last executing test programs: 9m44.646917097s ago: executing program 3 (id=2271): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x40) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000004100)={0x6, 0x4, 0x2, 0x800, 0xd, 0x0, 0x5, 0x401}, 0x20) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 9m43.821913314s ago: executing program 3 (id=2275): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x10b}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000880)={@fd={0x66642a85, 0x0, r2, 0xffffffff}, @flat=@handle={0x73682a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x19}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 9m43.706235348s ago: executing program 3 (id=2277): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x210, 0x2e0, 0x2e0, 0x210, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x82, 0x0, 0xc, 0x1, 0x0, "96f02ac91b0dc324cfdd5e5b874892c97396475ea4ce7e048651499cfef311497ec5df719e9837bee90ee9e9efe810a04d30a3c651515fbc5956d78a4cc5a4ed"}}}, {{@ipv6={@private1, @mcast1, [0xff, 0xffffffff, 0xffffff, 0xff000000], [0xffffffff, 0x0, 0x0, 0xff000000], 'vxcan1\x00', 'vcan0\x00', {}, {0xff}, 0x2c, 0xcc, 0x6, 0xc}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) r1 = getpgrp(0xffffffffffffffff) sched_setaffinity(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) dup(0xffffffffffffffff) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000006380)={0x2020}, 0x2020) 9m42.2671994s ago: executing program 3 (id=2281): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) r3 = fsmount(r1, 0x1, 0x0) fchdir(r3) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x82) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getregset(0x4204, r6, 0x202, &(0x7f0000000140)={0x0}) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000100), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f0000000680)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001680)={{r7, 0x1, 0x90b, 0x401, 0x80, 0x2, 0x80, 0x2, 0x5d6, 0x3, 0x2, 0x4, 0x2, 0xf, 0x8001}}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) setsockopt$inet6_int(r0, 0x29, 0x50, 0x0, 0x0) 9m40.461850794s ago: executing program 3 (id=2287): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010100000000000000002b00000708000300", @ANYRES32=r3, @ANYBLOB="0a0034000101010101010000080026006c09000004004600300051802c"], 0x64}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 9m38.481609137s ago: executing program 3 (id=2294): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000180)=[r2], 0x0, 0x0, 0x0}) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) r3 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0) ioctl$I2C_RDWR(r3, 0x707, &(0x7f00000000c0)={&(0x7f00000005c0)=[{0x8, 0x1010, 0x0, 0x0}, {0x1, 0x3810, 0x1, &(0x7f00000002c0)="84"}], 0x2}) syz_usb_connect(0x4, 0x2a4, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc3, 0x8a, 0x55, 0x10, 0x2c7c, 0x30b, 0xffa2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x292, 0x1, 0x75, 0x5, 0xf0, 0x5a, [{{0x9, 0x4, 0xab, 0x5, 0xa, 0xff, 0xff, 0x30, 0x14, [], [{{0x9, 0x5, 0xf, 0x10, 0x20, 0x2, 0x0, 0x8, [@generic={0xa7, 0x5, "d5665244362d27d8f1ba2fe4e752f53a83b970a5b452d6448fb5bab69611148c444dd2e95cc69e41b8e7c6f70e285d7807dd45ea6f5d8463f91f9244bfa9941b8f71da30d026f19482e759567f72b293d5b263f0c253f6e43029d537c599de80467771ecb1c997948c9c051a231f7d7e9e9cb5f2a50f61c0eb10cb9e344ddf42e1fceb5ae6d38e657bdcb44f1aa2037066b3c5e9feabaa2e29092a312f4c13b2aa541b5fc8"}, @generic={0x33, 0x22, "4a93495bd4b2206f0e10e13b3d514ec29581da677c1155d39cd8ca98b59b1ef2248f0a81f14d73057d5c2dfa9b0cccad96"}]}}, {{0x9, 0x5, 0x2, 0x1, 0x10, 0x90, 0x2, 0x1}}, {{0x9, 0x5, 0xf, 0x8, 0x10, 0x3, 0xf1, 0x3}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x0, 0x7, 0xc9, [@generic={0x10, 0x24, "714775f57ff809fda6d0aa263cad"}, @generic={0x8a, 0x21, "3e71b6b3149ac2fb481d6bd3092bd6926898b1b35cbee161074303e105e8715e719e39f9997cce0b4b8d4ca29edada80a34aa32e16bd414681d0fbec91c7981049561cf718a1d9c821b6ed72b03f6320efa2793522d7aa88a1ea17eb08b57eb7a54071d1b7f653518a31f5402bc9727f47c43483517bbe88ddaf196955f9ccbf2f11f2a4bec5cbbd"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x600, 0x3, 0x8, 0x3}}, {{0x9, 0x5, 0xa, 0x3, 0x3ff, 0x86, 0xb, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x40, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xaa, 0x80}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x7f, 0x2, 0xc, [@generic={0x6b, 0x21, "8d79d08be43fdc4168167478731ccf482fd8d1cd240fdff2e06074dc33a9065380e3c54add27ae9c4ea80101f016eb8b5e6cf869373bea9fde71f7583bd44ac32414302574e587aa5ff70f6f22806a5d627aa22f813dd4fd6dbc10767007af93dce1bc178fa9841f93"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x20, 0x80, 0x6, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf7, 0x7}]}}, {{0x9, 0x5, 0x8, 0x14, 0x40, 0x1, 0x9, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x37, 0x5}]}}, {{0x9, 0x5, 0x9, 0x8, 0x200, 0xb, 0x2, 0xa3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0xffff}, @generic={0x24, 0xb, "52b2dc5631456021d64e6dbace5fa1ee7183e660b3cdb401a5f17c4800dbcf4784f7"}]}}]}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x300, 0x4c, 0x8, 0x0, 0x40, 0x8}, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="050f56000603100b141004037a3cc85c04bcaa4e6eb7615f6233d89a141004f8fe519d08afb58e0f5a3b379c4d620abf0b10010c02006e052fbfc00710021458010014100409c72e22db7853f8cd5a7a6678b4d8fec5"], 0x1, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x2c41}}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001100)=""/15, 0xf}], 0x1}, 0x6}, {{&(0x7f00000004c0)=@ax25={{0x3, @default}, [@null, @null, @rose, @remote, @null, @remote, @rose, @null]}, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/149, 0x95}, 0x211}, {{&(0x7f0000000b80)=@ieee802154, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000c00)=""/23, 0x17}, {&(0x7f0000000c40)=""/34, 0x22}, {&(0x7f0000000c80)=""/23, 0x17}], 0x3, &(0x7f0000000d00)=""/252, 0xfc}, 0xebb0}, {{&(0x7f0000000e00)=@pppol2tpv3in6, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000e80)=""/174, 0xae}, {&(0x7f0000000f40)=""/241, 0xf1}, {&(0x7f0000001040)=""/136, 0x88}], 0x3, &(0x7f0000001140)=""/148, 0x94}, 0x4}, {{&(0x7f0000001200)=@caif=@util, 0x80, &(0x7f0000001380)=[{&(0x7f0000001280)=""/253, 0xfd}], 0x1, &(0x7f00000013c0)=""/126, 0x7e}, 0x86}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001440)=""/80, 0x50}, {&(0x7f00000014c0)=""/184, 0xb8}, {&(0x7f0000001580)=""/203, 0xcb}], 0x3, &(0x7f00000016c0)=""/27, 0x1b}, 0x4}], 0x6, 0x20, &(0x7f0000001900)={0x0, 0x3938700}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) close_range(r5, 0xffffffffffffffff, 0x0) mount$pvfs2(&(0x7f0000000440), &(0x7f0000001a00)='./file0/file0\x00', &(0x7f0000001940), 0x0, &(0x7f0000001980)={[{'\x00'}, {'/dev/i2c-#\x00'}, {'/dev/i2c-#\x00'}, {':\xfd\'\''}, {'\\\'}}-'}, {',@,(@-]$x{'}]}) r6 = getpid() r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001880)=@newlink={0x38, 0x10, 0xa01, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4414, 0x6986}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sched_setscheduler(r6, 0x1, &(0x7f0000000200)=0x7) fcntl$setownex(r3, 0xf, &(0x7f00000019c0)={0x2, r6}) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) 9m37.986058925s ago: executing program 32 (id=2294): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000180)=[r2], 0x0, 0x0, 0x0}) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) r3 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0) ioctl$I2C_RDWR(r3, 0x707, &(0x7f00000000c0)={&(0x7f00000005c0)=[{0x8, 0x1010, 0x0, 0x0}, {0x1, 0x3810, 0x1, &(0x7f00000002c0)="84"}], 0x2}) syz_usb_connect(0x4, 0x2a4, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc3, 0x8a, 0x55, 0x10, 0x2c7c, 0x30b, 0xffa2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x292, 0x1, 0x75, 0x5, 0xf0, 0x5a, [{{0x9, 0x4, 0xab, 0x5, 0xa, 0xff, 0xff, 0x30, 0x14, [], [{{0x9, 0x5, 0xf, 0x10, 0x20, 0x2, 0x0, 0x8, [@generic={0xa7, 0x5, "d5665244362d27d8f1ba2fe4e752f53a83b970a5b452d6448fb5bab69611148c444dd2e95cc69e41b8e7c6f70e285d7807dd45ea6f5d8463f91f9244bfa9941b8f71da30d026f19482e759567f72b293d5b263f0c253f6e43029d537c599de80467771ecb1c997948c9c051a231f7d7e9e9cb5f2a50f61c0eb10cb9e344ddf42e1fceb5ae6d38e657bdcb44f1aa2037066b3c5e9feabaa2e29092a312f4c13b2aa541b5fc8"}, @generic={0x33, 0x22, "4a93495bd4b2206f0e10e13b3d514ec29581da677c1155d39cd8ca98b59b1ef2248f0a81f14d73057d5c2dfa9b0cccad96"}]}}, {{0x9, 0x5, 0x2, 0x1, 0x10, 0x90, 0x2, 0x1}}, {{0x9, 0x5, 0xf, 0x8, 0x10, 0x3, 0xf1, 0x3}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x0, 0x7, 0xc9, [@generic={0x10, 0x24, "714775f57ff809fda6d0aa263cad"}, @generic={0x8a, 0x21, "3e71b6b3149ac2fb481d6bd3092bd6926898b1b35cbee161074303e105e8715e719e39f9997cce0b4b8d4ca29edada80a34aa32e16bd414681d0fbec91c7981049561cf718a1d9c821b6ed72b03f6320efa2793522d7aa88a1ea17eb08b57eb7a54071d1b7f653518a31f5402bc9727f47c43483517bbe88ddaf196955f9ccbf2f11f2a4bec5cbbd"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x600, 0x3, 0x8, 0x3}}, {{0x9, 0x5, 0xa, 0x3, 0x3ff, 0x86, 0xb, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x40, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xaa, 0x80}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x7f, 0x2, 0xc, [@generic={0x6b, 0x21, "8d79d08be43fdc4168167478731ccf482fd8d1cd240fdff2e06074dc33a9065380e3c54add27ae9c4ea80101f016eb8b5e6cf869373bea9fde71f7583bd44ac32414302574e587aa5ff70f6f22806a5d627aa22f813dd4fd6dbc10767007af93dce1bc178fa9841f93"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x20, 0x80, 0x6, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf7, 0x7}]}}, {{0x9, 0x5, 0x8, 0x14, 0x40, 0x1, 0x9, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x37, 0x5}]}}, {{0x9, 0x5, 0x9, 0x8, 0x200, 0xb, 0x2, 0xa3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0xffff}, @generic={0x24, 0xb, "52b2dc5631456021d64e6dbace5fa1ee7183e660b3cdb401a5f17c4800dbcf4784f7"}]}}]}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x300, 0x4c, 0x8, 0x0, 0x40, 0x8}, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="050f56000603100b141004037a3cc85c04bcaa4e6eb7615f6233d89a141004f8fe519d08afb58e0f5a3b379c4d620abf0b10010c02006e052fbfc00710021458010014100409c72e22db7853f8cd5a7a6678b4d8fec5"], 0x1, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x2c41}}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001100)=""/15, 0xf}], 0x1}, 0x6}, {{&(0x7f00000004c0)=@ax25={{0x3, @default}, [@null, @null, @rose, @remote, @null, @remote, @rose, @null]}, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/149, 0x95}, 0x211}, {{&(0x7f0000000b80)=@ieee802154, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000c00)=""/23, 0x17}, {&(0x7f0000000c40)=""/34, 0x22}, {&(0x7f0000000c80)=""/23, 0x17}], 0x3, &(0x7f0000000d00)=""/252, 0xfc}, 0xebb0}, {{&(0x7f0000000e00)=@pppol2tpv3in6, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000e80)=""/174, 0xae}, {&(0x7f0000000f40)=""/241, 0xf1}, {&(0x7f0000001040)=""/136, 0x88}], 0x3, &(0x7f0000001140)=""/148, 0x94}, 0x4}, {{&(0x7f0000001200)=@caif=@util, 0x80, &(0x7f0000001380)=[{&(0x7f0000001280)=""/253, 0xfd}], 0x1, &(0x7f00000013c0)=""/126, 0x7e}, 0x86}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001440)=""/80, 0x50}, {&(0x7f00000014c0)=""/184, 0xb8}, {&(0x7f0000001580)=""/203, 0xcb}], 0x3, &(0x7f00000016c0)=""/27, 0x1b}, 0x4}], 0x6, 0x20, &(0x7f0000001900)={0x0, 0x3938700}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) close_range(r5, 0xffffffffffffffff, 0x0) mount$pvfs2(&(0x7f0000000440), &(0x7f0000001a00)='./file0/file0\x00', &(0x7f0000001940), 0x0, &(0x7f0000001980)={[{'\x00'}, {'/dev/i2c-#\x00'}, {'/dev/i2c-#\x00'}, {':\xfd\'\''}, {'\\\'}}-'}, {',@,(@-]$x{'}]}) r6 = getpid() r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001880)=@newlink={0x38, 0x10, 0xa01, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4414, 0x6986}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sched_setscheduler(r6, 0x1, &(0x7f0000000200)=0x7) fcntl$setownex(r3, 0xf, &(0x7f00000019c0)={0x2, r6}) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) 12.600943098s ago: executing program 0 (id=4589): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='f2fs_shutdown\x00', r2, 0x0, 0x4}, 0x18) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x1600}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {}, {0xfffc}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfb}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {0x4}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_clone(0x40000, 0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), &(0x7f0000000500)="13789ec17d6bf343e55c826d94ddd8744b0e7b90b7c215e40d6749cf0c469d4015e28ed8e5454ac2faa1399c9d059337a9dfa7eab0343110c9fb9c7bd5101dbbd0daae57353359e9733aea282d90a1389d6301c62a7d7860d62742978b948d7b5252dbd42ca6c6f0dae474e5b512730b07ae6d0344d8ea30738c9a6f67827cfdd0b01b4dabca9411786eb44b61016adc910a216ba085551267bc49d3e48daab6a9e99f7ca6e9c8860620b0ac731fb241121ef091a451c00bc96323b753fa72e0de147f92524b2660310b125598b2506c8dc841b1da82407dce0609ab99f318b9aa54") r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_LAPIC(r6, 0x8400ae8e, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a3c000000120a09000000000000000000020000000900020073677a310000000008000440000000010900010073797a30002100000800034000000001140000001100010000000000000000000000000a"], 0x64}}, 0x4000000) close_range(r7, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 10.435335553s ago: executing program 4 (id=4594): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0xfffffffd) futex(&(0x7f000000cffc)=0x3, 0x5, 0x2, 0x0, &(0x7f0000000000)=0x3, 0x5000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000200000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2eb2b00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c08000140000000020800014000000030080002"], 0x122}, 0x1, 0x0, 0x0, 0x8840}, 0x8010) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000080)=0x10000000008) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) 10.075701939s ago: executing program 4 (id=4597): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff0f0000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x25702020}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.33450995s ago: executing program 2 (id=4598): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000001500)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfddc, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) readv(r1, &(0x7f0000001d00)=[{&(0x7f0000001c40)=""/178, 0xb2}], 0x1) 8.304741919s ago: executing program 4 (id=4599): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) getpid() r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10, 0x0, 0x0, &(0x7f00000025c0)=ANY=[@ANYRES8=r0], 0x18}, 0x40) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000180), 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x5, 0x8, 0xfffffffd, 0x9}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x1, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x32c180) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xd6c2}, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r7, &(0x7f0000000040), 0x8) listen(r7, 0x0) r8 = dup2(r7, r7) accept4$bt_l2cap(r8, 0x0, 0x0, 0x0) mknodat(0xffffffffffffffff, &(0x7f00000000c0)='./file2\x00', 0x8000, 0x0) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000003c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x2, 0x7e3875a1, 0x7fffffff, 0x2, 0x1, 0x5}}) 8.206464262s ago: executing program 2 (id=4602): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf010, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xfffd, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000100)={0x40, 0x1, 0x57, {0x57, 0x11, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd10f3c080b73385a7015d3a32ed6b5217cdbb6fadb2ea2890cfc29a315cafaaeeeef9bfd0d97a288982d5337c36"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 7.335512746s ago: executing program 1 (id=4604): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000800)={0x0, {0x3, 0x0, 0x8000005, 0x3, 0x5, 0x80000001}}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000900)={'syz1\x00', {0x0, 0x0, 0x6}, 0x37b4, [0xfeff, 0x4, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0xfffffffd, 0x3, 0x100, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x10000000, 0x3, 0xbffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4e0, 0x3f, 0x0, 0x1, 0x0, 0xfffffffc, 0x3, 0xffffffff, 0x0, 0xffff, 0x0, 0x20, 0x6, 0x5, 0x70000000, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x6, 0x0, 0x0, 0x20004, 0x0, 0xfffffffe, 0x105, 0x0, 0x0, 0x80008], [0x10, 0xffffffff, 0x7, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0xbb, 0x1, 0xfffffffc, 0x9, 0x800, 0xffffffd6, 0xfffffffc, 0x0, 0x1, 0x0, 0x1, 0x2ec6a, 0x5, 0x40000002, 0xffffffff, 0xfffffffc, 0x7fffffff, 0x8001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x8c, 0x0, 0x0, 0x4, 0x5, 0x3, 0x7, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4000000, 0x80, 0x2, 0x3, 0x0, 0x9, 0x800000, 0x7], [0x0, 0x4, 0x0, 0x1000000, 0xffffffff, 0x1, 0xa000000, 0x0, 0x0, 0xb78, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x10000, 0x0, 0x80, 0x520, 0xd, 0x0, 0x0, 0x800000, 0x1ff, 0x0, 0x0, 0x2, 0xfffffffc, 0x2af, 0x0, 0x9, 0x0, 0x0, 0x3, 0xa9c5, 0x0, 0x0, 0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, 0x100, 0xff, 0x80000001, 0x0, 0x4, 0x2, 0x400000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x8, 0x6, 0x0, 0x401, 0x0, 0x211, 0x4, 0x0, 0x100, 0x3, 0x5, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x1, 0x7fff, 0x0, 0xd, 0x800000, 0x0, 0x0, 0x4000000, 0x0, 0x9, 0x6, 0x0, 0xffffeffd, 0x2, 0x0, 0x0, 0x3, 0x4, 0x88, 0x4, 0x3, 0x0, 0x0, 0x1, 0x80000001, 0x100, 0x0, 0x3, 0x7, 0xfffffffe, 0x53591b24, 0x7fffffd, 0x2, 0x5, 0x5, 0x400, 0x7, 0x9, 0x0, 0x0, 0x100, 0x1000000, 0x0, 0x3, 0x3]}, 0x45c) 7.193807147s ago: executing program 0 (id=4605): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) 7.110028741s ago: executing program 1 (id=4606): socket$kcm(0x10, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000300)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000080)=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r3, &(0x7f0000000380)="0099", &(0x7f0000000480)=@udp6=r1, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000110000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 7.108185907s ago: executing program 0 (id=4607): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x600000000000000) 6.895350629s ago: executing program 1 (id=4608): syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120150186360dd20da0b53810b6f01"], 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x213a, 0x13580, 0x0, 0x387}, &(0x7f0000000100), 0x0) io_uring_enter(r0, 0x14, 0xb9c, 0x2b, 0x0, 0x18) syz_clone(0x2180, 0x0, 0xe4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fadvise64(0xffffffffffffffff, 0x18, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x840, 0x43) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000640), 0x20a100, 0x0) close(0xffffffffffffffff) openat$vcs(0xffffff9c, 0x0, 0x6a201, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010100, 0x15, 0x3, 'lblcr\x00', 0x15, 0x5, 0x31}, 0x2c) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000"], 0x0, 0x26}, 0x28) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000400000000000000000851000000300000018000000", @ANYRES32, @ANYBLOB="000000000000000095000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r3}, 0x94) write$P9_RREAD(r4, 0x0, 0x0) 6.862644867s ago: executing program 0 (id=4609): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, &(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYRES16=0x0], 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x41000, 0x4f, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000001440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@datasec={0x2, 0x0, 0x0, 0xf, 0x3, [], "44942d"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "84"}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x38, 0x0, 0x9, 0x0, 0x0, @void, @value=0x8e00}, 0x28) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) socket$nl_route(0x10, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) write$tun(r4, &(0x7f0000000040)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x2000, 0xfc, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0x8000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x10, 0x0, @void}}}}}}}}, 0x32) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) 6.164401211s ago: executing program 5 (id=4612): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640), 0x41, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)='I', 0x1}], 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x60101, 0x0) write$rfkill(r1, &(0x7f0000000040)={0x7, 0x9, 0x2, 0x1}, 0x8) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000520093532dbd7000ffdbdf251c00000034539753feb3e6a4c777016bbee559e3165d38a72a7aec84a1a362aed5ff574e742ee9abdba34948bbb0fc1a25004bae56fc9e1dc8420f903c75a6d4b5e4f4e8da4286dfd72dcb007d1990a9fca0c336e7d6ff11421e3a544e367657c96248492823954a53ecd4f0a5d27fae2010e9abc4503b3c463026db0a79a71c4cdaa773c7c28d28aabc6a3ba340c5e2d495c66eb1b89f335f3363d6e3f9daa99a92ebadd9d2140b8203d3b1fff2ec8fed4958f18d1e0c60d05c64ecc1bf53990301057da941edfc020544c777c5d9f01bface3861777f3542603e6e341fdf8cee9844b15521"], 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x20044884) munmap(&(0x7f000049b000/0x400000)=nil, 0x400000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) openat$ptp0(0xffffffffffffff9c, 0x0, 0x101000, 0x0) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x0, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0xffffffff, 0x8000}, 0x10}, 0x94) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001680)) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x324000, 0x1000, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) r6 = syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)) wait4(r6, 0x0, 0x1, 0x0) 6.139997226s ago: executing program 2 (id=4613): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_usb_connect(0x3, 0x24, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x1, 0x4b, 0xb9, 0x40, 0xf11, 0x1100, 0x2e87, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xde, 0x0, 0x80, 0x9, [{{0x9, 0x4, 0xe9, 0x0, 0x0, 0xea, 0xb5, 0x8a, 0xe}}]}}]}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000009cc0), 0x101082, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x13) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001000010400000000030000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060018000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES16], 0x54}}, 0x0) 5.534426308s ago: executing program 0 (id=4614): r0 = epoll_create1(0x80000) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, 0x0, 0x0, 0x14) syz_usb_connect(0x5, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000f3900000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x97}, [{}, {}, {}, {}, {}, {0x448eade7, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {}, {0x7}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {0xd5a0}, {}, {}, {}, {}, {}, {0x4}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000001c0)={0xb0000010}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYRES16=r1], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x4}, 0x10}, 0x94) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) shutdown(r1, 0x1) 5.488512074s ago: executing program 5 (id=4615): r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) (async) sched_setaffinity(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) (async, rerun: 64) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) (async, rerun: 64) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async, rerun: 64) syz_socket_connect_nvme_tcp() (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) syz_open_dev$video4linux(&(0x7f0000000480), 0xd, 0x123002) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000140)) (async) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x7) (async) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0)=0xe1) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='E\xe1\x85\x00', 0x0) (async, rerun: 32) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async, rerun: 32) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new defaulv user:/dev/v4l-subdev#\x00 00000000000000002132\x00'], 0x38, 0x0) (async) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x21, r4}) (async, rerun: 64) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 64) syz_open_dev$usbfs(&(0x7f0000000000), 0x7, 0x20e282) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000480)='net/fib_triestat\x00') r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r6, 0x0, 0xd}, 0x18) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 4.684014825s ago: executing program 5 (id=4616): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000206d049cc2000000000001090224000100000003090400000103000300092130b4000122060009058103"], 0x0) mount$cgroup(0x0, &(0x7f0000002980)='.\x00', &(0x7f00000029c0), 0x84, &(0x7f0000000040)={[{@none}, {@clone_children}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0xb1c07, 0x2, 0x1, 0x6, 0x0, 0x1, 0x0, 0x2, 0x2}) readv(r1, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) close(r1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0022ec"], 0x0}, 0x0) 4.583387659s ago: executing program 4 (id=4617): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000001500)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfddc, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) readv(r1, &(0x7f0000001d00)=[{&(0x7f0000001c40)=""/178, 0xb2}], 0x1) (fail_nth: 3) 4.274532437s ago: executing program 4 (id=4618): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.850712233s ago: executing program 2 (id=4619): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x10000008ebd, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r3 = io_uring_setup(0x4079, &(0x7f0000000500)={0x0, 0xd7e3, 0x800, 0x20000001, 0x24b}) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000280)=[0xffffffffffffffff], 0x1) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r5, &(0x7f0000000740)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000680)}}], 0x2, 0xc040) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x25, 0x12, @val=@netfilter={0x5, 0x1, 0xb35, 0x1}}, 0x20) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="afaaaaaaaaaa00000000000086dd604dd30800140601fe8000000000000000000000000000aafe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5042000090780000"], 0x0) sendmmsg(r5, &(0x7f0000009340)=[{{0x0, 0x0, &(0x7f00000024c0)}}], 0x1, 0x20000880) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x3, 0x88, 0x0, 0x0, @remote}, 0x10) listen(r4, 0xffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtfilter={0x34, 0x2c, 0x400, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x4}, {0x2, 0xffe0}, {0xfff1, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x44}, 0x20000015) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x2000000) 3.663276152s ago: executing program 2 (id=4620): syz_io_uring_setup(0x8dd, &(0x7f0000000440)={0x0, 0x1ba, 0x2000, 0x8, 0x20000fe}, &(0x7f00000000c0), &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000080), &(0x7f0000000180)=0x4) r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r0, &(0x7f0000001080)='1\x00', 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)={0x14, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffff0100000003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x855}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d103"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.484877859s ago: executing program 1 (id=4621): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001000)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$P9_RSTATu(r4, &(0x7f0000000980)=ANY=[@ANYBLOB="1c0400007d00000005db02000000000005d9000400000300000000000000000000100000000000000000fe008000000000001f0004"], 0x41c) 2.776109276s ago: executing program 2 (id=4622): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000008940)=[{{&(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000440)="6f9dc3fe62b4b718e384e3fba7c1657c8bd2185fc6e5cb48087940907b4157a8f71d6221c0598f5f39717046f83c98f0da5955acc0833b39e0981b986930564f5d10", 0x42}, {&(0x7f00000004c0)="8ebdd7d04c637020e83ce5abd61479c2cfecef8970400d36729e3d92b9835b7da668e68a658f2fa1ead800f5040b4af44d6a087e7b81d3787c4983e42fe5aa43a5288c803d990ead80065f79ecb77a4a2d2c3a9f69b232a8a147d626f1e0bc3f35d32209cd9f30f4f3c9ac8e70c9f2bad51b990520895a574d1aeeef0f177fdb83f6f6d50003425804eb358d2748ae306d9ffd1635c6d9cd823c008c9877b78b7e", 0xa1}], 0x2, 0x0, 0x0, 0x800}}, {{&(0x7f0000000580)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000002740)=[{&(0x7f0000000240)}, {&(0x7f0000000600)="a299559b46301893f7d1939a2a", 0xd}, {&(0x7f0000000640)="41b390bb0874568b7745da2743c63f1c91bab3114133e4a044a2d4189d2177f64a33169544b6446645a3e5", 0x2b}, {&(0x7f0000000680)="1e664e5ddc2704f2821aa6cf48d2cde575685de9f6516e8bd58289d142037dee555b6b5c9ea6e566689ee4b1ba1e82ab1a6496b9dcfce89a149dcb757bb59b910a17415fd63078fef4853e59f1f34c9e341d3d1c0c45cb1391d9c3384151a5ed756a4f30e6b29411b74e609395f9785015f5a29af4c42280d1debcd4b9e0d3d9835abe643c530a48a0e69b9fb4bd0d7a494b961631430ba14693788f95d49d1b4f9db0f573914fe5e3bed7de1cad731e514fedeeefea02fe451a169fbf6bc0bf891aeb2eeed2c5ed3ffea5259de4fadb646085d34a2d1c036f1fdfdba255df9e67e5b8890548d7aa693b07df0e344e5ac2081e0067df34df7ae18fada8f40e2e73b0b51a6bcfa3f1e766e17c26648e84c13c1dee54595d8fdcb387047eabe96ddab8d8fbacf5b42243ee650db53dab3f54d1e73d74fd6dca32b0a65ef14a9ac303c25cb41bfdbc422a73d63ce5c1aed82afaf29ab482f0fb3a2d66d674895c7cf5847b4e9f02e75ad069aa109cb1728e295b1525445f7564fea7d7d1d4a330ebee53885b1e4f42c8e8b7682264e882bdb1844fc26f864758b2a864162187358ac4cd30c6fcdb86b1c9d213b629a4821d21af179cadeddb7c121d5e41904e5614652775deceac2937d26723e43ef05fb38835a95bf8e18d9a09d903c6aff83b48f5534f95ebca09a0fa66f5e0dfe4aee48a9d72dfd1b479444966523da5e802d197c395b6771e6bb38bb480c04c5328a098629a51560b2beade9343d872b9b8c29164d6738a9b8a7522d3841b9ea8d03c991c6c68b7b46a0aaebb333f35f804ea5ce68b9a4fb630516b77537a768e6c11ba4df672495fb301a87017bc65c21bcd3f7858cec2b9747216e1fdaea8416ed2e5526d719f0e8dbcdc5a3bec141aa0c7ea94b8b3cc29c6dd02e25992ef564e4a50850d645806ea5666b42de3d8007a8cd5f2e325f2e7853bddf102560a6d266aa801e93c0cc8ef188b8d0b5507cf91f88871dffd4f41ff93cb73b1f43a099f6b0a07c269a3f12cfa168f3bddc412c9e30e4699e5af03292d81a479b884bc7285948c6981d8f66b4f3372f68bb57cfffe813a92e67021995d0321456eea1906532085b184a17a1db0cda154402b0d12b1bb849188231bf96be884b8e1bd6d951c23173821a1a69ff99502af26717e47382251a571b08e5fd345b59a41748452c6f27ae7f37a8396ab33fa25fb6f85bde0c26f686141ec519a6889ec3e21f347dd095d67ad27204950269ee57b5a92af488bbd4e19675431d0aa4268f02abf59f598d1d22cb139f4f88ea9414add891a520cac392861154815ca3df112a587d8a487c78d98a7e3e3bf6943c877df67ea1bee234f893ef323c081359da7077a5dbb549e97245dc4a6fd3aa34485976af48ebf9263e0b9e5ba15b27eb1a0c547cf7b685e09086cf75bdcd6e6bb9a3fba473652c453665d5fa835214728202f389a21ad98d740d34b9dac7a6262d6bc402d6c7b95638031cab2ef17f18592308bc19ae664e0896ab1b60245ec4a67d9f9b58b6f73ac23ebaa4799608be38e0b1f62d1d5953077252ad3a83a98f2402a7655ea8a87315e11e5372160b3bb714f982656425cc0be6c6dd6302dab625ff8d9b6d841dfd0f148b1956c24aaba83242bcf4864f72505ced15edf8cde829ee82ea9b5db246c21e3e18b5f70e124b7d94a9bd4a0021e83881516f185e2fa56d5c154171ddf954f521c56faa067f271b84d39cf6e5b94ef98ccb0001abc22b1c2a74148500c51634d23a2a8e0943534dce6b54513cdf7bbe7a33c21c9e0628aa040d3a46e4c84fcf0f13339ced83cc5086524ef383c005f2f4c7733c22d9c30efc13122928d952781d2de691f2c569ddf5bac38743eff07725ec5c87e53ce4aa4f96fcfe17f4a8f8d93de37a6bea4ce244b7e4918d9f4851a56f97a0b5717980b0a1ee30c687ba199bf87d7c97f06dc5931ca756f3c0cd2d92e9504c3b4f4e77e6249e2dbd3e5e4da66d9bfb4e58c1fcc8df6d9f079017198e7ab2b6ed3d12b016b63f1990a68d6942da5a494261ff6223bf59c30c217e6a57a8dbf5a95dc933d972a5d4409646070dab07e7a71201b4a1c9e5d74858cbd6f9b6d7c9885e34d036796c48cbc75fc43c99d5b4282ad4d711b9cda192239039d421c305121de13bef639c2f14df659d02fb8065ebbf2081179e45a6cfbe42cdfd4b09c7c964f1b2cf281121288c53f53520cf96960d4a3aa4d7c85c129b1f2ec28d0190c64b1ed07d4e96ccad71fb8ed2c73784730f394917475d72dea87b687e970b41e6159e4886b82d00e6b4051e4c28c1bc1347747d1a62bcb7ce4a84fed366b02392c55c31c879d460bd3bc3e9d8c1eacf5494724723ffd2f47bb5d4f9590681eabff4d66188218664d9c9dec1cdf800cb75262dc4b633c3886ca828e0068d6df3d87664a6d77257f24622129cbdc9bed7215072c2c64ed6dba05c7d0ce470bdd2adcd018f500f5df3d4576d56f0507912752080778d2b0fbbcb1c244cda2a92939c420967b1bd178ff85441de429a18c1175d9b85d5acbd9c510d17e6ee7203de85811c8c96591023a024b364835ce50046f07086966c1ef6ea7775d0b035326b68b12964bec95cc92138dff168fd1b0ad42998dd4bd19fd39c293065c294d3d58aabb94d46519e324b2e678a7ba223e8c5a27614aac5bba0c0eca6f9e5cf64e485e64660802c9be59110c2a21cb9f8b2e90c9351ec8bf12850bda2f9c63549cffc493eb1ee20fdeae924beae374c80fdd50ce71b197cc303f4221b743155a8c63cfeb6ee7694749a1016c1b4d883fa05f4363bf7b38ed94bb3134fb5860e15ea167fc868e7547c841a0e9a236a806c0c3b7fc9da6ecdae5593eb70fbc1b317665f97e0a72dcc34a062488577172473d4f58bb42d171b7023b176bea9771e8fc22ee09174f88b710e2297141591e669baf09745ce568c30587c6bfbad2b5b267d5e7bc0a70ff2b4eace3a3bb27a95e96a963d883b2e8c7aeefcb162a4132c023d18c5557840d7f0a4b2f1b64361530acf84bb2cd0db9bf85df09dec64c57569fd4dc765454cbbf6e42d24e1ec2aa555faf1d010eb385878ae70b04f952f1e5acf0e07ed109083489e9a4c4c85b10dc9ccdf358256093ba3dc93648d2d35328e671363456dd3368da9c8093067acf311bc0da16bc141335c32d49505952b88b79ccb4067f46187ef968786fd287760dd7a7e88b6fc58ba48e849eef7f329fc7b2bf111d151fbf522782f62bd3ee3d27e9c8c8d6c96daf14491488b289bf485284c4b5a328baf7f0dc645d4137c6325e5b11291b367b3df57215aaf93f8864fc907880216a5cda47014bfd9b2ec0d947dab9deee35dd20fbe7ff6e27715dd0d2975acaf9549e8460c73433e8fb54e3bfd199aa44b3b150e6441b1cae8a4b575318050a147c329fbbfa872a4026fc1ba85b0edce4e0bb15bb2d16ba30592115d10cebc1b44dfb4851199d740b1b8823a292ee896e528e22066d4b7dab21f1a94e344688872d8a7a77deefafaff08cf692b54198977e0338ee75e867ef3262711d797a25411fbeddd18ed53a747224f244ba0995e92548052a040442a70b35dc130d9b3bd4aa51d56a5320d089d3f3faaea4028d83cfadecef9269a3ae6ee948ca8bb8b336bd32b5f8b64b80a40011ffe8b1c728751e61a88cac0d99589998a89100c20eafa9abc2053712fe4c30e88e24c048751dc75637c0a140020c584af14facd337e86011a06a010c88c699e4a40e22f0160dcbc556869cdea01d7f6c3cdfe1c0a2c1943c6960c96d8c5d07a8b2f303227966f9e4f6a443c147e512dcae827e42cbe654dfe6646711ba75570280ab7a6fc4446635c2f740e5b39f4c4d4846731f44e1f2600e2d519c67e1e23621554680f95595e64a0056e7cd76fc47e3956791b7edeb4ac3a731473685b1dcb8d1cd977b33f5a44668b899da33c7640a9e349a8867f32e7d8f14a8c90a031c1178e100f361353d0c13338a69a25d261ce120da37e4600215c68c12fdaa293d1a648a66ce6f4bd1677826ff9bd9f7b99d79b465cea8bb36dfa1f4257d6bdf10a57f39e84e7e753550518ad5027e7fd0af41e4d1658a3d87a95f42986cd6fb9571da1874a900561026ea7f8abf1185e13629d2d7933fc7c2b632ebf920d7e4b2cb98f10adbd93dd132dc757467cce56ca5436b8343e4c3d42cf8f0415d76a5ec23883c5c3001c375dace64d6392bd327d51706456819e3ea96892c74ceaef3300d1adf1e64f793434752496e4bf12d3a893a5a5194758834a245888028f47217f03ea4437698a80105f0bdec7890a6c7aec4bc8e4bc82f3df560052da4f5bceb069d8dbd08daf61634eadb9254eafcad6a46bf6a8721ecafb5eb02e339592f54b9d122b972b6e899f18aaff3012f0d9a5b94deafa7ed2e29a2f54e60740efeeafd57834a4ff4f0c161e4a637cd88a1bc23b21a75bcf8d04aa0a3725a5fd671797f53437254343729773cc9e646dabf445ffc92cbab67330b08dc35002fbf2385c9e7f1fb4db1a0704f623f8451b9708c44cc5a00ba858400d769ef74c098b47491658be0a10b3bfb94cd39f34eb5c0973cd05c7445911364e0dcdbec9cd20f7835f7081c5234de39713268cc924d1b300feedb82e0f833fca310c0d5cb5299df2d8c5cd4b88e597fd9e506cf653ad0209a6e81702acb778f656d027762cf932672293481d2b1fef1353646b8ccf14305317abcd19ffb3a04448687427337201e02b1c6b8c01c0737af0bd3d05935a113e92063daa65e00ab4022d2e678b30cc66b282b5ae39c9175915b8f28943b72088932f20bb143226d50768d7042d0a5b23505b20ed7f136dc5dd42edcfdbdfd8e5b9f2e7b56b5374df0034ec7907018daa9ea62613bf7389a832fdcd1da2678c0fe7e4dbfa308e880124487bdef31ca150b7eb4a87e2fbad452613ff2f23f6864b57536f06bdf92e45ad765a5c9494b3271544505759ba1394e5f669afd22b445a108cf9b5b1af7956b5c2c88a47700e7c801f9b65b1dc965d9188427a2b1bf3f239910a0b87c628678c92663460b27f4a9d6cbb171ee40525dc9433ba235f7693e796e9c9bb69c947b61ab1467c021501f119820c9323e82578df4d333a171aa595d025b2e4950aa7c378cfbc4cc4d91518e63d9724f60069bfe0f4a771f7aba8a28b6772312da87d69689341d502679a516f0fbe6a75957582c08e15a3e7e0ff9f46f392fc3a1ebc760b867352c11b65f7d58a1313e4f28d79ff650f69e0b736f889a0a4f6920db90d18f51e0d811761881c89cb494ca4a64b97b544690ededc726f471a14f7a5b78c4bb9fc864b9e7b7f9e78b25a309092023bdac80898eab2e041ff06da8a6aa16845f955a20a77e2d92041c4dfb8a46f7abe07d42140345b32201b33be01ea1cfc88d45c0562650a4ae79b1acf377f753b2bc751906a263c4054b10438452202e39b6e00db2ae2d604695c0d17aef0ec7e42e3d6282f0313ffa947919fc2fe2921762c025cd819f37b532bbe988c82a908207f13695ede800d2fe8da4eadec6739d7571190a46ede4beaa8929210410be1c4f5626605558f362e78ff721ac9ddde06e7c187b5c80c0c0ad2f5637fa50f79b30119dd63ffbd6c358ff0031e9904ba9856f040364769c9be27ea6e0dfb13620fa238c52e19aa80a8c7ae0d6021bc1f129bd25eb4322f37a35cb63d72bd82fa6a0b85cc5f21487e6743e405cf0f90d6fea4e1d9864379691665be7a6432ad9f35639bcd3e0a6fc7a52a725357c9d8b7f68", 0x1000}, {&(0x7f0000001680)="2a0fc368cb80e3f6b570020e", 0xc}, {&(0x7f00000016c0)="28badcc6db9fe5903fd8d1ceb95786be643914b7090bc0abe5bea18095d3b302c2f8503630e2f1dbc80f5a6af36dd3b4636ab83238b1f097e36208fb173f0471e40da4384856ea374c0e41f3b7e54dfd5d8996bfcb846f7ce53d3c90b6d917a611738466525b453fc6b680726930b71648b1756a8c82b0c135a3032ad1b3a21d8a26b5dec21cdb78a7e176888396f5deeb6891893a9dca4e6037858e5bf3fc8e7ebeee9f531205918168b548c0551774b3cc87b098067222392d5b47c9d383fca3fa3d1762b4648e04c3f338e70ed6e56e7b5292e088a57c8f85c89904bfe1ec280cd3bf309bb5c50881d3fc68443612cd49f927c517063cef80e05606d4ae619dfaf236b7d96dcf5d512d35bead83e33e1072d5ad66c4899a49f9f48c66d8104d106818d7fa7968528fd425df2a2ed3aa4025e33a4c2fed650f07064b71afe8b8a81ddb34ececd0b58431d1885dff5b9835b152b2fa03deae4462f3b02cfe549fc04d9c0adbc7f4ce066c754697e7ca553ed4cbfc132dbf2fd47d64a0a6933a0779f070ff069badf118351a8d91d9709f295e6b107d066441d172f89075cc8bcbd3686488c841b52c27aa2303cc0d07d46ca2ad49dd3b27959126d198167c78c90bc0ea9827fd93ced70b3bb646ebff5824bafdc4910b9c8855ba8e69f9acad246a5215eadf88d7651fd1721f73c4e5509ea86ea2ae4296a4bab8f4f68cd089f467f103b43ff7dd3e0a41d17fc4fa99a5bfed6c6b833d45fb3581d4d6770a48d65397594aeba7207a935669dfda83707484a6f97f32e21fab7d68c77c19e601b4513d9f35e2716569029a866f1c21bc13c86c86a7b4cfe3862687408d07e2271674fb8cf1978a42b77f121b4b37ea638db37757a7ca87adb270860149f999a9c2a57504adeeeef5ce8a3f71d2745bf6a4c0ac2921ef9d7f10f9134d599103be7d4361a6c2fbb5527282c529dedd722915619233e8f84427f268b761fc1b731f7b59d3f5098f1d01dd16039002502dc42a3f754c6c48e93337d102dcef596476250e037d1aa009b27effde3e255fd79716b6f38cb2b52de90febad2c661c0242a33f3efc80a83fc3fe590378490e0083557c178a0a2762310b99510ba403c09e94e2d75021d0114108ef6d68e2ac5c78c428e677e1ef6836a6422c5a29c0c7ab7d4744d79534f7eaa07f7ad10bb22bb34aad7902b73c1e61e64959a15b1d7ebeb705ff245f15842c35b35b45ed10eb2138884aa8f3b620258cb1749f8123473873f5cc4f512133d93c8796652b77cd44e9e888b051dcdb5404d5908be2825d139ec29ce1160ec0520342cb9baa58ed9cf32f9613a0c5da6396d5757655dd3211ea62fe9d0fb0ec132d5edefef8e3e5c85e5024cf08364e4cd65a7ba436968a343e1baf745208f6da4b6cec8f6ec9c9039f837a14fb20044b84f0f86eb3f1eaa26b7e1a7c54f46b5a10ba0eb1f87423d7af46ec87d9bccfd555252b9c8fc687ca8f1566afb208bb300816d50851900219c24ee09ce12c6c9a97c37dd7628e5a81e2163ed05769c7ce5678b54bceeda5174a25b6e686d8ca9ba45974705edc3b201a3cb12e42ae1a5c6b271bd86555b7237ea5726aa79d5a7f61b68731bdf759c274d0e294949ad79ab8e31a537a0594bbbc1aef4b823340df57a54e127f117881962688be92c34245579e5cffa7033e70dc0b484495e5f146788a8258a38c800310efbc87ab2b0891e2a9f0c1ad4041c0c562baa668965d9f83b46027f7928ca86dd355d1bdf62b1dd615cc4d19928c2ef5eb44d164f08706d45eba46217287474601293c0fb07377cd4a19d64c251bff04feb20374991c5dc3c81b0acc6b939f30823bf617f6beaceb58b52eecbc8ab1090562d2f89b3bf2020af3c461b6062728c6cbfa3cebdeeb997501a3363a267037d6a3f1868553d6b904a41b68d02f49568822378ec69bc8f5a8d2be7f5f60909c32c6bb55a4df25f6bd33bfdc26f34b0655f5933bb9df636ecf1f6ade1a701eeb5a48c384fcd17ddde53d431441b0110301f2857f791ee15fd1765ac4abc5c32f0f293ffbb124288fb03fb81d26c2f676db2fa8591a1127fad4d070698faeb98c5b98af3dcb509443564972e4f478b5b691b10bc79b709a26191a8b9fc5d77690f683a6ae994b30f367a0aecf76a52bf191cc5ae025428b49a0fa659e0e0e7b76dc15c901ea13094c43c06eb47e370562029bc2b360ac49bca2c614edb134f1ef5551442c6543940766fcecc476f1c8cdb97ab4dbef76875fee9a618e2bb9a6aaa2dac71b413663db91e3b59420dd91ef5152f8e5f1df6390c7b59d8f8ba7df904310fbf35e9bf1ee214461840629efa602e279c311d4e83bcbc68550de40b69ae7f1d7bfa8537626eca681f9399b5234292b9f2d4bca27f592310c30ba59fa37b9e8785d4915c33bd342d53600cbdfffe03d6bed150e9050aa89a50ed44a409ce846d745b39973dd82068d68c25122896eef2c4a146609775daac37779b035cfa6dc333f077bc73f742b999d17476d9d18b51669f1dfa2ce4f6648b20ee7823639d56240d26bbb15cbf89df11f121f6a3364c0f50a7cf6b33d046daef53efc671ca9035811002ffd1cc9bea6795aa2c544270f3b588219a9d3b4157e50a5e6b3128adea563f64ae61a34bbd4167300a8d4dfea778eb904adf4682fdab020e18fa254c691014fa32bacd18109232bd861cb3a27f2b20b8749a44f301e0eb833f408d5da14ff03d7f32e8f273b5706697c65e22ec39e93ecec288fddbc1fa9d329d81ab2248021832c9aae99dc6004b08359f0763ef9120b6b0d91c13497916812c69c930fcd3a044e836a65cc02205195927b829024160843fdece4a7d8e03c7dd13173291b9244eeb5a0be05288ab436c22b5cad5de9da99b6cff04462da767cc657b0c78e1a6e520e07846e74045d5e66e22e7c52f96690e53c622da0d99e7a02e2a28c459ebf4dfdb0e96227aaf58e1928709fc9ab264917a868837ef0ea9948ebd6a9868875814a82838c247c9678806d6a03e8ee3febe07fd3cae291e9ddbd9ee1d48b9805486e631cae12b582e42b6408273d4b0c45f1c0be333d141a2eb310678d354612ee469014a60fd785ec6fbdb1c98b8663c68d901e53f4feb10b572dfd6ffa016f7ed0dd24fd99b198257cd000a404e4b24be1383d25843f94f39355e4d5daea012caf6f15c85d87376af43f60a4e4b676cf1408ba430cb8ba3887693b2ae39a3cf5ea7fe51e432b1566a9715fbff44388d61fc1d0795e22c26d1e3a88a6c22024addb8b06f11042da57ba3145c6d51e6a19dcb41658b8b5a145a53d27e216c6d6e89673a4257fc3620c6a2f2db7f24e161cf7c02763135c7a9b6a4c67781a91eb9b75b14580caeb8d024e5f54c7892857c5e793359173a6b2d04de2ad3d6fa3040be47e71f3dc02fc1d417d93eb50814b434ddc1212ed0f1d9f8d2fbd1a276d49290faf67388ddfda5f55c34bbf104ff0e6a25c0e654cf68b97774d6214bfd66c7dfa496434c6f5a685eb41a48b28ffaf64e7ffb8d41e7a403a7a436202f3a80f5e1c634260505da0602dbb4796e06234a57cdf8d2481907b3f3fcf545fa8bba9a45f3c4412497535201bb52dd9bed0876584c73b05c71654ee815c96e0e1786f2384b99e317d0ea61c5e957981b8ce8b313f9cc09d827854a0f34d411301da6ced8341801878094b33c127cd4bf81e09d4d47b1a7c06bc41343ede58484a363dcbbcb6c54fedc7923cc6c7fac561f52aa16a66f6a85b4168545aff27e2e1f77b66cd6b01aa95d10518b27c5eff36d634ea4746ab11cc7a7dff00e409d98a10cf48f3363f39bce29d36c7fecf86c64eb761d27833e5297878224a2b6dd14885d03b6926e832e1e36e0b04e2514a03ffc14dfcce1347c5b0d26324cc1630232e471ec704aeca8aa15f6c9f826aa04e00ee011edb977f756b8b547095487dddf2517a3591869dfb067debfdf199dfe60b8236357d903910fa818d4d182527db2d4f5742a8c5d4b6603bd0bf81009bc493c3515bc2de227011023971436a536cb9fa3ba054651d24b9e349e053f125c977a981f63e858cd13342d29dfc52b1e63513f353ba995da71c22eaa69e9d4d8bd20d5d8d8d302472b035b1764e6dbde585a3052d705706ea359822859fc6fd014c11571ae3c4ba5f3617aa55da5e74c50dbeca5deb6b2bd42f87e72e2d9cfc28a02cc6091b9a5295377d08832f76ea18b1e92c1317f8fed1b67bc7829ff3f6f9a04bb8ce9eb75cd993b4bcedb21fc1ee070aa5cc6dc2f04ac2cd14e1b8b866b16f7294fad9169bd9a840ed9b5c9d920d982afdb18514255f4fcbe017bb5458ccced9f4d744f6d393879ef5385f0658b653897c7f99b1562eb6806dcef2a44e278b913657fa7de34ff69bb5132183f443d4f1e0b59d232f7f117130f5b9da4bb6a05e771a2e79e6aea0f9231834b399e1721c08be3a50ce0206535d88cad610826d9a98ba8ebf6074fc0aa3463c7e7ec5fbf592162bbead3219cc9347f0d0268b71b7e2a2ed0ed97f3fd68c70c7b2c7d76e3a95989afb3dc4aa6ad8d223265793cfe19245776871e71564c5c58775e633656ce97dcf6b8819287344cf7ef4d7df4253539209bf543f3a0ad5c7a981d5ee75061924d0494d2ddfac67384cb1559722f251eb787e8f6ac7c1cdf8eb91427680b865cb3a12d37e76df08eb6ae263e0c5f9fc75e46b3d9dd872150c848c9dde9d09421ac077d8b60192a3d78aa9095777a0864b93e17706001aa439e422c77d6ea9593b05c50784af633a387ec1d1f431d510bc4c1d989b0a65e1c53d36b73e071b9408a1cb75ed2c8bf614b11499a563a951854e7461c98494a076aef2b23ed1c5dd417f6275c1afcdc92446d74312884c5155f54e2fbe34533dd6b2443cdf86ac5837070b32936288b6df61ed7c3e80ef30d31d27cc70077d07d524d50c8ca7c2344ddfd5108d09ff0b6362d401b841c2fa77adf3de384ed9ea933c3bda5d824880c4ea0faa89d85d90758da68222ffcc21fce88aa8844489024197c0776255ed4f3d57a353bff2aeeffa94e7bae3a347c280658ca80bfb7f62386254fb14c9f10d146ee33cf418a0f5b5007a863e2a55d7e1d11c506c6abd8055f74b9811621c6cf40d832b39d414fc5cf14bd337ef02a43252a09eb0c59cfe96d511cf691f2f8796d0727de866eb7c9d1a96038617fcf2d8ff755efc8b21c4561a0acaec2fe029eb37a4a21749f162921afd193dd0081cd7be63b16c5c65e1eaa83b1b17046902ef7824ce40306548f7b1fdfadd3efec786b0edbad38d85a1eb92fbceee5a89ad6b24ec2ad3c46406d1ac35577a273f7dc20c40490c98ad4647e2e19afcaed3d926365b26f704e221da6362c64b1464ea6dd3c38fe96064cd5727547df15c9465bbf8264f53ee1d5b2667ee544644e832c6a6c88a6824b77377707a1b1f4f8cc591eceda6d07e404ee12d3a343d671d8416d4c22276feed679e36d568fb45437aa82a1f4a2f18d1f6cc074ce3ba03b408e5729deef3fba20de7ee34c254ef55cedf45261e158fce88697938f194631ba46c010e0f565b7cf70129b774a18f5a16b24fd72b608f2ef84eff2362428cb52cbccdaeaba232ee2b47b4e27a87e72943219cc6e761cf969d60ac7a304ced14254e0d11bfd9a6122a862e683b02f8d307685225dae65e839952ff2ca13298ab0ffcdf85b6af6864dbb5c45e7428400481fd258101f8da61d28d1f25f322490028ce74651a5b4a42b9d31fa0424df86d9cf2790557f17216", 0x1000}, {&(0x7f00000026c0)="a392fee08d6783e3c59756d1f5f380fb747afb097836129cb65694682f1bd64b71335ce24a047385ca25f5aa69d38b1c0797b685e8e26e267e4cfbd48f63f445b9f767c8", 0x44}], 0x7, &(0x7f0000002940)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r1, r0]}}], 0x38, 0x800}}, {{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000002980)="caa02e633c2ef5db61192b01bf4a76f413e6712e7184a024187b560fb5d2f73ee2e92937b62f8e27e9053a44f930f0a65b160c49cc64bd18b8a8901d4a5a59646db4788a7b5bd91647da2fb22662c09e3e2f9c07560255152b6335e6ecd02d4744cd006cb5e6d3", 0x67}], 0x1, &(0x7f0000002b80)=[@cred={{0x1c}}], 0x20, 0x24000095}}, {{&(0x7f0000002bc0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002dc0)=[{&(0x7f0000002c40)="37a1531370e3d43ea62fe74d5f1a70648815f5d205ab6313c90adca0367b983b551b4a729a98977586543f5e7cfad12cd6afba39664b4211bf25aa7564b169a912", 0x41}, {&(0x7f0000002cc0)="baeaea79a095016d4ae7b3358f2ad75c2d10699a30154d24fe948b86e780448051c400ec346d3efb27773a182c4ae4caf956c70251ea03aa8ff21aa223e974127386ad57897d60c3cdf663126660cf91a68e44be9790159a1f215ee509d8dde6fa4a51b7da97ab163e171b07e417e87ef1126942c5c58bf88ffba4ef6c6104639d1253322b791d140ea51f2469c3e4a835332e1e08e83645f049a09da223ba1ef152eb8a455dce9e612439fcad045d5f2c9bd974912b8522ebe79613c978709a330c25aed77b815763f3407cf3992c88c675f0e4445f", 0xd6}], 0x2, &(0x7f0000002e80)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, r3, 0xffffffffffffffff]}}], 0x78, 0x840}}, {{&(0x7f0000002f40)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000042c0)=[{&(0x7f0000002fc0)="013974919bf8e81b37e70a7286564758c4e989be37e3224099da7d36ae48a075656f9d0a9b637fbf7a80830444d97c5dd0d47de7dcfd26f48c82e999120f7884f8cc162a3c01501c2f5e8786eef6b4a978113bf4e169dce3e6f2c5b7f196b570cd0f7a31548346a57729a3d70a24c3fdd21924e3641bedcaf62a64c37cf25edfe3aefad35220eaae5ac04b41e512537a1601f69df7f8145d751589cedf9fb8af64ddd73377673430df6fae0f9fd41b2d9588b052c1fa09de38bcf2bf", 0xbc}, {&(0x7f0000003080)="1ca42bef8bef43590abd1c6ac9ee93f00501cf0e7f2fc3d4daf17084b48cf620bc4b94b454d39d34eab53963b815df7264ff06e44d2e410193d06e349b3de29d7c9a457e85ddf5aef88f211b5024dcf45e1dd1ca1b20e0b680ac4d822a93e43c5030a2cf8409899bfcd745f0bc4dca4f858c4eee8f1d04a6448506791300e9c9e9bfd4371af9302f526daa96f83f3233e148dd754b5e6b1f590565a478cf8e9356cd332f2d46cdf32140b49126dc2b9363752b6fa6cd2ef8d8d0fc4c8fbea1388d7543b358f08acac5467781c7b7bd6f51780f37c04842052e0dc782128fbc", 0xdf}, {&(0x7f0000003180)="4c9edc33c97b0faa87c71ef1a7dd4dd7695a738f1dc321e6ddd9203259a376ac7e73b3a2e282e7625d3393db76183a03079a3c36f76e3208a0e70cb8e093fd29991aa381c32e0ec389d58a31e63fb422e47384137d27643a48de67a86bc540dbeb7c9c444d5412112a8ba0d147293b956a4ad765471dc9f50e28fb0c9ab2ec106ff02554c9bddadf6244ecc569", 0x8d}, {&(0x7f0000003240)="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", 0x1000}, {&(0x7f0000004240)="0c1d22a193fcb9fc1a4492587cdbb2713871d7e980b167d04ed06b216af74b56ec9cabf08dc477226364c0ffb32ab9ea2558e616a72dbb5c4b14e5db0ec7bc49a641d6bdf32a1047", 0x48}], 0x5, &(0x7f0000004400)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c}}], 0xb8, 0x40000}}, {{&(0x7f00000083c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000008700)=[{&(0x7f0000008440)="05bdc75b97d5c8d75c384f938a17ed7bbfcd8fcd5f02bc4c83f359ae0ea634197343a27f740ddeb24a138091e0982dd7be7b6ba977f08be09fa67296132bafe7b3fb35d744efa11892bfa7c8969f30735fe25f8c9e", 0x55}, {&(0x7f00000084c0)="3ef45b9880ca8c8fa45ba938a5e63d46278b3e232c7ebff383c39a3a2a3efc843e2d6d6784484dd23882c042ee3a49eb66e786c823145f0013179f5c971c6314c3c24ceb60a26ce4a7a5e4f8889956b5cc31be19f9de959b9ec22145010670894ac197381586926eeed710245784b6", 0x6f}, {&(0x7f0000008540)="8c5c13944dc36781b523bd6f175f26e1038cd56379afae555b19bdce89d4b4d37f6b1ddc8ff3071eedc5fc84fed86b19692a28cd43334a8f74a2ff0dc9060d381939595faee1194bd0fcf3c6a4d20c87a7bf93dfc2448e7c0d004a8edf1ac264710f28835f7dcc01a95aee8c777bad17268e29004f4700e10ff64a766cb17ed3463fd9c55b45cb919f3447ec1b512c1d2d8f3a366d5c565533842f058c9e1ddcdd444e611ba4a77542398ccede21116da5", 0xb1}, {&(0x7f0000008600)="0446b656782a22db22fa56364ae850a9c1b67aa5c40792fc7abe3609c5d31419343e15584d68f56ed6ff19862b150d2ecb9cc61c86a79e1792c9f5491125ed9c64a04199160b76f70355457621b6eab4b2aee5146cae0747c7d910c49c17c9ea0f71e51ac0abfe31a3023ec0baa7e8da758368ad41e6bbf0f960ff01ffb183c7e34f2e7dc35d1ea937fc10254f456e6e9f110cedf87aabd5a9b5347e1626be0427c62619c2388fbb5ec73bd7533d6c851e1e6fb9e94d1f16e692f075a4921b3cc07e959bed06b50401", 0xc9}], 0x4, &(0x7f0000008880)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r1]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0, 0x8004}}], 0x6, 0x4000044) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r5, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000080000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x5a}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) ioctl$KIOCSOUND(r1, 0x4b2f, 0x2) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)={0xa, 0x73, 0x5, 0x1000000, 0xb, "88bd91aa28528000000000007500000400"}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffff, 0x0, &(0x7f0000000040)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(0x0, r7) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000002b879c0ec0448112c7831b1d78100", @ANYRES16=r8, @ANYBLOB="050d2bbd7000fedbdf251500000004002b800500290000000000"], 0x20}, 0x1, 0x0, 0x0, 0x48881}, 0x810) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0xff32, &(0x7f0000000380)) utimes(&(0x7f0000000200)='./file0\x00', 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x189900, 0x0) pipe2(&(0x7f0000000040), 0x0) 2.698925465s ago: executing program 5 (id=4623): r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x1e1080) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000080)=0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xa3f58dc55767b1b9, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) 2.623685538s ago: executing program 5 (id=4624): socket$kcm(0x29, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0xa00, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0x1) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0xa, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/193, 0xc1}], 0x1, 0x0, 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2.198207075s ago: executing program 0 (id=4625): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x28801, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(r1) ioctl$KVM_CHECK_EXTENSION(r0, 0xae01, 0x8) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) socket$qrtr(0x2a, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(r3, &(0x7f0000000000)=':', 0x1, 0x4fed0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETS(r4, 0x545c, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) getpid() socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) prlimit64(r2, 0x1, &(0x7f0000000280)={0x2000000009, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1.119948535s ago: executing program 1 (id=4626): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x18) fcntl$setlease(r1, 0x400, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000400)={0x2, 0x0, [{0x80000000, 0x5, 0x5, 0x80, 0x3ff}, {0xc0000000, 0xea, 0x2, 0x9, 0x5}]}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) process_vm_readv(0x0, &(0x7f00000007c0)=[{&(0x7f0000000180)=""/99, 0x63}, {&(0x7f0000000340)=""/84, 0x54}, {&(0x7f0000000900)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000500)=""/75, 0x4b}, {&(0x7f0000001900)=""/4096, 0x1000}, {0x0}], 0x7, &(0x7f0000002d80)=[{&(0x7f00000003c0)=""/51, 0x33}, {&(0x7f0000002900)=""/233, 0xe9}, {0x0}, {&(0x7f0000002a40)=""/215, 0xd7}, {&(0x7f0000002b40)=""/102, 0x66}, {&(0x7f0000002bc0)=""/97, 0x61}, {&(0x7f0000002c40)=""/236, 0xec}, {&(0x7f0000002d40)=""/42, 0x2a}], 0x8, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), &(0x7f00000002c0)=@v1={0x1000000, [{0x345, 0xd6}]}, 0xc, 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = syz_io_uring_setup(0x5c4, &(0x7f0000000140)={0x0, 0x0, 0x400, 0x1}, &(0x7f0000000300)=0x0, &(0x7f00000005c0)=0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000340)={0x18, 0x0, {0x88, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, 'bond0\x00'}}, 0x1e) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r4, 0x6e2, 0x3900, 0x43, 0x0, 0x0) 1.094462864s ago: executing program 4 (id=4627): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x25702020}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 606.9585ms ago: executing program 5 (id=4628): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000001500)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfddc, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) readv(r1, &(0x7f0000001d00)=[{&(0x7f0000001c40)=""/178, 0xb2}], 0x1) 0s ago: executing program 1 (id=4629): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) shutdown(r3, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r4 = syz_open_dev$dri(&(0x7f0000000340), 0x1, 0x290201) r5 = syz_open_dev$dri(&(0x7f0000000200), 0x0, 0x42800) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x2) r6 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x28043) ioctl$CEC_S_MODE(r6, 0x40046109, &(0x7f0000000140)=0xd0) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000240)={"5fc0f668", 0x8, 0x80, 0x1, 0xc50, 0x2eda, "cecce646a49a1fa2da510686264f45", "b8c7756f", "d7727f2b", "8ea06b54", ["ee6ce461483448b7c1b80e3a", "041178f246978b18e5a5a0c0", "bc2a04cb93005efc75e806f6", "a25c629ea60a18ed96da1276"]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000400)={r7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400b7764c14156d7aa9ffff40000000000000000d0001007564703a"], 0x54}}, 0x4048850) close_range(r8, 0xffffffffffffffff, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000380), 0x2b82, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) kernel console output (not intermixed with test programs): setting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1098.042178][T17789] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 1098.052169][T17789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.061500][T17789] usb 3-1: Product: syz [ 1098.065682][T17789] usb 3-1: Manufacturer: syz [ 1098.070743][T17789] usb 3-1: SerialNumber: syz [ 1098.078810][T17789] usb 3-1: config 0 descriptor?? [ 1098.112498][T21342] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1098.353062][ T6165] usb 3-1: USB disconnect, device number 12 [ 1099.306755][ T30] audit: type=1400 audit(1767598958.924:795): avc: denied { getopt } for pid=21339 comm="syz.0.4007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1099.327700][ T90] usb 6-1: new full-speed USB device number 60 using dummy_hcd [ 1099.364016][ T90] usb 6-1: device descriptor read/8, error -71 [ 1099.370106][ T8426] usbhid 1-1:0.0: can't add hid device: -71 [ 1099.407417][ T8426] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1099.436351][ T8426] usb 1-1: USB disconnect, device number 92 [ 1099.750197][ T6165] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1100.401822][ T6165] usb 5-1: device descriptor read/64, error -71 [ 1100.899222][ T6165] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1101.032652][ T6165] usb 5-1: device descriptor read/64, error -71 [ 1101.167730][ T6165] usb usb5-port1: attempt power cycle [ 1101.679096][T21391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4023'. [ 1101.766501][ T6165] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1101.890707][ T6165] usb 5-1: device descriptor read/8, error -71 [ 1102.554268][T21406] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4026'. [ 1102.564106][T21406] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4026'. [ 1102.583405][T21406] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4026'. [ 1102.634445][T21406] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4026'. [ 1103.741481][T21410] can0: slcan on ttyS3. [ 1104.145608][T21409] can0 (unregistered): slcan off ttyS3. [ 1105.325231][T21439] syz_tun: left promiscuous mode [ 1105.362746][T21439] bridge_slave_1: entered promiscuous mode [ 1105.368646][T21439] syz_tun: entered promiscuous mode [ 1105.403247][T21439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1105.881811][T14879] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1105.992319][T21452] input: syz1 as /devices/virtual/input/input89 [ 1106.101971][T14879] usb 3-1: config 222 has an invalid interface number: 233 but max is 0 [ 1106.110855][T14879] usb 3-1: config 222 has no interface number 0 [ 1106.119857][T14879] usb 3-1: New USB device found, idVendor=0f11, idProduct=1100, bcdDevice=2e.87 [ 1106.140417][T14879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.203534][T14879] usb 3-1: Product: syz [ 1106.211830][T21439] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1106.243141][T14879] usb 3-1: Manufacturer: syz [ 1106.261068][T14879] usb 3-1: SerialNumber: syz [ 1106.660403][T21464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4033'. [ 1107.226973][T21448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4030'. [ 1107.469415][T14879] ldusb 3-1:222.233: Interrupt in endpoint not found [ 1107.614734][T21474] usb usb2: usbfs: interface 0 claimed by hub while 'syz.5.4042' sets config #0 [ 1107.681382][T21474] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1107.787194][T14879] usb 3-1: USB disconnect, device number 13 [ 1107.978050][T21478] can0: slcan on ttyS3. [ 1108.043483][ T6165] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1108.219505][ T6165] usb 6-1: Using ep0 maxpacket: 16 [ 1108.243613][T21477] can0 (unregistered): slcan off ttyS3. [ 1108.270489][ T6165] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1108.279113][ T6165] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 1108.287776][ T6165] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1108.296125][ T6165] usb 6-1: can't read configurations, error -71 [ 1108.404055][ T30] audit: type=1400 audit(1767598968.562:796): avc: denied { setopt } for pid=21486 comm="syz.0.4048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1108.443719][T14879] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1108.606373][T14879] usb 2-1: Using ep0 maxpacket: 16 [ 1108.613779][T14879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1108.638001][T14879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1108.667456][T14879] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1108.702958][T21498] syzkaller0: entered promiscuous mode [ 1108.708457][T21498] syzkaller0: entered allmulticast mode [ 1108.709775][T21500] FAULT_INJECTION: forcing a failure. [ 1108.709775][T21500] name failslab, interval 1, probability 0, space 0, times 0 [ 1108.720370][T14879] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1108.748112][T21500] CPU: 1 UID: 0 PID: 21500 Comm: syz.0.4053 Tainted: G L syzkaller #0 PREEMPT(full) [ 1108.748144][T21500] Tainted: [L]=SOFTLOCKUP [ 1108.748151][T21500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1108.748162][T21500] Call Trace: [ 1108.748169][T21500] [ 1108.748176][T21500] dump_stack_lvl+0x16c/0x1f0 [ 1108.748207][T21500] should_fail_ex+0x512/0x640 [ 1108.748233][T21500] ? fs_reclaim_acquire+0xae/0x150 [ 1108.748259][T21500] should_failslab+0xc2/0x120 [ 1108.748282][T21500] __kmalloc_noprof+0xeb/0x910 [ 1108.748309][T21500] ? tomoyo_encode2+0x100/0x3e0 [ 1108.748337][T21500] ? tomoyo_encode2+0x100/0x3e0 [ 1108.748357][T21500] tomoyo_encode2+0x100/0x3e0 [ 1108.748383][T21500] tomoyo_encode+0x29/0x50 [ 1108.748406][T21500] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1108.748434][T21500] tomoyo_path_number_perm+0x245/0x580 [ 1108.748453][T21500] ? tomoyo_path_number_perm+0x237/0x580 [ 1108.748477][T21500] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1108.748499][T21500] ? find_held_lock+0x2b/0x80 [ 1108.748544][T21500] ? find_held_lock+0x2b/0x80 [ 1108.748575][T21500] ? hook_file_ioctl_common+0x144/0x410 [ 1108.748605][T21500] ? __fget_files+0x20e/0x3c0 [ 1108.748631][T21500] security_file_ioctl+0x9b/0x240 [ 1108.748656][T21500] __x64_sys_ioctl+0xb7/0x210 [ 1108.748678][T21500] do_syscall_64+0xcd/0xf80 [ 1108.748703][T21500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.748719][T21500] RIP: 0033:0x7efd9fd8f749 [ 1108.748734][T21500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1108.748751][T21500] RSP: 002b:00007efda0b56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1108.748769][T21500] RAX: ffffffffffffffda RBX: 00007efd9ffe5fa0 RCX: 00007efd9fd8f749 [ 1108.748780][T21500] RDX: 00002000000000c0 RSI: 00000000000007a5 RDI: 0000000000000003 [ 1108.748790][T21500] RBP: 00007efda0b56090 R08: 0000000000000000 R09: 0000000000000000 [ 1108.748801][T21500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1108.748811][T21500] R13: 00007efd9ffe6038 R14: 00007efd9ffe5fa0 R15: 00007fff1f80da18 [ 1108.748836][T21500] [ 1108.758282][T14879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.783562][T21500] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1108.812795][T14879] usb 2-1: config 0 descriptor?? [ 1109.590301][T21509] option changes via remount are deprecated (pid=21508 comm=syz.4.4056) [ 1109.632049][T14879] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.002C/input/input90 [ 1109.661457][T14879] microsoft 0003:045E:07DA.002C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1109.764804][T21513] SELinux: failed to load policy [ 1109.812120][ T6165] usb 2-1: USB disconnect, device number 87 [ 1110.174694][ T30] audit: type=1400 audit(1767598970.420:797): avc: denied { bind } for pid=21521 comm="syz.2.4061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1110.926919][T21537] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4064'. [ 1112.682468][T17789] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1112.693044][T20435] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1113.284632][T20435] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1113.292286][T17789] usb 5-1: Using ep0 maxpacket: 32 [ 1113.312638][T20435] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1113.422402][T20435] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1113.507065][T20435] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1113.695270][T20435] usb 3-1: Manufacturer: syz [ 1113.710199][T20435] usb 3-1: config 0 descriptor?? [ 1113.945686][T21578] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1114.313715][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 1114.323859][T20435] usbhid 3-1:0.0: can't add hid device: -32 [ 1114.329913][T20435] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 1114.430775][T20435] usb 3-1: USB disconnect, device number 14 [ 1116.006760][T21590] can0: slcan on ttyS3. [ 1116.050108][T21593] loop9: detected capacity change from 0 to 7 [ 1116.124381][T17789] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1116.164741][T17789] usb 5-1: no configurations [ 1116.193108][T17789] usb 5-1: can't read configurations, error -22 [ 1116.215644][T21593] Dev loop9: unable to read RDB block 7 [ 1116.295747][T21593] loop9: unable to read partition table [ 1116.373552][T21593] loop9: partition table beyond EOD, truncated [ 1116.417054][T21589] can0 (unregistered): slcan off ttyS3. [ 1116.433878][T21593] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1117.067507][T21607] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1117.155210][ T30] audit: type=1400 audit(1767598977.747:798): avc: denied { write } for pid=21609 comm="syz.1.4084" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1117.389697][T14879] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1117.811816][T17789] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1117.815239][T21617] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1119.050020][T14879] usb 2-1: Using ep0 maxpacket: 16 [ 1119.075038][T14879] usb 2-1: no configurations [ 1119.081366][T14879] usb 2-1: can't read configurations, error -22 [ 1119.181502][T17789] usb 6-1: config index 0 descriptor too short (expected 41, got 33) [ 1119.198226][T17789] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1119.217450][T17789] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 1119.217698][T14879] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1119.235658][T17789] usb 6-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1119.264998][T17789] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1119.281169][T17789] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 1119.299250][T17789] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.309182][T17789] usb 6-1: Product: syz [ 1119.317310][T17789] usb 6-1: Manufacturer: syz [ 1119.327216][T17789] usb 6-1: SerialNumber: syz [ 1119.340735][T21607] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1119.405819][ T6165] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1119.413512][ T1589] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1119.420182][T14879] usb 2-1: Using ep0 maxpacket: 16 [ 1119.428262][T14879] usb 2-1: no configurations [ 1119.432862][T14879] usb 2-1: can't read configurations, error -22 [ 1119.465728][T14879] usb usb2-port1: attempt power cycle [ 1119.570190][ T1589] usb 5-1: Using ep0 maxpacket: 16 [ 1119.582790][ T1589] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1119.583361][ T6165] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 1119.601697][ T6165] usb 3-1: config 0 has no interface number 0 [ 1119.601956][ T1589] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1119.608038][ T6165] usb 3-1: config 0 interface 85 altsetting 151 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1119.608089][ T6165] usb 3-1: config 0 interface 85 altsetting 151 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1119.608112][ T6165] usb 3-1: config 0 interface 85 has no altsetting 0 [ 1119.608142][ T6165] usb 3-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 1119.608164][ T6165] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.660222][ T6165] usb 3-1: config 0 descriptor?? [ 1119.662762][ T1589] usb 5-1: can't read configurations, error -71 [ 1119.798091][T14879] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1119.818386][T14879] usb 2-1: Using ep0 maxpacket: 16 [ 1119.824156][T14879] usb 2-1: no configurations [ 1119.829798][T14879] usb 2-1: can't read configurations, error -22 [ 1119.960457][T14879] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1119.993277][T14879] usb 2-1: device descriptor read/8, error -71 [ 1121.191907][T14879] usb usb2-port1: unable to enumerate USB device [ 1121.274778][ T6165] hid-led 0003:1D34:0004.002D: unknown main item tag 0x0 [ 1121.281872][ T6165] hid-led 0003:1D34:0004.002D: unknown main item tag 0x0 [ 1121.395056][ T6165] hid-led 0003:1D34:0004.002D: hidraw0: USB HID v0.00 Device [HID 1d34:0004] on usb-dummy_hcd.2-1/input85 [ 1121.427015][ T43] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1121.459390][T17789] rtl8150 6-1:1.0: couldn't find required endpoints [ 1121.469943][ T6165] hid-led 0003:1D34:0004.002D: Dream Cheeky Webmail Notifier initialized [ 1121.491495][T17789] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 1121.566122][T17789] usb 6-1: USB disconnect, device number 64 [ 1121.598351][ T6165] usb 3-1: USB disconnect, device number 15 [ 1121.608131][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 1121.686409][ T43] usb 1-1: New USB device found, idVendor=0471, idProduct=0313, bcdDevice=81.d5 [ 1121.705423][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.730524][ T43] usb 1-1: Product: syz [ 1121.747118][ T43] usb 1-1: Manufacturer: syz [ 1121.764127][ T43] usb 1-1: SerialNumber: syz [ 1121.780998][ T43] usb 1-1: config 0 descriptor?? [ 1121.866647][ T43] pwc: Philips PCVC720K/40 (ToUCam XS) USB webcam detected. [ 1121.874575][ T8543] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1122.077521][ T8543] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1122.111162][ T8543] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1122.138352][ T8543] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1122.152224][ T8543] usb 5-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1122.164219][ T8543] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.194870][ T8543] usb 5-1: config 0 descriptor?? [ 1122.220118][T21652] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4089'. [ 1122.590866][ T8543] sony 0003:054C:024B.002E: unknown main item tag 0x0 [ 1122.623583][ T8543] sony 0003:054C:024B.002E: unknown main item tag 0x0 [ 1122.668115][ T8543] sony 0003:054C:024B.002E: unknown main item tag 0x0 [ 1122.696679][ T8543] sony 0003:054C:024B.002E: unknown main item tag 0x0 [ 1122.727327][ T8543] sony 0003:054C:024B.002E: unknown main item tag 0x0 [ 1122.753574][ T8543] sony 0003:054C:024B.002E: unknown main item tag 0x0 [ 1122.782128][ T8543] sony 0003:054C:024B.002E: unknown main item tag 0x0 [ 1122.808204][ T8543] sony 0003:054C:024B.002E: unknown main item tag 0x0 [ 1122.837859][ T8543] sony 0003:054C:024B.002E: unexpected long global item [ 1122.881003][ T8543] sony 0003:054C:024B.002E: parse failed [ 1122.911737][ T8543] sony 0003:054C:024B.002E: probe with driver sony failed with error -22 [ 1122.974310][ T8543] usb 5-1: USB disconnect, device number 114 [ 1123.757100][ T43] pwc: send_video_command error -71 [ 1123.767498][ T43] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1123.785593][ T43] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 1123.856519][ T43] usb 1-1: USB disconnect, device number 93 [ 1125.180147][ T43] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1125.277434][T21666] veth1_to_bond: entered allmulticast mode [ 1125.294552][T21666] veth1_to_bond: left allmulticast mode [ 1125.332743][ T1589] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1125.342678][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 1125.348059][T21677] geneve2: entered promiscuous mode [ 1125.369202][T21677] geneve2: entered allmulticast mode [ 1125.376965][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1125.410319][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1125.410378][ T6036] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1125.431097][ T43] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1125.452212][ T6036] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1125.460212][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.462548][ T6036] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1125.479992][ T6036] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1125.489807][ T1589] usb 6-1: device descriptor read/64, error -71 [ 1125.496538][ T43] usb 1-1: config 0 descriptor?? [ 1126.199959][ T1589] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1126.333060][ T1589] usb 6-1: device descriptor read/64, error -71 [ 1126.341391][ T43] usbhid 1-1:0.0: can't add hid device: -71 [ 1126.352992][ T43] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1126.415349][ T43] usb 1-1: USB disconnect, device number 94 [ 1126.438229][ T1589] usb usb6-port1: attempt power cycle [ 1127.563596][ T30] audit: type=1400 audit(1767598988.602:799): avc: denied { relabelfrom } for pid=21703 comm="syz.4.4109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1127.667205][ T1589] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1127.937396][ T30] audit: type=1400 audit(1767598988.623:800): avc: denied { relabelto } for pid=21703 comm="syz.4.4109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1128.070339][ T1589] usb 6-1: device descriptor read/8, error -71 [ 1129.238423][T21739] FAULT_INJECTION: forcing a failure. [ 1129.238423][T21739] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1129.251701][T21739] CPU: 1 UID: 0 PID: 21739 Comm: syz.0.4117 Tainted: G L syzkaller #0 PREEMPT(full) [ 1129.251721][T21739] Tainted: [L]=SOFTLOCKUP [ 1129.251725][T21739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1129.251732][T21739] Call Trace: [ 1129.251737][T21739] [ 1129.251742][T21739] dump_stack_lvl+0x16c/0x1f0 [ 1129.251761][T21739] should_fail_ex+0x512/0x640 [ 1129.251780][T21739] should_fail_alloc_page+0xe7/0x130 [ 1129.251798][T21739] prepare_alloc_pages+0x401/0x670 [ 1129.251814][T21739] ? trace_kmem_cache_alloc+0x28/0xb0 [ 1129.251828][T21739] ? kmem_cache_alloc_lru_noprof+0x2b3/0x770 [ 1129.251841][T21739] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 1129.251856][T21739] ? __lock_acquire+0x436/0x2890 [ 1129.251869][T21739] ? css_rstat_updated+0x1d1/0x590 [ 1129.251884][T21739] ? __pfx_css_rstat_updated+0x10/0x10 [ 1129.251900][T21739] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1129.251914][T21739] ? rcu_is_watching+0x12/0xc0 [ 1129.251929][T21739] ? __lock_acquire+0x436/0x2890 [ 1129.251942][T21739] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1129.251956][T21739] ? policy_nodemask+0xea/0x4e0 [ 1129.251972][T21739] alloc_pages_mpol+0x1fb/0x550 [ 1129.251987][T21739] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1129.252003][T21739] ? filemap_get_entry+0x1a7/0x3b0 [ 1129.252016][T21739] folio_alloc_noprof+0x20/0x2d0 [ 1129.252033][T21739] filemap_alloc_folio_noprof.part.0+0x39d/0x470 [ 1129.252048][T21739] ? filemap_add_folio+0x110/0x610 [ 1129.252059][T21739] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 1129.252079][T21739] __filemap_get_folio_mpol+0x610/0xc60 [ 1129.252094][T21739] ioctx_alloc+0x788/0x2230 [ 1129.252112][T21739] ? __pfx_ioctx_alloc+0x10/0x10 [ 1129.252122][T21739] ? __might_fault+0x13b/0x190 [ 1129.252136][T21739] __x64_sys_io_setup+0xc9/0x230 [ 1129.252149][T21739] do_syscall_64+0xcd/0xf80 [ 1129.252165][T21739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.252176][T21739] RIP: 0033:0x7efd9fd8f749 [ 1129.252186][T21739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1129.252197][T21739] RSP: 002b:00007efda0b56038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 1129.252208][T21739] RAX: ffffffffffffffda RBX: 00007efd9ffe5fa0 RCX: 00007efd9fd8f749 [ 1129.252215][T21739] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000002004 [ 1129.252222][T21739] RBP: 00007efda0b56090 R08: 0000000000000000 R09: 0000000000000000 [ 1129.252228][T21739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1129.252235][T21739] R13: 00007efd9ffe6038 R14: 00007efd9ffe5fa0 R15: 00007fff1f80da18 [ 1129.252249][T21739] [ 1129.832613][T21743] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4115'. [ 1130.172272][ T1589] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1130.314535][ T1589] usb 3-1: Using ep0 maxpacket: 32 [ 1130.789086][T21765] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4118'. [ 1131.035176][ T1589] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1131.058507][ T1589] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1131.071982][ T1589] usb 3-1: can't read configurations, error -71 [ 1131.086903][ T8543] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1131.259970][ T8543] usb 6-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 1131.374601][ T8543] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x86 has invalid maxpacket 13102, setting to 64 [ 1131.401510][ T8543] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1131.898059][ T8543] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1131.922045][ T8543] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1131.936277][ T8543] usb 6-1: Product: syz [ 1131.940525][ T8543] usb 6-1: Manufacturer: syz [ 1131.946345][ T8543] usb 6-1: SerialNumber: syz [ 1131.971236][ T8543] usb 6-1: config 0 descriptor?? [ 1132.004058][ T8543] usb 6-1: selecting invalid altsetting 0 [ 1132.342956][T21765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1132.360612][ T5969] usb 5-1: new full-speed USB device number 115 using dummy_hcd [ 1132.376559][T21765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1132.427086][T21788] tipc: Can't bind to reserved service type 2 [ 1132.450629][T21788] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4131'. [ 1132.465820][T21788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4131'. [ 1132.475493][T21788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4131'. [ 1132.798555][ T30] audit: type=1400 audit(1767598993.778:801): avc: denied { bind } for pid=21784 comm="syz.1.4131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1132.846791][ T8543] usb 6-1: USB disconnect, device number 69 [ 1132.884273][ T30] audit: type=1400 audit(1767598993.799:802): avc: denied { setopt } for pid=21784 comm="syz.1.4131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1132.905778][ T30] audit: type=1400 audit(1767598993.799:803): avc: denied { write } for pid=21784 comm="syz.1.4131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1132.973660][ T5969] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1133.074269][ T5969] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1133.128067][ T5969] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1133.150839][ T5969] usb 5-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 1133.185933][ T5969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.215841][T21794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4130'. [ 1133.292657][ T5969] usb 5-1: config 0 descriptor?? [ 1133.315011][T21782] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1133.324404][T21794] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4130'. [ 1133.348286][T21795] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1133.412172][T21797] input: syz1 as /devices/virtual/input/input93 [ 1133.845867][ T5969] logitech 0003:046D:C24F.002F: item fetching failed at offset 5/7 [ 1133.963492][ T4368] batman_adv: batadv2: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 1133.975939][ T5969] logitech 0003:046D:C24F.002F: parse failed [ 1133.998737][ T5969] logitech 0003:046D:C24F.002F: probe with driver logitech failed with error -22 [ 1134.025172][T21794] batadv2: entered allmulticast mode [ 1134.039370][T14879] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1134.130802][T21806] netlink: 830 bytes leftover after parsing attributes in process `syz.5.4134'. [ 1134.199475][T14879] usb 2-1: device descriptor read/64, error -71 [ 1134.393139][T21808] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4134'. [ 1134.449442][T14879] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1134.591833][T14879] usb 2-1: device descriptor read/64, error -71 [ 1134.715795][T14879] usb usb2-port1: attempt power cycle [ 1135.040314][T14879] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1135.192529][T14879] usb 2-1: device descriptor read/8, error -71 [ 1135.293717][ T5969] usb 5-1: USB disconnect, device number 115 [ 1135.466951][T14879] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1135.497621][T14879] usb 2-1: device descriptor read/8, error -71 [ 1135.846876][T14879] usb usb2-port1: unable to enumerate USB device [ 1135.964512][T21822] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1136.730872][T21830] netlink: 296 bytes leftover after parsing attributes in process `syz.1.4139'. [ 1136.856153][ T30] audit: type=1400 audit(1767598998.397:804): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.24 dest=53864 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1136.889625][T21830] overlayfs: missing 'lowerdir' [ 1136.905749][T21830] ubi9: attaching mtd0 [ 1136.916003][ T6165] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1136.943159][T21830] ubi9 error: validate_ec_hdr: bad VID header offset 64, expected 3901 [ 1136.969811][ T30] audit: type=1400 audit(1767598998.554:805): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 1136.993133][T21830] ubi9 error: validate_ec_hdr: bad EC header [ 1136.999132][T21830] Erase counter header dump: [ 1137.004266][T21830] magic 0x55424923 [ 1137.012175][T21830] version 1 [ 1137.020171][T21830] ec 1 [ 1137.027655][ T30] audit: type=1400 audit(1767598998.554:806): avc: denied { sendto } for pid=15 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 1137.051131][T21830] vid_hdr_offset 64 [ 1137.055400][T21830] data_offset 128 [ 1137.064793][T21830] image_seq -1450488105 [ 1137.069666][T21830] hdr_crc 0x5e7c7e94 [ 1137.074629][T21830] erase counter header hexdump: [ 1137.079552][ T6165] usb 6-1: Using ep0 maxpacket: 16 [ 1137.145597][T21830] CPU: 1 UID: 0 PID: 21830 Comm: syz.1.4139 Tainted: G L syzkaller #0 PREEMPT(full) [ 1137.145626][T21830] Tainted: [L]=SOFTLOCKUP [ 1137.145633][T21830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1137.145646][T21830] Call Trace: [ 1137.145653][T21830] [ 1137.145659][T21830] dump_stack_lvl+0x16c/0x1f0 [ 1137.145685][T21830] validate_ec_hdr+0x28c/0x330 [ 1137.145712][T21830] ubi_io_read_ec_hdr+0x6d1/0x760 [ 1137.145735][T21830] ubi_attach+0x61f/0x4fa0 [ 1137.145766][T21830] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1137.145793][T21830] ? ubi_msg+0x108/0x160 [ 1137.145816][T21830] ? __pfx_ubi_msg+0x10/0x10 [ 1137.145839][T21830] ? __pfx_ubi_attach+0x10/0x10 [ 1137.145863][T21830] ? ubi_attach_mtd_dev+0x15ad/0x37f0 [ 1137.145888][T21830] ? __vmalloc_node_noprof+0xad/0xf0 [ 1137.145910][T21830] ? ubi_attach_mtd_dev+0x15ad/0x37f0 [ 1137.145938][T21830] ubi_attach_mtd_dev+0x15f9/0x37f0 [ 1137.145971][T21830] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 1137.145994][T21830] ? __pfx_get_mtd_device+0x10/0x10 [ 1137.146019][T21830] ctrl_cdev_ioctl+0x381/0x420 [ 1137.146045][T21830] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 1137.146070][T21830] ? selinux_file_ioctl+0x180/0x270 [ 1137.146092][T21830] ? selinux_file_ioctl+0xb4/0x270 [ 1137.146118][T21830] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 1137.146144][T21830] __x64_sys_ioctl+0x18e/0x210 [ 1137.146168][T21830] do_syscall_64+0xcd/0xf80 [ 1137.146192][T21830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.146211][T21830] RIP: 0033:0x7f4aaff8f749 [ 1137.146227][T21830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1137.146243][T21830] RSP: 002b:00007f4ab0e11038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1137.146262][T21830] RAX: ffffffffffffffda RBX: 00007f4ab01e5fa0 RCX: 00007f4aaff8f749 [ 1137.146273][T21830] RDX: 0000200000000100 RSI: 0000000040186f40 RDI: 0000000000000008 [ 1137.146284][T21830] RBP: 00007f4ab0013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1137.146293][T21830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1137.146304][T21830] R13: 00007f4ab01e6038 R14: 00007f4ab01e5fa0 R15: 00007fff14698458 [ 1137.146330][T21830] [ 1137.146359][T21830] ubi9 error: ubi_io_read_ec_hdr: validation failed for PEB 0 [ 1137.469590][ T30] audit: type=1400 audit(1767598999.079:807): avc: denied { ioctl } for pid=21838 comm="syz.2.4143" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1137.469607][T21839] random: crng reseeded on system resumption [ 1137.534628][ T6165] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1137.543179][ T6165] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1137.553663][ T6165] usb 6-1: can't read configurations, error -71 [ 1137.575609][T21830] ubi9 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1138.393680][T14879] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1138.694208][T14879] usb 1-1: Using ep0 maxpacket: 32 [ 1138.707277][T14879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1138.764212][T14879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1138.813363][T14879] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1138.840610][T14879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.861656][T14879] usb 1-1: config 0 descriptor?? [ 1140.194026][T14879] usbhid 1-1:0.0: can't add hid device: -71 [ 1140.200044][T14879] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1140.225061][T14879] usb 1-1: USB disconnect, device number 95 [ 1140.337166][T17789] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1140.508067][T17789] usb 2-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 1140.526698][T17789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.577401][T17789] usb 2-1: config 0 descriptor?? [ 1140.590890][T17789] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 1140.847186][T17789] gspca_sn9c2028: read1 error -32 [ 1140.868486][T17789] gspca_sn9c2028: read1 error -32 [ 1141.137900][T21886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4157'. [ 1141.153208][T21870] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1141.164410][ T6165] usb 2-1: USB disconnect, device number 96 [ 1141.297678][T17789] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1141.468844][T17789] usb 6-1: Using ep0 maxpacket: 16 [ 1141.486681][T17789] usb 6-1: config 0 has an invalid interface number: 65 but max is 0 [ 1141.511395][T17789] usb 6-1: config 0 has no interface number 0 [ 1141.528554][T17789] usb 6-1: config 0 interface 65 has no altsetting 0 [ 1141.546923][T17789] usb 6-1: New USB device found, idVendor=10cf, idProduct=8067, bcdDevice=e1.20 [ 1141.557222][T17789] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.567089][T17789] usb 6-1: Product: syz [ 1141.571956][T17789] usb 6-1: Manufacturer: syz [ 1141.577150][T17789] usb 6-1: SerialNumber: syz [ 1141.587246][T17789] usb 6-1: config 0 descriptor?? [ 1141.846646][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1141.894589][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1141.927165][T17789] vmk80xx 6-1:0.65: driver 'vmk80xx' failed to auto-configure device. [ 1141.938571][T17789] usb 6-1: USB disconnect, device number 72 [ 1143.103304][T21917] fuse: Bad value for 'group_id' [ 1143.190881][T21917] fuse: Bad value for 'group_id' [ 1143.429152][ T30] audit: type=1400 audit(1767599005.326:808): avc: denied { write } for pid=21921 comm="syz.1.4170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1145.950850][T21934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4173'. [ 1146.727105][T21938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4174'. [ 1147.281351][ T5819] Bluetooth: hci0: Invalid connection link type handle 0x00c9 [ 1148.156105][T14879] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1148.236996][ T8543] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1148.264430][ T30] audit: type=1326 audit(1767599010.407:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21957 comm="syz.4.4181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b3738f749 code=0x7ffc0000 [ 1148.289902][ T30] audit: type=1326 audit(1767599010.407:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21957 comm="syz.4.4181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b3738f749 code=0x7ffc0000 [ 1148.313565][T14879] usb 6-1: Using ep0 maxpacket: 32 [ 1148.327929][ T30] audit: type=1326 audit(1767599010.407:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21957 comm="syz.4.4181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f2b3738f749 code=0x7ffc0000 [ 1148.367557][ T30] audit: type=1326 audit(1767599010.407:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21957 comm="syz.4.4181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b3738f749 code=0x7ffc0000 [ 1148.391550][ T6165] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1148.391813][T21963] fuse: Bad value for 'group_id' [ 1148.409206][ T30] audit: type=1326 audit(1767599010.407:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21957 comm="syz.4.4181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2b3738f749 code=0x7ffc0000 [ 1148.432796][ T8543] usb 2-1: Using ep0 maxpacket: 32 [ 1148.499587][T21963] fuse: Bad value for 'group_id' [ 1148.536834][ T6165] usb 1-1: device descriptor read/64, error -71 [ 1148.583686][ T30] audit: type=1326 audit(1767599010.522:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21957 comm="syz.4.4181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b3738f749 code=0x7ffc0000 [ 1148.715854][ T30] audit: type=1326 audit(1767599010.522:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21957 comm="syz.4.4181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b3738f749 code=0x7ffc0000 [ 1148.756216][T21964] netlink: 'syz.4.4181': attribute type 7 has an invalid length. [ 1148.765447][ T6165] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1148.812761][T21964] netlink: 'syz.4.4181': attribute type 7 has an invalid length. [ 1148.872292][ T30] audit: type=1326 audit(1767599010.564:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21957 comm="syz.4.4181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2b3738f749 code=0x7ffc0000 [ 1148.908376][ T6165] usb 1-1: device descriptor read/64, error -71 [ 1149.016210][ T30] audit: type=1326 audit(1767599010.700:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21957 comm="syz.4.4181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b3738f749 code=0x7ffc0000 [ 1149.040851][ T6165] usb usb1-port1: attempt power cycle [ 1149.185610][ T30] audit: type=1326 audit(1767599010.700:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21957 comm="syz.4.4181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b3738f749 code=0x7ffc0000 [ 1149.403687][ T6165] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1149.448853][ T6165] usb 1-1: device descriptor read/8, error -71 [ 1149.746444][ T6165] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1150.013961][ T6165] usb 1-1: device descriptor read/8, error -71 [ 1150.103557][ T8543] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1150.117326][ T8543] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1150.127808][ T6165] usb usb1-port1: unable to enumerate USB device [ 1150.146992][ T8543] usb 2-1: can't read configurations, error -71 [ 1152.357522][ T5827] Bluetooth: hci2: command 0x0405 tx timeout [ 1152.568597][T22008] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4193'. [ 1152.713552][T22014] bridge0: port 2(bridge_slave_1) entered disabled state [ 1152.723842][T22014] bridge0: port 1(bridge_slave_0) entered disabled state [ 1152.757220][ T8543] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1152.938317][ T8543] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1152.957153][ T8543] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1153.004697][T18677] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1153.007273][T22014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1153.012490][ T8543] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1153.058023][T22014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1153.073434][ T8543] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1153.090339][ T8543] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.098405][ T8543] usb 2-1: Product: syz [ 1153.119847][T14879] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1153.128348][ T8543] usb 2-1: Manufacturer: syz [ 1153.132940][T14879] usb 6-1: no configurations [ 1153.132957][T14879] usb 6-1: can't read configurations, error -22 [ 1153.156740][ T8543] usb 2-1: SerialNumber: syz [ 1153.185398][ T8543] usb 2-1: config 0 descriptor?? [ 1153.193070][T22011] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1153.201861][T18677] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 1153.240958][T22011] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1153.248248][T18677] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1153.254901][T14879] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1153.282324][ T8543] usb 2-1: ucan: probing device on interface #0 [ 1153.288633][T18677] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1153.319499][T18677] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 1153.349203][T22014] bond0: left promiscuous mode [ 1153.349390][T18677] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.354135][T22014] bond_slave_0: left promiscuous mode [ 1153.371123][T22014] bond_slave_1: left promiscuous mode [ 1153.384007][ T6094] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.385278][T18677] usb 5-1: Product: syz [ 1153.394647][ T6094] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.409698][T14879] usb 6-1: device descriptor read/64, error -32 [ 1153.433671][T18677] usb 5-1: Manufacturer: syz [ 1153.438942][T18677] usb 5-1: SerialNumber: syz [ 1153.443538][ T6094] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.443576][ T6094] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.521703][T18677] usb 5-1: config 0 descriptor?? [ 1153.527273][T22015] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1153.535306][T14879] usb usb6-port1: attempt power cycle [ 1153.657845][ T8543] usb 2-1: ucan: device reported invalid device info [ 1153.680661][ T8543] usb 2-1: ucan: probe failed; try to update the device firmware [ 1153.763260][ T8543] usb 5-1: USB disconnect, device number 116 [ 1153.771946][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1153.771963][ T30] audit: type=1400 audit(1767599016.191:825): avc: denied { setopt } for pid=22029 comm="syz.5.4198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1153.862212][ T30] audit: type=1400 audit(1767599016.191:826): avc: denied { write } for pid=22029 comm="syz.5.4198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1154.005723][T22033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4196'. [ 1154.043756][ T30] audit: type=1400 audit(1767599016.474:827): avc: denied { sys_module } for pid=22021 comm="syz.2.4196" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1154.308448][T22048] bond2: Removing last arp target with arp_interval on [ 1154.333623][T22048] bond2: entered allmulticast mode [ 1154.349047][T22048] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1154.518159][T22052] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4204'. [ 1154.530511][T22052] Cannot find add_set index 2 as target [ 1154.623993][T22065] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4209'. [ 1154.671768][ T6165] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1154.700540][T14879] usb 6-1: new full-speed USB device number 76 using dummy_hcd [ 1154.834697][ T6165] usb 5-1: config 222 has an invalid interface number: 233 but max is 0 [ 1154.844152][ T6165] usb 5-1: config 222 has no interface number 0 [ 1154.853008][ T6165] usb 5-1: New USB device found, idVendor=0f11, idProduct=1100, bcdDevice=2e.87 [ 1154.863043][ T6165] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.871568][ T6165] usb 5-1: Product: syz [ 1154.876260][T14879] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1154.876280][ T6165] usb 5-1: Manufacturer: syz [ 1154.876297][ T6165] usb 5-1: SerialNumber: syz [ 1154.900883][T14879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.914666][T14879] usb 6-1: config 0 descriptor?? [ 1154.922764][T14879] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1155.119867][ T6165] ldusb 5-1:222.233: Interrupt in endpoint not found [ 1155.132721][ T6165] usb 5-1: USB disconnect, device number 117 [ 1155.422231][ T6165] usb 2-1: USB disconnect, device number 99 [ 1155.456407][T22072] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4210'. [ 1155.489147][T22072] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4210'. [ 1155.523691][T22072] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4210'. [ 1155.958633][T22087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4214'. [ 1156.500873][ T5969] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1156.700862][ T5969] usb 1-1: Using ep0 maxpacket: 32 [ 1156.717459][ T5969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1156.739343][ T5969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1157.264382][T14879] gp8psk: usb in 128 operation failed. [ 1157.280220][ T5969] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1157.300066][ T5969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.315113][T14879] gp8psk: usb in 137 operation failed. [ 1157.327601][ T5969] usb 1-1: config 0 descriptor?? [ 1157.335620][T14879] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1157.362961][T14879] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1157.577885][ T5819] Bluetooth: hci2: link tx timeout [ 1157.587526][ T5819] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1157.748985][ T5969] savu 0003:1E7D:2D5A.0030: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 1157.779827][T22113] ptrace attach of "./syz-executor exec"[22119] was attempted by "./syz-executor exec"[22113] [ 1157.813485][T18677] usb 6-1: USB disconnect, device number 76 [ 1157.938140][T22126] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4224'. [ 1158.023205][ T5969] usb 1-1: USB disconnect, device number 100 [ 1159.522053][T15058] Bluetooth: hci2: command 0x0405 tx timeout [ 1160.668817][T22146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4230'. [ 1161.191224][T22172] rdma_op ffff8880320fa9f0 conn xmit_rdma 0000000000000000 [ 1163.543475][T22198] IPVS: set_ctl: invalid protocol: 59 100.1.0.255:20000 [ 1163.589673][T22194] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1164.191149][T22213] comedi comedi1: comedi_config --init_data is deprecated [ 1164.395511][T22207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4246'. [ 1164.597331][T18677] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1164.743111][T22226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4249'. [ 1164.789049][T18677] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1164.853375][T18677] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 1164.918560][T18677] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1164.967206][T18677] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.003233][T18677] usb 5-1: Product: syz [ 1165.034930][T18677] usb 5-1: Manufacturer: syz [ 1165.064623][T18677] usb 5-1: SerialNumber: syz [ 1165.349934][ T30] audit: type=1400 audit(1767599028.285:828): avc: denied { set_context_mgr } for pid=22231 comm="syz.0.4253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1165.825512][T22215] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1166.197392][T17789] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1166.470067][T22215] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1166.586663][T17789] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1166.629793][T17789] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1166.655143][T17789] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1166.769098][T17789] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1166.788225][T17789] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.800566][T18677] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1166.806981][T18677] cdc_ncm 5-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 1166.985688][T22251] FAT-fs (loop3): unable to read boot sector [ 1167.269831][T17789] usb 1-1: config 0 descriptor?? [ 1167.290820][T18677] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 1167.318890][T18677] cdc_ncm 5-1:1.0: setting tx_max = 88 [ 1167.405404][T18677] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1167.438141][T18677] usb 5-1: USB disconnect, device number 118 [ 1167.495375][T22238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1167.503831][ T6165] usb 2-1: new full-speed USB device number 100 using dummy_hcd [ 1167.512344][T18677] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 1167.541068][T22238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1167.711145][ T6165] usb 2-1: config 1 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1167.732036][ T6165] usb 2-1: config 1 interface 1 has no altsetting 0 [ 1167.752346][ T6165] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1167.771496][ T6165] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1167.780109][ T6165] usb 2-1: Product: syz [ 1167.784323][ T6165] usb 2-1: Manufacturer: syz [ 1167.789145][ T6165] usb 2-1: SerialNumber: syz [ 1167.971696][T22238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1168.004110][T22238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1168.160398][T22238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1168.866229][T22238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1169.820231][ T6165] usb 2-1: 2:1 : invalid UAC_AS_GENERAL desc [ 1170.004408][T17789] usbhid 1-1:0.0: can't add hid device: -71 [ 1170.027177][ T6165] usb 2-1: USB disconnect, device number 100 [ 1170.033383][T17789] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1170.074284][T17789] usb 1-1: USB disconnect, device number 101 [ 1170.275654][T14879] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1170.618294][T14879] usb 3-1: Using ep0 maxpacket: 8 [ 1170.625566][T14879] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1170.641534][T14879] usb 3-1: can't read configurations, error -61 [ 1171.027597][T14879] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1171.087317][T22294] FAULT_INJECTION: forcing a failure. [ 1171.087317][T22294] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1171.111575][T22294] CPU: 0 UID: 0 PID: 22294 Comm: syz.1.4272 Tainted: G L syzkaller #0 PREEMPT(full) [ 1171.111607][T22294] Tainted: [L]=SOFTLOCKUP [ 1171.111613][T22294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1171.111624][T22294] Call Trace: [ 1171.111631][T22294] [ 1171.111638][T22294] dump_stack_lvl+0x16c/0x1f0 [ 1171.111668][T22294] should_fail_ex+0x512/0x640 [ 1171.111699][T22294] should_fail_alloc_page+0xe7/0x130 [ 1171.111725][T22294] prepare_alloc_pages+0x401/0x670 [ 1171.111747][T22294] ? rcu_is_watching+0x12/0xc0 [ 1171.111764][T22294] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 1171.111783][T22294] ? __lock_acquire+0x436/0x2890 [ 1171.111800][T22294] ? css_rstat_updated+0x1d1/0x590 [ 1171.111821][T22294] ? __pfx_css_rstat_updated+0x10/0x10 [ 1171.111842][T22294] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1171.111861][T22294] ? rcu_is_watching+0x12/0xc0 [ 1171.111881][T22294] ? __lock_acquire+0x436/0x2890 [ 1171.111898][T22294] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1171.111922][T22294] ? policy_nodemask+0xea/0x4e0 [ 1171.111943][T22294] alloc_pages_mpol+0x1fb/0x550 [ 1171.111963][T22294] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1171.111984][T22294] ? filemap_get_entry+0x1a7/0x3b0 [ 1171.112002][T22294] folio_alloc_noprof+0x20/0x2d0 [ 1171.112024][T22294] filemap_alloc_folio_noprof.part.0+0x39d/0x470 [ 1171.112043][T22294] ? filemap_add_folio+0x110/0x610 [ 1171.112058][T22294] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 1171.112079][T22294] ? folio_alloc_noprof+0x16d/0x2d0 [ 1171.112100][T22294] ? filemap_alloc_folio_noprof.part.0+0x1ac/0x470 [ 1171.112122][T22294] __filemap_get_folio_mpol+0x610/0xc60 [ 1171.112142][T22294] ioctx_alloc+0x788/0x2230 [ 1171.112166][T22294] ? __pfx_ioctx_alloc+0x10/0x10 [ 1171.112179][T22294] ? __might_fault+0x13b/0x190 [ 1171.112199][T22294] __x64_sys_io_setup+0xc9/0x230 [ 1171.112216][T22294] do_syscall_64+0xcd/0xf80 [ 1171.112237][T22294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.112252][T22294] RIP: 0033:0x7f4aaff8f749 [ 1171.112265][T22294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1171.112279][T22294] RSP: 002b:00007f4ab0df0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 1171.112294][T22294] RAX: ffffffffffffffda RBX: 00007f4ab01e6090 RCX: 00007f4aaff8f749 [ 1171.112304][T22294] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000002004 [ 1171.112314][T22294] RBP: 00007f4ab0df0090 R08: 0000000000000000 R09: 0000000000000000 [ 1171.112323][T22294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1171.112331][T22294] R13: 00007f4ab01e6128 R14: 00007f4ab01e6090 R15: 00007fff14698458 [ 1171.112352][T22294] [ 1171.562233][T14879] usb 3-1: Using ep0 maxpacket: 8 [ 1171.569588][T14879] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1171.578161][T14879] usb 3-1: can't read configurations, error -61 [ 1171.585121][T14879] usb usb3-port1: attempt power cycle [ 1171.913623][T14879] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1171.934489][ T6165] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1171.943408][T14879] usb 3-1: Using ep0 maxpacket: 8 [ 1171.950530][T14879] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1171.969332][T14879] usb 3-1: can't read configurations, error -61 [ 1172.003648][T22324] FAULT_INJECTION: forcing a failure. [ 1172.003648][T22324] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1172.038210][T22324] CPU: 1 UID: 0 PID: 22324 Comm: syz.4.4280 Tainted: G L syzkaller #0 PREEMPT(full) [ 1172.038240][T22324] Tainted: [L]=SOFTLOCKUP [ 1172.038246][T22324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1172.038256][T22324] Call Trace: [ 1172.038263][T22324] [ 1172.038270][T22324] dump_stack_lvl+0x16c/0x1f0 [ 1172.038300][T22324] should_fail_ex+0x512/0x640 [ 1172.038330][T22324] should_fail_alloc_page+0xe7/0x130 [ 1172.038355][T22324] prepare_alloc_pages+0x401/0x670 [ 1172.038383][T22324] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 1172.038410][T22324] ? mas_find+0x156/0x6d0 [ 1172.038437][T22324] ? validate_mm+0x403/0x560 [ 1172.038456][T22324] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1172.038476][T22324] ? __pfx_validate_mm+0x10/0x10 [ 1172.038502][T22324] ? vma_wants_writenotify+0x10b/0x390 [ 1172.038522][T22324] ? __pfx_vma_wants_writenotify+0x10/0x10 [ 1172.038542][T22324] ? __mt_destroy+0xa8/0x3e0 [ 1172.038566][T22324] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1172.038590][T22324] ? policy_nodemask+0xea/0x4e0 [ 1172.038616][T22324] alloc_pages_mpol+0x1fb/0x550 [ 1172.038642][T22324] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1172.038666][T22324] ? __lock_acquire+0x436/0x2890 [ 1172.038694][T22324] alloc_pages_noprof+0x131/0x390 [ 1172.038720][T22324] pte_alloc_one+0x1e/0x3d0 [ 1172.038749][T22324] do_fault+0x8b8/0x1ad0 [ 1172.038771][T22324] ? __pfx_filemap_map_pages+0x10/0x10 [ 1172.038795][T22324] __handle_mm_fault+0x1919/0x2bb0 [ 1172.038830][T22324] ? __pfx___handle_mm_fault+0x10/0x10 [ 1172.038886][T22324] handle_mm_fault+0x3fe/0xad0 [ 1172.038920][T22324] __get_user_pages+0x54e/0x3590 [ 1172.038954][T22324] ? __pfx___get_user_pages+0x10/0x10 [ 1172.038986][T22324] populate_vma_page_range+0x267/0x3f0 [ 1172.039013][T22324] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1172.039038][T22324] ? __pfx_find_vma_intersection+0x10/0x10 [ 1172.039060][T22324] ? do_mmap+0x69c/0x1210 [ 1172.039084][T22324] __mm_populate+0x1d8/0x380 [ 1172.039111][T22324] ? __pfx___mm_populate+0x10/0x10 [ 1172.039138][T22324] ? up_write+0x282/0x4e0 [ 1172.039165][T22324] vm_mmap_pgoff+0x37f/0x470 [ 1172.039190][T22324] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1172.039218][T22324] ? __fget_files+0x20e/0x3c0 [ 1172.039249][T22324] ksys_mmap_pgoff+0x32c/0x5c0 [ 1172.039272][T22324] ? __pfx_ksys_write+0x10/0x10 [ 1172.039299][T22324] __x64_sys_mmap+0x125/0x190 [ 1172.039324][T22324] do_syscall_64+0xcd/0xf80 [ 1172.039349][T22324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1172.039368][T22324] RIP: 0033:0x7f2b3738f749 [ 1172.039385][T22324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1172.039402][T22324] RSP: 002b:00007f2b38164038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1172.039421][T22324] RAX: ffffffffffffffda RBX: 00007f2b375e6090 RCX: 00007f2b3738f749 [ 1172.039433][T22324] RDX: 0000000001000003 RSI: 0000000000b36000 RDI: 0000200000000000 [ 1172.039446][T22324] RBP: 00007f2b38164090 R08: 0000000000000003 R09: 0000000000000000 [ 1172.039457][T22324] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000001 [ 1172.039469][T22324] R13: 00007f2b375e6128 R14: 00007f2b375e6090 R15: 00007fff0d9a8b28 [ 1172.039495][T22324] [ 1172.113721][T14879] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1172.160547][ T6165] usb 1-1: Using ep0 maxpacket: 16 [ 1172.209379][T14879] usb 3-1: Using ep0 maxpacket: 8 [ 1172.217033][ T6165] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1172.250900][T14879] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1172.254587][ T6165] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1172.259349][T14879] usb 3-1: can't read configurations, error -61 [ 1172.263404][ T6165] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1172.276037][T14879] usb usb3-port1: unable to enumerate USB device [ 1172.314150][ T6165] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1172.451318][ T6165] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.461368][ T6165] usb 1-1: config 0 descriptor?? [ 1173.739897][T22347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4289'. [ 1173.843327][ T6165] hid_parser_main: 199 callbacks suppressed [ 1173.843347][ T6165] shield 0003:0955:7214.0031: unknown main item tag 0x0 [ 1173.861284][ T6165] shield 0003:0955:7214.0031: unknown main item tag 0x0 [ 1173.870493][ T6165] shield 0003:0955:7214.0031: unknown main item tag 0x0 [ 1173.886307][ T6165] shield 0003:0955:7214.0031: unknown main item tag 0x0 [ 1173.888030][T22350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4290'. [ 1173.893466][ T6165] shield 0003:0955:7214.0031: unknown main item tag 0x0 [ 1173.943263][ T6165] input: HID 0955:7214 Haptics as /devices/virtual/input/input95 [ 1173.960761][T14879] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1174.000134][ T6165] shield 0003:0955:7214.0031: Registered Thunderstrike controller [ 1174.029353][ T6165] shield 0003:0955:7214.0031: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 1174.032802][T22304] netlink: 512 bytes leftover after parsing attributes in process `syz.0.4277'. [ 1174.103538][T17789] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1174.125152][T14879] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1174.139619][T14879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1174.143934][T18677] shield 0003:0955:7214.0031: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1174.163980][T14879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1174.168363][ T6165] usb 1-1: USB disconnect, device number 102 [ 1174.213088][T14879] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1174.228397][T18677] shield 0003:0955:7214.0031: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1174.243417][T14879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.256084][T17789] usb 3-1: Using ep0 maxpacket: 32 [ 1174.278201][T17789] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1174.288785][T14879] usb 2-1: config 0 descriptor?? [ 1174.296717][T18677] shield 0003:0955:7214.0031: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1174.318889][T17789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.331742][T18677] shield 0003:0955:7214.0031: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1174.344917][T17789] usb 3-1: Product: syz [ 1174.349178][T17789] usb 3-1: Manufacturer: syz [ 1174.369545][T17789] usb 3-1: SerialNumber: syz [ 1174.409394][T17789] usb 3-1: config 0 descriptor?? [ 1174.420933][T17789] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1174.521267][ T30] audit: type=1400 audit(1767599037.974:829): avc: denied { cmd } for pid=22351 comm="syz.5.4288" path="socket:[82691]" dev="sockfs" ino=82691 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1174.687914][T14879] sony 0003:054C:024B.0032: unknown main item tag 0x0 [ 1174.716200][T14879] sony 0003:054C:024B.0032: unknown main item tag 0x0 [ 1174.723022][T14879] sony 0003:054C:024B.0032: unknown main item tag 0x0 [ 1174.730801][T14879] sony 0003:054C:024B.0032: unknown main item tag 0x0 [ 1174.741269][T14879] sony 0003:054C:024B.0032: unknown main item tag 0x0 [ 1174.757159][T14879] sony 0003:054C:024B.0032: unexpected long global item [ 1174.779292][T14879] sony 0003:054C:024B.0032: parse failed [ 1174.786589][T14879] sony 0003:054C:024B.0032: probe with driver sony failed with error -22 [ 1174.804768][T22347] binder: 22346:22347 ioctl c0046209 0 returned -22 [ 1175.110975][T22366] 9p: Bad value for 'port' [ 1175.469443][T17789] gspca_stk1135: reg_w 0x5 err -71 [ 1175.492015][T17789] gspca_stk1135: serial bus timeout: status=0x00 [ 1175.508392][T17789] gspca_stk1135: Sensor write failed [ 1175.523686][T17789] gspca_stk1135: serial bus timeout: status=0x00 [ 1175.533288][T17789] gspca_stk1135: Sensor write failed [ 1175.543719][T22373] Mount JFS Failure: -5 [ 1175.548643][T22373] jfs_mount failed w/return code = -5 [ 1175.554908][T17789] gspca_stk1135: serial bus timeout: status=0x00 [ 1175.574455][T17789] gspca_stk1135: Sensor read failed [ 1175.584927][T17789] gspca_stk1135: serial bus timeout: status=0x00 [ 1175.602074][T17789] gspca_stk1135: Sensor read failed [ 1175.623049][T17789] gspca_stk1135: Detected sensor type unknown (0x0) [ 1175.638583][T17789] gspca_stk1135: serial bus timeout: status=0x00 [ 1175.651173][T17789] gspca_stk1135: Sensor read failed [ 1175.662758][T17789] gspca_stk1135: serial bus timeout: status=0x00 [ 1175.675757][ T30] audit: type=1326 audit(1767599039.182:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22372 comm="syz.4.4295" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2b3738f749 code=0x0 [ 1175.700962][T17789] gspca_stk1135: Sensor read failed [ 1175.713531][T17789] gspca_stk1135: serial bus timeout: status=0x00 [ 1175.729259][T17789] gspca_stk1135: Sensor write failed [ 1175.743875][T17789] gspca_stk1135: serial bus timeout: status=0x00 [ 1175.759239][T17789] gspca_stk1135: Sensor write failed [ 1175.770189][T17789] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 1175.785148][T17789] usb 3-1: USB disconnect, device number 22 [ 1175.961175][ T6165] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1176.124336][ T6165] usb 1-1: config 0 has no interfaces? [ 1176.131894][ T6165] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1176.141479][ T6165] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.150371][ T6165] usb 1-1: Product: syz [ 1176.156418][ T6165] usb 1-1: Manufacturer: syz [ 1176.161270][ T6165] usb 1-1: SerialNumber: syz [ 1176.168326][ T6165] usb 1-1: config 0 descriptor?? [ 1176.247436][T14879] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 1176.391044][T14879] usb 3-1: not running at top speed; connect to a high speed hub [ 1176.407015][T14879] usb 3-1: config 1 has an invalid interface number: 156 but max is 0 [ 1176.417030][T14879] usb 3-1: config 1 has an invalid descriptor of length 29, skipping remainder of the config [ 1176.429371][T14879] usb 3-1: config 1 has no interface number 0 [ 1176.435801][T14879] usb 3-1: too many endpoints for config 1 interface 156 altsetting 240: 81, using maximum allowed: 30 [ 1176.447904][T22378] veth0_vlan: left promiscuous mode [ 1176.449444][T14879] usb 3-1: config 1 interface 156 altsetting 240 has 0 endpoint descriptors, different from the interface descriptor's value: 81 [ 1176.453889][T22378] veth0_vlan: entered promiscuous mode [ 1176.467419][T14879] usb 3-1: config 1 interface 156 has no altsetting 0 [ 1176.490033][ T6165] usb 1-1: USB disconnect, device number 103 [ 1176.498129][T14879] usb 3-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 1176.509436][T14879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.517625][T14879] usb 3-1: Product: syz [ 1176.521854][T14879] usb 3-1: Manufacturer: syz [ 1176.526831][T14879] usb 3-1: SerialNumber: syz [ 1176.625919][T17789] usb 2-1: USB disconnect, device number 101 [ 1176.819379][ T30] audit: type=1400 audit(1767599040.378:831): avc: denied { view } for pid=22398 comm="syz.2.4297" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1176.879637][T22400] netlink: 'syz.2.4297': attribute type 4 has an invalid length. [ 1176.936510][T22400] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4297'. [ 1176.967454][T14879] usb 3-1: USB disconnect, device number 23 [ 1177.738253][ T30] audit: type=1400 audit(1767599041.355:832): avc: denied { connect } for pid=22435 comm="syz.4.4303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1177.769314][ T30] audit: type=1400 audit(1767599041.355:833): avc: denied { connect } for pid=22435 comm="syz.4.4303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1178.115925][ T90] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 1178.384903][ T90] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1178.397723][ T90] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1178.414627][ T90] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1178.424877][ T30] audit: type=1400 audit(1767599042.069:834): avc: denied { execute } for pid=22422 comm="syz.1.4300" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=82900 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1178.424888][ T90] usb 3-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 1178.424913][ T90] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.506217][T22471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4300'. [ 1178.602544][ T90] usb 3-1: config 0 descriptor?? [ 1178.609779][T14879] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1178.628816][T22442] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1178.762420][T14879] usb 1-1: Using ep0 maxpacket: 32 [ 1178.773001][T14879] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1178.782139][T14879] usb 1-1: config 0 has no interface number 0 [ 1178.795556][T14879] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1178.842191][T14879] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1178.885873][T14879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.923234][T14879] usb 1-1: Product: syz [ 1178.945269][T14879] usb 1-1: Manufacturer: syz [ 1178.958231][T14879] usb 1-1: SerialNumber: syz [ 1178.991516][T14879] usb 1-1: config 0 descriptor?? [ 1178.998798][T14879] smsc75xx v1.0.0 [ 1179.067336][ T90] logitech 0003:046D:C24F.0033: item fetching failed at offset 5/7 [ 1179.086097][ T90] logitech 0003:046D:C24F.0033: parse failed [ 1179.092129][ T90] logitech 0003:046D:C24F.0033: probe with driver logitech failed with error -22 [ 1179.284372][ T90] usb 3-1: USB disconnect, device number 24 [ 1180.160472][T22490] ceph: No mds server is up or the cluster is laggy [ 1180.169907][ T6165] libceph: connect (1)[c::]:6789 error -101 [ 1180.188200][ T6165] libceph: mon0 (1)[c::]:6789 connect error [ 1180.468188][T22498] FAULT_INJECTION: forcing a failure. [ 1180.468188][T22498] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1180.481932][T22498] CPU: 1 UID: 0 PID: 22498 Comm: syz.2.4318 Tainted: G L syzkaller #0 PREEMPT(full) [ 1180.481962][T22498] Tainted: [L]=SOFTLOCKUP [ 1180.481969][T22498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1180.481980][T22498] Call Trace: [ 1180.481986][T22498] [ 1180.481994][T22498] dump_stack_lvl+0x16c/0x1f0 [ 1180.482022][T22498] should_fail_ex+0x512/0x640 [ 1180.482049][T22498] should_fail_alloc_page+0xe7/0x130 [ 1180.482070][T22498] prepare_alloc_pages+0x401/0x670 [ 1180.482092][T22498] ? rcu_is_watching+0x12/0xc0 [ 1180.482111][T22498] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 1180.482131][T22498] ? __lock_acquire+0x436/0x2890 [ 1180.482148][T22498] ? css_rstat_updated+0x1d1/0x590 [ 1180.482168][T22498] ? __pfx_css_rstat_updated+0x10/0x10 [ 1180.482189][T22498] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1180.482208][T22498] ? rcu_is_watching+0x12/0xc0 [ 1180.482228][T22498] ? __lock_acquire+0x436/0x2890 [ 1180.482248][T22498] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1180.482266][T22498] ? policy_nodemask+0xea/0x4e0 [ 1180.482288][T22498] alloc_pages_mpol+0x1fb/0x550 [ 1180.482308][T22498] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1180.482329][T22498] ? filemap_get_entry+0x1a7/0x3b0 [ 1180.482347][T22498] folio_alloc_noprof+0x20/0x2d0 [ 1180.482374][T22498] filemap_alloc_folio_noprof.part.0+0x39d/0x470 [ 1180.482395][T22498] ? filemap_add_folio+0x110/0x610 [ 1180.482409][T22498] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 1180.482435][T22498] __filemap_get_folio_mpol+0x610/0xc60 [ 1180.482455][T22498] ioctx_alloc+0x788/0x2230 [ 1180.482479][T22498] ? __pfx_ioctx_alloc+0x10/0x10 [ 1180.482492][T22498] ? __might_fault+0x13b/0x190 [ 1180.482519][T22498] __x64_sys_io_setup+0xc9/0x230 [ 1180.482536][T22498] do_syscall_64+0xcd/0xf80 [ 1180.482557][T22498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1180.482572][T22498] RIP: 0033:0x7f8d43b8f749 [ 1180.482584][T22498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1180.482598][T22498] RSP: 002b:00007f8d449b2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 1180.482613][T22498] RAX: ffffffffffffffda RBX: 00007f8d43de6090 RCX: 00007f8d43b8f749 [ 1180.482623][T22498] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000002004 [ 1180.482632][T22498] RBP: 00007f8d449b2090 R08: 0000000000000000 R09: 0000000000000000 [ 1180.482641][T22498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1180.482651][T22498] R13: 00007f8d43de6128 R14: 00007f8d43de6090 R15: 00007ffc12efd7a8 [ 1180.482672][T22498] [ 1180.868003][T22501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4320'. [ 1180.980756][T14879] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 1181.018724][T14879] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 1181.134519][T14879] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1181.146003][T22506] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4321'. [ 1181.828223][T14879] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1181.936203][T22504] tipc: New replicast peer: ff02:0000:0000:0000:0000:0000:0000:0001 [ 1182.034761][T14879] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1182.107055][T22518] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4324'. [ 1182.121096][T14879] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1182.146500][T14879] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 1182.314448][T22524] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1182.439289][T14879] usb 1-1: USB disconnect, device number 104 [ 1182.640524][T22532] FAULT_INJECTION: forcing a failure. [ 1182.640524][T22532] name failslab, interval 1, probability 0, space 0, times 0 [ 1182.677157][ T8543] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1182.687246][T22532] CPU: 1 UID: 0 PID: 22532 Comm: syz.0.4326 Tainted: G L syzkaller #0 PREEMPT(full) [ 1182.687267][T22532] Tainted: [L]=SOFTLOCKUP [ 1182.687271][T22532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1182.687278][T22532] Call Trace: [ 1182.687283][T22532] [ 1182.687287][T22532] dump_stack_lvl+0x16c/0x1f0 [ 1182.687306][T22532] should_fail_ex+0x512/0x640 [ 1182.687324][T22532] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1182.687338][T22532] should_failslab+0xc2/0x120 [ 1182.687353][T22532] kmem_cache_alloc_noprof+0x83/0x770 [ 1182.687364][T22532] ? mas_wr_store_type+0xbc5/0x2180 [ 1182.687377][T22532] ? mas_alloc_nodes+0x27b/0x380 [ 1182.687391][T22532] ? mas_alloc_nodes+0x27b/0x380 [ 1182.687401][T22532] mas_alloc_nodes+0x27b/0x380 [ 1182.687415][T22532] mas_preallocate+0x5e3/0xee0 [ 1182.687432][T22532] ? __pfx_mas_preallocate+0x10/0x10 [ 1182.687445][T22532] ? rcu_is_watching+0x12/0xc0 [ 1182.687467][T22532] ? anon_vma_name+0x81/0x2f0 [ 1182.687486][T22532] __split_vma+0x34a/0x1050 [ 1182.687499][T22532] ? __pfx___split_vma+0x10/0x10 [ 1182.687517][T22532] vms_gather_munmap_vmas+0x3aa/0x1340 [ 1182.687530][T22532] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1182.687543][T22532] ? mas_walk+0x6f5/0x980 [ 1182.687560][T22532] __mmap_region+0x47c/0x2a00 [ 1182.687572][T22532] ? __lock_acquire+0x436/0x2890 [ 1182.687586][T22532] ? __pfx___mmap_region+0x10/0x10 [ 1182.687602][T22532] ? find_held_lock+0x2b/0x80 [ 1182.687621][T22532] ? __lock_acquire+0x436/0x2890 [ 1182.687634][T22532] ? is_bpf_text_address+0x94/0x1a0 [ 1182.687653][T22532] ? find_held_lock+0x2b/0x80 [ 1182.687670][T22532] ? avc_has_perm_noaudit+0x117/0x3b0 [ 1182.687706][T22532] ? __lock_acquire+0x436/0x2890 [ 1182.687723][T22532] mmap_region+0x32b/0x3f0 [ 1182.687736][T22532] do_mmap+0xa3e/0x1210 [ 1182.687753][T22532] ? __pfx_do_mmap+0x10/0x10 [ 1182.687768][T22532] ? __pfx_down_write_killable+0x10/0x10 [ 1182.687788][T22532] vm_mmap_pgoff+0x29e/0x470 [ 1182.687805][T22532] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1182.687821][T22532] ? __fget_files+0x20e/0x3c0 [ 1182.687840][T22532] ksys_mmap_pgoff+0x32c/0x5c0 [ 1182.687854][T22532] ? __pfx_ksys_write+0x10/0x10 [ 1182.687870][T22532] __x64_sys_mmap+0x125/0x190 [ 1182.687885][T22532] do_syscall_64+0xcd/0xf80 [ 1182.687901][T22532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1182.687912][T22532] RIP: 0033:0x7efd9fd8f749 [ 1182.687922][T22532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1182.687932][T22532] RSP: 002b:00007efd9dff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1182.687943][T22532] RAX: ffffffffffffffda RBX: 00007efd9ffe6090 RCX: 00007efd9fd8f749 [ 1182.687951][T22532] RDX: 0000000001000003 RSI: 0000000000b36000 RDI: 0000200000000000 [ 1182.687958][T22532] RBP: 00007efd9dff6090 R08: 0000000000000003 R09: 0000000000000000 [ 1182.687964][T22532] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000001 [ 1182.687971][T22532] R13: 00007efd9ffe6128 R14: 00007efd9ffe6090 R15: 00007fff1f80da18 [ 1182.687985][T22532] [ 1182.743797][ T30] audit: type=1400 audit(1767599046.551:835): avc: denied { call } for pid=22529 comm="syz.1.4328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1183.239700][ T8543] usb 3-1: Using ep0 maxpacket: 16 [ 1183.395308][ T8543] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1183.610775][ T8543] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1183.715300][ T8543] usb 3-1: can't read configurations, error -71 [ 1183.809934][T22539] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1183.820965][ T30] audit: type=1400 audit(1767599046.551:836): avc: denied { transfer } for pid=22529 comm="syz.1.4328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1183.855119][T22539] overlayfs: failed to set xattr on upper [ 1183.892412][ T30] audit: type=1400 audit(1767599047.716:837): avc: denied { mounton } for pid=22538 comm="syz.1.4329" path="/bus" dev="ramfs" ino=84090 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 1183.892786][T22539] overlayfs: ...falling back to redirect_dir=nofollow. [ 1184.002304][T22539] overlayfs: ...falling back to metacopy=off. [ 1184.046184][T22539] overlayfs: ...falling back to index=off. [ 1184.082052][T22539] overlayfs: ...falling back to uuid=null. [ 1184.115481][T17789] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1184.268724][T17789] usb 6-1: Using ep0 maxpacket: 16 [ 1184.274081][T22549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4333'. [ 1184.294110][T17789] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1184.314622][T22549] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4333'. [ 1184.323717][T17789] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1184.323764][T17789] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1184.323786][T17789] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.344798][T17789] usb 6-1: config 0 descriptor?? [ 1184.401990][T22553] netlink: 'syz.2.4333': attribute type 10 has an invalid length. [ 1184.463686][T22553] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1184.624448][T22542] fuse: Unknown parameter '0x0000000000000006' [ 1186.795749][T17789] usb 6-1: string descriptor 0 read error: -71 [ 1187.367133][T17789] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1187.433272][T22580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4340'. [ 1187.483141][T17789] usb 6-1: USB disconnect, device number 77 [ 1187.879055][T22597] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4343'. [ 1188.508843][T22602] netlink: 'syz.1.4345': attribute type 10 has an invalid length. [ 1188.531115][T22602] bridge0: port 3(syz_tun) entered disabled state [ 1188.549164][T22602] syz_tun: left allmulticast mode [ 1188.563122][T22602] syz_tun: left promiscuous mode [ 1188.574426][T22602] bridge0: port 3(syz_tun) entered disabled state [ 1188.607431][T22602] syz_tun: entered promiscuous mode [ 1188.618448][T22602] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1188.641671][T22608] xt_hashlimit: Unknown mode mask B1, kernel too old? [ 1188.662648][T22606] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4347'. [ 1188.977423][T22623] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4350'. [ 1189.173288][T17811] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1189.335666][T17811] usb 6-1: Using ep0 maxpacket: 8 [ 1189.346558][T17811] usb 6-1: no configurations [ 1189.362573][T17811] usb 6-1: can't read configurations, error -22 [ 1189.516227][T17811] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1189.815121][T22639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4353'. [ 1189.845368][T17811] usb 6-1: Using ep0 maxpacket: 8 [ 1190.482867][T17811] usb 6-1: no configurations [ 1190.497653][T17811] usb 6-1: can't read configurations, error -22 [ 1190.516805][T17811] usb usb6-port1: attempt power cycle [ 1190.874660][T22653] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1190.953565][T17811] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1190.961459][ T30] audit: type=1400 audit(1767599055.128:838): avc: denied { mounton } for pid=22647 comm="syz.0.4356" path="/277/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1191.038360][T17811] usb 6-1: Using ep0 maxpacket: 8 [ 1191.057631][T17811] usb 6-1: no configurations [ 1191.064348][T17811] usb 6-1: can't read configurations, error -22 [ 1191.283741][T17811] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1191.284452][T22658] FAULT_INJECTION: forcing a failure. [ 1191.284452][T22658] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1191.305177][T22658] CPU: 0 UID: 0 PID: 22658 Comm: syz.2.4359 Tainted: G L syzkaller #0 PREEMPT(full) [ 1191.305204][T22658] Tainted: [L]=SOFTLOCKUP [ 1191.305210][T22658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1191.305221][T22658] Call Trace: [ 1191.305228][T22658] [ 1191.305235][T22658] dump_stack_lvl+0x16c/0x1f0 [ 1191.305260][T22658] should_fail_ex+0x512/0x640 [ 1191.305279][T22658] should_fail_alloc_page+0xe7/0x130 [ 1191.305296][T22658] prepare_alloc_pages+0x401/0x670 [ 1191.305312][T22658] ? rcu_is_watching+0x12/0xc0 [ 1191.305325][T22658] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 1191.305339][T22658] ? __lock_acquire+0x436/0x2890 [ 1191.305352][T22658] ? css_rstat_updated+0x1d1/0x590 [ 1191.305368][T22658] ? __pfx_css_rstat_updated+0x10/0x10 [ 1191.305388][T22658] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1191.305402][T22658] ? rcu_is_watching+0x12/0xc0 [ 1191.305417][T22658] ? __lock_acquire+0x436/0x2890 [ 1191.305429][T22658] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1191.305444][T22658] ? policy_nodemask+0xea/0x4e0 [ 1191.305460][T22658] alloc_pages_mpol+0x1fb/0x550 [ 1191.305475][T22658] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1191.305491][T22658] ? filemap_get_entry+0x1a7/0x3b0 [ 1191.305504][T22658] folio_alloc_noprof+0x20/0x2d0 [ 1191.305521][T22658] filemap_alloc_folio_noprof.part.0+0x39d/0x470 [ 1191.305536][T22658] ? filemap_add_folio+0x110/0x610 [ 1191.305547][T22658] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 1191.305566][T22658] __filemap_get_folio_mpol+0x610/0xc60 [ 1191.305581][T22658] ioctx_alloc+0x788/0x2230 [ 1191.305598][T22658] ? __pfx_ioctx_alloc+0x10/0x10 [ 1191.305608][T22658] ? __might_fault+0x13b/0x190 [ 1191.305624][T22658] __x64_sys_io_setup+0xc9/0x230 [ 1191.305637][T22658] do_syscall_64+0xcd/0xf80 [ 1191.305652][T22658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1191.305664][T22658] RIP: 0033:0x7f8d43b8f749 [ 1191.305674][T22658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1191.305685][T22658] RSP: 002b:00007f8d449d3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 1191.305696][T22658] RAX: ffffffffffffffda RBX: 00007f8d43de5fa0 RCX: 00007f8d43b8f749 [ 1191.305703][T22658] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000002004 [ 1191.305709][T22658] RBP: 00007f8d449d3090 R08: 0000000000000000 R09: 0000000000000000 [ 1191.305716][T22658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1191.305722][T22658] R13: 00007f8d43de6038 R14: 00007f8d43de5fa0 R15: 00007ffc12efd7a8 [ 1191.305737][T22658] [ 1191.624123][ T30] audit: type=1400 audit(1767599055.926:839): avc: denied { unmount } for pid=17575 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1191.640589][T17811] usb 6-1: Using ep0 maxpacket: 8 [ 1191.666562][T17811] usb 6-1: no configurations [ 1191.671855][T17811] usb 6-1: can't read configurations, error -22 [ 1191.687151][T17811] usb usb6-port1: unable to enumerate USB device [ 1191.766172][T22660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4358'. [ 1191.916847][ T5969] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1192.103370][T22684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4362'. [ 1192.202695][ T5969] usb 1-1: Using ep0 maxpacket: 32 [ 1192.229798][ T5969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1192.243973][ T5969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1192.254465][ T5969] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1192.265891][ T5969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.308934][ T5969] usb 1-1: config 0 descriptor?? [ 1192.563339][T22663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1192.609269][T22663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1193.718646][ T5969] hid_parser_main: 201 callbacks suppressed [ 1193.718666][ T5969] logitech 0003:046D:C29C.0034: unknown main item tag 0x0 [ 1193.741547][ T5969] logitech 0003:046D:C29C.0034: unknown main item tag 0x0 [ 1193.750876][ T5969] logitech 0003:046D:C29C.0034: unknown main item tag 0x0 [ 1193.758845][ T5969] logitech 0003:046D:C29C.0034: unknown main item tag 0x0 [ 1193.773948][ T5969] logitech 0003:046D:C29C.0034: unknown main item tag 0x0 [ 1193.793933][ T5969] logitech 0003:046D:C29C.0034: unknown main item tag 0x0 [ 1193.811668][ T5969] logitech 0003:046D:C29C.0034: hidraw0: USB HID vb4.30 Device [HID 046d:c29c] on usb-dummy_hcd.0-1/input0 [ 1193.973553][ T5969] logitech 0003:046D:C29C.0034: no inputs found [ 1194.031449][ T6165] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1194.180790][ T5969] usb 1-1: USB disconnect, device number 105 [ 1194.273387][ T6165] usb 5-1: config 222 has an invalid interface number: 233 but max is 0 [ 1194.292472][ T6165] usb 5-1: config 222 has no interface number 0 [ 1194.308272][ T6165] usb 5-1: New USB device found, idVendor=0f11, idProduct=1100, bcdDevice=2e.87 [ 1194.336720][ T6165] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.344745][ T6165] usb 5-1: Product: syz [ 1194.374542][ T6165] usb 5-1: Manufacturer: syz [ 1194.379206][ T6165] usb 5-1: SerialNumber: syz [ 1194.786243][T22696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4366'. [ 1194.824767][T22696] bond0: entered promiscuous mode [ 1194.864692][T22696] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1194.918182][ T6165] ldusb 5-1:222.233: Interrupt in endpoint not found [ 1194.936757][ T6165] usb 5-1: USB disconnect, device number 119 [ 1194.957519][T22722] misc userio: No port type given on /dev/userio [ 1195.021426][T22726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1195.041792][T22726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1195.210403][ T30] audit: type=1400 audit(1767599059.695:840): avc: denied { append } for pid=22706 comm="syz.1.4370" name="video1" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1195.251791][T22732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4374'. [ 1195.271631][ T6165] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1195.398999][T22736] loop9: detected capacity change from 0 to 6 [ 1195.432131][ T6165] usb 3-1: Using ep0 maxpacket: 8 [ 1195.439709][ T6165] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1195.454480][T22736] Dev loop9: unable to read RDB block 6 [ 1195.475045][ T6165] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1195.506032][T22736] loop9: unable to read partition table [ 1195.510561][ T6165] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1195.629587][ T6165] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1195.643828][T22736] loop9: partition table beyond EOD, truncated [ 1195.650065][ T6165] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.668146][ T6165] usb 3-1: Product: syz [ 1196.113454][T22736] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1196.150612][ T6165] usb 3-1: Manufacturer: syz [ 1196.166525][ T6165] usb 3-1: SerialNumber: syz [ 1196.401282][ T6165] usb 3-1: 0:2 : does not exist [ 1196.441331][ T6165] usb 3-1: USB disconnect, device number 27 [ 1196.796388][T22757] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4380'. [ 1197.006226][T22768] fuse: Bad value for 'user_id' [ 1197.031808][T22768] fuse: Bad value for 'user_id' [ 1197.437302][T22785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4388'. [ 1198.757011][ T5969] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1198.959997][T22819] sctp: [Deprecated]: syz.5.4397 (pid 22819) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1198.959997][T22819] Use struct sctp_sack_info instead [ 1198.987690][T22819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1198.997240][T22819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1199.251558][ T6165] usb 6-1: new full-speed USB device number 82 using dummy_hcd [ 1199.849415][ T6165] usb 6-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1199.860368][ T6165] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1199.867502][ T6165] usb 6-1: New USB device found, idVendor=056a, idProduct=fff9, bcdDevice=ff.ff [ 1199.876993][ T6165] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1199.964719][ T6165] usb 6-1: config 0 descriptor?? [ 1200.379099][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1200.385492][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1200.822507][ T6165] usbhid 6-1:0.0: can't add hid device: -71 [ 1200.850001][ T6165] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1200.882701][ T6165] usb 6-1: USB disconnect, device number 82 [ 1201.257309][T22849] tipc: Started in network mode [ 1201.283371][T22849] tipc: Node identity ac14140f, cluster identity 4711 [ 1201.367598][T22857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4407'. [ 1201.377310][T22857] netlink: 'syz.2.4407': attribute type 5 has an invalid length. [ 1201.385675][T22857] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4407'. [ 1201.429013][ T30] audit: type=1400 audit(1767599066.140:841): avc: denied { watch } for pid=22852 comm="syz.2.4407" path="/278/file0" dev="tmpfs" ino=1549 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1201.770811][ T30] audit: type=1400 audit(1767599066.140:842): avc: denied { watch_sb } for pid=22852 comm="syz.2.4407" path="/278/file0" dev="tmpfs" ino=1549 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1201.835166][T22849] tipc: New replicast peer: 255.255.255.255 [ 1201.942125][T22849] tipc: Enabled bearer , priority 10 [ 1201.978945][T22857] geneve2: entered promiscuous mode [ 1201.984152][T22857] geneve2: entered allmulticast mode [ 1202.037650][ T80] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 1202.060296][ T80] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 1202.076222][ T80] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 1202.101467][ T80] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 1202.221368][T22863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4408'. [ 1202.328499][T17789] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1202.957966][T17789] usb 5-1: config 222 has an invalid interface number: 233 but max is 0 [ 1202.989968][T17789] usb 5-1: config 222 has no interface number 0 [ 1203.007408][T17811] tipc: Node number set to 2886997007 [ 1203.041681][T17789] usb 5-1: New USB device found, idVendor=0f11, idProduct=1100, bcdDevice=2e.87 [ 1203.077020][T17789] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.128802][T17789] usb 5-1: Product: syz [ 1203.132998][T17789] usb 5-1: Manufacturer: syz [ 1203.165088][T17789] usb 5-1: SerialNumber: syz [ 1203.212804][T22886] overlayfs: failed to resolve './file0': -2 [ 1203.427826][T22867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4411'. [ 1203.445976][T17789] ldusb 5-1:222.233: Interrupt in endpoint not found [ 1203.470822][T17789] usb 5-1: USB disconnect, device number 120 [ 1203.668461][ T30] audit: type=1400 audit(1767599068.565:843): avc: denied { map } for pid=22898 comm="syz.2.4418" path="pipe:[59817]" dev="pipefs" ino=59817 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1203.771340][ T30] audit: type=1400 audit(1767599068.565:844): avc: denied { execute } for pid=22898 comm="syz.2.4418" path="pipe:[59817]" dev="pipefs" ino=59817 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1203.960071][T17789] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 1204.020612][T22903] bridge0: entered allmulticast mode [ 1204.165727][T17789] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1204.215771][T17789] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1204.296150][T17789] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1204.308908][T17789] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 255, setting to 64 [ 1204.323535][T17789] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1204.540092][T17789] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1204.657634][T17789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.665835][T17789] usb 3-1: Product: syz [ 1204.670053][T17789] usb 3-1: Manufacturer: syz [ 1204.674801][T17789] usb 3-1: SerialNumber: syz [ 1204.681908][T17789] usb 3-1: config 0 descriptor?? [ 1204.687548][T22900] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1204.741995][T17789] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input96 [ 1204.806089][ C0] kbtab 3-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 1204.822886][T22920] netlink: 'syz.5.4424': attribute type 1 has an invalid length. [ 1204.846933][T22920] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4424'. [ 1204.954655][ T90] usb 3-1: USB disconnect, device number 28 [ 1204.972054][T22924] fuse: Bad value for 'fd' [ 1205.018353][T22926] overlayfs: failed to resolve './file0': -2 [ 1206.929935][T22955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4430'. [ 1208.085325][ T30] audit: type=1400 audit(1767599073.206:845): avc: denied { read } for pid=22965 comm="syz.2.4439" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1208.158488][ T30] audit: type=1400 audit(1767599073.206:846): avc: denied { open } for pid=22965 comm="syz.2.4439" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1208.994715][T22981] overlayfs: failed to resolve './file0': -2 [ 1209.638306][T22991] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4436'. [ 1209.670021][T22987] team0: No ports can be present during mode change [ 1209.711280][T17789] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1209.925603][T17789] usb 3-1: Using ep0 maxpacket: 16 [ 1209.949307][T17789] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255 [ 1209.994856][T17789] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1210.006376][T17789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.024707][T17789] usb 3-1: Product: syz [ 1210.035304][T17789] usb 3-1: Manufacturer: syz [ 1210.048704][T17789] usb 3-1: SerialNumber: syz [ 1210.158944][T17789] usb 3-1: config 0 descriptor?? [ 1210.190333][T22989] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1210.297943][T17789] mcba_usb 3-1:0.0: Microchip CAN BUS Analyzer connected [ 1210.348563][T18677] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1210.533410][T18677] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1210.549007][T18677] usb 1-1: can't read configurations, error -61 [ 1210.580016][ C1] mcba_usb 3-1:0.0 can0: Tx URB aborted (-71) [ 1210.586230][ C1] mcba_usb 3-1:0.0 can0: Tx URB aborted (-71) [ 1210.593347][T17789] usb 3-1: USB disconnect, device number 29 [ 1210.601337][T17789] mcba_usb 3-1:0.0 can0: device disconnected [ 1210.701006][T18677] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1211.761540][T18677] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1211.774785][T18677] usb 1-1: can't read configurations, error -61 [ 1211.790620][T18677] usb usb1-port1: attempt power cycle [ 1212.336992][T23031] xt_TCPMSS: Only works on TCP SYN packets [ 1212.682508][T18677] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1213.301815][T18677] usb 1-1: device descriptor read/8, error -71 [ 1213.331810][T23005] delete_channel: no stack [ 1213.715627][T23036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4455'. [ 1214.589571][T23040] veth1_to_bond: entered allmulticast mode [ 1214.639901][T23039] veth1_to_bond: left allmulticast mode [ 1215.105585][T23047] cgroup: noprefix used incorrectly [ 1215.479776][T23043] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1215.511955][T18677] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1215.519958][T23043] overlayfs: overlapping lowerdir path [ 1215.554744][T23058] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1215.585815][T23060] input: syz1 as /devices/virtual/input/input98 [ 1215.678978][T18677] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1215.698973][T18677] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.710324][T18677] usb 6-1: Product: syz [ 1215.769653][T15308] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1215.815299][T18677] usb 6-1: Manufacturer: syz [ 1215.821706][T18677] usb 6-1: SerialNumber: syz [ 1215.950793][T23073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4467'. [ 1215.997383][T15308] usb 1-1: Using ep0 maxpacket: 16 [ 1216.309464][T17789] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1216.325824][T15308] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1216.338505][T15308] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1216.346222][T15308] usb 1-1: can't read configurations, error -71 [ 1216.590722][T17789] usb 2-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 1216.618980][T17789] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1216.635884][T17789] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1216.647126][T17789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1216.657310][T17789] usb 2-1: SerialNumber: syz [ 1216.915426][T18677] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1216.952587][T18677] cdc_ncm 6-1:1.0: dwNtbInMaxSize=3 is too small. Using 2048 [ 1216.969562][T18677] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 1217.007971][T17789] usb 2-1: 0:2 : does not exist [ 1217.043936][T17789] usb 2-1: USB disconnect, device number 102 [ 1217.816764][T23088] ptrace attach of "./syz-executor exec"[18050] was attempted by ""[23088] [ 1218.467698][ T30] audit: type=1400 audit(1767599084.102:847): avc: denied { name_bind } for pid=23092 comm="syz.2.4473" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1218.617349][T18677] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1218.727130][T18677] usb 6-1: USB disconnect, device number 83 [ 1218.768633][T18677] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 1219.258108][T23122] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4478'. [ 1222.055109][ T30] audit: type=1400 audit(1767599087.871:848): avc: denied { checkpoint_restore } for pid=23166 comm="syz.0.4488" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1222.153232][ T30] audit: type=1400 audit(1767599087.976:849): avc: denied { getopt } for pid=23169 comm="syz.2.4491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1222.280293][T23179] input: syz0 as /devices/virtual/input/input100 [ 1222.474926][T15308] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1222.684509][T15308] usb 2-1: Using ep0 maxpacket: 8 [ 1222.699393][T15308] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1222.736368][T15308] usb 2-1: config 0 has an invalid interface number: 104 but max is 0 [ 1222.770301][T23190] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4497'. [ 1222.780593][T15308] usb 2-1: config 0 has no interface number 0 [ 1222.801114][T23190] netlink: 3 bytes leftover after parsing attributes in process `syz.5.4497'. [ 1222.811495][T15308] usb 2-1: config 0 interface 104 altsetting 129 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 1223.212028][T15308] usb 2-1: config 0 interface 104 has no altsetting 0 [ 1223.256037][T23200] input: syz1 as /devices/virtual/input/input101 [ 1223.269295][T23199] netlink: 'syz.0.4500': attribute type 1 has an invalid length. [ 1223.332263][T23190] batadv2: entered allmulticast mode [ 1223.342236][T14879] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1223.363958][T15308] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0195, bcdDevice=2f.46 [ 1223.399489][ T30] audit: type=1400 audit(1767599089.278:850): avc: denied { create } for pid=23198 comm="syz.0.4500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1223.432889][T15308] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.455653][T23199] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1223.495305][T15308] usb 2-1: Product: syz [ 1223.499508][T15308] usb 2-1: Manufacturer: syz [ 1223.516772][T14879] usb 3-1: config 222 has an invalid interface number: 233 but max is 0 [ 1223.525993][T14879] usb 3-1: config 222 has no interface number 0 [ 1223.543299][T14879] usb 3-1: New USB device found, idVendor=0f11, idProduct=1100, bcdDevice=2e.87 [ 1223.552763][T14879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.562895][T14879] usb 3-1: Product: syz [ 1223.567069][T14879] usb 3-1: Manufacturer: syz [ 1223.580537][T14879] usb 3-1: SerialNumber: syz [ 1223.587196][ T30] audit: type=1400 audit(1767599089.278:851): avc: denied { write } for pid=23198 comm="syz.0.4500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1223.610062][T15308] usb 2-1: SerialNumber: syz [ 1223.633062][T15308] usb 2-1: config 0 descriptor?? [ 1223.829660][T23197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4499'. [ 1223.851412][T15308] option 2-1:0.104: GSM modem (1-port) converter detected [ 1224.217833][T15058] Bluetooth: hci4: command 0x0406 tx timeout [ 1224.390921][ T90] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 1224.397518][ T90] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 1224.424080][T14879] ldusb 3-1:222.233: Interrupt in endpoint not found [ 1224.445915][T14879] usb 3-1: USB disconnect, device number 30 [ 1224.490625][T15308] usb 2-1: USB disconnect, device number 103 [ 1224.516674][T15308] option 2-1:0.104: device disconnected [ 1224.783725][T23214] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4502'. [ 1224.800502][T23214] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4502'. [ 1224.809756][T23214] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4502'. [ 1225.336974][T23213] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1225.356385][T23213] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1225.521454][T23223] fuse: Unknown parameter '' [ 1225.528737][ T30] audit: type=1400 audit(1767599091.525:852): avc: denied { map } for pid=23222 comm="syz.5.4507" path="/462/file0" dev="tmpfs" ino=2623 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1225.591483][T23213] bond0: left promiscuous mode [ 1225.606788][T23213] bond_slave_0: left promiscuous mode [ 1225.614588][T23213] bond_slave_1: left promiscuous mode [ 1225.626219][ T155] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.648083][ T155] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.670657][ T155] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.703426][ T155] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.732501][T23021] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1226.238044][T23021] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1226.490772][T23021] usb 2-1: config 2 has an invalid interface number: 202 but max is 1 [ 1226.548705][T23021] usb 2-1: config 2 has no interface number 1 [ 1226.606856][T23021] usb 2-1: config 2 interface 202 has no altsetting 0 [ 1226.629417][T23021] usb 2-1: config 2 interface 0 has no altsetting 0 [ 1226.666546][T23021] usb 2-1: New USB device found, idVendor=0856, idProduct=ac25, bcdDevice=5b.5d [ 1226.703970][T23021] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.728715][T23021] usb 2-1: Product: syz [ 1226.741217][T23021] usb 2-1: Manufacturer: syz [ 1226.757586][T23021] usb 2-1: SerialNumber: syz [ 1226.784377][T23021] usb 2-1: Interface #202 referenced by multiple IADs [ 1227.004426][T23219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1227.049123][T23219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1227.086429][ T30] audit: type=1400 audit(1767599093.152:853): avc: denied { read write } for pid=23247 comm="syz.4.4513" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1227.132865][ T90] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 1227.142756][T15058] Bluetooth: hci5: command 0x0c1a tx timeout [ 1227.210055][ T90] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 1227.227921][ T30] audit: type=1400 audit(1767599093.152:854): avc: denied { open } for pid=23247 comm="syz.4.4513" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1227.653742][T23021] ftdi_sio 2-1:2.202: FTDI USB Serial Device converter detected [ 1227.687673][T23021] ftdi_sio ttyUSB0: unknown device type: 0x5b5d [ 1227.718548][T23021] ftdi_sio 2-1:2.0: FTDI USB Serial Device converter detected [ 1227.781494][T23260] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4515'. [ 1227.805323][T23021] ftdi_sio ttyUSB1: unknown device type: 0x5b5d [ 1227.842815][T23021] usb 2-1: USB disconnect, device number 104 [ 1227.867541][T23021] ftdi_sio 2-1:2.202: device disconnected [ 1227.874269][T23021] ftdi_sio 2-1:2.0: device disconnected [ 1228.232767][T23269] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4518'. [ 1228.980249][T23249] can: request_module (can-proto-0) failed. [ 1229.086765][T23285] netlink: 'syz.5.4524': attribute type 1 has an invalid length. [ 1229.256962][T15058] Bluetooth: hci0: command 0x0406 tx timeout [ 1229.310585][T23293] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1229.550746][T23285] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1229.690138][ T90] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1229.699016][ T90] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 1230.287169][T23308] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1230.342869][T23310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4529'. [ 1230.472587][T23310] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4529'. [ 1230.670538][T23318] input: syz1 as /devices/virtual/input/input102 [ 1230.805325][T23310] batadv3: entered allmulticast mode [ 1231.687066][ T90] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1231.724589][T15058] Bluetooth: hci2: command 0x0405 tx timeout [ 1231.793985][ T90] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 1231.864529][T23333] input: syz0 as /devices/virtual/input/input103 [ 1232.267496][T23021] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1232.844602][T23021] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1232.883354][T23021] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1232.915183][T23021] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.946177][T23021] usb 2-1: config 0 descriptor?? [ 1232.982909][T23021] pwc: Askey VC010 type 2 USB webcam detected. [ 1233.344944][T23021] pwc: recv_control_msg error -71 req 02 val 2b00 [ 1233.454786][T23021] pwc: recv_control_msg error -71 req 02 val 2700 [ 1233.487355][T23021] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1233.511857][T23021] pwc: recv_control_msg error -71 req 04 val 1000 [ 1234.090885][T23021] pwc: recv_control_msg error -71 req 04 val 1300 [ 1234.156864][T23021] pwc: recv_control_msg error -71 req 04 val 1400 [ 1234.188786][T23021] pwc: recv_control_msg error -71 req 02 val 2000 [ 1234.225341][T23021] pwc: recv_control_msg error -71 req 02 val 2100 [ 1234.300878][T23021] pwc: recv_control_msg error -71 req 04 val 1500 [ 1234.308496][T23021] pwc: recv_control_msg error -71 req 02 val 2500 [ 1234.315610][T23021] pwc: recv_control_msg error -71 req 02 val 2400 [ 1234.357079][T23021] pwc: recv_control_msg error -71 req 02 val 2600 [ 1234.391946][T23021] pwc: recv_control_msg error -71 req 02 val 2900 [ 1234.406734][T23021] pwc: recv_control_msg error -71 req 02 val 2800 [ 1235.083222][T18677] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1235.126240][T23371] program syz.5.4546 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1235.155679][ T30] audit: type=1400 audit(1767599101.624:855): avc: denied { read } for pid=23363 comm="syz.5.4546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1235.271883][T23021] pwc: recv_control_msg error -71 req 04 val 1100 [ 1235.285115][T23021] pwc: recv_control_msg error -71 req 04 val 1200 [ 1235.334232][T23021] pwc: Registered as video103. [ 1235.494239][T23021] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input104 [ 1235.533708][T23021] usb 2-1: USB disconnect, device number 105 [ 1235.553542][T18677] usb 5-1: Using ep0 maxpacket: 8 [ 1235.566154][T18677] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1235.739594][T18677] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1235.782370][T18677] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1235.804718][T18677] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.010825][T15308] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1236.099660][T23362] netlink: 'syz.4.4543': attribute type 39 has an invalid length. [ 1236.153585][T23021] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1236.203016][T15308] usb 6-1: config 222 has an invalid interface number: 233 but max is 0 [ 1236.227134][T15308] usb 6-1: config 222 has no interface number 0 [ 1236.238311][ T30] audit: type=1400 audit(1767599102.757:856): avc: denied { append } for pid=23361 comm="syz.4.4543" name="file0" dev="tmpfs" ino=1719 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1236.269790][ T30] audit: type=1400 audit(1767599102.757:857): avc: denied { open } for pid=23361 comm="syz.4.4543" path="/307/file0" dev="tmpfs" ino=1719 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1236.298345][T15308] usb 6-1: New USB device found, idVendor=0f11, idProduct=1100, bcdDevice=2e.87 [ 1236.308905][T15308] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.317025][T23021] usb 2-1: Using ep0 maxpacket: 16 [ 1236.369163][T23021] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1236.384288][T15308] usb 6-1: Product: syz [ 1236.392289][T15308] usb 6-1: Manufacturer: syz [ 1236.397126][T23021] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1236.406350][T15308] usb 6-1: SerialNumber: syz [ 1236.412375][T23021] usb 2-1: can't read configurations, error -71 [ 1236.443958][T18677] usb 5-1: string descriptor 0 read error: -71 [ 1236.520470][T18677] usb 5-1: USB disconnect, device number 121 [ 1236.623501][T15308] ldusb 6-1:222.233: Interrupt in endpoint not found [ 1236.634842][T15308] usb 6-1: USB disconnect, device number 84 [ 1237.368909][T23407] input: syz1 as /devices/virtual/input/input105 [ 1237.573784][ T5969] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1237.792609][ T5969] usb 5-1: Using ep0 maxpacket: 8 [ 1237.806445][ T5969] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1237.842555][ T5969] usb 5-1: config 179 has no interface number 0 [ 1237.848854][ T5969] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1237.902233][ T5969] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1237.926150][T23413] netlink: 'syz.5.4555': attribute type 3 has an invalid length. [ 1237.935480][ T5969] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1237.951583][ T5969] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1237.951619][ T5969] usb 5-1: config 179 interface 65 has no altsetting 0 [ 1237.951651][ T5969] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1237.951679][ T5969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.166198][ T5969] usb 5-1: USB disconnect, device number 122 [ 1238.230269][T23021] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1238.411225][T23021] usb 6-1: Using ep0 maxpacket: 32 [ 1239.373591][ T5969] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1240.040461][ T5969] usb 5-1: Using ep0 maxpacket: 16 [ 1240.064400][ T5969] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1240.074430][ T5969] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1240.093042][ T5969] usb 5-1: can't read configurations, error -71 [ 1241.564278][T23021] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1241.571991][T23021] usb 6-1: no configurations [ 1241.577276][T23021] usb 6-1: can't read configurations, error -22 [ 1241.705169][T23453] netlink: 'syz.4.4569': attribute type 33 has an invalid length. [ 1241.735509][T23453] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4569'. [ 1242.835381][T23502] xt_ecn: cannot match TCP bits for non-tcp packets [ 1243.695403][T23513] input: syz1 as /devices/virtual/input/input106 [ 1244.842364][T23537] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4586'. [ 1245.292859][T23542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4584'. [ 1245.337048][ T90] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1245.490782][ T90] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1245.523946][ T90] usb 6-1: New USB device found, idVendor=045b, idProduct=0212, bcdDevice=6c.f3 [ 1245.544101][ T90] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.610731][ T90] usb 6-1: Product: syz [ 1245.664350][ T90] usb 6-1: Manufacturer: syz [ 1245.736322][ T90] usb 6-1: SerialNumber: syz [ 1246.690878][ T30] audit: type=1400 audit(1767599113.738:858): avc: denied { listen } for pid=23563 comm="syz.1.4591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1246.770314][ T30] audit: type=1400 audit(1767599113.780:859): avc: denied { read } for pid=23563 comm="syz.1.4591" path="socket:[87545]" dev="sockfs" ino=87545 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1247.471825][T23579] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4594'. [ 1247.481127][T23579] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4594'. [ 1247.545474][T23582] syzkaller0: entered promiscuous mode [ 1247.560336][T23582] syzkaller0: entered allmulticast mode [ 1249.505669][ T90] hub 6-1:4.0: Invalid hub with more than one config or interface [ 1249.559267][ T90] hub 6-1:4.0: probe with driver hub failed with error -22 [ 1249.683081][ T90] upd78f0730 6-1:4.0: upd78f0730 converter detected [ 1249.727055][ T90] usb 6-1: upd78f0730 converter now attached to ttyUSB0 [ 1249.742168][ T90] usb 6-1: USB disconnect, device number 87 [ 1249.762386][ T90] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 1249.866116][ T90] upd78f0730 6-1:4.0: device disconnected [ 1249.952126][T23606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4600'. [ 1250.003929][T23021] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1250.301362][T23021] usb 3-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00 [ 1250.328819][T23021] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.371683][T23021] usb 3-1: config 0 descriptor?? [ 1250.612503][T23610] input: syz1 as /devices/virtual/input/input107 [ 1250.783933][T23021] aquacomputer_d5next 0003:0C70:F010.0035: hidraw0: USB HID vff.fd Device [HID 0c70:f010] on usb-dummy_hcd.2-1/input0 [ 1250.970230][T23021] usb 3-1: USB disconnect, device number 31 [ 1251.252581][ T5969] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1251.443139][ T5969] usb 2-1: Using ep0 maxpacket: 32 [ 1252.042344][T23021] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1252.208451][T23021] usb 3-1: config 222 has an invalid interface number: 233 but max is 0 [ 1252.281293][T23021] usb 3-1: config 222 has no interface number 0 [ 1252.318580][T23021] usb 3-1: New USB device found, idVendor=0f11, idProduct=1100, bcdDevice=2e.87 [ 1252.368081][T23021] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.526240][T23021] usb 3-1: Product: syz [ 1253.110306][T23021] usb 3-1: Manufacturer: syz [ 1253.140568][T23021] usb 3-1: SerialNumber: syz [ 1253.251200][T23656] FAULT_INJECTION: forcing a failure. [ 1253.251200][T23656] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1253.267780][T23656] CPU: 0 UID: 0 PID: 23656 Comm: syz.4.4617 Tainted: G L syzkaller #0 PREEMPT(full) [ 1253.267811][T23656] Tainted: [L]=SOFTLOCKUP [ 1253.267819][T23656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1253.267829][T23656] Call Trace: [ 1253.267837][T23656] [ 1253.267843][T23656] dump_stack_lvl+0x16c/0x1f0 [ 1253.267874][T23656] should_fail_ex+0x512/0x640 [ 1253.267906][T23656] _copy_to_user+0x32/0xd0 [ 1253.267935][T23656] simple_read_from_buffer+0xcb/0x170 [ 1253.267964][T23656] proc_fail_nth_read+0x197/0x240 [ 1253.267984][T23656] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1253.268004][T23656] ? rw_verify_area+0xcf/0x6c0 [ 1253.268025][T23656] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1253.268042][T23656] vfs_read+0x1e4/0xcf0 [ 1253.268065][T23656] ? __pfx___mutex_lock+0x10/0x10 [ 1253.268092][T23656] ? __pfx_vfs_read+0x10/0x10 [ 1253.268122][T23656] ? __fget_files+0x20e/0x3c0 [ 1253.268155][T23656] ksys_read+0x12a/0x250 [ 1253.268178][T23656] ? __pfx_ksys_read+0x10/0x10 [ 1253.268207][T23656] do_syscall_64+0xcd/0xf80 [ 1253.268233][T23656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.268252][T23656] RIP: 0033:0x7f2b3738e15c [ 1253.268267][T23656] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1253.268284][T23656] RSP: 002b:00007f2b38185030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1253.268302][T23656] RAX: ffffffffffffffda RBX: 00007f2b375e5fa0 RCX: 00007f2b3738e15c [ 1253.268314][T23656] RDX: 000000000000000f RSI: 00007f2b381850a0 RDI: 0000000000000005 [ 1253.268324][T23656] RBP: 00007f2b38185090 R08: 0000000000000000 R09: 0000000000000000 [ 1253.268335][T23656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1253.268345][T23656] R13: 00007f2b375e6038 R14: 00007f2b375e5fa0 R15: 00007fff0d9a8b28 [ 1253.268372][T23656] [ 1253.504968][T23021] ldusb 3-1:222.233: Interrupt in endpoint not found [ 1253.535677][T23021] usb 3-1: USB disconnect, device number 32 [ 1253.576175][ T90] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1253.719983][ T90] usb 6-1: Using ep0 maxpacket: 32 [ 1253.727966][ T90] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1253.740222][ T90] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1253.751092][ T90] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1253.761647][ T90] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.773524][ T90] usb 6-1: config 0 descriptor?? [ 1253.830122][ T5969] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1253.838311][ T5969] usb 2-1: no configurations [ 1253.843875][ T5969] usb 2-1: can't read configurations, error -22 [ 1253.852057][T18677] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1253.977557][T23654] cgroup: Need name or subsystem set [ 1254.006071][T18677] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1254.017458][T18677] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1254.029195][T18677] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1254.039982][T18677] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1254.048422][T18677] usb 5-1: Manufacturer: syz [ 1254.056055][T18677] usb 5-1: config 0 descriptor?? [ 1254.236476][ T90] logitech 0003:046D:C29C.0036: unknown main item tag 0x0 [ 1254.244925][ T90] logitech 0003:046D:C29C.0036: unknown main item tag 0x0 [ 1254.253141][ T90] logitech 0003:046D:C29C.0036: unknown main item tag 0x0 [ 1254.260650][ T90] logitech 0003:046D:C29C.0036: unknown main item tag 0x0 [ 1254.268574][ T90] logitech 0003:046D:C29C.0036: unknown main item tag 0x0 [ 1254.276116][ T90] logitech 0003:046D:C29C.0036: unknown main item tag 0x0 [ 1254.287024][ T90] logitech 0003:046D:C29C.0036: hidraw0: USB HID vb4.30 Device [HID 046d:c29c] on usb-dummy_hcd.5-1/input0 [ 1254.450465][T23668] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4620'. [ 1254.465834][T23668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4620'. [ 1254.475562][T23668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4620'. [ 1254.532896][ T90] logitech 0003:046D:C29C.0036: no inputs found [ 1254.791109][ T90] usb 6-1: USB disconnect, device number 88 [ 1255.072941][T18677] uclogic 0003:256C:006D.0037: failed retrieving string descriptor #100: -71 [ 1255.100643][T18677] uclogic 0003:256C:006D.0037: failed retrieving pen parameters: -71 [ 1255.109061][T18677] uclogic 0003:256C:006D.0037: failed probing pen v1 parameters: -71 [ 1255.117566][T18677] uclogic 0003:256C:006D.0037: failed probing parameters: -71 [ 1255.125410][T18677] uclogic 0003:256C:006D.0037: probe with driver uclogic failed with error -71 [ 1255.138292][T18677] usb 5-1: USB disconnect, device number 125 [ 1357.843133][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1357.850084][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P17870/1:b..l [ 1357.858615][ C0] rcu: (detected by 0, t=10502 jiffies, g=117565, q=538 ncpus=2) [ 1357.866417][ C0] task:kworker/u8:21 state:R running task stack:23544 pid:17870 tgid:17870 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1357.881179][ C0] Workqueue: iou_exit io_ring_exit_work [ 1357.886722][ C0] Call Trace: [ 1357.889976][ C0] [ 1357.892884][ C0] ? __schedule+0x10b9/0x6150 [ 1357.897540][ C0] __schedule+0x1139/0x6150 [ 1357.902037][ C0] ? __pfx___schedule+0x10/0x10 [ 1357.906859][ C0] ? mark_held_locks+0x49/0x80 [ 1357.911599][ C0] preempt_schedule_irq+0x51/0x90 [ 1357.916596][ C0] irqentry_exit+0x1d8/0x8c0 [ 1357.921160][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1357.927111][ C0] RIP: 0010:lock_release+0x183/0x2d0 [ 1357.932379][ C0] Code: 0f c1 05 f8 00 19 12 83 f8 01 0f 85 03 01 00 00 9c 58 f6 c4 02 0f 85 ee 00 00 00 41 f7 c5 00 02 00 00 74 01 fb 48 8b 44 24 10 <65> 48 2b 05 8d b9 18 12 0f 85 32 01 00 00 48 83 c4 18 5b 41 5c 41 [ 1357.951970][ C0] RSP: 0018:ffffc900025cf530 EFLAGS: 00000206 [ 1357.958008][ C0] RAX: cb7aec99ca47ca00 RBX: ffffffff8e3c96a0 RCX: ffffc900025cf53c [ 1357.965949][ C0] RDX: 0000000000000003 RSI: ffffffff8daa845f RDI: ffffffff8bf2b480 [ 1357.973890][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 000000008a98be71 [ 1357.981834][ C0] R10: 0000000000000002 R11: 00000000000086e8 R12: ffffffff816cb9a4 [ 1357.989776][ C0] R13: 0000000000000206 R14: ffff888025e924c0 R15: 0000000000000004 [ 1357.997720][ C0] ? unwind_next_frame+0x3f4/0x20b0 [ 1358.002905][ C0] unwind_next_frame+0x3f9/0x20b0 [ 1358.007905][ C0] ? kthread+0x3c5/0x780 [ 1358.012122][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1358.018262][ C0] arch_stack_walk+0x94/0x100 [ 1358.022917][ C0] ? ret_from_fork+0x983/0xb10 [ 1358.027652][ C0] stack_trace_save+0x8e/0xc0 [ 1358.032320][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1358.037666][ C0] ? kasan_save_stack+0x42/0x60 [ 1358.042489][ C0] ? kasan_save_stack+0x33/0x60 [ 1358.047310][ C0] kasan_save_stack+0x33/0x60 [ 1358.051974][ C0] ? kasan_save_stack+0x33/0x60 [ 1358.056795][ C0] ? kasan_record_aux_stack+0xa7/0xc0 [ 1358.062142][ C0] ? kmem_cache_free+0x15e/0x770 [ 1358.067050][ C0] ? __io_req_caches_free+0x19e/0x5c0 [ 1358.072399][ C0] ? io_ring_exit_work+0x33c/0x1170 [ 1358.077586][ C0] ? process_one_work+0x9ba/0x1b20 [ 1358.082670][ C0] ? worker_thread+0x6c8/0xf10 [ 1358.087405][ C0] ? kthread+0x3c5/0x780 [ 1358.091637][ C0] kasan_record_aux_stack+0xa7/0xc0 [ 1358.096811][ C0] kmem_cache_free+0x15e/0x770 [ 1358.101548][ C0] ? __io_req_caches_free+0x19e/0x5c0 [ 1358.106903][ C0] ? __io_req_caches_free+0x19e/0x5c0 [ 1358.112249][ C0] __io_req_caches_free+0x19e/0x5c0 [ 1358.117423][ C0] io_ring_exit_work+0x33c/0x1170 [ 1358.122429][ C0] ? __pfx_io_ring_exit_work+0x10/0x10 [ 1358.127862][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 1358.133035][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1358.138824][ C0] ? debug_object_deactivate+0x1ec/0x3a0 [ 1358.144437][ C0] ? rcu_is_watching+0x12/0xc0 [ 1358.149175][ C0] process_one_work+0x9ba/0x1b20 [ 1358.154090][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1358.159438][ C0] ? assign_work+0x1a0/0x250 [ 1358.164005][ C0] worker_thread+0x6c8/0xf10 [ 1358.168589][ C0] ? __kthread_parkme+0x19e/0x250 [ 1358.173600][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1358.178685][ C0] kthread+0x3c5/0x780 [ 1358.182728][ C0] ? __pfx_kthread+0x10/0x10 [ 1358.187291][ C0] ? rcu_is_watching+0x12/0xc0 [ 1358.192026][ C0] ? __pfx_kthread+0x10/0x10 [ 1358.196588][ C0] ret_from_fork+0x983/0xb10 [ 1358.201156][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1358.206241][ C0] ? __switch_to+0x7af/0x10d0 [ 1358.210892][ C0] ? __pfx_kthread+0x10/0x10 [ 1358.215455][ C0] ret_from_fork_asm+0x1a/0x30 [ 1358.220201][ C0] [ 1358.223207][ C0] rcu: rcu_preempt kthread starved for 10535 jiffies! g117565 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1358.234456][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1358.244393][ C0] rcu: RCU grace-period kthread stack dump: [ 1358.250250][ C0] task:rcu_preempt state:R running task stack:28064 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1358.263693][ C0] Call Trace: [ 1358.266945][ C0] [ 1358.269850][ C0] ? __schedule+0x10b9/0x6150 [ 1358.274500][ C0] __schedule+0x1139/0x6150 [ 1358.278977][ C0] ? __lock_acquire+0x436/0x2890 [ 1358.283890][ C0] ? __mod_timer+0x8f2/0xd30 [ 1358.288459][ C0] ? __pfx___schedule+0x10/0x10 [ 1358.293280][ C0] ? find_held_lock+0x2b/0x80 [ 1358.297932][ C0] ? schedule+0x2d7/0x3a0 [ 1358.302233][ C0] schedule+0xe7/0x3a0 [ 1358.306276][ C0] schedule_timeout+0x123/0x290 [ 1358.311097][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1358.316440][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1358.321698][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1358.327477][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 1358.332909][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 1358.337646][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1358.342902][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1358.348073][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1358.352984][ C0] ? rcu_gp_cleanup+0x7c1/0xe90 [ 1358.357810][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1358.363592][ C0] rcu_gp_kthread+0x26d/0x380 [ 1358.368245][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1358.373415][ C0] ? rcu_is_watching+0x12/0xc0 [ 1358.378153][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1358.383326][ C0] ? __kthread_parkme+0x19e/0x250 [ 1358.388322][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1358.393492][ C0] kthread+0x3c5/0x780 [ 1358.397535][ C0] ? __pfx_kthread+0x10/0x10 [ 1358.402099][ C0] ? rcu_is_watching+0x12/0xc0 [ 1358.406833][ C0] ? __pfx_kthread+0x10/0x10 [ 1358.411396][ C0] ret_from_fork+0x983/0xb10 [ 1358.415971][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1358.421059][ C0] ? __switch_to+0x7af/0x10d0 [ 1358.425712][ C0] ? __pfx_kthread+0x10/0x10 [ 1358.430288][ C0] ret_from_fork_asm+0x1a/0x30 [ 1358.435033][ C0] [ 1358.438035][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1358.444330][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1358.449511][ C1] NMI backtrace for cpu 1 [ 1358.449525][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1358.449545][ C1] Tainted: [L]=SOFTLOCKUP [ 1358.449550][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1358.449558][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1358.449578][ C1] Code: c6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 49 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1358.449591][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 1358.449604][ C1] RAX: 00000000059a6b67 RBX: 0000000000000001 RCX: ffffffff8b7816d9 [ 1358.449613][ C1] RDX: 0000000000000000 RSI: ffffffff8dace4f3 RDI: ffffffff8bf2b480 [ 1358.449622][ C1] RBP: ffffed1003b54498 R08: 0000000000000001 R09: ffffed10170a673d [ 1358.449631][ C1] R10: ffff8880b85339eb R11: ffff88801daa2ff0 R12: 0000000000000001 [ 1358.449640][ C1] R13: ffff88801daa24c0 R14: ffffffff9088b9d0 R15: 0000000000000000 [ 1358.449649][ C1] FS: 0000000000000000(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 1358.449664][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1358.449673][ C1] CR2: 00007f3ed19156c0 CR3: 00000000872e7000 CR4: 00000000003526f0 [ 1358.449682][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1358.449690][ C1] DR3: 0000000000008000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1358.449699][ C1] Call Trace: [ 1358.449705][ C1] [ 1358.449709][ C1] default_idle+0x13/0x20 [ 1358.449727][ C1] default_idle_call+0x6c/0xb0 [ 1358.449746][ C1] do_idle+0x38d/0x510 [ 1358.449766][ C1] ? __pfx_do_idle+0x10/0x10 [ 1358.449787][ C1] cpu_startup_entry+0x4f/0x60 [ 1358.449807][ C1] start_secondary+0x21d/0x2d0 [ 1358.449821][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1358.449836][ C1] common_startup_64+0x13e/0x148 [ 1358.449857][ C1]