last executing test programs: 13m56.136313737s ago: executing program 0 (id=1024): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x9, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x9, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x28, 0xd, 0x7, 0x1, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0xe464, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x1000, 0xffff, 0x0, 0x8000, 0x4, 0x8008, 0x400, 0x80, 0x3, 0x5, 0x6, 0x8, 0x4, 0x3, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e4, 0xc488, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xffffffff, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x2, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x2, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x200000, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xf, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa5, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x7fffffff, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x7, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x9, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x4, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb3e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sched_setscheduler(0x0, 0x1, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) (fail_nth: 5) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x2000000000001005, 0x19dff, 0x4}}}, 0x90) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r6, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x2000000000001005, 0x19dff}}}, 0x90) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000003700)=ANY=[], 0x11b0}, 0x1, 0x0, 0x0, 0x48080}, 0x4000040) r7 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x1}, 0x20) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(0x0, 0x0) setns(r8, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 13m52.944418483s ago: executing program 0 (id=1027): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000180)={'\x00', 0x1, 0x3, 0xffffffff, 0x3, 0x2, 0xffffffffffffffff}) sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x87) setfsgid(0xee01) setfsgid(0xee01) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth1\x00', &(0x7f0000000180)=@ethtool_sset_info={0x4a, 0x7, 0x3}}) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) read(r2, &(0x7f00000004c0)=""/66, 0x42) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r2], 0x4e}, 0x1, 0x0, 0x0, 0x14}, 0x20008000) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f000055a000/0x1000)=nil, 0x1000, 0x200000a, 0x50, 0xffffffffffffffff, 0xbaade000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$XFS_IOC_ERROR_INJECTION(r3, 0x40085874, &(0x7f00000000c0)={r3, 0x8000}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x44004) execveat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x400) r7 = creat(&(0x7f0000000040)='./file0\x00', 0xecf86c37d53049c5) close(r7) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r5, 0xc0106426, &(0x7f0000001200)={0x2, &(0x7f0000000240)=[{}, {0x0}]}) ioctl$DRM_IOCTL_LOCK(r7, 0x4008642a, &(0x7f0000000300)={r8, 0x8}) capset(0x0, &(0x7f0000000280)={0x0, 0xf, 0x60000, 0x1, 0x5, 0xffff8001}) getpid() 13m51.982035834s ago: executing program 0 (id=1030): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x4d, 0x2, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000040)={0x3, 0x6}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000002240)="d7", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000000), 0x80) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r5, 0x100) accept4(r5, 0x0, 0x0, 0x0) shutdown(r5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 13m50.644556182s ago: executing program 0 (id=1034): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000040)=0x2) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6(0xa, 0x3, 0x88) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x2, 0x0, 0x7d812381}, {0x6, 0x20, 0x0, 0xfffffffe}]}, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff020000000000000000000000000001"], 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000080)={0xed9}, 0x8) 13m50.451468038s ago: executing program 0 (id=1036): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0x4}, {}, {0x7, 0x300}}, [@TCA_CHAIN={0x8, 0xb, 0xd9}, @TCA_RATE={0x6, 0x5, {0x9b, 0x5}}, @TCA_RATE={0x6, 0x5, {0x9, 0x88}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000000c0)={0x9, 0x33a, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x12, 0xb05, 0x0, 0x0, {0x7}}, 0x14}}, 0x800) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e000000013"], 0xe0}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = eventfd2(0xe5c, 0x80000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r5, 0x6, 0x2, r5}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x7, 0x2, r5}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[], 0x48}}, 0x40000) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, 0x0, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r8, 0x3ba0, &(0x7f00000001c0)={0x48, 0x2, r9}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f00000007c0)={0x28, 0x2, r9, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000}) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) 13m45.747751183s ago: executing program 0 (id=1046): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$radio(&(0x7f0000000040), 0x3, 0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) dup2(r3, r3) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f00000006c0)=0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40039}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 13m45.263339357s ago: executing program 32 (id=1046): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$radio(&(0x7f0000000040), 0x3, 0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) dup2(r3, r3) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f00000006c0)=0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40039}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 19.358607727s ago: executing program 2 (id=3237): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xacd6a4e1331e885c, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socket$inet6(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0xa) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0xfc}}, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) r5 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f00000003c0)={0x53, 0x0, 0xff17, {0x0, 0x1}, {0x4b, 0x82}, @ramp={0x6, 0x4, {0x5edb, 0x400, 0x9}}}) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000002980)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000280)={r6, 0x3, 0x1ff, 0x6, &(0x7f0000000200)=[{0x9, 0x5, 0x7, 0xf66}, {0xd, 0x0, 0x5, 0x26c1}, {0x2, 0x401, 0xd, 0x1}, {0x7, 0x4, 0x9, 0x6bf8}, {0xfff, 0x1, 0x8, 0x6}, {0x6, 0x6, 0xfbff, 0x71f3}]}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x1, 0x4, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 17.868582805s ago: executing program 3 (id=3240): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x28, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ipvlan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)={0x40, 0x8}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000700)={0x14, &(0x7f0000000140)={0x40, 0x4b, 0x2, {0x2, 0x30}}, &(0x7f0000000600)={0x0, 0x3, 0xf7, @string={0xf7, 0x3, "695813f74ff2c935128dd76072de2540faba4dc9a02552c37e27a8484c753d333fc0a35978d88762b4577e020d498f20cc4598ecc2ac187ecf95c93c2eee298f1345146ba42b3f73e1190fc4dbf73ec85f22c63a2bd7c3a851436e54ef24bbd7b37897c13eb2bce90eb20d3022640aca56b11dac815f108b759f7f105002751b8f32a821308ae55c1b829c2e01833e3f4f62467b7dc84244c938ae54f87522e68615c718f13e459389dde1386aefcb57ab8aea26743ef2981f66f51b615fd3341d314dccc80d92cc4699e37345b9ac9a5593863a0668ccd7718a27bc922e750b92c68883c809142dbb976a2fd5fe45e7881865cee2"}}}, &(0x7f0000000980)={0x44, &(0x7f0000000740)={0x0, 0x6, 0xf, "773984636fb3d5c683449281ff907e"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000840)={0x20, 0x81, 0x2, "e104"}, &(0x7f0000000880)={0x20, 0x82, 0x3, "af5e77"}, &(0x7f00000008c0)={0x20, 0x83, 0x2, "5b98"}, &(0x7f0000000900)={0x20, 0x84, 0x1, "f8"}, &(0x7f0000000940)={0x20, 0x85, 0x3, "0ec2a4"}}) syz_open_dev$sndctrl(0x0, 0x84, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x24, r4, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb9200a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 17.792399088s ago: executing program 2 (id=3242): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r4 = syz_open_dev$dri(&(0x7f0000001380), 0x1ff, 0xa8b01) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000380)={0x5, 0x0, r5}) 15.638617053s ago: executing program 2 (id=3248): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x43}}, @in6={0xa, 0x4e23, 0x5, @loopback, 0xfffffffb}, @in={0x2, 0x4e23, @rand_addr=0x64010102}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e23, @rand_addr=0x64010100}], 0x5c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0xb2, 0x18}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008030}, 0x24040004) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'geneve1\x00', 0x0}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0x19, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff1, 0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x8}], 0x2}, 0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r13 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89f, 0xd802, 0x8, 0xc1}) io_uring_enter(r13, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0) 13.722948134s ago: executing program 3 (id=3251): sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000c0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e25, 0x2, @empty, 0x40003ff}, 0x1b) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x0, 0x28, 0x0, 0x0, 0xffffff45}, 0x28) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r5, 0x84, 0x1c, &(0x7f0000000380), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a000006090002"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r4, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084000000"], 0x48}}, 0x4084) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) r6 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000240)={'ni_at_a2150\x00', [0xb013, 0x7, 0x3, 0xdd6, 0x88d7, 0x8f, 0xffffffff, 0x8012, 0x1006, 0xffffffff, 0x40008, 0x7, 0x1000000b, 0x3, 0x0, 0xfffffffd, 0x8, 0x6, 0x9, 0x57, 0x4, 0x3, 0x7, 0xa, 0x4, 0x1, 0xb0c4, 0x800, 0x20004, 0x400002, 0x22]}) 13.456216534s ago: executing program 1 (id=3253): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002240)=@can_newroute={0x2c, 0x18, 0x1, 0x1000000, 0x25dfdbfd, {0x1d, 0x1, 0x2}, [@CGW_MOD_AND={0x15, 0x1, {{{0x1, 0x1, 0x0, 0x1}, 0x2, 0x1, 0x0, 0x0, "1f41c52bdd0c5dcd"}, 0x2}}]}, 0x2c}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 12.049686556s ago: executing program 5 (id=3254): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002240)=@can_newroute={0x2c, 0x18, 0x1, 0x1000000, 0x25dfdbfd, {0x1d, 0x1, 0x2}, [@CGW_MOD_AND={0x15, 0x1, {{{0x1, 0x1, 0x0, 0x1}, 0x2, 0x1, 0x0, 0x0, "1f41c52bdd0c5dcd"}, 0x2}}]}, 0x2c}}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x80000001, 0x0, 0x0, 0x10000004, {0x40, 0xd08, 0x0, 0xfe, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="0201"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ffffffffffffe5, 0x0) io_uring_setup(0x1ddd, &(0x7f0000000440)={0x0, 0x40000000, 0x0, 0x1, 0x8}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x1}, 0x7, 0xfffffffd, &(0x7f0000000240)={{0x0, 0x0, 0x3}}, 0x0, 0x0, 0x3}}) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee3, 0x8031, 0xffffffffffffffff, 0x8003000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') open_tree(r6, &(0x7f0000006180)='./mnt\x00', 0x9002) sendmsg$inet(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) getsockopt(r2, 0x110, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000280)=0x18ff9) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000001600)=ANY=[@ANYBLOB="54001000", @ANYRES16=r8, @ANYBLOB="0100fdffffff00000000260000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008005100000000000c008f00feffffffffffffff0c0090000000000000000000"], 0x54}}, 0x0) 10.635174705s ago: executing program 5 (id=3255): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="ec110000", @ANYRES16=r1, @ANYBLOB="05002cbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x11ec}, 0x1, 0x0, 0x0, 0x8810}, 0x44) 9.251236586s ago: executing program 4 (id=3257): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x2, 0x0) getsockname$packet(r1, 0x0, &(0x7f00000003c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f0000000100)=0x2c0000) ioctl$SG_IO(r5, 0x2285, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a00"/27], 0x24}}, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000004280)='.\x00', 0x0, 0x0) lseek(r6, 0x2, 0x1) r7 = socket(0x5, 0x3, 0x414f) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000780)={'syztnl0\x00', 0x0, 0x700, 0x80, 0xa59e, 0x483, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x68, 0x0, 0x4, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x7}, @broadcast}}}}) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='net/snmp\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) read$char_usb(r8, &(0x7f0000000040)=""/50, 0x32) 6.189931424s ago: executing program 4 (id=3258): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x0) sendmsg(r1, &(0x7f0000000840)={&(0x7f0000000040)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)="386d01ac50e198b6bc27d23d162f938e8ac46a125ae83b0ed3a6974a464b145e9c4d082f68b7078cfee96c831551543a1e9d78063b58f46e52e63d2202c95c32eb4f4e86104fa1f078e0f6f8502c0ec7712816d0275933bd6a6e27ec6b1628af42c74060fa3b03cb573481c4b5605c6ac9bd", 0x72}, {&(0x7f0000000180)="2e2819b4bf395e5ac4c4132ff2ccf685081e586232013c403fa647f0710d645cc177f36a24f3631bcc223c8dd1d3513f544ce59375a50f1a00956b3cb384c3c1b8694e68647414ddeda62e1d8f0aa9fbcd34d555ef53272064b51b3114fcbf2299562b7f4615108b6d5d325a1c56e55febd41032d215dd3bc73312e34298d285c2e22cc00a40e151409d2fe2605987abfe426efb0dbf364f38d17ea1e62a43028ce3", 0xa2}, {&(0x7f0000000240)="d9f77400c9b92648353d47c9d3ef", 0xe}, {&(0x7f0000000280)="f199e8a9504ece542dd63008a502ef8260c54342b35418db65b9684b8c41e5ad91485e247736a436192c241177c266750600a152a5daccfaab2b28b173b0173fafdca0d13637a39091988996d37eb063e315fa8c2c39a9b2f611d0b0b53580e3b21dd1cc53107f2fecb2f991a507e73d008d86500f0bd772974902bbe0d9e8cf6efeb49d5930aa5d06d5ad39af0cd22d", 0x90}, {&(0x7f0000000340)="23b499bef29b9ff9f1035b76d4114bd9d70ad6d6c2e1598ebd832fc833ba3ba71c5af6e381161ed430dd3767f22b9369f6f90b2c5b7b9148627998c7913c7fc08cc437ece866c3c466896e19beec9f3cabb1fb9f6a619624af26f265ba598dce3b7a8688bfb352be95b4efa811e42e1f343944868b78c1e3afce38db5316489f6c0503e30f125d7f3d6b6d53c1fb2a651340fead7b013585a72dd543c008e13ad15ce5375087fbc5dace9f95a48b369430dc6a45df549467378519486286faf1ff6d8340d2f949a01695bcea3378356934aacab1afee4f053f029b72a3e57b7a04b7a35f053f3b53ea0a86fde08d2d9b", 0xf0}, {&(0x7f0000000440)="21a899f17cc0254f00d53a842663df20700b5842d87991e48e96e3a17e5aed71fccb94cac713a5c395d52ed610ec06fda2cd47ea77e620", 0x37}, {&(0x7f0000000480)="74fae1ef0c", 0x5}], 0x8, &(0x7f0000000540)=[{0x98, 0x10a, 0x442, "cbdf7e9acfde2df6ef3dd6ab3c142bc978bcb0aa1f2c13ceeee22e9bda456ac8410549652ecaf90515468ddbbd42e96d8e8248e14ca9ea14fb05b89c528c528f559a6ceb6395f4e2a04db88fde7cb14f479cb695d540acfe76ad35123bc795f5a1583527ff77f3a23b94790f40b2b873430f7b5213dfbb46dd798c188cff4d56249f8326"}, {0x60, 0x108, 0x4, "3bd76ea829514519843f4bf8bc771c88c3a51769579a9181e84904eb43a0f23a5cd97931644ccbac70fb03e12f7f41298d32cdd4c2a3ef713d8eb0b1db555d9b82b102a3e1d8acf7414871abdd2d"}, {0x108, 0x113, 0x200000, "00a264fd852c8e7f407b1ded08f33292fb4af0fae43e9b91e09376a184d199c9c2940fd62f28e55348098e3ac81c7ef89c60c8c5876a584fa310306f45c2f47a74b14f409f03e7a3f4ec4d29ce4801c883da9cdf500f9967b67d87217ced304c0548865ebbb016fe33c60f8ca93289374f6b41e93c3003795a3bca1a18349ad44ee67990950bb9cb4baf9de608f5ee07dd7c2c3ffc02c3cd11a994aaeeee5ebb38c03992ddb017440ace368e0535bf829adaa945314beacb2867bdb36d453a755ecfb81b363fa64ceefec767c5a952e52614fdd772ac6074f73e1b6b4115873975605bab6e6c87613bf92908b9a014aaa2db"}, {0x80, 0x10f, 0x2, "e275c1a71511d87546461342e2a57d18bbc98cc46c045a075d8b6cc9d32a85a3eae8815f2e4a0b281b8cd88d0da1b9c5a2590c1ef025742f473a81272cc19a72c85eff1f77f74d3ac152ff2216b6b6f3041bf1ca8b61b74de26d4bd11bda0c045ad3bdfbaa72e668e3"}, {0x68, 0x10a, 0xfb, "3d394be6dc61bcfeca80ddc64c7b34b9a6ecda22a66d09b8fd47d07419b8afbb95df71e89544b5b32c95d0ab49c7e9bbc144e41076fbbe8fafa78bb0488b4f8e2d499b7bdaffb0d7dcbdc49efe4c2af1e1"}], 0x2e8}, 0x80) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs2/binder1\x00', 0x1802, 0x0) ioctl$COMEDI_SETWSUBD(0xffffffffffffffff, 0x6411) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000008c0), &(0x7f0000000900)=0x4) r3 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r3, &(0x7f0000001bc0)={&(0x7f0000000940)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000009c0)=""/212, 0xd4}, {&(0x7f0000000ac0)=""/17, 0x11}, {&(0x7f0000000b00)=""/45, 0x2d}, {&(0x7f0000000b40)=""/30, 0x1e}], 0x4, &(0x7f0000000bc0)=""/4096, 0x1000}, 0x40010000) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) getdents64(r4, &(0x7f0000001c40)=""/84, 0x54) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001cc0)={'batadv0\x00', 0x0}) r6 = accept(r3, &(0x7f0000001d00)=@nfc_llcp, &(0x7f0000001d80)=0x80) sendmsg$kcm(r6, &(0x7f0000002000)={&(0x7f0000001dc0)=@xdp={0x2c, 0x2, r5, 0x28}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001e40)="7f2ace06741f9d5be60fbebc1181fb7a228d93ef6a9b841b49797a271540bb24fe3b7d32d6dd4f7af1c1442669f94fbf7d8265d4e36e83fc2d5e5386e6a73acb5bab9a8dfd1d3a7ce0f390f8cee90b3f4348ce41e98c5a0966f5140940366722e4613bfad6ee7e68fc76a65cb7845b652e36b15562c8a9f8ea46960fc51e8343aabb111ee85d73e7438a66d47256943063369e7400202a407275365ef9295a4aa315263b5a3d", 0xa6}], 0x1, &(0x7f0000001f40)=[{0xb0, 0x84, 0x6, "69a5dbeb0fb3a5dce46236b263424bb40f320a190b27273f113b1ce105e14a9b945a05cc9769fdaec3372f9c4d8b95225b6d429b507ce11fee2598d12b72f7110a1babbaa626107af6c7f6bdc8e63bbfb6d2ddb2fd79ec950250c389577f0d376fbf3ac1f76804ffe43141c935fb4aba5589dd64e31b68f071744f010e24215234e8cae16a6bbc4ca6ddb6dcbc0a4e9e40e0e8c857b92808c66c4e8ad3"}], 0xb0}, 0x4000) r7 = landlock_create_ruleset(&(0x7f0000002040)={0x8881, 0x2, 0x2}, 0x18, 0x4) ioctl$KVM_SET_XSAVE(r4, 0x5000aea5, &(0x7f0000002080)={[0x8, 0x5, 0x5, 0x400, 0x6f59, 0x10, 0x15, 0x4253, 0x1000, 0x3, 0x7, 0x0, 0x2, 0x3, 0xfffff4bb, 0xff35, 0x3, 0x2, 0x7, 0x7, 0xd, 0x0, 0x9, 0x7fffffff, 0x10000, 0x2, 0x1, 0x4, 0xfb06, 0x1, 0xfffffffe, 0x2, 0xd89, 0xfffffffa, 0x5, 0xd, 0x2339565f, 0x8, 0x101, 0x2, 0x7e472ebb, 0x96a4, 0x7fffffff, 0x4de, 0x8, 0x8, 0x3, 0x1, 0x8, 0x7, 0x1ff, 0x7, 0x88, 0x40, 0xcb, 0x7fe00000, 0x3ff, 0x2e1541b2, 0xffff, 0x8, 0x2, 0x6, 0x9, 0x1, 0x40, 0x0, 0xab7, 0x3, 0x100, 0x0, 0x80000000, 0x3ff, 0x4, 0x9, 0x3, 0x2, 0x8, 0x7, 0x7fff, 0x800, 0x7, 0x0, 0x9, 0x3, 0x0, 0x9, 0x15a00000, 0x6, 0x1ff, 0x10000, 0x2, 0xfffffff9, 0x10000, 0x3, 0x610, 0x8, 0x1, 0x2, 0x9, 0x400, 0x9, 0x6a1a3a4, 0xefaeeb45, 0xcd, 0x9, 0x0, 0x1, 0x7fff, 0x2, 0x1, 0x7, 0xff, 0x3407, 0x4, 0xebd, 0x5, 0x40, 0x8, 0x1e81, 0x4, 0x2, 0x3, 0x6, 0x1, 0xfffff7db, 0x2, 0x9, 0x4, 0xe1, 0x40, 0x7, 0x5, 0x3, 0x5e59fe8e, 0x81, 0x3, 0x3, 0x8, 0x8, 0x9, 0x7, 0x7, 0x9, 0x1, 0xb, 0x0, 0xca, 0x0, 0x3, 0x2, 0x6, 0xfffffffc, 0x5, 0x4, 0x9, 0xd, 0x1, 0x831, 0x4, 0x7, 0x6, 0x1, 0x0, 0x3ff, 0xffff, 0x2, 0x4, 0xa, 0x2, 0x4, 0x8, 0x7f, 0x8, 0x0, 0x9, 0x5, 0x6cf3, 0x1, 0x5, 0x7, 0x6, 0x2, 0x6, 0xdb, 0x3, 0xffffff32, 0x7ff, 0x0, 0x4, 0x7, 0x7fffffff, 0xfffff6e1, 0x25, 0x6, 0x1ff, 0xc90, 0x0, 0xbac, 0xe3, 0x3, 0xf, 0x7551, 0x1ff, 0x0, 0xffffffff, 0x80000001, 0xfffffffd, 0x400, 0xffff, 0x1, 0xc, 0x400, 0x4, 0x2b, 0x6bb5, 0xa, 0xedb, 0x10001, 0x7, 0x6, 0xffff, 0x80000001, 0x100, 0x2, 0x0, 0xd9c8, 0x1, 0x5, 0x1, 0x0, 0x8001, 0x2, 0xa, 0x0, 0x8, 0x1, 0xffff, 0x0, 0x7, 0x1, 0x4, 0xffffffff, 0x2, 0x3ff, 0x6, 0x8, 0x8, 0x8000, 0x6, 0xf, 0x32, 0xd, 0xfef5, 0x4, 0xffff, 0xfffff2a2, 0x8001, 0x7fffffff, 0x2, 0x7, 0xab3, 0x1, 0x5, 0x7b4, 0x8001, 0x4, 0x4, 0xfd, 0x7fffffff, 0x4, 0x4, 0x80000000, 0x7f, 0x54c, 0x7, 0xff, 0x1000, 0x1, 0x200, 0xfffffffb, 0x5, 0x0, 0x6, 0x6, 0x7fff, 0xe, 0xfffffffb, 0x4, 0x200, 0x9, 0xa, 0x6, 0xffff, 0x2, 0x64, 0x0, 0x8, 0x8, 0x37c, 0x1, 0x9, 0xe57, 0x4, 0xa, 0x2, 0xae80, 0x2, 0x4, 0x7, 0x5, 0x2, 0x9c, 0x7, 0x4, 0x10000, 0x0, 0xe, 0x80000000, 0xbbc, 0x100, 0x7c0f, 0x5, 0x6, 0x1ff, 0x401, 0x305a, 0x6db, 0xa, 0x3ff, 0xfffffff4, 0x10001, 0x95d9, 0x6, 0x10000, 0x3, 0x8, 0x4, 0x8, 0x2400000, 0x6, 0x1a91, 0xffffffff, 0x7fffffff, 0xa, 0xfffffffb, 0x4, 0x8, 0x2, 0x1, 0x0, 0x4000000, 0x3, 0x4, 0x1, 0x2, 0x570, 0x8, 0x211, 0x5, 0xfffffff9, 0x2, 0xd, 0x3f0, 0x5112, 0xfff, 0x1, 0xffff8000, 0x8, 0x6, 0x1, 0x8, 0x500000, 0x9, 0xfffeffff, 0x9, 0x9, 0x40000, 0x7, 0xfffffffd, 0x2, 0xfffffffe, 0x9, 0xd, 0xfff, 0x8, 0x0, 0x1ff, 0x29, 0x8, 0x5, 0xd348, 0x6, 0x1, 0x23, 0x9, 0x518eb556, 0x8a, 0x6, 0x3ff, 0x8000, 0xb, 0xe, 0x0, 0x8001, 0x4, 0x6, 0x9, 0x0, 0x6, 0xff, 0x10001, 0x0, 0x7fffffff, 0x966, 0xe5a7, 0x5, 0x9235, 0x1, 0xbe, 0x7, 0x7dc4, 0x9, 0x2, 0x4, 0x9, 0x6, 0x4, 0x3ff, 0x0, 0xee12, 0x88d, 0x5, 0x200, 0xf, 0x5, 0xc4, 0x6, 0x6, 0x8000, 0xfffffff9, 0x5, 0x5, 0xbe, 0x913d, 0x8, 0x5, 0x4, 0x8, 0xe2f, 0x0, 0x4, 0x9, 0x6, 0x9, 0x0, 0x7, 0x9, 0x2, 0x6, 0x5, 0x2, 0xfff, 0x8, 0xfffffff7, 0x9, 0x71, 0xb3, 0x6c, 0x7f, 0x8, 0x4, 0x87e, 0xd, 0x0, 0xef0f, 0x7, 0x1, 0x2f3a, 0x8, 0x4, 0x6dd1, 0x0, 0x2, 0x7fff, 0x10, 0x9, 0x2, 0x8, 0x1, 0x1ff, 0xa, 0x3, 0x47161b65, 0x4, 0xcec0, 0xc, 0x1, 0x8, 0x8, 0xb8af, 0x9, 0x270, 0x7fff, 0x4, 0x7, 0x1, 0x5, 0x53fe, 0x0, 0x200, 0x100, 0xbdb2, 0x5, 0x3, 0x40, 0x3, 0xffff, 0x9, 0x9, 0xfffffffb, 0x4, 0x4, 0x7, 0x2, 0x4, 0x2, 0x3, 0x9, 0x5, 0x0, 0x7, 0x1ff, 0x6, 0xfffffff7, 0x4, 0xc0000000, 0x4e13, 0x5, 0xfffff001, 0x6, 0x8, 0x2, 0x6, 0x4, 0x6, 0xfb, 0x2, 0x7, 0x7, 0x9, 0x6, 0x9, 0x2, 0x3, 0x7047, 0x7, 0x2c, 0x3, 0xfffffff9, 0x8d, 0x2, 0x4, 0x6, 0x101, 0x3, 0x85, 0x4, 0x1000, 0x9, 0xd6f, 0x0, 0x6, 0x73e, 0x6, 0x4, 0xffffffff, 0xfffffffc, 0x8, 0xfffffff7, 0x0, 0x8, 0x8, 0x9, 0x80000001, 0x10, 0x6, 0x9ee, 0x1, 0x3ff, 0x4, 0x4, 0x7fffffff, 0x2ba, 0x18b, 0xff, 0x4, 0xfffffffb, 0x7, 0x80000001, 0x8, 0x0, 0x5, 0x6, 0xfffffffe, 0x81, 0x4, 0x0, 0x80, 0x5, 0xc0000, 0x1, 0x1, 0xfffffffb, 0x1000, 0x7, 0x10001, 0x0, 0x2, 0x6, 0xb, 0x4, 0x0, 0x1, 0x6, 0xbac, 0x9, 0x49, 0x40, 0x8, 0x6, 0x1, 0x7, 0x0, 0x4, 0xe, 0x40000000, 0x1ce1172c, 0x6, 0x5, 0xffff, 0x5, 0xc7, 0x7, 0x9fc5, 0x9, 0x8, 0xd, 0x57, 0x1ff, 0xffffffff, 0x283, 0x6, 0x9, 0x3, 0x8, 0x7f1e, 0x1, 0x0, 0x200, 0x5, 0x200, 0x14, 0x8, 0x8, 0x2000000, 0xb6, 0xfd68, 0x81, 0xa0f3, 0x675, 0x101, 0xd, 0x6, 0x400, 0x5, 0xf6, 0x0, 0x401, 0x9, 0x7, 0x2, 0x1ff, 0x8, 0x3, 0x3, 0xfffffffe, 0x8, 0x0, 0x39, 0xfffff578, 0xff, 0x6, 0x1f, 0x7, 0x6, 0x3, 0x401, 0x800, 0x101, 0x8, 0x8, 0x1, 0x1981, 0xd, 0x0, 0x6, 0x1, 0x3, 0x3ff, 0x5, 0xfffffffc, 0x9, 0xe0, 0xfffffbff, 0x8, 0x0, 0x1, 0x3a, 0x2, 0x0, 0x3, 0x0, 0x9, 0x7fff, 0x0, 0x6, 0x1e59, 0x2, 0x401, 0x28b, 0x6, 0x9, 0x5, 0x5, 0x10, 0xfffffffb, 0xe70, 0xa, 0x2, 0x200, 0x2, 0x5, 0x6, 0x3, 0x0, 0x400, 0x2, 0x3, 0x898, 0xffffff01, 0x977, 0x8, 0xfff, 0x8, 0xe, 0xede, 0x4, 0x7cc, 0x9, 0x5, 0x25, 0xee81, 0x1000, 0x7dfacf01, 0x2d, 0x687, 0x40, 0xfb44da1, 0x26e, 0x1, 0x7, 0x6, 0x1ff, 0x2, 0x0, 0x1, 0xe1, 0x1, 0xb2, 0x2, 0x2, 0x0, 0x100, 0x1, 0x6, 0x3, 0x8, 0x9, 0x3, 0x5, 0x0, 0x1, 0x2, 0x6d04, 0x1, 0xf0fb, 0x0, 0x0, 0x39, 0xfffffff9, 0x2, 0x100, 0xe, 0x42, 0x200, 0xffffffff, 0x1000, 0xe, 0xa, 0xd, 0x8, 0x9ee, 0x11e1, 0x2, 0x88c0, 0x7, 0x1, 0x800, 0x2, 0x6, 0x8, 0x401, 0x8, 0x0, 0x9d, 0x101, 0x5, 0x5c6, 0x5, 0x2, 0xd, 0x0, 0x12000, 0x800, 0x0, 0xf, 0x0, 0x7b8, 0xfff, 0x7, 0x8, 0xfffffffd, 0x0, 0x1, 0x6, 0xaf76, 0xf13, 0x3, 0x9, 0x800, 0x5, 0x4, 0xfffffffd, 0x7, 0x7, 0x4, 0x5, 0x2a, 0xfff, 0x2, 0x9, 0x5f9, 0x400, 0x9, 0xfffffffa, 0x5, 0x5, 0x5, 0x8, 0x4, 0x3, 0x6, 0x3, 0x9, 0x7fff, 0xf, 0x5, 0x80000000, 0x5, 0x1, 0x73, 0xf, 0x0, 0x0, 0x1, 0x7, 0x0, 0x10001, 0xc, 0xa, 0x6373e4b1, 0x10000, 0xfffffeff, 0x1, 0x8, 0x58, 0xfffffffd, 0x8, 0x12b, 0x5, 0x24e1, 0x1, 0x3, 0x8, 0xffffffff, 0x0, 0x4, 0x400, 0x5, 0x400, 0x9, 0x1, 0x6, 0x80000000, 0x9, 0x1, 0x7, 0x4, 0x40, 0x8, 0x8, 0x9, 0x2, 0x762, 0x3, 0x4, 0x4, 0xf, 0x6, 0x1, 0x100, 0x8, 0x1, 0x3fe5, 0x3, 0x0, 0x1, 0xd96, 0x8c9d, 0x8ff, 0xd, 0xff, 0x1, 0xc4, 0x800, 0xffffffff, 0x5, 0x1, 0xff, 0x2, 0x1, 0x2, 0x7ff, 0x8, 0xfffff001, 0x4, 0x400, 0x28603d6a, 0x3, 0x3, 0xf, 0x2, 0x8, 0x0, 0x1f90, 0x3, 0x9, 0x5, 0x6, 0x5, 0x2, 0x101, 0x894, 0x5, 0x60, 0x7ff, 0x5, 0x7, 0x1, 0x7fffffff, 0x7, 0x81, 0x3ffc000, 0x1, 0x4, 0x101, 0x5081, 0x7fff, 0x7, 0x2, 0x6, 0x10001, 0x80000000, 0x2, 0x5, 0xce9, 0x3, 0x80000000, 0x3, 0x9, 0xfb15, 0x7, 0xf319, 0x8001, 0x1, 0x4, 0x5, 0x7, 0x0, 0x81, 0xb, 0xfffffffa, 0x3, 0x8, 0x9, 0x6, 0xf, 0xacd2, 0x62, 0x5, 0x6631, 0xaf11, 0x8, 0xfffffff8]}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000003080)={0x0, @in={{0x2, 0x4e21, @remote}}}, &(0x7f0000003140)=0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000003180)={r8, 0x8}, 0x8) ioctl$VIDIOC_QUERYBUF_DMABUF(r4, 0xc0585609, &(0x7f00000032c0)={0x7fffffff, 0x4, 0x4, 0x100000, 0x5293, {0x0, 0xea60}, {0x7, 0x8, 0x79, 0x3, 0x4, 0x6, "6bc70cbe"}, 0x2, 0x4, {0xffffffffffffffff}, 0x800, 0x0, r4}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000003340)={0x0, 0x0}) r11 = geteuid() r12 = getegid() r13 = syz_clone(0x0, &(0x7f0000003380)="c517ef50e1de744fa271ce65736413549bf579931ba8011d4b26f60c40d46ea4fd12ac837c33471844c26e6fef9d99fe3b7cf56f106d384fffe9a9cf27ec581df5d5e6a3658a598bde730b72244d24b3cd1bee4f7a57b3a8974b055e2f48f73525e86c316d4725e518e7225a85e88c67767f4f2002732936b59b62fbcb2264dfc2108b0a007fb590d6755c4f12880c9906e5f36f0c81b4051d88a13578feed7cf23cd3fc19aa6e886b1475fe9b8bbdc1e72ecb98f9101a04bb746e3b601688b7e4d7b7bddb4456985f32e3b031f42bee926131ba2a2d8ab01fb0", 0xda, &(0x7f0000003480), &(0x7f00000034c0), &(0x7f0000003500)="2364adb52583f6dcfca496220e2361e080a3d364a55dcfac3b03917a6a2bb7edfb79911f14bde054f41d95bad29034f1bbcf8762f028ea17108596a41f484b65ebccf9e01de7b49583ecb91b2b8c4192d2502cb4e27c22ace727105319772cf401b9026a1e6709468378e1d082f0e477caac1fedb2ade0c933d813d3999970ded6") r14 = geteuid() fstat(r7, &(0x7f00000035c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000003640)={'\x00', 0x6, 0x9, 0x1, 0xe, 0x32, 0xffffffffffffffff}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000036c0)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast2}}, &(0x7f00000037c0)=0xe8) statx(r4, &(0x7f0000003800)='./file0\x00', 0x0, 0x8, &(0x7f0000003840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = bpf$TOKEN_CREATE(0x24, &(0x7f0000005000)={0x0, r1}, 0x8) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000005040)={0x3ff, 0x83f4, {0x0}, {}, 0x7, 0xa3}) sendmmsg$unix(r6, &(0x7f0000005680)=[{{&(0x7f00000031c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003280)=[{&(0x7f0000003240)}], 0x1, &(0x7f0000003940)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r7]}}, @rights={{0x34, 0x1, 0x1, [r0, r4, r6, r7, r3, r2, r1, r9, r2]}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}, @cred={{0x1c, 0x1, 0x2, {r13, r14, r15}}}, @cred={{0x1c, 0x1, 0x2, {r16, r17, r18}}}], 0xc8, 0x4008000}}, {{&(0x7f0000003a40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004f40)=[{&(0x7f0000003ac0)="d5de70bbb9c1af2e1f3960b621588fb2e2161a9e5a398ea857a8e7cbfd697558810dff278bc0ed98f538554c31f02ebc00d780de30a7053b09fdd576e044e57c007573ed86e505a1fdc1a7a827b64467ffe342e9177cc43c0fa83a7d49b3d9b577b9bce97fe3e21fece9297d50c760631a0f35998c12c7b3e859fb0297adf56d027bef66f822a7fc36f367b41f4edef31ae14b2a03fa0660794ee76f", 0x9c}, {&(0x7f0000003b80)="c42de88ef5f59838d4226e65adb4091438f4162b9497991cd746bae4ef8c4c08520d4805ed7c0d5f179b5ca9ad3954bd8afddaaa3df0af9c0553a1ff4ce453caaf779843f9117e465a3f97a0b21d7b72a5cb35b4111dc20cd775a5d1d6368d5c9a2de066de72bfa4", 0x68}, {&(0x7f0000003c00)="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", 0x1000}, {&(0x7f0000004c00)="0c55259af8e932258cc9b11224ee60a6283ce5b4b346cacbc42c1b30e7110c27c7536b44715558ab4aa1e7558efe3befde2362", 0x33}, {&(0x7f0000004c40)="ba1eee53bd2f0da501a96f49fdbd655d6b91ac90a465be54424c9c09a0d2589867405239b0735c1d246431929c82271d0bc56b717550e8118cb2b5408c28a15a6da94bcf971f462d3776e48ca2ebb8abb8b7feceec92067ad0ccc1904855e3472991180c230852ff5d3267c7dedcaaa5eb32a9226125365c9ee4ca3550dd9717ca8441add78902f1c285e6bf608c64f54f69f8d656092f8ff9837c80b5662af78d", 0xa1}, {&(0x7f0000004d00)="3f2d128ce290d558ba425345ef44d1b6c33dead71e6fbd662de6c5cd464ac30813afd3b8e48b9ec8985f7deb1a688c6edada2e9af1d9560a138eb5ae6b5d226c0197ab335dc44fd189a6576cf4670bd060dd6cd6e1b758d5731b69e0dccdea3d1371e0c019c702244ebb3662d193e104628eb18c9d948667193d", 0x7a}, {&(0x7f0000004d80)="3c664f40726c53aec314f03fdaa157540a43ab63ef532c8825f1f04bff69a3d3e0bb2ae2901befd93e5c1fef1aa6647c33287b41b18f68f1d2e83b1126ad9f3508b9ce772b9b715d", 0x48}, {&(0x7f0000004e00)="71382faa19768f4bb7c0ceb5585a8f026fe2d113670385292f9309a57b69f73901ffcd9e53ad6fc344991aa9a63bbe7878798b4889b00d493561d002210d0697982af23a8f6fe131561eeca08234155050e447a32b75b7e6ca46c57d034894eabcf3f9b7420cc862", 0x68}, {&(0x7f0000004e80)="6ea3766e0b566bae22f6f26ea6ea13af8f71a632d9a59466519736d0f4c8beec82e0c28dfbd22971fc75aa13079f619764db4fb4780d1691e8ff9bb1c1c959ae25f3e210021936575e768774d83bf2e54abfa9eaab0111262253d50618626460cdfad7fff9a4f2216c2319375fdc4a015f544f795d34bc54c14e1d81a37f708f56dfb861bfb321bc60826a86", 0x8c}], 0x9, &(0x7f0000005440)=[@rights={{0x14, 0x1, 0x1, [r7]}}, @rights={{0x20, 0x1, 0x1, [r1, r6, r4, r19]}}, @rights={{0x18, 0x1, 0x1, [r1, r6]}}, @cred={{0x1c, 0x1, 0x2, {r20}}}, @rights={{0x18, 0x1, 0x1, [r4, r6]}}, @cred={{0x1c}}], 0xa8, 0x10}}, {{0x0, 0x0, &(0x7f0000005600)=[{&(0x7f0000005500)="a0892ea0d1ea616ddb2125a22e18132f114166180c7b382bed3ad4bd94fd578a95077fd4b450999f0808d66e701bbeb872f3b92408c6d98712d05a4db956f62576ac39b9c14b0f871c258b925bf233c5075e76a362ec6bd6fe0ef0375bfec7ac15a61fcc59067fe496f15e70ab47fe3a063c8a8bb303ad492304eaae9938fd277f1dc5b71885bf12320b1b627838072e0e7ccd0429076b2b85c99bd6f72c2b1e0a073cfe688372d6588a26e4fb2434b7fd0cb509209d01140fba176436a9e06261f9fe7d56f059919f0857c950690ac7", 0xd0}], 0x1, &(0x7f0000005640)=[@rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, r2]}}], 0x20, 0x1}}], 0x3, 0x46001) 6.159182461s ago: executing program 1 (id=3259): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xacd6a4e1331e885c, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) socket$inet6(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0xa) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0xfc}}, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f00000003c0)={0x53, 0x0, 0xff17, {0x0, 0x1}, {0x4b, 0x82}, @ramp={0x6, 0x4, {0x5edb, 0x400, 0x9}}}) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000002980)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000280)={r5, 0x3, 0x1ff, 0x6, &(0x7f0000000200)=[{0x9, 0x5, 0x7, 0xf66}, {0xd, 0x0, 0x5, 0x26c1}, {0x2, 0x401, 0xd, 0x1}, {0x7, 0x4, 0x9, 0x6bf8}, {0xfff, 0x1, 0x8, 0x6}, {0x6, 0x6, 0xfbff, 0x71f3}]}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) 6.156640555s ago: executing program 3 (id=3260): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r5 = syz_open_dev$dri(&(0x7f0000001380), 0x1ff, 0xa8b01) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, r6}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000380)={0x5, 0x0, r6}) 6.100365169s ago: executing program 5 (id=3261): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) socket(0x28, 0x5, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r3, 0x89ed, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 6.089275396s ago: executing program 2 (id=3262): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x2, 0x4, 0x8, 0xf}, 0x50) r0 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000180), 0x3, 0x4042) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f00000003c0)={0xffffffffffffffff}) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) close(r3) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000380)={0x0, 0x0}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000180)='veth1_to_bridge\x00', 0x10) getsockopt$sock_buf(r8, 0x1, 0x19, &(0x7f0000006080)=""/241, &(0x7f0000000280)=0xf1) sched_setscheduler(r7, 0x1, &(0x7f0000000000)=0x6) prctl$PR_SET_MM(0x23, 0x8, &(0x7f00003fb000/0x1000)=nil) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='erofs\x00', 0x208000, 0x0) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000000)={0x13, 0x10, 0x7, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f00000002c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x3, 0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x7}}}, 0xa0) r9 = fsmount(r0, 0x0, 0xa) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000100)='=relative', &(0x7f0000000140)='./cgroup\x00', r9) 5.011598876s ago: executing program 2 (id=3263): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0xa2425) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x6bb, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20082f5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 4.868555896s ago: executing program 3 (id=3264): r0 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r6 = syz_io_uring_setup(0xf03, &(0x7f0000000240)={0x0, 0x4fbd, 0xc00, 0x0, 0x387}, &(0x7f0000000140), &(0x7f0000000040), &(0x7f0000000180)) io_uring_enter(r6, 0x1, 0x21, 0x1, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYRES16=r5, @ANYBLOB='8\x00\x00\x00', @ANYBLOB="090200000000fedbdf2501000000050002000a000000140007000000000000000000000000000000000108000b0010", @ANYRES32=r1, @ANYRES32=0x0], 0x38}}, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='1', 0x1}], 0x1) read$qrtrtun(r3, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500004400000000002190337bf58400ffffffff050090780a0101026a0000000000000000000000ac1e0001ac14140107be00e0000002000000"], 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlockall(0x7) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000001c0)=@req3={0x1, 0x3, 0x47, 0x100, 0x1, 0x3, 0x5}, 0x1c) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000140)={0x28, 0x0, 0x2710}, 0x10) 4.747430388s ago: executing program 4 (id=3265): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xacd6a4e1331e885c, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$inet6(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0xa) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0xfc}}, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f00000003c0)={0x53, 0x0, 0xff17, {0x0, 0x1}, {0x4b, 0x82}, @ramp={0x6, 0x4, {0x5edb, 0x400, 0x9}}}) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000002980)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000280)={r5, 0x3, 0x1ff, 0x6, &(0x7f0000000200)=[{0x9, 0x5, 0x7, 0xf66}, {0xd, 0x0, 0x5, 0x26c1}, {0x2, 0x401, 0xd, 0x1}, {0x7, 0x4, 0x9, 0x6bf8}, {0xfff, 0x1, 0x8, 0x6}, {0x6, 0x6, 0xfbff, 0x71f3}]}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x1, 0x4, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.780424157s ago: executing program 4 (id=3266): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d000000000000"], 0x0, 0x34}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002580)={r1, 0x20, &(0x7f0000002540)={&(0x7f0000001480)=""/4096, 0x1000, 0x0, &(0x7f0000002480)=""/131, 0x83}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x6c, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f00000001c0)) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000380)={0x3, 0x0, 0xeeee8000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4, r1}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000000c0)={0x64, r7, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r8}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100004107f540f30c7593de1a000000010902240001000000000904000002bee4f900090503000000000000090504", @ANYBLOB="031c"], 0x0) r9 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0) fstat(r9, 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000802, 0x0, 0x0) ioctl$VIDIOC_G_CTRL(r9, 0xc008561b, &(0x7f0000000080)={0x7, 0xfcda}) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000004f000000000000fcffffff9500000000000045"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1c, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x20, 0x1, r10, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 3.440706392s ago: executing program 1 (id=3267): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1c4}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(r1, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000001940)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001900)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000b4000000b4000000040000000c00000006000004535600000d000000020000004abf00000b000000010000007f0000000400000001000000ef0e00000f00000505000000070000001000000004000000890000000f00000003000000000000000b00000000000008050000000d000000010000050200000003000000020000007f0000000800000004000093008aff8496e3a19cd0064e0000000800000009000000690000000a00000000000000a107000005000000060000000600000002000000fbffffff0700000000006100"], &(0x7f0000000900)=""/4096, 0xd0, 0x1000, 0x1, 0x6, 0x10000, @value=r2}, 0x28) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x6000) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000000), 0x4) 3.219155207s ago: executing program 5 (id=3268): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x2, 0x0) getsockname$packet(r1, 0x0, &(0x7f00000003c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f0000000100)=0x2c0000) ioctl$SG_IO(r5, 0x2285, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a00"/27], 0x24}}, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000004280)='.\x00', 0x0, 0x0) lseek(r6, 0x2, 0x1) r7 = socket(0x5, 0x3, 0x414f) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000780)={'syztnl0\x00', 0x0, 0x700, 0x80, 0xa59e, 0x483, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x68, 0x0, 0x4, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x7}, @broadcast}}}}) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='net/snmp\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) read$char_usb(r8, &(0x7f0000000040)=""/50, 0x32) 3.191720309s ago: executing program 1 (id=3269): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xacd6a4e1331e885c, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$inet6(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0xa) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0xfc}}, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f00000003c0)={0x53, 0x0, 0xff17, {0x0, 0x1}, {0x4b, 0x82}, @ramp={0x6, 0x4, {0x5edb, 0x400, 0x9}}}) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000002980)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000280)={r5, 0x3, 0x1ff, 0x6, &(0x7f0000000200)=[{0x9, 0x5, 0x7, 0xf66}, {0xd, 0x0, 0x5, 0x26c1}, {0x2, 0x401, 0xd, 0x1}, {0x7, 0x4, 0x9, 0x6bf8}, {0xfff, 0x1, 0x8, 0x6}, {0x6, 0x6, 0xfbff, 0x71f3}]}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x1, 0x4, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.91262785s ago: executing program 5 (id=3270): prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffb000/0x4000)=nil) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, r1, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0xc}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004040) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x320, 0x18c, 0x203, 0x320, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x1, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r3, 0xa, 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r5, 0x3b89, &(0x7f0000000200)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r5, 0x3b8d, &(0x7f00000001c0)={0x20, r6, 0x0}) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) 1.809345748s ago: executing program 2 (id=3271): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000010ac054b02000000000001090224000100003000090400000103e6000009210000000122450009058103"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x78}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000004140)=[{{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000002c0)="3e335f8958939a44afc3eeebb9214bbe3445e4b539c19cee1851c3eb0954593e1e025b1f2b2a36c5f4cc4f7e02ce42e6dba495c93b91e09dfb63b19f46406990d47fc2e6267a0dde12baae5a35874190d6f4f1c3c5d5943f3eadbc907506d663145e1572fbe8ef9c273877d5d6c32726b8bd25bab6ce3e67ab522ce19b0d5232752d5c7de0015e8132fd9b6a7c4b9ee5c036035483e5be6c8fbab32885fd26348f612c89cffbad904768edf767f07bef21ad040a2a3135074a1a2f", 0xbb}, {&(0x7f0000000380)="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", 0xfa}, {&(0x7f0000000480)="1db3ee5b9137d224779ed02a0404e0e8f14db1c9b267d711cee449ebaabf3ddda899baa2ce048edd", 0x28}, {&(0x7f00000005c0)="bcb5ac2e234af62632f4289fdcc3971c16441431a0096cb97fb54305f05b133f2ed63b2d2476039916f7f84b6b6740535afd0db2f4bdf3ef932d6dd72e879855eef15c70a69c60c4b134bcd40ce5d582c1c339ed597842490abd27e91bd4512a92a1c11ad7c00ca5896ba8760072782a060e68ad83b75c9d97828941ec71ecda3101c57d050187e62dd01ff4aeb2453a6fbaf7bf61f455485a272e1200", 0x9d}, {&(0x7f0000000680)="77549b20a063dd2b0c121f6739c1b92f86cde276dcbfc5e333309b1ea18b7fab1aa26f9062c9ed3f45481a1483361abe2ab307244c280f29b0d95e3718989aed90c8b20c0effe0db15134e5c8cdb45dd37d65630c183ff9fe33fdfc354f2d042ca1da85ba859f337a0620407e26187cc0a4b705f56a9481d5ac2555529acbe45ac5ead012908fae8a9a162480f1b8d484678f16bfd927091a4668ccc4e53ed3399e2967f7afaf0c2d979", 0xaa}, {&(0x7f0000000740)="6ba3b93be4ad22d40f9a948e1afc6756c464fff55546d9a5db5ce911e4f2d143876c8c991160525cb648a59138d8b77e350dacfa0859566ec9e4b9d0e469dbee44c9292aa5745dc25cd55b348bfbdc988094e9fe5133355350bdb6241192d0972e7ce544b059edaa1dd66ccf4b774570b3f1fc7eb19d0a181f9b0a391494b477e178d1ada8bcb7f6fe3789195641939721b7bc652629f3253b43185567bbcd738c49fabc61ea131bf7241656e783d583dcc3175cfc13cfb53a265bbb40fa45c8f22d5ff7ac263cc1a50f655dc222754c0d4cfd2772072369a9f60d1d7c68f20727a0", 0xe2}, {&(0x7f0000000840)="97d51fddf7557ae07387bfaeebb84c4a58d95d4a4339430c3d9d9b329cd9de591f732814b59290dd076c0af1095f6fe813d06ccb35cc88b6bad82aeee07a440987e7", 0x42}, {&(0x7f00000008c0)="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", 0x1000}, {&(0x7f00000018c0)="99c908e6207a7a93a47a14aedb66f8790cfc939ea3d6d8a7887aabcea0cd703009acdf3e337e8caa240403ec6dab4bb2498510dc063651037092b28b56590ce3bbf5b1288cc648f9e84d00ae397c25cc05a978e21b01848b36953b3cc36e99531a5ee917820dfff5ef20758aa321d3ab337de5cdbab8205f26f599a814fd52f03ac06fa2902854d89d8cde6d457ff7df0ca1aaa8bb59f14e5e6a4412a3a286976224ee2264f878ccb76ca98964963f94e786304f7672", 0xb6}, {&(0x7f0000001980)="5924534c8a22b1a7b5408fa3c12a54e1e61b2a6a920652a2f92a1d1f44ee9a22bcd5b4737eaf9c63745afc5cba19e772bba7521e55f6aa48d7b37507ad661a37ae0ee2a770057977", 0x48}], 0xa, &(0x7f0000001ac0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000d37d9f8e58d7d5a5a50322e134", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xb0, 0x400c811}}], 0x1, 0x20009000) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000200), 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x1) fchdir(r7) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) r9 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) accept4(r9, 0x0, 0x0, 0x800) lseek(r8, 0x101, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080), 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.106825167s ago: executing program 1 (id=3272): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.swap.current\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6}]}}}]}, 0x40}}, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000003, 0x13, r3, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x440, 0x17f) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x18e) write$binfmt_elf64(r7, &(0x7f0000000340)=ANY=[], 0xffffffac) pwritev(r6, &(0x7f0000000180)=[{&(0x7f0000000040)='$', 0x1}, {0x0}], 0x2, 0x5, 0x178) close(r6) ioctl(r3, 0x1, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff64}, 0x40000040) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x2000024) r10 = dup(r9) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r10, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) 887.809172ms ago: executing program 1 (id=3273): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x2, 0x4, 0x8, 0xf}, 0x50) r0 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000180), 0x3, 0x4042) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f00000003c0)={0xffffffffffffffff}) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) close(r3) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000380)={0x0, 0x0}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000180)='veth1_to_bridge\x00', 0x10) getsockopt$sock_buf(r8, 0x1, 0x19, &(0x7f0000006080)=""/241, &(0x7f0000000280)=0xf1) sched_setscheduler(r7, 0x1, &(0x7f0000000000)=0x6) prctl$PR_SET_MM(0x23, 0x8, &(0x7f00003fb000/0x1000)=nil) ptrace(0x10, 0x1) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000000)={0x13, 0x10, 0x7, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f00000002c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x3, 0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x7}}}, 0xa0) r9 = fsmount(r0, 0x0, 0xa) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000100)='=relative', &(0x7f0000000140)='./cgroup\x00', r9) 884.374212ms ago: executing program 3 (id=3274): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x7, &(0x7f0000000180), 0x43) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f00000001c0)={r1, &(0x7f0000000140)='/dev/\x01\x00\xbd\x00\x00', 0x10080, &(0x7f0000000080)={@_ha_fsid={[0x1, 0x64]}, {0x80, 0x7, 0x9, 0x4320}}, 0x9, &(0x7f00000000c0), &(0x7f0000000100)=0x143f}) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000280)={0x14, 0x5, 0x5}) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000000)={0xff00000000000000, 0x7000, 0xd2ec, 0x0, 0x10}) 815.507184ms ago: executing program 4 (id=3275): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001ac0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xa00}}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0x28}}, 0x20050800) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="02030e00d3fc02000000ab5d71b9edd7c9560385dcb188a8", 0x18, 0x2004c8a1, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) 722.155104ms ago: executing program 4 (id=3276): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r1 = accept(r0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="1632800e", 0x4}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r5, &(0x7f0000000140)="ed", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r5, &(0x7f00000022c0)=""/4089, 0xff9, 0x10002, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x28628, 0x11800}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x9, 0x1}, &(0x7f0000000240)) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r1) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 720.351259ms ago: executing program 5 (id=3277): getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8, 0x0, 0x6, 0x1, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1a, 0x4, 0x7fe2, 0x1, 0x40, 0xffffffffffffffff, 0x8}, 0x48) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}]}}]}, 0x3c}}, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000180)={"24000100030000000000f4ffff00"}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x37b, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff0d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x9, 0x4, 0x2, 0x7, 0x3c5b, 0x63fbb4cd, 0x7, 0xd, 0x1, 0x0, 0xffffffff, 0x1, 0x4, 0x6, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x4003, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x4000200, 0x3e, 0xc0, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x3c], [0x10000007, 0x9, 0x8200012f, 0x8004, 0x5, 0xfffffff3, 0x129432e4, 0xc8, 0xf9, 0xe, 0x9, 0x806c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x8, 0x2f, 0xe, 0x312, 0x7c, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x5, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xe, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x8, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x9], [0x7, 0xa, 0x40000004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0xa, 0x5, 0x7ffe, 0x0, 0x5, 0xf, 0x4, 0x6, 0x2, 0x0, 0x6, 0x5, 0x4000000, 0x4, 0x3, 0x303c, 0x7f, 0xa, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x3a, 0x7fffff, 0x200, 0x80, 0x2c, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x6, 0xa9, 0x2, 0x6, 0xac8, 0xc2, 0x5, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x9, 0x1c, 0x120000, 0x3, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0x800, 0x5, 0xb, 0x6, 0x1000006, 0x7ff, 0xb9, 0xcea, 0x1ff, 0x2, 0x8, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x9a5, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x7fff, 0x9e, 0xffffffff, 0x80000010, 0x0, 0x4, 0x3, 0x1, 0xfffff000, 0x10080, 0x46d, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x6, 0x1, 0x1, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x7ff, 0x4, 0x5, 0x80, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f0000000040)=[{r2, 0x4004}, {r1, 0xc009}, {r7, 0x90c0}, {r7, 0xb881}, {r1, 0x400}], 0x5, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r6, 0x40045701, &(0x7f00000002c0)=0x3) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000440), 0x1000a) sendfile(r8, r9, &(0x7f0000000000)=0x4, 0xffff) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(0xffffffffffffffff, 0x1, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r10, &(0x7f0000000140)='./file0\x00') openat2(r10, &(0x7f00000008c0)='./file0/../file0\x00', &(0x7f0000000380)={0x100, 0x0, 0x8}, 0x18) 0s ago: executing program 3 (id=3278): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) socket(0x28, 0x5, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r3, 0x89ed, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) kernel console output (not intermixed with test programs): nd the bmi data to the device: -71 [ 1150.028045][T10544] ath6kl: Unable to send get target info: -71 [ 1150.050913][T10544] ath6kl: Failed to init ath6kl core: -71 [ 1150.069553][T10544] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1150.149423][T10544] usb 6-1: USB disconnect, device number 90 [ 1150.225308][T10550] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1150.250806][T10550] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 1150.257556][T18623] FAULT_INJECTION: forcing a failure. [ 1150.257556][T18623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1150.296179][T10550] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1150.357255][T10550] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 1150.376782][T10550] usb 4-1: USB disconnect, device number 7 [ 1150.408372][T18623] CPU: 0 UID: 0 PID: 18623 Comm: syz.1.2898 Tainted: G L syzkaller #0 PREEMPT(full) [ 1150.408404][T18623] Tainted: [L]=SOFTLOCKUP [ 1150.408411][T18623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1150.408423][T18623] Call Trace: [ 1150.408430][T18623] [ 1150.408438][T18623] dump_stack_lvl+0x100/0x190 [ 1150.408467][T18623] should_fail_ex.cold+0x5/0xa [ 1150.408496][T18623] _copy_from_user+0x2e/0xd0 [ 1150.408523][T18623] __sys_bpf+0x243/0x4b90 [ 1150.408558][T18623] ? __pfx___sys_bpf+0x10/0x10 [ 1150.408587][T18623] ? proc_fail_nth_write+0x9f/0x220 [ 1150.408609][T18623] ? find_held_lock+0x2b/0x80 [ 1150.408635][T18623] ? find_held_lock+0x2b/0x80 [ 1150.408654][T18623] ? ksys_write+0x190/0x250 [ 1150.408675][T18623] ? ksys_write+0x190/0x250 [ 1150.408711][T18623] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 1150.408740][T18623] ? kernel_write+0x6a3/0x6c0 [ 1150.408762][T18623] ? __fget_files+0x215/0x3d0 [ 1150.408801][T18623] ? fput+0x79/0x100 [ 1150.408827][T18623] ? ksys_write+0x1ac/0x250 [ 1150.408848][T18623] ? __pfx_ksys_write+0x10/0x10 [ 1150.408875][T18623] __x64_sys_bpf+0x7b/0xc0 [ 1150.408895][T18623] ? lockdep_hardirqs_on+0x78/0x100 [ 1150.408922][T18623] do_syscall_64+0x10b/0xf80 [ 1150.408948][T18623] ? clear_bhb_loop+0x40/0x90 [ 1150.408973][T18623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.408995][T18623] RIP: 0033:0x7f180b39c819 [ 1150.409013][T18623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1150.409032][T18623] RSP: 002b:00007f180c237028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1150.409051][T18623] RAX: ffffffffffffffda RBX: 00007f180b615fa0 RCX: 00007f180b39c819 [ 1150.409064][T18623] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 1150.409075][T18623] RBP: 00007f180c237090 R08: 0000000000000000 R09: 0000000000000000 [ 1150.409088][T18623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1150.409101][T18623] R13: 00007f180b616038 R14: 00007f180b615fa0 R15: 00007fffa3b09798 [ 1150.409130][T18623] [ 1150.908249][T10544] usb 2-1: new full-speed USB device number 123 using dummy_hcd [ 1151.134809][T10544] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1151.144213][T10544] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.183663][T10544] usb 2-1: Product: syz [ 1151.201393][T10544] usb 2-1: Manufacturer: syz [ 1151.203856][T18631] tun10: tun_chr_ioctl cmd 1074025675 [ 1151.220352][T18631] tun10: persist enabled [ 1151.225417][T10544] usb 2-1: SerialNumber: syz [ 1151.267383][T10544] usb 2-1: config 0 descriptor?? [ 1151.960610][T18643] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2904'. [ 1152.035973][T18640] Bluetooth: MGMT ver 1.23 [ 1152.052131][T18643] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2904'. [ 1152.152448][T10550] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1152.281193][T10544] dvb_usb_rtl28xxu 2-1:0.0: chip type detection failed -71 [ 1152.306250][T10544] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1152.342061][T10544] usb 2-1: USB disconnect, device number 123 [ 1152.403962][T10550] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1152.437735][T10550] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1152.467899][T10550] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1152.486149][T10550] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 448, setting to 64 [ 1152.511680][T10550] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1152.591032][T18651] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2907'. [ 1153.134553][T10550] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1153.166053][T10550] usb 3-1: Product: syz [ 1153.183416][T10550] usb 3-1: Manufacturer: syz [ 1153.211734][T10550] cdc_wdm 3-1:1.0: skipping garbage [ 1153.224917][T10550] cdc_wdm 3-1:1.0: skipping garbage [ 1153.238119][T10550] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1153.662327][T10550] usb 2-1: new full-speed USB device number 124 using dummy_hcd [ 1153.714099][T10538] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1153.767857][T18661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2911'. [ 1153.828267][T10550] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1153.849092][T10550] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.868803][T10550] usb 2-1: Product: syz [ 1153.883056][T10538] usb 6-1: Using ep0 maxpacket: 32 [ 1153.883935][T10550] usb 2-1: Manufacturer: syz [ 1153.889830][T10538] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 1153.904182][T10550] usb 2-1: SerialNumber: syz [ 1153.909603][T10538] usb 6-1: config 0 has no interface number 0 [ 1153.912020][T10550] usb 2-1: config 0 descriptor?? [ 1153.923066][T10538] usb 6-1: config 0 interface 12 has no altsetting 0 [ 1153.946709][T10538] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1153.966884][T10538] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.986064][T10538] usb 6-1: Product: syz [ 1153.993637][T18663] xt_policy: neither incoming nor outgoing policy selected [ 1154.001535][T10538] usb 6-1: Manufacturer: syz [ 1154.007085][T10538] usb 6-1: SerialNumber: syz [ 1154.019872][T10538] usb 6-1: config 0 descriptor?? [ 1154.033855][T18663] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2912'. [ 1154.158930][T10550] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1154.363006][T10550] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1154.371505][T18669] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1154.409257][T18669] team0: Unable to change to the same mode the team is in [ 1154.501994][T10550] usb 3-1: USB disconnect, device number 7 [ 1154.653548][T10532] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1154.666955][T18657] wireguard7: entered promiscuous mode [ 1154.673577][T18657] wireguard7: entered allmulticast mode [ 1154.859812][T10532] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1155.020270][T18678] FAULT_INJECTION: forcing a failure. [ 1155.020270][T18678] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1155.035957][T18678] CPU: 0 UID: 0 PID: 18678 Comm: syz.3.2917 Tainted: G L syzkaller #0 PREEMPT(full) [ 1155.035989][T18678] Tainted: [L]=SOFTLOCKUP [ 1155.035997][T18678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1155.036009][T18678] Call Trace: [ 1155.036016][T18678] [ 1155.036024][T18678] dump_stack_lvl+0x100/0x190 [ 1155.036056][T18678] should_fail_ex.cold+0x5/0xa [ 1155.036084][T18678] _copy_from_user+0x2e/0xd0 [ 1155.036111][T18678] __keyctl_dh_compute+0x1b6/0x10d0 [ 1155.036145][T18678] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 1155.036171][T18678] ? __pfx___schedule+0x10/0x10 [ 1155.036198][T18678] ? preempt_schedule_irq+0x7b/0x90 [ 1155.036228][T18678] ? irqentry_exit+0x246/0x790 [ 1155.036253][T18678] ? lockdep_hardirqs_on+0x78/0x100 [ 1155.036295][T18678] ? rep_movs_alternative+0x33/0x90 [ 1155.036323][T18678] keyctl_dh_compute+0xd9/0x140 [ 1155.036349][T18678] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 1155.036387][T18678] __do_sys_keyctl+0x464/0x5a0 [ 1155.036417][T18678] do_syscall_64+0x10b/0xf80 [ 1155.036444][T18678] ? clear_bhb_loop+0x40/0x90 [ 1155.036469][T18678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1155.036490][T18678] RIP: 0033:0x7fe5b099c819 [ 1155.036507][T18678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1155.036528][T18678] RSP: 002b:00007fe5b17c8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1155.036552][T18678] RAX: ffffffffffffffda RBX: 00007fe5b0c16180 RCX: 00007fe5b099c819 [ 1155.036567][T18678] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000017 [ 1155.036580][T18678] RBP: 00007fe5b17c8090 R08: 0000200000000180 R09: 0000000000000000 [ 1155.036593][T18678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1155.036606][T18678] R13: 00007fe5b0c16218 R14: 00007fe5b0c16180 R15: 00007ffc8a4bb758 [ 1155.036630][T18678] [ 1155.235124][T10532] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 1155.250252][T10532] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1155.261712][T10532] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.291883][T10532] usb 5-1: config 0 descriptor?? [ 1155.665227][T10532] ath6kl: Failed to submit usb control message: -71 [ 1155.722281][T10544] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 1155.916660][T10544] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1155.926690][T10544] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.938245][T10544] usb 4-1: Product: syz [ 1155.944356][T10544] usb 4-1: Manufacturer: syz [ 1155.963178][T10544] usb 4-1: SerialNumber: syz [ 1155.990743][T10544] usb 4-1: config 0 descriptor?? [ 1156.288296][T10544] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -71 [ 1156.305014][T10532] ath6kl: unable to send the bmi data to the device: -71 [ 1156.324502][T10544] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1156.400469][T10544] usb 4-1: USB disconnect, device number 8 [ 1156.736814][T10532] ath6kl: Unable to send get target info: -71 [ 1156.755769][T10538] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -32 [ 1156.764314][T10538] f81534 6-1:0.12: f81534_find_config_idx: read failed: -32 [ 1156.772578][T10538] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 1156.780329][T10538] f81534 6-1:0.12: probe with driver f81534 failed with error -32 [ 1156.808313][T10532] ath6kl: Failed to init ath6kl core: -71 [ 1156.829385][T10532] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1156.886668][T10538] usb 2-1: USB disconnect, device number 124 [ 1156.904126][T10550] usb 6-1: USB disconnect, device number 91 [ 1156.993941][T18693] FAULT_INJECTION: forcing a failure. [ 1156.993941][T18693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1157.007117][T18693] CPU: 1 UID: 0 PID: 18693 Comm: syz.4.2920 Tainted: G L syzkaller #0 PREEMPT(full) [ 1157.007149][T18693] Tainted: [L]=SOFTLOCKUP [ 1157.007157][T18693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1157.007170][T18693] Call Trace: [ 1157.007177][T18693] [ 1157.007185][T18693] dump_stack_lvl+0x100/0x190 [ 1157.007217][T18693] should_fail_ex.cold+0x5/0xa [ 1157.007246][T18693] _copy_from_user+0x2e/0xd0 [ 1157.007274][T18693] sg_write+0x745/0xdb0 [ 1157.007308][T18693] ? __pfx_sg_write+0x10/0x10 [ 1157.007336][T18693] ? __lock_acquire+0x4a5/0x2630 [ 1157.007394][T18693] ? bpf_lsm_file_permission+0x9/0x10 [ 1157.007425][T18693] ? security_file_permission+0x76/0x210 [ 1157.007452][T18693] ? rw_verify_area+0xce/0x6d0 [ 1157.007486][T18693] vfs_write+0x2aa/0x1070 [ 1157.007509][T18693] ? __pfx_sg_write+0x10/0x10 [ 1157.007542][T18693] ? __pfx_vfs_write+0x10/0x10 [ 1157.007561][T18693] ? find_held_lock+0x2b/0x80 [ 1157.007587][T18693] ? __fget_files+0x215/0x3d0 [ 1157.007611][T18693] ? __fget_files+0x215/0x3d0 [ 1157.007640][T18693] ? __fget_files+0x21f/0x3d0 [ 1157.007673][T18693] ksys_write+0x12a/0x250 [ 1157.007695][T18693] ? __pfx_ksys_write+0x10/0x10 [ 1157.007720][T18693] ? rcu_is_watching+0x12/0xc0 [ 1157.007754][T18693] do_syscall_64+0x10b/0xf80 [ 1157.007782][T18693] ? clear_bhb_loop+0x40/0x90 [ 1157.007808][T18693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1157.007831][T18693] RIP: 0033:0x7fccc5f9c819 [ 1157.007848][T18693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1157.007869][T18693] RSP: 002b:00007fccc6dc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1157.007889][T18693] RAX: ffffffffffffffda RBX: 00007fccc6216180 RCX: 00007fccc5f9c819 [ 1157.007904][T18693] RDX: 000000000000012c RSI: 0000200000000640 RDI: 0000000000000007 [ 1157.007918][T18693] RBP: 00007fccc6dc7090 R08: 0000000000000000 R09: 0000000000000000 [ 1157.007931][T18693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1157.007944][T18693] R13: 00007fccc6216218 R14: 00007fccc6216180 R15: 00007ffef603bd48 [ 1157.007973][T18693] [ 1157.190420][T10532] usb 5-1: USB disconnect, device number 14 [ 1159.292245][T10550] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1159.566533][T10550] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1159.600408][T10550] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1159.611865][T10550] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1159.633332][T10550] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 448, setting to 64 [ 1159.662743][T10550] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1159.674559][T10550] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1159.685058][T10550] usb 3-1: Product: syz [ 1159.690113][T10550] usb 3-1: Manufacturer: syz [ 1159.700003][T18714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2928'. [ 1159.818251][T10550] cdc_wdm 3-1:1.0: skipping garbage [ 1159.833355][T10550] cdc_wdm 3-1:1.0: skipping garbage [ 1159.842294][T10550] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1159.954602][T18723] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1160.107835][T18723] team0: Unable to change to the same mode the team is in [ 1160.229394][ T5827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1160.313109][ T5827] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1160.327246][ T5827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1160.335577][ T5827] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1160.344244][ T5827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1160.392892][T10544] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1160.513565][T18728] tun8: tun_chr_ioctl cmd 1074025675 [ 1160.521405][T18728] tun8: persist enabled [ 1160.808543][T18734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2933'. [ 1160.846770][T18734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2933'. [ 1161.090597][T18728] tun8: tun_chr_ioctl cmd 1074025675 [ 1161.096125][T18728] tun8: persist disabled [ 1161.131532][T10544] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1161.142100][T18729] lo speed is unknown, defaulting to 1000 [ 1161.150696][T10544] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 1161.174352][T10544] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1161.193101][T10544] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.218925][T10544] usb 6-1: config 0 descriptor?? [ 1161.336860][T18729] chnl_net:caif_netlink_parms(): no params data found [ 1161.439424][T10544] ath6kl: Failed to submit usb control message: -71 [ 1161.460815][T10544] ath6kl: unable to send the bmi data to the device: -71 [ 1161.485919][T10544] ath6kl: Unable to send get target info: -71 [ 1161.581737][T17483] usb 3-1: USB disconnect, device number 8 [ 1161.589930][T10544] ath6kl: Failed to init ath6kl core: -71 [ 1161.597255][T10544] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1161.701136][T10544] usb 6-1: USB disconnect, device number 92 [ 1161.725424][ T803] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 1161.775056][T18729] bridge0: port 1(bridge_slave_0) entered blocking state [ 1161.784239][T18729] bridge0: port 1(bridge_slave_0) entered disabled state [ 1161.791488][T18729] bridge_slave_0: entered allmulticast mode [ 1161.800160][T18729] bridge_slave_0: entered promiscuous mode [ 1161.809457][T18729] bridge0: port 2(bridge_slave_1) entered blocking state [ 1161.817626][T18729] bridge0: port 2(bridge_slave_1) entered disabled state [ 1161.825544][T18729] bridge_slave_1: entered allmulticast mode [ 1161.832714][T18729] bridge_slave_1: entered promiscuous mode [ 1161.889705][T11042] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.896535][ T803] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1161.910597][ T803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.919211][ T803] usb 4-1: Product: syz [ 1161.924783][ T803] usb 4-1: Manufacturer: syz [ 1161.929425][ T803] usb 4-1: SerialNumber: syz [ 1161.940661][ T803] usb 4-1: config 0 descriptor?? [ 1161.954609][T18729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1162.008959][T11042] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.033229][T18729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1162.062326][T17483] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1162.095376][T18729] team0: Port device team_slave_0 added [ 1162.109799][T18729] team0: Port device team_slave_1 added [ 1162.203564][ T803] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -71 [ 1162.275817][ T803] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1162.286058][T17483] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1162.344324][T17483] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 1162.378900][ T803] usb 4-1: USB disconnect, device number 9 [ 1162.416030][T17483] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1162.474028][ T5827] Bluetooth: hci5: command tx timeout [ 1162.499516][T17483] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.519154][T11042] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.543315][T17483] usb 3-1: config 0 descriptor?? [ 1163.722998][T17483] ath6kl: Failed to submit usb control message: -110 [ 1164.512370][ T5827] Bluetooth: hci5: command tx timeout [ 1164.907238][T17483] ath6kl: unable to send the bmi data to the device: -110 [ 1164.971454][T17483] ath6kl: Unable to send get target info: -110 [ 1164.993763][T18763] input: syz1 as /devices/virtual/input/input98 [ 1165.004015][T17483] ath6kl: Failed to init ath6kl core: -110 [ 1165.034944][T17483] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1165.088686][T17483] usb 3-1: USB disconnect, device number 9 [ 1165.484479][T11042] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.507029][T18729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1165.515048][T18729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1165.544671][T18729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1165.588481][T18729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1165.596962][T18729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1165.624470][T18729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1165.693133][T10535] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1165.784325][T18729] hsr_slave_0: entered promiscuous mode [ 1165.800291][T18729] hsr_slave_1: entered promiscuous mode [ 1165.808265][T18729] debugfs: 'hsr0' already exists in 'hsr' [ 1165.832239][T18729] Cannot create hsr debugfs directory [ 1165.863910][T10535] usb 6-1: Using ep0 maxpacket: 32 [ 1165.882023][T10535] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 1165.919884][T10535] usb 6-1: config 0 has no interface number 0 [ 1165.940723][T10535] usb 6-1: config 0 interface 12 has no altsetting 0 [ 1166.292280][T10550] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1166.610950][ T5827] Bluetooth: hci5: command tx timeout [ 1166.707815][T10535] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1166.711030][T10550] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1166.733058][T10535] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.743068][T10535] usb 6-1: Product: syz [ 1166.747249][T10535] usb 6-1: Manufacturer: syz [ 1166.750641][T10550] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1166.751834][T10535] usb 6-1: SerialNumber: syz [ 1166.771217][T10535] usb 6-1: config 0 descriptor?? [ 1166.829999][T10550] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1166.880213][T10550] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 448, setting to 64 [ 1166.957795][T10550] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1167.013532][T10550] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1167.058526][T10550] usb 4-1: Product: syz [ 1167.076512][T10550] usb 4-1: Manufacturer: syz [ 1167.154305][T10550] cdc_wdm 4-1:1.0: skipping garbage [ 1167.187927][T10550] cdc_wdm 4-1:1.0: skipping garbage [ 1167.238389][T10550] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1167.564199][T18770] wireguard8: entered promiscuous mode [ 1167.569731][T18770] wireguard8: entered allmulticast mode [ 1167.629505][T11042] geneve1: left allmulticast mode [ 1167.635720][T11042] geneve1: left promiscuous mode [ 1167.660041][T11042] bridge0: port 1(geneve1) entered disabled state [ 1168.141589][T18787] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1168.184931][T10538] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1168.194028][T18790] team0: Unable to change to the same mode the team is in [ 1168.385356][T10538] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1168.400752][T10538] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 1168.427000][T10538] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1168.444419][T10538] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.453869][T18802] SET target dimension over the limit! [ 1168.489050][T10538] usb 3-1: config 0 descriptor?? [ 1168.525670][T11042] tipc: Left network mode [ 1168.531061][ T5490] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1168.654259][T10535] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1168.672298][ T5827] Bluetooth: hci5: command tx timeout [ 1168.682071][T10535] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 1168.709593][T10535] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1168.726518][T10538] ath6kl: Failed to submit usb control message: -71 [ 1168.787008][ T803] usb 4-1: USB disconnect, device number 10 [ 1168.819057][T10535] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 1168.828945][T10538] ath6kl: unable to send the bmi data to the device: -71 [ 1168.866382][T10538] ath6kl: Unable to send get target info: -71 [ 1168.891481][T10535] usb 6-1: USB disconnect, device number 93 [ 1168.918165][T10538] ath6kl: Failed to init ath6kl core: -71 [ 1168.954443][T10538] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1169.028656][T10538] usb 3-1: USB disconnect, device number 10 [ 1169.329108][ T30] audit: type=1400 audit(1776926581.106:676): avc: denied { kexec_image_load } for pid=18810 comm="syz.3.2948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1169.897336][T11042] hsr_slave_0: left promiscuous mode [ 1169.920509][T11042] hsr_slave_1: left promiscuous mode [ 1170.057616][T11042] veth1_macvtap: left promiscuous mode [ 1170.073982][T11042] veth0_macvtap: left promiscuous mode [ 1170.100388][T11042] veth1_vlan: left promiscuous mode [ 1170.121385][T11042] veth0_vlan: left promiscuous mode [ 1170.312284][ T803] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 1171.430957][ T803] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1171.837216][ T803] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.845370][ T803] usb 3-1: Product: syz [ 1171.851565][ T803] usb 3-1: Manufacturer: syz [ 1171.856425][ T803] usb 3-1: SerialNumber: syz [ 1171.869138][ T803] usb 3-1: config 0 descriptor?? [ 1172.096130][ T803] dvb_usb_rtl28xxu 3-1:0.0: chip type detection failed -71 [ 1172.106655][ T803] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1172.122258][T10535] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1172.133970][ T803] usb 3-1: USB disconnect, device number 11 [ 1172.177892][T18843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2954'. [ 1172.333751][T10535] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1172.341031][T10535] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1172.362618][T10535] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.381941][T10535] usb 5-1: config 0 descriptor?? [ 1173.002933][T10535] (null): keene_cmd_main failed (-110) [ 1173.415416][ T36] smbdirect: ib_dev[syz2] removed [ 1173.661061][T10535] video4linux radio48: keene_cmd_main failed (-32) [ 1173.707102][T10535] radio-keene 5-1:0.0: V4L2 device registered as radio48 [ 1174.003888][T10538] usb 5-1: USB disconnect, device number 15 [ 1174.126732][T10550] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1174.389226][T10550] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1174.403923][T10550] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1174.453239][T10550] usb 3-1: config 220 has no interface number 2 [ 1174.496824][T10550] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1174.561055][T10550] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1174.580954][T10550] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1174.595008][T10550] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1174.623230][T10550] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice= 0.9f [ 1174.642884][T10550] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1174.685137][T10550] usb 3-1: SerialNumber: syz [ 1174.812532][T17483] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1175.158658][T17483] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1175.202377][T17483] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1175.237041][T17483] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1175.253750][T10550] usb 3-1: selecting invalid altsetting 0 [ 1175.276702][T17483] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 448, setting to 64 [ 1175.309649][T10550] uvcvideo 3-1:220.0: Found UVC 7.01 device (8086:0b07) [ 1175.337893][T10550] uvcvideo 3-1:220.0: No valid video chain found. [ 1175.357989][T17483] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1175.430840][T17483] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1175.439719][T10550] usb 3-1: selecting invalid altsetting 0 [ 1175.461505][T10550] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 1175.477140][T17483] usb 6-1: Product: syz [ 1175.487658][T17483] usb 6-1: Manufacturer: syz [ 1175.505747][T10550] usb 3-1: USB disconnect, device number 12 [ 1175.594983][T17483] cdc_wdm 6-1:1.0: skipping garbage [ 1175.632050][T18729] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1175.660256][T17483] cdc_wdm 6-1:1.0: skipping garbage [ 1175.676099][T17483] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1175.700057][T18729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1175.755498][T18729] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1175.800299][T18729] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1176.036362][T18729] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1176.825925][T18729] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1176.828923][T10533] libceph: connect (1)[c::]:6789 error -101 [ 1176.893436][T10533] libceph: mon0 (1)[c::]:6789 connect error [ 1176.980619][T10550] usb 6-1: USB disconnect, device number 94 [ 1176.990914][T18729] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1177.000412][T18876] ceph: No mds server is up or the cluster is laggy [ 1177.077418][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.093037][T18729] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1177.709054][T11042] IPVS: stop unused estimator thread 0... [ 1177.813548][T10550] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1177.880510][T18729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1177.943374][T18729] 8021q: adding VLAN 0 to HW filter on device team0 [ 1177.985046][ T1346] bridge0: port 1(bridge_slave_0) entered blocking state [ 1177.992252][ T1346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1177.992807][T10533] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 1178.019346][T10550] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1178.045118][T10550] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1178.055448][ T5961] bridge0: port 2(bridge_slave_1) entered blocking state [ 1178.062630][ T5961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1178.085516][T10550] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1178.114483][T10550] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.128240][T18929] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2966'. [ 1178.156824][T10550] usb 4-1: Product: syz [ 1178.174286][T10550] usb 4-1: Manufacturer: syz [ 1178.193704][T10550] usb 4-1: SerialNumber: syz [ 1178.225279][T10550] usb 4-1: config 0 descriptor?? [ 1178.248665][T10533] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1178.265623][T10550] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1178.291951][T10533] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.314888][T10533] usb 5-1: Product: syz [ 1178.316830][T10550] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1178.329425][T10533] usb 5-1: Manufacturer: syz [ 1178.365979][T10550] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1178.366527][T10533] usb 5-1: SerialNumber: syz [ 1178.409301][T10550] usb 4-1: media controller created [ 1178.418524][T10533] usb 5-1: config 0 descriptor?? [ 1178.487188][T10550] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1178.711016][T10550] DVB: Unable to find symbol tda10046_attach() [ 1178.713057][T10533] dvb_usb_rtl28xxu 5-1:0.0: chip type detection failed -71 [ 1178.741805][T10550] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1178.748733][T10533] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1178.790543][T10550] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1178.811463][T10533] usb 5-1: USB disconnect, device number 16 [ 1178.837527][T18729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1179.254368][T18958] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2967'. [ 1179.718377][T18729] veth0_vlan: entered promiscuous mode [ 1179.767661][T18729] veth1_vlan: entered promiscuous mode [ 1179.827063][T18958] syz.2.2967 (18958) used greatest stack depth: 19720 bytes left [ 1179.895460][T18729] veth0_macvtap: entered promiscuous mode [ 1179.954335][T18729] veth1_macvtap: entered promiscuous mode [ 1180.020549][T18729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1180.059508][T18969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2968'. [ 1180.081015][T18729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1180.140495][ T7662] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.168826][ T7662] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.208360][ T7662] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.231653][ T7662] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.333905][T10533] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 1180.530699][T10533] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1180.556354][T10550] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1180.558968][T10533] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.611397][T10533] usb 3-1: Product: syz [ 1180.615880][T10550] usb 4-1: USB disconnect, device number 11 [ 1180.619664][ T1346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1180.655466][T10533] usb 3-1: Manufacturer: syz [ 1180.667625][ T1346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1180.823147][T10533] usb 3-1: SerialNumber: syz [ 1180.837970][T10533] usb 3-1: config 0 descriptor?? [ 1181.400893][T10533] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1181.450586][ T7413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1181.467092][ T7413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1181.613064][T10533] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1182.139869][T19002] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2972'. [ 1182.272273][T17483] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 1182.488026][T17483] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1182.597762][T19009] erofs (device nullb0): cannot find valid erofs superblock [ 1182.611654][T19009] ptrace attach of "./syz-executor exec"[12017] was attempted by ""[19009] [ 1182.917682][T17483] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.940255][T17483] usb 5-1: Product: syz [ 1182.944717][T17483] usb 5-1: Manufacturer: syz [ 1182.949435][T17483] usb 5-1: SerialNumber: syz [ 1182.988495][T17483] usb 5-1: config 0 descriptor?? [ 1183.078920][T18980] usb 3-1: USB disconnect, device number 13 [ 1183.251102][T17483] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1183.613547][T10548] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 1183.815984][T10548] usb 4-1: config 162 has an invalid interface number: 84 but max is 2 [ 1183.885171][T17483] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1183.897602][T10548] usb 4-1: config 162 has an invalid interface number: 3 but max is 2 [ 1183.943343][T10548] usb 4-1: config 162 has no interface number 0 [ 1183.977447][T10548] usb 4-1: config 162 has no interface number 1 [ 1184.030222][T10548] usb 4-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1184.115184][T10548] usb 4-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1184.179659][T10548] usb 4-1: config 162 interface 2 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1184.245235][T10548] usb 4-1: config 162 interface 2 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1184.291790][T10548] usb 4-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1184.335279][T10548] usb 4-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 64 [ 1184.387291][T10548] usb 4-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1184.437085][T10548] usb 4-1: config 162 interface 84 has no altsetting 0 [ 1184.470078][T10548] usb 4-1: config 162 interface 2 has no altsetting 0 [ 1184.556747][T10548] usb 4-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 1184.600888][T10548] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.617954][T10548] usb 4-1: Product: syz [ 1184.633007][T10548] usb 4-1: Manufacturer: syz [ 1184.646727][T10548] usb 4-1: SerialNumber: syz [ 1184.740393][T19030] tun6: tun_chr_ioctl cmd 1074025675 [ 1184.746110][T19030] tun6: persist enabled [ 1184.834402][T19030] tun6: tun_chr_ioctl cmd 1074025675 [ 1184.839980][T19030] tun6: persist disabled [ 1185.228703][ T5827] Bluetooth: hci2: Opcode 0x0c03 failed: -71 [ 1185.859157][T10548] usb 4-1: USB disconnect, device number 12 [ 1185.872524][T19032] netlink: 'syz.1.2981': attribute type 4 has an invalid length. [ 1186.418127][T19047] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2983'. [ 1186.764892][T19055] netlink: 'syz.3.2984': attribute type 2 has an invalid length. [ 1187.080867][T10544] usb 5-1: USB disconnect, device number 17 [ 1189.291907][T19079] tun6: tun_chr_ioctl cmd 1074025675 [ 1189.311943][T19079] tun6: persist enabled [ 1189.633938][T19083] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1189.641232][T19083] IPv6: NLM_F_CREATE should be set when creating new route [ 1189.945093][T19083] bridge0: port 2(bridge_slave_1) entered disabled state [ 1189.952782][T19083] bridge0: port 1(bridge_slave_0) entered disabled state [ 1190.362207][ T5886] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1190.399600][T19083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1190.439581][T19083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1190.542342][ T5886] usb 3-1: Using ep0 maxpacket: 8 [ 1190.603170][ T5886] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 1190.641905][ T5886] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1190.738746][ T5886] usb 3-1: config 0 has no interface number 0 [ 1190.780857][ T5886] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1190.828376][ T5886] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1190.881359][ T5886] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1190.922426][ T5886] usb 3-1: config 0 interface 186 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1190.996635][ T5886] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1191.028090][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.064717][ T5886] usb 3-1: Product: syz [ 1191.080443][ T5886] usb 3-1: Manufacturer: syz [ 1191.095857][ T5886] usb 3-1: SerialNumber: syz [ 1191.166931][ T5886] usb 3-1: config 0 descriptor?? [ 1191.208338][ T5886] iowarrior 3-1:0.186: no interrupt-in endpoint found [ 1191.483493][T19110] tun8: tun_chr_ioctl cmd 1074025675 [ 1191.533735][T19110] tun8: persist enabled [ 1191.547809][T19111] tun8: tun_chr_ioctl cmd 1074025675 [ 1191.567900][T19111] tun8: persist disabled [ 1191.578090][ T6065] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.604974][ T6065] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.627602][ T6065] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.662547][ T6065] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.740115][T19119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2996'. [ 1191.816109][T19119] bridge0: port 3(geneve1) entered blocking state [ 1191.822693][T19119] bridge0: port 3(geneve1) entered disabled state [ 1191.829286][T19119] geneve1: entered allmulticast mode [ 1191.836244][T19119] geneve1: entered promiscuous mode [ 1191.972039][T19125] FAULT_INJECTION: forcing a failure. [ 1191.972039][T19125] name failslab, interval 1, probability 0, space 0, times 0 [ 1192.004628][T19125] CPU: 1 UID: 0 PID: 19125 Comm: syz.3.2998 Tainted: G L syzkaller #0 PREEMPT(full) [ 1192.004660][T19125] Tainted: [L]=SOFTLOCKUP [ 1192.004667][T19125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1192.004676][T19125] Call Trace: [ 1192.004681][T19125] [ 1192.004689][T19125] dump_stack_lvl+0x100/0x190 [ 1192.004714][T19125] should_fail_ex.cold+0x5/0xa [ 1192.004737][T19125] should_failslab+0xc2/0x120 [ 1192.004755][T19125] __kvmalloc_node_noprof+0xfa/0xa00 [ 1192.004781][T19125] ? hashlimit_mt_check_common+0x822/0x12e0 [ 1192.004809][T19125] hashlimit_mt_check_common+0x822/0x12e0 [ 1192.004839][T19125] hashlimit_mt_check+0x71/0x90 [ 1192.004860][T19125] ? __pfx_hashlimit_mt_check+0x10/0x10 [ 1192.004884][T19125] xt_check_match+0x2d4/0xbc0 [ 1192.004912][T19125] ? __pfx_xt_check_match+0x10/0x10 [ 1192.004942][T19125] ? pcpu_alloc_noprof+0xde1/0x1cc0 [ 1192.004975][T19125] ? xt_find_match+0x1dc/0x280 [ 1192.005004][T19125] find_check_entry.isra.0+0x323/0x990 [ 1192.005043][T19125] ? __pfx_find_check_entry.isra.0+0x10/0x10 [ 1192.005079][T19125] ? kasan_quarantine_put+0x104/0x240 [ 1192.005108][T19125] ? lockdep_hardirqs_on+0x78/0x100 [ 1192.005134][T19125] ? translate_table+0xa30/0x1630 [ 1192.005156][T19125] ? translate_table+0xaf2/0x1630 [ 1192.005178][T19125] ? kfree+0x223/0x6c0 [ 1192.005199][T19125] ? xt_check_table_hooks+0x206/0x330 [ 1192.005224][T19125] translate_table+0xbcd/0x1630 [ 1192.005258][T19125] ? __pfx_translate_table+0x10/0x10 [ 1192.005288][T19125] do_ipt_set_ctl+0x57c/0xb90 [ 1192.005316][T19125] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 1192.005340][T19125] ? sockopt_release_sock+0x57/0x70 [ 1192.005367][T19125] ? __local_bh_enable_ip+0x9e/0x120 [ 1192.005395][T19125] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1192.005434][T19125] ? nf_sockopt_find.isra.0+0x222/0x290 [ 1192.005462][T19125] nf_setsockopt+0x8d/0xf0 [ 1192.005488][T19125] ip_setsockopt+0xcb/0xf0 [ 1192.005516][T19125] udp_setsockopt+0x64/0xb0 [ 1192.005537][T19125] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1192.005559][T19125] do_sock_setsockopt+0xf3/0x1d0 [ 1192.005582][T19125] __sys_setsockopt+0x195/0x220 [ 1192.005613][T19125] __x64_sys_setsockopt+0xbd/0x160 [ 1192.005638][T19125] ? do_syscall_64+0x90/0xf80 [ 1192.005662][T19125] ? lockdep_hardirqs_on+0x78/0x100 [ 1192.005686][T19125] do_syscall_64+0x10b/0xf80 [ 1192.005709][T19125] ? clear_bhb_loop+0x40/0x90 [ 1192.005733][T19125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1192.005752][T19125] RIP: 0033:0x7fe5b099c819 [ 1192.005768][T19125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1192.005786][T19125] RSP: 002b:00007fe5b180a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1192.005804][T19125] RAX: ffffffffffffffda RBX: 00007fe5b0c15fa0 RCX: 00007fe5b099c819 [ 1192.005817][T19125] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 1192.005828][T19125] RBP: 00007fe5b180a090 R08: 00000000000004c0 R09: 0000000000000000 [ 1192.005840][T19125] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 1192.005852][T19125] R13: 00007fe5b0c16038 R14: 00007fe5b0c15fa0 R15: 00007ffc8a4bb758 [ 1192.005878][T19125] [ 1193.045562][T19127] tun11: tun_chr_ioctl cmd 1074025675 [ 1193.056990][T19127] tun11: persist enabled [ 1193.145229][T19137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3001'. [ 1193.149090][T18980] usb 3-1: USB disconnect, device number 14 [ 1193.772253][ T5886] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1194.078460][ T5886] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1194.172178][ T5886] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1194.195089][T19142] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3003'. [ 1194.223402][ T5886] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1194.791317][ T5886] usb 2-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 1194.898665][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.032357][ T5886] usb 2-1: Product: syz [ 1195.060731][ T5886] usb 2-1: Manufacturer: syz [ 1195.105853][ T5886] usb 2-1: SerialNumber: syz [ 1195.349791][ T5886] usb 2-1: config 0 descriptor?? [ 1195.409393][ T5886] uvcvideo 2-1:0.0: Found UVC 34.00 device syz (8086:0b5b) [ 1195.614609][ T5886] uvcvideo 2-1:0.0: No valid video chain found. [ 1196.403039][T19152] tun3: tun_chr_ioctl cmd 1074025675 [ 1196.429894][T19152] tun3: persist enabled [ 1196.466803][T19149] tun3: tun_chr_ioctl cmd 1074025675 [ 1196.472173][T19149] tun3: persist disabled [ 1196.909226][T19159] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19159 comm=syz.5.3007 [ 1197.007150][T19169] erofs (device nullb0): cannot find valid erofs superblock [ 1197.747166][T19173] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3010'. [ 1197.836306][T19176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3011'. [ 1198.131338][T18980] usb 2-1: USB disconnect, device number 125 [ 1198.952403][T19187] tun0: tun_chr_ioctl cmd 1074025675 [ 1198.959762][T19187] tun0: persist enabled [ 1203.824594][T10544] libceph: connect (1)[c::]:6789 error -101 [ 1203.878099][T10544] libceph: mon0 (1)[c::]:6789 connect error [ 1203.919784][T19221] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 1203.929556][T19213] ceph: No mds server is up or the cluster is laggy [ 1204.138919][T18980] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 1204.163185][T19226] bridge_slave_0: left allmulticast mode [ 1204.180288][T19226] bridge_slave_0: left promiscuous mode [ 1204.210962][T19226] bridge0: port 1(bridge_slave_0) entered disabled state [ 1204.236364][T19231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3023'. [ 1204.282637][T19226] bridge_slave_1: left allmulticast mode [ 1204.308630][T18980] usb 3-1: New USB device found, idVendor=04b8, idProduct=df31, bcdDevice=fa.74 [ 1204.331920][T18980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.375717][T19226] bridge_slave_1: left promiscuous mode [ 1204.377653][T18980] usb 3-1: Product: syz [ 1204.385008][T19226] bridge0: port 2(bridge_slave_1) entered disabled state [ 1204.444684][T18980] usb 3-1: Manufacturer: syz [ 1204.464946][T18980] usb 3-1: SerialNumber: syz [ 1204.564269][T19226] bond0: (slave bond_slave_0): Releasing backup interface [ 1204.582814][T10544] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1204.595208][ T5886] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1204.667808][T19226] bond0: (slave bond_slave_1): Releasing backup interface [ 1204.801860][T10544] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1204.828615][T10544] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 1204.863763][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1204.865026][T19226] team0: Port device team_slave_0 removed [ 1204.873927][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 1204.891448][ T5886] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1204.895918][T10544] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1204.902824][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.922724][ T5886] usb 2-1: config 0 descriptor?? [ 1204.935011][T19226] team0: Port device team_slave_1 removed [ 1204.946163][T19226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1204.956622][T10544] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.965655][T19226] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1204.987390][T19226] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1205.010143][T10544] usb 5-1: config 0 descriptor?? [ 1205.046511][T19228] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1205.066063][T19230] team0: Mode changed to "activebackup" [ 1205.162608][ T5886] ath6kl: Failed to submit usb control message: -71 [ 1205.170677][ T5886] ath6kl: unable to send the bmi data to the device: -71 [ 1205.178571][ T5886] ath6kl: Unable to send get target info: -71 [ 1205.207298][ T5886] ath6kl: Failed to init ath6kl core: -71 [ 1205.221900][ T5886] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1205.268193][ T5886] usb 2-1: USB disconnect, device number 126 [ 1205.355755][T10544] ath6kl: Failed to submit usb control message: -71 [ 1205.368890][T10544] ath6kl: unable to send the bmi data to the device: -71 [ 1205.387728][T10544] ath6kl: Unable to send get target info: -71 [ 1205.398359][T10544] ath6kl: Failed to init ath6kl core: -71 [ 1205.434812][T10544] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1205.460972][T10544] usb 5-1: USB disconnect, device number 18 [ 1205.977513][T19259] FAULT_INJECTION: forcing a failure. [ 1205.977513][T19259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1206.189488][T19259] CPU: 0 UID: 0 PID: 19259 Comm: syz.3.3031 Tainted: G L syzkaller #0 PREEMPT(full) [ 1206.189520][T19259] Tainted: [L]=SOFTLOCKUP [ 1206.189527][T19259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1206.189539][T19259] Call Trace: [ 1206.189545][T19259] [ 1206.189553][T19259] dump_stack_lvl+0x100/0x190 [ 1206.189581][T19259] should_fail_ex.cold+0x5/0xa [ 1206.189609][T19259] core_sys_select+0x5d1/0xbb0 [ 1206.189642][T19259] ? __pfx_core_sys_select+0x10/0x10 [ 1206.189662][T19259] ? __lock_acquire+0x4a5/0x2630 [ 1206.189714][T19259] ? __pfx_set_user_sigmask+0x10/0x10 [ 1206.189743][T19259] ? ktime_get_ts64+0x318/0x420 [ 1206.189766][T19259] ? ktime_get_ts64+0x257/0x420 [ 1206.189793][T19259] do_pselect.constprop.0+0x238/0x270 [ 1206.189820][T19259] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 1206.189851][T19259] ? __pfx___schedule+0x10/0x10 [ 1206.189882][T19259] __x64_sys_pselect6+0x149/0x1c0 [ 1206.189910][T19259] do_syscall_64+0x10b/0xf80 [ 1206.189937][T19259] ? clear_bhb_loop+0x40/0x90 [ 1206.189963][T19259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.189986][T19259] RIP: 0033:0x7fe5b099c819 [ 1206.190003][T19259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1206.190024][T19259] RSP: 002b:00007fe5b17c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1206.190044][T19259] RAX: ffffffffffffffda RBX: 00007fe5b0c16180 RCX: 00007fe5b099c819 [ 1206.190059][T19259] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000040 [ 1206.190072][T19259] RBP: 00007fe5b17c8090 R08: 0000200000000200 R09: 0000000000000000 [ 1206.190086][T19259] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 1206.190099][T19259] R13: 00007fe5b0c16218 R14: 00007fe5b0c16180 R15: 00007ffc8a4bb758 [ 1206.190127][T19259] [ 1207.790403][T19269] xt_CT: No such helper "pptp" [ 1208.346046][T10533] usb 3-1: USB disconnect, device number 15 [ 1209.536938][T19287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3036'. [ 1209.598545][T19288] erofs (device nullb0): cannot find valid erofs superblock [ 1209.613250][T19288] ptrace attach of "./syz-executor exec"[12812] was attempted by ""[19288] [ 1210.268446][T19296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3039'. [ 1210.674324][T19295] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3040'. [ 1210.816573][T19298] syz_tun: entered allmulticast mode [ 1210.957962][T19297] syz_tun: left allmulticast mode [ 1211.790755][T19308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3043'. [ 1211.988221][T19311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3044'. [ 1212.052370][T19311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3044'. [ 1212.229344][T18980] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 1212.277452][T19308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3043'. [ 1212.586345][T18980] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1212.599040][T18980] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1212.639652][T18980] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1213.550591][T19315] tun3: tun_chr_ioctl cmd 1074025675 [ 1213.555984][T19315] tun3: persist enabled [ 1213.666703][T18980] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 448, setting to 64 [ 1213.679608][T18980] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1213.688791][T18980] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1213.696853][T18980] usb 6-1: Product: syz [ 1213.704018][T18980] usb 6-1: Manufacturer: syz [ 1213.719158][T18980] cdc_wdm 6-1:1.0: skipping garbage [ 1213.724521][T18980] cdc_wdm 6-1:1.0: skipping garbage [ 1213.729816][T18980] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1213.854771][T19323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3047'. [ 1213.941721][T10544] usb 6-1: USB disconnect, device number 95 [ 1213.943915][T19323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3047'. [ 1215.847758][T19325] tun12: tun_chr_ioctl cmd 1074025675 [ 1215.853600][T19325] tun12: persist enabled [ 1215.858359][T19325] tun12: tun_chr_ioctl cmd 1074025675 [ 1215.863826][T19325] tun12: persist disabled [ 1216.551645][T19344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3052'. [ 1217.937771][T19369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3054'. [ 1218.667241][T18980] usb 6-1: new full-speed USB device number 96 using dummy_hcd [ 1218.851290][T18980] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 1218.869652][T18980] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1218.884739][T18980] usb 6-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1218.921275][T18980] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.930914][T18980] usb 6-1: Product: syz [ 1218.944404][T18980] usb 6-1: Manufacturer: syz [ 1218.984970][T18980] usb 6-1: SerialNumber: syz [ 1218.993186][T10533] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1219.009028][T18980] usb 6-1: config 0 descriptor?? [ 1219.019403][T19362] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1219.035794][T18980] port100 6-1:0.0: NFC: Could not get supported command types [ 1219.162365][T10550] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 1219.242023][T19382] netlink: 'syz.2.3059': attribute type 2 has an invalid length. [ 1219.326105][T10533] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1219.336454][T10533] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 1219.400364][T10533] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1219.409956][T10533] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.428054][T10533] usb 2-1: config 0 descriptor?? [ 1219.634522][T10550] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 1219.644650][T10533] ath6kl: Failed to submit usb control message: -71 [ 1219.646966][T10550] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1219.672269][T10550] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1220.170937][T10533] ath6kl: unable to send the bmi data to the device: -71 [ 1220.232459][T10550] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.240549][T10550] usb 4-1: Product: syz [ 1220.242291][T10533] ath6kl: Unable to send get target info: -71 [ 1220.244926][T10550] usb 4-1: Manufacturer: syz [ 1220.256266][T10550] usb 4-1: SerialNumber: syz [ 1220.276868][T10550] usb 4-1: config 0 descriptor?? [ 1220.288197][T19378] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1220.310150][T10550] port100 4-1:0.0: NFC: Could not get supported command types [ 1220.322598][T10533] ath6kl: Failed to init ath6kl core: -71 [ 1220.344612][T10533] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1220.376051][T10533] usb 2-1: USB disconnect, device number 127 [ 1220.473552][ T5886] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1220.633664][ T5886] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1220.660548][ T5886] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1220.700655][ T5886] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1220.728021][ T5886] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 448, setting to 64 [ 1220.752594][ T5886] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1220.770073][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1220.778814][ T5886] usb 3-1: Product: syz [ 1220.785790][ T5886] usb 3-1: Manufacturer: syz [ 1220.808860][T10533] usb 6-1: USB disconnect, device number 96 [ 1221.048783][ T5886] cdc_wdm 3-1:1.0: skipping garbage [ 1221.114584][ T5886] cdc_wdm 3-1:1.0: skipping garbage [ 1221.163950][ T5886] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1221.786018][T10533] usb 4-1: USB disconnect, device number 13 [ 1222.840952][T10550] usb 3-1: USB disconnect, device number 16 [ 1223.411383][T19418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3067'. [ 1223.549353][T19399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3063'. [ 1223.594518][T10550] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1223.785016][T10550] usb 4-1: Using ep0 maxpacket: 8 [ 1223.985306][T10550] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1224.069865][T10550] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.163027][T10550] usb 4-1: Product: syz [ 1224.216026][T10550] usb 4-1: Manufacturer: syz [ 1224.244451][T10550] usb 4-1: SerialNumber: syz [ 1224.327011][T10550] usb 4-1: config 0 descriptor?? [ 1224.787905][T10550] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1225.196335][T19415] netlink: 'syz.3.3066': attribute type 1 has an invalid length. [ 1225.621379][T19415] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3066'. [ 1225.953810][T19444] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3069'. [ 1226.584934][T10550] usb write operation failed. (-71) [ 1226.585885][T19450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3070'. [ 1226.647874][T10550] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1226.718739][T10550] dvbdev: DVB: registering new adapter (Terratec H7) [ 1226.736351][T10550] usb 4-1: media controller created [ 1226.743160][T10550] usb read operation failed. (-71) [ 1226.763488][T10550] usb write operation failed. (-71) [ 1226.801298][T10550] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1226.880899][T19450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3070'. [ 1227.556151][T10550] usb 4-1: USB disconnect, device number 14 [ 1228.011970][T19464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3072'. [ 1228.045927][T19464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3072'. [ 1228.250140][T19466] FAULT_INJECTION: forcing a failure. [ 1228.250140][T19466] name failslab, interval 1, probability 0, space 0, times 0 [ 1228.278018][T19466] CPU: 0 UID: 0 PID: 19466 Comm: syz.4.3075 Tainted: G L syzkaller #0 PREEMPT(full) [ 1228.278039][T19466] Tainted: [L]=SOFTLOCKUP [ 1228.278043][T19466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1228.278051][T19466] Call Trace: [ 1228.278055][T19466] [ 1228.278060][T19466] dump_stack_lvl+0x100/0x190 [ 1228.278079][T19466] should_fail_ex.cold+0x5/0xa [ 1228.278096][T19466] should_failslab+0xc2/0x120 [ 1228.278109][T19466] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1228.278126][T19466] ? skb_clone+0x190/0x400 [ 1228.278147][T19466] skb_clone+0x190/0x400 [ 1228.278165][T19466] netlink_deliver_tap+0xaed/0xcc0 [ 1228.278182][T19466] netlink_unicast+0x62b/0x850 [ 1228.278197][T19466] ? __pfx_netlink_unicast+0x10/0x10 [ 1228.278216][T19466] netlink_sendmsg+0x8b0/0xda0 [ 1228.278232][T19466] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1228.278244][T19466] ? __might_fault+0x30/0x140 [ 1228.278266][T19466] ____sys_sendmsg+0x9e1/0xb70 [ 1228.278279][T19466] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1228.278294][T19466] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1228.278315][T19466] ___sys_sendmsg+0x190/0x1e0 [ 1228.278330][T19466] ? __pfx____sys_sendmsg+0x10/0x10 [ 1228.278372][T19466] __sys_sendmsg+0x170/0x220 [ 1228.278396][T19466] ? __pfx___sys_sendmsg+0x10/0x10 [ 1228.278420][T19466] ? rcu_is_watching+0x12/0xc0 [ 1228.278440][T19466] do_syscall_64+0x10b/0xf80 [ 1228.278456][T19466] ? clear_bhb_loop+0x40/0x90 [ 1228.278471][T19466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1228.278483][T19466] RIP: 0033:0x7fccc5f9c819 [ 1228.278494][T19466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1228.278505][T19466] RSP: 002b:00007fccc6e09028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1228.278517][T19466] RAX: ffffffffffffffda RBX: 00007fccc6215fa0 RCX: 00007fccc5f9c819 [ 1228.278524][T19466] RDX: 000000002008c010 RSI: 0000200000000200 RDI: 0000000000000004 [ 1228.278532][T19466] RBP: 00007fccc6e09090 R08: 0000000000000000 R09: 0000000000000000 [ 1228.278539][T19466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1228.278546][T19466] R13: 00007fccc6216038 R14: 00007fccc6215fa0 R15: 00007ffef603bd48 [ 1228.278561][T19466] [ 1229.331823][T19463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3074'. [ 1229.419203][T19463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3074'. [ 1229.452297][T10533] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1229.562412][T17483] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1229.612270][T10550] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 1229.614243][T10533] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1229.649708][T10533] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1229.662217][T10533] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1229.672425][T10533] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 448, setting to 64 [ 1229.693715][T10533] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1229.704412][T10533] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1229.712502][T10533] usb 6-1: Product: syz [ 1229.716839][T10533] usb 6-1: Manufacturer: syz [ 1229.725936][T17483] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1229.729010][T10533] cdc_wdm 6-1:1.0: skipping garbage [ 1229.747863][T10533] cdc_wdm 6-1:1.0: skipping garbage [ 1229.753578][T10533] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1229.760433][T17483] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1229.780332][T17483] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.794100][T10550] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 1229.812114][T17483] usb 2-1: config 0 descriptor?? [ 1229.826740][T10550] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1229.845408][T10550] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1229.985463][T10550] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.994184][T10550] usb 5-1: Product: syz [ 1229.998513][T10550] usb 5-1: Manufacturer: syz [ 1230.003275][T10550] usb 5-1: SerialNumber: syz [ 1230.026307][T10550] usb 5-1: config 0 descriptor?? [ 1230.034399][T19478] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1230.709195][T10550] port100 5-1:0.0: NFC: Could not get supported command types [ 1230.926218][T17483] usbhid 2-1:0.0: can't add hid device: -71 [ 1230.967674][T17483] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1231.009127][T17483] usb 2-1: USB disconnect, device number 2 [ 1231.570734][T10544] usb 6-1: USB disconnect, device number 97 [ 1231.644298][T17483] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1231.836469][T19507] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.3081'. [ 1231.925376][T19509] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3081'. [ 1232.095434][T17483] usb 2-1: Using ep0 maxpacket: 16 [ 1232.220819][T10544] usb 5-1: USB disconnect, device number 19 [ 1232.227389][T17483] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1232.244865][T17483] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1232.259915][T17483] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.270744][T17483] usb 2-1: config 0 descriptor?? [ 1232.399378][T17483] usbhid 2-1:0.0: can't add hid device: -71 [ 1232.428045][T17483] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1232.473450][T17483] usb 2-1: USB disconnect, device number 3 [ 1232.551518][T19519] netlink: 'syz.1.3083': attribute type 2 has an invalid length. [ 1232.571838][T19518] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.3082'. [ 1232.681337][T19520] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3082'. [ 1232.721675][T19521] netlink: 'syz.1.3083': attribute type 2 has an invalid length. [ 1235.494874][T19534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3086'. [ 1235.527640][T10544] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1235.675995][T10533] usb 6-1: new full-speed USB device number 98 using dummy_hcd [ 1235.722397][T10544] usb 3-1: Using ep0 maxpacket: 8 [ 1235.803380][T19533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3085'. [ 1235.872807][T19533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3085'. [ 1235.974036][T10544] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1236.018076][T10533] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1236.029700][T10533] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.046916][T10544] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.069233][T10544] usb 3-1: Product: syz [ 1236.114654][T10533] usb 6-1: Product: syz [ 1236.135269][T10533] usb 6-1: Manufacturer: syz [ 1236.139930][T10533] usb 6-1: SerialNumber: syz [ 1236.164022][T10533] usb 6-1: config 0 descriptor?? [ 1236.170739][T10544] usb 3-1: Manufacturer: syz [ 1236.194290][T10544] usb 3-1: SerialNumber: syz [ 1236.214676][T10544] usb 3-1: config 0 descriptor?? [ 1236.480762][T19547] tun12: tun_chr_ioctl cmd 1074025675 [ 1236.486409][T19547] tun12: persist enabled [ 1236.731490][T10544] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1236.803138][T10533] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1237.649726][T10544] usb write operation failed. (-71) [ 1237.663085][T10544] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1237.678044][T10544] dvbdev: DVB: registering new adapter (Terratec H7) [ 1237.691107][T10544] usb 3-1: media controller created [ 1237.697255][T10544] usb read operation failed. (-71) [ 1237.703311][T10544] usb write operation failed. (-71) [ 1237.717891][T10544] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1237.728161][T19560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3093'. [ 1237.734804][T10544] usb 3-1: USB disconnect, device number 17 [ 1237.772341][T18980] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1237.794070][T19560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3093'. [ 1237.842274][T17483] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1237.944617][T18980] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1237.953234][T18980] usb 2-1: config 0 has no interface number 0 [ 1237.967058][T18980] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1237.978350][T18980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.987128][T18980] usb 2-1: Product: syz [ 1237.991545][T18980] usb 2-1: Manufacturer: syz [ 1237.993566][T17483] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1237.996652][T18980] usb 2-1: SerialNumber: syz [ 1238.006500][T17483] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1238.021824][T17483] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1238.032895][T17483] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1238.041029][T18980] usb 2-1: config 0 descriptor?? [ 1238.046161][T17483] usb 4-1: SerialNumber: syz [ 1238.279987][T18980] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1238.294026][T17483] usb 4-1: invalid UAC_HEADER (v1) [ 1238.324259][T18980] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1238.342746][T18980] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1238.354744][T18980] usb 2-1: media controller created [ 1238.387525][T18980] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1238.396187][T17483] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1238.418427][T17483] usb 4-1: USB disconnect, device number 15 [ 1238.515817][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.930616][T19567] tun4: tun_chr_ioctl cmd 1074025675 [ 1238.936124][T19567] tun4: persist enabled [ 1239.128639][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 1239.148874][ T6182] udevd[6182]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1239.153608][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 1239.172096][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 1239.180062][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 1239.187523][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 1239.196602][T10533] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1239.215006][T10533] usb 6-1: USB disconnect, device number 98 [ 1239.650515][T19574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3097'. [ 1241.010644][T18980] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 1241.467646][T18980] usb 2-1: USB disconnect, device number 4 [ 1241.684928][T10548] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1241.728235][T19590] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3101'. [ 1242.097953][T19600] netlink: 'syz.5.3103': attribute type 2 has an invalid length. [ 1242.860113][T19614] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3101'. [ 1243.350868][T19619] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1243.464555][T19619] team0: Unable to change to the same mode the team is in [ 1243.503602][T18980] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1243.722371][T18980] usb 5-1: Using ep0 maxpacket: 8 [ 1243.732718][T10548] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1243.854242][T18980] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1243.883760][T18980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.903890][T18980] usb 5-1: Product: syz [ 1243.919251][T18980] usb 5-1: Manufacturer: syz [ 1243.933810][T10548] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1243.948931][T18980] usb 5-1: SerialNumber: syz [ 1243.952224][T10548] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 1243.981863][T18980] usb 5-1: config 0 descriptor?? [ 1243.993793][T10548] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1244.030147][T10548] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1244.055412][T10548] usb 6-1: config 0 descriptor?? [ 1244.198860][T18980] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1244.328052][T19632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3109'. [ 1244.378955][T19632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3109'. [ 1244.630076][T10548] ath6kl: Failed to submit usb control message: -71 [ 1244.648301][T10548] ath6kl: unable to send the bmi data to the device: -71 [ 1244.666643][T10548] ath6kl: Unable to send get target info: -71 [ 1244.708998][T10548] ath6kl: Failed to init ath6kl core: -71 [ 1244.715540][T19627] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1244.738256][T10548] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1244.777172][T10548] usb 6-1: USB disconnect, device number 100 [ 1244.807659][T19618] netlink: 'syz.4.3105': attribute type 1 has an invalid length. [ 1244.828664][T19618] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3105'. [ 1245.154953][T19640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3110'. [ 1245.191921][T18980] usb write operation failed. (-71) [ 1245.540609][T18980] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1245.569427][T18980] dvbdev: DVB: registering new adapter (Terratec H7) [ 1245.585567][T18980] usb 5-1: media controller created [ 1245.602913][T18980] usb read operation failed. (-71) [ 1245.617283][T18980] usb write operation failed. (-71) [ 1245.639014][T18980] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1245.661129][T18980] usb 5-1: USB disconnect, device number 20 [ 1247.296574][T19665] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3117'. [ 1247.617895][T10548] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 1248.995435][T19686] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 1249.003222][T19686] audit: out of memory in audit_log_start [ 1249.032224][ T30] audit: type=1400 audit(1776926660.766:677): avc: denied { read append } for pid=19683 comm="syz.3.3121" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1249.311170][ T30] audit: type=1400 audit(1776926660.766:678): avc: denied { open } for pid=19683 comm="syz.3.3121" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1249.344764][T10533] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 1249.523686][T10533] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 1249.534179][T10533] usb 2-1: config 0 has no interface number 0 [ 1249.541651][T10533] usb 2-1: config 0 interface 41 has no altsetting 0 [ 1249.558015][T10533] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1249.572153][T10533] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.589452][T10533] usb 2-1: Product: syz [ 1249.602154][T10533] usb 2-1: Manufacturer: syz [ 1249.608328][T10533] usb 2-1: SerialNumber: syz [ 1249.696384][T10533] usb 2-1: config 0 descriptor?? [ 1250.077348][T19705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3122'. [ 1250.944787][ T30] audit: type=1400 audit(1776926662.726:679): avc: denied { shutdown } for pid=19712 comm="syz.5.3126" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1251.049606][ C1] sd 0:0:1:0: [sda] tag#7111 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1251.060105][ C1] sd 0:0:1:0: [sda] tag#7111 CDB: Write(6) 0a 00 00 00 00 00 00 01 00 00 00 00 [ 1251.089584][T18980] libceph: connect (1)[c::]:6789 error -101 [ 1251.106951][T18980] libceph: mon0 (1)[c::]:6789 connect error [ 1251.132532][T10538] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1251.207949][T19721] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3127'. [ 1251.217035][T19721] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3127'. [ 1251.227824][T19721] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3127'. [ 1251.236953][T19721] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3127'. [ 1251.290460][T19708] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1251.322782][T10538] usb 4-1: Using ep0 maxpacket: 8 [ 1251.333415][T10538] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1251.349796][T10538] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1251.371878][T10538] usb 4-1: Product: syz [ 1251.378550][T10538] usb 4-1: Manufacturer: syz [ 1251.384957][T18980] libceph: connect (1)[c::]:6789 error -101 [ 1251.390979][T10538] usb 4-1: SerialNumber: syz [ 1251.396030][T18980] libceph: mon0 (1)[c::]:6789 connect error [ 1251.408555][T10538] usb 4-1: config 0 descriptor?? [ 1251.426204][ T30] audit: type=1400 audit(1776926663.206:680): avc: denied { ioctl } for pid=19722 comm="syz.5.3128" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1251.718083][T19727] tun7: tun_chr_ioctl cmd 1074025675 [ 1251.723583][T19727] tun7: persist enabled [ 1251.935960][T18980] libceph: connect (1)[c::]:6789 error -101 [ 1251.962256][T10538] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1251.969766][T19715] ceph: No mds server is up or the cluster is laggy [ 1251.976684][T18980] libceph: mon0 (1)[c::]:6789 connect error [ 1252.362994][T19713] netlink: 'syz.3.3125': attribute type 1 has an invalid length. [ 1252.423729][T19733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3131'. [ 1252.772449][T19713] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3125'. [ 1252.795082][T10533] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 1252.831418][T10533] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 1252.879161][T10533] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 1252.927880][T10533] usb 2-1: USB disconnect, device number 5 [ 1253.123223][T10538] usb write operation failed. (-71) [ 1253.136913][T10538] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1253.205741][T19745] erofs (device nullb0): cannot find valid erofs superblock [ 1253.216752][T19745] ptrace attach of "./syz-executor exec"[11491] was attempted by ""[19745] [ 1253.621911][T10538] dvbdev: DVB: registering new adapter (Terratec H7) [ 1253.628762][T10538] usb 4-1: media controller created [ 1253.642219][T10538] usb read operation failed. (-71) [ 1253.648992][T10538] usb write operation failed. (-71) [ 1253.664839][T10538] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1253.688804][T10538] usb 4-1: USB disconnect, device number 16 [ 1253.831435][T19729] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1254.855655][T10538] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 1254.911081][T19762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3137'. [ 1254.952182][T19762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3137'. [ 1255.214023][T19764] netlink: 'syz.3.3134': attribute type 2 has an invalid length. [ 1255.259251][T10544] libceph: connect (1)[c::]:6789 error -13 [ 1255.266982][T10544] libceph: mon0 (1)[c::]:6789 connect error [ 1255.365912][T10538] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1255.396080][T10538] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.430803][T10538] usb 2-1: Product: syz [ 1255.451463][T10538] usb 2-1: Manufacturer: syz [ 1255.465798][T10538] usb 2-1: SerialNumber: syz [ 1255.498033][T10538] usb 2-1: config 0 descriptor?? [ 1255.553021][T10544] libceph: connect (1)[c::]:6789 error -13 [ 1255.719363][T10544] libceph: mon0 (1)[c::]:6789 connect error [ 1255.928748][T10538] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1255.961642][T19758] ceph: No mds server is up or the cluster is laggy [ 1256.717458][T19784] erofs (device nullb0): cannot find valid erofs superblock [ 1256.730163][T19784] ptrace attach of "./syz-executor exec"[12101] was attempted by ""[19784] [ 1257.694538][T19791] binder: BINDER_SET_CONTEXT_MGR already set [ 1257.701282][T19791] binder: 19788:19791 ioctl 4018620d 200000000040 returned -16 [ 1258.024802][T10548] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1258.206642][T10548] usb 5-1: Using ep0 maxpacket: 8 [ 1258.236790][T10548] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1258.256941][T10548] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.275965][T10548] usb 5-1: Product: syz [ 1258.284789][T10548] usb 5-1: Manufacturer: syz [ 1258.295189][T10548] usb 5-1: SerialNumber: syz [ 1258.318995][T10548] usb 5-1: config 0 descriptor?? [ 1258.474960][T10538] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1258.513700][T10538] usb 2-1: USB disconnect, device number 6 [ 1258.537473][T10548] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1258.693127][T19796] efs: cannot read volume header [ 1258.953709][T19787] netlink: 'syz.4.3144': attribute type 1 has an invalid length. [ 1258.999489][T19787] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3144'. [ 1259.749347][T19808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3148'. [ 1259.770320][T19808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3148'. [ 1260.062046][T10548] usb write operation failed. (-71) [ 1260.148395][T10548] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1260.168245][T10548] dvbdev: DVB: registering new adapter (Terratec H7) [ 1260.186508][T10548] usb 5-1: media controller created [ 1260.197505][T10548] usb read operation failed. (-71) [ 1260.302692][T10548] usb write operation failed. (-71) [ 1260.314315][T10548] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1260.326092][T10548] usb 5-1: USB disconnect, device number 22 [ 1260.447002][T19812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3149'. [ 1261.472091][T19821] tun8: tun_chr_ioctl cmd 1074025675 [ 1261.477487][T19821] tun8: persist enabled [ 1261.755477][T19824] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1261.904826][T19824] team0: Unable to change to the same mode the team is in [ 1262.112054][T19828] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3154'. [ 1262.192230][T10536] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1262.331398][T19828] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3154'. [ 1262.363829][T10536] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1262.397609][T10536] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 1262.402279][T10544] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1262.415746][T10536] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1262.426969][T10536] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1262.428358][T10548] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1262.473134][T10536] usb 4-1: config 0 descriptor?? [ 1262.603962][T10544] usb 3-1: Using ep0 maxpacket: 32 [ 1262.680532][T19837] tun9: tun_chr_ioctl cmd 1074025675 [ 1262.686255][T19837] tun9: persist enabled [ 1262.913624][T10536] ath6kl: Failed to submit usb control message: -71 [ 1262.918108][T10544] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1262.943895][T10548] usb 6-1: Using ep0 maxpacket: 8 [ 1262.951688][T10544] usb 3-1: config 0 has no interface number 0 [ 1262.953197][T10536] ath6kl: unable to send the bmi data to the device: -71 [ 1262.977323][T10544] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1262.993957][T10548] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1263.008183][T10544] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1263.019257][T10536] ath6kl: Unable to send get target info: -71 [ 1263.020598][T10548] usb 6-1: config 117 has an invalid interface number: 163 but max is 0 [ 1263.042036][T10544] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1263.071683][T10548] usb 6-1: config 117 has no interface number 0 [ 1263.086480][T10544] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.105009][T10548] usb 6-1: config 117 interface 163 has no altsetting 0 [ 1263.105716][T10536] ath6kl: Failed to init ath6kl core: -71 [ 1263.139786][T10544] usb 3-1: config 0 descriptor?? [ 1263.160029][T10548] usb 6-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=5d.24 [ 1263.180514][T10548] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.189992][T10548] usb 6-1: Product: syz [ 1263.191153][T10536] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1263.199741][T10548] usb 6-1: Manufacturer: syz [ 1263.250730][T10548] usb 6-1: SerialNumber: syz [ 1263.277714][T10536] usb 4-1: USB disconnect, device number 17 [ 1263.581409][T19830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1263.593885][T19830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1263.671463][T19841] erofs (device nullb0): cannot find valid erofs superblock [ 1263.687138][T19841] ptrace attach of "./syz-executor exec"[12101] was attempted by ""[19841] [ 1264.042559][T10544] usbhid 3-1:0.1: can't add hid device: -71 [ 1264.053153][T10544] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 1264.094028][T10544] usb 3-1: USB disconnect, device number 18 [ 1264.258601][T19832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1264.326380][T19832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1264.593667][T19855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3162'. [ 1264.661219][T10548] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1264.661876][T19855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3162'. [ 1265.012178][T10548] usb 2-1: Using ep0 maxpacket: 8 [ 1265.017433][T19854] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3159'. [ 1265.033382][T10548] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1265.047895][T10548] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.063299][T10548] usb 2-1: Product: syz [ 1265.084276][T10548] usb 2-1: Manufacturer: syz [ 1265.091969][T10548] usb 2-1: SerialNumber: syz [ 1265.105588][T10536] usb 6-1: USB disconnect, device number 101 [ 1265.116696][T10548] usb 2-1: config 0 descriptor?? [ 1265.134436][T10536] f81534a_ctrl 6-1:117.163: failed to enable ports: -19 [ 1265.662748][T10548] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1266.242052][T19850] netlink: 'syz.1.3161': attribute type 1 has an invalid length. [ 1266.261521][T19850] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3161'. [ 1266.335610][T19875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3165'. [ 1266.358479][T19875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3165'. [ 1266.838169][T10548] usb write operation failed. (-71) [ 1267.023548][T10548] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1267.041523][T10548] dvbdev: DVB: registering new adapter (Terratec H7) [ 1267.049155][T10548] usb 2-1: media controller created [ 1267.056692][T10548] usb read operation failed. (-71) [ 1267.065341][T10548] usb write operation failed. (-71) [ 1267.084387][T10548] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1267.118176][T10548] usb 2-1: USB disconnect, device number 7 [ 1267.216378][T19886] netlink: 'syz.2.3169': attribute type 2 has an invalid length. [ 1267.315102][T19888] netlink: 'syz.2.3169': attribute type 2 has an invalid length. [ 1269.433158][T19900] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3173'. [ 1269.704296][T19904] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19904 comm=syz.3.3173 [ 1269.994887][T19899] macvlan3: entered promiscuous mode [ 1270.000227][T19899] bridge0: entered promiscuous mode [ 1270.016950][T19906] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3174'. [ 1270.115062][T19909] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3174'. [ 1270.598147][T19916] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3176'. [ 1270.689241][T19916] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3176'. [ 1270.896831][T19915] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3177'. [ 1270.913710][T19887] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1272.061639][T19917] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3177'. [ 1272.522789][T10533] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1272.662600][T19931] tun5: tun_chr_ioctl cmd 1074025675 [ 1272.667919][T19931] tun5: persist enabled [ 1272.679050][T19930] tun5: tun_chr_ioctl cmd 1074025675 [ 1272.711516][T19930] tun5: persist disabled [ 1273.042729][T10533] usb 6-1: Using ep0 maxpacket: 8 [ 1273.055208][T10533] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1273.064321][T10533] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.072547][T10533] usb 6-1: Product: syz [ 1273.077026][T10533] usb 6-1: Manufacturer: syz [ 1273.082492][T10533] usb 6-1: SerialNumber: syz [ 1273.093622][T10533] usb 6-1: config 0 descriptor?? [ 1273.102482][T10536] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1273.439705][T19944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3183'. [ 1274.380769][T10533] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1274.388267][T10536] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1274.411259][T10536] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1274.583886][T10536] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1274.615845][T10536] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1274.626172][T10536] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1274.644762][T10536] usb 2-1: Product: syz [ 1274.650503][T10536] usb 2-1: Manufacturer: syz [ 1274.657371][T10536] usb 2-1: SerialNumber: syz [ 1274.801561][T19927] netlink: 'syz.5.3181': attribute type 1 has an invalid length. [ 1274.817523][T19927] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3181'. [ 1274.924980][T19959] erofs (device nullb0): cannot find valid erofs superblock [ 1274.937321][T19959] ptrace attach of "./syz-executor exec"[12812] was attempted by ""[19959] [ 1275.259104][T10533] usb write operation failed. (-71) [ 1275.276293][T10536] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1275.292535][T10533] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1275.311723][T10533] dvbdev: DVB: registering new adapter (Terratec H7) [ 1275.321989][T10533] usb 6-1: media controller created [ 1275.329717][T10533] usb read operation failed. (-71) [ 1275.335364][T10533] usb write operation failed. (-71) [ 1275.368064][T10533] dvb_usb_az6007 6-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1275.391258][T10533] usb 6-1: USB disconnect, device number 102 [ 1275.602250][T10536] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1275.805779][T19967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3190'. [ 1276.192199][T10536] usb 4-1: Using ep0 maxpacket: 8 [ 1276.203532][T10536] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 1276.221980][T10536] usb 4-1: config 0 has no interface number 0 [ 1276.239500][T10536] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1276.270107][T10536] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1276.293502][T10536] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1276.311014][ T30] audit: type=1400 audit(1776926688.086:681): avc: denied { getopt } for pid=19970 comm="syz.5.3191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1276.473844][T10536] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1276.508814][T10536] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1276.782690][T10536] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1276.810150][T10536] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.822849][T18980] usb 2-1: USB disconnect, device number 8 [ 1276.839274][T18980] usblp0: removed [ 1276.855847][T10536] usb 4-1: Product: syz [ 1276.873144][T10536] usb 4-1: Manufacturer: syz [ 1276.888926][T10536] usb 4-1: SerialNumber: syz [ 1277.073763][T10536] usb 4-1: config 0 descriptor?? [ 1277.728075][T10536] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 1277.754816][T10536] usb 4-1: USB disconnect, device number 18 [ 1277.823969][T19985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3195'. [ 1277.861042][T19980] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3193'. [ 1277.881912][T19985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3195'. [ 1278.082206][T10533] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 1278.090276][T18980] usb 6-1: new low-speed USB device number 103 using dummy_hcd [ 1278.227596][T19995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3197'. [ 1278.702545][T19997] tun1: tun_chr_ioctl cmd 1074025675 [ 1278.708060][T19997] tun1: persist enabled [ 1278.733639][T19997] tun1: tun_chr_ioctl cmd 1074025675 [ 1278.739133][T19997] tun1: persist disabled [ 1279.023212][T10533] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1279.038002][T10533] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.063998][T20000] team0: entered allmulticast mode [ 1279.069281][T18980] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1279.085172][T10533] usb 3-1: Product: syz [ 1279.094616][T10533] usb 3-1: Manufacturer: syz [ 1279.102829][T10533] usb 3-1: SerialNumber: syz [ 1279.107754][T18980] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1279.127606][T18980] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1279.140274][T10533] usb 3-1: config 0 descriptor?? [ 1279.155170][T18980] usb 6-1: string descriptor 0 read error: -22 [ 1279.169386][T18980] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1279.190409][T18980] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.218222][T18980] adutux 6-1:168.0: interrupt endpoints not found [ 1279.368918][T10533] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1279.408917][T20006] erofs (device nullb0): cannot find valid erofs superblock [ 1279.419937][T20006] ptrace attach of "./syz-executor exec"[12017] was attempted by ""[20006] [ 1279.785694][T18980] usb 6-1: USB disconnect, device number 103 [ 1279.892227][T10544] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1280.043702][T10544] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1280.053962][T10548] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1280.061804][T10544] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1280.071323][T10544] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1280.080573][T10544] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.091499][T10544] usb 5-1: config 0 descriptor?? [ 1280.129266][ T30] audit: type=1326 audit(1776926691.906:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20010 comm="syz.3.3203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5b099c819 code=0x7fc00000 [ 1280.153602][ T30] audit: type=1326 audit(1776926691.906:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20010 comm="syz.3.3203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe5b099c819 code=0x7fc00000 [ 1280.232254][T10548] usb 2-1: Using ep0 maxpacket: 8 [ 1280.238966][T10548] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 1280.252191][T10548] usb 2-1: config 0 has no interface number 0 [ 1280.263678][T10548] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1280.292198][T10548] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1280.303668][T10548] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1280.332203][T10548] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1280.347417][T10548] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1280.379681][T10548] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1280.389104][T10548] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.412228][T10548] usb 2-1: Product: syz [ 1280.413273][T18980] usb 5-1: USB disconnect, device number 23 [ 1280.416515][T10548] usb 2-1: Manufacturer: syz [ 1280.438209][T10548] usb 2-1: SerialNumber: syz [ 1280.453923][T10548] usb 2-1: config 0 descriptor?? [ 1280.513159][T20019] delete_channel: no stack [ 1280.525826][ T30] audit: type=1400 audit(1776926692.306:684): avc: denied { ioctl } for pid=20018 comm="syz.5.3205" path="socket:[85426]" dev="sockfs" ino=85426 ioctlcmd=0xaec1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1280.793982][T20022] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3206'. [ 1280.852571][T10548] iowarrior 2-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 1280.926927][T10548] usb 2-1: USB disconnect, device number 9 [ 1280.961310][T20022] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3206'. [ 1281.226035][T20029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3207'. [ 1281.487925][T20033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3209'. [ 1281.644423][T17969] Bluetooth: hci4: command 0x2016 tx timeout [ 1281.854923][T20029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3207'. [ 1281.870957][T10533] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1282.116791][T10533] usb 3-1: USB disconnect, device number 19 [ 1282.158227][T20036] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3208'. [ 1282.320597][T20028] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3208'. [ 1282.447820][T20047] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3214'. [ 1282.458620][T20045] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3214'. [ 1282.727700][T20050] erofs (device nullb0): cannot find valid erofs superblock [ 1282.740726][T20050] ptrace attach of "./syz-executor exec"[11491] was attempted by ""[20050] [ 1283.238939][T20053] tun10: tun_chr_ioctl cmd 1074025675 [ 1283.244621][T20053] tun10: persist enabled [ 1283.268645][T20053] tun10: tun_chr_ioctl cmd 1074025675 [ 1283.274390][T20053] tun10: persist disabled [ 1283.972335][T10548] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 1284.233168][T10548] usb 3-1: not running at top speed; connect to a high speed hub [ 1284.323408][T20065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3219'. [ 1284.384999][T20065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3219'. [ 1284.390507][T10548] usb 3-1: config 45 has an invalid interface number: 2 but max is 0 [ 1284.402283][T10548] usb 3-1: config 45 has no interface number 0 [ 1284.408847][T10548] usb 3-1: config 45 interface 2 has no altsetting 0 [ 1284.434571][T10548] usb 3-1: string descriptor 0 read error: -22 [ 1284.441802][T10548] usb 3-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=30.eb [ 1284.451150][T10548] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.539776][T10548] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 1284.558418][T10548] dvb-usb: bulk message failed: -22 (3/0) [ 1287.017903][T10548] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1287.028545][T10548] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 1287.047197][T10548] usb 3-1: media controller created [ 1287.064862][T10548] dvb-usb: bulk message failed: -22 (5/0) [ 1287.072918][T10548] dvb-usb: MAC address reading failed. [ 1287.081340][T10548] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1287.098025][T10548] dvb-usb: bulk message failed: -22 (6/0) [ 1287.112550][T10548] dvb-usb: bulk message failed: -22 (6/0) [ 1287.121384][T10548] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 1287.132816][T10548] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input104 [ 1287.180958][T10548] dvb-usb: schedule remote query interval to 100 msecs. [ 1287.221507][T10548] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 1287.278309][T10548] usb 3-1: USB disconnect, device number 20 [ 1287.305096][T20072] __nla_validate_parse: 1 callbacks suppressed [ 1287.305117][T20072] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3221'. [ 1287.336321][T20072] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3221'. [ 1287.520347][T20083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3222'. [ 1287.949453][T10548] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 1288.096951][T10544] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 1288.262600][T10544] usb 6-1: Using ep0 maxpacket: 8 [ 1288.274315][T10544] usb 6-1: config 0 has an invalid interface number: 186 but max is 0 [ 1288.289983][T10544] usb 6-1: config 0 has no interface number 0 [ 1288.305223][T10544] usb 6-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1288.330912][T10544] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1288.359890][T10544] usb 6-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1288.392240][T10544] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1288.405851][T10544] usb 6-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1288.435539][T10544] usb 6-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1288.454510][T10536] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 1288.473175][T10544] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.501442][T10544] usb 6-1: Product: syz [ 1288.514749][T10544] usb 6-1: Manufacturer: syz [ 1288.527374][T10544] usb 6-1: SerialNumber: syz [ 1288.546902][T10544] usb 6-1: config 0 descriptor?? [ 1288.628643][T10536] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1288.658790][T10536] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.679342][T10536] usb 3-1: Product: syz [ 1288.700640][T10536] usb 3-1: Manufacturer: syz [ 1288.717809][T10536] usb 3-1: SerialNumber: syz [ 1288.742457][T10536] usb 3-1: config 0 descriptor?? [ 1288.785356][T10544] iowarrior 6-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 1288.838374][T10544] usb 6-1: USB disconnect, device number 104 [ 1288.978516][T10536] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1289.212869][T10548] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1289.634852][T10548] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1289.671647][T10548] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 1289.708117][T10548] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1289.719671][T20100] fuse: fd is not a fuse device [ 1289.728034][T10548] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.793763][T10548] usb 5-1: config 0 descriptor?? [ 1289.828634][T20103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3230'. [ 1289.891475][T20103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3230'. [ 1290.042280][T10548] ath6kl: Failed to submit usb control message: -71 [ 1290.061716][T10548] ath6kl: unable to send the bmi data to the device: -71 [ 1290.073678][T10548] ath6kl: Unable to send get target info: -71 [ 1290.118011][T10548] ath6kl: Failed to init ath6kl core: -71 [ 1290.132948][T10548] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1290.178385][T10548] usb 5-1: USB disconnect, device number 24 [ 1291.331963][T20112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3233'. [ 1291.470898][T20117] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1291.478258][T20117] IPv6: NLM_F_CREATE should be set when creating new route [ 1291.512822][T10536] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1291.529972][T10536] usb 3-1: USB disconnect, device number 21 [ 1291.572177][ T30] audit: type=1326 audit(1776926703.336:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20097 comm="syz.5.3229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9958d9c819 code=0x7fc00000 [ 1292.039418][ T30] audit: type=1326 audit(1776926703.336:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20097 comm="syz.5.3229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9958d9c819 code=0x7fc00000 [ 1292.344968][T20124] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1293.891058][T20131] FAULT_INJECTION: forcing a failure. [ 1293.891058][T20131] name failslab, interval 1, probability 0, space 0, times 0 [ 1293.950243][T20131] CPU: 0 UID: 0 PID: 20131 Comm: syz.4.3235 Tainted: G L syzkaller #0 PREEMPT(full) [ 1293.950276][T20131] Tainted: [L]=SOFTLOCKUP [ 1293.950283][T20131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1293.950296][T20131] Call Trace: [ 1293.950304][T20131] [ 1293.950313][T20131] dump_stack_lvl+0x100/0x190 [ 1293.950345][T20131] should_fail_ex.cold+0x5/0xa [ 1293.950372][T20131] should_failslab+0xc2/0x120 [ 1293.950393][T20131] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1293.950423][T20131] ? skb_clone+0x190/0x400 [ 1293.950460][T20131] skb_clone+0x190/0x400 [ 1293.950489][T20131] netlink_deliver_tap+0xaed/0xcc0 [ 1293.950527][T20131] netlink_unicast+0x62b/0x850 [ 1293.950557][T20131] ? __pfx_netlink_unicast+0x10/0x10 [ 1293.950587][T20131] netlink_sendmsg+0x8b0/0xda0 [ 1293.950614][T20131] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1293.950635][T20131] ? __might_fault+0x30/0x140 [ 1293.950668][T20131] ____sys_sendmsg+0x9e1/0xb70 [ 1293.950688][T20131] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1293.950712][T20131] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1293.950748][T20131] ___sys_sendmsg+0x190/0x1e0 [ 1293.950773][T20131] ? __pfx____sys_sendmsg+0x10/0x10 [ 1293.950832][T20131] __sys_sendmsg+0x170/0x220 [ 1293.950864][T20131] ? __pfx___sys_sendmsg+0x10/0x10 [ 1293.950906][T20131] ? rcu_is_watching+0x12/0xc0 [ 1293.950936][T20131] do_syscall_64+0x10b/0xf80 [ 1293.950961][T20131] ? clear_bhb_loop+0x40/0x90 [ 1293.950983][T20131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1293.951001][T20131] RIP: 0033:0x7fccc5f9c819 [ 1293.951017][T20131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1293.951038][T20131] RSP: 002b:00007fccc6de8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1293.951059][T20131] RAX: ffffffffffffffda RBX: 00007fccc6216090 RCX: 00007fccc5f9c819 [ 1293.951072][T20131] RDX: 0000000004000000 RSI: 0000200000000280 RDI: 0000000000000007 [ 1293.951083][T20131] RBP: 00007fccc6de8090 R08: 0000000000000000 R09: 0000000000000000 [ 1293.951095][T20131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1293.951106][T20131] R13: 00007fccc6216128 R14: 00007fccc6216090 R15: 00007ffef603bd48 [ 1293.951133][T20131] [ 1294.223722][T20124] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1294.236035][T20124] overlayfs: failed to look up (tracing) for ino (-66) [ 1294.893875][T18980] libceph: connect (1)[c::]:6789 error -101 [ 1294.919862][T18980] libceph: mon0 (1)[c::]:6789 connect error [ 1295.129658][T20117] bridge0: left promiscuous mode [ 1295.141090][T20119] tipc: Started in network mode [ 1295.150347][T20119] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 1295.163953][T20119] tipc: Enabling of bearer rejected, failed to enable media [ 1295.195333][T20139] tun5: tun_chr_ioctl cmd 1074025675 [ 1295.206516][T20139] tun5: persist enabled [ 1295.228667][ T7671] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1295.264426][ T7671] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.283784][T10547] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1295.292466][T10536] libceph: connect (1)[c::]:6789 error -101 [ 1295.309075][T10536] libceph: mon0 (1)[c::]:6789 connect error [ 1295.330001][ T7671] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1295.348383][ T7671] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.368238][ T7671] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1295.377977][ T7671] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.391531][ T7671] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1295.401217][ T7671] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.445014][ T30] audit: type=1400 audit(1776926707.226:687): avc: denied { read } for pid=20158 comm="syz.4.3241" name="file0" dev="tmpfs" ino=2246 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1295.476139][T10547] usb 6-1: Using ep0 maxpacket: 8 [ 1295.486695][T10547] usb 6-1: config 0 has an invalid interface number: 186 but max is 0 [ 1295.500934][T10547] usb 6-1: config 0 has no interface number 0 [ 1295.508058][T10547] usb 6-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1295.520213][T10547] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1295.530719][T10547] usb 6-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1295.546452][T20144] ceph: No mds server is up or the cluster is laggy [ 1295.605263][T20145] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 1295.624976][T10547] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1295.645674][T10547] usb 6-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1295.699827][T10547] usb 6-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1295.710025][T10547] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.718611][T10547] usb 6-1: Product: syz [ 1295.724658][T10547] usb 6-1: Manufacturer: syz [ 1295.731181][T10547] usb 6-1: SerialNumber: syz [ 1295.765619][T10547] usb 6-1: config 0 descriptor?? [ 1295.779557][ T30] audit: type=1400 audit(1776926707.556:688): avc: denied { ioctl } for pid=20168 comm="syz.1.3243" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1295.814376][T20145] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1295.825545][T20145] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.834267][T20145] usb 4-1: Product: syz [ 1295.839329][T20145] usb 4-1: Manufacturer: syz [ 1295.844655][T20145] usb 4-1: SerialNumber: syz [ 1295.891409][T20145] usb 4-1: config 0 descriptor?? [ 1295.980484][T10547] iowarrior 6-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 1296.030194][T10547] usb 6-1: USB disconnect, device number 105 [ 1296.137717][T20145] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1296.372252][T20143] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1296.448394][T20179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3245'. [ 1296.953675][T20143] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1296.962244][T20143] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1296.973067][T20143] usb 2-1: config 220 has no interface number 2 [ 1296.979832][T20143] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1296.993188][T20143] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1297.000292][T20143] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1297.007946][T20143] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1297.017618][T20143] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1297.027056][T20143] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.035326][T20143] usb 2-1: Product: syz [ 1297.039747][T20143] usb 2-1: Manufacturer: syz [ 1297.115606][T20143] usb 2-1: SerialNumber: syz [ 1297.172485][T10538] usb 6-1: new full-speed USB device number 106 using dummy_hcd [ 1297.670881][T10538] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 1298.397044][T10538] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1298.409595][T10538] usb 6-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1298.418974][T10538] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.427234][T10538] usb 6-1: Product: syz [ 1298.431488][T10538] usb 6-1: Manufacturer: syz [ 1298.436549][T10538] usb 6-1: SerialNumber: syz [ 1298.452359][T10538] usb 6-1: config 0 descriptor?? [ 1298.462601][T20183] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1298.479072][T10538] port100 6-1:0.0: NFC: Could not get supported command types [ 1298.501002][T20191] syzkaller0: entered promiscuous mode [ 1298.511187][T20145] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1298.545369][T20145] usb 4-1: USB disconnect, device number 19 [ 1298.565571][T20191] syzkaller0: entered allmulticast mode [ 1298.907342][T20200] erofs (device nullb0): cannot find valid erofs superblock [ 1299.337285][T20143] usb 2-1: selecting invalid altsetting 0 [ 1299.359569][T20143] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1299.367071][T20143] uvcvideo 2-1:220.0: No valid video chain found. [ 1299.383998][T20143] usb 2-1: selecting invalid altsetting 0 [ 1299.389889][T20143] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 1299.403738][T20143] usb 2-1: USB disconnect, device number 10 [ 1299.484231][T20145] usb 6-1: USB disconnect, device number 106 [ 1299.957265][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1301.011343][T20214] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=20214 comm=syz.4.3252 [ 1301.207839][T20214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3252'. [ 1302.782258][T20145] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1302.942209][T20145] usb 5-1: Using ep0 maxpacket: 8 [ 1302.969401][T20145] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 1302.977837][T20145] usb 5-1: config 0 has no interface number 0 [ 1302.984499][T20145] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1302.996453][T20145] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1303.006681][T20145] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1303.019011][T20145] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1303.030247][T20145] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1303.045564][T20145] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1303.054842][T20145] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1303.062925][T20145] usb 5-1: Product: syz [ 1303.067157][T20145] usb 5-1: Manufacturer: syz [ 1303.071779][T20145] usb 5-1: SerialNumber: syz [ 1303.081045][T20145] usb 5-1: config 0 descriptor?? [ 1303.311829][T20145] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 1303.342371][T20145] usb 5-1: USB disconnect, device number 25 [ 1304.213416][T20230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3257'. [ 1307.057887][ T30] audit: type=1400 audit(1776926718.836:689): avc: denied { read } for pid=20235 comm="syz.4.3258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1307.121277][ T30] audit: type=1400 audit(1776926718.896:690): avc: denied { accept } for pid=20235 comm="syz.4.3258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1307.347235][T20251] /dev/nullb0: Can't open blockdev [ 1308.165107][T20248] tun1: tun_chr_ioctl cmd 1074025675 [ 1308.196432][T20248] tun1: persist enabled [ 1308.441213][T20261] syz.3.3264 (20261): /proc/20257/oom_adj is deprecated, please use /proc/20257/oom_score_adj instead. [ 1308.527928][T20145] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1308.624892][T20264] netlink: 'syz.5.3261': attribute type 2 has an invalid length. [ 1308.641534][T20266] tun10: tun_chr_ioctl cmd 1074025675 [ 1308.647334][T20266] tun10: persist enabled [ 1308.667857][T20266] tun10: tun_chr_ioctl cmd 1074025675 [ 1308.674483][T20266] tun10: persist disabled [ 1308.967376][T20145] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1308.999403][T20145] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1309.049916][T20145] usb 3-1: config 220 has no interface number 2 [ 1309.071455][T20145] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1309.123483][T20145] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1309.144063][T20145] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1309.165933][T20145] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1309.192953][T20145] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1309.220572][T20145] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.260419][T20145] usb 3-1: Product: syz [ 1309.275699][T20145] usb 3-1: Manufacturer: syz [ 1309.299219][T20145] usb 3-1: SerialNumber: syz [ 1309.535419][T20269] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1309.597384][T20270] team0: Unable to change to the same mode the team is in [ 1309.872417][T10538] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1310.112590][T10538] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1310.125497][T10538] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 1310.138412][T10538] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1310.149250][T10538] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1310.176367][T10538] usb 5-1: config 0 descriptor?? [ 1310.205389][T20281] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3268'. [ 1311.062004][T20280] tun2: tun_chr_ioctl cmd 1074025675 [ 1311.067547][T20280] tun2: persist enabled [ 1311.078120][T20280] tun2: tun_chr_ioctl cmd 1074025675 [ 1311.084190][T20280] tun2: persist disabled [ 1311.313919][T20145] usb 3-1: selecting invalid altsetting 0 [ 1311.370490][T10538] ath6kl: Failed to submit usb control message: -71 [ 1311.370944][T20145] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1311.401207][T10538] ath6kl: unable to send the bmi data to the device: -71 [ 1311.716959][T20145] uvcvideo 3-1:220.0: No valid video chain found. [ 1311.733158][T10538] ath6kl: Unable to send get target info: -71 [ 1311.762241][T10538] ath6kl: Failed to init ath6kl core: -71 [ 1311.773205][T10538] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1311.801017][T20143] libceph: connect (1)[c::]:6789 error -13 [ 1311.814201][T10538] usb 5-1: USB disconnect, device number 26 [ 1311.844930][T20143] libceph: mon0 (1)[c::]:6789 connect error [ 1311.898847][T20145] usb 3-1: selecting invalid altsetting 0 [ 1311.906136][T20145] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 1311.936925][T20145] usb 3-1: USB disconnect, device number 22 [ 1312.122431][T20143] libceph: connect (1)[c::]:6789 error -13 [ 1312.133070][T20143] libceph: mon0 (1)[c::]:6789 connect error [ 1312.146268][T20288] ceph: No mds server is up or the cluster is laggy [ 1312.285018][T20145] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1312.482756][T20145] usb 3-1: Using ep0 maxpacket: 16 [ 1312.491652][T20145] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1312.523023][T20145] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1312.555067][T20145] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1312.581208][T20145] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1312.647743][T20313] ptrace attach of "./syz-executor exec"[18729] was attempted by ""[20313] [ 1312.755808][T20145] usb 3-1: config 0 descriptor?? [ 1313.076791][T20308] bond1: down delay (2) is not a multiple of miimon (100), value rounded to 0 ms [ 1313.135725][T20312] [ 1313.138109][T20312] ====================================================== [ 1313.145117][T20312] WARNING: possible circular locking dependency detected [ 1313.152151][T20312] syzkaller #0 Tainted: G L [ 1313.158121][T20312] ------------------------------------------------------ [ 1313.165122][T20312] syz.5.3277/20312 is trying to acquire lock: [ 1313.171178][T20312] ffff88801c6bfa10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: __kernfs_remove+0x183/0xb80 [ 1313.181362][T20312] [ 1313.181362][T20312] but task is already holding lock: [ 1313.188827][T20312] ffff88801c6bf980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x51/0x120 [ 1313.199555][T20312] [ 1313.199555][T20312] which lock already depends on the new lock. [ 1313.199555][T20312] [ 1313.210600][T20312] [ 1313.210600][T20312] the existing dependency chain (in reverse order) is: [ 1313.219982][T20312] [ 1313.219982][T20312] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 1313.228173][T20312] down_write+0x8b/0x1f0 [ 1313.233089][T20312] kernfs_add_one+0x38/0x850 [ 1313.238487][T20312] kernfs_create_dir_ns+0xfc/0x1a0 [ 1313.244650][T20312] internal_create_group+0x36f/0xf40 [ 1313.250454][T20312] cpuhp_invoke_callback+0x3ab/0x9a0 [ 1313.256300][T20312] cpuhp_issue_call+0x1b8/0x970 [ 1313.261711][T20312] __cpuhp_setup_state_cpuslocked+0x431/0x880 [ 1313.268371][T20312] __cpuhp_setup_state+0xf4/0x300 [ 1313.273979][T20312] do_one_initcall+0x121/0x750 [ 1313.279289][T20312] kernel_init_freeable+0x6ea/0x7b0 [ 1313.285460][T20312] kernel_init+0x1f/0x1e0 [ 1313.290401][T20312] ret_from_fork+0x72b/0xd50 [ 1313.295547][T20312] ret_from_fork_asm+0x1a/0x30 [ 1313.300842][T20312] [ 1313.300842][T20312] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 1313.308659][T20312] [ 1313.308659][T20312] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 1313.316480][T20312] cpus_read_lock+0x42/0x170 [ 1313.321601][T20312] static_key_disable+0x12/0x20 [ 1313.326966][T20312] __inet_hash_connect+0x143e/0x2000 [ 1313.332796][T20312] tcp_v4_connect+0xeb3/0x1b40 [ 1313.338199][T20312] __inet_stream_connect+0x208/0xfa0 [ 1313.344194][T20312] inet_stream_connect+0x57/0xa0 [ 1313.349661][T20312] __sys_connect_file+0x141/0x1a0 [ 1313.355213][T20312] __sys_connect+0x141/0x170 [ 1313.360346][T20312] __x64_sys_connect+0x72/0xb0 [ 1313.365637][T20312] do_syscall_64+0x10b/0xf80 [ 1313.370756][T20312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1313.377743][T20312] [ 1313.377743][T20312] -> #7 (sk_lock-AF_INET){+.+.}-{0:0}: [ 1313.385757][T20312] lock_sock_nested+0x41/0xf0 [ 1313.391329][T20312] inet_shutdown+0x67/0x410 [ 1313.397418][T20312] nbd_mark_nsock_dead+0xae/0x5c0 [ 1313.403549][T20312] recv_work+0x5fb/0x8c0 [ 1313.408532][T20312] process_one_work+0xa0e/0x1980 [ 1313.414889][T20312] worker_thread+0x5ef/0xe50 [ 1313.420102][T20312] kthread+0x370/0x450 [ 1313.424685][T20312] ret_from_fork+0x72b/0xd50 [ 1313.429825][T20312] ret_from_fork_asm+0x1a/0x30 [ 1313.436020][T20312] [ 1313.436020][T20312] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 1313.444579][T20312] __mutex_lock+0x1a4/0x1b10 [ 1313.449977][T20312] nbd_queue_rq+0x428/0x1080 [ 1313.456078][T20312] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 1313.462162][T20312] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 1313.469103][T20312] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 1313.475604][T20312] blk_mq_run_hw_queue+0x23c/0x670 [ 1313.481231][T20312] blk_mq_dispatch_list+0x51d/0x1360 [ 1313.487124][T20312] blk_mq_flush_plug_list+0x130/0x600 [ 1313.493447][T20312] __blk_flush_plug+0x2c4/0x4b0 [ 1313.499158][T20312] __submit_bio+0x584/0x6c0 [ 1313.504172][T20312] submit_bio_noacct_nocheck+0x543/0xbf0 [ 1313.510318][T20312] submit_bio_noacct+0xd18/0x2000 [ 1313.516029][T20312] submit_bh_wbc+0x681/0x890 [ 1313.521135][T20312] block_read_full_folio+0x4c8/0x8e0 [ 1313.527108][T20312] filemap_read_folio+0xfc/0x3b0 [ 1313.532818][T20312] do_read_cache_folio+0x2d7/0x6b0 [ 1313.539312][T20312] read_part_sector+0xd1/0x370 [ 1313.544592][T20312] adfspart_check_ICS+0x91/0x7d0 [ 1313.550048][T20312] bdev_disk_changed+0x7a3/0x1250 [ 1313.555587][T20312] blkdev_get_whole+0x187/0x290 [ 1313.560951][T20312] bdev_open+0x2c7/0xe40 [ 1313.565712][T20312] blkdev_open+0x34e/0x4f0 [ 1313.570665][T20312] do_dentry_open+0x6d8/0x1660 [ 1313.575955][T20312] vfs_open+0x82/0x3f0 [ 1313.580544][T20312] path_openat+0x208c/0x31a0 [ 1313.585650][T20312] do_file_open+0x20e/0x430 [ 1313.591707][T20312] do_sys_openat2+0x10d/0x1e0 [ 1313.597427][T20312] __x64_sys_openat+0x12d/0x210 [ 1313.602983][T20312] do_syscall_64+0x10b/0xf80 [ 1313.608270][T20312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1313.615197][T20312] [ 1313.615197][T20312] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 1313.622412][T20312] __mutex_lock+0x1a4/0x1b10 [ 1313.627635][T20312] nbd_queue_rq+0xba/0x1080 [ 1313.632664][T20312] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 1313.638741][T20312] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 1313.645596][T20312] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 1313.652534][T20312] blk_mq_run_hw_queue+0x23c/0x670 [ 1313.658164][T20312] blk_mq_dispatch_list+0x51d/0x1360 [ 1313.663967][T20312] blk_mq_flush_plug_list+0x130/0x600 [ 1313.669944][T20312] __blk_flush_plug+0x2c4/0x4b0 [ 1313.675312][T20312] __submit_bio+0x584/0x6c0 [ 1313.680339][T20312] submit_bio_noacct_nocheck+0x543/0xbf0 [ 1313.686500][T20312] submit_bio_noacct+0xd18/0x2000 [ 1313.692050][T20312] submit_bh_wbc+0x681/0x890 [ 1313.697167][T20312] block_read_full_folio+0x4c8/0x8e0 [ 1313.702965][T20312] filemap_read_folio+0xfc/0x3b0 [ 1313.708437][T20312] do_read_cache_folio+0x2d7/0x6b0 [ 1313.714071][T20312] read_part_sector+0xd1/0x370 [ 1313.719360][T20312] adfspart_check_ICS+0x91/0x7d0 [ 1313.724823][T20312] bdev_disk_changed+0x7a3/0x1250 [ 1313.730361][T20312] blkdev_get_whole+0x187/0x290 [ 1313.735726][T20312] bdev_open+0x2c7/0xe40 [ 1313.740482][T20312] blkdev_open+0x34e/0x4f0 [ 1313.745416][T20312] do_dentry_open+0x6d8/0x1660 [ 1313.750692][T20312] vfs_open+0x82/0x3f0 [ 1313.755289][T20312] path_openat+0x208c/0x31a0 [ 1313.760393][T20312] do_file_open+0x20e/0x430 [ 1313.765406][T20312] do_sys_openat2+0x10d/0x1e0 [ 1313.770610][T20312] __x64_sys_openat+0x12d/0x210 [ 1313.775977][T20312] do_syscall_64+0x10b/0xf80 [ 1313.781083][T20312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1313.787485][T20312] [ 1313.787485][T20312] -> #4 (set->srcu){.+.+}-{0:0}: [ 1313.794601][T20312] __synchronize_srcu+0xa2/0x300 [ 1313.800052][T20312] blk_mq_quiesce_queue+0x149/0x1c0 [ 1313.805762][T20312] elevator_switch+0x17b/0x7e0 [ 1313.811045][T20312] elevator_change+0x352/0x530 [ 1313.816324][T20312] elevator_set_default+0x29e/0x360 [ 1313.822049][T20312] blk_register_queue+0x48e/0x630 [ 1313.827605][T20312] __add_disk+0x73f/0xe40 [ 1313.832448][T20312] add_disk_fwnode+0x118/0x5c0 [ 1313.837730][T20312] nbd_dev_add+0x77a/0xb10 [ 1313.842668][T20312] nbd_init+0x291/0x2b0 [ 1313.847345][T20312] do_one_initcall+0x121/0x750 [ 1313.852632][T20312] kernel_init_freeable+0x6ea/0x7b0 [ 1313.858350][T20312] kernel_init+0x1f/0x1e0 [ 1313.863185][T20312] ret_from_fork+0x72b/0xd50 [ 1313.868287][T20312] ret_from_fork_asm+0x1a/0x30 [ 1313.873571][T20312] [ 1313.873571][T20312] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 1313.881379][T20312] __mutex_lock+0x1a4/0x1b10 [ 1313.886496][T20312] elevator_change+0x1bc/0x530 [ 1313.891773][T20312] elevator_set_none+0x92/0xf0 [ 1313.897048][T20312] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 1313.903384][T20312] nbd_start_device+0x1a6/0xbd0 [ 1313.908764][T20312] nbd_genl_connect+0xff2/0x1a40 [ 1313.914327][T20312] genl_family_rcv_msg_doit+0x214/0x300 [ 1313.920486][T20312] genl_rcv_msg+0x560/0x800 [ 1313.925511][T20312] netlink_rcv_skb+0x159/0x420 [ 1313.930789][T20312] genl_rcv+0x28/0x40 [ 1313.935285][T20312] netlink_unicast+0x585/0x850 [ 1313.940569][T20312] netlink_sendmsg+0x8b0/0xda0 [ 1313.945853][T20312] ____sys_sendmsg+0x9e1/0xb70 [ 1313.951142][T20312] ___sys_sendmsg+0x190/0x1e0 [ 1313.956332][T20312] __sys_sendmsg+0x170/0x220 [ 1313.961443][T20312] do_syscall_64+0x10b/0xf80 [ 1313.966551][T20312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1313.972954][T20312] [ 1313.972954][T20312] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 1313.981554][T20312] blk_alloc_queue+0x610/0x790 [ 1313.986865][T20312] blk_mq_alloc_queue+0x174/0x290 [ 1313.992395][T20312] __blk_mq_alloc_disk+0x29/0x120 [ 1313.997925][T20312] nbd_dev_add+0x492/0xb10 [ 1314.002888][T20312] nbd_init+0x291/0x2b0 [ 1314.007559][T20312] do_one_initcall+0x121/0x750 [ 1314.012839][T20312] kernel_init_freeable+0x6ea/0x7b0 [ 1314.018554][T20312] kernel_init+0x1f/0x1e0 [ 1314.023390][T20312] ret_from_fork+0x72b/0xd50 [ 1314.028497][T20312] ret_from_fork_asm+0x1a/0x30 [ 1314.033805][T20312] [ 1314.033805][T20312] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1314.041005][T20312] fs_reclaim_acquire+0xc4/0x100 [ 1314.046450][T20312] kmem_cache_alloc_noprof+0x4c/0x6e0 [ 1314.052343][T20312] __kernfs_iattrs+0x124/0x3e0 [ 1314.057619][T20312] __kernfs_setattr+0x4d/0x3c0 [ 1314.062891][T20312] kernfs_iop_setattr+0xda/0x130 [ 1314.068339][T20312] notify_change+0xb25/0x1330 [ 1314.073531][T20312] do_truncate+0x1df/0x240 [ 1314.078460][T20312] path_openat+0x2a55/0x31a0 [ 1314.083565][T20312] do_file_open+0x20e/0x430 [ 1314.088578][T20312] do_sys_openat2+0x10d/0x1e0 [ 1314.093770][T20312] __x64_sys_openat+0x12d/0x210 [ 1314.099135][T20312] do_syscall_64+0x10b/0xf80 [ 1314.104243][T20312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1314.110646][T20312] [ 1314.110646][T20312] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 1314.119146][T20312] __lock_acquire+0x14b8/0x2630 [ 1314.124510][T20312] lock_acquire+0x1b1/0x370 [ 1314.129522][T20312] down_write+0x8b/0x1f0 [ 1314.134281][T20312] __kernfs_remove+0x183/0xb80 [ 1314.139566][T20312] kernfs_remove_by_name_ns+0x7c/0x120 [ 1314.145628][T20312] device_release_driver_internal+0x418/0x620 [ 1314.152250][T20312] usb_driver_release_interface+0x10e/0x190 [ 1314.158655][T20312] proc_disconnect_claim+0x21b/0x390 [ 1314.164455][T20312] usbdev_ioctl+0xbf5/0x3aa0 [ 1314.169562][T20312] __x64_sys_ioctl+0x18e/0x210 [ 1314.174835][T20312] do_syscall_64+0x10b/0xf80 [ 1314.179939][T20312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1314.186337][T20312] [ 1314.186337][T20312] other info that might help us debug this: [ 1314.186337][T20312] [ 1314.196542][T20312] Chain exists of: [ 1314.196542][T20312] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 1314.196542][T20312] [ 1314.210953][T20312] Possible unsafe locking scenario: [ 1314.210953][T20312] [ 1314.218387][T20312] CPU0 CPU1 [ 1314.223731][T20312] ---- ---- [ 1314.229076][T20312] lock(&root->kernfs_rwsem); [ 1314.233827][T20312] lock(cpuhp_state_mutex); [ 1314.240922][T20312] lock(&root->kernfs_rwsem); [ 1314.248189][T20312] lock(&root->kernfs_iattr_rwsem); [ 1314.253459][T20312] [ 1314.253459][T20312] *** DEADLOCK *** [ 1314.253459][T20312] [ 1314.261601][T20312] 4 locks held by syz.5.3277/20312: [ 1314.266780][T20312] #0: ffff88802b8601d8 (&dev->mutex){....}-{4:4}, at: usbdev_ioctl+0x1a7/0x3aa0 [ 1314.275921][T20312] #1: ffff88802b9231a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 1314.286455][T20312] #2: ffff88801c6bfaa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x49/0x120 [ 1314.297769][T20312] #3: ffff88801c6bf980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x51/0x120 [ 1314.308476][T20312] [ 1314.308476][T20312] stack backtrace: [ 1314.314354][T20312] CPU: 1 UID: 0 PID: 20312 Comm: syz.5.3277 Tainted: G L syzkaller #0 PREEMPT(full) [ 1314.314383][T20312] Tainted: [L]=SOFTLOCKUP [ 1314.314390][T20312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1314.314403][T20312] Call Trace: [ 1314.314411][T20312] [ 1314.314419][T20312] dump_stack_lvl+0x100/0x190 [ 1314.314444][T20312] print_circular_bug.cold+0x178/0x1c7 [ 1314.314480][T20312] check_noncircular+0x146/0x160 [ 1314.314508][T20312] __lock_acquire+0x14b8/0x2630 [ 1314.314534][T20312] ? __lock_acquire+0x4a5/0x2630 [ 1314.314560][T20312] lock_acquire+0x1b1/0x370 [ 1314.314583][T20312] ? __kernfs_remove+0x183/0xb80 [ 1314.314609][T20312] ? __pfx___might_resched+0x10/0x10 [ 1314.314639][T20312] down_write+0x8b/0x1f0 [ 1314.314669][T20312] ? __kernfs_remove+0x183/0xb80 [ 1314.314693][T20312] ? __pfx_down_write+0x10/0x10 [ 1314.314724][T20312] __kernfs_remove+0x183/0xb80 [ 1314.314750][T20312] ? kernfs_find_ns+0x33e/0x600 [ 1314.314775][T20312] kernfs_remove_by_name_ns+0x7c/0x120 [ 1314.314804][T20312] device_release_driver_internal+0x418/0x620 [ 1314.314838][T20312] usb_driver_release_interface+0x10e/0x190 [ 1314.314862][T20312] proc_disconnect_claim+0x21b/0x390 [ 1314.314886][T20312] ? __pfx_proc_disconnect_claim+0x10/0x10 [ 1314.314920][T20312] ? find_held_lock+0x2b/0x80 [ 1314.314942][T20312] usbdev_ioctl+0xbf5/0x3aa0 [ 1314.314968][T20312] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1314.314995][T20312] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1314.315019][T20312] ? do_vfs_ioctl+0x226/0x13e0 [ 1314.315039][T20312] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1314.315058][T20312] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1314.315089][T20312] ? __fget_files+0x215/0x3d0 [ 1314.315111][T20312] ? hook_file_ioctl_common+0x149/0x410 [ 1314.315141][T20312] ? selinux_file_ioctl+0x13b/0x290 [ 1314.315163][T20312] ? selinux_file_ioctl+0xb6/0x290 [ 1314.315185][T20312] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1314.315210][T20312] __x64_sys_ioctl+0x18e/0x210 [ 1314.315231][T20312] do_syscall_64+0x10b/0xf80 [ 1314.315259][T20312] ? clear_bhb_loop+0x40/0x90 [ 1314.315281][T20312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1314.315302][T20312] RIP: 0033:0x7f9958d9c819 [ 1314.315319][T20312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1314.315340][T20312] RSP: 002b:00007f9959c27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1314.315359][T20312] RAX: ffffffffffffffda RBX: 00007f9959016180 RCX: 00007f9958d9c819 [ 1314.315373][T20312] RDX: 0000200000000140 RSI: 000000008108551b RDI: 0000000000000005 [ 1314.315386][T20312] RBP: 00007f9958e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1314.315399][T20312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1314.315411][T20312] R13: 00007f9959016218 R14: 00007f9959016180 R15: 00007ffe7d788d68 [ 1314.315432][T20312] [ 1314.608216][T20318] netlink: 'syz.3.3278': attribute type 2 has an invalid length. [ 1314.885605][ T30] audit: type=1400 audit(1776926726.666:691): avc: denied { read open } for pid=20291 comm="syz.2.3271" path="/" dev="configfs" ino=74 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1316.148033][T20145] usbhid 3-1:0.0: can't add hid device: -71 [ 1316.155068][T20145] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1316.166515][T20145] usb 3-1: USB disconnect, device number 23