last executing test programs: 16.93014255s ago: executing program 1 (id=2546): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) lsetxattr$security_capability(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x20, &(0x7f0000000400)={[{@uuid_on}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@measure}, {@obj_type}, {@fowner_gt}]}) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) waitid(0x2, 0xffffffffffffffff, 0x0, 0x8, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = landlock_create_ruleset(0x0, 0x0, 0x2) landlock_restrict_self(r3, 0x9) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x80540, 0x100) mkdirat(r4, &(0x7f0000000240)='.\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r7, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r5}, 0x20) sendmmsg$inet6(r5, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="50558c", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000300)="8c280d9a2f3bf93796f8f2313ba5abcdc2452ca8f824d754c0a04f490b166c50a903b07af82590baf1d06057d3e53bffa51a86190ae729b9cf6a74e82690e52aea7af3e6b7468f6ae0748fdb51d3f08fbb285aea2f5077decb1f453397368597b4476bdc864ad3e98b8be94b"}, {&(0x7f0000000580)="f9e4400875be581ea28bd499a7325e7c2ce24684672a8c10eb87fb97c75bf1ed6d172b5bf40fd9c0ec5a38c283094822e8cb823f817b9c6c09e47624e22bf81d6a48fc183054ec77f2f81e601cf893bc189c738d7aaf92065a8009d928b608df8125ba09f33a839bb7d68e8421379f04aef8a5f5bbbc5a0bdb6c04c4fad707b927e2dca0e87cc7d812246cc9ca8d3f32381e12f395b4303e058c1485dbf19a86dafa4557f9c087800d9b1156801b83bdc17f84eca627016fd5d6296eee311cd9a6c85184cacd608363a7e959021883cf7664"}, {&(0x7f0000000880)="cb9a38cbb9a10a87d03283dd04baab2df5e9894d1c578d2696ce716526fcb82a7cfd30c1bc0315580d9a33033eda4d7e77e3e7a5db7eb8272ce603045142a840fcc5d1a18fc81cfe47e529a4478ae82246d4fe80df809599f46a87520007d54cb7f845f135674d1e948425473d6817adf32f579d5f537dcd9cbcdeed8b5c33e2f6187a349fdaf5108e9c57b2f81bd4316baff68ca4430e419c43419370cca8251d2027d12f3e001921d963c97469678bbcf27760162d8a9b6ab67a9609e142bc1bf0f5785694b4fe630050666aa61fe25002f8f8847ead9f6f9dade23779d3bf98e1ece92fde66bfe121b7754e6800348defc01c39"}, {&(0x7f0000000bc0)="4b4688e5d660d1134b1be55885a5a462a906920bc7e9186578286fe0d05726403ce29e10051155db68ef211f450f89c8cc429b34ab52a4b04e5351f0620b4c206e79eadc06ef5546a4089ed8763cd58c0c68e5a91ed85bb327257fa00b04b0428f2d10141e3a71a069d53edff46e5ce76de4f9437b5af1049c2fd710117a9ae455191cd98ea9449df7c618e328489f43f86fb6c32d94d2f13a15bb06093982276f0ac83af87d83febe7b9b7d883c0b693389b158bfcbc0b7ffde0d820af1c20a6144c22f4cb3ebe32729fc5bd73a10b5938820c292221196a993e3ed96b6b0ad911f18edd9f720ce74565d78015da763a84f1ed39d406d0d433499c377b4009d5ee6cfb01a4424bd8f98cb2d20fd23c9d7046e6bc277484ddb242e0ac44f6f32a2db3eb11eba7fcd95b72dfcf5563218dbc2bc99555d0b1662e9fcbd309b90a44c89031bb897f9ccb2be29281ad0fa7d3d471fb32d8ab922a7286c45c2d03eee10dcde49eb2ece274d5ff03841158c8175130a14ceca68678af2235b368295f3b5df4a1f3f34846d01ccf1931326d3a87f891d5bb4dc28bc80df6cf461e16fcc2afc730705d6d4cfb70cb64bce2637c90d98ae0fc5e1a0c9d2bcfb7bfe1dd600d3bbdcb15f941877b044d043e95710578f868b00976361df137fc65baf5508ac727175ac1fc50408af23c782c88bc73f49e9d11108ae298b7d6ae301bc109f43a6e9e38f9f46668b2d6b05c80178cd2177c1b0431a82cfe1af07f9e15aab998e7f519a774c0434643ed09c849e794dd332f242a9573d9cd0d08eb0b17aa2f6a1b589a5f313281da3f84fd32c9b965b71c503fe5284b9cc86bb72da62510c9f45c4c52df613ff9e053d8d80f1eb6633e7f4a3e7a6330494464fbd40c1906856c8631423102624a6d057ab11686ac04b61355113f672e4e4d3c053bd539f604741226966234a0a22cdc51eb7e330376e7c340fa692df6189fcf537acc24f7f68c7f71dadcd4a3681099f119bf0ea5a0443e4cdfe580b5099b4a78854e1be833b6671ac601aaadc0158a52c62efa44f99011c2835a340f1b73f1d6a2ad1bc4bb336491123ca8f8bace70619e86c3dc879d2cd5742a25b60fe66693bed0fbac4832e6539f1fcf70665f70aab62d01c6a602c17a0132d9a5e9addf721be333a4f26dff24bdf1ca1770b11272d07b10f21059ef1d45c4234803660d791124be09c34b95894b31996a8765b1f869ffb6075d6774a3231ef6d5c4d79296b9744405b98d5c333540660b3d12afe7cb93518c281328b20ad796d313b09ba53684204fa6497eb396ccb8d6cb19791ea7bd72499de8489411d94ae042cc9f5316479b46f257f58135991c1ad88d65be670eed8db01deda01327c98b29d0bfcc26dd2727f4db9222fed3e8c90be9b81981c6808912cbbef8e0715f6d29981381220c3d1141cc3fd8f2f3a7914c06f4bd4b6f8f7f315c0cff721e9ab2f557fa40294e68a14c84d8daa09a23773d8aeaa397ed667cb1c13b5f139886058e57976d00712252417d29e8c4c32f39f664a01bfa487bf018e6fc8c45ce8caca02897c0b2ec3c2ae65ac88d463fb889b0b64ccdd5a14c3aebdac7b08d8ce9b668926621868faa6f90355c8e5aa7ef4a2c08b4ac5f035be8e2ecbc706dcab43fd84a1b8ae2e33d70f6436bb3014c1a28bd533588d8003d95f6c2a9aea8bf0845af26d096b4ccde4c4dfa34ab63830934c096a5675224fe0e7561a2340b98d9555f4d7939ba800572ea464f2fd1158a03e83f5b70e2bd793bde1830b36255f2271637fee3febbbc94fd24e2455b2511f189f5ea0eff651fb3f9051d3a4210f9c0210b5a6f896057860bb0cde7cc56b1f2c39f49040f27e418f57ad1a8c0214f3d0277f37ff1b3c5aa3318dbf150be46561b18ba5d9bfab62be2633fbd3308d24aade84b52b9060d27237d781ec8eeb7476b209a264776c8c3b813204cb76be5b8602749fb9ed14d947dc23e56c04d0d4015d93d2c5e8856507251af6db1244dc8f7fb7ac08f92a84e46d2016a7227d224f0fabcec0603e55ddae550b17734941d8ebacc46bd8619f0e19c4bf4e032299fbb512f3a967ad42ba3b29d57ba6a68ce0c632d6edba63ab79bc1a4d77461a416780f2544cd1c0c2d8602f85a0767f8adb473e491f5030d2f754ccbc7701b3ccd408f5696a171055a8d45c9041e961564ce195900469aac020bfe9642d35e3bd24d86c9b16e76ee1793e950e10f85d1dbd3835b6fd1364fd8f487adc08ca8fa5b16ba817536823cd865e201cc72b02b6fee3ea9dc59c91c07e8123c32a0ea9a2e51a2a586b248754e83306cfa2d5391bc9f6560b374b018054890fdd0e6dad323335acae1e8f54e0f55a91151ff56529b97ad464d9d80ea97ddac3a7430e05e443d98176518fb82c125436e5728fec4825d88bb7fd8322ecba8a37296e13fbe44d3cb78a1e7f9c0f5dba94cd971c9e882221182a5ca40da64610030e7ff99a484d6b10f8c62278f1d944842029238a18c50939a18280a8d0270f1c5f9961180a5f0ea0cbc9232a903f22efb74868860dbe411260b637fbd4344b1e13c8727cae5fb6380ab3544a91173ae22a1ebacb39b1fb6c0843173e9d85de30921f69999ca1b2ef43e2d5a622df1254b00268ed00083159e7030e3172a0d48375ce184a1a565d83da941798d151cf54c8e53aaaacb39bc022ef709ce80ff41183940df56654bd8697feb58d90d802a49bdf22617e59b26dacc95ae9f811831aa720035bc6db441fad24853accd0b1d597d7d033b0c2c88eac07b1622a64e9d522735e0463fa2f7bf02f69105e6eed8f02a02d6e82e6c2dc71783358e4ec81a001d268f1a0e6b6f3de13e10914cc6106df21c4d629c8041819f2f0a75d5ffa5a2b42a646d92771d7f901c1d5867e7c1a33d2e2a2f1f60cd30ba42bc339a904e13ebb6b0182c3d135bcc76379b50f5e209ab96ffe5d74928c25c516ffc34e31885a7139fc33b9a44fb8d904da17feb463d0099ef374e4dffb0f9412a89e76accfcbb2b634c109fd9bc4ff1363da46fc64c45f2f6f96fceced88433ed7b9903a3482fdc8f8ce852037d7095e511526a403227bf22bb29e8a7484aa62b31cd952dfac666fc813e902cac014ec286f56319fe1d222ba5aaac5e2e54ab545b84ef37400a5817318caed21fad18f054a5d6ab978f8ac79cd59503ab23c31ea64e77dca9d704e5fa2b89370fa01cd134e3f7e96c0f63792aa1aba1acdb6218b87ef900849ee26a81a03497b69a9aa1db9b295dfccbb2fee6bb2b228d57c24ad9010b5a68946cec7f02eae97f28a413b21f43dd1795b5af323a3dcfc9161d50ac0c5136da09454b74cc9858b53483e08d907d252b17dfb51c13cf245d23982d501261a13fd3122a9528384abc532bfa2e7c06663183339c3f3021c5e51fbfae79825650f2d37dcddce4d34f6a1dc8dd0eef47365523dc901a9caf1287aee48fbd6f45637228b148fcc658ecd575a5084922e2e03e114546fd14443eacdcf465fc844d9a76efa1d3d11b72d9f76fce2869788a3bb5a3b4f2d26b38b0f106a6d77153f6fee4d85ed12ce8be0e83868c9c2c3668c19aac0d1ccb95525403a54eac525d15925b7c452fe6def39683f53f1ee5b38c427e01a21d76be292f6821b0bd581a388b8522bc092e99a2ea3573f8c821c7d9fb847b6b550aeb20a1f0f26e32527a2943ea4e14cfadada97bb0f736aead621ccf28e656a7e8050e29e7d43ef9b68d461fe9558c3d5793314eb47930e08537e414ee6dfd4139f5f578f4ff1f5f84beca1a41e8334bb87c438d826b575aff7f646ffc99c36395261d95abcb7dc501e207ccdd68c39fcbb4e1aaa027fc95ffa8b572740c17f8973ac619d626902eefb3efef9b597491579cfe007e9e03320a6c5a89e079d69b339fda5b5e3b5d49b17d2bc25b923331eb246ea63196ebc839db942926940b0a0b1580064929b1be59c154538801988e5b5bb1fe555277c5a1b57703bf8da7faca833d11fb2f499a93c4fadc5cd628e39a258038cc812215633ec5c00b0ffa48dec3ad5e1df8929f16a9a483c289516570942230420dc3a3165a5395435db73f71495f5657131fef2d9662a16e0b50d8581cacc4c472861a94efdb32ebac4472f882b5ce9686b419f190925ca95b4a7c4414ef64a1a912c16ec89be1aff7877585f63c0ca39fbbf35750a63e6931e548203d7ed2da2fac0b558f1732d4bd2defb39ad94ede38554ca86149e5458626bd20df75727d0210ceaaf61a2162dee5b3c18952d3103e3c7cb460bd4d5d5e37b38016ef447927186c38f8a370f628325dde8a46f6552626a9377f4f0651d7ecf7d05402558bee320ae14ca19274dd489592af9a5ecb59c87459ef5ffde3515189064d6d2481b957a3031df0b07001d90b4ec2d6814f735893696a2daaa859d127319cc220e49a84bed58f6b4f3fcfa62cfad2e825d590ba25f02becbf11987dae1e64efd34b8621f5a2a9e8d0b31018c796714c14f6753fde24cd6b606597a5730cab6ceb429f4ee5d1db9c16c814a0556774b6d0570feb754b981c862fc4c725132f61ed03da4e5965741fdf24bfe9cd4d3e5766a7192962989b9ef08850fa7572e4e98db80f28ea849c76385342d750a316487a718c61958d65006c19a61a9e201506d54e77993bfc28c0b9e710c1dcd9adbc8b0ff6ec2a5e30c580e9b9b80e02b024e71e51bc1641ecf1b31279d08432967de88c1c1d21bed12c3cebf96ea02280a008fcce8bc2d0a4794067c9fc9518e0a8cb6feef319102ee04c52a333b43fbd7908282b4b927efd93444ea363ec3cb1a31b4aa648de7029e2f340c85df188bcc14d785d666beb673f9c3cc98338314b76db028510c5ba9d7645b6dbf3b2ed26ba0896188a930cea8d66605fe08436aa098ae3d53e658f866f6ea0297a20f989a508ee2aa2f1cf9f3d6fe3e704387e6275b90013c96bffc8158dea759831e9f9f31be93d23be4263de7a9cccc3e30828b370047c291a7b16e91f83adbf2b75827aea23844dd06e1946b063912ba0945c11ba74fa7ae09c926729fbcc58e21a587086babbf241a965639a3e07996b98dc0ef31f739e54779bd237493926f163a808eaea9ceab817d8f29f0bd1ad30297563c047294b40339df1c6aeaf7d8cac083511e2784b2c11c3afd66484f1124e76a3ce2e4ed47311be03e52c2bab44404f172f097ca12a2b11cc67d0996de091130b9c9730c1c05b3b5522fd9e4289859e7008846a3813e3ab5de6478fe74285c3a7f97bfeabf3fd2a8525b04187122108cafe15688403f4fac59f2e464674f3d1af8aa99840a32dbc4e5ef86185229d5e45b13f32096c05d8a8c89e034d3eb3260ef991190b487badc43412423fd09e7513f61f53620af6173da134240316903c62d1fa0f0989787aaf76852ac63ecff6491584c353e054bc718be9d599a61061bf279fe41e8aed3855ebfb288d0c507269c702485e22e0fdc4358a2099da17ac228a675c32682d18350c35267fdd45305aa237d0654768f447d8e7608c572a58934508de92996cd74489902c8303d2736dc21fda6516600371165f0cbfdddabe27934b269e6ffb475ea8513f398061412c086b1303a264c48bccecfa236b7a2e59efe787735842c3f7a0998b3416fffedbc024c7812ae1807ec3d9242db3c3c41405946e46f43dd7ee06578c47cf21c51f27e810042c0a5d488b287ba9b67e143948465ff7c4098c1e5fa481b63a557d3e95022bac08230904349402c6767a97f007db4dc8e1815575ddd"}]}}], 0x964e5bd57fa2540d, 0x20004810) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000840)={0x1c, 0x0, 0x20, 0x70bd26, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x400c844) close_range(r2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) 16.736510099s ago: executing program 1 (id=2547): r0 = socket$inet(0x2, 0x5, 0x0) shutdown(r0, 0x0) r1 = getpgrp(0x0) r2 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r2, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0xd27ffffe}, 0x4) r3 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setsig(r3, 0xa, 0x21) fcntl$setlease(r3, 0x400, 0x1) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close_range(r3, r4, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x70, r7, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x7b}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_HE_BSS_COLOR={0x10, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @acl_policy, @NL80211_ATTR_HE_BSS_COLOR={0xc, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x19}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0xa, 0x115, "37cdc5b689b3"}, @NL80211_ATTR_SOCKET_OWNER={0x4}]]}, 0x70}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) ioctl$HCIINQUIRY(r5, 0x800448d4, 0x0) syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x3, 0x1c}, &(0x7f0000000000), &(0x7f00000001c0), &(0x7f0000000180)) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, 0x0) r10 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6, 0x8000, 0x7, 0x2, 0x6, 0x4a, 0x9, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r10, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0003020000004203"]}, 0x0) syz_usb_control_io$uac3(r10, &(0x7f0000000100)={0xc, &(0x7f0000000c00)=ANY=[], 0x0}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000003000000000000000002000020000000"], 0x14}}, 0x80) 13.186290724s ago: executing program 1 (id=2556): socket$kcm(0x10, 0x2, 0x10) socket$inet6(0xa, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$mtd(&(0x7f0000000000), 0x492, 0x20800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x200, @local}, {0x2, 0x0, @broadcast}, 0x2, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x3}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r5, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2, 0x8000000000000000}) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x1000, 0x6, 0x158}, &(0x7f0000000500)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000040)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) r13 = syz_open_dev$video(&(0x7f0000000040), 0x7f, 0x0) ioctl$VIDIOC_S_FMT(r13, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x3, 0xd06, 0x49323159, 0x4, 0x4, 0x3, 0x3, 0xfeedcafe, 0x2, 0x2, 0x0, 0x7}}) syz_ublk_setup_queues(r12, r10, &(0x7f0000000180)={0x0, 0x1, 0x700, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x20000, 0x2100, 0x10000004, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xffffdffe, 0x351}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a75, 0x100, 0x8b, 0x1f0, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x66c7e65cbf3e4906, 0x2, 0x250, 0x0, r6}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r12, 0xc0107520, 0x0, 0x1000000000000, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4040) 12.152378082s ago: executing program 3 (id=2559): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) lseek(r0, 0x0, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0x9, 0x2000004, 0x810, r0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000800)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000940)={0x5, 0x10, 0xfa00, {&(0x7f0000000600), r1, 0x2}}, 0x18) socket$kcm(0x21, 0x2, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe8}}, 0x0) getpeername$netlink(r4, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 12.103049395s ago: executing program 0 (id=2560): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='veno', 0x4) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) fchmod(r2, 0x29) sendmmsg$inet(r0, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)="c4", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="73353fd6e7315070ffc4a180f31dbea5ca804ee0e2404ba73afac6a65dbbf120943aecdbc35f58d0983115058a64f262f7036d2d60001356bea34b08d472289f4267a72e513c4fa06e75657eaf8afa0a69aa185d22be7cb41046ccc4a23541614deb70df68d9af8e551c", 0x6a}, {&(0x7f0000000280)="5274a07d1d76e73485d1d3b0f615981d291293f22628632ee606356a1d75127581e56c649b484abcb01589ce5b65cb362fb0901ed2ff58d4ae07f96375da3093c086721cfb8534531f089dc519a97cb4b2cc4dc7c8026959f2931f325c6c7a629588e5301676d7bc528f31036bb59a5065", 0x71}], 0x2}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000580)="08fc831967420453e686ab6a532f6c08da9677cf3b410a205e416e37c1b2e42ea33acefea0961112d5700d6e82f718981a9364666c20e5d96f87b7031a6a9c350735801d7c0aff495071d50b028347caad8e00d51461d3d4cd20c25430d08a69c1da939dea52034a9977491c41ee800390c7ee82a49d6e40f987b377b9647e6d3ba0bb72e91e2ffbbb7342c8252b8f24fb407a135cfab0309e6259d5e1e8b44bcd1c0fd1efef965b2c528306823e2ba95488ab87dac040f4d3e70a96d589fcd5d46a5cb9440cf6", 0xc7}, {&(0x7f00000015c0)="aea09c6313bd02c92107fdd125882d226ff4bd1c", 0x14}], 0x2}}], 0x3, 0x4000001) 11.758869056s ago: executing program 3 (id=2561): prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) (async) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32) r4 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000001c0)={0x1d, r5}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000100)={@mcast1, 0x33, r5}) (async) shutdown(r3, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000480)=[@in6={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x7}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r6, 0x7}, 0x8) (async, rerun: 64) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (rerun: 64) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@fallback=r1, r2, 0x26}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f80)={{r7}, &(0x7f0000000f00), &(0x7f0000000f40)=r0}, 0x20) (async, rerun: 64) recvfrom(r1, 0x0, 0xb, 0x40, 0x0, 0x0) (rerun: 64) 11.735074075s ago: executing program 1 (id=2562): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@private2, 0x0, r3}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000040)={@private2, r3}, 0x14) r5 = open_tree(0xffffffffffffff9c, 0x0, 0x0) syz_usb_connect(0x2, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff0000000705810240000007050102"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) sendto$inet(r5, 0x0, 0x0, 0x10, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) socket$netlink(0x10, 0x3, 0x0) epoll_create(0x9) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/ttyUSB0\x00', 0x44002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010029bd7000fcdbdf2500000000", @ANYRES32=r3, @ANYBLOB="3a8d04005a1000000800040044"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 11.585478386s ago: executing program 0 (id=2563): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xded98e5f948a6a90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r2, 0x71, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001200)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x10, 0x0}}, 0x10) ioctl$XFS_IOC_INUMBERS(r0, 0x80405880, &(0x7f0000000040)={{0x2, 0x4, 0x7ff, 0x6, 0x40}}) 11.290702912s ago: executing program 0 (id=2564): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000560900a1004daf25cee2d5d1c1"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r1 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x5281, 0x800, 0xffffffee, 0x1df}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_usb_connect(0x6, 0x2d, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xc}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd8c}, 0x80) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='.', 0x1) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000380)={0x14, &(0x7f0000000240)={0x40, 0x22, 0xd5, {0xd5, 0x22, "70fa5a3289b62e28d38e43af9453571047420d2617a86b4a5b7923167df2c5698b12ab8fa67d0a4084b38a1ee78a703f213e5c211d150600223bbffa354fa40940b2893f1baf964a28da163750823e7e80dfce91d48e8797b2af1bfc07f3023cba1554785085e3a46389c7686d6c73fd47ffa48e200c2f2cda36b938b96cc966492a66602db0bb8c25823eebc69e3af3a13320969d236ba8eabcdf113c90d39fb362a450e612856ccb27ebd5b1a8eb2cfea8bc2c1d95ab3cd4b078671645a6065d0f3889ef61e8175fc276ebde2e0e17faa715"}}, &(0x7f0000000340)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x1c, &(0x7f00000003c0)={0x20, 0x12, 0xf, "73d44e6bf3593c8197a21a97a8f7fa"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x5f}}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x3}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x1) 10.643462548s ago: executing program 3 (id=2565): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000009060300f100100000000000050000400900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c0001c008000140e00040000c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) openat$kvm(0xffffffffffffff9c, 0x0, 0x80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) close_range(r3, 0xffffffffffffffff, 0x0) 9.338213806s ago: executing program 4 (id=2570): mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/os_desc/qw_sign\x00', 0x20801, 0x0) r1 = io_uring_setup(0x178e, &(0x7f0000000300)={0x0, 0xcd80, 0x8, 0xfffffffe, 0xc}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_print_times', 0x101a02, 0x0) sendfile(r2, r2, 0x0, 0x9) socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x2, 0x80805, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x8000000000000001, 0x80, 0x0, 0x800, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xfffffffffffffeff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xcb, 0x29, 0x1, {0x3, [{{0x8, 0x0, 0x1}, 0x7c, 0xff, 0x8, './config'}, {{0x1, 0x2, 0x1}, 0x5000000000000000, 0x3b, 0x8, './config'}, {{0x20, 0x4, 0x4}, 0x7, 0xff, 0x8, './config'}, {{0x0, 0x4}, 0x100000000, 0x97, 0x8, './config'}, {{0x2, 0x1, 0x6}, 0x3, 0x8, 0x8, './config'}, {{0x0, 0x0, 0x1}, 0x401, 0x7, 0x8, './config'}]}}, 0xcb) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000080), 0x10) close_range(r1, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0xffff, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc0}}}}}}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020500020a000000000000000000000003000600650000000002004e24ac14143d0000000000000000020001000000000000002e00000000000300030033a0000002004e23ac1414bb0000000000000000"], 0x50}, 0x1, 0x7}, 0x4000100) write(r0, &(0x7f0000000700)='.I', 0x2) 8.32336239s ago: executing program 4 (id=2571): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2, 0x0) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e24, @rand_addr=0x64010102}}, [0x2, 0x401, 0x100000000, 0x7, 0x8, 0x625a000000000, 0x1, 0x2, 0x1000, 0x7ff, 0x6, 0xa52b, 0xfffffffffffffffd, 0x100000000]}, &(0x7f0000000440)=0x100) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000480)={r3, 0xffff}, 0x8) 8.316768436s ago: executing program 2 (id=2572): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r1, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x64}}, 0x44) sendto$l2tp(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x28000080, 0x0, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="230100004106c540cd060f011bd50000000109022400010000800009040bfd023377610009050702001481400609058703"], 0x0) 8.059544091s ago: executing program 4 (id=2573): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x80) r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x44103, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x3, 0x2, 0x9, 0xffff, 0xb, 0x80000003, 0x100000000000b06c}, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/profiling', 0xc903, 0x115) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[], 0xec}, 0x1, 0x0, 0x0, 0x4008044}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x16ba82, 0x10) write$cgroup_int(r4, &(0x7f0000000180)=0xfe5f, 0x12) set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000100)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x2}) syz_open_procfs(0x0, &(0x7f00000190c0)='net/dev\x00') ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper, 0x1}) 6.974016797s ago: executing program 1 (id=2574): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x105341) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, 0x0) r2 = socket$inet6(0xa, 0x6, 0xfffffffe) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000000340)=""/1, 0x30}], 0x21}, 0xe75}], 0x3aa0, 0x60002000, 0x0) setsockopt$sock_int(r4, 0x1, 0x1d, &(0x7f0000000100)=0xfff, 0x4) syz_emit_ethernet(0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaabb0800450000780000000000119078000000000000000000004e200064907801ffffdd030000000100000056805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733467f517bd818d5a4a8d26ae61b4cbf1331ffc21d2e9bfb1eb3c03976ed837b6f876605ac29dcb96a8901e0711afb3db3"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x1b) r6 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8916, &(0x7f0000000000)={r6}) socket$nl_generic(0x10, 0x3, 0x10) 6.71606197s ago: executing program 4 (id=2575): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000280)={0x20, 0x6, 0x1, '!'}, 0x0, 0x0, 0x0, 0x0}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x0, @vifc_lcl_addr=@remote, @local}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x81, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 5.57054594s ago: executing program 0 (id=2576): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.198339357s ago: executing program 2 (id=2577): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = open(0x0, 0x202001, 0x182) fcntl$notify(r0, 0x402, 0x8000001c) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4000c1, 0x101) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x9, &(0x7f0000000040)=ANY=[], &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0}, 0x94) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x58, 0x0, 0x1, 0x70bd2a, 0x25dfdbf9, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x58}, 0x1, 0x400000000000000, 0x0, 0x4044890}, 0x4000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x1400, 0x48b, &(0x7f0000000000)={0x2, 'ip6gretap0\x00', 0x4}, 0x18) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r7, &(0x7f0000000100)='/e', 0x2) 4.062291042s ago: executing program 2 (id=2578): socket$inet_sctp(0x2, 0x1, 0x84) (async) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) socket$inet(0x2, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r8, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r6], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r9, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) (async) recvmmsg(r9, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0) (async) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) (async) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x1463, 0x40, 0x2, 0xb2, 0x0, r0}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4483, 0x10002, 0x401, 0x31c, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb904, 0x10, 0x1, 0x902c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x2, 0x40021a, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x46, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r4, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 3.844910754s ago: executing program 3 (id=2579): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) getpid() openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/mem_sleep', 0x122102, 0x0) syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000180), 0x2000090, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) writev(r3, &(0x7f0000000540)=[{&(0x7f0000000080)="30bbe6d8b7191e2c76d77785fec0a0efd2b53ea526b37b14fa9220db03d1fac0b73b0f0a21ce5280accc8896d93a880e8721fcb3230d3a1d1b35560762e8269b1bb2266c3feaf9c5b59aeae41b5fde2f28d891ffda7e94646233f4e80b9ff2507f07db3ee231cecc4f81c70d0c5a37b16e6b254ad7bd22e49ddb83263ace4aabe6b0937a16821b6895fc9850f484d076854903d422", 0x95}], 0x1) write$P9_RSTATu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x23d) 3.766420227s ago: executing program 2 (id=2580): socket$nl_rdma(0x10, 0x3, 0x14) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r0, r5, &(0x7f0000000800)={0x0, 0x1463, 0x10700, 0x2, 0xb5}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x100, 0x1, 0x31c, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3682, 0x10000, 0x1, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x10, 0x1, 0x902c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x2, 0x40021d}}], 0x4, &(0x7f0000001540)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r4, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x7ffffffff000, 0x0, 0x401d031, 0xffffffffffffffff, 0x0) 2.623858584s ago: executing program 4 (id=2581): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x5b) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmsg(r1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r1) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x3, @empty, 'veth0_macvtap\x00'}}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) preadv2(r3, &(0x7f00000005c0)=[{&(0x7f0000000080)=""/131, 0x83}, {&(0x7f0000000140)=""/170, 0xaa}, {&(0x7f0000000200)=""/153, 0x99}, {&(0x7f00000002c0)=""/219, 0xdb}, {&(0x7f00000003c0)=""/62, 0x3e}, {&(0x7f0000000400)=""/180, 0xb4}, {&(0x7f00000004c0)=""/73, 0x49}, {&(0x7f0000000540)=""/112, 0x70}], 0x8, 0x9, 0xffffffff, 0x1) 2.470872554s ago: executing program 3 (id=2582): mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/os_desc/qw_sign\x00', 0x20801, 0x0) r1 = io_uring_setup(0x178e, &(0x7f0000000300)={0x0, 0xcd80, 0x8, 0xfffffffe, 0xc}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_print_times', 0x101a02, 0x0) sendfile(r2, r2, 0x0, 0x9) socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x2, 0x80805, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x8000000000000001, 0x80, 0x0, 0x800, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xfffffffffffffeff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xcb, 0x29, 0x1, {0x3, [{{0x8, 0x0, 0x1}, 0x7c, 0xff, 0x8, './config'}, {{0x1, 0x2, 0x1}, 0x5000000000000000, 0x3b, 0x8, './config'}, {{0x20, 0x4, 0x4}, 0x7, 0xff, 0x8, './config'}, {{0x0, 0x4}, 0x100000000, 0x97, 0x8, './config'}, {{0x2, 0x1, 0x6}, 0x3, 0x8, 0x8, './config'}, {{0x0, 0x0, 0x1}, 0x401, 0x7, 0x8, './config'}]}}, 0xcb) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000080), 0x10) close_range(r1, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0xffff, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc0}}}}}}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020500020a000000000000000000000003000600650000000002004e24ac14143d0000000000000000020001000000000000002e00000000000300030033a0000002004e23ac1414bb0000000000000000"], 0x50}, 0x1, 0x7}, 0x4000100) write(r0, &(0x7f0000000700)='.I', 0x2) 1.493568622s ago: executing program 0 (id=2583): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x105341) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, 0x0) r2 = socket$inet6(0xa, 0x6, 0xfffffffe) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000000340)=""/1, 0x30}], 0x21}, 0xe75}], 0x3aa0, 0x60002000, 0x0) setsockopt$sock_int(r4, 0x1, 0x1d, &(0x7f0000000100)=0xfff, 0x4) syz_emit_ethernet(0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaabb0800450000780000000000119078000000000000000000004e200064907801ffffdd030000000100000056805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733467f517bd818d5a4a8d26ae61b4cbf1331ffc21d2e9bfb1eb3c03976ed837b6f876605ac29dcb96a8901e0711afb3db3"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x1b) r6 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8916, &(0x7f0000000000)={r6}) socket$nl_generic(0x10, 0x3, 0x10) 613.424532ms ago: executing program 1 (id=2584): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x50483}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x2003) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000280)) ioctl$TIOCEXCL(r5, 0x540c) syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f0000000440)=[{{&(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000340)=""/172, 0xac}], 0x1}, 0xb}], 0x1, 0x122, 0x0) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r8, 0x0) 229.892328ms ago: executing program 2 (id=2585): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000400)={0x23, 0x0, 0x7f, 0x8}, 0x10) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000000070000000040000900000082b0cfc4337965941538be09000000000600000070ff376fd50a000000007480a391793ba70d0000000000fdf7000000"], 0x40) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x7d3fbb17616ddd67}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x6, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40050}, 0x2044010) io_uring_enter(r1, 0xa96, 0xcc91, 0xa1, &(0x7f0000000380)={[0x9]}, 0x8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_PRE_FAULT_MEMORY(r1, 0xc040aed5, &(0x7f0000000300)={0x1000, 0x10000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000004c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x2c}}, 0x0) sendmmsg$sock(r0, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="c4540f2ac40de9b64b004a0c916a663e9f9f6e6c1edf695e8003792a666c087c0de6399140a804866eaf636e3a0a1752d2ca4bcbe49dd64bad125a77610cc65335b0c567bd68a5d3dfb7f08702a65aab652b9bc10471d147901f03f4a42386bfc6b8a2638865", 0x66}], 0x1, &(0x7f00000000c0)=[@mark={{0x14, 0x1, 0x24, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x10}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14}}], 0x60}}, {{&(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast1, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000001c0)="110a8336d5588b52ccdc8cf75ad7eda92843be70777562b6ef0a2ee4cdf830fa475a7f0ca2acce9504da43a2136b8f51803d6d4fd1ba21ba9fc775cc6140751d4148cbc5e3283dc21c5246ca5ff6d6eada3959007e697b02", 0x58}, {&(0x7f0000000240)="aaa0694b4c9e759341f683c0e80e9952dd5cb6dc2e84ad27d6e58bb1d756e72014d6d5920f43e0d6c3260f9f5c9c04ceeca030500bb09b72f501fe4fddc874fd41928c77a9163f9d65974700dc6bb3ae0b2bc6624032d21139684c6ac083097d2640905845da518866d74d5d391a4b22eb7656", 0x73}, {&(0x7f00000002c0)="3b933d3676838513e9bb172bdc1e820468a03f59792472bedb324a844aaedd9aa197c093a4fd9300f0e6de2d40eabff0ee8f60a6aca5ecb6c0db562b81382c5364bed7895c604dc56823bdf544d6a2232a0b76", 0x53}], 0x3, &(0x7f0000000380)=[@timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x30}}, {{&(0x7f0000000440)=@l2={0x1f, 0x3f5e, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xe714}, 0x80, &(0x7f00000026c0)=[{&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="2cc30476737cd7985df1484d78d84f9dd87adf485c0cabf27f17ba092ed298b8f814a1eb705efdd2beaf8680140f44172a18882789b11f", 0x37}, {&(0x7f0000001500)="157bf611bab7b25eb77bf8cbedc40bad3f577c8598c2065709e816aaaf23f26e70066b89bc72811b450bd9f7c18055cd675b18a431fcfe0b6074285968c31143260367ddb4a81d45cb9968bfe3d8a3ce77279e3f5f4c90f897c6c43f3755743609c953741b6f17e0c75a1d78f3f339869b8e898cbbbbd761efe15f90b85772c125a66b39e38d0beece08ae2d6dd2ce8860233884d5f97958918fcd5b55fdb89970ce0dd7c4ce40ea3e765dfc855324f634d29b88f3f54cf697874c2deac05cfe1511d5e77ecb48513d77c7b9acfd020276dba463d661c4f30037cafaadfab0daf111bed76f1ccef4e1c8de90e781798d0d8dff6fd7db57d9", 0xf8}, {&(0x7f0000001600)="b7dbbf25e16f73cdf3cea9a6", 0xc}, {&(0x7f0000001640)="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", 0x1000}, {&(0x7f0000002640)="5195073020271ce03af608c5e2c24b5249dfdcefcfa8c0092c25ed313030cd510db448533c5f9b21b667c654453a7904a375e6f5e4886de6a4809f61faeceb29c13d7535005b4040f578a6e2dd2fd2f540b0cb9188a273b385059107", 0x5c}], 0x6, &(0x7f0000002740)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x18}}, {{&(0x7f0000002780)=@nfc={0x27, r4, 0xffffffffffffffff, 0x4}, 0x80, &(0x7f00000028c0)=[{&(0x7f0000002800)="985ba5a9294b532b1040475d30b249545b7256c302bbfa90efd99868db1e51b5d6d1618b9836cef752f105e936ff8705e1edeb02e2d0b7045b61c2aac531c61ad53226bcf5582948a41aead4d33a01269647744cac85847a363855cf94562323e537444dcad92334c2c1a04ffee1e0ebf199c3fd85440dd49f2adae92943ab6e6358ce4b17526804c40c849204ce899b50698692", 0x94}], 0x1, &(0x7f0000002900)=[@mark={{0x14, 0x1, 0x24, 0xff}}], 0x18}}], 0x4, 0x4048001) 225.486684ms ago: executing program 3 (id=2586): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x47}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)="513b5a9c070000fb4842417c", 0xc}, {&(0x7f0000000240)="05a9", 0x2}], 0x2}, 0x40080) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x4, 0x4f88dce6, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./tracing\x00', 0x1fe) mount(0x0, 0x0, &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./tracing/dynamic_events\x00', &(0x7f0000000080)='tracefs\x00', 0x400, 0x0) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000000)) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1) syz_emit_ethernet(0x42, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000340000000000069078ac1e0101ac1414aa00004e21", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8002000490780000fe06e2d4c3d9fe06e2d4c3d93e74a667855139abbf785529bbed359e9b0fc965"], 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000080)='net/dev_mcast\x00') r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x9640, 0x0) read$dsp(r3, &(0x7f0000003200)=""/4088, 0x57d) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x5) read$FUSE(r2, &(0x7f0000002ec0)={0x2020}, 0x2020) pread64(r2, &(0x7f000001a240)=""/102385, 0x18ff1, 0x2a) syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107500500000102000109023c00010100a03209040000060000000007058e0240000007050e02400000070501024000000705030240000007058d0240000007050d0240"], 0x0) futex(&(0x7f0000000240)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r4, &(0x7f0000000100)='!:kprobes/', 0xa) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x100, 0x7, 0x2, 0x1004, 0xe, 0x5, 0x79, 0x3, 0x80008, 0x2, 0xffffffff, 0x1, 0x80000b, 0x1, 0x100, 0x101, 0xfffffffb, 0x9, 0x7f, 0x7fffffff, 0x0, 0xca9f, 0xfffffffe, 0x20001e58, 0xffffffff, 0xf39e, 0x7fffffff, 0x8, 0xa6b5, 0x0, 0xfffffff8, 0x2]}) socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x6, &(0x7f0000003d80)=0x6, 0x4) getsockopt$inet_tcp_int(r5, 0x6, 0x6, 0x0, &(0x7f00000044c0)) socket$tipc(0x1e, 0x5, 0x0) 142.490465ms ago: executing program 4 (id=2587): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) io_setup(0x6, &(0x7f0000000d80)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000500)='net/vlan/config\x00') preadv(r2, &(0x7f0000000480)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, 0xe, 0x4dc) pread64(r2, 0x0, 0x0, 0xfffff7ff8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x900, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r4, 0x4068aea3, &(0x7f0000000240)={0xdb, 0x0, 0x8}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x4ce183, 0x0) ioprio_set$pid(0x3, 0x0, 0x6000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x0) utimensat(r2, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340), 0x0) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) 25.879106ms ago: executing program 0 (id=2588): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0xf1, 0x64, 0x96, 0x40, 0x7c0, 0x158b, 0xd9d2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x40, 0x4, 0xe0, 0x1, "", [{{0x9, 0x4, 0x2c, 0x7, 0x1, 0xa7, 0x3a, 0x30, 0x6, [], [{{0x9, 0x5, 0x83, 0x3, 0x200, 0x39, 0x7, 0x9}}]}}]}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x256c, 0x6e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x10, 0x10, 0x6, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x2, 0x5, {0x9, 0x21, 0xb5, 0x5, 0x1, {0x22, 0xa17}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x14, 0x17, 0xad}}}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0xa, 0x9, 0x1, 0x8, 0x80}, 0x2e, &(0x7f0000000080)={0x5, 0xf, 0x2e, 0x3, [@wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x4, 0x6, 0x4, 0xf0}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "08de77c765c50b5b264487a5a1a36be5"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x4, 0x8, 0x400}]}, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x3001}}, {0x5d, &(0x7f0000000140)=@string={0x5d, 0x3, "d05e0b81042ff0df2c97fbffde2ed939b603d783bf8b6ff8761813c6670d8dcfa6518bd28ee4857b37f429330f82811d48cacedc641f36b2f4d2820b574c921dcf52f9e11aa954768958b98669736d5fcc2909ec44f39b6bdc3379"}}]}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1a1}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_open_dev$evdev(0x0, 0x2, 0x963b01) 0s ago: executing program 2 (id=2589): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.throttle.io_serviced\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x10c, r1, 0x8, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7ff}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0x5}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x368}, {0x8, 0x13, 0x6}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0x1000}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0x6}, {0x5}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4040000}, 0x20040001) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cifs\x00', 0x20c412, &(0x7f0000000300)='source=//127.0.0.1/share,user=root,pass=root,port=445,vers=3.0\x00') accept(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000013c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001400)={0x3c, r3, 0x637, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004c010}, 0x4004800) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pnp/devices/00:04/resources\x00', 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r7, @ANYBLOB="080003"], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) fspick(0xffffffffffffffff, &(0x7f0000000240)='./sys\x00', 0x0) write(r5, &(0x7f0000000100)='d', 0x1) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.throttle.io_serviced\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x10c, r1, 0x8, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7ff}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0x5}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x368}, {0x8, 0x13, 0x6}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0x1000}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0x6}, {0x5}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4040000}, 0x20040001) (async) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cifs\x00', 0x20c412, &(0x7f0000000300)='source=//127.0.0.1/share,user=root,pass=root,port=445,vers=3.0\x00') (async) accept(0xffffffffffffffff, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000013c0), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001400)={0x3c, r3, 0x637, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004c010}, 0x4004800) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) (async) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pnp/devices/00:04/resources\x00', 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r7, @ANYBLOB="080003"], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) (async) fspick(0xffffffffffffffff, &(0x7f0000000240)='./sys\x00', 0x0) (async) write(r5, &(0x7f0000000100)='d', 0x1) (async) kernel console output (not intermixed with test programs): __pfx_netlink_rcv_skb+0x10/0x10 [ 582.150048][T14018] ? netlink_deliver_tap+0x1ae/0xcc0 [ 582.150071][T14018] genl_rcv+0x28/0x40 [ 582.150090][T14018] netlink_unicast+0x585/0x850 [ 582.150113][T14018] ? __pfx_netlink_unicast+0x10/0x10 [ 582.150141][T14018] netlink_sendmsg+0x8b0/0xda0 [ 582.150165][T14018] ? __pfx_netlink_sendmsg+0x10/0x10 [ 582.150187][T14018] ? selinux_socket_sendmsg+0x198/0x2f0 [ 582.150218][T14018] ____sys_sendmsg+0xa4d/0xbe0 [ 582.150245][T14018] ? __pfx_netlink_sendmsg+0x10/0x10 [ 582.150268][T14018] ? __pfx_____sys_sendmsg+0x10/0x10 [ 582.150294][T14018] ? mark_held_locks+0x40/0x70 [ 582.150324][T14018] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 582.150352][T14018] ? rcu_is_watching+0x12/0xc0 [ 582.150382][T14018] ___sys_sendmsg+0x190/0x1e0 [ 582.150402][T14018] ? __pfx____sys_sendmsg+0x10/0x10 [ 582.150419][T14018] ? __lock_acquire+0x49f/0x1a40 [ 582.150441][T14018] ? get_pid_task+0x106/0x250 [ 582.150488][T14018] __sys_sendmsg+0x160/0x210 [ 582.150513][T14018] ? __pfx___sys_sendmsg+0x10/0x10 [ 582.150551][T14018] do_syscall_64+0x115/0x870 [ 582.150574][T14018] ? clear_bhb_loop+0x70/0xc0 [ 582.150596][T14018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.150615][T14018] RIP: 0033:0x7fc1bf19e0d9 [ 582.150630][T14018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 582.150646][T14018] RSP: 002b:00007fc1c009a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 582.150663][T14018] RAX: ffffffffffffffda RBX: 00007fc1bf426090 RCX: 00007fc1bf19e0d9 [ 582.150675][T14018] RDX: 000000000000c844 RSI: 0000200000001ac0 RDI: 000000000000000f [ 582.150686][T14018] RBP: 00007fc1c009a090 R08: 0000000000000000 R09: 0000000000000000 [ 582.150696][T14018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 582.150707][T14018] R13: 00007fc1bf426128 R14: 00007fc1bf426090 R15: 00007ffe915e9058 [ 582.150732][T14018] [ 582.472346][T14019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2317'. [ 583.010948][ T1209] usb 5-1: USB disconnect, device number 84 [ 583.171509][ T5779] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 583.414435][ T5779] usb 1-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 583.470523][ T5779] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 583.523213][ T5779] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 583.620023][ T5779] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.682183][ T5779] usb 1-1: Product: syz [ 583.718067][ T5779] usb 1-1: Manufacturer: syz [ 583.757631][ T5779] usb 1-1: SerialNumber: syz [ 583.899085][ T5779] etas_es58x 1-1:1.0: Starting syz syz (Serial Number syz) [ 584.045477][T14034] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 584.242705][ T5779] etas_es58x 1-1:1.0: could not parse product info: 'Э' [ 584.329016][T14034] FAULT_INJECTION: forcing a failure. [ 584.329016][T14034] name failslab, interval 1, probability 0, space 0, times 0 [ 584.341857][T14034] CPU: 0 UID: 0 PID: 14034 Comm: syz.2.2322 Tainted: G L syzkaller #0 PREEMPT(full) [ 584.341876][T14034] Tainted: [L]=SOFTLOCKUP [ 584.341880][T14034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 584.341887][T14034] Call Trace: [ 584.341892][T14034] [ 584.341896][T14034] dump_stack_lvl+0x100/0x190 [ 584.341916][T14034] should_fail_ex.cold+0x5/0xa [ 584.341931][T14034] should_failslab+0xc2/0x120 [ 584.341947][T14034] __kmalloc_cache_noprof+0x91/0x6c0 [ 584.341959][T14034] ? univ8250_setup_irq+0x2e9/0x6b0 [ 584.341983][T14034] univ8250_setup_irq+0x2e9/0x6b0 [ 584.342000][T14034] ? io_serial_out+0x65/0xb0 [ 584.342011][T14034] ? io_serial_in+0x60/0xb0 [ 584.342024][T14034] serial8250_do_startup+0xc76/0x3120 [ 584.342043][T14034] ? mark_held_locks+0x40/0x70 [ 584.342060][T14034] serial8250_startup+0x62/0x80 [ 584.342076][T14034] uart_startup+0x50f/0x1330 [ 584.342095][T14034] uart_ioctl+0x13af/0x2d60 [ 584.342111][T14034] ? __pfx_uart_ioctl+0x10/0x10 [ 584.342126][T14034] ? tomoyo_path_number_perm+0x188/0x580 [ 584.342147][T14034] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 584.342163][T14034] ? tty_jobctrl_ioctl+0x152/0xce0 [ 584.342181][T14034] ? __pfx_uart_ioctl+0x10/0x10 [ 584.342196][T14034] tty_ioctl+0x26a/0x1640 [ 584.342211][T14034] ? __pfx_tty_ioctl+0x10/0x10 [ 584.342225][T14034] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 584.342249][T14034] ? __fget_files+0x215/0x3d0 [ 584.342261][T14034] ? hook_file_ioctl_common+0x140/0x440 [ 584.342278][T14034] ? selinux_file_ioctl+0x13b/0x290 [ 584.342295][T14034] ? selinux_file_ioctl+0xb6/0x290 [ 584.342313][T14034] ? __pfx_tty_ioctl+0x10/0x10 [ 584.342328][T14034] __x64_sys_ioctl+0x18e/0x210 [ 584.342347][T14034] do_syscall_64+0x115/0x870 [ 584.342362][T14034] ? clear_bhb_loop+0x70/0xc0 [ 584.342377][T14034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.342388][T14034] RIP: 0033:0x7fc1bf19e0d9 [ 584.342398][T14034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.342409][T14034] RSP: 002b:00007fc1c00bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 584.342420][T14034] RAX: ffffffffffffffda RBX: 00007fc1bf425fa0 RCX: 00007fc1bf19e0d9 [ 584.342428][T14034] RDX: 0000000000000000 RSI: 0000000000005453 RDI: 0000000000000004 [ 584.342435][T14034] RBP: 00007fc1c00bb090 R08: 0000000000000000 R09: 0000000000000000 [ 584.342441][T14034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 584.342448][T14034] R13: 00007fc1bf426038 R14: 00007fc1bf425fa0 R15: 00007ffe915e9058 [ 584.342462][T14034] [ 584.748108][ T5694] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 584.755141][ T5694] cdc_ncm 4-1:1.0: bind() failure [ 584.763724][ T5694] usb 4-1: USB disconnect, device number 17 [ 584.961128][T14051] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2326'. [ 585.004114][T14051] team0: Device xfrm0 is of different type [ 585.044841][T14059] tipc: Enabling of bearer rejected, failed to enable media [ 585.069301][T14051] IPVS: Unknown mcast interface: dvmrp0 [ 585.094932][T14058] comedi: valid board names for 8255 driver are: [ 585.130502][T14058] 8255 [ 585.178068][T14058] comedi: valid board names for vmk80xx driver are: [ 585.189929][ T1209] usb 1-1: USB disconnect, device number 86 [ 585.206614][ T5779] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 585.224294][ T1209] etas_es58x 1-1:1.0: Disconnecting syz syz [ 585.252917][T14058] vmk80xx [ 585.272266][T14058] comedi: valid board names for usbduxsigma driver are: [ 585.303204][ T30] audit: type=1400 audit(1786524163.674:931): avc: denied { write } for pid=14046 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 585.337053][T14058] usbduxsigma [ 585.340573][T14058] comedi: valid board names for usbduxfast driver are: [ 585.356952][T14058] usbduxfast [ 585.360804][T14058] comedi: valid board names for usbdux driver are: [ 585.367390][ T29] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 585.382093][T14058] usbdux [ 585.396527][ T5779] usb 3-1: Using ep0 maxpacket: 32 [ 585.401898][T14058] comedi: valid board names for ni6501 driver are: [ 585.408939][ T5779] usb 3-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 585.418585][T14058] ni6501 [ 585.422295][T14058] comedi: valid board names for dt9812 driver are: [ 585.429822][ T5779] usb 3-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 585.441010][T14058] dt9812 [ 585.443965][T14058] comedi: valid board names for ni_labpc_cs driver are: [ 585.453496][ T5779] usb 3-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 585.466677][T14058] ni_labpc_cs [ 585.470346][T14058] comedi: valid board names for ni_daq_700 driver are: [ 585.477769][ T5779] usb 3-1: config 0 interface 0 has no altsetting 0 [ 585.484504][T14058] ni_daq_700 [ 585.487834][T14058] comedi: valid board names for labpc_pci driver are: [ 585.494621][ T5779] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.502860][T14058] labpc_pci [ 585.506059][T14058] comedi: valid board names for adl_pci9118 driver are: [ 585.514698][ T5779] usb 3-1: config 0 descriptor?? [ 585.521954][T14058] pci9118dg [ 585.532715][T14058] pci9118hg [ 585.539935][T14058] pci9118hr [ 585.552678][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 585.558775][T14058] comedi: valid board names for 8255_pci driver are: [ 585.574589][T14058] 8255_pci [ 585.579406][ T29] usb 5-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=8c.00 [ 585.592256][T14058] comedi: valid board names for s526 driver are: [ 585.604663][ T30] audit: type=1400 audit(1786524163.984:932): avc: denied { write } for pid=14069 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 585.627860][T14058] s526 [ 585.636058][T14058] comedi: valid board names for multiq3 driver are: [ 585.646634][T14058] multiq3 [ 585.654746][T14058] comedi: valid board names for pcmuio driver are: [ 585.670259][T14058] pcmuio48 [ 585.681881][T14058] pcmuio96 [ 585.728494][T14058] comedi: valid board names for pcmmio driver are: [ 585.758112][T14058] pcmmio [ 585.758255][ T29] usb 5-1: config index 0 descriptor too short (expected 20, got 18) [ 585.769049][T14058] comedi: valid board names for pcmda12 driver are: [ 585.853441][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.855998][T14058] pcmda12 [ 585.892098][ T29] usb 5-1: Product: syz [ 585.893004][T14058] comedi: valid board names for pcmad driver are: [ 585.941156][ T29] usb 5-1: Manufacturer: syz [ 585.953445][T14058] pcmad12 [ 585.964036][ T29] usb 5-1: SerialNumber: syz [ 585.966074][T14058] pcmad16 [ 585.991608][T14058] comedi: valid board names for ni_labpc driver are: [ 586.151360][T14058] lab-pc-1200 [ 586.164862][T14058] lab-pc-1200ai [ 586.180881][T14058] lab-pc+ [ 586.184284][T14058] comedi: valid board names for atmio16 driver are: [ 586.184797][ T29] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 586.202022][ T5779] wacom 0003:056A:00C5.0011: ignoring exceeding usage max [ 586.224077][ T5779] wacom 0003:056A:00C5.0011: unknown main item tag 0x6 [ 586.234324][ T29] command write [95] error -22 [ 586.255621][ T5779] wacom 0003:056A:00C5.0011: unknown main item tag 0x0 [ 586.290283][ T5779] wacom 0003:056A:00C5.0011: unknown main item tag 0x0 [ 586.297321][T14058] atmio16 [ 586.414309][T14058] atmio16d [ 586.423045][T14058] comedi: valid board names for ni_at_ao driver are: [ 586.441688][ T5779] wacom 0003:056A:00C5.0011: unknown main item tag 0x0 [ 586.450044][T14058] at-ao-6 [ 586.455713][T14058] at-ao-10 [ 586.466100][T14058] comedi: valid board names for ni_at_a2150 driver are: [ 586.474476][T14058] ni_at_a2150 [ 586.477932][T14058] comedi: valid board names for adq12b driver are: [ 586.485713][T14058] adq12b [ 586.488742][T14058] comedi: valid board names for mpc624 driver are: [ 586.506454][ T5721] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 586.540850][T14058] mpc624 [ 586.551754][ T5721] cdc_ncm 2-1:1.0: bind() failure [ 586.556854][T14058] comedi: valid board names for c6xdigio driver are: [ 586.570456][ T5779] wacom 0003:056A:00C5.0011: hidraw0: USB HID v0.81 Device [HID 056a:00c5] on usb-dummy_hcd.2-1/input0 [ 586.650742][T14058] c6xdigio [ 586.666151][T14058] comedi: valid board names for aio_iiro_16 driver are: [ 586.703701][ T5779] usb 3-1: USB disconnect, device number 76 [ 586.715988][ T5721] usb 2-1: USB disconnect, device number 81 [ 586.758053][T14058] aio_iiro_16 [ 586.782527][T14058] comedi: valid board names for aio_aio12_8 driver are: [ 586.830060][T14058] aio_aio12_8 [ 586.848637][T14058] aio_ai12_8 [ 586.862174][T14058] aio_ao12_4 [ 586.866673][ T30] audit: type=1400 audit(1786524165.244:933): avc: denied { read } for pid=14090 comm="syz.3.2332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 586.874755][T14058] comedi: valid board names for fl512 driver are: [ 586.915388][T14086] fido_id[14086]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 586.975684][T14058] fl512 [ 586.992710][T14058] comedi: valid board names for dmm32at driver are: [ 587.059040][T14058] dmm32at [ 587.105896][T14058] comedi: valid board names for dt282x driver are: [ 587.112710][ T5721] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 587.192911][T14058] dt2821 [ 587.250214][T14058] dt2821-f [ 587.320775][T14058] dt2821-g [ 587.377748][T14058] dt2823 [ 587.387026][ T5721] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 587.449037][T14058] dt2824-pgh [ 587.488020][T14058] dt2824-pgl [ 587.517371][ T5721] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 587.548870][T14058] dt2825 [ 587.574897][T14058] dt2827 [ 587.607606][T14058] dt2828 [ 587.616742][ T5721] usb 2-1: config 0 has no interface number 0 [ 587.647749][T14058] dt2829 [ 587.697024][T14058] dt21-ez [ 587.719606][ T5721] usb 2-1: config 0 interface 251 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 587.745948][T14058] dt23-ez [ 587.753807][T14058] dt24-ez [ 587.762162][T14058] dt24-ez-pgl [ 587.776184][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.790700][T14058] comedi: valid board names for dt2817 driver are: [ 587.816207][ T5721] usb 2-1: Product: syz [ 587.843719][T14058] dt2817 [ 587.854818][ T5721] usb 2-1: Manufacturer: syz [ 587.866108][T14058] comedi: valid board names for dt2815 driver are: [ 587.875076][ T5721] usb 2-1: SerialNumber: syz [ 587.889840][T14058] dt2815 [ 587.897644][ T5721] usb 2-1: config 0 descriptor?? [ 587.903208][T14058] comedi: valid board names for dt2814 driver are: [ 587.925898][ T5721] asix 2-1:0.251: probe with driver asix failed with error -22 [ 587.939487][T14058] dt2814 [ 587.951716][ T30] audit: type=1400 audit(1786524166.334:934): avc: denied { write } for pid=14073 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 587.954194][T14058] comedi: valid board names for dt2811 driver are: [ 588.024730][T14058] dt2811-pgh [ 588.054259][T14058] dt2811-pgl [ 588.058647][T14058] comedi: valid board names for dt2801 driver are: [ 588.079848][T14058] dt2801 [ 588.086176][ T30] audit: type=1400 audit(1786524166.464:935): avc: denied { write } for pid=14110 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 588.115624][T14058] comedi: valid board names for das6402 driver are: [ 588.143452][T14058] das6402-12 [ 588.150935][T14058] das6402-16 [ 588.156848][T14058] comedi: valid board names for das1800 driver are: [ 588.172215][ T5779] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 588.185614][T14058] das-1701st [ 588.195672][T14058] das-1701st-da [ 588.202405][T14058] das-1702st [ 588.210141][T14058] das-1702st-da [ 588.216018][T14058] das-1702hr [ 588.219309][T14058] das-1702hr-da [ 588.224159][T14058] das-1701ao [ 588.230292][T14058] das-1702ao [ 588.234277][T14058] das-1801st [ 588.239054][T14058] das-1801st-da [ 588.245136][T14058] das-1802st [ 588.250486][T14058] das-1802st-da [ 588.256486][T14058] das-1802hr [ 588.262161][T14058] das-1802hr-da [ 588.268671][T14058] das-1801hc [ 588.275221][T14058] das-1802hc [ 588.282513][T14058] das-1801ao [ 588.288377][T14058] das-1802ao [ 588.295402][T14058] comedi: valid board names for das800 driver are: [ 588.307968][T14058] das-800 [ 588.313644][T14058] cio-das800 [ 588.320643][T14058] das-801 [ 588.327104][T14058] cio-das801 [ 588.331259][ T5779] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 588.350656][T14058] das-802 [ 588.352015][ T5779] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 588.353699][T14058] cio-das802 [ 588.353709][T14058] cio-das802/16 [ 588.363699][ T5779] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 588.380830][ T5779] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.419159][T14058] comedi: valid board names for isa-das08 driver are: [ 588.440836][T14058] isa-das08 [ 588.449470][T14058] das08-pgm [ 588.469687][T14058] das08-pgh [ 588.479818][T14058] das08-pgl [ 588.487261][T14058] das08-aoh [ 588.496953][T14058] das08-aol [ 588.507937][T14058] das08-aom [ 588.514845][T14058] das08/jr-ao [ 588.522665][T14058] das08jr-16-ao [ 588.552471][T14058] pc104-das08 [ 588.567107][T14058] das08jr/16 [ 588.574588][T14058] comedi: valid board names for das16m1 driver are: [ 588.574610][T14118] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2338'. [ 588.600341][T14058] das16m1 [ 588.606073][T14058] comedi: valid board names for dac02 driver are: [ 588.614660][T14118] team0: Device xfrm0 is of different type [ 588.637678][T14118] tipc: Enabling of bearer rejected, failed to enable media [ 588.648249][T14058] dac02 [ 588.655444][T14118] IPVS: Unknown mcast interface: dvmrp0 [ 588.661073][ T5693] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 588.668973][T14058] comedi: valid board names for rti802 driver are: [ 588.693865][T14058] rti802 [ 588.698297][T14058] comedi: valid board names for rti800 driver are: [ 588.700120][T14120] 9p: Bad value for 'wfdno' [ 588.721943][T14058] rti800 [ 588.729670][T14058] rti815 [ 588.734101][T14058] comedi: valid board names for pcm3724 driver are: [ 588.749842][T14058] pcm3724 [ 588.752964][T14058] comedi: valid board names for pcl818 driver are: [ 588.769984][T14058] pcl818l [ 588.773188][T14058] pcl818h [ 588.778173][T14058] pcl818hd [ 588.785598][T14058] pcl818hg [ 588.792509][T14058] pcl818 [ 588.800641][T14058] pcl718 [ 588.804015][T14058] pcm3718 [ 588.810625][T14058] comedi: valid board names for pcl816 driver are: [ 588.811405][ T5693] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 588.831187][T14058] pcl816 [ 588.837089][ T5693] usb 3-1: config index 0 descriptor too short (expected 45, got 28) [ 588.846295][T14058] pcl814b [ 588.846322][ T5693] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 588.858778][T14058] comedi: valid board names for pcl812 driver are: [ 588.858802][ T5693] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 588.882827][T14058] pcl812 [ 588.884624][ T5693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.895611][ T5693] usb 3-1: Product: syz [ 588.900723][ T5693] usb 3-1: Manufacturer: syz [ 588.900813][T14058] pcl812pg [ 588.905479][ T5693] usb 3-1: SerialNumber: syz [ 588.918584][T14058] acl8112pg [ 588.927356][ T5693] rtl8150 3-1:1.0: couldn't find required endpoints [ 588.936134][T14058] acl8112dg [ 588.936484][ T5693] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 588.954698][T14058] acl8112hg [ 588.961203][T14058] a821pgl [ 588.966891][T14058] a821pglnda [ 588.974460][T14058] a821pgh [ 588.983105][T14058] a822pgl [ 588.988730][T14058] a822pgh [ 588.995721][T14058] a823pgl [ 589.001069][T14058] a823pgh [ 589.008357][T14058] pcl813 [ 589.013095][T14058] pcl813b [ 589.019564][T14058] acl8113 [ 589.028523][T14058] iso813 [ 589.031495][T14058] acl8216 [ 589.038146][T14058] a826pg [ 589.048678][T14058] comedi: valid board names for pcl730 driver are: [ 589.057510][T14058] pcl730 [ 589.064316][T14058] iso730 [ 589.070652][T14058] acl7130 [ 589.074466][T14058] pcm3730 [ 589.081499][T14058] pcl725 [ 589.089178][T14058] p8r8dio [ 589.093910][T14058] acl7225b [ 589.102402][T14058] p16r16dio [ 589.109403][T14058] pcl733 [ 589.115009][T14058] pcl734 [ 589.120844][T14058] opmm-1616-xt [ 589.129653][T14058] pearl-mm-p [ 589.137120][T14058] ir104-pbf [ 589.143004][T14058] comedi: valid board names for pcl726 driver are: [ 589.160668][T14058] pcl726 [ 589.164517][T14058] pcl727 [ 589.167471][T14058] pcl728 [ 589.170398][T14058] acl6126 [ 589.176935][T14058] acl6128 [ 589.183557][T14058] comedi: valid board names for pcl724 driver are: [ 589.195022][T14058] pcl724 [ 589.210989][T14058] pcl722 [ 589.215381][T14058] pcl731 [ 589.222286][T14058] acl7122 [ 589.231510][T14058] acl7124 [ 589.239105][T14058] pet48dio [ 589.259865][ T30] audit: type=1400 audit(1786524167.634:936): avc: denied { read } for pid=14122 comm="syz.3.2339" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 589.281101][T14058] pcmio48 [ 589.303209][T14058] onyx-mm-dio [ 589.310259][T14058] comedi: valid board names for pcl711 driver are: [ 589.311413][ T30] audit: type=1400 audit(1786524167.664:937): avc: denied { open } for pid=14122 comm="syz.3.2339" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 589.372727][T14058] pcl711 [ 589.378645][T14058] pcl711b [ 589.387549][T14058] acl8112hg [ 589.392210][ T30] audit: type=1400 audit(1786524167.774:938): avc: denied { call } for pid=14124 comm="syz.3.2340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 589.445478][T14058] acl8112dg [ 589.459459][T14058] comedi: valid board names for amplc_pc263 driver are: [ 589.880672][T14058] pc263 [ 589.888884][T14058] comedi: valid board names for amplc_pc236 driver are: [ 589.896263][T14058] pc36at [ 589.899299][T14058] comedi: valid board names for amplc_dio200 driver are: [ 590.005459][T14058] pc212e [ 590.019841][T14058] pc214e [ 590.037683][T14058] pc215e [ 590.053750][T14058] pc218e [ 590.067268][T14058] pc272e [ 590.120665][T14058] comedi: valid board names for comedi_parport driver are: [ 590.124419][ T9] usb 2-1: USB disconnect, device number 82 [ 590.136934][T14058] comedi_parport [ 590.177619][T14058] comedi: valid board names for comedi_test driver are: [ 590.203939][T14058] comedi_test [ 590.214641][T14058] comedi: valid board names for comedi_bond driver are: [ 590.243737][T14058] comedi_bond [ 590.256736][ T5721] usb 3-1: USB disconnect, device number 77 [ 590.318968][ T29] usb 5-1: USB disconnect, device number 85 [ 591.126014][ T5779] usb 1-1: USB disconnect, device number 87 [ 591.143000][T14159] FAULT_INJECTION: forcing a failure. [ 591.143000][T14159] name failslab, interval 1, probability 0, space 0, times 0 [ 591.157685][T14159] CPU: 0 UID: 0 PID: 14159 Comm: syz.0.2347 Tainted: G L syzkaller #0 PREEMPT(full) [ 591.157712][T14159] Tainted: [L]=SOFTLOCKUP [ 591.157718][T14159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 591.157728][T14159] Call Trace: [ 591.157734][T14159] [ 591.157740][T14159] dump_stack_lvl+0x100/0x190 [ 591.157771][T14159] should_fail_ex.cold+0x5/0xa [ 591.157790][T14159] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 591.157819][T14159] should_failslab+0xc2/0x120 [ 591.157844][T14159] kmem_cache_alloc_noprof+0x91/0x6a0 [ 591.157867][T14159] ? skb_clone+0x190/0x400 [ 591.157894][T14159] skb_clone+0x190/0x400 [ 591.157917][T14159] netlink_deliver_tap+0xaed/0xcc0 [ 591.157941][T14159] netlink_unicast+0x62b/0x850 [ 591.157963][T14159] ? __pfx_netlink_unicast+0x10/0x10 [ 591.157989][T14159] netlink_sendmsg+0x8b0/0xda0 [ 591.158012][T14159] ? __pfx_netlink_sendmsg+0x10/0x10 [ 591.158033][T14159] ? selinux_socket_sendmsg+0x198/0x2f0 [ 591.158064][T14159] ____sys_sendmsg+0xa4d/0xbe0 [ 591.158091][T14159] ? __pfx_netlink_sendmsg+0x10/0x10 [ 591.158112][T14159] ? __pfx_____sys_sendmsg+0x10/0x10 [ 591.158152][T14159] ___sys_sendmsg+0x190/0x1e0 [ 591.158172][T14159] ? __pfx____sys_sendmsg+0x10/0x10 [ 591.158189][T14159] ? __lock_acquire+0x49f/0x1a40 [ 591.158213][T14159] ? get_pid_task+0x106/0x250 [ 591.158264][T14159] __sys_sendmsg+0x160/0x210 [ 591.158288][T14159] ? __pfx___sys_sendmsg+0x10/0x10 [ 591.158325][T14159] do_syscall_64+0x115/0x870 [ 591.158349][T14159] ? clear_bhb_loop+0x70/0xc0 [ 591.158371][T14159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.158389][T14159] RIP: 0033:0x7f7a2039e0d9 [ 591.158405][T14159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 591.158422][T14159] RSP: 002b:00007f7a21300028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 591.158440][T14159] RAX: ffffffffffffffda RBX: 00007f7a20625fa0 RCX: 00007f7a2039e0d9 [ 591.158452][T14159] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 591.158463][T14159] RBP: 00007f7a21300090 R08: 0000000000000000 R09: 0000000000000000 [ 591.158473][T14159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 591.158484][T14159] R13: 00007f7a20626038 R14: 00007f7a20625fa0 R15: 00007ffe0451a9f8 [ 591.158508][T14159] [ 591.159471][T14159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2347'. [ 591.403161][T14159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2347'. [ 591.460912][ T1209] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 591.527475][T14165] tipc: Enabling of bearer rejected, failed to enable media [ 591.584204][T14165] IPVS: Unknown mcast interface: dvmrp0 [ 592.562271][ T1209] usb 2-1: Using ep0 maxpacket: 16 [ 592.573017][ T1209] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 592.594030][ T1209] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 592.612413][ T1209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.623299][ T1209] usb 2-1: Product: syz [ 592.630570][ T1209] usb 2-1: Manufacturer: syz [ 592.630822][ T5779] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 592.642959][ T1209] usb 2-1: SerialNumber: syz [ 592.663611][ T1209] r8152-cfgselector 2-1: Unknown version 0x0000 [ 592.684132][ T1209] r8152-cfgselector 2-1: config 0 descriptor?? [ 592.851095][ T5779] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 592.872244][ T5779] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 592.903170][ T5779] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.920353][ T1209] r8152-cfgselector 2-1: Needed 1 retries to read version [ 592.934461][T14178] FAULT_INJECTION: forcing a failure. [ 592.934461][T14178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 592.942617][ T5779] usb 4-1: config 0 descriptor?? [ 592.955793][ T1209] r8152-cfgselector 2-1: Unknown version 0x0000 [ 592.958835][T14178] CPU: 0 UID: 0 PID: 14178 Comm: syz.4.2355 Tainted: G L syzkaller #0 PREEMPT(full) [ 592.958860][T14178] Tainted: [L]=SOFTLOCKUP [ 592.958865][T14178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 592.958874][T14178] Call Trace: [ 592.958880][T14178] [ 592.958886][T14178] dump_stack_lvl+0x100/0x190 [ 592.958911][T14178] should_fail_ex.cold+0x5/0xa [ 592.958931][T14178] strncpy_from_user+0x3b/0x2d0 [ 592.958950][T14178] ? find_held_lock+0x2b/0x80 [ 592.958968][T14178] path_getxattrat+0x102/0x430 [ 592.958990][T14178] ? __pfx_path_getxattrat+0x10/0x10 [ 592.959008][T14178] ? find_held_lock+0x2b/0x80 [ 592.959023][T14178] ? ksys_write+0x190/0x250 [ 592.959058][T14178] ? __pfx_ksys_write+0x10/0x10 [ 592.959078][T14178] do_syscall_64+0x115/0x870 [ 592.959099][T14178] ? clear_bhb_loop+0x70/0xc0 [ 592.959119][T14178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.959135][T14178] RIP: 0033:0x7f019a59e0d9 [ 592.959148][T14178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.959163][T14178] RSP: 002b:00007f019b448028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c1 [ 592.959179][T14178] RAX: ffffffffffffffda RBX: 00007f019a825fa0 RCX: 00007f019a59e0d9 [ 592.959190][T14178] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 592.959199][T14178] RBP: 00007f019b448090 R08: 0000000000000000 R09: 0000000000000000 [ 592.959209][T14178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.959223][T14178] R13: 00007f019a826038 R14: 00007f019a825fa0 R15: 00007ffe17342908 [ 592.959244][T14178] [ 592.975485][T14179] 8021q: adding VLAN 0 to HW filter on device bond1 [ 593.033656][ T1209] r8152-cfgselector 2-1: No union descriptors [ 593.037555][T14179] bridge0: port 1(bond1) entered blocking state [ 593.151495][T14179] bridge0: port 1(bond1) entered disabled state [ 593.158177][T14179] bond1: entered allmulticast mode [ 593.265556][ T5779] usbhid 4-1:0.0: can't add hid device: -71 [ 593.294183][T14179] bond1: entered promiscuous mode [ 593.321941][ T5779] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 593.444178][T14179] bridge0: port 1(bond1) entered blocking state [ 593.450547][T14179] bridge0: port 1(bond1) entered forwarding state [ 593.460907][ T1209] usb 3-1: new full-speed USB device number 78 using dummy_hcd [ 593.524330][ T5779] usb 4-1: USB disconnect, device number 18 [ 593.560853][ T5693] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 593.722449][ T1209] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 593.818026][ T1209] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 593.841321][ T5693] usb 5-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 593.910935][ T1209] usb 3-1: config 0 has no interface number 0 [ 593.937530][ T5693] usb 5-1: config 255 has an invalid interface number: 97 but max is 0 [ 593.976040][ T1209] usb 3-1: config 0 interface 251 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 594.008442][ T5693] usb 5-1: config 255 has no interface number 0 [ 594.058822][ T5693] usb 5-1: config 255 interface 97 has no altsetting 0 [ 594.066135][ T5779] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 594.098937][T14135] bridge0: port 1(bond1) entered disabled state [ 594.121427][ T1209] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.161086][ T5693] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.190101][ T1209] usb 3-1: Product: syz [ 594.229362][ T5693] usb 5-1: Product: syz [ 594.246582][ T1209] usb 3-1: Manufacturer: syz [ 594.268343][ T5693] usb 5-1: Manufacturer: syz [ 594.291423][ T1209] usb 3-1: SerialNumber: syz [ 594.305567][ T5779] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 594.340128][ T5693] usb 5-1: SerialNumber: syz [ 594.440085][ T5779] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.466352][ T1209] usb 3-1: config 0 descriptor?? [ 594.657031][ T5779] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.678991][ T1209] asix 3-1:0.251: probe with driver asix failed with error -22 [ 594.764217][T14184] tipc: Started in network mode [ 594.842629][T14184] tipc: Node identity fe8bb2ad5c47, cluster identity 4711 [ 594.925587][ T5779] usb 4-1: config 0 descriptor?? [ 595.041416][T14184] tipc: Enabled bearer , priority 0 [ 595.119506][ T5779] usb 4-1: can't set config #0, error -71 [ 595.125839][T14188] bridge0: port 2(syz_tun) entered blocking state [ 595.173865][ T5779] usb 4-1: USB disconnect, device number 19 [ 595.197211][T14188] bridge0: port 2(syz_tun) entered disabled state [ 595.217284][T14188] syz_tun: entered allmulticast mode [ 596.114224][T14188] syz_tun: entered promiscuous mode [ 596.146135][T14188] bridge0: port 2(syz_tun) entered blocking state [ 596.155173][T14188] bridge0: port 2(syz_tun) entered forwarding state [ 596.182791][ T5694] r8152-cfgselector 2-1: USB disconnect, device number 83 [ 596.244972][T14177] tipc: Disabling bearer [ 596.272400][ T24] tipc: Node number set to 2731324077 [ 596.281485][ T5693] rndis_host 5-1:255.97: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 596.339812][ T5693] usb 5-1: USB disconnect, device number 86 [ 596.387058][T14209] block nbd4: not configured, cannot reconfigure [ 596.552018][ T30] audit: type=1326 audit(1786524174.924:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14214 comm="syz.4.2363" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f019a59e0d9 code=0x0 [ 596.672449][T14222] tipc: Enabling of bearer rejected, failed to enable media [ 596.698810][T14219] gadgetfs: bound to dummy_udc driver [ 596.840655][ T5694] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 596.890649][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 596.941570][ T5693] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 596.949406][ C1] gadgetfs: connected [ 596.954625][ T5693] gadgetfs: disconnected [ 597.001058][ T5694] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 597.012756][ T5694] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.021193][ T5694] usb 1-1: Product: syz [ 597.025476][ T5694] usb 1-1: Manufacturer: syz [ 597.030077][ T5694] usb 1-1: SerialNumber: syz [ 597.042298][ T9] usb 4-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 597.054785][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 597.064567][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 597.075998][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.084114][ T9] usb 4-1: Product: syz [ 597.088302][ T9] usb 4-1: Manufacturer: syz [ 597.092915][ T9] usb 4-1: SerialNumber: syz [ 597.101259][ C1] gadgetfs: connected [ 597.105912][ T9] etas_es58x 4-1:1.0: Starting syz syz (Serial Number syz) [ 597.108225][ T5693] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 597.122649][ T5693] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 597.132704][ T5693] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.146058][ C1] gadgetfs: configuration #1 [ 597.153285][ T5721] usb 3-1: USB disconnect, device number 78 [ 597.269673][T14228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.280911][T14228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.293074][T14228] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2367'. [ 597.368546][ T9] etas_es58x 4-1:1.0: could not parse product info: 'Э' [ 597.382665][T14214] gadgetfs: suspended from state 3 [ 597.397767][ T5693] usb 2-1: can't set config #1, error -71 [ 597.398432][T14214] gadgetfs: disconnected [ 597.510722][ T5694] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 597.639559][ T5694] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 597.992428][T14225] block nbd2: shutting down sockets [ 598.782049][T14217] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 598.898766][ T5693] usb 2-1: USB disconnect, device number 84 [ 599.722483][ T1209] usb 4-1: USB disconnect, device number 20 [ 599.734207][ T1209] etas_es58x 4-1:1.0: Disconnecting syz syz [ 599.743840][T14239] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 600.075558][ T30] audit: type=1326 audit(1786524178.454:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14251 comm="syz.2.2370" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc1bf19e0d9 code=0x0 [ 600.130719][ T30] audit: type=1400 audit(1786524178.494:941): avc: denied { write } for pid=14243 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 600.178384][T14239] Process accounting paused [ 600.207055][ T30] audit: type=1400 audit(1786524178.584:942): avc: denied { write } for pid=14257 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 600.281657][T14260] 8021q: adding VLAN 0 to HW filter on device bond2 [ 600.312919][ T5694] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 600.326028][T14260] bridge0: port 3(bond2) entered blocking state [ 600.329923][ T5694] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 600.340713][T14260] bridge0: port 3(bond2) entered disabled state [ 600.346391][ T5694] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e0. ret = -EPROTO [ 600.391604][ T5694] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 600.402337][T14260] bond2: entered allmulticast mode [ 600.408495][ T5694] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 600.424146][ T5694] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 600.429260][T14260] bond2: entered promiscuous mode [ 601.390854][ T5694] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 601.411045][ T5694] usb 1-1: USB disconnect, device number 88 [ 601.430118][T14260] bridge0: port 3(bond2) entered blocking state [ 601.436470][T14260] bridge0: port 3(bond2) entered forwarding state [ 601.477334][ T9317] bridge0: port 3(bond2) entered disabled state [ 601.518737][T14278] tipc: Enabled bearer , priority 0 [ 601.564409][T14260] syzkaller0: entered promiscuous mode [ 601.574554][T14266] jffs2: notice: (14266) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 601.598499][T14260] syzkaller0: entered allmulticast mode [ 601.671436][T14259] tipc: Resetting bearer [ 601.767758][T14259] tipc: Disabling bearer [ 601.933371][ T30] audit: type=1400 audit(1786524180.315:943): avc: denied { write } for pid=14264 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 602.040173][ T30] audit: type=1400 audit(1786524180.415:944): avc: denied { write } for pid=14299 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 602.125206][T14298] team0: Device xfrm0 is of different type [ 602.153747][T14298] tipc: Enabling of bearer rejected, failed to enable media [ 602.240741][ T1209] usb 3-1: new full-speed USB device number 79 using dummy_hcd [ 602.385207][T14298] IPVS: Unknown mcast interface: dvmrp0 [ 602.426431][ T1209] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 602.581310][ T1209] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 602.615302][ T1209] usb 3-1: config 0 has no interface number 0 [ 602.630370][ T1209] usb 3-1: config 0 interface 251 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 602.643355][ T1209] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.661833][ T1209] usb 3-1: Product: syz [ 602.669966][ T1209] usb 3-1: Manufacturer: syz [ 602.679481][ T1209] usb 3-1: SerialNumber: syz [ 602.688748][ T1209] usb 3-1: config 0 descriptor?? [ 602.697488][ T1209] asix 3-1:0.251: probe with driver asix failed with error -22 [ 602.872560][ T30] audit: type=1400 audit(1786524181.255:945): avc: denied { setattr } for pid=14312 comm="syz.4.2380" name="/" dev="configfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 602.920739][T14315] FAULT_INJECTION: forcing a failure. [ 602.920739][T14315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 602.920828][ T5721] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 602.933996][T14315] CPU: 1 UID: 0 PID: 14315 Comm: syz.4.2381 Tainted: G L syzkaller #0 PREEMPT(full) [ 602.934020][T14315] Tainted: [L]=SOFTLOCKUP [ 602.934025][T14315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 602.934034][T14315] Call Trace: [ 602.934040][T14315] [ 602.934046][T14315] dump_stack_lvl+0x100/0x190 [ 602.934072][T14315] should_fail_ex.cold+0x5/0xa [ 602.934093][T14315] _copy_from_user+0x2e/0xd0 [ 602.934117][T14315] comedi_unlocked_ioctl+0x9b5/0x3310 [ 602.934142][T14315] ? tomoyo_path_number_perm+0x188/0x580 [ 602.934169][T14315] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 602.934202][T14315] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 602.934225][T14315] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 602.934257][T14315] ? __fget_files+0x215/0x3d0 [ 602.934273][T14315] ? hook_file_ioctl_common+0x140/0x440 [ 602.934297][T14315] ? selinux_file_ioctl+0x13b/0x290 [ 602.934319][T14315] ? selinux_file_ioctl+0xb6/0x290 [ 602.934343][T14315] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 602.934367][T14315] __x64_sys_ioctl+0x18e/0x210 [ 602.934391][T14315] do_syscall_64+0x115/0x870 [ 602.934412][T14315] ? clear_bhb_loop+0x70/0xc0 [ 602.934432][T14315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.934448][T14315] RIP: 0033:0x7f019a59e0d9 [ 602.934462][T14315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 602.934477][T14315] RSP: 002b:00007f019b448028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 602.934493][T14315] RAX: ffffffffffffffda RBX: 00007f019a825fa0 RCX: 00007f019a59e0d9 [ 602.934504][T14315] RDX: 0000200000000180 RSI: 0000000080506409 RDI: 0000000000000003 [ 602.934513][T14315] RBP: 00007f019b448090 R08: 0000000000000000 R09: 0000000000000000 [ 602.934523][T14315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 602.934532][T14315] R13: 00007f019a826038 R14: 00007f019a825fa0 R15: 00007ffe17342908 [ 602.934554][T14315] [ 603.180497][ T30] audit: type=1326 audit(1786524181.555:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14324 comm="syz.4.2385" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f019a59e0d9 code=0x0 [ 603.311131][T14327] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 603.336028][T14327] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 603.380617][ T5721] usb 1-1: Using ep0 maxpacket: 32 [ 603.386484][ T5721] usb 1-1: New USB device found, idVendor=08e4, idProduct=017f, bcdDevice= 0.40 [ 603.398145][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.406901][ T5721] usb 1-1: Product: syz [ 603.414835][ T5721] usb 1-1: Manufacturer: syz [ 603.419636][ T5721] usb 1-1: SerialNumber: syz [ 603.425352][ T30] audit: type=1400 audit(1786524181.805:947): avc: denied { mount } for pid=14326 comm="syz.3.2386" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 603.603754][T14334] 8021q: adding VLAN 0 to HW filter on device bond4 [ 603.611258][T14334] bridge0: port 1(bond4) entered blocking state [ 603.617633][T14334] bridge0: port 1(bond4) entered disabled state [ 603.624096][T14334] bond4: entered allmulticast mode [ 603.631111][T14334] bond4: entered promiscuous mode [ 603.632208][T14310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.636709][T14334] bridge0: port 1(bond4) entered blocking state [ 603.648854][T14310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.650852][T14334] bridge0: port 1(bond4) entered forwarding state [ 603.671493][ T5721] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 603.677028][ T57] bridge0: port 1(bond4) entered disabled state [ 603.679993][ T5721] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 603.705262][T14334] tipc: Started in network mode [ 603.710297][T14334] tipc: Node identity 56f38dc55fb8, cluster identity 4711 [ 603.718232][T14334] tipc: Enabled bearer , priority 0 [ 603.719453][ T5721] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 603.735480][T14334] syzkaller0: entered promiscuous mode [ 603.741219][T14334] syzkaller0: entered allmulticast mode [ 603.743480][ T5721] usb 1-1: USB disconnect, device number 89 [ 603.764688][ T9180] udevd[9180]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 603.797029][T14333] tipc: Resetting bearer [ 603.814158][T14333] tipc: Disabling bearer [ 604.270661][ T30] audit: type=1400 audit(1786524182.605:948): avc: denied { create } for pid=14337 comm="syz.1.2389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 604.527014][ T30] audit: type=1400 audit(1786524182.855:949): avc: denied { unmount } for pid=13300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 605.823011][ T5606] Bluetooth: hci5: failed to read key size for handle 200 [ 605.831204][ T5606] Bluetooth: hci5: link tx timeout [ 605.837269][ T5606] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 606.627681][ T1209] usb 3-1: USB disconnect, device number 79 [ 606.687010][T14356] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 606.716278][ T5606] Bluetooth: hci5: unexpected event for opcode 0x202a [ 606.943754][T14365] 8021q: adding VLAN 0 to HW filter on device bond1 [ 606.952920][T14365] bridge0: port 3(bond1) entered blocking state [ 606.959302][T14365] bridge0: port 3(bond1) entered disabled state [ 606.965663][T13221] usb 1-1: new full-speed USB device number 90 using dummy_hcd [ 606.975089][T14365] bond1: entered allmulticast mode [ 606.983037][T14365] bond1: entered promiscuous mode [ 606.988559][T14365] bridge0: port 3(bond1) entered blocking state [ 606.994915][T14365] bridge0: port 3(bond1) entered forwarding state [ 607.003102][T14143] bridge0: port 3(bond1) entered disabled state [ 607.025421][T14365] tipc: Started in network mode [ 607.030326][T14365] tipc: Node identity 2a56411fe14f, cluster identity 4711 [ 607.037907][T14365] tipc: Enabled bearer , priority 0 [ 607.046163][T14365] syzkaller0: entered promiscuous mode [ 607.051886][T14365] syzkaller0: entered allmulticast mode [ 607.061686][T14364] tipc: Resetting bearer [ 607.081397][T14364] tipc: Disabling bearer [ 607.128297][T13221] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 607.137457][ T1209] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 607.151731][T13221] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 607.163475][T13221] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 607.182957][T13221] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.206942][T14376] netlink: 'syz.3.2401': attribute type 11 has an invalid length. [ 607.207391][T13221] usb 1-1: config 0 descriptor?? [ 607.245509][T14376] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 607.321032][ T1209] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 607.330874][ T1209] usb 3-1: config 171 has an invalid interface number: 109 but max is 0 [ 607.339269][ T1209] usb 3-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 607.349592][ T1209] usb 3-1: config 171 has no interface number 0 [ 607.356371][ T1209] usb 3-1: config 171 interface 109 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 607.367546][ T1209] usb 3-1: config 171 interface 109 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 607.382554][ T1209] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.390539][ T1209] usb 3-1: Product: syz [ 607.394842][ T1209] usb 3-1: Manufacturer: syz [ 607.399457][ T1209] usb 3-1: SerialNumber: syz [ 607.510650][ T5694] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 607.609522][ T1209] ath6kl: Failed to submit usb control message: -71 [ 607.617190][ T1209] ath6kl: unable to send the bmi data to the device: -71 [ 607.624665][ T1209] ath6kl: Unable to send get target info: -71 [ 607.641480][ T1209] ath6kl: Failed to init ath6kl core: -71 [ 607.648113][T13221] aquacomputer_d5next 0003:0C70:F00B.0012: unknown main item tag 0x0 [ 607.656770][ T1209] ath6kl_usb 3-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 607.665789][T13221] aquacomputer_d5next 0003:0C70:F00B.0012: unknown main item tag 0x0 [ 607.671457][ T5694] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 607.677355][ T1209] usb 3-1: USB disconnect, device number 80 [ 607.688903][T13221] aquacomputer_d5next 0003:0C70:F00B.0012: unknown main item tag 0x0 [ 607.698969][T13221] aquacomputer_d5next 0003:0C70:F00B.0012: unknown main item tag 0x0 [ 607.709018][ T5694] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 607.716592][T13221] aquacomputer_d5next 0003:0C70:F00B.0012: unknown main item tag 0x0 [ 607.734526][ T5694] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 607.741960][T13221] aquacomputer_d5next 0003:0C70:F00B.0012: unknown main item tag 0x0 [ 607.755042][ T5694] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.762183][T13221] aquacomputer_d5next 0003:0C70:F00B.0012: unknown main item tag 0x0 [ 607.769503][ T5694] usb 4-1: config 0 descriptor?? [ 607.786373][T13221] aquacomputer_d5next 0003:0C70:F00B.0012: unknown main item tag 0x0 [ 607.795345][T13221] aquacomputer_d5next 0003:0C70:F00B.0012: unknown main item tag 0x0 [ 607.807508][T13221] aquacomputer_d5next 0003:0C70:F00B.0012: unknown main item tag 0x0 [ 607.818173][T13221] aquacomputer_d5next 0003:0C70:F00B.0012: hidraw0: USB HID v0.20 Device [HID 0c70:f00b] on usb-dummy_hcd.0-1/input0 [ 608.324544][ T5694] steelseries 0003:1038:12B6.0013: hidraw1: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.3-1/input0 [ 608.520405][ T5714] usb 1-1: USB disconnect, device number 90 [ 608.767644][T14397] FAULT_INJECTION: forcing a failure. [ 608.767644][T14397] name failslab, interval 1, probability 0, space 0, times 0 [ 608.780466][T14397] CPU: 0 UID: 0 PID: 14397 Comm: syz.1.2404 Tainted: G L syzkaller #0 PREEMPT(full) [ 608.780494][T14397] Tainted: [L]=SOFTLOCKUP [ 608.780501][T14397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 608.780512][T14397] Call Trace: [ 608.780519][T14397] [ 608.780526][T14397] dump_stack_lvl+0x100/0x190 [ 608.780556][T14397] should_fail_ex.cold+0x5/0xa [ 608.780587][T14397] should_failslab+0xc2/0x120 [ 608.780612][T14397] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 608.780634][T14397] ? find_held_lock+0x2b/0x80 [ 608.780654][T14397] ? alloc_inode+0x183/0x250 [ 608.780686][T14397] alloc_inode+0x183/0x250 [ 608.780711][T14397] path_from_stashed+0x25b/0x750 [ 608.780740][T14397] ns_get_path_cb+0x41/0x60 [ 608.780763][T14397] bpf_prog_offload_info_fill+0xcf/0x4f0 [ 608.780793][T14397] ? __pfx_bpf_prog_offload_info_fill+0x10/0x10 [ 608.780820][T14397] ? cap_capable+0x107/0x430 [ 608.780846][T14397] ? bpf_lsm_capable+0x9/0x10 [ 608.780864][T14397] ? security_capable+0x80/0x260 [ 608.780890][T14397] bpf_prog_get_info_by_fd+0x1a29/0x2f60 [ 608.780916][T14397] ? __schedule+0x126e/0x6730 [ 608.780951][T14397] ? __pfx_bpf_prog_get_info_by_fd+0x10/0x10 [ 608.780981][T14397] ? preempt_schedule_irq+0x7b/0x90 [ 608.781021][T14397] ? __fget_files+0x21f/0x3d0 [ 608.781048][T14397] __sys_bpf+0x3d56/0x4e80 [ 608.781065][T14397] ? do_raw_spin_unlock+0x145/0x1e0 [ 608.781097][T14397] ? __pfx___sys_bpf+0x10/0x10 [ 608.781116][T14397] ? hrtimer_start_range_ns_common+0x78e/0x18b0 [ 608.781151][T14397] ? find_held_lock+0x2b/0x80 [ 608.781169][T14397] ? finish_task_switch.isra.0+0x2c0/0x10c0 [ 608.781196][T14397] ? rcu_is_watching+0x12/0xc0 [ 608.781225][T14397] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 608.781256][T14397] ? rcu_is_watching+0x12/0xc0 [ 608.781282][T14397] ? trace_sched_exit_tp+0x120/0x160 [ 608.781311][T14397] ? __schedule+0x126e/0x6730 [ 608.781333][T14397] ? populate_seccomp_data+0x225/0x4d0 [ 608.781371][T14397] ? __pfx___seccomp_filter+0x10/0x10 [ 608.781403][T14397] ? xfd_validate_state+0x129/0x190 [ 608.781432][T14397] ? __x64_sys_bpf+0xce/0x140 [ 608.781450][T14397] __x64_sys_bpf+0xce/0x140 [ 608.781468][T14397] ? __secure_computing+0x201/0x2e0 [ 608.781498][T14397] do_syscall_64+0x115/0x870 [ 608.781520][T14397] ? clear_bhb_loop+0x70/0xc0 [ 608.781543][T14397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.781562][T14397] RIP: 0033:0x7fa43d99e0d9 [ 608.781584][T14397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 608.781601][T14397] RSP: 002b:00007fa43e8d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 608.781620][T14397] RAX: ffffffffffffffda RBX: 00007fa43dc26180 RCX: 00007fa43d99e0d9 [ 608.781632][T14397] RDX: 0000000000000010 RSI: 0000200000000340 RDI: 000000000000000f [ 608.781643][T14397] RBP: 00007fa43e8d7090 R08: 0000000000000000 R09: 0000000000000000 [ 608.781653][T14397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 608.781664][T14397] R13: 00007fa43dc26218 R14: 00007fa43dc26180 R15: 00007ffd1b9f7108 [ 608.781689][T14397] [ 609.098515][T13221] usb 4-1: USB disconnect, device number 21 [ 610.650968][T13221] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 610.864315][T13221] usb 2-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=fe.e6 [ 610.957040][T13221] usb 2-1: config 10 has an invalid descriptor of length 69, skipping remainder of the config [ 611.066679][T13221] usb 2-1: config 10 has 0 interfaces, different from the descriptor's value: 1 [ 611.187175][T13221] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.286564][T13221] usb 2-1: Product: syz [ 611.345878][T13221] usb 2-1: Manufacturer: syz [ 611.422498][T13221] usb 2-1: SerialNumber: syz [ 612.467331][T14417] 8021q: adding VLAN 0 to HW filter on device bond3 [ 612.488008][T14417] bridge0: port 4(bond3) entered blocking state [ 612.508638][T14417] bridge0: port 4(bond3) entered disabled state [ 612.518646][T14417] bond3: entered allmulticast mode [ 612.536344][T14417] bond3: entered promiscuous mode [ 612.552815][T14417] bridge0: port 4(bond3) entered blocking state [ 612.559091][T14417] bridge0: port 4(bond3) entered forwarding state [ 612.654812][T14143] bridge0: port 4(bond3) entered disabled state [ 612.668179][T14417] tipc: Enabled bearer , priority 0 [ 612.686068][T14417] syzkaller0: entered promiscuous mode [ 612.693564][T14417] syzkaller0: entered allmulticast mode [ 612.733875][T14416] tipc: Resetting bearer [ 612.749792][T14416] tipc: Disabling bearer [ 612.838452][T14428] Cannot find add_set index 2 as target [ 612.860763][ T5693] usb 3-1: new full-speed USB device number 81 using dummy_hcd [ 612.900930][T14428] block nbd0: server does not support multiple connections per device. [ 612.982057][T14428] block nbd0: shutting down sockets [ 613.405108][ T5693] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 613.762060][T13221] usb 2-1: USB disconnect, device number 85 [ 613.770672][ T5693] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 613.779481][ T5693] usb 3-1: config 0 has no interface number 0 [ 613.792447][ T5693] usb 3-1: config 0 interface 251 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 613.807217][ T5693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.815726][ T5693] usb 3-1: Product: syz [ 613.819906][ T5693] usb 3-1: Manufacturer: syz [ 613.825706][ T5693] usb 3-1: SerialNumber: syz [ 613.855968][ T5693] usb 3-1: config 0 descriptor?? [ 613.866838][ T5693] asix 3-1:0.251: probe with driver asix failed with error -22 [ 614.833453][T14448] FAULT_INJECTION: forcing a failure. [ 614.833453][T14448] name failslab, interval 1, probability 0, space 0, times 0 [ 614.962253][T14448] CPU: 0 UID: 0 PID: 14448 Comm: syz.0.2417 Tainted: G L syzkaller #0 PREEMPT(full) [ 614.962282][T14448] Tainted: [L]=SOFTLOCKUP [ 614.962288][T14448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 614.962298][T14448] Call Trace: [ 614.962305][T14448] [ 614.962312][T14448] dump_stack_lvl+0x100/0x190 [ 614.962331][T14448] should_fail_ex.cold+0x5/0xa [ 614.962346][T14448] should_failslab+0xc2/0x120 [ 614.962362][T14448] kmem_cache_alloc_noprof+0x91/0x6a0 [ 614.962378][T14448] ? vm_area_dup+0x27/0x8e0 [ 614.962393][T14448] vm_area_dup+0x27/0x8e0 [ 614.962405][T14448] __split_vma+0x18c/0xda0 [ 614.962415][T14448] ? __mpol_equal+0xaf/0x340 [ 614.962427][T14448] ? __pfx___split_vma+0x10/0x10 [ 614.962442][T14448] ? __pfx_mas_prev_range+0x10/0x10 [ 614.962464][T14448] vma_modify+0x1cf4/0x25c0 [ 614.962476][T14448] ? __pfx_find_vma+0x10/0x10 [ 614.962494][T14448] ? __pfx_vma_modify+0x10/0x10 [ 614.962505][T14448] ? queue_pages_test_walk+0x258/0x420 [ 614.962523][T14448] ? __pfx_find_vma+0x10/0x10 [ 614.962537][T14448] ? __pfx_queue_pages_test_walk+0x10/0x10 [ 614.962555][T14448] ? walk_page_test+0x78/0x180 [ 614.962573][T14448] vma_modify_policy+0x238/0x300 [ 614.962586][T14448] ? __pfx_vma_modify_policy+0x10/0x10 [ 614.962610][T14448] mbind_range+0x175/0x550 [ 614.962622][T14448] do_mbind+0x7dc/0xfd0 [ 614.962637][T14448] ? __pfx_do_mbind+0x10/0x10 [ 614.962647][T14448] ? find_held_lock+0x2b/0x80 [ 614.962659][T14448] ? ksys_write+0x190/0x250 [ 614.962676][T14448] ? __pfx_get_nodes+0x10/0x10 [ 614.962691][T14448] ? __fget_files+0x21f/0x3d0 [ 614.962705][T14448] kernel_mbind+0x1b7/0x200 [ 614.962718][T14448] ? __pfx_kernel_mbind+0x10/0x10 [ 614.962729][T14448] ? trace_hardirqs_off+0x70/0x170 [ 614.962748][T14448] do_syscall_64+0x115/0x870 [ 614.962763][T14448] ? clear_bhb_loop+0x70/0xc0 [ 614.962777][T14448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.962789][T14448] RIP: 0033:0x7f7a2039e0d9 [ 614.962799][T14448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 614.962810][T14448] RSP: 002b:00007f7a212be028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 614.962827][T14448] RAX: ffffffffffffffda RBX: 00007f7a20626180 RCX: 00007f7a2039e0d9 [ 614.962834][T14448] RDX: 0000000000000001 RSI: 0000000000c00000 RDI: 0000200000400000 [ 614.962841][T14448] RBP: 00007f7a212be090 R08: 0000000000000000 R09: 0000000000000002 [ 614.962847][T14448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 614.962854][T14448] R13: 00007f7a20626218 R14: 00007f7a20626180 R15: 00007ffe0451a9f8 [ 614.962868][T14448] [ 615.365050][T14455] binder: BINDER_SET_CONTEXT_MGR already set [ 615.371070][T14455] binder: 14454:14455 ioctl 4018620d 200000000240 returned -16 [ 615.590606][T13367] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 615.741936][T13367] usb 1-1: descriptor type invalid, skip [ 615.983641][ T5606] Bluetooth: hci1: command 0x1003 tx timeout [ 615.990375][ T5599] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 616.313114][T13367] usb 1-1: not running at top speed; connect to a high speed hub [ 616.356211][T13367] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 616.413768][T13367] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.422644][T13367] usb 1-1: Product: syz [ 616.444092][T14451] smpboot: CPU 1 is now offline [ 616.499014][T13367] usb 1-1: Manufacturer: syz [ 616.603474][T13367] usb 1-1: SerialNumber: syz [ 616.651882][T14462] mmap: syz.1.2422 (14462): VmData 25837568 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 616.696078][ T5694] usb 3-1: USB disconnect, device number 81 [ 616.805305][T14468] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 616.811810][T14468] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 616.829005][T14471] sctp: [Deprecated]: syz.4.2425 (pid 14471) Use of struct sctp_assoc_value in delayed_ack socket option. [ 616.829005][T14471] Use struct sctp_sack_info instead [ 616.882054][T14468] vhci_hcd vhci_hcd.0: Device attached [ 617.138792][T13367] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 617.151249][T14473] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(7) [ 617.157738][T14473] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 617.241018][ T9] usb 37-1: new high-speed USB device number 5 using vhci_hcd [ 617.283464][T14468] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(6) [ 617.289960][T14468] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 617.320170][ T30] audit: type=1326 audit(1786524195.695:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14480 comm="syz.0.2426" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a2039e0d9 code=0x0 [ 617.382598][T13367] usb 1-1: USB disconnect, device number 91 [ 617.399758][T14473] vhci_hcd vhci_hcd.0: Device attached [ 617.416450][T14489] fuse: Unknown parameter 'user_id00000000000000000000' [ 617.479400][T14468] vhci_hcd vhci_hcd.0: Device attached [ 617.680716][ T5694] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 617.696369][T14495] Cannot find add_set index 0 as target [ 617.842471][ T5694] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 617.866940][ T5694] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 617.893035][ T5694] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 617.938364][ T5694] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 618.170603][ T5721] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 618.701847][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 618.708138][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 618.804224][ T5694] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.930076][ T5694] usb 3-1: Product: syz [ 618.949294][ T5694] usb 3-1: Manufacturer: syz [ 618.969673][ T5694] usb 3-1: SerialNumber: syz [ 618.981895][ T5721] usb 5-1: Using ep0 maxpacket: 16 [ 618.998593][ T5694] usb 3-1: config 0 descriptor?? [ 619.012527][ T5721] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 619.027875][T14488] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 619.041353][T14488] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 619.050187][ T5721] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 619.069496][ T5694] usb 3-1: ucan: probing device on interface #0 [ 619.077579][ T5721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.097113][ T5721] usb 5-1: Product: syz [ 619.108812][ T5721] usb 5-1: Manufacturer: syz [ 619.119281][ T5721] usb 5-1: SerialNumber: syz [ 619.138780][ T5721] r8152-cfgselector 5-1: Unknown version 0x0000 [ 619.155540][ T5721] r8152-cfgselector 5-1: config 0 descriptor?? [ 619.201388][T13367] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 619.280727][ T5714] usb 1-1: new full-speed USB device number 92 using dummy_hcd [ 619.361238][T13367] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c08, bcdDevice= 0.00 [ 619.480179][T14482] vhci_hcd: connection closed [ 619.482317][T14470] vhci_hcd: connection reset by peer [ 619.493585][T14474] vhci_hcd: connection closed [ 619.585376][T14135] vhci_hcd vhci_hcd.2: stop threads [ 619.676009][ T5694] usb 3-1: ucan: failed to retrieve device info [ 620.111418][ T5721] r8152-cfgselector 5-1: Needed 1 retries to read version [ 620.134606][ T5694] usb 3-1: ucan: probe failed; try to update the device firmware [ 620.144204][T14515] dvmrp0: entered allmulticast mode [ 620.158239][T13367] usb 2-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 620.174187][T14135] vhci_hcd vhci_hcd.2: release socket [ 620.180094][ T5721] r8152-cfgselector 5-1: Unknown version 0x0000 [ 620.207897][T14135] vhci_hcd vhci_hcd.2: disconnect device [ 620.217273][ T5694] usb 3-1: USB disconnect, device number 82 [ 620.228457][ T5721] r8152-cfgselector 5-1: No union descriptors [ 620.237715][T13367] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 620.264437][T14135] vhci_hcd vhci_hcd.2: stop threads [ 620.273063][ T5714] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 620.305258][T14135] vhci_hcd vhci_hcd.2: release socket [ 620.327635][ T5714] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 620.342148][T13367] usb 2-1: config 0 interface 0 has no altsetting 0 [ 620.355666][T14135] vhci_hcd vhci_hcd.2: disconnect device [ 620.356465][T14135] vhci_hcd vhci_hcd.2: stop threads [ 620.356478][T14135] vhci_hcd vhci_hcd.2: release socket [ 620.356522][T14135] vhci_hcd vhci_hcd.2: disconnect device [ 620.378568][ T5714] usb 1-1: config 0 has no interface number 0 [ 620.378595][ T5714] usb 1-1: config 0 interface 251 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 620.386039][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.386054][ T5714] usb 1-1: Product: syz [ 620.386064][ T5714] usb 1-1: Manufacturer: syz [ 620.386072][ T5714] usb 1-1: SerialNumber: syz [ 620.387239][ T5714] usb 1-1: config 0 descriptor?? [ 620.390413][ T5714] asix 1-1:0.251: probe with driver asix failed with error -22 [ 620.395364][T13367] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.411386][T13367] usb 2-1: config 0 descriptor?? [ 620.426675][ T5721] r8152-cfgselector 5-1: USB disconnect, device number 87 [ 620.640089][T13367] usbhid 2-1:0.0: can't add hid device: -71 [ 620.663418][T13367] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 620.671647][ T5694] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 620.711698][T13367] usb 2-1: USB disconnect, device number 86 [ 620.732720][ T30] audit: type=1400 audit(1786524199.105:951): avc: denied { bind } for pid=14526 comm="syz.1.2440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 620.797108][ T30] audit: type=1400 audit(1786524199.145:952): avc: denied { write } for pid=14526 comm="syz.1.2440" name="functions" dev="configfs" ino=9723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 620.871685][ T30] audit: type=1400 audit(1786524199.145:953): avc: denied { add_name } for pid=14526 comm="syz.1.2440" name="obex.usb0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 621.054397][ T30] audit: type=1400 audit(1786524199.435:954): avc: denied { ioctl } for pid=14536 comm="syz.4.2443" path="socket:[49738]" dev="sockfs" ino=49738 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 621.095949][T14537] scsi_nl_rcv_msg: discarding partial skb [ 621.148843][ T30] audit: type=1400 audit(1786524199.475:955): avc: denied { create } for pid=14536 comm="syz.4.2443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 621.223753][ T30] audit: type=1400 audit(1786524199.475:956): avc: denied { write } for pid=14536 comm="syz.4.2443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 621.281014][ T30] audit: type=1400 audit(1786524199.495:957): avc: denied { append } for pid=14536 comm="syz.4.2443" name="sg0" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 621.375383][T14546] netlink: 'syz.3.2446': attribute type 4 has an invalid length. [ 621.413532][ T30] audit: type=1400 audit(1786524199.655:958): avc: denied { getopt } for pid=14541 comm="syz.1.2445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 621.456397][ T30] audit: type=1400 audit(1786524199.655:959): avc: denied { mounton } for pid=14541 comm="syz.1.2445" path="/467/config" dev="configfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 621.680757][T13367] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 621.840701][T13367] usb 4-1: Using ep0 maxpacket: 32 [ 621.856043][T13367] usb 4-1: unable to get BOS descriptor or descriptor too short [ 621.876571][T13367] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 621.914175][T13367] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 621.938233][T13367] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 621.979390][T13367] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 622.027696][ T5721] usb 1-1: USB disconnect, device number 92 [ 622.042036][T13367] usb 4-1: config 128 has no interface number 0 [ 622.085665][T13367] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 622.660652][ T9] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 623.021818][T13367] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 623.076483][T13367] usb 4-1: config 128 interface 127 has no altsetting 0 [ 623.121140][T13367] usb 4-1: string descriptor 0 read error: -22 [ 623.146783][T13367] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.371933][ T5721] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 623.433195][T13367] usb 4-1: USB disconnect, device number 22 [ 623.497903][T14576] bridge_slave_0: entered promiscuous mode [ 623.563588][ T5721] usb 5-1: Using ep0 maxpacket: 16 [ 623.569305][ T5721] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 623.585287][ T5721] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 623.609272][ T5721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.618314][ T5721] usb 5-1: Product: syz [ 623.624660][ T5721] usb 5-1: Manufacturer: syz [ 623.633217][ T5721] usb 5-1: SerialNumber: syz [ 623.648005][ T5721] r8152-cfgselector 5-1: Unknown version 0x0000 [ 623.665700][ T5721] r8152-cfgselector 5-1: config 0 descriptor?? [ 623.717576][T14578] overlayfs: option "workdir=./file2" is useless in a non-upper mount, ignore [ 623.727067][T14578] overlayfs: missing 'lowerdir' [ 623.881684][ T5721] r8152-cfgselector 5-1: Needed 1 retries to read version [ 623.888835][ T5721] r8152-cfgselector 5-1: Unknown version 0x0000 [ 623.895545][ T5721] r8152-cfgselector 5-1: No union descriptors [ 623.930821][ T5694] usb 3-1: device descriptor read/64, error -71 [ 623.970902][T13367] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 624.018538][T14582] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2459'. [ 624.031997][T14582] team0: Device xfrm0 is of different type [ 624.044585][T14582] tipc: Enabling of bearer rejected, failed to enable media [ 624.055491][T14582] IPVS: Unknown mcast interface: dvmrp0 [ 624.102346][ T5721] r8152-cfgselector 5-1: USB disconnect, device number 88 [ 624.132405][T13367] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 624.151706][T13367] usb 2-1: config 0 interface 0 has no altsetting 0 [ 624.161466][T13367] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.171201][ T5694] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 624.190031][T13367] usb 2-1: config 0 descriptor?? [ 624.321400][ T5694] usb 3-1: device descriptor read/64, error -71 [ 624.430804][ T5694] usb usb3-port1: attempt power cycle [ 624.450576][ T9] usb 1-1: new full-speed USB device number 93 using dummy_hcd [ 624.602243][ T9] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 624.626586][T13367] hid_parser_main: 35 callbacks suppressed [ 624.626601][T13367] hid-led 0003:0FC5:B080.0014: unknown main item tag 0x1 [ 624.656156][ T9] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 624.665979][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 624.665988][ T30] audit: type=1400 audit(1786524203.025:961): avc: denied { write } for pid=14588 comm="syz.3.2462" name="subsystems" dev="configfs" ino=572 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 624.708539][ T9] usb 1-1: config 0 has no interface number 0 [ 624.715282][T13367] hid-led 0003:0FC5:B080.0014: unknown main item tag 0x5 [ 624.739736][ T9] usb 1-1: config 0 interface 251 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 624.753866][T13367] hid-led 0003:0FC5:B080.0014: unknown main item tag 0x6 [ 624.768569][T13367] hid-led 0003:0FC5:B080.0014: unknown main item tag 0x0 [ 624.781828][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.790810][ T5694] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 624.799813][T13367] hid-led 0003:0FC5:B080.0014: unknown main item tag 0x0 [ 624.810683][ T9] usb 1-1: Product: syz [ 624.822689][ T9] usb 1-1: Manufacturer: syz [ 624.827294][T13367] hid-led 0003:0FC5:B080.0014: unknown main item tag 0x0 [ 624.841100][ T9] usb 1-1: SerialNumber: syz [ 624.845745][ T5694] usb 3-1: device descriptor read/8, error -71 [ 624.855135][T13367] hid-led 0003:0FC5:B080.0014: unknown main item tag 0x0 [ 624.868604][ T9] usb 1-1: config 0 descriptor?? [ 624.880659][T13367] hid-led 0003:0FC5:B080.0014: unknown main item tag 0x0 [ 624.891393][ T9] asix 1-1:0.251: probe with driver asix failed with error -22 [ 624.900523][T14592] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2462'. [ 624.909491][T13367] hid-led 0003:0FC5:B080.0014: unknown main item tag 0x0 [ 624.928355][T13367] hid-led 0003:0FC5:B080.0014: unknown main item tag 0x0 [ 624.950132][T13367] hid-led 0003:0FC5:B080.0014: probe with driver hid-led failed with error -71 [ 624.972433][ T5721] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 624.988340][T13367] usb 2-1: USB disconnect, device number 87 [ 625.111122][ T5694] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 625.130647][ T5721] usb 5-1: Using ep0 maxpacket: 32 [ 625.139386][ T5721] usb 5-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 625.158626][ T5694] usb 3-1: device descriptor read/8, error -71 [ 625.172864][ T5721] usb 5-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 625.185332][T14598] binder: BINDER_SET_CONTEXT_MGR already set [ 625.193526][ T5721] usb 5-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 625.206974][T14598] binder: 14596:14598 ioctl 4018620d 200000004a80 returned -16 [ 625.215617][ T5721] usb 5-1: config 0 interface 0 has no altsetting 0 [ 625.230047][ T5721] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.260495][ T5721] usb 5-1: config 0 descriptor?? [ 625.280956][ T5694] usb usb3-port1: unable to enumerate USB device [ 625.352360][ T5599] Bluetooth: hci5: unexpected event for opcode 0x4ad0 [ 625.469062][T14606] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 625.475577][T14606] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 625.486133][T14591] netlink: 'syz.4.2463': attribute type 1 has an invalid length. [ 625.494057][T14606] vhci_hcd vhci_hcd.0: Device attached [ 625.508590][T14606] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 625.515076][T14606] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 625.532100][T14591] 8021q: adding VLAN 0 to HW filter on device bond4 [ 625.574667][T14606] vhci_hcd vhci_hcd.0: Device attached [ 625.588011][T14613] bond4: (slave geneve2): making interface the new active one [ 625.601999][T14614] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(9) [ 625.608495][T14614] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 625.637461][ T9] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 625.652043][T14613] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 625.693539][T14614] vhci_hcd vhci_hcd.0: Device attached [ 625.722504][ T6254] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 625.731359][ T5694] usb 35-1: new high-speed USB device number 5 using vhci_hcd [ 625.767040][ T6254] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 625.806593][ T6254] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 625.841343][ T6254] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 625.859707][ T5721] wacom 0003:056A:00C5.0016: ignoring exceeding usage max [ 625.900780][ T5721] wacom 0003:056A:00C5.0016: hidraw1: USB HID v0.81 Device [HID 056a:00c5] on usb-dummy_hcd.4-1/input0 [ 625.940623][ T9] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 626.111543][ T9] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 626.131823][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 626.151276][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 626.180410][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 626.202446][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.214692][ T9] usb 2-1: Product: syz [ 626.224151][ T9] usb 2-1: Manufacturer: syz [ 626.232913][ T9] usb 2-1: SerialNumber: syz [ 626.246372][ T9] usb 2-1: config 0 descriptor?? [ 626.258490][T14619] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 626.265981][T14619] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 626.273873][T14591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.291551][T14591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.302768][ T9] usb 2-1: ucan: probing device on interface #0 [ 626.314470][T14591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.337251][T14591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.362774][ T5714] usb 5-1: USB disconnect, device number 89 [ 626.554145][T14624] binder_alloc: 14623: binder_alloc_buf, no vma [ 626.578261][T14626] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 626.584758][T14626] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 626.610082][T14626] vhci_hcd vhci_hcd.0: Device attached [ 626.624696][T14630] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2472'. [ 626.634903][T14626] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 626.641395][T14626] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 626.654304][T14630] tipc: Enabling of bearer rejected, failed to enable media [ 626.662767][T14626] vhci_hcd vhci_hcd.0: Device attached [ 626.669698][T14630] IPVS: Unknown mcast interface: dvmrp0 [ 626.712484][T14615] vhci_hcd: connection closed [ 626.712714][ T9317] vhci_hcd vhci_hcd.1: stop threads [ 626.723124][ T9] usb 2-1: ucan: failed to retrieve device info [ 626.730022][T14607] vhci_hcd: connection reset by peer [ 626.735918][T14610] vhci_hcd: connection closed [ 626.738918][ T9317] vhci_hcd vhci_hcd.1: release socket [ 626.749656][ T9] usb 2-1: ucan: probe failed; try to update the device firmware [ 626.759454][ T9317] vhci_hcd vhci_hcd.1: disconnect device [ 626.770698][ T9] usb 2-1: USB disconnect, device number 88 [ 626.781662][ T9317] vhci_hcd vhci_hcd.1: stop threads [ 626.796563][ T9317] vhci_hcd vhci_hcd.1: release socket [ 626.802782][ T9317] vhci_hcd vhci_hcd.1: disconnect device [ 626.808538][ T9317] vhci_hcd vhci_hcd.1: stop threads [ 626.814712][ T9317] vhci_hcd vhci_hcd.1: release socket [ 626.820123][ T9317] vhci_hcd vhci_hcd.1: disconnect device [ 626.840597][ T5721] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 626.920734][ T5714] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 627.071125][ T5714] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 627.081112][ T5714] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 627.092961][ T5714] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 627.105096][ T5714] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 627.116720][ T5714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.124829][ T5714] usb 4-1: Product: syz [ 627.129060][ T5714] usb 4-1: Manufacturer: syz [ 627.133718][ T980] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 627.141676][ T5714] usb 4-1: SerialNumber: syz [ 627.148743][ T5714] usb 4-1: config 0 descriptor?? [ 627.156105][T14634] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 627.163460][T14634] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 627.171610][ T5714] usb 4-1: ucan: probing device on interface #0 [ 627.237676][ T9] usb 1-1: USB disconnect, device number 93 [ 627.292882][ T980] usb 5-1: Using ep0 maxpacket: 16 [ 627.328989][ T980] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 627.362938][ T980] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 627.398106][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.415135][T14642] 8021q: adding VLAN 0 to HW filter on device bond5 [ 627.434191][ T980] usb 5-1: Product: syz [ 627.446674][T14642] bridge0: port 2(bond5) entered blocking state [ 627.457399][ T980] usb 5-1: Manufacturer: syz [ 627.474385][ T980] usb 5-1: SerialNumber: syz [ 627.483947][T14642] bridge0: port 2(bond5) entered disabled state [ 627.507492][ T980] r8152-cfgselector 5-1: Unknown version 0x0000 [ 627.515961][T14642] bond5: entered allmulticast mode [ 627.527532][ T980] r8152-cfgselector 5-1: config 0 descriptor?? [ 627.539745][T14642] bond5: entered promiscuous mode [ 627.546181][T14653] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 627.564895][T14642] bridge0: port 2(bond5) entered blocking state [ 627.571191][T14642] bridge0: port 2(bond5) entered forwarding state [ 627.579644][T14631] vhci_hcd: connection closed [ 627.579873][T14135] vhci_hcd vhci_hcd.3: stop threads [ 627.589839][ T5714] usb 4-1: ucan: failed to retrieve device info [ 627.597545][T14627] vhci_hcd: connection reset by peer [ 627.609953][ T5714] usb 4-1: ucan: probe failed; try to update the device firmware [ 627.618752][T14135] vhci_hcd vhci_hcd.3: release socket [ 627.627173][T14135] vhci_hcd vhci_hcd.3: disconnect device [ 627.639099][ T5714] usb 4-1: USB disconnect, device number 23 [ 627.647940][ T9317] bridge0: port 2(bond5) entered disabled state [ 627.987224][ T980] r8152-cfgselector 5-1: Needed 1 retries to read version [ 627.994837][T14135] vhci_hcd vhci_hcd.3: stop threads [ 628.665226][T14656] tipc: Enabled bearer , priority 0 [ 628.671878][T14135] vhci_hcd vhci_hcd.3: release socket [ 628.678942][ T980] r8152-cfgselector 5-1: Unknown version 0x0000 [ 629.654711][T14135] vhci_hcd vhci_hcd.3: disconnect device [ 629.665832][ T980] r8152-cfgselector 5-1: No union descriptors [ 629.676822][T14648] tipc: Disabling bearer [ 630.029477][ T9] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 630.055994][ T980] r8152-cfgselector 5-1: USB disconnect, device number 90 [ 630.087037][T14649] tipc: Node number set to 155946437 [ 630.097531][T14665] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 630.234594][ T9] usb 3-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 631.050831][ T5694] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 631.083815][T14635] Process accounting resumed [ 631.108854][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 631.160245][ T9] usb 3-1: can't read configurations, error -71 [ 631.174592][T14668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.200836][T14670] binder: BINDER_SET_CONTEXT_MGR already set [ 631.216644][T14668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.225687][T14673] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2484'. [ 631.242946][T14670] binder: 14669:14670 ioctl 4018620d 200000000240 returned -16 [ 631.403665][T14687] tipc: Enabling of bearer rejected, failed to enable media [ 631.442140][T14673] IPVS: Unknown mcast interface: dvmrp0 [ 631.550592][ T5714] usb 1-1: new full-speed USB device number 94 using dummy_hcd [ 632.315411][ T5721] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 632.561075][ T5714] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 632.736473][ T980] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 633.477002][ T5714] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 633.489675][T14701] nvme_fabrics: missing parameter 'transport=%s' [ 633.502704][ T5714] usb 1-1: config 0 has no interface number 0 [ 633.510270][T14701] nvme_fabrics: missing parameter 'nqn=%s' [ 633.532464][ T5714] usb 1-1: config 0 interface 251 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 633.557263][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.566412][ T5714] usb 1-1: Product: syz [ 633.573058][ T5714] usb 1-1: Manufacturer: syz [ 633.577730][ T5714] usb 1-1: SerialNumber: syz [ 633.584201][ T5714] usb 1-1: config 0 descriptor?? [ 633.593644][ T5714] asix 1-1:0.251: probe with driver asix failed with error -22 [ 633.601402][ T5694] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 633.631508][ T980] usb 5-1: Using ep0 maxpacket: 8 [ 633.638116][ T980] usb 5-1: unable to get BOS descriptor or descriptor too short [ 633.646240][ T980] usb 5-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=a5.73 [ 633.656463][ T980] usb 5-1: config 1 has an invalid interface number: 229 but max is 0 [ 633.665966][ T980] usb 5-1: config 1 has no interface number 0 [ 633.672173][ T980] usb 5-1: config 1 interface 229 has no altsetting 0 [ 633.680504][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.691301][ T980] usb 5-1: Product: syz [ 633.695451][ T980] usb 5-1: Manufacturer: syz [ 633.700023][ T980] usb 5-1: SerialNumber: syz [ 633.710597][T14649] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 633.770977][ T5694] usb 3-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f7.3f [ 633.781066][ T5694] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 633.789569][ T5694] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 633.806632][ T5694] usb 3-1: config 0 has no interface number 0 [ 633.813054][ T5694] usb 3-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid wMaxPacketSize 0 [ 633.822875][ T5694] usb 3-1: config 0 interface 2 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 633.835835][ T5694] usb 3-1: config 0 interface 2 has no altsetting 0 [ 633.844305][ T5694] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.852539][ T5694] usb 3-1: Product: syz [ 633.856685][ T5694] usb 3-1: Manufacturer: syz [ 633.861323][T13887] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 633.869378][T14649] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 633.878592][ T5694] usb 3-1: SerialNumber: syz [ 633.885184][ T5694] usb 3-1: config 0 descriptor?? [ 633.892895][T14649] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 633.902978][T14649] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4D, changing to 0xD [ 633.926057][ T5694] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 633.933510][T14649] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 633.963750][T14649] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 633.979800][ T980] usb 5-1: selecting invalid altsetting 1 [ 633.990392][T14649] usb 4-1: Manufacturer: syz [ 634.000144][ T980] comedi comedi5: could not switch to alternate setting 1 [ 634.014062][T14649] usb 4-1: config 0 descriptor?? [ 634.028068][ T980] usbduxfast 5-1:1.229: driver 'usbduxfast' failed to auto-configure device. [ 634.042330][T14649] igorplugusb 4-1:0.0: endpoint incorrect [ 634.049710][T13887] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 634.081217][T13887] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 634.092317][ T980] usb 5-1: USB disconnect, device number 91 [ 634.108995][T13887] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 634.160956][T13887] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 634.194856][T13887] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 634.228620][T13887] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 634.241066][ T5694] snd-usb-audio 3-1:0.2: probe with driver snd-usb-audio failed with error -12 [ 634.267217][T13887] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 634.283868][T14649] usb 4-1: USB disconnect, device number 24 [ 634.293252][ T5694] usb 3-1: USB disconnect, device number 89 [ 634.312097][ T9036] udevd[9036]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 634.344646][T13887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 634.364927][T13887] usb 2-1: Product: syz [ 634.373507][T13887] usb 2-1: Manufacturer: syz [ 634.393629][T14709] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 634.407064][T14709] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 634.421918][T14709] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 634.437179][T14709] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 634.464518][T14709] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 634.492879][T14709] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 635.412248][T13887] usb 2-1: USB2VGA dongle found at address 90 [ 635.433649][ T30] audit: type=1400 audit(1786524213.815:962): avc: denied { mount } for pid=14711 comm="syz.4.2496" name="/" dev="rpc_pipefs" ino=50501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 635.493811][ T5721] usb 1-1: USB disconnect, device number 94 [ 635.515111][T13887] usb 2-1: Allocated 8 output buffers [ 635.584362][T13887] usb 2-1: Failed to early initialize device [ 635.617851][T14722] binder: BINDER_SET_CONTEXT_MGR already set [ 635.634397][ T30] audit: type=1400 audit(1786524213.915:963): avc: denied { unmount } for pid=5600 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 635.686278][T14722] binder: 14721:14722 ioctl 4018620d 200000000240 returned -16 [ 636.660292][T14738] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2504'. [ 636.704465][T14738] tipc: Enabling of bearer rejected, failed to enable media [ 636.735270][ T5694] usb 2-1: USB disconnect, device number 90 [ 636.749495][T14738] IPVS: Unknown mcast interface: dvmrp0 [ 636.920676][T13887] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 636.940595][ T5721] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 637.060577][T14649] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 637.071060][T13887] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 637.081018][T13887] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 637.090932][T13887] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 637.104506][ T5721] usb 5-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 637.113773][ T5694] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 637.123378][T13887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.132958][ T5721] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 637.146917][ T5721] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 637.163908][ T5721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.172383][ T5721] usb 5-1: Product: syz [ 637.176545][ T5721] usb 5-1: Manufacturer: syz [ 637.181515][ T5721] usb 5-1: SerialNumber: syz [ 637.195849][ T5721] etas_es58x 5-1:1.0: Starting syz syz (Serial Number syz) [ 637.210597][T14649] usb 1-1: Using ep0 maxpacket: 32 [ 637.216377][T14649] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 637.226280][T14649] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 637.237201][T14649] usb 1-1: config 0 has no interface number 0 [ 637.243381][T14649] usb 1-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 255 [ 637.253651][T14649] usb 1-1: config 0 interface 184 has no altsetting 0 [ 637.262688][T14649] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.270803][T14649] usb 1-1: Product: syz [ 637.274970][T14649] usb 1-1: Manufacturer: syz [ 637.279542][T14649] usb 1-1: SerialNumber: syz [ 637.286173][ T5694] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 637.301075][T14649] usb 1-1: config 0 descriptor?? [ 637.314945][ T5694] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 637.331242][T14749] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 637.341046][ T5694] usb 2-1: config 0 has no interface number 0 [ 637.358034][T13887] usb 4-1: GET_CAPABILITIES returned 0 [ 637.365085][ T5694] usb 2-1: config 0 interface 251 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 637.379577][T13887] usbtmc 4-1:16.0: can't read capabilities [ 637.405134][ T5694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.428068][ T5694] usb 2-1: Product: syz [ 637.437603][ T5694] usb 2-1: Manufacturer: syz [ 637.447065][ T5721] etas_es58x 5-1:1.0: could not parse product info: 'Э' [ 637.458361][T14754] IPVS: length: 250 != 8 [ 637.462738][ T5694] usb 2-1: SerialNumber: syz [ 637.473722][ T5694] usb 2-1: config 0 descriptor?? [ 637.480483][ T30] audit: type=1400 audit(1786524215.855:964): avc: denied { name_connect } for pid=14752 comm="syz.2.2511" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 637.528538][ T5694] asix 2-1:0.251: probe with driver asix failed with error -22 [ 637.571218][T14746] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2508'. [ 637.615125][ T5694] usb 4-1: USB disconnect, device number 25 [ 637.631871][T14746] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2508'. [ 637.691984][T14749] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2508'. [ 637.733473][T14749] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2508'. [ 637.774360][T14765] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2513'. [ 637.867373][T14746] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2508'. [ 638.870479][T14765] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2513'. [ 638.907132][ T5721] usb 5-1: USB disconnect, device number 92 [ 638.946533][T14746] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2508'. [ 638.957915][ T5721] etas_es58x 5-1:1.0: Disconnecting syz syz [ 639.024208][ T30] audit: type=1400 audit(1786524217.375:965): avc: denied { ioctl } for pid=14763 comm="syz.2.2513" path="/462/file0" dev="tmpfs" ino=2581 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 639.071315][T14749] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2508'. [ 640.176308][ T30] audit: type=1400 audit(1786524217.435:966): avc: denied { getopt } for pid=14780 comm="syz.3.2514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 640.213202][ T5694] usb 2-1: USB disconnect, device number 91 [ 640.305138][T14784] jffs2: notice: (14784) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 640.345262][T14649] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 640.419765][T14649] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 640.521835][T14649] usb 1-1: USB disconnect, device number 95 [ 640.587025][ T30] audit: type=1400 audit(1786524218.965:967): avc: denied { write } for pid=14760 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 640.682195][T14818] Bluetooth: ISO socket layer initialized [ 640.805383][ T30] audit: type=1400 audit(1786524219.175:968): avc: denied { accept } for pid=14812 comm="syz.3.2522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 640.965851][T14826] netlink: 'syz.4.2524': attribute type 1 has an invalid length. [ 640.973796][T14649] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 641.029197][T14830] FAULT_INJECTION: forcing a failure. [ 641.029197][T14830] name failslab, interval 1, probability 0, space 0, times 0 [ 641.043015][ T30] audit: type=1400 audit(1786524219.285:969): avc: denied { create } for pid=14812 comm="syz.3.2522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 641.085226][T14826] 8021q: adding VLAN 0 to HW filter on device bond5 [ 641.126532][T14830] CPU: 0 UID: 0 PID: 14830 Comm: syz.2.2525 Tainted: G L syzkaller #0 PREEMPT(full) [ 641.126550][T14830] Tainted: [L]=SOFTLOCKUP [ 641.126554][T14830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 641.126561][T14830] Call Trace: [ 641.126565][T14830] [ 641.126570][T14830] dump_stack_lvl+0x100/0x190 [ 641.126589][T14830] should_fail_ex.cold+0x5/0xa [ 641.126604][T14830] should_failslab+0xc2/0x120 [ 641.126620][T14830] __kmalloc_noprof+0xfc/0x820 [ 641.126634][T14830] ? bpf_test_init.isra.0+0x88/0x100 [ 641.126655][T14830] bpf_test_init.isra.0+0x88/0x100 [ 641.126674][T14830] bpf_prog_test_run_xdp+0x57e/0x1670 [ 641.126690][T14830] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 641.126706][T14830] ? fput+0x79/0x100 [ 641.126720][T14830] ? __bpf_prog_get+0x97/0x2a0 [ 641.126736][T14830] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 641.126748][T14830] __sys_bpf+0x2a12/0x4e80 [ 641.126763][T14830] ? __pfx___sys_bpf+0x10/0x10 [ 641.126780][T14830] ? find_held_lock+0x2b/0x80 [ 641.126791][T14830] ? get_pid_task+0xfc/0x250 [ 641.126802][T14830] ? get_pid_task+0xfc/0x250 [ 641.126816][T14830] ? find_held_lock+0x2b/0x80 [ 641.126830][T14830] ? rcu_read_lock_any_held+0x6a/0xa0 [ 641.126842][T14830] ? find_held_lock+0x2b/0x80 [ 641.126852][T14830] ? ksys_write+0x190/0x250 [ 641.126862][T14830] ? ksys_write+0x190/0x250 [ 641.126882][T14830] ? fput+0x79/0x100 [ 641.126897][T14830] ? __x64_sys_bpf+0xce/0x140 [ 641.126909][T14830] __x64_sys_bpf+0xce/0x140 [ 641.126921][T14830] ? do_syscall_64+0x90/0x870 [ 641.126937][T14830] do_syscall_64+0x115/0x870 [ 641.126952][T14830] ? clear_bhb_loop+0x70/0xc0 [ 641.126966][T14830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.126977][T14830] RIP: 0033:0x7fc1bf19e0d9 [ 641.126988][T14830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 641.126999][T14830] RSP: 002b:00007fc1c00bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 641.127010][T14830] RAX: ffffffffffffffda RBX: 00007fc1bf425fa0 RCX: 00007fc1bf19e0d9 [ 641.127018][T14830] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 641.127024][T14830] RBP: 00007fc1c00bb090 R08: 0000000000000000 R09: 0000000000000000 [ 641.127031][T14830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 641.127037][T14830] R13: 00007fc1bf426038 R14: 00007fc1bf425fa0 R15: 00007ffe915e9058 [ 641.127051][T14830] [ 641.380697][ T30] audit: type=1400 audit(1786524219.315:970): avc: denied { write } for pid=14819 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 641.402625][ T30] audit: type=1400 audit(1786524219.455:971): avc: denied { ioctl } for pid=14824 comm="syz.4.2524" path="socket:[50871]" dev="sockfs" ino=50871 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 641.702682][T14649] usb 1-1: Using ep0 maxpacket: 16 [ 641.736364][T14649] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 641.774555][T14649] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 641.804946][T14649] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.819176][T14649] usb 1-1: Product: syz [ 641.827934][T14649] usb 1-1: Manufacturer: syz [ 641.837072][T14649] usb 1-1: SerialNumber: syz [ 641.858635][T14649] r8152-cfgselector 1-1: Unknown version 0x0000 [ 641.865728][T14649] r8152-cfgselector 1-1: config 0 descriptor?? [ 641.953565][T14833] macvlan2: entered promiscuous mode [ 641.998485][T14833] macvlan2: entered allmulticast mode [ 642.068393][T14833] bond5: entered promiscuous mode [ 642.086622][T14649] r8152-cfgselector 1-1: Needed 1 retries to read version [ 642.110025][T14649] r8152-cfgselector 1-1: Unknown version 0x0000 [ 642.138287][T14833] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 642.146392][T14649] r8152-cfgselector 1-1: No union descriptors [ 642.221296][ T5694] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 642.244389][T14833] bond5: left promiscuous mode [ 642.307566][T14814] dvmrp0: entered allmulticast mode [ 642.371919][ T5694] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 642.404639][ T5694] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 642.434400][ T5694] usb 3-1: config 0 has no interface number 0 [ 642.466440][ T5694] usb 3-1: config 0 interface 251 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 642.491832][ T980] r8152-cfgselector 1-1: USB disconnect, device number 96 [ 642.551823][ T5694] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.573856][ T30] audit: type=1400 audit(1786524220.955:972): avc: denied { write } for pid=14836 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 642.624053][ T5694] usb 3-1: Product: syz [ 642.651513][ T5694] usb 3-1: Manufacturer: syz [ 642.676329][ T5694] usb 3-1: SerialNumber: syz [ 642.703583][ T5694] usb 3-1: config 0 descriptor?? [ 642.728309][ T5694] asix 3-1:0.251: probe with driver asix failed with error -22 [ 642.804025][ T30] audit: type=1400 audit(1786524221.185:973): avc: denied { write } for pid=14859 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 643.300288][T14870] FAULT_INJECTION: forcing a failure. [ 643.300288][T14870] name failslab, interval 1, probability 0, space 0, times 0 [ 643.354929][T14870] CPU: 0 UID: 0 PID: 14870 Comm: syz.0.2532 Tainted: G L syzkaller #0 PREEMPT(full) [ 643.354949][T14870] Tainted: [L]=SOFTLOCKUP [ 643.354953][T14870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 643.354960][T14870] Call Trace: [ 643.354964][T14870] [ 643.354968][T14870] dump_stack_lvl+0x100/0x190 [ 643.354987][T14870] should_fail_ex.cold+0x5/0xa [ 643.355003][T14870] should_failslab+0xc2/0x120 [ 643.355020][T14870] __kmalloc_noprof+0xfc/0x820 [ 643.355033][T14870] ? rcu_is_watching+0x12/0xc0 [ 643.355051][T14870] ? tomoyo_realpath_from_path+0xb6/0x690 [ 643.355066][T14870] tomoyo_realpath_from_path+0xb6/0x690 [ 643.355081][T14870] tomoyo_path_number_perm+0x23c/0x580 [ 643.355097][T14870] ? tomoyo_path_number_perm+0x22e/0x580 [ 643.355115][T14870] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 643.355145][T14870] ? find_held_lock+0x2b/0x80 [ 643.355156][T14870] ? __fget_files+0x215/0x3d0 [ 643.355168][T14870] ? hook_file_ioctl_common+0x140/0x440 [ 643.355181][T14870] ? __fget_files+0x215/0x3d0 [ 643.355195][T14870] ? __fget_files+0x21f/0x3d0 [ 643.355209][T14870] security_file_ioctl+0xd3/0x230 [ 643.355228][T14870] __x64_sys_ioctl+0xb7/0x210 [ 643.355246][T14870] do_syscall_64+0x115/0x870 [ 643.355262][T14870] ? clear_bhb_loop+0x70/0xc0 [ 643.355276][T14870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.355288][T14870] RIP: 0033:0x7f7a2039e0d9 [ 643.355297][T14870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 643.355309][T14870] RSP: 002b:00007f7a21300028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 643.355320][T14870] RAX: ffffffffffffffda RBX: 00007f7a20625fa0 RCX: 00007f7a2039e0d9 [ 643.355328][T14870] RDX: 0000200000000040 RSI: 0000000080405880 RDI: 0000000000000003 [ 643.355335][T14870] RBP: 00007f7a21300090 R08: 0000000000000000 R09: 0000000000000000 [ 643.355341][T14870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 643.355348][T14870] R13: 00007f7a20626038 R14: 00007f7a20625fa0 R15: 00007ffe0451a9f8 [ 643.355362][T14870] [ 643.355367][T14870] ERROR: Out of memory at tomoyo_realpath_from_path. [ 644.008063][ T30] audit: type=1400 audit(1786524222.365:974): avc: denied { read } for pid=14871 comm="syz.1.2533" name="/" dev="configfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 644.117451][ T30] audit: type=1400 audit(1786524222.365:975): avc: denied { read open } for pid=14871 comm="syz.1.2533" path="/" dev="configfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 644.228341][ T30] audit: type=1400 audit(1786524222.365:976): avc: denied { read } for pid=14871 comm="syz.1.2533" name="/" dev="configfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 644.331666][T14890] binder: Unknown parameter '' [ 644.420931][ T980] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 644.582351][ T980] usb 5-1: Using ep0 maxpacket: 16 [ 645.342052][ T980] usb 5-1: unable to get BOS descriptor or descriptor too short [ 645.363057][ T980] usb 5-1: New USB device found, idVendor=2304, idProduct=022e, bcdDevice=32.6b [ 645.383065][ T5694] usb 3-1: USB disconnect, device number 90 [ 645.423447][ T980] usb 5-1: config 5 has an invalid interface number: 248 but max is 0 [ 645.450978][ T980] usb 5-1: config 5 has no interface number 0 [ 645.470755][ T980] usb 5-1: config 5 interface 248 altsetting 4 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 645.508744][ T980] usb 5-1: config 5 interface 248 has no altsetting 0 [ 645.534683][ T980] usb 5-1: string descriptor 0 read error: -22 [ 645.542143][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.659682][T14904] IPv6: NLM_F_CREATE should be specified when creating new route [ 645.692961][T14904] __nla_validate_parse: 4 callbacks suppressed [ 645.692972][T14904] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2544'. [ 645.740894][ T5694] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 645.802683][ T980] dvb-usb: found a 'Pinnacle Expresscard 320cx' in warm state. [ 645.901149][ T5694] usb 3-1: Using ep0 maxpacket: 16 [ 645.907568][ T5694] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 645.925846][ T980] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 645.957664][ T5694] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 645.984596][ T980] dvbdev: DVB: registering new adapter (Pinnacle Expresscard 320cx) [ 646.011195][ T5694] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.033856][ T980] usb 5-1: media controller created [ 646.041675][ T5694] usb 3-1: Product: syz [ 646.060006][ T5694] usb 3-1: Manufacturer: syz [ 646.075980][ T5694] usb 3-1: SerialNumber: syz [ 646.089257][ T980] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 646.116094][ T5694] r8152-cfgselector 3-1: Unknown version 0x0000 [ 646.128720][T14649] IPVS: starting estimator thread 0... [ 646.155283][ T5694] r8152-cfgselector 3-1: config 0 descriptor?? [ 646.239029][ T980] DVB: Unable to find symbol dib7000p_attach() [ 646.251686][T14913] IPVS: using max 75 ests per chain, 180000 per kthread [ 646.270302][ T980] dvb-usb: no frontend was attached by 'Pinnacle Expresscard 320cx' [ 646.381177][ T980] rc_core: IR keymap rc-dib0700-rc5 not found [ 646.389443][T14922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2545'. [ 646.408333][ T5694] r8152-cfgselector 3-1: Needed 1 retries to read version [ 646.419493][ T980] Registered IR keymap rc-empty [ 646.436011][ T5694] r8152-cfgselector 3-1: Unknown version 0x0000 [ 646.443137][T14649] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 646.450903][ T980] dvb-usb: could not initialize remote control. [ 646.468300][ T5694] r8152-cfgselector 3-1: No union descriptors [ 646.476696][ T980] dvb-usb: Pinnacle Expresscard 320cx successfully initialized and connected. [ 646.513855][ T980] dib0700: There's no endpoint for remote controller [ 646.543659][T14902] IPVS: dh: FWM 3 0x00000003 - no destination available [ 646.616309][T14899] dvmrp0: entered allmulticast mode [ 646.640677][T14649] usb 2-1: Using ep0 maxpacket: 16 [ 646.647466][T14649] usb 2-1: unable to get BOS descriptor or descriptor too short [ 646.667067][T14649] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 646.682885][ T980] r8152-cfgselector 3-1: USB disconnect, device number 91 [ 646.702596][T14649] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 646.727902][ T5694] usb 5-1: USB disconnect, device number 93 [ 646.733934][ T5721] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 646.758103][T14649] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.781009][T14649] usb 2-1: Product: syz [ 646.796581][T14649] usb 2-1: Manufacturer: syz [ 646.808329][ T5694] dvb-usb: Pinnacle Expresscard 320cx successfully deinitialized and disconnected. [ 646.823354][T14649] usb 2-1: SerialNumber: syz [ 646.902487][ T5721] usb 4-1: unable to get BOS descriptor or descriptor too short [ 646.914739][ T5721] usb 4-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 646.936631][ T5721] usb 4-1: config 1 has an invalid descriptor of length 70, skipping remainder of the config [ 646.955459][ T5721] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 646.973861][ T5721] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 647.105226][T14649] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 647.121174][ T5721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.132126][T14649] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 647.142842][ T5721] usb 4-1: Product: syz [ 647.305328][ T5721] usb 4-1: Manufacturer: syz [ 647.320920][ T5721] usb 4-1: SerialNumber: syz [ 647.331868][T14649] usb 2-1: 2:1 : can't get High Capability descriptor [ 647.376871][T14935] fuse: Bad value for 'rootmode' [ 647.585930][ T980] usb 2-1: USB disconnect, device number 92 [ 648.382051][ T5599] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 648.459671][ T5694] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 649.088446][ T5694] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 649.490299][ T5694] usb 3-1: config 150 has an invalid interface number: 204 but max is 2 [ 649.546824][ T5694] usb 3-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 650.215817][ T5694] usb 3-1: config 150 has no interface number 0 [ 650.242521][T14945] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2556'. [ 650.524283][ T5694] usb 3-1: config 150 interface 204 has no altsetting 0 [ 650.595530][ T5694] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.641481][ T5714] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 650.662257][ T5694] usb 3-1: Product: syz [ 650.708226][ T5694] usb 3-1: Manufacturer: syz [ 650.764490][ T5694] usb 3-1: SerialNumber: syz [ 650.814503][ T5721] usb 4-1: USB disconnect, device number 26 [ 650.871265][ T5714] usb 5-1: Using ep0 maxpacket: 8 [ 650.923024][ T5714] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 651.011837][ T5714] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 651.092334][ T5714] usb 5-1: config 0 has no interface number 0 [ 651.145404][ T5714] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 651.210320][ T5714] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 651.252830][ T9036] udevd[9036]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 651.280393][ T5714] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 651.313243][ T5714] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 651.371594][ T5714] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.406704][ T5714] usb 5-1: config 0 descriptor?? [ 651.441144][ T5714] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 651.732150][ T5714] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 651.952927][ T5714] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 651.986975][ T5714] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 652.029544][T13887] usb 5-1: USB disconnect, device number 94 [ 652.060835][ T980] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 652.078897][T13887] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 652.089005][ T5714] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 652.133851][ T5694] xr_serial 3-1:150.204: skipping garbage [ 652.165117][ T5714] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 652.186978][ T5694] xr_serial 3-1:150.204: xr_serial converter detected [ 652.236429][ T5694] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 652.254684][ T5714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.266558][ T980] usb 2-1: not running at top speed; connect to a high speed hub [ 652.285644][ T5694] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 652.309365][ T980] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 652.337031][ T5714] usb 1-1: config 0 descriptor?? [ 653.171185][ T5694] usb 3-1: USB disconnect, device number 92 [ 653.188248][ T980] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 653.210617][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 653.210628][ T30] audit: type=1400 audit(1786524231.585:980): avc: denied { getopt } for pid=14983 comm="syz.4.2568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 653.265770][ T5694] xr_serial 3-1:150.204: device disconnected [ 653.302107][ T980] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 653.377228][ T980] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 654.317777][ T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.376954][ T980] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 654.421637][ T980] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 654.588361][ T5714] plantronics 0003:047F:FFFF.0017: reserved main item tag 0xe [ 654.613148][ T980] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 654.638169][ T5714] hid_parser_main: 12 callbacks suppressed [ 654.638182][ T5714] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 654.676933][ T980] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 654.727249][ T980] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 654.747134][ T5714] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 655.597629][ T5721] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 655.725483][ T980] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 655.866676][ T5714] usb 1-1: USB disconnect, device number 97 [ 655.892886][ T980] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 655.964325][ T5721] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 655.974114][T15000] fido_id[15000]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 656.022116][ T980] usb 2-1: USB disconnect, device number 93 [ 656.042277][ T5721] usb 3-1: config 0 has an invalid interface number: 11 but max is 0 [ 656.058783][ T980] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 656.097514][ T5721] usb 3-1: config 0 has no interface number 0 [ 656.638773][ T5721] usb 3-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 5120, setting to 1024 [ 656.893455][ T980] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 656.940538][ T5714] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 657.153483][ T980] keyspan 2-1:1.0: device disconnected [ 657.158964][ T5721] usb 3-1: config 0 interface 11 altsetting 253 bulk endpoint 0x7 has invalid maxpacket 1024 [ 657.212923][ T5721] usb 3-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 657.252935][ T5721] usb 3-1: config 0 interface 11 altsetting 253 endpoint 0x87 has invalid wMaxPacketSize 0 [ 657.289538][ T5721] usb 3-1: config 0 interface 11 has no altsetting 0 [ 657.297871][ T5714] usb 5-1: Using ep0 maxpacket: 16 [ 657.316169][ T5714] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 657.342473][ T5721] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.361503][ T5714] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 657.373623][ T5721] usb 3-1: config 0 descriptor?? [ 657.385111][ T5714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.417008][ T5714] usb 5-1: Product: syz [ 657.422211][ T5721] keyspan 3-1:0.11: Keyspan 2 port adapter converter detected [ 657.436404][ T5714] usb 5-1: Manufacturer: syz [ 657.451585][ T5721] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 81 [ 657.471419][ T5714] usb 5-1: SerialNumber: syz [ 657.492156][ T5694] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 657.516482][ T5721] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 82 [ 657.530952][ T5714] r8152-cfgselector 5-1: Unknown version 0x0000 [ 657.539047][ T5714] r8152-cfgselector 5-1: config 0 descriptor?? [ 657.551892][ T5721] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 1 [ 657.681371][ T5694] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 658.385202][ T5714] r8152-cfgselector 5-1: Needed 1 retries to read version [ 658.393909][ T5721] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 2 [ 658.417980][ T30] audit: type=1400 audit(1786524236.795:981): avc: denied { mount } for pid=15012 comm="syz.2.2577" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 658.440778][ T5694] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 658.453732][T15013] ima: Unable to open file: /e (-2) [ 658.453893][T15012] ima: policy update failed [ 658.463970][ T5714] r8152-cfgselector 5-1: Unknown version 0x0000 [ 658.477909][ T5721] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 85 [ 658.499808][ T5694] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 658.511857][ T5714] r8152-cfgselector 5-1: No union descriptors [ 658.529648][ T5721] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 5 [ 658.585791][ T5694] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 658.612692][ T5721] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 658.621312][ T30] audit: type=1802 audit(1786524236.895:982): pid=15012 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.2.2577" res=0 errno=0 [ 658.677077][ T5714] r8152-cfgselector 5-1: USB disconnect, device number 95 [ 658.689471][ T5721] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 83 [ 658.703959][ T5694] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.739029][ T5694] usb 1-1: Product: syz [ 658.751610][ T5721] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 84 [ 658.761217][ T30] audit: type=1400 audit(1786524237.025:983): avc: denied { unmount } for pid=5601 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 658.783094][ T5694] usb 1-1: Manufacturer: syz [ 658.792414][T15017] 8021q: VLANs not supported on ip6_vti0 [ 658.807316][ T5694] usb 1-1: SerialNumber: syz [ 658.812065][ T5721] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 3 [ 658.839991][ T5694] usb 1-1: config 0 descriptor?? [ 658.851874][ T5721] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 4 [ 658.879885][T15011] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 658.913846][ T5721] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 86 [ 658.926005][T15011] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 658.956537][ T5721] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 6 [ 658.957103][ T5694] usb 1-1: ucan: probing device on interface #0 [ 659.242384][ T5721] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 660.100435][ T5721] usb 3-1: USB disconnect, device number 93 [ 660.149098][ T5721] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 660.217059][ T5721] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 660.288380][ T5721] keyspan 3-1:0.11: device disconnected [ 660.320182][ T5694] usb 1-1: ucan: failed to retrieve device info [ 660.344030][ T5694] usb 1-1: ucan: probe failed; try to update the device firmware [ 661.199610][ T5694] usb 1-1: USB disconnect, device number 98 [ 662.374974][T15027] Process accounting paused [ 662.490657][ T5694] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 662.560079][T15065] dlm: plock device version mismatch: kernel (1.2.0), user (1.1792.4194304) [ 662.739216][T15074] CIFS: Attempting to mount //127.0.0.1/share [ 662.776279][ T5694] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 670.905509][ C0] sched: DL replenish lagged too much [ 681.352712][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 683.378165][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 693.145600][T15074] CIFS: VFS: Error connecting to socket. Aborting operation. [ 753.150481][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 754.112113][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 780.060953][ T5599] Bluetooth: hci5: command 0x0406 tx timeout [ 810.231552][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 810.343388][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 849.430986][ T5694] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 872.451946][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 878.500238][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 878.507171][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5591/1:b..l P84/1:b..l P5721/1:b..l [ 878.517605][ C0] rcu: (detected by 0, t=10502 jiffies, g=91937, q=816 ncpus=1) [ 878.525288][ C0] task:kworker/0:5 state:R running task stack:21624 pid:5721 tgid:5721 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 878.539420][ C0] Workqueue: events_power_efficient gc_worker [ 878.545468][ C0] Call Trace: [ 878.548727][ C0] [ 878.551643][ C0] __schedule+0x125c/0x6730 [ 878.556126][ C0] ? debug_object_activate+0x343/0x4b0 [ 878.561564][ C0] ? debug_object_activate+0x343/0x4b0 [ 878.567008][ C0] ? debug_object_activate+0x343/0x4b0 [ 878.572448][ C0] ? __pfx___schedule+0x10/0x10 [ 878.577272][ C0] ? mark_held_locks+0x40/0x70 [ 878.582010][ C0] preempt_schedule_irq+0x50/0x90 [ 878.587007][ C0] irqentry_exit+0x205/0xa00 [ 878.591572][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 878.597523][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0xb/0x70 [ 878.603564][ C0] Code: 64 00 be 03 00 00 00 5b e9 32 6c 13 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 8b 05 a5 cc 58 12 <48> 8b 34 24 65 48 8b 15 81 cc 58 12 a9 00 01 ff 00 74 1b f6 c4 01 [ 878.623150][ C0] RSP: 0018:ffffc900042ffb40 EFLAGS: 00000287 [ 878.629195][ C0] RAX: 0000000080000000 RBX: 0000000000000000 RCX: ffffffff89da996d [ 878.637137][ C0] RDX: 0000000000040000 RSI: 0000000000005577 RDI: ffff888028b9a540 [ 878.645080][ C0] RBP: ffff888025c00000 R08: 0000000000000004 R09: 0000000000005577 [ 878.653022][ C0] R10: 0000000000040000 R11: 0000000000000000 R12: dffffc0000000000 [ 878.660963][ C0] R13: 0000000000000000 R14: 0000000000040000 R15: 0000000000005577 [ 878.668908][ C0] ? gc_worker+0x31d/0x1a10 [ 878.673397][ C0] gc_worker+0x32b/0x1a10 [ 878.677701][ C0] ? __pfx_gc_worker+0x10/0x10 [ 878.682437][ C0] ? rcu_is_watching+0x12/0xc0 [ 878.687176][ C0] process_one_work+0xa23/0x1940 [ 878.692089][ C0] ? __pfx_process_one_work+0x10/0x10 [ 878.697440][ C0] ? __pfx_gc_worker+0x10/0x10 [ 878.702174][ C0] worker_thread+0x5ef/0xe50 [ 878.706739][ C0] ? kthread+0x13a/0x450 [ 878.710950][ C0] ? __pfx_worker_thread+0x10/0x10 [ 878.716037][ C0] kthread+0x370/0x450 [ 878.720076][ C0] ? __pfx_kthread+0x10/0x10 [ 878.724644][ C0] ret_from_fork+0x72b/0xd50 [ 878.729220][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 878.734312][ C0] ? __switch_to+0x800/0x10f0 [ 878.738957][ C0] ? __pfx_kthread+0x10/0x10 [ 878.743525][ C0] ret_from_fork_asm+0x1a/0x30 [ 878.748276][ C0] [ 878.751265][ C0] task:kswapd0 state:R running task stack:26624 pid:84 tgid:84 ppid:2 task_flags:0x220840 flags:0x00080000 [ 878.764704][ C0] Call Trace: [ 878.767963][ C0] [ 878.770876][ C0] __schedule+0x125c/0x6730 [ 878.775362][ C0] ? check_irq_usage+0x19d/0x810 [ 878.780270][ C0] ? __pfx___schedule+0x10/0x10 [ 878.785092][ C0] ? mark_held_locks+0x40/0x70 [ 878.789835][ C0] preempt_schedule_irq+0x50/0x90 [ 878.794828][ C0] irqentry_exit+0x205/0xa00 [ 878.799398][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 878.805344][ C0] RIP: 0010:lock_release+0x8b/0x310 [ 878.810511][ C0] Code: 39 01 00 00 65 4c 8b 25 fb 35 7d 12 41 8b bc 24 9c 0b 00 00 85 ff 0f 85 21 01 00 00 48 81 3b 80 09 6a 94 0f 84 14 01 00 00 9c <41> 5e fa 48 c7 c7 54 f1 29 8e e8 86 d1 d4 09 65 ff 05 7f 7c 7d 12 [ 878.830095][ C0] RSP: 0018:ffffc900024bee48 EFLAGS: 00000202 [ 878.836136][ C0] RAX: 0000000000000000 RBX: ffffffff8ebe8200 RCX: ffffffff91d51201 [ 878.844074][ C0] RDX: 0000000000000000 RSI: ffffffff8c400400 RDI: 0000000000000000 [ 878.852014][ C0] RBP: ffffffff81b876be R08: 0000000000000001 R09: 0000000000000007 [ 878.859953][ C0] R10: 0000000000000200 R11: 0000000000019820 R12: ffff88801ebe4a80 [ 878.867891][ C0] R13: ffffc900024bef08 R14: ffffc900024bf4a8 R15: ffffc900024bef3c [ 878.875842][ C0] ? unwind_next_frame+0x3be/0x2090 [ 878.881014][ C0] ? unwind_next_frame+0x3be/0x2090 [ 878.886180][ C0] unwind_next_frame+0x3c3/0x2090 [ 878.891169][ C0] ? iput+0x35/0x40 [ 878.894951][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 878.901072][ C0] arch_stack_walk+0x94/0xf0 [ 878.905633][ C0] ? dentry_unlink_inode+0x284/0x470 [ 878.910896][ C0] stack_trace_save+0x8e/0xc0 [ 878.915553][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 878.920896][ C0] ? __lock_acquire+0x49f/0x1a40 [ 878.925802][ C0] kasan_save_stack+0x30/0x50 [ 878.930449][ C0] ? kasan_save_stack+0x30/0x50 [ 878.935269][ C0] ? kasan_record_aux_stack+0xa7/0xc0 [ 878.940613][ C0] ? __call_rcu_common.constprop.0+0xa5/0x9b0 [ 878.946648][ C0] ? security_inode_free+0xa4/0x170 [ 878.951821][ C0] ? __destroy_inode+0x1ea/0x710 [ 878.956727][ C0] ? destroy_inode+0x91/0x1c0 [ 878.961372][ C0] ? evict+0x599/0xad0 [ 878.965421][ C0] ? iput.part.0+0x989/0x1050 [ 878.970076][ C0] ? iput+0x35/0x40 [ 878.973879][ C0] kasan_record_aux_stack+0xa7/0xc0 [ 878.979058][ C0] ? __pfx_inode_free_by_rcu+0x10/0x10 [ 878.984493][ C0] __call_rcu_common.constprop.0+0xa5/0x9b0 [ 878.990365][ C0] ? preempt_count_add+0x76/0x150 [ 878.995368][ C0] security_inode_free+0xa4/0x170 [ 879.000370][ C0] __destroy_inode+0x1ea/0x710 [ 879.005106][ C0] destroy_inode+0x91/0x1c0 [ 879.009589][ C0] evict+0x599/0xad0 [ 879.013466][ C0] ? __pfx_evict+0x10/0x10 [ 879.017853][ C0] ? iput.part.0+0x981/0x1050 [ 879.022505][ C0] iput.part.0+0x989/0x1050 [ 879.026980][ C0] iput+0x35/0x40 [ 879.030586][ C0] dentry_unlink_inode+0x284/0x470 [ 879.035671][ C0] dentry_kill+0x25d/0xc20 [ 879.040060][ C0] shrink_dentry_list+0x1e8/0x310 [ 879.045059][ C0] prune_dcache_sb+0xea/0x150 [ 879.049717][ C0] ? list_lru_count_one+0x147/0x320 [ 879.054884][ C0] ? __pfx_prune_dcache_sb+0x10/0x10 [ 879.060144][ C0] super_cache_scan+0x328/0x550 [ 879.064978][ C0] do_shrink_slab+0x416/0x1200 [ 879.069714][ C0] shrink_slab+0x171/0x12e0 [ 879.074198][ C0] ? try_to_shrink_lruvec+0x4f3/0x6b0 [ 879.079553][ C0] ? __pfx_shrink_slab+0x10/0x10 [ 879.084466][ C0] shrink_one+0x398/0x850 [ 879.088766][ C0] ? shrink_node+0x26f0/0x3e90 [ 879.093499][ C0] ? shrink_node+0x2701/0x3e90 [ 879.098231][ C0] shrink_node+0x2721/0x3e90 [ 879.102791][ C0] ? shrink_node+0x246f/0x3e90 [ 879.107525][ C0] ? __pfx_shrink_node+0x10/0x10 [ 879.112429][ C0] ? find_held_lock+0x2b/0x80 [ 879.117079][ C0] ? balance_pgdat+0xb20/0x1f00 [ 879.121897][ C0] balance_pgdat+0xb20/0x1f00 [ 879.126551][ C0] ? do_raw_spin_lock+0x128/0x260 [ 879.131558][ C0] ? __pfx_balance_pgdat+0x10/0x10 [ 879.136641][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 879.141812][ C0] ? debug_object_free+0x295/0x550 [ 879.146905][ C0] ? __lock_acquire+0x49f/0x1a40 [ 879.151820][ C0] ? rcu_is_watching+0x12/0xc0 [ 879.156558][ C0] kswapd+0x556/0xb50 [ 879.160511][ C0] ? __pfx_kswapd+0x10/0x10 [ 879.164990][ C0] ? rcu_is_cpu_rrupt_from_idle+0x250/0x270 [ 879.170854][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 879.176890][ C0] ? __kthread_parkme+0x18c/0x230 [ 879.181886][ C0] ? kthread+0x13a/0x450 [ 879.186097][ C0] ? __pfx_kswapd+0x10/0x10 [ 879.190566][ C0] kthread+0x370/0x450 [ 879.194601][ C0] ? __pfx_kthread+0x10/0x10 [ 879.199160][ C0] ret_from_fork+0x72b/0xd50 [ 879.203731][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 879.208820][ C0] ? __switch_to+0x800/0x10f0 [ 879.213465][ C0] ? __pfx_kthread+0x10/0x10 [ 879.218031][ C0] ret_from_fork_asm+0x1a/0x30 [ 879.222779][ C0] [ 879.225770][ C0] task:syz-executor state:R running task stack:21856 pid:5591 tgid:5591 ppid:1 task_flags:0x40054c flags:0x00080003 [ 879.239202][ C0] Call Trace: [ 879.242456][ C0] [ 879.245358][ C0] __schedule+0x125c/0x6730 [ 879.249831][ C0] ? prepare_signal+0x154/0xe80 [ 879.254650][ C0] ? radix_tree_next_chunk+0x56b/0xad0 [ 879.260084][ C0] ? idr_get_next_ul+0x196/0x2e0 [ 879.265002][ C0] ? __pfx___schedule+0x10/0x10 [ 879.269822][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 879.275597][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 879.280773][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 879.286120][ C0] preempt_schedule_common+0x42/0xc0 [ 879.291374][ C0] preempt_schedule_thunk+0x16/0x40 [ 879.296550][ C0] _raw_read_unlock+0x3e/0x50 [ 879.301198][ C0] zap_pid_ns_processes+0x259/0x6a0 [ 879.306368][ C0] ? do_raw_write_lock+0x11e/0x260 [ 879.311451][ C0] ? __pfx_zap_pid_ns_processes+0x10/0x10 [ 879.317140][ C0] ? do_exit+0x2205/0x2ae0 [ 879.321525][ C0] ? rcu_is_watching+0x12/0xc0 [ 879.326262][ C0] do_exit+0x2377/0x2ae0 [ 879.330473][ C0] ? __pfx_do_exit+0x10/0x10 [ 879.335030][ C0] ? do_raw_spin_lock+0x128/0x260 [ 879.340034][ C0] ? find_held_lock+0x2b/0x80 [ 879.344688][ C0] ? get_signal+0x7e0/0x21e0 [ 879.349250][ C0] do_group_exit+0xd5/0x2a0 [ 879.353721][ C0] get_signal+0x1ec7/0x21e0 [ 879.358204][ C0] ? __pfx_do_nanosleep+0x10/0x10 [ 879.363204][ C0] ? __asan_memset+0x23/0x50 [ 879.367765][ C0] ? __pfx_get_signal+0x10/0x10 [ 879.372589][ C0] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 879.378017][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 879.383530][ C0] ? get_timespec64+0x147/0x240 [ 879.388348][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 879.394473][ C0] ? __x64_sys_clock_nanosleep+0x347/0x480 [ 879.400248][ C0] exit_to_user_mode_loop+0x139/0x6f0 [ 879.405590][ C0] ? rcu_is_watching+0x12/0xc0 [ 879.410325][ C0] do_syscall_64+0x666/0x870 [ 879.414893][ C0] ? clear_bhb_loop+0x70/0xc0 [ 879.419541][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.425402][ C0] RIP: 0033:0x7f7a2035e90e [ 879.429785][ C0] RSP: 002b:00007ffe0451acd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 879.438171][ C0] RAX: 0000000000000000 RBX: 0000555573d4f500 RCX: 00007f7a2035e90e [ 879.446117][ C0] RDX: 00007ffe0451ad30 RSI: 0000000000000000 RDI: 0000000000000000 [ 879.454066][ C0] RBP: 00007ffe0451ad9c R08: 0000000000000000 R09: 0000000000000000 [ 879.462021][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000001ce [ 879.469959][ C0] R13: 0000000000000057 R14: 00000000000a1c95 R15: 00007ffe0451adf0 [ 879.477904][ C0] [ 879.480897][ C0] rcu: rcu_preempt kthread starved for 315 jiffies! g91937 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 879.491889][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 879.501833][ C0] rcu: RCU grace-period kthread stack dump: [ 879.507687][ C0] task:rcu_preempt state:R running task stack:28824 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 879.521123][ C0] Call Trace: [ 879.524376][ C0] [ 879.527288][ C0] __schedule+0x125c/0x6730 [ 879.531768][ C0] ? __pfx___schedule+0x10/0x10 [ 879.536594][ C0] ? find_held_lock+0x2b/0x80 [ 879.541245][ C0] ? schedule+0x225/0x2c0 [ 879.545553][ C0] schedule+0xdd/0x2c0 [ 879.549589][ C0] schedule_timeout+0x127/0x280 [ 879.554417][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 879.559757][ C0] ? __pfx_process_timeout+0x10/0x10 [ 879.565012][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 879.570797][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 879.576226][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 879.580970][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 879.586234][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 879.591141][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 879.596319][ C0] ? rcu_is_watching+0x12/0xc0 [ 879.601053][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 879.606827][ C0] rcu_gp_kthread+0x179/0x230 [ 879.611474][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 879.616640][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 879.622419][ C0] ? __kthread_parkme+0x18c/0x230 [ 879.627416][ C0] ? kthread+0x13a/0x450 [ 879.631634][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 879.636814][ C0] kthread+0x370/0x450 [ 879.640850][ C0] ? __pfx_kthread+0x10/0x10 [ 879.645420][ C0] ret_from_fork+0x72b/0xd50 [ 879.649981][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 879.655062][ C0] ? __switch_to+0x800/0x10f0 [ 879.659708][ C0] ? __pfx_kthread+0x10/0x10 [ 879.664268][ C0] ret_from_fork_asm+0x1a/0x30 [ 879.669017][ C0] [ 879.672015][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 879.678309][ C0] CPU: 0 UID: 0 PID: 14141 Comm: kworker/u8:38 Tainted: G L syzkaller #0 PREEMPT(full) [ 879.689468][ C0] Tainted: [L]=SOFTLOCKUP [ 879.693758][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 879.703783][ C0] Workqueue: wg-kex-wg0 wg_packet_handshake_send_worker [ 879.710702][ C0] RIP: 0010:lock_acquire+0x5e/0x370 [ 879.715871][ C0] Code: 05 bb 3b 7d 12 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 46 8f 3b 0f 0f 82 ac 02 00 00 8b 35 0e c3 3b 0f 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 5d 3b 7d 12 0f 85 ec 02 00 00 48 83 c4 [ 879.735455][ C0] RSP: 0018:ffffc900000071c0 EFLAGS: 00000206 [ 879.741486][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000000 [ 879.749426][ C0] RDX: 0000000000000000 RSI: ffffffff8e1835cb RDI: ffffffff8c400480 [ 879.757374][ C0] RBP: ffffffff8ebe8200 R08: 00000000f501fefe R09: 0000000000000007 [ 879.765321][ C0] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 879.773270][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 879.781220][ C0] FS: 0000000000000000(0000) GS:ffff888123dec000(0000) knlGS:0000000000000000 [ 879.790125][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 879.796686][ C0] CR2: 000055556e9244e8 CR3: 0000000073fb4000 CR4: 00000000003526f0 [ 879.804629][ C0] Call Trace: [ 879.807878][ C0] [ 879.810697][ C0] ip_route_output_key_hash+0xe7/0x2b0 [ 879.816129][ C0] ? ip_route_output_key_hash+0xd6/0x2b0 [ 879.821732][ C0] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 879.827770][ C0] ? lock_acquire+0x1b9/0x370 [ 879.832417][ C0] ? find_held_lock+0x2b/0x80 [ 879.837062][ C0] ip_route_output_flow+0x27/0x150 [ 879.842144][ C0] ip_route_me_harder+0x562/0x1260 [ 879.847229][ C0] ? __pfx_ip_route_me_harder+0x10/0x10 [ 879.852741][ C0] ? trace_kmem_cache_alloc+0xdd/0x100 [ 879.858171][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 879.863165][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 879.868166][ C0] ? kmalloc_reserve+0x148/0x350 [ 879.873091][ C0] ? __pfx_cookie_hash+0x10/0x10 [ 879.878001][ C0] synproxy_send_tcp.isra.0+0x341/0x680 [ 879.883516][ C0] synproxy_send_client_synack+0x6ea/0x970 [ 879.889292][ C0] ? find_held_lock+0x2b/0x80 [ 879.893936][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 879.900240][ C0] ? net_generic+0xea/0x2a0 [ 879.904715][ C0] nft_synproxy_do_eval+0xa1c/0xce0 [ 879.909893][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 879.915582][ C0] ? __pfx_clockevents_program_event+0x10/0x10 [ 879.921707][ C0] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 879.927407][ C0] ? __pfx_nft_synproxy_eval+0x10/0x10 [ 879.932834][ C0] nft_do_chain+0x2e5/0x19d0 [ 879.937396][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 879.942399][ C0] ? mark_held_locks+0x40/0x70 [ 879.947132][ C0] ? __local_bh_enable_ip+0x9e/0x120 [ 879.952402][ C0] ? __local_bh_enable_ip+0x9e/0x120 [ 879.957661][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 879.962844][ C0] nft_do_chain_inet+0xf3/0x400 [ 879.967673][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 879.973110][ C0] ? __pfx_ipt_do_table+0x10/0x10 [ 879.978105][ C0] ? nf_nat_ipv4_local_in+0x181/0x730 [ 879.983458][ C0] nf_hook_slow+0xbf/0x220 [ 879.987855][ C0] nf_hook.constprop.0+0x2a6/0x750 [ 879.992941][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 879.998887][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 880.004486][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 880.009565][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 880.015513][ C0] ? ip_rcv_finish_core+0x7ec/0x2c30 [ 880.020765][ C0] ip_local_deliver+0x163/0x1f0 [ 880.025590][ C0] ? __pfx_ip_local_deliver+0x10/0x10 [ 880.030939][ C0] ip_rcv+0x33a/0x3c0 [ 880.034890][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 880.039360][ C0] __netif_receive_skb_one_core+0x197/0x1e0 [ 880.045231][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 880.051613][ C0] ? lock_acquire+0x1b9/0x370 [ 880.056259][ C0] ? process_backlog+0x32a/0x1580 [ 880.061258][ C0] ? process_backlog+0x32a/0x1580 [ 880.066250][ C0] __netif_receive_skb+0x1f/0x120 [ 880.071244][ C0] process_backlog+0x37a/0x1580 [ 880.076064][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 880.081413][ C0] net_rx_action+0xa40/0xf20 [ 880.085976][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 880.091063][ C0] ? mark_held_locks+0x40/0x70 [ 880.095806][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 880.100974][ C0] ? tmigr_handle_remote+0x132/0x380 [ 880.106243][ C0] ? mark_held_locks+0x40/0x70 [ 880.110987][ C0] handle_softirqs+0x1ea/0x9b0 [ 880.115723][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 880.120988][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 880.126250][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 880.131849][ C0] ? kernel_fpu_end+0x5f/0x80 [ 880.136502][ C0] do_softirq+0xac/0xe0 [ 880.140639][ C0] [ 880.143553][ C0] [ 880.146454][ C0] __local_bh_enable_ip+0xf8/0x120 [ 880.151544][ C0] kernel_fpu_end+0x64/0x80 [ 880.156015][ C0] blake2s_compress+0x78/0xf0 [ 880.160681][ C0] blake2s_final+0xc9/0x160 [ 880.165157][ C0] hmac.constprop.0+0x34a/0x480 [ 880.169987][ C0] ? __pfx_hmac.constprop.0+0x10/0x10 [ 880.175337][ C0] ? irq_fpu_usable+0x7f/0xb0 [ 880.179993][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 880.185167][ C0] ? kernel_fpu_end+0x5f/0x80 [ 880.189812][ C0] ? __local_bh_enable_ip+0x9e/0x120 [ 880.195068][ C0] ? kernel_fpu_end+0x69/0x80 [ 880.199712][ C0] kdf.constprop.0+0x128/0x280 [ 880.204445][ C0] ? __pfx_kdf.constprop.0+0x10/0x10 [ 880.209698][ C0] ? __pfx_mix_hash+0x10/0x10 [ 880.214357][ C0] ? __crypto_memneq+0x1fe/0x430 [ 880.219277][ C0] wg_noise_handshake_create_initiation+0x406/0x610 [ 880.225836][ C0] ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10 [ 880.232916][ C0] ? ktime_get_coarse_with_offset+0x1af/0x240 [ 880.238964][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 880.244185][ C0] ? ktime_get_coarse_with_offset+0x1c1/0x240 [ 880.250221][ C0] ? ktime_get_coarse_with_offset+0x150/0x240 [ 880.256267][ C0] wg_packet_send_handshake_initiation+0x19c/0x360 [ 880.262738][ C0] ? __pfx_wg_packet_send_handshake_initiation+0x10/0x10 [ 880.269748][ C0] ? rcu_is_watching+0x12/0xc0 [ 880.274492][ C0] wg_packet_handshake_send_worker+0x1c/0x30 [ 880.280446][ C0] process_one_work+0xa23/0x1940 [ 880.285357][ C0] ? __pfx_process_one_work+0x10/0x10 [ 880.290699][ C0] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 880.297355][ C0] worker_thread+0x5ef/0xe50 [ 880.301916][ C0] ? kthread+0x13a/0x450 [ 880.306125][ C0] ? __pfx_worker_thread+0x10/0x10 [ 880.311212][ C0] kthread+0x370/0x450 [ 880.315258][ C0] ? __pfx_kthread+0x10/0x10 [ 880.319831][ C0] ret_from_fork+0x72b/0xd50 [ 880.324392][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 880.329482][ C0] ? __switch_to+0x800/0x10f0 [ 880.334136][ C0] ? __pfx_kthread+0x10/0x10 [ 880.338694][ C0] ret_from_fork_asm+0x1a/0x30 [ 880.343434][ C0] [ 881.782009][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 883.620286][ T5694] usb 2-1: can't read configurations, error -71 [ 886.151739][T15067] Process accounting resumed