390 [ 358.993858][ T31] schedule+0xdd/0x390 [ 359.013207][ T31] schedule_preempt_disabled+0x13/0x30 [ 359.018676][ T31] __mutex_lock+0xc9a/0x1b90 [ 359.072847][ T31] ? bdev_release+0x15a/0x6d0 [ 359.073486][ T5894] usb usb38-port1: unable to enumerate USB device [ 359.089145][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 359.095840][ T31] ? find_held_lock+0x2b/0x80 [ 359.107639][ T31] ? do_raw_spin_unlock+0x145/0x1e0 [ 359.122616][ T31] ? bdev_release+0x15a/0x6d0 [ 359.137985][ T31] bdev_release+0x15a/0x6d0 [ 359.154011][ T31] ? __pfx_blkdev_release+0x10/0x10 [ 359.170259][ T31] blkdev_release+0x15/0x20 [ 359.192662][ T31] __fput+0x3ff/0xb40 [ 359.197264][ T31] task_work_run+0x150/0x240 [ 359.208348][ T31] ? __pfx_task_work_run+0x10/0x10 [ 359.216184][ T31] exit_to_user_mode_loop+0x100/0x4a0 [ 359.231214][ T31] ? rcu_is_watching+0x12/0xc0 [ 359.243081][ T31] do_syscall_64+0x67c/0xf80 [ 359.252776][ T31] ? clear_bhb_loop+0x40/0x90 [ 359.262941][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.275968][ T31] RIP: 0033:0x7f39fbd9bf79 [ 359.284338][ T31] RSP: 002b:00007ffe6d9974e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 359.302209][ T31] RAX: 0000000000000000 RBX: 00007f39fc017da0 RCX: 00007f39fbd9bf79 [ 359.318395][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 359.334487][ T31] RBP: 00007f39fc017da0 R08: 0000000000000006 R09: 0000000000000000 [ 359.352334][ T31] R10: 00007f39fc017cb0 R11: 0000000000000246 R12: 0000000000034ac8 [ 359.369107][ T31] R13: 00007f39fc01609c R14: 0000000000034a96 R15: 00007f39fc016090 [ 359.385625][ T31] [ 359.395539][ T31] INFO: task syz.3.510:8013 blocked for more than 144 seconds. [ 359.410245][ T31] Not tainted syzkaller #0 [ 359.417787][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 359.437299][ T31] task:syz.3.510 state:D stack:27240 pid:8013 tgid:8010 ppid:5807 task_flags:0x400140 flags:0x00080002 [ 359.450783][ T31] Call Trace: [ 359.454538][ T31] [ 359.457803][ T31] __schedule+0x1023/0x6000 [ 359.463141][ T31] ? __lock_acquire+0x4a5/0x2630 [ 359.468576][ T31] ? __pfx___schedule+0x10/0x10 [ 359.475046][ T31] ? find_held_lock+0x2b/0x80 [ 359.479815][ T31] ? schedule+0x2bf/0x390 [ 359.484948][ T31] schedule+0xdd/0x390 [ 359.489322][ T31] schedule_preempt_disabled+0x13/0x30 [ 359.495713][ T31] __mutex_lock+0xc9a/0x1b90 [ 359.501061][ T31] ? bdev_release+0x15a/0x6d0 [ 359.506484][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 359.512633][ T31] ? find_held_lock+0x2b/0x80 [ 359.517313][ T31] ? do_raw_spin_unlock+0x145/0x1e0 [ 359.530603][ T31] ? bdev_release+0x15a/0x6d0 [ 359.538173][ T31] bdev_release+0x15a/0x6d0 [ 359.552278][ T31] ? __pfx_blkdev_release+0x10/0x10 [ 359.559891][ T31] blkdev_release+0x15/0x20 [ 359.566473][ T31] __fput+0x3ff/0xb40 [ 359.573012][ T31] task_work_run+0x150/0x240 [ 359.580537][ T31] ? __pfx_task_work_run+0x10/0x10 [ 359.588096][ T31] ? selinux_file_ioctl+0xb4/0x290 [ 359.595929][ T31] exit_to_user_mode_loop+0x100/0x4a0 [ 359.604684][ T31] ? rcu_is_watching+0x12/0xc0 [ 359.611242][ T31] do_syscall_64+0x67c/0xf80 [ 359.618822][ T31] ? clear_bhb_loop+0x40/0x90 [ 359.626581][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.636025][ T31] RIP: 0033:0x7f39fbd9bf79 [ 359.641414][ T31] RSP: 002b:00007f39fcc00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 359.652337][ T31] RAX: 0000000000000000 RBX: 00007f39fc015fa0 RCX: 00007f39fbd9bf79 [ 359.662061][ T31] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000005 [ 359.670702][ T31] RBP: 00007f39fbe327e0 R08: 0000000000000000 R09: 0000000000000000 [ 359.679799][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 359.689340][ T31] R13: 00007f39fc016038 R14: 00007f39fc015fa0 R15: 00007ffe6d997388 [ 359.698870][ T31] [ 359.707608][ T31] [ 359.707608][ T31] Showing all locks held in the system: [ 359.736205][ T31] 1 lock held by pool_workqueue_/3: [ 359.749777][ T31] #0: ffffffff8e7f2e38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 359.770415][ T31] 1 lock held by khungtaskd/31: [ 359.782309][ T31] #0: ffffffff8e7e7220 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 359.800748][ T31] 4 locks held by kworker/u8:9/3663: [ 359.815567][ T31] #0: ffff88801cab9148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 359.840610][ T31] #1: ffffc9000d2dfd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 359.860394][ T31] #2: ffffffff905e6370 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xab/0x830 [ 359.880185][ T31] #3: ffffffff8e7f2d00 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 359.932739][ T31] 2 locks held by getty/5565: [ 359.941023][ T31] #0: ffff8880348cb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 359.992508][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 360.013482][ T31] 1 lock held by udevd/5800: [ 360.018113][ T31] #0: ffff888027335358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 360.046989][ T31] 2 locks held by syz-executor/5808: [ 360.054522][ T31] 1 lock held by udevd/6019: [ 360.065301][ T31] #0: ffff888027463358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 360.089949][ T31] 1 lock held by syz.3.510/8010: [ 360.104746][ T31] #0: ffff888027463358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 [ 360.117785][ T31] 1 lock held by syz.3.510/8013: [ 360.122703][ T31] #0: ffff888027463358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 [ 360.136025][ T31] 5 locks held by syz.5.969/9929: [ 360.143554][ T31] 2 locks held by syz.5.969/9930: [ 360.151251][ T31] 3 locks held by syz.5.969/9931: [ 360.157827][ T31] 2 locks held by syz.5.969/9936: [ 360.165206][ T31] 2 locks held by syz.5.969/9937: [ 360.173129][ T31] 3 locks held by syz.5.969/9938: [ 360.180262][ T31] 3 locks held by syz.5.969/9939: [ 360.186824][ T31] 1 lock held by syz.5.992/10053: [ 360.193731][ T31] #0: ffffffff8e7f2d00 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 360.212917][ T31] [ 360.217430][ T31] ============================================= [ 360.217430][ T31] [ 360.226074][ T31] NMI backtrace for cpu 1 [ 360.226087][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 360.226104][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 360.226114][ T31] Call Trace: [ 360.226119][ T31] [ 360.226125][ T31] dump_stack_lvl+0x100/0x190 [ 360.226154][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 360.226182][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 360.226206][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 360.226230][ T31] sys_info+0x141/0x190 [ 360.226248][ T31] watchdog+0xcc3/0xfe0 [ 360.226273][ T31] ? __pfx_watchdog+0x10/0x10 [ 360.226291][ T31] ? __kthread_parkme+0x18c/0x230 [ 360.226313][ T31] ? kthread+0x13a/0x450 [ 360.226334][ T31] ? __pfx_watchdog+0x10/0x10 [ 360.226349][ T31] kthread+0x370/0x450 [ 360.226369][ T31] ? __pfx_kthread+0x10/0x10 [ 360.226390][ T31] ret_from_fork+0x754/0xd80 [ 360.226415][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 360.226441][ T31] ? __switch_to+0x7b4/0x10c0 [ 360.226458][ T31] ? __pfx_kthread+0x10/0x10 [ 360.226480][ T31] ret_from_fork_asm+0x1a/0x30 [ 360.226501][ T31] [ 360.226505][ T31] Sending NMI from CPU 1 to CPUs 0: [ 360.346269][ C0] NMI backtrace for cpu 0 [ 360.346282][ C0] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 360.346298][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 360.346306][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 360.346330][ C0] RIP: 0010:__asan_memcpy+0x2c/0x60 [ 360.346350][ C0] Code: 1e fa 41 54 49 89 fc 55 48 89 f5 53 48 89 d3 48 8b 4c 24 18 31 d2 48 89 de 48 89 ef e8 cd f1 ff ff 84 c0 74 2b 48 8b 4c 24 18 01 00 00 00 48 89 de 4c 89 e7 e8 b4 f1 ff ff 84 c0 74 12 48 89 [ 360.346362][ C0] RSP: 0018:ffffc900001178f8 EFLAGS: 00000002 [ 360.346377][ C0] RAX: 0000000000000001 RBX: 0000000000000020 RCX: ffffffff8571b805 [ 360.346385][ C0] RDX: 0000000000000001 RSI: 0000000000000020 RDI: ffffc90000117948 [ 360.346394][ C0] RBP: ffffc90000117948 R08: 0000000000000000 R09: fffff52000022f2c [ 360.346403][ C0] R10: ffffc90000117967 R11: 000000004e4334a1 R12: ffff8880b8436e60 [ 360.346414][ C0] R13: ffff8880b8436e60 R14: ffffc90000117a78 R15: dffffc0000000000 [ 360.346425][ C0] FS: 0000000000000000(0000) GS:ffff8881243a8000(0000) knlGS:0000000000000000 [ 360.346440][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 360.346450][ C0] CR2: 00007fe71a7e6ad8 CR3: 000000007968c000 CR4: 00000000003526f0 [ 360.346460][ C0] Call Trace: [ 360.346464][ C0] [ 360.346471][ C0] crng_fast_key_erasure+0x1b5/0x260 [ 360.346490][ C0] ? __pfx_crng_fast_key_erasure+0x10/0x10 [ 360.346513][ C0] crng_make_state+0x1c2/0x6c0 [ 360.346533][ C0] _get_random_bytes+0x11c/0x220 [ 360.346551][ C0] ? __pfx__get_random_bytes+0x10/0x10 [ 360.346571][ C0] ? __alloc_skb+0x220/0x410 [ 360.346585][ C0] ? __alloc_skb+0x35d/0x410 [ 360.346602][ C0] ? kfree_skbmem+0x19f/0x210 [ 360.346624][ C0] nsim_dev_trap_report_work+0x370/0xd10 [ 360.346654][ C0] process_one_work+0x9c2/0x1840 [ 360.346681][ C0] ? __pfx_process_one_work+0x10/0x10 [ 360.346705][ C0] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 360.346724][ C0] worker_thread+0x5da/0xe40 [ 360.346746][ C0] ? kthread+0x13a/0x450 [ 360.346762][ C0] ? __pfx_worker_thread+0x10/0x10 [ 360.346779][ C0] kthread+0x370/0x450 [ 360.346794][ C0] ? __pfx_kthread+0x10/0x10 [ 360.346810][ C0] ret_from_fork+0x754/0xd80 [ 360.346829][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 360.346847][ C0] ? __switch_to+0x7b4/0x10c0 [ 360.346861][ C0] ? __pfx_kthread+0x10/0x10 [ 360.346878][ C0] ret_from_fork_asm+0x1a/0x30 [ 360.346898][ C0] [ 360.590780][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 360.597619][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 360.606718][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 360.616853][ T31] Call Trace: [ 360.620127][ T31] [ 360.623049][ T31] dump_stack_lvl+0x100/0x190 [ 360.627731][ T31] vpanic+0x20d/0x630 [ 360.631715][ T31] panic+0xd1/0xd1 [ 360.635427][ T31] ? __pfx_panic+0x10/0x10 [ 360.639838][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 360.645994][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 360.652137][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 360.658263][ T31] ? watchdog.cold+0x198/0x1ca [ 360.663004][ T31] ? watchdog+0xcd3/0xfe0 [ 360.667324][ T31] watchdog.cold+0x1a9/0x1ca [ 360.671904][ T31] ? __pfx_watchdog+0x10/0x10 [ 360.676563][ T31] ? __kthread_parkme+0x18c/0x230 [ 360.681570][ T31] ? kthread+0x13a/0x450 [ 360.685798][ T31] ? __pfx_watchdog+0x10/0x10 [ 360.690455][ T31] kthread+0x370/0x450 [ 360.694509][ T31] ? __pfx_kthread+0x10/0x10 [ 360.699086][ T31] ret_from_fork+0x754/0xd80 [ 360.703667][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 360.708769][ T31] ? __switch_to+0x7b4/0x10c0 [ 360.713430][ T31] ? __pfx_kthread+0x10/0x10 [ 360.718004][ T31] ret_from_fork_asm+0x1a/0x30 [ 360.722762][ T31] [ 360.726024][ T31] Kernel Offset: disabled [ 360.730318][ T31] Rebooting in 86400 seconds..