last executing test programs: 1m37.359507169s ago: executing program 3 (id=2098): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x10001) socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$key(0xffffffffffffffff, &(0x7f00000007c0)={0x40000000000ff80, 0x0, &(0x7f0000000700)={&(0x7f0000000380)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00001000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000020000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018a6f1c7b100997436e3eb35b994e57a104bea3bc5973c33b64d06af1e5620f882da733421e604e640f9db2eda0bea6e7b9ff3f31fc1b289d695a6bd111a66634a10ff41b86e323c4368e233656d5f634904095646c0cc1f1c5cf5bedf8369cc6b44"], 0xa8}}, 0x40080) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000002c0)={@private1, @local, @local, 0x5, 0xb, 0x0, 0x100, 0x4, 0x0, r7}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000002c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @private0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x42, r7}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000001240)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) 1m36.207110855s ago: executing program 3 (id=2101): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d5, 0x33}, @in=@multicast1, {0x3}, {}, {0x0, 0x22, 0x5}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x158}}, 0x1000000) 1m36.052889582s ago: executing program 3 (id=2104): pwrite64(0xffffffffffffffff, &(0x7f0000000100)="fd739a260854a7e31b87bbfc1db4a8037ad81607", 0x14, 0x1) 1m35.918521651s ago: executing program 3 (id=2107): write(0xffffffffffffffff, &(0x7f0000001780)="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", 0x8a1) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b189a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0/file0/file0\x00', 0x0, 0x18e5811, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x84000, 0x0) fchmodat(0xffffffffffffffff, &(0x7f0000000800)='./file0/../file0\x00', 0x93) setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000000100)=0x7, 0x4) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r2, 0x4, 0x0, 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) io_destroy(r2) syz_io_uring_setup(0x751b, &(0x7f0000000600)={0x0, 0xe382, 0x8, 0x1, 0x32c, 0x0, r1}, &(0x7f00000007c0), 0x0) execve(&(0x7f00000002c0)='./file0\x00', &(0x7f00000004c0)={[&(0x7f0000000380)='\'*&:-/]\x00', &(0x7f00000003c0)='\\(\x00', &(0x7f0000000400)='{\x00', &(0x7f0000000440)='\x00', &(0x7f0000000480)=':}\'({$[\x00']}, &(0x7f0000000780)={[&(0x7f0000000840)='\x00B\xf5yS\xa2\xbb\xd3\xdb\x03\xb1c\xdc\x88\x1b\xd8\x0e\x15\xf8\x06\x9b\xd6<\xf2\x05\f\"%c\xa0\xf9^\xfb\tF\x18\x8fl\x9f\xe6\xde\x05z&\xb7\xb0E\x96M>\x97\x7f)7\xd6\xf2GU\xeb\x16\x04g\xb8hY\x9c\xa5\xa5\xb4b\xe8 \xfe\xf9\x12\xd8\xfe5\x9f\xb7\xe9^\xdf\xd6a\xea7\xdd\x8a\x90]\xc1\x8b4\xd1g\x7fH\xbe\xdd\xd5\rk\x83\xc5&\xf2\xca\x84\xef\x0e\\\xbc\x83@S\xd6p\"\rT\xe0\x9e\x89\x12\x06\"\xc9\xa4\xed\x9c\x10\xb1\xbf\xf8\v\xa2\xe1\xb3\xf9\x06P)pB\xb7\x1d\xe3\xef\xebf*Gg?t\x12\xc9\x94u\xa1\x8d\xca\x00'/178, &(0x7f0000000580)='\xad\x00', &(0x7f0000000680)='+!!:\x00', &(0x7f00000006c0)='\x00', &(0x7f0000000700)='-/]#%\'@/*\x00', &(0x7f0000000740)='/selinux/policy\x00']}) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) write(r4, 0x0, 0x0) close(0x3) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0xb4ea, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 1m34.899310327s ago: executing program 3 (id=2113): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0xf) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$isdn_base(0x22, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newrule={0x1c, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x84, 0x0, 0x80}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000880}, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x9) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$int_in(r5, 0x5452, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r6) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2c, r7, 0x7fe96036b492d8bd, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x9}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x9}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xab}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20000004) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan3\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @private2, 0x9}, 0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000140)={0x2, 0x5, 0x20a, 0x7, 0xfffffffe, 0xfff, 0x4, 0x10000}, &(0x7f00000001c0)=0x20) 1m34.483950979s ago: executing program 3 (id=2115): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="01000000000000000000010000000400048008000100000000000400088014000c800c000b8008000a00feff000004000b80"], 0x38}}, 0x20000810) r1 = socket(0x10, 0x3, 0x0) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r2 = syz_io_uring_setup(0x1540, &(0x7f0000000640)={0x0, 0x7c4c, 0x8, 0x1, 0x5000032f}, &(0x7f00000006c0), 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r1, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000380)}, {0x0}, {0x0}, {&(0x7f00000004c0)}, {0x0}], 0x5}}], 0x2, 0x4048010) r3 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0x2) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) setrlimit(0xf, &(0x7f0000000040)={0x2, 0xf}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvfrom$rxrpc(r1, &(0x7f0000000700)=""/213, 0xd5, 0x20000043, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r5 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x22000) ioctl$SG_GET_LOW_DMA(r5, 0x227a, &(0x7f0000000300)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(r3, 0x80084121, 0x0) ioctl(r3, 0x0, 0x0) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80343, 0x0) ioctl$SNDCTL_SEQ_RESET(r6, 0x5100) 1m33.555250462s ago: executing program 32 (id=2115): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="01000000000000000000010000000400048008000100000000000400088014000c800c000b8008000a00feff000004000b80"], 0x38}}, 0x20000810) r1 = socket(0x10, 0x3, 0x0) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r2 = syz_io_uring_setup(0x1540, &(0x7f0000000640)={0x0, 0x7c4c, 0x8, 0x1, 0x5000032f}, &(0x7f00000006c0), 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r1, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000380)}, {0x0}, {0x0}, {&(0x7f00000004c0)}, {0x0}], 0x5}}], 0x2, 0x4048010) r3 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0x2) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) setrlimit(0xf, &(0x7f0000000040)={0x2, 0xf}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvfrom$rxrpc(r1, &(0x7f0000000700)=""/213, 0xd5, 0x20000043, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r5 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x22000) ioctl$SG_GET_LOW_DMA(r5, 0x227a, &(0x7f0000000300)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(r3, 0x80084121, 0x0) ioctl(r3, 0x0, 0x0) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80343, 0x0) ioctl$SNDCTL_SEQ_RESET(r6, 0x5100) 9.319478287s ago: executing program 0 (id=2419): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000600000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 9.161849179s ago: executing program 0 (id=2421): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x3f, 0x9, 0x0, 0x0, {0x4}, [@typed={0x4, 0x3ffd}, @typed={0x8, 0x8, 0x0, 0x0, @binary='a^&/'}]}, 0x20}}, 0x4004080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000001c0)={0x1, @sdr={0x30395056, 0x5}}) socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1e}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 8.231993525s ago: executing program 0 (id=2424): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x67a7}}, 0x30) umount2(&(0x7f0000000380)='./file0\x00', 0x1) syz_open_procfs(0xffffffffffffffff, 0x0) 8.108185318s ago: executing program 5 (id=2425): dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x4000000003) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x2, 0x36, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_linger(r2, 0x1, 0xd, 0x0, &(0x7f00000000c0)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="041817aaaaaaaaaa10031c4f7d3f475cb26912a999c1377f"], 0x1a) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) socket$inet(0x2, 0x1, 0x31) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x5e7}, 0x38) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) r3 = memfd_secret(0x0) ftruncate(r3, 0x581) ftruncate(r3, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000100)={0x0, 0x0}) write(r4, &(0x7f0000000280)="4591c28e8b83", 0x6) 4.27056489s ago: executing program 1 (id=2433): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) semctl$SETALL(0x0, 0x0, 0x14, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x1) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r1, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5d, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xb, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x4, 0x80000000, 0x1, 0x9, 0x7, 0x0, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x5, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x9, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0x8, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x1, 0x6, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0x8, 0x13e, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0xa3, 0x3, 0x0, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0x0, 0x9, 0x13, 0x0, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x6, 0x47, 0x7, 0x0, 0x11, 0x3, 0xffd, 0x7, 0x7, 0x8000, 0x7ff, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x40, 0x9, 0x6, 0xc41f, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0x8, 0x7, 0x9a33247, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) 4.155603637s ago: executing program 0 (id=2435): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x8080) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r7], 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r8}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (fail_nth: 3) 3.988757284s ago: executing program 1 (id=2436): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r0, 0x4, 0x42000) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000006800010027bd7000feffffff0a000000000000000c00088008000300ff000000060007000300000008000500", @ANYRES32=r2, @ANYBLOB="1874c8a4ad19bd7a482f0dbd58b6ec31559db7485792ea9dae875aed95403f7be3feb83924b614dc453a55a91581a403762467f803e8bcf5"], 0x34}, 0x1, 0x0, 0x0, 0x40070}, 0x40040d0) read$FUSE(r0, &(0x7f0000006100)={0x2020}, 0x2020) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) syz_io_uring_setup(0x112, &(0x7f00000002c0)={0x0, 0xaeba, 0x10000, 0x10003, 0x3bf, 0x0, r3}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) socketpair$unix(0x1, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x49800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, 0x0, &(0x7f0000000080)) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000005600231200000000000000000798215df968000000", @ANYRES32=0x0], 0x18}}, 0x0) recvmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x10448) 3.218392685s ago: executing program 5 (id=2437): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB], 0x48}}, 0x0) 3.215288266s ago: executing program 2 (id=2438): openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x6}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv4_delroute={0x44, 0x19, 0x901, 0x70bd29, 0x80, {0x2, 0x18, 0x10, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @private0}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3.139481992s ago: executing program 4 (id=2439): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r6, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800070003"], 0x3c}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r8, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000880)={{0x77359400}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa0}}, 0x0) r13 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$netlink(r10, &(0x7f0000000f40)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000008c0)=[{&(0x7f0000000440)={0x178, 0x15, 0x400, 0x70bd28, 0x25dfdbfc, "", [@generic="85baf945e6df8a4d416c4dc0c68f74ef46ef671ca527b2c1839d19770249f8a5e96ade59aa2e10923a53e5047c2575ee6e6c9c58e736d3eb9f34648e09c55a61d917cd71d1bd890a2dda7cbda2cf6635ab84af9ae72e5274af52ec1d0e63e63d51deaed68b62891af95d8a899ee454e9fc696c6102b4c2949340df10c7e0b26e9373f39cc5f8dc7cdd19a3525ca41172944d524378e52e48d54bdaed0ac8b933dcff544fe8886f", @generic="aa7c19a9b7bed6cdc2daab22dbe17bc60f4efdeab95a3ede0705c9addf79533925df351d68b68bf7cd031d391153d93c71f8e6451f2b94e7da9114125ca24b0eff18609fe431245556b3971532e1759c7cc69bab5cefae83a6a3fe8d23690ac27fc37921fc43fdfcac4d41a8ba24188a695c1f60c17741798a228f629200ab7e5985a9c0781bf3e3064ca443fca4ab77587d88d3b63ea3bfed30818581f53bb897abef3b98100a5e78077d3b094d47fe3aa77933ac40d17a2455c6cce5b1"]}, 0x178}, {&(0x7f0000000700)={0x8c, 0x3f, 0x800, 0x70bd2b, 0x25dfdbfb, "", [@generic="6c3d202a7df8dd5442e6c1c305cc5b5e483d7f39585b8bd42d87132fc44fe5cd0d40b0bcea3150875674edf092bfcaa125c700063216609626d0319357f3f06a88641661e362bc6ec6c746e212c00e8016036f46625fa9036d056f3d3c9cbb582c5aa16cb2203f333743755ca76bf6", @generic="00fbc1d98cea2ca3b877"]}, 0x8c}, {&(0x7f0000001480)={0x25c, 0x1d, 0x100, 0x70bd2d, 0x25dfdbfe, "", [@nested={0x4, 0x14e}, @generic="89d3f7831256ae76a9eed48a2c99851d262a187638b4691ee1a631f6a8666bae6496e7f3dadd8625d54a102674f199b93fd77e30b0329bba062a89056499eaac51e6d0291a66cd76e4a72faf540ed6b76ab32e5aab8bca2024957d757893ab3236388137b0f263741d69b05c9c7878", @generic="02a31eabe8b4530ce87c2041d999898560abcb68b1c507df4de638945b266b4e1b8a08971f74b341f0060bb7d01f102f3097e9523cc0a0d7faf980b96857b152ace903774277b7cf1effbc4713e2be4dcfa0de27c5a57ec26f84c21f671ddff1c4e9af42d177c20817d9394d9b08b4e3fa67521690518d03916752715434adf0e600272e6996266346aeac5da6b0dead728b59f719b275cf5b843c502bb17f732c310e3607d6a4902d3cb715c238a1edb176067aba0d8fc21a2cc524ce2dc1b949b8d463a5da0474ae8b94872e1be1af5347a4b99affb325257b", @typed={0x14, 0xae, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1a}}, @nested={0xe7, 0x125, 0x0, 0x1, [@nested={0x4, 0x1f}, @typed={0x8, 0xc5, 0x0, 0x0, @uid}, @generic="978510c5d14f0e3f516e540d2c5814079e10257dcb14ee2ee12c396f704633eeb0f1bbc52bbfc58bcb481acb77e1da2bb2f6a21a33048cbbb8e976299e33503385550eef349b19e857823bbd59e8880be4d3f35d6b629ed2f30f7a23b6659e0f359be6c249bc65a3586b9f6071d7f3fd7da856097cd2f5a07df81af15bd363fb20f9c343159c1298279887af89720925e6237b15d5ec87072564762ad62e895cf24586109292c82d16310f838b6fd37649dfd4fd46ef5201ee92137ff22fc6966c635a573ea968ba0bb6c3fc57b20f853e66526b708acc"]}]}, 0x25c}], 0x3, &(0x7f0000000e00)=[@rights={{0x1c, 0x1, 0x1, [r4, r2, r0]}}, @rights={{0x2c, 0x1, 0x1, [r7, r5, r7, r0, r10, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r5, 0xffffffffffffffff, r9, r7, r4]}}, @rights={{0x18, 0x1, 0x1, [r10, r2]}}, @rights={{0x20, 0x1, 0x1, [r9, r4, r9, r7]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r12}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r0, r2, 0xffffffffffffffff, r13, 0xffffffffffffffff]}}], 0x118, 0x80}, 0x20001001) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) r14 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) 3.107241621s ago: executing program 5 (id=2440): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x18) setuid(0xee01) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) cachestat(r0, &(0x7f0000000040)={0x5, 0xefc4}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) flock(0xffffffffffffffff, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = accept(r2, 0x0, 0x0) fcntl$setown(r3, 0x8, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x11) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000280)=0x3c6, &(0x7f0000000340)=0x2) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) connect$unix(r3, &(0x7f0000000480)=@abs={0x0, 0x0, 0x4e21}, 0x6e) socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000ffff00000b00000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000003c0)="2447bb4223ab53e4369dad1dd84f661bafa4979cf0f3911f7648a13011786c66118d54872eb4a2edf3d3c21ebbd3bd06dcb0c20c1d07c82bec03bc6189e1b02ea22681ff", 0x1, r4}, 0x38) 2.663327622s ago: executing program 5 (id=2441): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r4], 0x50}}, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x8080) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_GET_NETID(r7, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, r9, 0x10, 0x70bd29, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200080c4) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYBLOB="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", @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r8], 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r11, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 2.610666296s ago: executing program 4 (id=2442): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000bc0)="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", 0xce}, {&(0x7f0000000ac0)="143637cdd51147285f157a92293cda962b4cd356b5d94c77d0142c888c9d45cd1eb125a88aa81925f67b26338cff8924a68bfc6f785d4318c7a4b156bb84a5c613d04aa9607c0c6fcb9966cea50e1ed4eec9d3807e2a64de7b35a632611b3c743ff5c4e274a21c2cc4e50eb7bec3153f98cfad3dc2888771eee9c1536f5cea0db9a89a69799abac26c2df9154f24dbb92ef3ac38064201ad39a576d31c60d81dfc2a0811f4a1f13ab8fb6024e645a8f4e4bbcdd8750e4afc564938a7a8aa41c68f3d213d37379793ddc5daacccc1a697ae60baac2ded4e65fc1da52dd5e13760c81e0d9fc58cad3d2a6c7c", 0xfffffc86}], 0x4, &(0x7f00000009c0), 0x0, 0x4054}], 0x1, 0x10800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0xfff3}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.468551291s ago: executing program 0 (id=2443): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[@ANYBLOB="98010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000000000580108805400070100000000000000000800050000000000080005000000000008000500000000000800050000000000080005000000000308000500000000000800050000000000080006000000000008000500000000002c00078008000500000000000800060000000000080006"], 0x198}}, 0x0) 2.284177031s ago: executing program 1 (id=2444): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x5, 0x6, 0x8, 0x1, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32=r0, @ANYBLOB="00005105feeb18a139a500000006000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000f0ffff00000000000000"], 0x50) 2.266163016s ago: executing program 4 (id=2445): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x8080) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r7], 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r8}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 2.131743285s ago: executing program 0 (id=2446): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0xffffffff}, 0x6e) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe}) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x5, 0x0, 0x400003}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x1, &(0x7f0000000040)=0x8, 0x4) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xcf, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r6, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x91}, @multicast2}}}}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r7, &(0x7f0000000340)='G', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) syz_usb_connect(0x5, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000092ecc620ac05c2773aeb010203010902120001000024000904c40100fffd0180d8ac93a26d01513a6f122ff19f5a6a60a627849cbef75ca2d8dad938af74d0ef0049745a2203fd9b5eeaf4ffb94528a995856bf366104793b19f80f5168ae0913e7f1760f2aa169736916318a58935db7928fb682d"], 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000000)='scalable', 0x8) shutdown(r7, 0x1) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r8, 0xf55cd000) 1.924851984s ago: executing program 2 (id=2447): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r0, 0x4, 0x42000) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000006800010027bd7000feffffff0a000000000000000c00088008000300ff000000060007000300000008000500", @ANYRES32=r2, @ANYBLOB="1874c8a4ad19bd7a482f0dbd58b6ec31559db7485792ea9dae875aed95403f7be3feb83924b614dc453a55a91581a403762467f803e8bcf5"], 0x34}, 0x1, 0x0, 0x0, 0x40070}, 0x40040d0) read$FUSE(r0, &(0x7f0000006100)={0x2020}, 0x2020) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r4 = syz_io_uring_setup(0x112, &(0x7f00000002c0)={0x0, 0xaeba, 0x10000, 0x10003, 0x3bf, 0x0, r3}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) socketpair$unix(0x1, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x49800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, 0x0, &(0x7f0000000080)) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000005600231200000000000000000798215df968000000", @ANYRES32=0x0], 0x18}}, 0x0) recvmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c2045589b94347390eb6e723b6bedbd69332089f6b846c922b7838ac7b273c909c857a3cac40c6449c6af2b39664d4b"]) r8 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x10448) 1.601616302s ago: executing program 5 (id=2448): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) epoll_create1(0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x5000000, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600ffffff800a006a3600000000fc010000000000000000000000000000000000000000000005000500000000000a0000000000000000000000000000000000000000000000000000000000c70008001200020002"], 0xa0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x80000000000000a, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 1.512847315s ago: executing program 4 (id=2449): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x1fffe000000}) openat$ptp0(0xffffffffffffff9c, 0x0, 0xc0542, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) 1.312013784s ago: executing program 1 (id=2450): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fcdbdf250200000008000700ac14141b0800020005000000080004"], 0x48}}, 0x0) 783.481618ms ago: executing program 4 (id=2451): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x18) setuid(0xee01) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) cachestat(r0, &(0x7f0000000040)={0x5, 0xefc4}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) flock(0xffffffffffffffff, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = accept(r2, 0x0, 0x0) fcntl$setown(r3, 0x8, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x11) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000280)=0x3c6, &(0x7f0000000340)=0x2) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) connect$unix(r3, &(0x7f0000000480)=@abs={0x0, 0x0, 0x4e21}, 0x6e) socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000ffff00000b00000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000003c0)="2447bb4223ab53e4369dad1dd84f661bafa4979cf0f3911f7648a13011786c66118d54872eb4a2edf3d3c21ebbd3bd06dcb0c20c1d07c82bec03bc6189e1b02ea22681ff", 0x1, r4}, 0x38) 752.094386ms ago: executing program 2 (id=2452): ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000080)={0x0, 0x4, 0xf2, 0x5, @vifc_lcl_addr=@multicast1, @rand_addr=0x64010100}, 0x10) openat$ubi_ctrl(0xffffff9c, 0x0, 0x2000, 0x0) getpid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640001000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r2], 0x40}, 0x1, 0x0, 0x0, 0x140000c7}, 0x4000084) syz_emit_ethernet(0x6e, &(0x7f00000002c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b59f00", 0x38, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x1, {0x7, 0x6, "d32d62", 0x2, 0x2c, 0x0, @local, @local, [], "e20faee2dfbdb061"}}}}}}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeb}, 0x94) 699.049347ms ago: executing program 1 (id=2453): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x1fffe000000}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) 603.842197ms ago: executing program 2 (id=2454): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r0, 0x4, 0x42000) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000006800010027bd7000feffffff0a000000000000000c00088008000300ff000000060007000300000008000500", @ANYRES32=r2, @ANYBLOB="1874c8a4ad19bd7a482f0dbd58b6ec31559db7485792ea9dae875aed95403f7be3feb83924b614dc453a55a91581a403762467f803e8bcf5"], 0x34}, 0x1, 0x0, 0x0, 0x40070}, 0x40040d0) read$FUSE(r0, &(0x7f0000006100)={0x2020}, 0x2020) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) syz_io_uring_setup(0x112, &(0x7f00000002c0)={0x0, 0xaeba, 0x10000, 0x10003, 0x3bf, 0x0, r3}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) socketpair$unix(0x1, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x49800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, 0x0, &(0x7f0000000080)) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000005600231200000000000000000798215df968000000", @ANYRES32=0x0], 0x18}}, 0x0) recvmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x10448) 579.215533ms ago: executing program 4 (id=2455): mknodat(0xffffffffffffff9c, &(0x7f0000001cc0)='./file0\x00', 0x2, 0x80e2e8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34808521, 0x401, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x4, 0x3, 0x5}}, 0x30) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYRES16=r2, @ANYRESOCT=r0, @ANYRESHEX=r4], 0xd) chdir(&(0x7f00000001c0)='./bus\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@ocfs2={0xc, 0x1, {0x10000000}}, 0x0, 0x1200) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r3, &(0x7f00000000c0), 0x0, 0x3000000000000000}]) dup3(r3, r0, 0x0) 518.610643ms ago: executing program 5 (id=2456): syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905ee63dd0000000009050300000000000009050cf2010002060209050f000000400000090507c6a6"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo\x00') ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpgid(0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x11, r3, 0x800000000000) sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) socket(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8}) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r6, 0x29, 0x16, &(0x7f0000fcb000), 0x4) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f0000000000)={0xffff1000, 0x13800, 0x8}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) unshare(0x6a040000) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)) 171.173055ms ago: executing program 2 (id=2457): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in6=@private0, 0x0, 0x2, 0x3, 0x4}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@rand_addr=0x64010103, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x5000000, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x20008000) 70.286696ms ago: executing program 1 (id=2458): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x20) mkdir(&(0x7f0000000000)='./bus\x00', 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') utimensat(r0, &(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280)={{}, {0x77359400}}, 0x0) sendmsg$inet6(r0, &(0x7f0000000b80)={&(0x7f0000000400)={0xa, 0x4e21, 0x2, @private1, 0x8}, 0x1c, &(0x7f0000000a80)=[{&(0x7f0000000500)="bacdb665a95b889e11a6c4115699ae9fb0de9eb07f0db9641ffcff3cbf7570cc503835fb0de93ede2b712d7dcaa6b89e747e330ab0424339c8e6842075c20d726c8a2fd56993d340a85e388095aaf3b256c7941b97bbfcd26795ea55531c6823685ca37bc9ccf053e9d9a58583bef0d5b3", 0x71}, {&(0x7f0000000440)="94fa3effcb72f207f97ec8c249c4dc929745364dfc", 0x15}, {&(0x7f0000000580)="f6b9b22d3cce215e017ae36b113fbc2359990448daa31ae740e2f5c0447d730170cebd2329711234ac8ba95a61743f8ac53cf30a35aba036340ca20ba4f4dc9069220d2acaf610f9d3a63daffec29ae84ee84dba166a03395cb63aafa860c3d6e5a6719146793983e4449516bdccf5968e901517625a97375c35f2d0cac04967ba30625cb54a87b6ddd3b483f6ef46c4e6cb98f8e8d403b7da9d0fa2fb9e3eecffc21b047815873638efb9427ea01e859adfc362a42d0ad2078451cf51db387bbade9b85", 0xc4}, {&(0x7f0000000680)="030bc143fe5c0eea6aeb92d69cf9cbe9ba8ef2992cd7cd4f195bbb363a099b2cb4f2ce5a42a2fbd3f3d158596981ceefdd7933f6f3ca9ab08d4a30646e69dc894a6bff38e613b2465f5c623f2ed8d6b2fddc5e781e994cabe41e2b6bff1268a9c131e9d850ef32191aaaedef601f23d01dab161b6aaebdce699e9a727b19845b6126018e08bffa9c99a81a75e2ee637e22ac3b63f3cb84465bddefc4c2ea31e10dc68e9b82c69f51", 0xa8}, {&(0x7f0000000740)="040e1d1c595d4bfdec0805d80f6a1875541033a2e3f7e3d0c45bc3b56791358043c43f686770aa1113ae912f6f0f2cec6ef84df6cf5694f57cccf64b4a2c00c635d2a2445ee4aa0dc9c1fa15bec66f361b2c605d3416c39a15550eb1a3b8629f5056528f5b515e936054a4201f40049931877a977b69c84856b929d7090f8fcc8786723e963a9d31ad85b4d0799d998af6cee7b5d8a01fbc6cbeda4eba26", 0x9e}, {&(0x7f0000000880)="d0f999b1f3de3e40e1454c33db0a4f1595f56df14ab8d830e0b484a2ff01864ed35cb5e4728e213cc12994b89cd89ac3a38559396417e916e7dca1c5c7e7675dbc3ff616f2a75c4f8a2cdebe92535b48b1b10fc27f9d8fa7743288a8a0f4e1379e66051922f0bb4fe00039a1c1800dc12e7f305005e9f5584e7c4562d5a60b808abcd4d8180385dc6850a046d0b343aa0dba4f613a16e7c012712b18bdf879a78562", 0xa2}, {&(0x7f0000000800)="0ccea4252cb9222fd272587c4cdcc743283f23868defac4d57854d7d87f894904cb66ae01558195de9c5fb06", 0x2c}, {&(0x7f0000000940)="382513165644ebe4050c9c92195c7e4f5607d7ea515767c408d1abd0ff9bf975cf2a56732c26d255137c5ded9bfcf287df24718bbe9912ca7504ebdd7cc5a19dbdb5213d9c", 0x45}, {&(0x7f00000009c0)="1e6ee1ec0e60df27803c510508ad049efdba37c1576e8969d740e964dfbdfc888af4320444727436b2970ddde0818d2e0ff74cd6c798c94181f2e042623d723e1af592892088630d9edd15ae40c1de6dc6cb5fe04a060fc74a0bc80b3e1319534baf6f6de0514f4efb1c045f060b4aae016f19879a0f1736fe19928e9c63ec3aeeeb2825997139720d7679db8c97b886f5adbc3c91b7435ef5bba8516ac47d6b72ced7807698a53913401448295f9c59c4c2ac96811f", 0xb6}], 0x9, &(0x7f0000000b40)=[@dontfrag={{0x14, 0x29, 0x3e, 0x35e}}], 0x18}, 0x20008810) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) r4 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2280, 0x82) 0s ago: executing program 2 (id=2459): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chdir(0x0) rmdir(&(0x7f0000000380)='./file0/../file0\x00') mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='minix\x00', 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="0b000000000000000a00000000000005ff02000000000000000000000000000102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x110) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0x46, &(0x7f0000000080)={@link_local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x10, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x9, 0x100, @val=0x80}}}}}}}}, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f00000001c0), 0x10) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r6, 0x35, 0x0, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300), 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0d00000018000000", @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=r7], 0x20) kernel console output (not intermixed with test programs): evice=b8.c5 [ 509.564439][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.572561][ T24] usb 2-1: Product: syz [ 509.577020][ T24] usb 2-1: Manufacturer: syz [ 509.585986][ T24] usb 2-1: SerialNumber: syz [ 509.626091][ T24] usb 2-1: config 0 descriptor?? [ 509.637053][ T24] iowarrior 2-1:0.186: no interrupt-in endpoint found [ 509.823055][ T5927] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 509.833655][ T5927] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 509.842667][ T5927] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 509.852090][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.886441][ T5927] usb 4-1: config 0 descriptor?? [ 510.140982][ T5927] Bluetooth: Can't get state to change to load ram patch err [ 510.213476][ T5927] Bluetooth: Loading patch file failed [ 510.300932][ T5927] ath3k 4-1:0.0: probe with driver ath3k failed with error -71 [ 510.368940][ T5927] usb 4-1: USB disconnect, device number 37 [ 510.424581][T12130] tipc: Enabling of bearer rejected, failed to enable media [ 510.618894][T12137] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 511.454633][T12149] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 512.034346][ T5930] usb 2-1: USB disconnect, device number 34 [ 512.172639][T12158] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1701'. [ 512.362422][ T30] audit: type=1400 audit(1766887548.459:526): avc: denied { write } for pid=12161 comm="syz.1.1702" lport=40273 faddr=::ffff:100.1.1.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 512.700741][ T118] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 512.750365][ T30] audit: type=1400 audit(1766887548.839:527): avc: denied { write } for pid=12172 comm="syz.2.1704" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 512.804207][T12173] netlink: 'syz.2.1704': attribute type 4 has an invalid length. [ 512.854717][T12173] rdma_rxe: rxe_newlink: failed to add lo [ 512.861795][ T118] usb 2-1: Using ep0 maxpacket: 8 [ 512.871906][ T118] usb 2-1: unable to get BOS descriptor or descriptor too short [ 512.884421][ T118] usb 2-1: config 1 has an invalid interface number: 13 but max is 0 [ 512.897080][ T118] usb 2-1: config 1 has no interface number 0 [ 512.914961][ T118] usb 2-1: config 1 interface 13 has no altsetting 0 [ 512.941087][ T118] usb 2-1: New USB device found, idVendor=087d, idProduct=5704, bcdDevice=47.da [ 513.079750][ T118] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.162390][T12179] netlink: 'syz.2.1706': attribute type 1 has an invalid length. [ 513.170164][T12179] FAULT_INJECTION: forcing a failure. [ 513.170164][T12179] name failslab, interval 1, probability 0, space 0, times 0 [ 513.202886][T12179] CPU: 0 UID: 0 PID: 12179 Comm: syz.2.1706 Tainted: G L syzkaller #0 PREEMPT(full) [ 513.202907][T12179] Tainted: [L]=SOFTLOCKUP [ 513.202911][T12179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 513.202918][T12179] Call Trace: [ 513.202922][T12179] [ 513.202926][T12179] dump_stack_lvl+0x16c/0x1f0 [ 513.202947][T12179] should_fail_ex+0x512/0x640 [ 513.202963][T12179] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 513.202975][T12179] should_failslab+0xc2/0x120 [ 513.202991][T12179] kmem_cache_alloc_noprof+0x83/0x770 [ 513.203002][T12179] ? skb_clone+0x190/0x3f0 [ 513.203017][T12179] ? skb_clone+0x190/0x3f0 [ 513.203027][T12179] skb_clone+0x190/0x3f0 [ 513.203038][T12179] netlink_deliver_tap+0xabd/0xd30 [ 513.203055][T12179] netlink_unicast+0x71f/0x870 [ 513.203071][T12179] ? __pfx_netlink_unicast+0x10/0x10 [ 513.203084][T12179] ? genl_rcv_msg+0x4bb/0x800 [ 513.203103][T12179] netlink_ack+0x696/0xb80 [ 513.203120][T12179] netlink_rcv_skb+0x332/0x420 [ 513.203133][T12179] ? __pfx_genl_rcv_msg+0x10/0x10 [ 513.203154][T12179] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 513.203174][T12179] ? netlink_deliver_tap+0x1ae/0xd30 [ 513.203188][T12179] genl_rcv+0x28/0x40 [ 513.203201][T12179] netlink_unicast+0x5aa/0x870 [ 513.203216][T12179] ? __pfx_netlink_unicast+0x10/0x10 [ 513.203235][T12179] netlink_sendmsg+0x8c8/0xdd0 [ 513.203251][T12179] ? __pfx_netlink_sendmsg+0x10/0x10 [ 513.203270][T12179] ____sys_sendmsg+0xa5d/0xc30 [ 513.203285][T12179] ? copy_msghdr_from_user+0x10a/0x160 [ 513.203297][T12179] ? __pfx_____sys_sendmsg+0x10/0x10 [ 513.203318][T12179] ___sys_sendmsg+0x134/0x1d0 [ 513.203330][T12179] ? __pfx____sys_sendmsg+0x10/0x10 [ 513.203360][T12179] __sys_sendmsg+0x16d/0x220 [ 513.203372][T12179] ? __pfx___sys_sendmsg+0x10/0x10 [ 513.203393][T12179] do_syscall_64+0xcd/0xf80 [ 513.203408][T12179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.203420][T12179] RIP: 0033:0x7f4955f8f749 [ 513.203430][T12179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.203440][T12179] RSP: 002b:00007f4956ebc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 513.203451][T12179] RAX: ffffffffffffffda RBX: 00007f49561e5fa0 RCX: 00007f4955f8f749 [ 513.203459][T12179] RDX: 000000000000c010 RSI: 0000200000000040 RDI: 0000000000000005 [ 513.203466][T12179] RBP: 00007f4956ebc090 R08: 0000000000000000 R09: 0000000000000000 [ 513.203472][T12179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 513.203479][T12179] R13: 00007f49561e6038 R14: 00007f49561e5fa0 R15: 00007ffea1fad3d8 [ 513.203499][T12179] [ 513.487859][ T118] usb 2-1: Product: syz [ 513.505154][ T118] usb 2-1: Manufacturer: syz [ 513.522681][ T118] usb 2-1: SerialNumber: syz [ 513.540402][ T30] audit: type=1400 audit(1766887549.619:528): avc: denied { mount } for pid=12176 comm="syz.4.1707" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 514.071762][T12194] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1710'. [ 514.119123][ T30] audit: type=1400 audit(1766887550.209:529): avc: denied { setopt } for pid=12161 comm="syz.1.1702" lport=40273 faddr=::ffff:100.1.1.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 514.363391][ T118] kaweth 2-1:1.13: Firmware present in device. [ 514.376722][ T118] kaweth 2-1:1.13: Error reading configuration (-71), no net device created [ 514.394648][ T118] kaweth 2-1:1.13: probe with driver kaweth failed with error -5 [ 514.409198][ T118] usb 2-1: USB disconnect, device number 35 [ 514.465981][ T24] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 514.642595][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 514.789718][ T24] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 514.801182][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 514.818172][ T24] usb 3-1: config 0 has no interface number 0 [ 514.831415][ T24] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 514.849500][ T24] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 514.858917][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.867395][ T24] usb 3-1: Product: syz [ 514.871822][ T24] usb 3-1: Manufacturer: syz [ 514.876489][ T24] usb 3-1: SerialNumber: syz [ 514.884033][ T24] usb 3-1: config 0 descriptor?? [ 514.893317][ T24] iowarrior 3-1:0.186: no interrupt-in endpoint found [ 515.311658][ T5825] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 515.471320][ T5825] usb 2-1: Using ep0 maxpacket: 32 [ 515.525104][ T5825] usb 2-1: config 0 has an invalid interface number: 191 but max is 0 [ 515.534381][ T5825] usb 2-1: config 0 has no interface number 0 [ 515.540857][ T5825] usb 2-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24 [ 515.556811][ T5825] usb 2-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1 [ 515.566202][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.574621][ T5825] usb 2-1: Product: syz [ 515.578786][ T5825] usb 2-1: Manufacturer: syz [ 515.583813][ T5825] usb 2-1: SerialNumber: syz [ 515.590932][ T5825] usb 2-1: config 0 descriptor?? [ 515.600054][ T90] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 515.601679][ T24] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 515.626788][T12221] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 515.771598][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 515.786936][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 515.804248][ T90] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.804292][ T24] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 515.829787][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.837967][ T90] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 515.856717][ T24] usb 4-1: config 0 descriptor?? [ 515.865298][T12221] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 515.866621][ T24] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 515.883963][ T90] usb 5-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 515.910054][ T90] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.942883][ T90] usb 5-1: config 0 descriptor?? [ 516.209674][T12230] netlink: 'syz.1.1719': attribute type 2 has an invalid length. [ 516.409886][ T5825] asix 2-1:0.191 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 516.427047][ T5825] asix 2-1:0.191: probe with driver asix failed with error -71 [ 516.450592][ T5825] usb 2-1: USB disconnect, device number 36 [ 516.622285][ T90] megaworld 0003:07B5:0312.0005: hidraw0: USB HID v0.00 Device [HID 07b5:0312] on usb-dummy_hcd.4-1/input0 [ 516.661356][ T90] megaworld 0003:07B5:0312.0005: no inputs found [ 516.809826][ T90] usb 5-1: USB disconnect, device number 38 [ 517.350701][ T90] usb 3-1: USB disconnect, device number 38 [ 517.649081][T12249] input: syz0 as /devices/virtual/input/input32 [ 518.529899][ T7736] lec:lec_start_xmit: lec0:No lecd attached [ 518.736644][ T24] usb 4-1: USB disconnect, device number 38 [ 519.182966][T12278] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 519.832595][ T6075] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 520.001886][ T6075] usb 5-1: device descriptor read/64, error -71 [ 520.281715][ T6075] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 520.531389][ T6075] usb 5-1: device descriptor read/64, error -71 [ 521.019224][ T6075] usb usb5-port1: attempt power cycle [ 521.381344][ T6075] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 521.489797][ T6075] usb 5-1: device descriptor read/8, error -71 [ 522.181751][ T12] ip6gretap1: left promiscuous mode [ 522.305665][T12319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 522.314041][T12319] batadv_slave_0: entered promiscuous mode [ 522.319899][T12319] batadv_slave_0: entered allmulticast mode [ 523.089943][T12332] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1753'. [ 523.671301][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5140 ms [ 523.679348][ C0] lec:lec_tx_timeout: lec0 [ 524.105005][T12345] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1756'. [ 524.636184][T12345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1756'. [ 524.669208][T12345] bridge0: left allmulticast mode [ 524.929860][ T24] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 525.376943][T12355] netlink: 'syz.0.1759': attribute type 3 has an invalid length. [ 525.400701][T12355] netlink: 'syz.0.1759': attribute type 3 has an invalid length. [ 525.428239][T12355] netlink: 'syz.0.1759': attribute type 3 has an invalid length. [ 525.440896][T12355] netlink: 'syz.0.1759': attribute type 3 has an invalid length. [ 525.476279][T12355] netlink: 'syz.0.1759': attribute type 3 has an invalid length. [ 525.484301][T12355] netlink: 'syz.0.1759': attribute type 3 has an invalid length. [ 525.495201][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 525.508283][T12355] netlink: 'syz.0.1759': attribute type 3 has an invalid length. [ 525.536266][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 525.551967][T12355] netlink: 'syz.0.1759': attribute type 3 has an invalid length. [ 525.559809][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 525.569791][T12355] netlink: 'syz.0.1759': attribute type 3 has an invalid length. [ 525.578601][T12355] netlink: 'syz.0.1759': attribute type 3 has an invalid length. [ 525.587269][ T24] usb 2-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 525.597931][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.613916][ T24] usb 2-1: config 0 descriptor?? [ 525.860659][ T5981] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 526.012353][ T5981] usb 3-1: Using ep0 maxpacket: 16 [ 526.032139][ T5981] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.032256][ T5981] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 526.032381][ T5981] usb 3-1: config 0 interface 0 has no altsetting 0 [ 526.032676][ T5981] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 526.032884][ T5981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.069359][ T5981] usb 3-1: config 0 descriptor?? [ 526.310770][T12371] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1766'. [ 526.683001][T12357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.700377][T12357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.818836][ T5981] hid (null): invalid report_count 16974337 [ 526.837702][ T5981] hid (null): report_id 766643193 is invalid [ 526.854566][ T5981] hid (null): unknown global tag 0xc [ 526.928231][T12377] sd 0:0:1:0: device reset [ 527.328229][ T30] audit: type=1400 audit(1766887563.419:530): avc: denied { write } for pid=12356 comm="syz.2.1760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 527.380488][ T30] audit: type=1326 audit(1766887563.449:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12356 comm="syz.2.1760" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4955f8f749 code=0x0 [ 527.406323][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 527.418965][ T5981] hid (null): unknown global tag 0xd [ 527.432645][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 527.540545][ T5981] cougar 0003:060B:500A.0006: unknown main item tag 0x0 [ 527.548395][ T24] usb 2-1: USB disconnect, device number 37 [ 527.561380][ T5981] cougar 0003:060B:500A.0006: unknown main item tag 0x0 [ 527.568394][ T5981] cougar 0003:060B:500A.0006: unknown main item tag 0x0 [ 527.594010][ T5981] cougar 0003:060B:500A.0006: unknown main item tag 0x0 [ 527.602529][ T5981] cougar 0003:060B:500A.0006: unknown main item tag 0x0 [ 527.609918][ T5981] cougar 0003:060B:500A.0006: unknown main item tag 0x0 [ 527.618005][ T5981] cougar 0003:060B:500A.0006: unknown main item tag 0x0 [ 527.626221][ T5981] cougar 0003:060B:500A.0006: unknown main item tag 0x0 [ 527.635256][ T5981] cougar 0003:060B:500A.0006: unknown main item tag 0x0 [ 527.646088][ T5981] cougar 0003:060B:500A.0006: unknown main item tag 0x0 [ 527.653970][ T5981] cougar 0003:060B:500A.0006: unexpected long global item [ 527.662900][ T5981] cougar 0003:060B:500A.0006: parse failed [ 527.668827][ T5981] cougar 0003:060B:500A.0006: probe with driver cougar failed with error -22 [ 528.069447][T12398] xt_NFQUEUE: number of queues (51632) out of range (got 109621) [ 528.331389][ T5930] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 528.522867][ T5930] usb 4-1: Using ep0 maxpacket: 16 [ 528.556781][ T5930] usb 4-1: config 0 has no interfaces? [ 528.579162][ T5930] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 528.675527][ T5981] usb 3-1: USB disconnect, device number 39 [ 528.681951][ T5930] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 528.755613][ T5930] usb 4-1: Manufacturer: syz [ 528.790056][ T5930] usb 4-1: config 0 descriptor?? [ 528.792949][T12403] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1777'. [ 529.700317][ T30] audit: type=1400 audit(1766887565.789:532): avc: denied { mounton } for pid=12414 comm="syz.1.1780" path="/353/file0" dev="tmpfs" ino=1854 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 529.920523][ T30] audit: type=1400 audit(1766887566.009:533): avc: denied { bind } for pid=12417 comm="syz.1.1781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 529.986689][ T30] audit: type=1400 audit(1766887566.039:534): avc: denied { accept } for pid=12417 comm="syz.1.1781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 530.218103][T12422] 8021q: adding VLAN 0 to HW filter on device bond3 [ 530.721622][ T24] usb 4-1: USB disconnect, device number 39 [ 530.975373][ T5930] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 531.321410][ T5930] usb 5-1: device descriptor read/64, error -71 [ 531.511555][T12453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1793'. [ 531.520613][T12453] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1793'. [ 531.571424][ T5930] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 531.711869][ T30] audit: type=1400 audit(1766887567.809:535): avc: denied { ioctl } for pid=12456 comm="syz.1.1795" path="socket:[32281]" dev="sockfs" ino=32281 ioctlcmd=0x660c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 531.861520][ T5930] usb 5-1: device descriptor read/64, error -71 [ 531.936163][ T30] audit: type=1400 audit(1766887568.009:536): avc: denied { write } for pid=12456 comm="syz.1.1795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 531.972528][ T5930] usb usb5-port1: attempt power cycle [ 532.310643][ T30] audit: type=1400 audit(1766887568.029:537): avc: denied { ioctl } for pid=12456 comm="syz.1.1795" path="socket:[33305]" dev="sockfs" ino=33305 ioctlcmd=0x9431 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 532.337870][ T5930] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 532.371550][ T6075] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 532.379744][ T5930] usb 5-1: device descriptor read/8, error -71 [ 532.998526][ T6075] usb 2-1: device descriptor read/64, error -71 [ 533.085749][ T30] audit: type=1400 audit(1766887569.179:538): avc: denied { create } for pid=12471 comm="syz.2.1799" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 533.106677][ T5930] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 533.115657][ T30] audit: type=1400 audit(1766887569.199:539): avc: denied { unlink } for pid=12471 comm="syz.2.1799" name="file0" dev="ramfs" ino=32306 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 533.151767][ T5930] usb 5-1: device descriptor read/8, error -71 [ 533.211965][T12478] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1798'. [ 533.292817][ T5930] usb usb5-port1: unable to enumerate USB device [ 533.311492][ T6075] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 533.339451][T12483] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1801'. [ 533.519967][ T6075] usb 2-1: device descriptor read/64, error -71 [ 533.641941][ T6075] usb usb2-port1: attempt power cycle [ 534.002323][ T6075] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 534.024700][ T6075] usb 2-1: device descriptor read/8, error -71 [ 534.262019][ T6075] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 534.470798][ T6075] usb 2-1: device descriptor read/8, error -71 [ 534.611820][ T6075] usb usb2-port1: unable to enumerate USB device [ 534.762813][ T30] audit: type=1800 audit(1766887570.849:540): pid=12494 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1804" name="nullb0" dev="tmpfs" ino=2010 res=0 errno=0 [ 534.831733][ T30] audit: type=1400 audit(1766887570.879:541): avc: denied { listen } for pid=12493 comm="syz.0.1804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 535.221920][ T5981] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 535.422036][T12502] 9p: Bad value for 'wfdno' [ 535.451478][ T5981] usb 5-1: Using ep0 maxpacket: 8 [ 535.458154][ T5981] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 535.467598][ T5981] usb 5-1: config 0 has no interface number 0 [ 535.476881][ T5981] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 535.502011][ T5981] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 535.526672][ T5981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.542547][ T5981] usb 5-1: Product: syz [ 535.546807][ T5981] usb 5-1: Manufacturer: syz [ 535.553714][ T5981] usb 5-1: SerialNumber: syz [ 535.560197][ T5981] usb 5-1: config 0 descriptor?? [ 535.570340][ T5981] iowarrior 5-1:0.186: no interrupt-in endpoint found [ 536.736335][T12527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1815'. [ 537.373250][T12533] usb usb8: usbfs: process 12533 (syz.3.1817) did not claim interface 0 before use [ 537.648115][ T5930] IPVS: starting estimator thread 0... [ 537.658741][ T30] audit: type=1400 audit(1766887573.749:542): avc: denied { create } for pid=12541 comm="syz.2.1818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 537.699070][ T30] audit: type=1400 audit(1766887573.779:543): avc: denied { setopt } for pid=12541 comm="syz.2.1818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 537.741341][T12545] IPVS: using max 42 ests per chain, 100800 per kthread [ 538.073596][ T5981] usb 5-1: USB disconnect, device number 47 [ 538.565331][T12561] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 539.147683][T12572] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 539.243965][T12577] validate_nla: 137 callbacks suppressed [ 539.243983][T12577] netlink: 'syz.4.1829': attribute type 10 has an invalid length. [ 539.306376][T12577] bond0: (slave batadv0): Error -22 calling dev_set_mtu [ 539.347718][T12576] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1827'. [ 540.175646][ T30] audit: type=1326 audit(1766887576.249:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12589 comm="syz.1.1831" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f6c98f749 code=0x0 [ 541.433403][ T30] audit: type=1326 audit(1766887576.529:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12589 comm="syz.1.1831" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5f6c98f749 code=0x0 [ 543.066539][T12613] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1837'. [ 543.084591][T12614] : renamed from bond_slave_0 (while UP) [ 543.622509][T12627] xt_NFQUEUE: number of queues (51632) out of range (got 109621) [ 543.961677][ T43] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 544.374955][ T43] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 544.395455][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.497598][T12637] xt_CT: You must specify a L4 protocol and not use inversions on it [ 544.952643][ T43] usb 4-1: Product: syz [ 544.956859][ T43] usb 4-1: Manufacturer: syz [ 544.999942][ T43] usb 4-1: SerialNumber: syz [ 545.660113][ T30] audit: type=1400 audit(1766887581.749:546): avc: denied { create } for pid=12644 comm="syz.4.1847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 545.762862][ T5981] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 545.763307][ T30] audit: type=1400 audit(1766887581.859:547): avc: denied { connect } for pid=12644 comm="syz.4.1847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 546.021555][ T6075] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 547.437505][ T6075] usb 3-1: config 0 has an invalid descriptor of length 110, skipping remainder of the config [ 547.597804][ T5981] usb 2-1: device descriptor read/all, error -71 [ 547.687021][ T6075] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 547.718692][ T6075] usb 3-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 547.727718][ T43] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 547.734336][ T6075] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.746829][ T43] cdc_ncm 4-1:1.0: bind() failure [ 547.776270][ T43] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 547.783498][ T43] cdc_ncm 4-1:1.1: bind() failure [ 547.809792][ T43] usb 4-1: USB disconnect, device number 40 [ 547.881383][ T6075] usb 3-1: Product: syz [ 547.886037][ T6075] usb 3-1: Manufacturer: syz [ 547.890689][ T6075] usb 3-1: SerialNumber: syz [ 547.898774][ T6075] usb 3-1: config 0 descriptor?? [ 548.330115][ T6075] powermate 3-1:0.0: probe with driver powermate failed with error -22 [ 548.361438][ T6075] usb 3-1: USB disconnect, device number 40 [ 548.739035][T12680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1857'. [ 548.893103][T12680] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 549.078533][T12680] bridge2: entered allmulticast mode [ 549.385502][T12688] loop8: detected capacity change from 0 to 2 [ 549.403658][T12688] Dev loop8: unable to read RDB block 2 [ 549.418128][T12688] loop8: unable to read partition table [ 549.438002][T12688] loop8: partition table beyond EOD, truncated [ 549.456488][T12688] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 549.536381][ T5185] Dev loop8: unable to read RDB block 2 [ 549.571488][ T5185] loop8: unable to read partition table [ 549.609948][ T5185] loop8: partition table beyond EOD, truncated [ 549.642910][T12680] binder: 12673:12680 unknown command 1077961494 [ 549.654954][T12680] binder: 12673:12680 ioctl c0306201 200000000100 returned -22 [ 549.804757][T12692] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1861'. [ 550.268537][T12699] tipc: Enabling of bearer rejected, failed to enable media [ 551.524798][T12711] binder: 12710:12711 ioctl c0306201 2000000003c0 returned -14 [ 551.525177][T12711] binder: 12710:12711 ioctl c0306201 200000000180 returned -14 [ 552.992891][T12729] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 553.260501][ T6075] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 553.441980][ T6075] usb 2-1: Using ep0 maxpacket: 32 [ 553.463725][ T6075] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 553.480136][ T6075] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.504224][ T6075] usb 2-1: config 0 descriptor?? [ 553.524190][ T6075] usb 2-1: selecting invalid altsetting 3 [ 553.537255][ T6075] comedi comedi5: could not set alternate setting 3 in high speed [ 553.558934][ T6075] usbduxsigma 2-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 553.579498][ T6075] usbduxsigma 2-1:0.0: probe with driver usbduxsigma failed with error -22 [ 553.767898][T12725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.786758][T12725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.808650][ T43] usb 2-1: USB disconnect, device number 44 [ 553.811353][ T6075] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 553.933904][T12749] ceph: No mds server is up or the cluster is laggy [ 554.215224][ T6075] usb 3-1: too many configurations: 72, using maximum allowed: 8 [ 554.341386][ T6075] usb 3-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 554.361348][ T6075] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.380008][ T6075] usb 3-1: config 0 descriptor?? [ 554.637466][T12744] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1879'. [ 554.664098][ T43] usb 3-1: USB disconnect, device number 41 [ 555.870266][ T30] audit: type=1400 audit(1766887591.959:548): avc: denied { unmount } for pid=12735 comm="syz.0.1876" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 556.105845][T12782] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1890'. [ 556.166109][ T6075] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 556.211357][ T43] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 556.232884][ T10] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 556.386929][ T43] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 556.398116][ T6075] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 556.399770][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.407351][ T6075] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.416273][ T43] usb 3-1: Product: syz [ 556.428582][ T43] usb 3-1: Manufacturer: syz [ 556.428689][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 556.433588][ T43] usb 3-1: SerialNumber: syz [ 556.438396][ T6075] usb 2-1: Product: syz [ 556.447546][ T6075] usb 2-1: Manufacturer: syz [ 556.453348][ T10] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 556.461713][ T10] usb 4-1: config 0 has no interface number 0 [ 556.467823][ T10] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 556.478898][ T6075] usb 2-1: SerialNumber: syz [ 556.484959][ T10] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 556.497683][ T10] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 556.509182][ T10] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 556.520630][ T10] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 556.544341][ T10] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 556.555824][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.564030][ T10] usb 4-1: Product: syz [ 556.568220][ T10] usb 4-1: Manufacturer: syz [ 556.573213][ T10] usb 4-1: SerialNumber: syz [ 556.581971][ T10] usb 4-1: config 0 descriptor?? [ 556.601480][ T118] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 556.800481][ T10] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 556.813862][ T118] usb 5-1: unable to get BOS descriptor or descriptor too short [ 556.824642][ T118] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 556.849044][ T118] usb 5-1: can't read configurations, error -71 [ 557.003613][T12775] iowarrior 4-1:0.186: Error -90 while submitting URB [ 557.012477][ T24] usb 4-1: USB disconnect, device number 41 [ 559.156682][T12808] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1897'. [ 559.244432][ T30] audit: type=1326 audit(1766887595.339:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12809 comm="syz.0.1898" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa2ea78f749 code=0x0 [ 559.404679][ T43] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 559.439932][ T43] cdc_ncm 3-1:1.0: bind() failure [ 559.478112][ T43] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 559.523346][ T10] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 559.523479][ T43] cdc_ncm 3-1:1.1: bind() failure [ 559.590851][ T43] usb 3-1: USB disconnect, device number 42 [ 559.671535][ T10] usb 5-1: device descriptor read/64, error -71 [ 559.678587][T12799] lec:lec_atm_close: lec0: Shut down! [ 559.852512][ T6075] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 559.879321][ T6075] cdc_ncm 2-1:1.0: bind() failure [ 560.070961][ T6075] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 560.084562][ T6075] cdc_ncm 2-1:1.1: bind() failure [ 560.127714][ T6075] usb 2-1: USB disconnect, device number 45 [ 560.133953][ T10] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 560.311558][ T10] usb 5-1: device descriptor read/64, error -71 [ 560.462019][ T10] usb usb5-port1: attempt power cycle [ 560.476819][ T30] audit: type=1326 audit(1766887596.569:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12809 comm="syz.0.1898" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa2ea78f749 code=0x0 [ 560.558637][T12824] input: syz1 as /devices/virtual/input/input33 [ 560.842078][ T10] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 560.872618][ T10] usb 5-1: device descriptor read/8, error -71 [ 561.121836][ T10] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 561.163374][ T10] usb 5-1: device descriptor read/8, error -71 [ 561.319680][ T10] usb usb5-port1: unable to enumerate USB device [ 562.716418][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.721707][ T10] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 563.799164][T12861] input: syz1 as /devices/virtual/input/input34 [ 563.951712][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 563.984555][ T10] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 564.014803][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.053274][ T10] usb 4-1: config 0 descriptor?? [ 564.086095][T12865] tipc: Enabling of bearer rejected, failed to enable media [ 564.127980][T12866] netlink: 'syz.1.1904': attribute type 10 has an invalid length. [ 564.136069][T12866] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1904'. [ 564.172105][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 564.183089][T12851] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1904'. [ 564.711310][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5040 ms [ 564.719334][ C0] lec:lec_tx_timeout: lec0 [ 564.731324][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 564.973540][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 564.994198][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 565.001212][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 565.661100][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 565.670493][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 566.130798][T12854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.152682][T12854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.183093][ T10] pwc: recv_control_msg error -71 req 02 val 2100 [ 566.199265][ T10] pwc: recv_control_msg error -71 req 04 val 1500 [ 566.210600][T12897] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1919'. [ 566.223228][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 566.248089][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 566.263341][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 566.291207][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 566.294730][ T24] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 566.317479][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 566.346252][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 566.366638][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 566.397937][ T10] pwc: Registered as video103. [ 566.417708][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input35 [ 566.462392][ T10] usb 4-1: USB disconnect, device number 42 [ 566.471446][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 566.607528][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 566.655201][ T24] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 566.808851][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.874971][ T24] usb 3-1: config 0 descriptor?? [ 566.893979][ T24] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 567.306682][T12916] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1924'. [ 568.116256][T12936] syz.1.1929 uses old SIOCAX25GETINFO [ 568.192134][T12937] netlink: 'syz.3.1930': attribute type 3 has an invalid length. [ 568.204080][T12937] netlink: 'syz.3.1930': attribute type 3 has an invalid length. [ 568.278212][T12937] netlink: 'syz.3.1930': attribute type 3 has an invalid length. [ 568.295966][T12937] netlink: 'syz.3.1930': attribute type 3 has an invalid length. [ 568.313751][T12937] netlink: 'syz.3.1930': attribute type 3 has an invalid length. [ 568.437767][T12937] netlink: 'syz.3.1930': attribute type 3 has an invalid length. [ 568.468677][T12937] netlink: 'syz.3.1930': attribute type 3 has an invalid length. [ 568.487720][T12937] netlink: 'syz.3.1930': attribute type 3 has an invalid length. [ 568.595037][T12937] netlink: 'syz.3.1930': attribute type 3 has an invalid length. [ 569.167185][ T10] usb 3-1: USB disconnect, device number 43 [ 569.741279][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 569.749305][ C0] lec:lec_tx_timeout: lec0 [ 570.992652][ T24] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 571.074164][T12973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1938'. [ 571.151942][T12973] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1938'. [ 571.281531][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 571.287229][ T30] audit: type=1400 audit(1766887607.379:551): avc: denied { setopt } for pid=12970 comm="syz.2.1939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 571.335462][ T24] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 571.386004][ T24] usb 2-1: config 0 has no interface number 0 [ 571.419036][ T24] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 571.479017][ T24] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 571.540418][ T24] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 571.609783][ T24] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 571.686212][ T24] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 571.726741][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.760400][ T24] usb 2-1: Product: syz [ 571.783021][ T24] usb 2-1: Manufacturer: syz [ 571.811134][ T24] usb 2-1: SerialNumber: syz [ 571.982168][ T24] usb 2-1: config 0 descriptor?? [ 572.443299][ T24] iowarrior 2-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 572.464669][T12980] team0: entered promiscuous mode [ 572.493912][T12980] team_slave_0: entered promiscuous mode [ 572.518164][T12980] team_slave_1: entered promiscuous mode [ 572.537900][T12980] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 572.540004][ T24] usb 2-1: USB disconnect, device number 46 [ 572.584842][T12980] team0: left promiscuous mode [ 572.609494][T12980] team_slave_0: left promiscuous mode [ 572.621767][T12980] team_slave_1: left promiscuous mode [ 572.716386][T12992] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1947'. [ 573.072828][T12972] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 573.082525][ T30] audit: type=1400 audit(1766887608.989:552): avc: denied { write } for pid=12991 comm="syz.2.1947" path="socket:[35158]" dev="sockfs" ino=35158 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 573.281631][T12972] usb 4-1: Using ep0 maxpacket: 8 [ 573.305489][T12972] usb 4-1: config 152 has too many interfaces: 195, using maximum allowed: 32 [ 573.331639][T12972] usb 4-1: config 152 has an invalid descriptor of length 48, skipping remainder of the config [ 573.380547][T12972] usb 4-1: config 152 has 0 interfaces, different from the descriptor's value: 195 [ 573.460378][T12972] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 573.788231][T12972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=17 [ 573.797418][T12972] usb 4-1: Product: syz [ 573.801932][T12972] usb 4-1: Manufacturer: syz [ 573.806595][T12972] usb 4-1: SerialNumber: syz [ 574.838505][ T30] audit: type=1400 audit(1766887610.929:553): avc: denied { write } for pid=12993 comm="syz.3.1946" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 574.838618][T12994] random: crng reseeded on system resumption [ 575.010474][T13008] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1949'. [ 576.322400][ T30] audit: type=1400 audit(1766887612.419:554): avc: denied { kexec_image_load } for pid=12993 comm="syz.3.1946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 576.444574][T12994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.463372][T12994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.488610][ T90] usb 4-1: USB disconnect, device number 43 [ 576.913344][T13023] input: syz0 as /devices/virtual/input/input36 [ 577.257948][T13033] gfs2: gfs2 mount does not exist [ 577.675965][T13039] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1958'. [ 577.703478][T13042] FAULT_INJECTION: forcing a failure. [ 577.703478][T13042] name failslab, interval 1, probability 0, space 0, times 0 [ 577.731372][T13042] CPU: 1 UID: 0 PID: 13042 Comm: syz.1.1960 Tainted: G L syzkaller #0 PREEMPT(full) [ 577.731404][T13042] Tainted: [L]=SOFTLOCKUP [ 577.731410][T13042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 577.731421][T13042] Call Trace: [ 577.731427][T13042] [ 577.731435][T13042] dump_stack_lvl+0x16c/0x1f0 [ 577.731463][T13042] should_fail_ex+0x512/0x640 [ 577.731488][T13042] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 577.731511][T13042] should_failslab+0xc2/0x120 [ 577.731536][T13042] kmem_cache_alloc_node_noprof+0x86/0x800 [ 577.731555][T13042] ? __alloc_skb+0x156/0x410 [ 577.731587][T13042] ? __alloc_skb+0x156/0x410 [ 577.731611][T13042] __alloc_skb+0x156/0x410 [ 577.731633][T13042] ? __alloc_skb+0x35d/0x410 [ 577.731657][T13042] ? __pfx___alloc_skb+0x10/0x10 [ 577.731683][T13042] ? netlink_autobind.isra.0+0x158/0x370 [ 577.731713][T13042] netlink_alloc_large_skb+0x69/0x140 [ 577.731737][T13042] netlink_sendmsg+0x698/0xdd0 [ 577.731764][T13042] ? __pfx_netlink_sendmsg+0x10/0x10 [ 577.731797][T13042] ____sys_sendmsg+0xa5d/0xc30 [ 577.731821][T13042] ? copy_msghdr_from_user+0x10a/0x160 [ 577.731846][T13042] ? __pfx_____sys_sendmsg+0x10/0x10 [ 577.731882][T13042] ___sys_sendmsg+0x134/0x1d0 [ 577.731903][T13042] ? __pfx____sys_sendmsg+0x10/0x10 [ 577.731956][T13042] __sys_sendmsg+0x16d/0x220 [ 577.731976][T13042] ? __pfx___sys_sendmsg+0x10/0x10 [ 577.732014][T13042] do_syscall_64+0xcd/0xf80 [ 577.732038][T13042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.732058][T13042] RIP: 0033:0x7f5f6c98f749 [ 577.732074][T13042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 577.732092][T13042] RSP: 002b:00007f5f6d8f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 577.732111][T13042] RAX: ffffffffffffffda RBX: 00007f5f6cbe5fa0 RCX: 00007f5f6c98f749 [ 577.732124][T13042] RDX: 0000000000000040 RSI: 0000200000000280 RDI: 0000000000000003 [ 577.732135][T13042] RBP: 00007f5f6d8f6090 R08: 0000000000000000 R09: 0000000000000000 [ 577.732146][T13042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 577.732157][T13042] R13: 00007f5f6cbe6038 R14: 00007f5f6cbe5fa0 R15: 00007fffc2936e88 [ 577.732185][T13042] [ 578.601768][ T5994] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 578.781689][ T5994] usb 3-1: Using ep0 maxpacket: 8 [ 578.806349][ T5994] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 578.829509][ T30] audit: type=1400 audit(1766887614.919:555): avc: denied { create } for pid=13056 comm="syz.3.1964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 578.946178][ T5994] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 579.005275][T13060] validate_nla: 41 callbacks suppressed [ 579.005293][T13060] netlink: 'syz.4.1965': attribute type 3 has an invalid length. [ 579.025763][T13060] netlink: 'syz.4.1965': attribute type 3 has an invalid length. [ 579.029260][ T5994] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 579.066131][T13060] netlink: 'syz.4.1965': attribute type 3 has an invalid length. [ 579.074769][T13060] netlink: 'syz.4.1965': attribute type 3 has an invalid length. [ 579.083598][T13060] netlink: 'syz.4.1965': attribute type 3 has an invalid length. [ 579.092092][ T5994] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.092281][T13060] netlink: 'syz.4.1965': attribute type 3 has an invalid length. [ 579.110101][T13060] netlink: 'syz.4.1965': attribute type 3 has an invalid length. [ 579.120498][T13060] netlink: 'syz.4.1965': attribute type 3 has an invalid length. [ 579.146874][T13060] netlink: 'syz.4.1965': attribute type 3 has an invalid length. [ 579.152784][ T5994] usb 3-1: Product: syz [ 579.172716][T13060] netlink: 'syz.4.1965': attribute type 3 has an invalid length. [ 579.233943][ T5994] usb 3-1: Manufacturer: syz [ 579.261991][ T5994] usb 3-1: SerialNumber: syz [ 579.319437][ T5994] usb 3-1: config 0 descriptor?? [ 579.374779][ T5994] streamzap 3-1:0.0: streamzap_probe: endpoint attributes don't match xfer 02a0 [ 580.328582][T13071] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1969'. [ 580.339449][T13071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1969'. [ 581.354772][ T5981] usb 3-1: USB disconnect, device number 44 [ 581.600682][T13088] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1976'. [ 581.685920][ T30] audit: type=1400 audit(1766887617.779:556): avc: denied { connect } for pid=13096 comm="syz.3.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 581.899493][ T30] audit: type=1400 audit(1766887617.779:557): avc: denied { write } for pid=13096 comm="syz.3.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 581.993295][T13102] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1977'. [ 583.523263][ T7736] lec:lec_start_xmit: lec0:No lecd attached [ 583.552354][T13122] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1982'. [ 583.593938][T13125] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1985'. [ 585.061726][ T10] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 585.091727][ T5930] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 585.146178][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 585.242170][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 585.386478][ T5930] usb 5-1: device descriptor read/64, error -32 [ 585.394480][ T10] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 585.402951][ T10] usb 2-1: config 0 has no interface number 0 [ 585.412633][ T10] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 585.436038][ T10] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 585.503859][ T10] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 585.516287][ T10] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 585.536545][ T10] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 585.567547][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.584610][ T10] usb 2-1: Product: syz [ 585.602793][ T10] usb 2-1: Manufacturer: syz [ 585.621368][ T10] usb 2-1: SerialNumber: syz [ 585.631610][ T5930] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 585.644730][ T10] usb 2-1: config 0 descriptor?? [ 585.866611][ T5930] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x72, changing to 0x2 [ 585.884102][ T5930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 585.951013][T13152] xt_NFQUEUE: number of queues (51632) out of range (got 109621) [ 586.315680][ T10] iowarrior 2-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 586.334395][ T10] usb 2-1: USB disconnect, device number 47 [ 586.346238][ T5930] usb 5-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 586.357028][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.366603][ T5930] usb 5-1: Product: syz [ 586.372068][ T5930] usb 5-1: Manufacturer: syz [ 586.377311][ T5930] usb 5-1: SerialNumber: syz [ 586.395338][ T5930] usb 5-1: config 0 descriptor?? [ 586.409489][ T5930] powermate 5-1:0.0: probe with driver powermate failed with error -5 [ 586.755237][ T5994] usb 5-1: USB disconnect, device number 55 [ 588.381000][T13161] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13161 comm=syz.0.1995 [ 588.711376][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5190 ms [ 588.719411][ C0] lec:lec_tx_timeout: lec0 [ 589.821332][ T5863] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 590.692709][ T5863] usb 3-1: Using ep0 maxpacket: 8 [ 590.700621][ T5863] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 590.709551][ T5863] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 590.732679][T13205] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2009'. [ 590.733132][ T5863] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 590.752891][ T5863] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 590.764038][ T5863] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 590.777715][ T5863] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 590.824700][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.213498][ T5863] usb 3-1: usb_control_msg returned -32 [ 591.232513][ T5863] usbtmc 3-1:16.0: can't read capabilities [ 591.253251][ T10] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 592.002905][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x72, changing to 0x2 [ 592.031862][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 592.038282][T13219] validate_nla: 37 callbacks suppressed [ 592.038298][T13219] netlink: 'syz.4.2013': attribute type 1 has an invalid length. [ 592.053425][ T10] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 592.063235][T13216] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 592.120381][T13219] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 592.313213][ T5994] usb 3-1: USB disconnect, device number 45 [ 592.414910][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.438391][ T10] usb 2-1: Product: syz [ 592.457318][ T10] usb 2-1: Manufacturer: syz [ 592.471472][ T10] usb 2-1: SerialNumber: syz [ 592.607689][ T10] usb 2-1: config 0 descriptor?? [ 592.623559][ T10] powermate 2-1:0.0: probe with driver powermate failed with error -5 [ 592.845305][T13227] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.2014'. [ 593.146639][ T5994] usb 2-1: USB disconnect, device number 48 [ 593.553547][ T10] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 593.876854][T13237] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 593.891554][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 593.908397][T13237] team0: Port device batadv1 added [ 593.931092][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 593.972233][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 594.015785][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 594.047271][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 594.064814][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 594.111855][ T10] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 594.122252][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 594.139312][ T10] usb 3-1: Product: syz [ 594.149488][ T10] usb 3-1: Manufacturer: syz [ 594.170925][ T10] usb 3-1: SerialNumber: syz [ 594.192596][ T10] usb 3-1: config 0 descriptor?? [ 594.213852][ T30] audit: type=1400 audit(1766887630.309:558): avc: denied { write } for pid=13246 comm="syz.4.2021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 594.351745][ T6075] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 594.485875][ T10] radio-si470x 3-1:0.0: DeviceID=0xdf7c ChipID=0xa500 [ 594.521474][ T6075] usb 2-1: Using ep0 maxpacket: 32 [ 594.532662][ T6075] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 594.547424][ T6075] usb 2-1: config 0 has no interface number 0 [ 594.564695][ T6075] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 594.601269][ T6075] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.620358][ T6075] usb 2-1: Product: syz [ 594.625031][ T6075] usb 2-1: Manufacturer: syz [ 594.630908][ T6075] usb 2-1: SerialNumber: syz [ 594.650571][ T6075] usb 2-1: config 0 descriptor?? [ 594.792365][ T10] radio-si470x 3-1:0.0: software version 223, hardware version 124 [ 594.979088][ T10] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 595.242442][ T6075] ipheth 2-1:0.4: Unable to find alternate settings interface [ 595.254219][ T10] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 595.270128][ T6075] usb 2-1: USB disconnect, device number 49 [ 595.278032][ T10] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 595.293867][ T10] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 595.314653][ T10] usb 3-1: USB disconnect, device number 46 [ 596.616586][T13277] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.2032'. [ 596.635085][ T30] audit: type=1400 audit(1766887632.719:559): avc: denied { write } for pid=13276 comm="syz.1.2032" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 596.712029][ T30] audit: type=1400 audit(1766887632.719:560): avc: denied { open } for pid=13276 comm="syz.1.2032" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 597.037757][ T5930] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 597.301372][ T5930] usb 4-1: Using ep0 maxpacket: 32 [ 597.314093][ T5930] usb 4-1: config 0 has an invalid interface number: 191 but max is 0 [ 597.341686][ T5930] usb 4-1: config 0 has no interface number 0 [ 597.357268][ T5930] usb 4-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24 [ 597.403593][ T5930] usb 4-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1 [ 597.432223][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.453764][ T5930] usb 4-1: Product: syz [ 597.460530][ T5930] usb 4-1: Manufacturer: syz [ 597.465422][ T5930] usb 4-1: SerialNumber: syz [ 597.480845][ T5930] usb 4-1: config 0 descriptor?? [ 597.489634][T13283] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 597.710314][T13283] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 597.784545][T13306] xt_NFQUEUE: number of queues (51632) out of range (got 109621) [ 598.120109][T13303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2037'. [ 598.532817][T13303] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 598.558139][T13303] bridge1: entered allmulticast mode [ 598.603019][ T30] audit: type=1800 audit(1766887634.699:561): pid=13303 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2037" name="nullb0" dev="tmpfs" ino=2010 res=0 errno=0 [ 598.634261][ T5930] asix 4-1:0.191 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 598.663070][ T5930] asix 4-1:0.191: probe with driver asix failed with error -71 [ 598.695921][ T5930] usb 4-1: USB disconnect, device number 44 [ 600.009071][ T30] audit: type=1400 audit(1766887636.099:562): avc: denied { create } for pid=13332 comm="syz.1.2049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 600.170183][T13338] x_tables: duplicate underflow at hook 1 [ 600.307376][T13345] Cannot find del_set index 1 as target [ 601.392969][ T30] audit: type=1400 audit(1766887637.479:563): avc: denied { name_bind } for pid=13356 comm="syz.2.2056" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 601.484319][T13362] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2058'. [ 601.498660][T13362] netlink: 212 bytes leftover after parsing attributes in process `syz.2.2058'. [ 601.510862][T13362] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2058'. [ 606.323070][T13398] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2065'. [ 607.622195][T13412] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2073'. [ 609.975563][T13422] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 610.349375][T13430] atomic_op ffff8880323c2998 conn xmit_atomic 0000000000000000 [ 610.443311][T13430] atomic_op ffff8880323c7198 conn xmit_atomic 0000000000000000 [ 610.745456][ T30] audit: type=1400 audit(1766887646.829:564): avc: denied { audit_write } for pid=13429 comm="syz.2.2077" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 611.563902][ T30] audit: type=1400 audit(1766887647.649:565): avc: denied { mount } for pid=13455 comm="syz.2.2085" name="/" dev="hugetlbfs" ino=35799 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 611.861467][T13460] random: crng reseeded on system resumption [ 612.296652][ T30] audit: type=1400 audit(1766887647.949:566): avc: denied { append } for pid=13455 comm="syz.2.2085" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 612.352046][ T30] audit: type=1400 audit(1766887648.039:567): avc: denied { ioctl } for pid=13455 comm="syz.2.2085" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x330e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 612.601604][ T5930] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 612.771485][ T5994] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 612.794852][ T5930] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 612.903578][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.951326][ T5994] usb 2-1: device descriptor read/64, error -71 [ 612.967555][ T5930] usb 5-1: Product: syz [ 612.983785][ T5930] usb 5-1: Manufacturer: syz [ 613.002839][ T5930] usb 5-1: SerialNumber: syz [ 613.031000][ T5930] usb 5-1: config 0 descriptor?? [ 613.073811][ T5930] gspca_main: sq930x-2.14.0 probing 2770:930c [ 613.193249][ T5994] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 613.327431][ T30] audit: type=1400 audit(1766887649.419:568): avc: denied { mount } for pid=13484 comm="syz.2.2093" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 613.341397][ T5994] usb 2-1: device descriptor read/64, error -71 [ 613.491911][ T5994] usb usb2-port1: attempt power cycle [ 613.814670][T13496] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2095'. [ 613.884237][ T30] audit: type=1400 audit(1766887649.979:569): avc: denied { ioctl } for pid=13461 comm="syz.4.2086" path="socket:[36208]" dev="sockfs" ino=36208 ioctlcmd=0x8b37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 613.931014][ T5994] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 613.962243][ T5994] usb 2-1: device descriptor read/8, error -71 [ 613.974703][ T5930] gspca_sq930x: ucbus_write failed -71 [ 614.022827][ T5930] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 614.171540][ T5930] usb 5-1: USB disconnect, device number 56 [ 614.221347][ T5994] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 614.242083][ T5994] usb 2-1: device descriptor read/8, error -71 [ 614.351697][ T5994] usb usb2-port1: unable to enumerate USB device [ 614.683374][T13507] xt_CT: You must specify a L4 protocol and not use inversions on it [ 614.984022][ T30] audit: type=1400 audit(1766887651.079:570): avc: denied { write } for pid=13506 comm="syz.4.2099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 615.064253][T13512] netlink: 'syz.2.2100': attribute type 29 has an invalid length. [ 615.090586][T13512] netlink: 'syz.2.2100': attribute type 29 has an invalid length. [ 615.118841][T13512] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2100'. [ 616.220476][T13544] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2111'. [ 617.951505][ T30] audit: type=1400 audit(1766887654.049:571): avc: denied { setopt } for pid=13559 comm="syz.4.2120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 617.995477][ T30] audit: type=1400 audit(1766887654.069:572): avc: denied { write } for pid=13559 comm="syz.4.2120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 618.066144][T13566] FAULT_INJECTION: forcing a failure. [ 618.066144][T13566] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 618.082292][ T30] audit: type=1400 audit(1766887654.069:573): avc: denied { read } for pid=13559 comm="syz.4.2120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 618.121343][T13566] CPU: 1 UID: 0 PID: 13566 Comm: syz.1.2121 Tainted: G L syzkaller #0 PREEMPT(full) [ 618.121374][T13566] Tainted: [L]=SOFTLOCKUP [ 618.121381][T13566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 618.121392][T13566] Call Trace: [ 618.121398][T13566] [ 618.121406][T13566] dump_stack_lvl+0x16c/0x1f0 [ 618.121434][T13566] should_fail_ex+0x512/0x640 [ 618.121464][T13566] _copy_from_iter+0x2a4/0x16c0 [ 618.121498][T13566] ? __alloc_skb+0x220/0x410 [ 618.121522][T13566] ? __alloc_skb+0x35d/0x410 [ 618.121552][T13566] ? __pfx__copy_from_iter+0x10/0x10 [ 618.121577][T13566] ? netlink_autobind.isra.0+0x158/0x370 [ 618.121610][T13566] netlink_sendmsg+0x820/0xdd0 [ 618.121637][T13566] ? __pfx_netlink_sendmsg+0x10/0x10 [ 618.121670][T13566] ____sys_sendmsg+0xa5d/0xc30 [ 618.121694][T13566] ? copy_msghdr_from_user+0x10a/0x160 [ 618.121713][T13566] ? __pfx_____sys_sendmsg+0x10/0x10 [ 618.121750][T13566] ___sys_sendmsg+0x134/0x1d0 [ 618.121771][T13566] ? __pfx____sys_sendmsg+0x10/0x10 [ 618.121826][T13566] __sys_sendmsg+0x16d/0x220 [ 618.121845][T13566] ? __pfx___sys_sendmsg+0x10/0x10 [ 618.121883][T13566] do_syscall_64+0xcd/0xf80 [ 618.121908][T13566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.121928][T13566] RIP: 0033:0x7f5f6c98f749 [ 618.121944][T13566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 618.121961][T13566] RSP: 002b:00007f5f6d8f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 618.121983][T13566] RAX: ffffffffffffffda RBX: 00007f5f6cbe5fa0 RCX: 00007f5f6c98f749 [ 618.121996][T13566] RDX: 0000000000000040 RSI: 0000200000000280 RDI: 0000000000000003 [ 618.122007][T13566] RBP: 00007f5f6d8f6090 R08: 0000000000000000 R09: 0000000000000000 [ 618.122018][T13566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 618.122030][T13566] R13: 00007f5f6cbe6038 R14: 00007f5f6cbe5fa0 R15: 00007fffc2936e88 [ 618.122058][T13566] [ 618.439578][T13571] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 618.453200][T13571] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 618.467502][T13571] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 618.477502][T13571] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 618.488212][T13571] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 618.523442][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 618.532991][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 618.540978][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 618.550848][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 618.562214][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 618.833747][T13585] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2125'. [ 618.843117][T13585] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2125'. [ 619.265855][T13585] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2125'. [ 619.275127][T13585] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2125'. [ 619.422141][T13585] Process accounting resumed [ 619.826639][T13601] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2127'. [ 619.835856][ T10] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 619.872223][T13569] chnl_net:caif_netlink_parms(): no params data found [ 619.991116][T13569] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.011524][T13569] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.019015][T13569] bridge_slave_0: entered allmulticast mode [ 620.025130][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 620.035103][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=8102, bcdDevice= 0.00 [ 620.045800][T13569] bridge_slave_0: entered promiscuous mode [ 620.051887][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.061922][T13569] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.069112][T13569] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.078878][ T10] usb 2-1: config 0 descriptor?? [ 620.084680][T13569] bridge_slave_1: entered allmulticast mode [ 620.104193][T13569] bridge_slave_1: entered promiscuous mode [ 620.211201][T13569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 620.248865][T13569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 620.336552][T13569] team0: Port device team_slave_0 added [ 620.355765][T13569] team0: Port device team_slave_1 added [ 620.403435][T13614] netlink: 'syz.4.2129': attribute type 10 has an invalid length. [ 620.411356][T13614] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2129'. [ 620.721492][ T5828] Bluetooth: hci0: command tx timeout [ 620.990810][T13618] virtio-fs: tag not found [ 621.393480][ T10] apple 0003:05AC:8102.0007: hidraw0: USB HID v0.00 Device [HID 05ac:8102] on usb-dummy_hcd.1-1/input0 [ 621.424080][T13569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 621.464860][T13569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 621.550168][T13569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 621.670821][T13569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 621.764831][T13569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 621.931201][T13569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 622.060513][T13632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2133'. [ 622.083713][T13569] hsr_slave_0: entered promiscuous mode [ 622.094104][T13569] hsr_slave_1: entered promiscuous mode [ 622.100351][T13569] debugfs: 'hsr0' already exists in 'hsr' [ 622.106351][T13569] Cannot create hsr debugfs directory [ 622.921996][T13641] overlayfs: failed to clone lowerpath [ 622.928922][ T5828] Bluetooth: hci0: command tx timeout [ 623.000618][ T5994] usb 2-1: USB disconnect, device number 54 [ 623.819683][T13569] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 623.847065][T13569] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 623.872669][T13569] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 623.909138][T13569] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 624.204196][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.212750][ T1296] lec:lec_start_xmit: lec0:No lecd attached [ 624.237399][T13569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 624.761012][T13569] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.794156][ T3848] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.801352][ T3848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.838298][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.845453][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.974438][ T5828] Bluetooth: hci0: command tx timeout [ 625.090343][T13668] tipc: Started in network mode [ 625.099278][T13668] tipc: Node identity 1a123b2597f2, cluster identity 4711 [ 625.120876][T13668] tipc: Enabled bearer , priority 0 [ 625.153658][T13670] syzkaller0: entered promiscuous mode [ 625.163497][T13670] syzkaller0: entered allmulticast mode [ 625.267488][T13668] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2140'. [ 625.321165][T13668] tipc: Resetting bearer [ 625.354368][T13666] tipc: Resetting bearer [ 625.387892][ T30] audit: type=1400 audit(1766887661.479:574): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 625.435533][T13666] tipc: Disabling bearer [ 625.839947][T13685] xt_NFQUEUE: number of queues (51632) out of range (got 109621) [ 626.283447][T13569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 626.837737][T13699] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2147'. [ 627.282447][ T5828] Bluetooth: hci0: command tx timeout [ 627.487173][T13569] veth0_vlan: entered promiscuous mode [ 627.522177][T13569] veth1_vlan: entered promiscuous mode [ 627.624004][T13569] veth0_macvtap: entered promiscuous mode [ 627.644192][T13569] veth1_macvtap: entered promiscuous mode [ 627.680505][T13569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 627.709351][T13569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 627.745036][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.768903][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.793466][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.832747][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.918134][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.934550][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.982381][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.003059][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.023964][ T30] audit: type=1400 audit(1766887664.119:575): avc: denied { mounton } for pid=13569 comm="syz-executor" path="/root/syzkaller.ehUYtD/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 628.083642][ T30] audit: type=1400 audit(1766887664.119:576): avc: denied { mounton } for pid=13569 comm="syz-executor" path="/root/syzkaller.ehUYtD/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=37795 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 628.141322][ T30] audit: type=1400 audit(1766887664.149:577): avc: denied { mounton } for pid=13569 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 629.386174][T13726] netlink: 'syz.0.2153': attribute type 3 has an invalid length. [ 629.465300][T13726] netlink: 'syz.0.2153': attribute type 3 has an invalid length. [ 629.518624][T13726] netlink: 'syz.0.2153': attribute type 3 has an invalid length. [ 629.648901][T13726] netlink: 'syz.0.2153': attribute type 3 has an invalid length. [ 629.671268][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5460 ms [ 629.679295][ C0] lec:lec_tx_timeout: lec0 [ 629.686992][T13726] netlink: 'syz.0.2153': attribute type 3 has an invalid length. [ 630.132657][T13726] netlink: 'syz.0.2153': attribute type 3 has an invalid length. [ 630.142101][T13726] netlink: 'syz.0.2153': attribute type 3 has an invalid length. [ 630.150845][T13726] netlink: 'syz.0.2153': attribute type 3 has an invalid length. [ 630.160099][T13726] netlink: 'syz.0.2153': attribute type 3 has an invalid length. [ 630.171392][T13726] netlink: 'syz.0.2153': attribute type 3 has an invalid length. [ 630.313678][T13741] input: syz1 as /devices/virtual/input/input37 [ 632.718613][T13769] bond1: option mode: unable to set because the bond device has slaves [ 632.746959][T13769] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 632.792719][T13779] rdma_rxe: rxe_newlink: failed to add bond0 [ 632.810050][T13778] fuse: Unknown parameter 'gro' [ 632.982543][ T10] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 633.293258][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 633.399635][ T10] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 633.409838][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.419376][ T10] usb 2-1: Product: syz [ 633.423888][ T10] usb 2-1: Manufacturer: syz [ 633.428569][ T10] usb 2-1: SerialNumber: syz [ 633.436095][ T10] usb 2-1: config 0 descriptor?? [ 633.502475][T13788] FAULT_INJECTION: forcing a failure. [ 633.502475][T13788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 633.515697][T13788] CPU: 1 UID: 0 PID: 13788 Comm: syz.2.2172 Tainted: G L syzkaller #0 PREEMPT(full) [ 633.515729][T13788] Tainted: [L]=SOFTLOCKUP [ 633.515735][T13788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 633.515746][T13788] Call Trace: [ 633.515754][T13788] [ 633.515763][T13788] dump_stack_lvl+0x16c/0x1f0 [ 633.515792][T13788] should_fail_ex+0x512/0x640 [ 633.515822][T13788] _copy_to_user+0x32/0xd0 [ 633.515851][T13788] simple_read_from_buffer+0xcb/0x170 [ 633.515878][T13788] proc_fail_nth_read+0x197/0x240 [ 633.515901][T13788] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 633.515923][T13788] ? rw_verify_area+0xcf/0x6c0 [ 633.515943][T13788] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 633.515964][T13788] vfs_read+0x1e4/0xcf0 [ 633.515987][T13788] ? __pfx___mutex_lock+0x10/0x10 [ 633.516011][T13788] ? rcu_preempt_deferred_qs_irqrestore+0x500/0xbc0 [ 633.516038][T13788] ? __pfx_vfs_read+0x10/0x10 [ 633.516065][T13788] ? __rcu_read_unlock+0x2b5/0x5a0 [ 633.516090][T13788] ? __fget_files+0x20e/0x3c0 [ 633.516123][T13788] ksys_read+0x12a/0x250 [ 633.516145][T13788] ? __pfx_ksys_read+0x10/0x10 [ 633.516165][T13788] ? rcu_is_watching+0x12/0xc0 [ 633.516191][T13788] do_syscall_64+0xcd/0xf80 [ 633.516217][T13788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.516236][T13788] RIP: 0033:0x7f4955f8e15c [ 633.516252][T13788] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 633.516270][T13788] RSP: 002b:00007f4956e7a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 633.516289][T13788] RAX: ffffffffffffffda RBX: 00007f49561e6180 RCX: 00007f4955f8e15c [ 633.516303][T13788] RDX: 000000000000000f RSI: 00007f4956e7a0a0 RDI: 0000000000000006 [ 633.516314][T13788] RBP: 00007f4956e7a090 R08: 0000000000000000 R09: 0000000000000000 [ 633.516325][T13788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 633.516336][T13788] R13: 00007f49561e6218 R14: 00007f49561e6180 R15: 00007ffea1fad3d8 [ 633.516365][T13788] [ 633.773421][ T10] powermate 2-1:0.0: probe with driver powermate failed with error -22 [ 633.791424][ T10] usb 2-1: USB disconnect, device number 55 [ 634.007184][T13794] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2174'. [ 636.888881][T13821] block nbd4: shutting down sockets [ 637.206473][T13831] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2184'. [ 637.517520][T13841] binder: 13838:13841 ioctl c0306201 2000000003c0 returned -14 [ 637.538256][T13841] binder: 13838:13841 ioctl c0306201 200000000180 returned -14 [ 637.674355][T13844] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2191'. [ 637.693191][T13844] netlink: 212 bytes leftover after parsing attributes in process `syz.2.2191'. [ 637.742046][ T5825] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 637.768580][T13846] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2190'. [ 638.032986][T13851] sd 0:0:1:0: device reset [ 638.486323][ T5825] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 638.526420][ T5825] usb 5-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 638.545112][ T5825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.567910][ T5825] usb 5-1: Product: syz [ 638.578441][ T5825] usb 5-1: Manufacturer: syz [ 638.590625][ T5825] usb 5-1: SerialNumber: syz [ 638.605627][ T5825] usb 5-1: config 0 descriptor?? [ 638.761217][ T5825] powermate 5-1:0.0: probe with driver powermate failed with error -22 [ 639.249746][ T5825] usb 5-1: USB disconnect, device number 57 [ 639.313501][T13864] Bluetooth: MGMT ver 1.23 [ 639.576730][T13869] validate_nla: 38 callbacks suppressed [ 639.576743][T13869] netlink: 'syz.0.2198': attribute type 1 has an invalid length. [ 639.752987][T13873] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2199'. [ 640.001377][ T5930] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 640.248250][T13883] xt_CT: You must specify a L4 protocol and not use inversions on it [ 640.645998][ T30] audit: type=1400 audit(1766887676.729:578): avc: denied { setopt } for pid=13884 comm="syz.5.2202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 640.725294][ T5930] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 640.734703][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.749425][ T5930] usb 2-1: config 0 descriptor?? [ 640.840827][ T30] audit: type=1400 audit(1766887676.929:579): avc: denied { ioctl } for pid=13886 comm="syz.0.2203" path="socket:[38934]" dev="sockfs" ino=38934 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 640.891595][T13889] dummy0: entered promiscuous mode [ 640.899137][T13889] dummy0: left promiscuous mode [ 641.024332][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 641.032769][ T5930] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 641.522707][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 641.536008][ T5930] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 641.545639][ T10] usb 6-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 641.555476][ T5930] [drm] Initialized udl on minor 2 [ 641.560665][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.581104][ T10] usb 6-1: config 0 descriptor?? [ 641.597266][ T10] gspca_main: sq930x-2.14.0 probing 041e:403c [ 641.704714][T13875] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2200'. [ 641.726220][ T5930] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 641.771145][ T5930] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 641.780257][ T30] audit: type=1400 audit(1766887677.799:580): avc: denied { getopt } for pid=13874 comm="syz.1.2200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 641.916093][ T5825] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 641.931613][ T5930] usb 2-1: USB disconnect, device number 56 [ 642.372620][ T10] gspca_sq930x: reg_r 001f failed -110 [ 642.420959][ T5825] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 642.433947][ T10] sq930x 6-1:0.0: probe with driver sq930x failed with error -110 [ 642.684218][ T10] usb 6-1: USB disconnect, device number 2 [ 642.846100][T13907] binder: 13904:13907 ioctl c01c64a3 200000000440 returned -22 [ 642.865134][ T30] audit: type=1400 audit(1766887678.959:581): avc: denied { transfer } for pid=13904 comm="syz.4.2209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 644.019090][T13912] netlink: 'syz.0.2212': attribute type 3 has an invalid length. [ 644.035447][T13912] netlink: 'syz.0.2212': attribute type 3 has an invalid length. [ 644.052184][T13912] netlink: 'syz.0.2212': attribute type 3 has an invalid length. [ 644.066948][T13912] netlink: 'syz.0.2212': attribute type 3 has an invalid length. [ 644.076736][T13912] netlink: 'syz.0.2212': attribute type 3 has an invalid length. [ 644.180676][T13912] netlink: 'syz.0.2212': attribute type 3 has an invalid length. [ 644.189133][T13912] netlink: 'syz.0.2212': attribute type 3 has an invalid length. [ 644.198369][T13912] netlink: 'syz.0.2212': attribute type 3 has an invalid length. [ 644.206670][T13912] netlink: 'syz.0.2212': attribute type 3 has an invalid length. [ 644.353631][ T30] audit: type=1400 audit(1766887680.449:582): avc: denied { name_bind } for pid=13923 comm="syz.1.2216" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 644.780388][T13933] xt_CT: You must specify a L4 protocol and not use inversions on it [ 645.236737][T13929] smc: net device hsr0 applied user defined pnetid SYZ2 [ 645.244398][T13929] smc: net device hsr0 erased user defined pnetid SYZ2 [ 646.291893][ T5930] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 646.731368][ T5930] usb 2-1: Using ep0 maxpacket: 32 [ 646.870831][ T5930] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 646.901964][ T5930] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 647.433666][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.467692][ T5930] usb 2-1: config 0 descriptor?? [ 647.515194][ T5930] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 647.996326][T13275] bond0: (slave bond_slave_0): interface is now down [ 648.015031][T13275] bond0: (slave bond_slave_1): interface is now down [ 648.055500][ T80] bond0: (slave bond_slave_0): interface is now down [ 648.100335][T13981] 8021q: adding VLAN 0 to HW filter on device bond1 [ 648.111375][ T80] bond0: (slave bond_slave_1): interface is now down [ 648.129922][T13988] rdma_rxe: rxe_newlink: failed to add bond0 [ 648.182842][T13984] bond_slave_0: entered promiscuous mode [ 648.183065][ T80] bond0: (slave bond_slave_0): interface is now down [ 648.188530][T13984] bond_slave_1: entered promiscuous mode [ 648.189139][T13984] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 648.224683][ T80] bond0: (slave bond_slave_1): interface is now down [ 648.230158][T13984] bond1: (slave macvlan2): making interface the new active one [ 648.271380][ T80] bond0: (slave bond_slave_0): interface is now down [ 648.277651][T13984] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 648.316170][ T80] bond0: (slave bond_slave_1): interface is now down [ 648.364887][ T80] bond0: now running without any active interface! [ 648.447351][ T80] bond1: (slave macvlan2): link status definitely down, disabling slave [ 648.464947][ T7736] lec:lec_start_xmit: lec0:No lecd attached [ 648.534777][ T80] bond1: now running without any active interface! [ 649.864723][T14008] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2239'. [ 649.886136][T14008] netlink: 212 bytes leftover after parsing attributes in process `syz.5.2239'. [ 651.158423][ T5930] usb 2-1: USB disconnect, device number 57 [ 651.350533][T14031] bond1: option mode: unable to set because the bond device has slaves [ 651.418288][T14031] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 651.443180][T14034] rdma_rxe: rxe_newlink: failed to add bond0 [ 651.497556][ T30] audit: type=1400 audit(1766887687.589:583): avc: denied { read } for pid=14035 comm="syz.5.2247" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 651.749781][ T30] audit: type=1400 audit(1766887687.839:584): avc: denied { read } for pid=14035 comm="syz.5.2247" path="socket:[39263]" dev="sockfs" ino=39263 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 652.924101][T14049] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 652.958304][T14049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2249'. [ 653.143746][T14057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2252'. [ 653.156016][T14057] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2252'. [ 653.182825][T14055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2253'. [ 653.240821][T14060] validate_nla: 39 callbacks suppressed [ 653.240837][T14060] netlink: 'syz.0.2253': attribute type 39 has an invalid length. [ 653.287115][T14055] bond4: Invalid ad_actor_system MAC address. [ 653.433782][T14055] bond4: option ad_actor_system: invalid value (1) [ 653.457222][T14055] bond4 (unregistering): Released all slaves [ 653.657649][ T5825] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 653.681275][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5220 ms [ 653.689356][ C0] lec:lec_tx_timeout: lec0 [ 654.032530][ T5825] usb 3-1: device descriptor read/64, error -71 [ 654.281535][ T5930] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 654.311556][ T5825] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 654.433828][ T5930] usb 5-1: Using ep0 maxpacket: 32 [ 654.444264][ T5930] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 654.457469][ T5825] usb 3-1: device descriptor read/64, error -71 [ 654.464426][ T5930] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 654.559321][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.569699][ T5930] usb 5-1: config 0 descriptor?? [ 654.579400][ T5825] usb usb3-port1: attempt power cycle [ 654.589375][ T5930] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 654.876365][ T5863] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 654.931798][ T5825] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 654.972012][ T5825] usb 3-1: device descriptor read/8, error -71 [ 655.031653][ T5863] usb 6-1: Using ep0 maxpacket: 8 [ 655.038549][ T5863] usb 6-1: config 0 has an invalid interface number: 186 but max is 0 [ 655.046928][ T5863] usb 6-1: config 0 has no interface number 0 [ 655.053173][ T5863] usb 6-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 655.064169][ T5863] usb 6-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 655.076058][ T5863] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 655.087203][ T5863] usb 6-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 655.103706][ T5863] usb 6-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 655.112894][ T5863] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.120870][ T5863] usb 6-1: Product: syz [ 655.125157][ T5863] usb 6-1: Manufacturer: syz [ 655.129746][ T5863] usb 6-1: SerialNumber: syz [ 655.136198][ T5863] usb 6-1: config 0 descriptor?? [ 655.211640][ T5825] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 655.231962][ T5825] usb 3-1: device descriptor read/8, error -71 [ 655.343413][ T5825] usb usb3-port1: unable to enumerate USB device [ 655.352010][ T5863] iowarrior 6-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 655.507342][ T30] audit: type=1400 audit(1766887691.599:585): avc: denied { ioctl } for pid=14096 comm="syz.0.2267" path="socket:[39337]" dev="sockfs" ino=39337 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 655.559751][ T5863] usb 6-1: USB disconnect, device number 3 [ 655.565729][ C1] iowarrior 6-1:0.186: iowarrior_callback - usb_submit_urb failed with result -19 [ 655.843768][ T30] audit: type=1326 audit(1766887691.939:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14089 comm="syz.1.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6c98f749 code=0x7ffc0000 [ 655.869913][ T30] audit: type=1326 audit(1766887691.969:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14089 comm="syz.1.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6c98f749 code=0x7ffc0000 [ 655.906931][ T30] audit: type=1326 audit(1766887691.969:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14089 comm="syz.1.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5f6c98f749 code=0x7ffc0000 [ 655.954041][ T30] audit: type=1326 audit(1766887691.969:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14089 comm="syz.1.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6c98f749 code=0x7ffc0000 [ 656.006790][ T30] audit: type=1326 audit(1766887691.969:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14089 comm="syz.1.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6c98f749 code=0x7ffc0000 [ 656.054574][ T30] audit: type=1326 audit(1766887691.969:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14089 comm="syz.1.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5f6c98df90 code=0x7ffc0000 [ 656.103595][ T30] audit: type=1326 audit(1766887691.969:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14089 comm="syz.1.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6c98f749 code=0x7ffc0000 [ 656.218100][T14107] tipc: Enabling of bearer rejected, failed to enable media [ 656.382030][T14111] input: syz1 as /devices/virtual/input/input38 [ 656.684277][T14121] netlink: 'syz.0.2275': attribute type 2 has an invalid length. [ 656.890004][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 657.056921][ T5863] usb 5-1: USB disconnect, device number 58 [ 657.123252][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 657.136163][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 657.492280][ T10] usb 6-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 657.514240][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.542422][ T10] usb 6-1: config 0 descriptor?? [ 657.764931][T14116] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2273'. [ 658.159100][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 658.168507][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 658.230650][ T10] usb 6-1: USB disconnect, device number 4 [ 661.604732][T14170] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2288'. [ 661.621559][T14171] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2289'. [ 661.748712][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 661.748727][ T30] audit: type=1400 audit(1766887697.839:597): avc: denied { write } for pid=14176 comm="syz.1.2291" name="icmp6" dev="proc" ino=4026533452 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 662.212241][T14192] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2295'. [ 662.483338][T14198] Cannot find add_set index 0 as target [ 664.236145][T14216] netlink: 'syz.1.2297': attribute type 10 has an invalid length. [ 664.245737][T14216] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2297'. [ 664.496460][T14220] netlink: 'syz.0.2301': attribute type 29 has an invalid length. [ 664.506917][T14220] netlink: 'syz.0.2301': attribute type 29 has an invalid length. [ 664.517182][T14220] netlink: 500 bytes leftover after parsing attributes in process `syz.0.2301'. [ 664.731613][ T5930] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 665.393262][ T5930] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 665.404701][ T5930] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 665.415387][ T5930] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 665.424937][ T5930] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.641912][ T5863] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 665.642304][ T5930] usb 6-1: config 0 descriptor?? [ 665.793120][ T5863] usb 2-1: device descriptor read/64, error -71 [ 666.089789][ T5863] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 666.123719][ T5930] hid_parser_main: 51 callbacks suppressed [ 666.123739][ T5930] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 666.139699][ T5930] cm6533_jd 0003:0D8C:0022.0008: item fetching failed at offset 4/5 [ 666.148691][ T5930] cm6533_jd 0003:0D8C:0022.0008: parse failed [ 666.156368][ T5930] cm6533_jd 0003:0D8C:0022.0008: probe with driver cm6533_jd failed with error -22 [ 666.241793][ T5863] usb 2-1: device descriptor read/64, error -71 [ 666.433612][ T5863] usb usb2-port1: attempt power cycle [ 666.587839][ T30] audit: type=1400 audit(1766887702.679:598): avc: denied { watch watch_reads } for pid=14248 comm="syz.4.2310" path="/414/file0" dev="tmpfs" ino=2206 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 666.648301][T14252] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2311'. [ 666.692612][ T5994] usb 6-1: USB disconnect, device number 5 [ 666.832235][ T5863] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 666.861921][ T5863] usb 2-1: device descriptor read/8, error -71 [ 667.425833][T14265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2316'. [ 667.995849][ T5863] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 668.052310][ T5863] usb 2-1: device descriptor read/8, error -71 [ 668.161993][ T5863] usb usb2-port1: unable to enumerate USB device [ 668.908828][T14286] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 668.927961][T14286] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 668.995258][T14286] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 669.014471][T14286] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 669.015728][T14287] smc: net device hsr0 applied user defined pnetid SYZ2 [ 669.113370][T14294] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2324'. [ 669.910399][T14303] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 670.089706][T14286] smc: net device hsr0 erased user defined pnetid SYZ2 [ 670.102568][T14308] binder: 14306:14308 ioctl c0306201 2000000003c0 returned -14 [ 670.136953][T14308] binder: 14306:14308 ioctl c0306201 200000000180 returned -14 [ 670.711587][ T5994] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 670.892263][ T5994] usb 6-1: Using ep0 maxpacket: 8 [ 670.945978][ T5994] usb 6-1: config 0 has an invalid interface number: 200 but max is 0 [ 671.142165][ T5994] usb 6-1: config 0 has no interface number 0 [ 671.148400][ T5994] usb 6-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 671.162812][ T5994] usb 6-1: config 0 interface 200 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 671.174141][ T5994] usb 6-1: config 0 interface 200 has no altsetting 0 [ 671.185188][ T5994] usb 6-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 671.707697][ T5994] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.721891][ T5994] usb 6-1: Product: syz [ 671.728862][ T5994] usb 6-1: Manufacturer: syz [ 672.351897][ T5994] usb 6-1: SerialNumber: syz [ 672.479206][ T5994] usb 6-1: config 0 descriptor?? [ 672.731175][ T3892] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 672.761463][ T3892] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.131607][ T30] audit: type=1400 audit(1766887709.209:599): avc: denied { getopt } for pid=14316 comm="syz.5.2332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 673.290990][ T3892] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 673.334322][ T3892] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.360561][T13571] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 673.374103][T13571] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 673.383218][T13571] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 673.393247][T13571] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 673.400927][T13571] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 673.640442][T14343] sd 0:0:1:0: device reset [ 674.044922][ T3892] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 674.061408][ T3892] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.145103][ T3892] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 674.171545][ T3892] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.382708][ T5994] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.200/input/input39 [ 674.440565][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 674.447960][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 674.455372][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 674.462795][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 674.470110][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 674.477484][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 674.484802][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 674.492129][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 674.499649][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 674.508021][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 674.516297][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 674.523882][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 674.532078][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 674.542137][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 674.551684][ C1] usb 6-1: hanwang_irq - urb shutting down with status: -2 [ 674.565542][ T5994] usb 6-1: USB disconnect, device number 6 [ 674.590425][T14022] udevd[14022]: setting owner of /dev/bus/usb/006/006 to uid=0, gid=0 failed: No such file or directory [ 674.681768][ T5863] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 674.911759][ T5863] usb 2-1: device descriptor read/64, error -71 [ 675.640394][T13571] Bluetooth: hci1: command tx timeout [ 675.823263][ T5863] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 675.936562][ T3892] bond_slave_0: left promiscuous mode [ 675.943850][ T3892] bond_slave_1: left promiscuous mode [ 676.053987][ T5863] usb 2-1: device descriptor read/64, error -71 [ 676.567582][ T5863] usb usb2-port1: attempt power cycle [ 676.972179][ T5863] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 676.991918][ T5863] usb 2-1: device descriptor read/8, error -71 [ 677.241896][ T5863] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 677.548064][ T5863] usb 2-1: device descriptor read/8, error -71 [ 677.671556][T13571] Bluetooth: hci1: command tx timeout [ 677.677200][ T5863] usb usb2-port1: unable to enumerate USB device [ 677.799987][ T3892] bond2 (unregistering): (slave erspan2): Releasing active interface [ 677.816341][ T3892] erspan2 (unregistering): left promiscuous mode [ 678.019389][T14393] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2349'. [ 678.183155][ T30] audit: type=1400 audit(1766887714.279:600): avc: denied { getopt } for pid=14403 comm="syz.5.2351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 678.795600][T14423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2354'. [ 678.942829][ T3892] bond1 (unregistering): (slave macvlan2): Releasing active interface [ 678.986872][ T3892] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 679.030443][ T3892] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 679.064955][ T3892] bond0 (unregistering): Released all slaves [ 679.501373][ T3892] bond1 (unregistering): Released all slaves [ 679.755587][T13571] Bluetooth: hci1: command tx timeout [ 679.762300][ T5863] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 679.839807][ T3892] bond2 (unregistering): Released all slaves [ 679.921338][ T5863] usb 6-1: Using ep0 maxpacket: 32 [ 679.930229][ T5863] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 679.943782][ T5863] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 679.953305][ T5863] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.969976][ T5863] usb 6-1: config 0 descriptor?? [ 679.973526][ T3892] bond3 (unregistering): Released all slaves [ 679.987981][ T5863] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 680.204693][T14338] chnl_net:caif_netlink_parms(): no params data found [ 680.922531][T14452] input: syz1 as /devices/virtual/input/input40 [ 681.004656][T14338] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.025706][T14338] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.038689][T14338] bridge_slave_0: entered allmulticast mode [ 681.091488][T14338] bridge_slave_0: entered promiscuous mode [ 681.147876][T14338] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.199992][T14338] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.261089][T14338] bridge_slave_1: entered allmulticast mode [ 681.329094][T14338] bridge_slave_1: entered promiscuous mode [ 681.831743][T13571] Bluetooth: hci1: command tx timeout [ 682.058082][T14338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 682.194687][T14338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 682.227264][T14483] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2364'. [ 682.476156][ T3892] hsr_slave_0: left promiscuous mode [ 682.503495][ T90] usb 6-1: USB disconnect, device number 7 [ 682.534808][ T3892] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 682.561715][ T3892] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 682.574733][ T3892] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 682.612050][ T3892] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 683.269633][ T3892] veth1_macvtap: left promiscuous mode [ 683.302882][ T3892] veth0_macvtap: left promiscuous mode [ 683.349382][ T3892] veth1_vlan: left promiscuous mode [ 683.386353][ T3892] veth0_vlan: left promiscuous mode [ 684.432686][ T6075] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 684.647051][ T6075] usb 6-1: device descriptor read/64, error -71 [ 685.361387][ T6075] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 685.382643][ T5863] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 685.431939][T14520] input: syz0 as /devices/virtual/input/input41 [ 685.511296][ T6075] usb 6-1: device descriptor read/64, error -71 [ 685.532750][ T5863] usb 2-1: device descriptor read/64, error -71 [ 685.596280][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.605267][ T1296] lec:lec_start_xmit: lec0:No lecd attached [ 685.709730][ T6075] usb usb6-port1: attempt power cycle [ 685.771611][ T5863] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 686.023890][ T3892] team0 (unregistering): Port device team_slave_1 removed [ 686.091351][ T5863] usb 2-1: device descriptor read/64, error -71 [ 686.130526][T14526] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 686.141114][T14526] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 686.142248][ T6075] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 686.168756][T14526] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 686.177576][ T3892] team0 (unregistering): Port device team_slave_0 removed [ 686.184753][T14526] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 686.201774][ T5863] usb usb2-port1: attempt power cycle [ 686.215322][ T6075] usb 6-1: device descriptor read/8, error -71 [ 686.473425][ T6075] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 686.514102][ T6075] usb 6-1: device descriptor read/8, error -71 [ 686.571476][ T5863] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 686.612478][ T5863] usb 2-1: device descriptor read/8, error -71 [ 686.628752][ T6075] usb usb6-port1: unable to enumerate USB device [ 686.881533][ T5863] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 686.907489][ T5863] usb 2-1: device descriptor read/8, error -71 [ 687.021797][ T5863] usb usb2-port1: unable to enumerate USB device [ 687.051936][T14338] team0: Port device team_slave_0 added [ 687.060921][T14526] smc: net device hsr0 applied user defined pnetid SYZ2 [ 687.070818][T14338] team0: Port device team_slave_1 added [ 687.077056][T14527] smc: net device hsr0 erased user defined pnetid SYZ2 [ 687.209843][T14338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 687.218116][T14338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 687.245166][T14338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 687.273122][T14338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 687.484439][T14338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 688.045185][T14338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 689.051354][T14561] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 689.061605][T14561] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 689.077017][T14561] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 689.085397][T14561] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 689.494109][T14561] smc: net device hsr0 applied user defined pnetid SYZ2 [ 689.502086][T14569] smc: net device hsr0 erased user defined pnetid SYZ2 [ 689.524201][T14338] hsr_slave_0: entered promiscuous mode [ 689.530676][T14338] hsr_slave_1: entered promiscuous mode [ 690.712132][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5100 ms [ 690.720197][ C0] lec:lec_tx_timeout: lec0 [ 691.977081][T14338] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 692.016217][T14338] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 692.062975][T14338] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 692.094867][T14338] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 693.240410][T14338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 693.414047][T14338] 8021q: adding VLAN 0 to HW filter on device team0 [ 693.487683][T14164] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.494827][T14164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 693.573252][T14164] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.580447][T14164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 693.722625][ T5994] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 693.826355][T14638] tipc: Enabled bearer , priority 0 [ 693.850056][T14638] syzkaller0: entered promiscuous mode [ 693.874905][T14638] syzkaller0: entered allmulticast mode [ 693.891539][ T5994] usb 6-1: Using ep0 maxpacket: 8 [ 693.914224][T14638] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2392'. [ 693.932148][ T5994] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 693.980864][ T5994] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 693.996966][T14643] tipc: Resetting bearer [ 694.016711][ T5994] usb 6-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 694.026195][T14637] tipc: Resetting bearer [ 694.053124][ T5994] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.147766][ T5994] usb 6-1: config 0 descriptor?? [ 694.197087][T14650] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 694.206311][T14650] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 694.227494][T14637] tipc: Disabling bearer [ 694.249432][T14650] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 694.277928][T14650] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 694.304166][T14651] smc: net device hsr0 applied user defined pnetid SYZ2 [ 694.435625][T14650] smc: net device hsr0 erased user defined pnetid SYZ2 [ 694.481157][T14660] batadv_slave_1: entered promiscuous mode [ 694.543757][T14662] usb usb8: usbfs: process 14662 (syz.2.2396) did not claim interface 0 before use [ 694.573657][T14653] batadv_slave_1: left promiscuous mode [ 695.411581][T14338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 695.706641][T14338] veth0_vlan: entered promiscuous mode [ 695.774970][T14338] veth1_vlan: entered promiscuous mode [ 695.967406][T14338] veth0_macvtap: entered promiscuous mode [ 696.051669][T14338] veth1_macvtap: entered promiscuous mode [ 696.139594][T14338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 696.234025][T14338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 696.360966][ T3848] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.398110][ T3848] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.474680][ T5994] usbhid 6-1:0.0: can't add hid device: -71 [ 696.529018][ T3848] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.553435][ T5994] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 696.645895][ T3848] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.657530][ T5994] usb 6-1: USB disconnect, device number 12 [ 697.312123][T14695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2398'. [ 697.395171][ T3848] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 697.429795][ T3848] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 697.542523][ T30] audit: type=1400 audit(1766887733.639:601): avc: denied { setopt } for pid=14694 comm="syz.1.2400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 697.588214][T12954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 697.651263][T12954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.261536][ T10] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 698.692643][ T10] usb 3-1: device descriptor read/64, error -71 [ 698.723455][T14711] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 698.731451][T14711] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 698.739840][T14711] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 698.747737][T14711] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 698.774657][T14711] smc: net device hsr0 applied user defined pnetid SYZ2 [ 698.786417][T14711] smc: net device hsr0 erased user defined pnetid SYZ2 [ 698.876660][T14721] CUSE: info not properly terminated [ 698.905760][T14721] tipc: Enabling not permitted [ 698.931393][ T10] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 698.955392][T14721] tipc: Enabling of bearer rejected, failed to enable media [ 699.061601][ T10] usb 3-1: device descriptor read/64, error -71 [ 699.142169][ T24] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 699.172287][ T10] usb usb3-port1: attempt power cycle [ 699.221826][T14733] binder: 14732:14733 ioctl c0306201 2000000003c0 returned -14 [ 699.259018][T14733] binder: 14732:14733 ioctl c0306201 200000000180 returned -14 [ 699.321485][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 699.343764][ T24] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 699.394370][ T24] usb 2-1: config 0 has no interface number 0 [ 699.420437][ T24] usb 2-1: config 0 interface 184 has no altsetting 0 [ 699.515931][ T24] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 699.536161][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.545590][ T10] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 699.563565][ T10] usb 3-1: device descriptor read/8, error -71 [ 699.565004][ T24] usb 2-1: Product: syz [ 699.658847][ T24] usb 2-1: Manufacturer: syz [ 699.694075][ T24] usb 2-1: SerialNumber: syz [ 699.768133][ T24] usb 2-1: config 0 descriptor?? [ 699.837324][ T24] smsc75xx v1.0.0 [ 699.909925][T14738] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 699.918188][T14738] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 699.926646][T14738] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 699.934510][T14738] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 699.977909][T14738] smc: net device hsr0 applied user defined pnetid SYZ2 [ 699.987968][T14738] smc: net device hsr0 erased user defined pnetid SYZ2 [ 700.042149][ T10] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 700.097722][ T10] usb 3-1: device descriptor read/8, error -71 [ 700.226978][ T10] usb usb3-port1: unable to enumerate USB device [ 700.694306][ T5825] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 700.773266][T14752] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2412'. [ 700.836858][ T5825] usb 6-1: device descriptor read/64, error -71 [ 701.121918][ T5825] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 701.162133][ T30] audit: type=1400 audit(1766887737.259:602): avc: denied { read } for pid=14762 comm="syz.4.2416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 701.530724][ T5825] usb 6-1: device descriptor read/64, error -71 [ 701.639010][ T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 701.674891][ T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 701.675483][ T5825] usb usb6-port1: attempt power cycle [ 701.686597][ T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 701.703684][ T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 701.714846][ T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 701.726018][ T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 702.055251][ T24] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 702.081385][ T5825] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 702.089377][ T24] usb 2-1: USB disconnect, device number 70 [ 702.112246][ T5825] usb 6-1: device descriptor read/8, error -71 [ 702.150793][T14773] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2419'. [ 702.185060][T14773] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.192652][T14773] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.207290][T14776] SELinux: policydb string length 0 does not match expected length 8 [ 702.217088][ T30] audit: type=1400 audit(1766887738.299:603): avc: denied { load_policy } for pid=14775 comm="syz.2.2420" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 702.237703][T14776] SELinux: failed to load policy [ 702.290640][T14776] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2420'. [ 702.433889][ T5825] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 702.447459][T14781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2420'. [ 702.973465][ T5825] usb 6-1: device descriptor read/8, error -71 [ 703.101834][ T5825] usb usb6-port1: unable to enumerate USB device [ 704.382343][ T30] audit: type=1400 audit(1766887740.479:604): avc: denied { bind } for pid=14808 comm="syz.4.2428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 704.439768][T14809] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2428'. [ 705.338533][T14815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2428'. [ 705.347466][T14815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2428'. [ 705.375707][ T30] audit: type=1400 audit(1766887741.459:605): avc: denied { listen } for pid=14808 comm="syz.4.2428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 705.703074][T14824] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2432'. [ 705.870640][T14825] bridge2: entered promiscuous mode [ 705.876070][T14825] bridge2: entered allmulticast mode [ 707.275138][T14829] input: syz0 as /devices/virtual/input/input42 [ 707.463312][T14834] vlan2: entered promiscuous mode [ 707.571986][T14834] vlan2: entered allmulticast mode [ 707.895770][T14839] FAULT_INJECTION: forcing a failure. [ 707.895770][T14839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 707.910380][T14839] CPU: 0 UID: 0 PID: 14839 Comm: syz.0.2435 Tainted: G L syzkaller #0 PREEMPT(full) [ 707.910409][T14839] Tainted: [L]=SOFTLOCKUP [ 707.910415][T14839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 707.910425][T14839] Call Trace: [ 707.910431][T14839] [ 707.910438][T14839] dump_stack_lvl+0x16c/0x1f0 [ 707.910465][T14839] should_fail_ex+0x512/0x640 [ 707.910491][T14839] _copy_from_iter+0x2a4/0x16c0 [ 707.910520][T14839] ? __alloc_skb+0x220/0x410 [ 707.910543][T14839] ? __alloc_skb+0x35d/0x410 [ 707.910573][T14839] ? __pfx__copy_from_iter+0x10/0x10 [ 707.910598][T14839] ? netlink_autobind.isra.0+0x158/0x370 [ 707.910630][T14839] netlink_sendmsg+0x820/0xdd0 [ 707.910657][T14839] ? __pfx_netlink_sendmsg+0x10/0x10 [ 707.910689][T14839] ____sys_sendmsg+0xa5d/0xc30 [ 707.910713][T14839] ? copy_msghdr_from_user+0x10a/0x160 [ 707.910732][T14839] ? __pfx_____sys_sendmsg+0x10/0x10 [ 707.910768][T14839] ___sys_sendmsg+0x134/0x1d0 [ 707.910789][T14839] ? __pfx____sys_sendmsg+0x10/0x10 [ 707.910843][T14839] __sys_sendmsg+0x16d/0x220 [ 707.910862][T14839] ? __pfx___sys_sendmsg+0x10/0x10 [ 707.910892][T14839] ? fput+0x70/0xf0 [ 707.910913][T14839] do_syscall_64+0xcd/0xf80 [ 707.910937][T14839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.910957][T14839] RIP: 0033:0x7ff77a38f749 [ 707.910972][T14839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 707.910990][T14839] RSP: 002b:00007ff77b1f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 707.911008][T14839] RAX: ffffffffffffffda RBX: 00007ff77a5e6180 RCX: 00007ff77a38f749 [ 707.911021][T14839] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 707.911032][T14839] RBP: 00007ff77b1f4090 R08: 0000000000000000 R09: 0000000000000000 [ 707.911043][T14839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 707.911052][T14839] R13: 00007ff77a5e6218 R14: 00007ff77a5e6180 R15: 00007ffd405fd508 [ 707.911078][T14839] [ 708.114776][T14834] hsr_slave_1: entered allmulticast mode [ 708.668476][T14849] bond1: option mode: unable to set because the bond device has slaves [ 708.705217][T14849] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 708.747659][T14854] syz0: rxe_newlink: already configured on bond0 [ 708.888805][T14856] vlan2: entered promiscuous mode [ 708.903142][T14856] vlan2: entered allmulticast mode [ 708.923533][T14856] hsr_slave_1: entered allmulticast mode [ 708.960126][T14856] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2441'. [ 709.144143][T14862] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2443'. [ 709.193768][T14862] netlink: 212 bytes leftover after parsing attributes in process `syz.0.2443'. [ 709.206597][T14862] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2443'. [ 709.279806][T14869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2445'. [ 709.672484][T13571] Bluetooth: hci0: command 0x0406 tx timeout [ 710.657628][T14890] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2450'. [ 711.542047][ T5994] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 711.665398][T14916] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 711.693468][T14916] smc: removing ib device syz0 [ 712.568668][T14916] ------------[ cut here ]------------ [ 712.574182][T14916] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x41/0x60, CPU#0: syz.2.2459/14916 [ 712.585597][T14916] Modules linked in: [ 712.589736][T14916] CPU: 0 UID: 0 PID: 14916 Comm: syz.2.2459 Tainted: G L syzkaller #0 PREEMPT(full) [ 712.600690][T14916] Tainted: [L]=SOFTLOCKUP [ 712.605368][T14916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 712.615457][T14916] RIP: 0010:rxe_pool_cleanup+0x41/0x60 [ 712.621615][T14916] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1f 48 83 bb 80 00 00 00 00 75 06 5b e9 05 a9 27 f9 e8 00 a9 27 f9 90 <0f> 0b 90 5b e9 f6 a8 27 f9 e8 f1 82 91 f9 eb da 66 66 2e 0f 1f 84 [ 712.641282][T14916] RSP: 0018:ffffc900031a71b8 EFLAGS: 00010246 [ 712.647335][T14916] RAX: 0000000000080000 RBX: ffff888030fdd358 RCX: ffffc90010121000 [ 712.655323][T14916] RDX: 0000000000080000 RSI: ffffffff88973dc0 RDI: ffff888030fdd3d8 [ 712.663308][T14916] RBP: ffffffff88959f40 R08: 0000000000000005 R09: 0000000000000001 [ 712.671454][T14916] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888030fdc698 [ 712.679477][T14916] R13: ffff888030fdbfe0 R14: ffff888030fdbfe0 R15: ffff888030fdd0b8 [ 712.687490][T14916] FS: 00007f4956e7a6c0(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 712.696613][T14916] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 712.703211][T14916] CR2: 00007f0841a95654 CR3: 00000000747c5000 CR4: 00000000003526f0 [ 712.711486][T14916] Call Trace: [ 712.714764][T14916] [ 712.717672][T14916] rxe_dealloc+0x25/0xc0 [ 712.722133][T14916] ib_dealloc_device+0x49/0x230 [ 712.726967][T14916] __ib_unregister_device+0x396/0x480 [ 712.732359][T14916] ib_unregister_device_and_put+0x5a/0x80 [ 712.738093][T14916] nldev_dellink+0x21f/0x320 [ 712.742688][T14916] ? __pfx_nldev_dellink+0x10/0x10 [ 712.747817][T14916] ? __pfx_nldev_dellink+0x10/0x10 [ 712.752938][T14916] ? __pfx_nldev_dellink+0x10/0x10 [ 712.758030][T14916] rdma_nl_rcv_msg+0x38a/0x6e0 [ 712.762798][T14916] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 712.768062][T14916] ? irqentry_exit+0x1dd/0x8c0 [ 712.772837][T14916] ? __lock_acquire+0x436/0x2890 [ 712.777795][T14916] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 712.784210][T14916] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 712.791150][T14916] ? netlink_deliver_tap+0x1ae/0xd30 [ 712.796442][T14916] ? __rcu_read_unlock+0x2b5/0x5a0 [ 712.801582][T14916] netlink_unicast+0x5aa/0x870 [ 712.806331][T14916] ? __pfx_netlink_unicast+0x10/0x10 [ 712.811967][T14916] netlink_sendmsg+0x8c8/0xdd0 [ 712.816725][T14916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 712.822023][T14916] ____sys_sendmsg+0xa5d/0xc30 [ 712.826770][T14916] ? copy_msghdr_from_user+0x10a/0x160 [ 712.832237][T14916] ? __pfx_____sys_sendmsg+0x10/0x10 [ 712.837527][T14916] ? __pfx_futex_wake_mark+0x10/0x10 [ 712.842826][T14916] ___sys_sendmsg+0x134/0x1d0 [ 712.847486][T14916] ? __pfx____sys_sendmsg+0x10/0x10 [ 712.852689][T14916] ? futex_private_hash_put+0x160/0x1b0 [ 712.858237][T14916] __sys_sendmsg+0x16d/0x220 [ 712.862838][T14916] ? __pfx___sys_sendmsg+0x10/0x10 [ 712.867931][T14916] ? __x64_sys_futex+0x1e0/0x4c0 [ 712.872899][T14916] do_syscall_64+0xcd/0xf80 [ 712.877383][T14916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.883280][T14916] RIP: 0033:0x7f4955f8f749 [ 712.887687][T14916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 712.907316][T14916] RSP: 002b:00007f4956e7a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 712.916080][T14916] RAX: ffffffffffffffda RBX: 00007f49561e6180 RCX: 00007f4955f8f749 [ 712.924085][T14916] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 712.932061][T14916] RBP: 00007f4956013f91 R08: 0000000000000000 R09: 0000000000000000 [ 712.940026][T14916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 712.947995][T14916] R13: 00007f49561e6218 R14: 00007f49561e6180 R15: 00007ffea1fad3d8 [ 712.956002][T14916] [ 712.959004][T14916] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 712.966265][T14916] CPU: 0 UID: 0 PID: 14916 Comm: syz.2.2459 Tainted: G L syzkaller #0 PREEMPT(full) [ 712.977173][T14916] Tainted: [L]=SOFTLOCKUP [ 712.981473][T14916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 712.991514][T14916] Call Trace: [ 712.994774][T14916] [ 712.997682][T14916] dump_stack_lvl+0x3d/0x1f0 [ 713.002372][T14916] vpanic+0x640/0x6f0 [ 713.006334][T14916] ? rxe_pool_cleanup+0x41/0x60 [ 713.011164][T14916] panic+0xca/0xd0 [ 713.014865][T14916] ? __pfx_panic+0x10/0x10 [ 713.019267][T14916] check_panic_on_warn+0xab/0xb0 [ 713.024183][T14916] __warn+0x108/0x3c0 [ 713.028145][T14916] __report_bug+0x2a0/0x520 [ 713.032623][T14916] ? rxe_pool_cleanup+0x41/0x60 [ 713.037455][T14916] ? __pfx___report_bug+0x10/0x10 [ 713.042472][T14916] ? lockdep_hardirqs_on+0x7c/0x110 [ 713.047657][T14916] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 713.053440][T14916] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 713.059253][T14916] ? __flush_workqueue+0x410/0x1230 [ 713.064433][T14916] ? rxe_pool_cleanup+0x41/0x60 [ 713.069268][T14916] report_bug+0xb2/0x220 [ 713.073494][T14916] ? rxe_pool_cleanup+0x41/0x60 [ 713.078322][T14916] handle_bug+0x127/0x260 [ 713.082641][T14916] exc_invalid_op+0x17/0x50 [ 713.087126][T14916] asm_exc_invalid_op+0x1a/0x20 [ 713.091952][T14916] RIP: 0010:rxe_pool_cleanup+0x41/0x60 [ 713.097391][T14916] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1f 48 83 bb 80 00 00 00 00 75 06 5b e9 05 a9 27 f9 e8 00 a9 27 f9 90 <0f> 0b 90 5b e9 f6 a8 27 f9 e8 f1 82 91 f9 eb da 66 66 2e 0f 1f 84 [ 713.116979][T14916] RSP: 0018:ffffc900031a71b8 EFLAGS: 00010246 [ 713.123028][T14916] RAX: 0000000000080000 RBX: ffff888030fdd358 RCX: ffffc90010121000 [ 713.130976][T14916] RDX: 0000000000080000 RSI: ffffffff88973dc0 RDI: ffff888030fdd3d8 [ 713.138925][T14916] RBP: ffffffff88959f40 R08: 0000000000000005 R09: 0000000000000001 [ 713.146876][T14916] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888030fdc698 [ 713.154825][T14916] R13: ffff888030fdbfe0 R14: ffff888030fdbfe0 R15: ffff888030fdd0b8 [ 713.162777][T14916] ? __pfx_rxe_dealloc+0x10/0x10 [ 713.167699][T14916] ? rxe_pool_cleanup+0x40/0x60 [ 713.172532][T14916] ? rxe_pool_cleanup+0x40/0x60 [ 713.177363][T14916] rxe_dealloc+0x25/0xc0 [ 713.181582][T14916] ib_dealloc_device+0x49/0x230 [ 713.186413][T14916] __ib_unregister_device+0x396/0x480 [ 713.191770][T14916] ib_unregister_device_and_put+0x5a/0x80 [ 713.197478][T14916] nldev_dellink+0x21f/0x320 [ 713.202051][T14916] ? __pfx_nldev_dellink+0x10/0x10 [ 713.207179][T14916] ? __pfx_nldev_dellink+0x10/0x10 [ 713.212271][T14916] ? __pfx_nldev_dellink+0x10/0x10 [ 713.217359][T14916] rdma_nl_rcv_msg+0x38a/0x6e0 [ 713.222108][T14916] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 713.227375][T14916] ? irqentry_exit+0x1dd/0x8c0 [ 713.232120][T14916] ? __lock_acquire+0x436/0x2890 [ 713.237212][T14916] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 713.243619][T14916] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 713.250568][T14916] ? netlink_deliver_tap+0x1ae/0xd30 [ 713.255838][T14916] ? __rcu_read_unlock+0x2b5/0x5a0 [ 713.260931][T14916] netlink_unicast+0x5aa/0x870 [ 713.265677][T14916] ? __pfx_netlink_unicast+0x10/0x10 [ 713.270947][T14916] netlink_sendmsg+0x8c8/0xdd0 [ 713.275717][T14916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 713.281014][T14916] ____sys_sendmsg+0xa5d/0xc30 [ 713.285757][T14916] ? copy_msghdr_from_user+0x10a/0x160 [ 713.291191][T14916] ? __pfx_____sys_sendmsg+0x10/0x10 [ 713.296464][T14916] ? __pfx_futex_wake_mark+0x10/0x10 [ 713.301739][T14916] ___sys_sendmsg+0x134/0x1d0 [ 713.306393][T14916] ? __pfx____sys_sendmsg+0x10/0x10 [ 713.311597][T14916] ? futex_private_hash_put+0x160/0x1b0 [ 713.317154][T14916] __sys_sendmsg+0x16d/0x220 [ 713.321729][T14916] ? __pfx___sys_sendmsg+0x10/0x10 [ 713.326834][T14916] ? __x64_sys_futex+0x1e0/0x4c0 [ 713.331765][T14916] do_syscall_64+0xcd/0xf80 [ 713.336250][T14916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.342157][T14916] RIP: 0033:0x7f4955f8f749 [ 713.346551][T14916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 713.366224][T14916] RSP: 002b:00007f4956e7a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 713.374620][T14916] RAX: ffffffffffffffda RBX: 00007f49561e6180 RCX: 00007f4955f8f749 [ 713.382571][T14916] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 713.390519][T14916] RBP: 00007f4956013f91 R08: 0000000000000000 R09: 0000000000000000 [ 713.398468][T14916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 713.406423][T14916] R13: 00007f49561e6218 R14: 00007f49561e6180 R15: 00007ffea1fad3d8 [ 713.414382][T14916] [ 713.417676][T14916] Kernel Offset: disabled [ 713.421982][T14916] Rebooting in 86400 seconds..