last executing test programs: 9.901476457s ago: executing program 1 (id=2605): r0 = socket(0x10, 0x4, 0x6) socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x14, r4, 0xf0106b2f9946af23, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x800) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x4, 0xa478, 0x3d7, 0x7fffffff}, 0x2}, 0x20, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYBLOB="000000000000000000000400cb00000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp6(0xa, 0x2, 0x73) 6.953265836s ago: executing program 1 (id=2614): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f00000000c0)={r1, 0x8, 0x4, 0x3, 0x0, [], [0x3, 0x6, 0x79f, 0xa0], [0x9, 0x19, 0x0, 0x7], [0x0, 0x1, 0x8, 0x1ff]}) (async, rerun: 32) syz_emit_ethernet(0x1017, &(0x7f0000000140)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @random="5f0864fe5403", @void, {@llc_tr={0x11, {@snap={0x0, 0xaa, "a6c6", "60c7b5", 0x6001, "f692909f0a9bcccf72d6b3273eadc5d7d4acdd574e7cc1bafa47c84cde0f7fe709a156156039083d51822b7b4a45cd6ee996e2d67c4ebbb126b0ad6bc746e1d7fb4390be1f648d192b311bd2997354f976521861724450dd4d46449989fc2b23c40a0fe343acd8a5abbc35d85003a7fb891d44757d4f323fd35c7f05a7910f9583fcdd19f81b4f9db5d24bc5e5f4c0901e29b1c7841922dc939daf62213da407e8b78d3936831a67d2625b40b09818c969ff48663f0d3a80d742204f3474b3befdb9057a58547988104e676421f73112122f2ab93211e086120055980eb205e391f3a4554756c159a9790e4649a779e78cb42218dba91543f7de5c0c0a482fbd47b6840de8fefb27dbcb7d88fd0e5694265493547868b289e63723ab32c961220af5f11daf81bb0e0dbbf9617586d51d3f84ecb01d921696081542c5eaffab907575cfdb86c49e570b6c10fa88a3188972ee623e99e1a94dc351d8338d8d60866070ddaae2510d93d66caf0fe3466f8bed24da87aef6e35f1fc0c7fac41847d8815d203baedc7fbd605d02e46951042b3eb8739b459db954c5317f528a5d757df7708465d514ef7af7f88d1eaafb3ffe114fefbc9c17ddc9500dd037131ebc989fcf5b45333ca491752a23d97079254164a80af7119b5457cd92861616336b2f5e4ce927022c74d20f3d1ab8fdb16ba711b8e295526481948e4df9666f96e0477ee8258a1c42c5648b6df8be3324f97d985cc215fe71d45973b043e951af6d5ef924a897782b74bdb3e1223b08678881ef983438aee81773737a1f9417e074498e176638131c94a475a25b44c0f07c1b921c3cb5a9fc24660d8d61b2f1250a0f1b028d6dda65b11b23767916e1526534323dc82b27a40c08db9eb98e1e622d782d43393bc1b73334e14a3b11409286306f64339c89698da66d0ec9ca2a4a28ff6ecf779300d2b7e485e10419c5de56ebd00fd2f7aa26f23cc13c91161ad61e03092032336975bc898685e6203abb1945b5e344d994667c78edf430ca6b7f0fa83e41c2031261380a2a18586c0bd7c4895910146e402508076fbf9f3bf6a1b9535e9ff118196ccc54f7e98eaaff875f4946c64f649757c29ca7abbd2d33e6e3f6379ed61a6977fae5a7da1464e182c2808d24dedaa858b187bd087a31ed0e4a1a7493ed7b8e7042c1ed81c0683c90c701feb02f42e2295f8c82d1af668cf0aec3d2162a24b3a523ff328a155fc147ba3163ae5705d68cee97534621abe042756f29245b77ade3b319c4d5002e15f4806dfd1af456cdd84d3c49240f2611ec23fca63f3fba6028c199127e08516d43d49bedd10e1074aa1f7a365e1592a62564b65caebab448b7bac8a8714b745d89610c28e3a8e1294cd5db494d80ab3881949ba3d51ff3b51324dcd5f0d99a1b6fab4d61b1dd07a0cbb5fe3baa6ae2c98054bbfade75e98230a0ff00fcde4a3635a0caa34e5c8e2ff6361c62c720a1c8bb20fe19a20b83a13be938c7ca852ea75827479f4195e8b6becfc7782ef12b984cb221cd774ce0071c2bc1c5d8c177e259b55cd256283fdf1004d00ee7e830fe1cd845ea233b4b84a78eeafa7b90e28b856e4620942c289688fe97b07574660f2ea5b4550b45cf304b4aa17975812a1268c365075d5c0960c5572693e36a180e8a3d0e8464530872627cc3dfa568d0168d08b518e2f4e9b6848ece267431f9777852ef9d7b3fe87526c643f1b075f6e50c5997f424d9e15855c0956762ff6ad78a028f4f611f6a985d81b726855ec13dbfb20300d772a85d43ba92ea9eba03e5446f1a1dd844ded958b03bdf3fc42fc01f6c24cacdd51f10756c613b9213f8205539a9ebd681c503ec80bca248e85b5de201d5e25e7b9fea1db3d72df895f0aeb60165896144a84aeec8fae0d09bfc025cd60c31e1e58d050f249b816514b7199cac14fbc46f41abac64fbba9d91e7b75e661e0b3987d3a347443596b7a9c3c86e7ca5e4f7af95a0906ea671c5da55e9d2af33d833e6ee27e2d208aaf3a76f385c8338f8f5d9ea7aa28644a8544ca7a8d68b3cbfb3a63531d2eeff948e0cf5c0c451dacc4206a88fda84c0593cd3f24032a9b59ef580157564be198a135b56385a7b82bb4f9b87c50c6e846b6890155e57f800a944b7ed42e69acbdb36ab70ae60bb58424091d3d11edccc10f3f02846b9df5dec2be8b988f9d2e79af4d16b5425d6c8d285821ed7ca3d15d2870670828262618d93b7ab12d8c8ca0923f320dcf17da4ab015131b30efa89c70692b060590462176768e57400ed04a44ab3647c5717d1eaa6cb68bda60f24985faf4bedb9664f6257529f38e1c9c7c3db3f59a2d75c7fc117bc290f8c7f0c001be6501bf0b61ce67ae065546f58e6d462f172a19cf37cab2414ed0b52a398e16b6a8ac8eeb9558f2134b8fa7f73942b90844bc3801b755ffaff2bddc0bce97a2470987b2e0b716ff86b9d308e713536cda3e221e6e7ffc1e4c4b161c006378f0c3d6ebffcbf83e01859fc4c1c320267d5809f9f9c667c64fc4c2a4fbea97a704306c2fdb616d33b372a47585fed034142ec68a099a97dd82b135edf4e3cc4970feab677aebdcaedac67da739760a577d2f2defb8511b2c3acfe4f08938fee4f68e531e08ff47e7b1eaaae746ea0e528820978f5cf74213b5b45423d243bcc43687a7484e87be29ebfc6dbdd29074bb6ab58d0a127625225e41c568cb99e6b0fab369c3ba3ad3fde3db7a646c363ac04950c94061c563f7d2b222a541d6938b76f5ef3ce78a8245d90b11afd2fee25fdf52283267502b41afe63e0655f7b2e31bc783ca92a9f27aee7cda27221f553a123e83906f8d3ef681f8e0b2d9e34e2fa10238db4d019bf33a7d2ec9334c8b02b367b76cb4235b878b903d39ed260da56b47c29752ad9252f0b327efc3ebd3e087d39c6874e90e21642dfb922dd20464014342d9b494f4772584189c39e68c7d7f3652311f231791988332ce7e21bcb0d07e75136f385bbf67b994036a35f6b25fbd893919be837be0cf17bcd513bb1d818aa5031d42c604d2314ce3c100cd6c115d4ce9a5bb14e6720de9da61b3edad3bd1bda520389f0e6dd8f2f2e5483a78f02cc138db94759412f6f6bb5414c2bb397466cee0a7f6da6e610962b41210e836ad4db4be64993ca28f86ec00d538684ac41103d8cc5640b6c9e9cc22e263e0971161a1405aa613e6b11dc2ef22df66f87740329bc14b96a4985e27a86850945ec82c529a74dc5e44795dd3f37ccaa1c95c044648497c4daad72fe5312678c6bdaff40aa90a039202e360f3eb92738627915b4f492c000da81df104893125614e3f756138248102b370aa249c9d5f7d314612420d17511917385804919e483a18da786ee9c6fe9b842a6e9fedf1dd0ae2bbed649a76f236ee9544adbba557cf3c4814beadb52048c6182f41d79d4a4e5abcc4b7d57269efacefb513506c0b6adc69b175f64b54c9ce42c98c3be43d3107533aca28238c377ecdee4d9552674adbd0f3b3b622cbac9ec294ebb670e6577fddf59c4c6c9e7539104d698c8580a31dc7ce2379fdeeb4828c32a55609a36ea400d51bec145889ff612589f929f328b7b1b7a207ffc91e48d73daffe3bf3c79a3e0513dd2cbaa559661920c2d5cc99f3f19e6ba6638b2c33d8dd75dce409948e316a86b49b84e21edd0a931340dc85b4ab31cacc8822920688c0dae7c760d663771ab272d427cb8fd239dd7127a012e4e8b2c665589eecb94472452aaf43a371eb71cb1c7c19ff4eac1a327bc1d264de8f24524da8a86654da27627fb00959127f11c943922c45dceea45928540ab974bcfdd3daed140272efbe23351d2cebe9517d10ae41fabc83624633b222968cfe808c5488bb9f7cf6968ab351406fe8d580e411068c379deddba655ec83dcf7a4bcc79b575143008312eaaf1d7a32cc74db7cfe5c190c5c8d857f17fd9082939b6549a0b061b87b80e61c799ecbd52c9d1e80985a0eda278f5239e1c21f243a74e7f2b38866696d34e05229f60b3e076e04f56737fcb441f61d95005840d4a0a5ffe2aae15abf7ba32caff9b5f2a7c50d04edcd9c082ec72a54b07933486bbf9e9fc9a5374f227c34ddb62d5a3bc9697ef93efb1fe19649b3e929a36ba366015375f61ac5100e1cd2afaff5c4ff480a0639ce7d7e4db6407445deb0939521579887e049fdd4a4dfb6771330e687d13c0f86fefaeb3c062b3acae44fc18d4735c651b056e7aced8ee6e20224259f2d8948dbf526db7ae27e024b343668b91f9c20fa3f81c626c4fdb60d2d7df336c237b469649d1db130fff038264b0b28d50f2636417339a0d2ca9f5701bb0c3ac199f6d62f71d43c9927396f23a1cbf606b0fd90d246cb25ab68ea143df062a86694187a843f1016eb927d8249eeaf86be4bdf3c387f6526a146de28c2fb19fbbf78a17b0bdecf39e4aedcc8a6a923a91b6f86b4a6f5cd5526679e67f4aeb5370ff5fd93a396d1f1f48bd25dfe88f316c5cd6b0d64d55e9b0dda12816f06877537f442bdfcaab65a021cf9ed32c346a1850cb537f48af5a0efbcd94510c678047b84cea34a532e159034b1f0548458969ab624b25d64438a18cf7fad001eef0520c911381cdcd3019c2c3af1147de60803fc086d2e32df73d1375839ada3f67212221b42c38323e27c91dc5a5655c1fdf036e4a24d4f8a21b3a3dfae6b6b582804be509356ffc5345d563cd58ac3dd92b7b02a833ab82d63a99fbdb42284f23bdeec31e1a1d8c2f2c38944907a2a843fa01b40d005db8063276ea568216758d24323275c2a848861733ecc4d30c08b9c9f4aedeb2bcc3077a56594f9323564f8d5b88e075d00f4978ca5c9d859b6bdd96184ede0572c0d3b6f396c3477f494212e23d260749cc212ecf3e7b791c7576c15ede43568de0565c5a549a9e6f8b5ee668201a305909314680a0189be540ee3b40a14985871a24081d512781daeb0220009af53bd6d55e9c3dca8a9407bb24506843f0742e1ece12e7edbdaf6e97d2e120a25c6daac8085c4558d36ea414917c9baa9fb9cb157d8c23318ef9b4cdd933a0fcde39d388b805cfe7eb3ee2ce8af6dcb1010fa3eaca2b344483f09b052fb1bf08c1faa06230fe1bbdaf1ea8b3e11c80fd6616377ff97f07996620e6d5146676484b57d238cc1531796dbb33c802de1696968df54256b3c0295ce084cfb4d2686110d5cf008d9aeeec4b8ab0e3b7ba9d349505e1836a00076b9f7d8bc6f246d79ff621f6742e8cddcbbb613277b427cfd500adfe9c37359bb1cbaa2abc306d4c758f0043817ea14a27de0430aa1d14dfd46a898c2e5b98c06620628638b1ee9a1adc82f3a63a6cc642310f100b585ef6b1704390c0853b3e66e07afd7e0ea3959423bb2093bef0e186c1eae3d8b023ac7422a51c05d60329d9aae0d6245b49c886de45ebad6f80d84237d63e3d378596ec22b47e0c2a44fcc9b8ed2dd2219687f032ceddd3048deee355cbcffb866f7246dba42898a044749e58895e0fd5033e352a9e4976a6c39ccc3ecc7d06b518d4c06c204f755407532b602470b5484ec320cb068949882c178e82081d5dfb30d41195bb57a63a2796c92f74d9d4a0a67ebb4fb29111afa39450724125cec1f3fbe4a053dafda6a577344ed1d6bf9be7594598a8f685b46b216085d8b3e485251b2a284bc44bfcd4fb99bb015b8037789dbf493b99d6a725f45eebbcce64cec93c791f4f43c75d2d038a8ab059531e3b9b1cb9ba10b1ef557abadffdf0743f6d82d8eab09b77f01944"}}}}}, &(0x7f0000001180)={0x0, 0x1, [0x867, 0xe4a, 0xae5, 0xb6c]}) (rerun: 32) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f00000011c0)) (async, rerun: 32) sendmsg$kcm(r0, &(0x7f0000002a00)={&(0x7f0000001200)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000002680)=[{&(0x7f0000001280)="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", 0x1000}, {&(0x7f0000002280)="37766440e917e3ecc7262e5663a297e6916408a460a452cf8d493fc03a42261fd0b97221436ce832ccfcedf3b0c90b6de99d435eb1e0516121c4b78dbdb28434e10fc47845a54b8860309894f96e83a83e461c7960632cadbea2e915737daf1b5ac158e780c0a9c8f2801ca98b622fcc79f189672aa03a59d1a5a111da57e22279ccbb808de8c7a967c0fcdb881cf3e91f30eba52fb1c874a2c1ad7fc9c656c332b7b383e3fdbc7fefa3378ce61a4fd558a8523297a779279a7b294930bae23aaf812d7e58f51e454544331d281e5e50efc274ce", 0xd4}, {&(0x7f0000002380)="58d87106cb8afc079e4bdc32ec4004542118fa2c8c1aac498a4e586564dd83c1bad16a6c8612844a26aa131d16f9a406db958c7f90220ea70ff6449bf0f5954e1862d710e51ff05185ec380f976c27491b33c661f7cb58bfff92ce9f6ed69b2b0ce85349fc6773ee57147b813721473bffec84119b514b54da2204484ff5029bc7bc7d4bdb2ee1a0f0afd9f455ca4347dd0181cf67f55e3e21d516afdfa4c62c3a35259a5a3a435ee6fc3b03566a", 0xae}, {&(0x7f0000002440)="bd12fbe741cbbfb6d12186a611d352f6e40da0d6b95323a8b6a33eb4c2dbebc5671e5770653203d0600b4b02944ef6da8444155ac854797a274773ee06f404f8b46b5f92e08588f23798cf9e4750a90a3c1af7045a4e4618bc1860f92788ad1ab77e17b4be0e1c77a5a4532e7f39bd10fcc756250f4c499f8929b3856f27fad9501556dfee701d8bd2ff2b5ed2de7240053bca590c707410874c89927a76d26d56822bcf81464226bd507435dcc70ddcdfa41c272c0211b5f79240f2d3ebe15838a342bb9ad394228408c1a7e171b331ad78a7b70bea1f8c5086443267d9ef62eeead4af7dc5c83255b77e", 0xeb}, {&(0x7f0000002540)="12d527414109a91b7e0fdb4738f34c8df9f83723194a2346b148833f9a", 0x1d}, {&(0x7f0000002580)="de64af75a0b999c6ffa1c59699cc4b5d5cb2267ca29a453dfc62efd21c9e18ef89aa685033cbed154e5d91b8f2ccc33d17e95aa1eda0bcf820f26cb0ae9e8e414ed59e567c39eac2a702bff2185c860ffa10ca38f57f204e376549a8be90abf0fc4fdc65fee07b15d14e2e5828372c3cb9adb434543c405f22a248dc5b4a2ce94e95557a5f8799d1aacd0d007e8354f124b7843958f2776ac163d2fc1b6e8e28ceabde5c4eb5cc88e48d02f03cb43931e825d60c3037d4758c5f0d", 0xbb}, {&(0x7f0000002640)="7695a6b2c3a5295440e5fa3f36a21eba4be74d48be2d08c9c6b3fa16d1eb", 0x1e}], 0x7, &(0x7f0000002700)=[{0x60, 0x113, 0x8, "b46b644feb7d4338459c89380d62691b10dd7bb60f8e779ae14b801f80bd129ec5c30476bbfc72bbcbe8c011f204eea022a60ee68ecfe62418307257d07ce52dac3ce428e7e160cc8a2b"}, {0xa8, 0x114, 0xf, "ef784d0ef4fc28e41bdf1c2e7007191bd12c0ce8993dbe04aa79792346982930d805de1e6b0fafd344f7ed08875c816c97b5636d34d563137ee5315a795bbc8622163ef2ca8e1d90bada4ae9bbca623f30e20300b40c400c21c4e265dc9ec6d4fdfb60d27c3db340bd837e7b33f642f63c438629f6110dc4e8008932561ebbeef741e5ed2c3140841d141688c0e26545706e"}, {0x18, 0x119, 0x1, "f1"}, {0x98, 0x110, 0x20000000, "635a7ef2b09a2347d465cd513ae1f50704df9a2cb28a2018eab9b0640f731e13a21d6d89fb6fcfd3858d3cba54523423cd84ab582dafa369438f781cdc247af0a8ea404d68be4913020521d59544188264bb392204f335f4cb6c416144a83a126bad34e3248be7af70283f1f6f9563625cc9253fd4fa35db818852d684044b3f0fbc"}, {0xe0, 0x0, 0x4a2f, "a7e6c025267570f5411eb4a1ffc27862dc77ea4d451efa9d0b71e0e06a4a15b1ad47fb985a58a48e0680597dedf703b42483d47e3924d5ce0ec699c7fb5e017823cd263ac4a132f38b20eb27d68d2295372ee25b8d4bf7a7a4f619416971a0a7c05df2e40b0e4f9405c47227a01de96f2c7ecdbce555e3bd75ac8cdb7bfe7ffb9d967e7ec80d1b7f4502a4221a9ada1e6ff7f74193d35d9baff6241af184d99cd22c6f993be41ea2229278afe27da04f916bc5ec3ff73f7bf762964b593fd0d73a4bdc202508035a108311d2f9c1a4e0"}, {0x18, 0x1, 0x6, "79a3ca60"}, {0x48, 0x0, 0x8, "3090a9fc310d5b2767d38521b190c61e9c927a56c42426f24ef64be1caaba4bb9eb19083391a7ce4cae90c07d53d7f6c566c"}], 0x2f8}, 0x800) (rerun: 32) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000002b00)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a80)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x800) ioctl$COMEDI_CMDTEST(r0, 0x8050640a, &(0x7f0000003b80)={0x0, 0x40, 0x100, 0x5, 0x100, 0x295, 0x4, 0x9, 0x40, 0x6, 0x20, 0x9, &(0x7f0000002b40)=[0x7, 0x8001, 0x4], 0x3, &(0x7f0000002b80)="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", 0x1000}) r2 = eventfd2(0x81, 0x1) (async) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x114052, r0, 0x0) (async) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x100010, r0, 0x10000000) r5 = dup2(r0, r2) (async) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000003c40)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r5, 0x0, &(0x7f0000003c00)='./file0\x00', 0x10, 0x80800, 0x23456, {0x0, r6}}) (async) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000003c80)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000003cc0)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0, 0x1}) (async, rerun: 64) syz_io_uring_setup(0x774e, &(0x7f0000003d40)={0x0, 0x48b1, 0x8000, 0x1, 0x14e, 0x0, r5}, &(0x7f0000003dc0), &(0x7f0000003e00)) (async, rerun: 64) write$binfmt_register(r0, &(0x7f0000003e40)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x6, 0x3a, '{--\'\'.#}[{*', 0x3a, '\x00', 0x3a, './file0', 0x3a, [0x55, 0x46]}, 0x35) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000003e80)='./file0\x00', &(0x7f0000003ec0)={0x189240, 0x157, 0x3}, 0x18) (async) r8 = syz_open_dev$sndpcmc(&(0x7f0000003f00), 0xfffffffffffffffb, 0x2241) mmap$snddsp_status(&(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x1000000, 0x10010, r8, 0x82000000) (async) mq_open(&(0x7f0000003f40)='\x16\'6+\x00', 0x40, 0xd, &(0x7f0000003f80)={0x9, 0x9, 0x9, 0x9}) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f0000003fc0), 0x181800, 0x0) (async) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000004000)={0x6cc2f90a, 0x2000, 0x4, r5, 0x3}) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000004040)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) pwritev(r0, &(0x7f00000044c0)=[{&(0x7f0000004280)="4687c7e488c4d26a2b83873f3fe7c14e4bed4dcfc2b20a56b07b91c84eacc06312a7ca3022e36a9bd0a8a34d638a03d92f1945655bc86ed2ed104278b88f1d86ff37ef885c7745691527c2116a4ed1b2645c21c22ab2c2300cafda0e39115ee66774325f795767ff509106fd589e18be621b41b830713c2abe7f5e279788b8c5b9c2b9089b0830e87cecc6430e14f6e18dae41126e328bc0a31bc06c26f21ce06d5a3d78f8ae63be659a088d92224881af586c597146e55fec1a5aae929176a63f23da328bcc1db474eea4c1ab4f31bb2598cc1b1fb3e4dbeb45d54ef53e358cce", 0xe1}, {&(0x7f0000004380)="72d8bd977692c401b60630ebf8224517cf2e28be72ab1045cbac539aec66ee07c789ace7df281f044cbc1d7957279d558b1595d1cf76dcfdc04ac746673d48909c7e41109ee49768aed56a17a628dc4d704b2c39a3cb63ff64792d39b137046533d43626dd5e8b8f904885d2eec7796d8b58f92c85c6276af23091d06727ee2d7d7d3d44670f225b9850c6591f82fc31558dfa513847857ce33c0ad552e0f16d2f6f5319fa832f4a4539ba2df34e512e04d82d7488ef11d20cfda634d1cb6d09d219cb62dcdf8d303902c6c25b836148ae1f1a", 0xd3}, {&(0x7f0000004480)="e748b7c4dd7793b62b25f2", 0xb}], 0x3, 0x6, 0x8) (async) write$vhost_msg(r5, &(0x7f0000004580)={0x1, {&(0x7f0000004500)=""/57, 0x39, &(0x7f0000004540)=""/40, 0x1, 0x3}}, 0x48) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000004600)={@local, 0x1}) openat$nullb(0xffffffffffffff9c, &(0x7f0000004640), 0x250442, 0x0) getpid() 6.848418209s ago: executing program 1 (id=2616): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = eventfd(0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000140), 0x10) r3 = syz_io_uring_setup(0x10000839, &(0x7f00000003c0)={0x0, 0x679d, 0x1, 0x2000046, 0x3ce}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b26bd644", 0x38, 0x2400c0c7, 0x1}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000001500)=ANY=[@ANYBLOB="180000000040000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000198500000071000000850000005000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x200000000000000) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) 6.848084222s ago: executing program 4 (id=2617): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRESDEC], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) timer_create(0x7, &(0x7f00000006c0)={0x0, 0x3e, 0x1, @thr={&(0x7f0000000800)="a9295f8d312ae953cc7e56318aa1b512caaefeff3b55a9725d59615395ddb4783f7e86bcbf3def512339bf78aefc5e302afd4f2af25e7f1ec221d923949ef0711c27914e0af0ac730b810d53c1ae9e1410ab854a7fe4ede68ff85f50d5fb03758d1daa11494a35e43e4003da1411ae8e242fae6bcfaae3059b0a60f71d539e305f1441a12f5cf7", &(0x7f0000000400)="65315f9dcbae94458be3a0b97792"}}, &(0x7f0000000700)=0x0) timer_settime(r2, 0x1, &(0x7f0000000900)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0x80) write$dsp(0xffffffffffffffff, &(0x7f0000000240)=' ', 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="040000000400000004000000050001"], 0x48) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000a40), 0x3) r4 = socket$inet6(0x10, 0x2, 0x4) openat$zero(0xffffffffffffff9c, &(0x7f0000000940), 0x80002, 0x0) sendto$inet6(r4, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x20000000, 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, &(0x7f00000001c0)={0x14, &(0x7f0000000d40)=ANY=[@ANYBLOB="2005d7000000d7058c6ee1e8c9a893ee19a4f56a3d61d4de8410f260aa7f61eda80b596007c36306183793e706f0852ece461e32629c2362f790f8ecd7e4886f67b5686e68678debad92f1b92638768a1f9da14fea468e8272c860da35660a276a7f4e60323bc307027603935eb2521d7cc65da61318a19fc9a019f30e1b441645c4ed96a367d52a1be721891c73cd939ca6175b2363c39a25a64b5d46ec3492cf99ee0dde50b60e7e2886b42e49f74e6fcfd9ebefdfe692009859b9ed607a8d1bcd8a19242d7561dc5341695894930dc5c199f62de1e4a25f74b47a284cb62371c6266d73bb98a1775f35a0e538b593345af3ff56c1453a41a5d95d258435664dbda77230c7a93479bd68696c2173f7cb0e00"], &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x1c, &(0x7f0000000bc0)=ANY=[@ANYBLOB="2009be000000a4636a0928fd4193deeb5f676372110f034cee4f063adc5226371e911ed8b7e729e466f10a6d907541345457886b680836d43115a8bb2b258e8df69c62f9aaa111fffb0a69f2ab03a74d34bf92dd0f5e4d7522faefe47e7a60a7fd6d19fec2ba6bb04c87916a9a0510a163b81d02b8f0ceff093a7cccd1841a66655100d786463fcf897d621647c71ea887f205bf116c41704911084124e4610255727c86b0b1decd2637b425373a7a8a5ec58d61b4b247c61633aa0e0cfa13cf1993592552ff7d663133f34e3c8b99b5d807595753c5504a81e266f65c158710ffb74b559eecb1e892b809e1e4dfacbc052bae7e"], &(0x7f0000000200)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x40}}) 6.529192157s ago: executing program 1 (id=2618): syz_usb_connect(0x5, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x738, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0, 0x0, 0x8000000000000001}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0xffffffffffffffff, r4) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x444d82, 0x0) write$P9_RSTATu(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="240200007d00000005e3000000040000000000000400fdffffffffffffff00000000000000000000000000000000000000001f00206e6f6465767b6376666f7892ffffff8102000001000031ffcebc920100003800704a86cec602007dfa673effeb09b5351f5bde05f700000000187b8200b500003b595fcb14034354b9fd9ef196a51cd5157adc8106b494e11200cfc2001000000000000000000000f313f6004700f8f669fb716dcf315ecaf385409ac65b9408678c2c3b9e1d52c36cde7ba4a40700000000000000a8529a451b3407dbdab2884baf050000000000fd1a4cc280e8d489da649a37002c016f6465762d6eb17b2300f9daa5ee23266ecf85fea65e42d979a3fde5f475daf03b1172d97badc7095afd76fe4f0441f7f7741eac030000ecff0000dba0c2f7f09ff53c7e4d1ad66e2d070198019f30118447aa9a74f51685f506ae894806792c4a37f2e1cbbd2482929a0d8972b5cf732ea5b0d723859dba3f93aed3b42ee7cac07de09d1d68a60333a882467d2b31aacdf9188549b1125d6c4c9b18c2fb56c57d7dc626e4390796a1eb48274669ab13f8b11d146059f310e2634d593fec65d529f382066664df244e4c90570a70049f399f061f75b7797ce1fe11ea919609d51a41dd3de304bd7c7ed0a456f0ae12516105c9ce887df5a6e0b6a77d596cf88ba6e5c6397c7d5021d7989528fd1739e1c2d87fff00"/536, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x224) keyctl$clear(0x7, r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r6, &(0x7f00000029c0)=""/4096, 0x1000, 0xd36) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x25, 0xd, 0xf2, 0x20, 0x46d, 0xa0e, 0x54b7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x50, 0x2, 0x0, 0x3}}]}}]}}, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000003d40), 0x4) 5.740361832s ago: executing program 2 (id=2622): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x20842, 0x4) fcntl$setstatus(r0, 0x4, 0x42000) openat(r0, 0x0, 0x40001, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18a6000056002312000000000000000007", @ANYRES32=0x0], 0x18}}, 0x0) 5.414199193s ago: executing program 0 (id=2624): r0 = syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'wg1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27"}) ioctl$SYNC_IOC_MERGE(r9, 0xc0303e03, 0x0) ioctl$SW_SYNC_IOC_INC(r7, 0x40045701, &(0x7f0000000a40)=0xfff) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x9, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x44, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x100005, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x7, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1800, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r8, 0x40045701, &(0x7f00000002c0)=0x3) socket$inet6_tcp(0xa, 0x1, 0x0) ptrace(0x10, r0) 5.391498716s ago: executing program 2 (id=2625): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x40007, @empty, 0x3}, 0x1c) r0 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x9, @mcast2, 0x4}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a40000000060a010400000000000000000a0000010900010073797a310000400014000480100001800700010063740000040002"], 0x68}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad1400"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) socket$packet(0x11, 0x3, 0x300) r5 = syz_open_procfs$namespace(0x0, 0x0) open_by_handle_at(r5, &(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00'], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r6 = syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="010027bd7000fbd3df3502000000090001"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4.076551152s ago: executing program 0 (id=2627): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000380)={0x3, 0x0, @ioapic={0x1, 0x0, 0x0, 0x7, 0x0, [{0x2, 0x2, 0x1, '\x00', 0xd}, {0x4e, 0x7d, 0x7, '\x00', 0x9}, {0x0, 0x9, 0xa, '\x00', 0x7}, {0x2, 0x81, 0x1, '\x00', 0x3}, {0x81, 0xb, 0x0, '\x00', 0x6}, {0x7, 0xd, 0x7, '\x00', 0x1}, {0x4, 0x8, 0x1, '\x00', 0x4}, {0x1, 0xff, 0xf5, '\x00', 0x2}, {0x3, 0x7, 0x8, '\x00', 0x5}, {0x3, 0x81, 0x9, '\x00', 0x4}, {0x6e, 0x1, 0x40, '\x00', 0x53}, {0x8, 0xf9, 0x5, '\x00', 0x7}, {0x7, 0x5, 0x0, '\x00', 0x80}, {0x5, 0x5, 0x0, '\x00', 0x1}, {0xff, 0x1, 0x2, '\x00', 0x80}, {0x0, 0xc, 0x67, '\x00', 0x3}, {0xfb, 0x4, 0x9, '\x00', 0x5}, {0xb, 0x5, 0xf, '\x00', 0x6}, {0x7, 0xfe, 0x46, '\x00', 0x7f}, {0x7f, 0x0, 0x8, '\x00', 0x7}, {0xf9, 0x45, 0xc, '\x00', 0x5}, {0x5, 0xdd, 0x18, '\x00', 0x5c}, {0x2, 0x9, 0xee, '\x00', 0x1}, {0xf, 0x4c, 0xf7, '\x00', 0x8}]}}) 4.059127732s ago: executing program 2 (id=2628): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = eventfd(0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000140), 0x10) r3 = syz_io_uring_setup(0x10000839, &(0x7f00000003c0)={0x0, 0x679d, 0x1, 0x2000046, 0x3ce}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b26bd644", 0x38, 0x2400c0c7, 0x1}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000001500)=ANY=[@ANYBLOB="180000000040000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000198500000071000000850000005000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x200000000000000) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) 4.040629723s ago: executing program 3 (id=2629): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x6a8200, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0xa, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x8, [{@broadcast, 0x7ff}, {@remote, 0x4}]}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) 4.017836716s ago: executing program 0 (id=2630): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@hyper, 0x1}) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0172616e732766e58b0d642c7266646e6f", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000480)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f00000001c0)={0x0, 0xaee2, 0x80, 0x1, 0x8b8}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f00000000c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000480)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x11, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) 3.581756892s ago: executing program 2 (id=2631): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) memfd_create(&(0x7f0000000180)='[\vx\'\xa5)\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\x01\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x99\x83\xcd\b\xd1\x02R\xae\x80z8Z\xd2}\xf5\xe4\x9f5\x9b7\xaf\xb7o\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd', 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f00000010c0)=0xffffffffffffff65) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x8, 0x7, 0x4000000000000e52, 0x800000000001, 0x5479, 0x1041, 0x200200000006, 0x0, 0x400000001, 0xfffffffffffffffe, 0x100000000, 0x200000000000001, 0x40000000009, 0x8000000000005, 0x800840068], 0xdddd1000, 0x547d1}) socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x3ff, 0xfffffe0000000001, 0x892, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8982, &(0x7f0000000000)={0x6, 'vlan0\x00', {0x800}, 0x8ff}) socket$nl_netfilter(0x10, 0x3, 0xc) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 3.411472527s ago: executing program 1 (id=2632): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=@bridge_getlink={0x28, 0x12, 0x101, 0x0, 0xffffffe0, {0x7, 0x0, 0x0, 0x0, 0x8448, 0x4000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xc3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x0) pipe2(&(0x7f0000000040), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88440, 0xa9) fcntl$setlease(r1, 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe3d08660d3cd4684, 0x1}) waitid(0x2, r2, &(0x7f0000000480), 0x4, &(0x7f0000000500)) r5 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 3.225038459s ago: executing program 4 (id=2633): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@cpuid={0x64, 0x18, {0x1}}], 0x18}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x100000000000000) syz_kvm_assert_syzos_kvm_exit$x86(r5, 0x6) syz_kvm_assert_syzos_uexit$x86(r5, 0xffffffffffffffff) 3.06856951s ago: executing program 0 (id=2634): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$vsock_stream(0x28, 0x1, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), 0xffffffffffffffff) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x7) sendmmsg$inet6(r1, &(0x7f0000000b40)=[{{&(0x7f00000001c0)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="fae731c725a81ab0a2302e3be87d318c81f58a0ab2bb467f59fcfd946a7ea9f6b996ed8fa818d63c884b4f", 0x2b}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="f0", 0x1}], 0x1}}], 0x3, 0x8008801) sendmmsg$inet6(r1, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000480)='J', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, 0x0, 0x0) 2.952886916s ago: executing program 4 (id=2635): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0xffff000000000000) 2.639986941s ago: executing program 4 (id=2636): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffffffffffc6e) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x20) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x5000) close_range(r2, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)={0xc20002, 0x2, 0xb059184e4dd77197}, 0x18) 2.560226989s ago: executing program 2 (id=2637): socket$rxrpc(0x21, 0x2, 0xa) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x0, 0x28}, 0x28) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0xa0180) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x1002, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x8006, 0xfffffff7, 0x7, 0x3c5b, 0x1, 0x24, 0x22e, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x5, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0xd, 0x8000012f, 0x8004, 0x7, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0xa, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x9, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x13, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x0, 0x3], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x8002, 0x0, 0x9, 0xb, 0x4, 0x45, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x0, 0xac8, 0xbe, 0x2, 0x3, 0x7ff, 0x12b, 0x1, 0xc921, 0xa, 0xffffffff, 0x7, 0x2, 0x120040, 0x807ff, 0x2b59, 0x80a2ed, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x2, 0x0, 0x4, 0x2, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95:\x00\x01\x00\x00', 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000740)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x5, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000100)}, {&(0x7f00000001c0)="13db4bc2e3acafb427c8dc127626c86ea4f13c324ddf10d02563031e3c75fe9f614f21c31a47d91dbd87", 0x2a}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)="6b151671d722df82423e49f857c2f5fe607d8739c0df2d3ac4f573a9386b807a268c4f56a1fce3fefbc6804933a82c4dcde187b653d24e6c84e2f785d11c1f59873bd20154eef932fec54dfee6894b42557729284eb60a5e60", 0x59}, {&(0x7f00000005c0)="7cb4770b4f80bf62916a043a61bee8df648187c64139893f4b1ff9d17701feb1ab0ea858be656d01572ec7d6f193ed109caf87cfa2442d980430ef24efc1fd59adab91e2b13c9d8860933dc8bb94486db4c4cded3dd08d17145de72d5a31cef4528cd24b5af97233e2b751eb44dba7d2a19e206b8c6ecbd07620a5beb5e31201cf6423dd44c9ddfe1f1a738938", 0x8d}], 0x7}, 0x20040000) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r2], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) dup2(r2, r2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x3ffffffd, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fdatasync(r3) 1.944379311s ago: executing program 2 (id=2638): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x182000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f00000003c0)={0x80, 0xa0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x6}, {0x0, 0x8, 0xfffffffd}, {0x4, 0xb, 0xfffffffd}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffc, 0x400009, 0x6, 0x0, 0x17, 0x2, 0x1, 0x8}) r2 = socket$nl_crypto(0x10, 0x3, 0x15) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x7c, 0x0, 0x0, 0x3, 0x7, 0x7, 0x0, 0xff}, {0x2fff, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xdc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xf000, 0x3000, 0x9, 0x0, 0x0, 0x4, 0x20, 0xe, 0x0, 0x3c}, {0xdddd1000, 0x0, 0xd, 0x7, 0x0, 0x0, 0x2, 0xfe, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xf, 0x6, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0xfe}, {0x80a0000, 0xdddd0000, 0x0, 0x1, 0x0, 0x1, 0x0, 0xa, 0x26, 0x0, 0xf8}, {0x80a0000, 0x4}, {0x6000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0x2d00, 0x0, [0x0, 0x0, 0x1]}) ioctl$KVM_SET_GUEST_DEBUG_x86(r5, 0x4048ae9b, &(0x7f00000002c0)={0x30003, 0x0, {[0x8000000000000000, 0x0, 0x2, 0x65, 0x80000000, 0x2, 0x0, 0x8]}}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r6 = syz_clone(0xa3000d00, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x4206, r6) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x1}}, '\x00'}) recvmsg$kcm(r7, &(0x7f0000000a40)={&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000200)=""/160, 0xa0}, {&(0x7f0000000480)=""/203, 0xcb}, {&(0x7f0000000140)=""/7, 0x7}, {&(0x7f0000000300)=""/15, 0xf}, {&(0x7f0000000580)=""/211, 0xd3}, {&(0x7f0000000680)=""/214, 0xd6}, {&(0x7f0000000780)=""/183, 0xb7}, {&(0x7f0000000840)=""/214, 0xd6}], 0x8, &(0x7f0000000c80)=""/217, 0xd9}, 0x40012002) ptrace(0x4208, r6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="dc00000009060101000000000000000004000001050001000700000005000100070000000900020073797a3000000000080009400000006c7df60164558a4b0900020073797a32000000000900020073797a31000000000900020073797a3100000000200007800900120073797a320000000005000300080000000500030053000000580007800c0019400000000000000007050007006c0000000900130073797a31000000000c00184000000000000000030c001b40000000000000000508000a4000006bbd05001500f00000000c00168008000140ac1e010108"], 0xdc}, 0x1, 0x0, 0x0, 0x4088000}, 0x4000) wait4(r6, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) fsopen(&(0x7f0000000c40)='ramfs\x00', 0x0) 1.788053711s ago: executing program 0 (id=2639): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010000100fffffffffffffff50000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000006d85500001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000ac55038014000080100001800a"], 0x565c}}, 0x0) 1.78644999s ago: executing program 3 (id=2640): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x10, 0x0, &(0x7f0000000800)="07000000000000008784860186dde5da", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff}, 0x50) 1.711308598s ago: executing program 0 (id=2641): pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xfffffffffffffffd}) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8005, 0x0, 0xe1, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000000208010000000000000000000a0000070940010073797aff000000009f55ef68"], 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x40001, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}, 0x7}, 0x1c) socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$kcm(0x29, 0x5, 0x0) accept4(r5, 0x0, 0x0, 0x80000) syz_usb_connect(0x1, 0x24, 0x0, 0x0) syz_io_uring_setup(0x4cbf, &(0x7f0000000380)={0x0, 0x64bb, 0x1000, 0x1, 0x4}, &(0x7f0000000400), &(0x7f0000000440)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000040)) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800d1}, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@mask_fadd={0x58, 0x114, 0x8, {{0x7f, 0xfffffc01}, 0xffffffffffffffff, 0x0, 0x8, 0x7c0d08aa, 0x2b, 0xffffffffffffff5d, 0x35, 0x9d}}], 0x58, 0x200080c0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.660541377s ago: executing program 3 (id=2642): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x358f, 0x5e, 0x0, 0x0, 0x100}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, 0x0) 1.59458185s ago: executing program 3 (id=2643): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x84d}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x6222}, @IFLA_IFNAME={0x14, 0x3, 'sit0\x00'}, @IFLA_CARRIER={0x5, 0x21, 0x86}]}, 0x44}}, 0x0) connect$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x24) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 1.203473052s ago: executing program 3 (id=2644): socket$rxrpc(0x21, 0x2, 0xa) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x0, 0x28}, 0x28) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0xa0180) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x1002, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x8006, 0xfffffff7, 0x7, 0x3c5b, 0x1, 0x24, 0x22e, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x5, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0xd, 0x8000012f, 0x8004, 0x7, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0xa, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x9, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x13, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x0, 0x3], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x8002, 0x0, 0x9, 0xb, 0x4, 0x45, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x0, 0xac8, 0xbe, 0x2, 0x3, 0x7ff, 0x12b, 0x1, 0xc921, 0xa, 0xffffffff, 0x7, 0x2, 0x120040, 0x807ff, 0x2b59, 0x80a2ed, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x2, 0x0, 0x4, 0x2, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95:\x00\x01\x00\x00', 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000740)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x5, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000100)}, {&(0x7f00000001c0)="13db4bc2e3acafb427c8dc127626c86ea4f13c324ddf10d02563031e3c75fe9f614f21c31a47d91dbd87", 0x2a}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)="6b151671d722df82423e49f857c2f5fe607d8739c0df2d3ac4f573a9386b807a268c4f56a1fce3fefbc6804933a82c4dcde187b653d24e6c84e2f785d11c1f59873bd20154eef932fec54dfee6894b42557729284eb60a5e60", 0x59}, {&(0x7f00000005c0)="7cb4770b4f80bf62916a043a61bee8df648187c64139893f4b1ff9d17701feb1ab0ea858be656d01572ec7d6f193ed109caf87cfa2442d980430ef24efc1fd59adab91e2b13c9d8860933dc8bb94486db4c4cded3dd08d17145de72d5a31cef4528cd24b5af97233e2b751eb44dba7d2a19e206b8c6ecbd07620a5beb5e31201cf6423dd44c9ddfe1f1a738938", 0x8d}], 0x7}, 0x20040000) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r2], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) dup2(r2, r2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x3ffffffd, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 921.832611ms ago: executing program 4 (id=2645): socket$rxrpc(0x21, 0x2, 0xa) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x0, 0x28}, 0x28) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0xa0180) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x1002, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x8006, 0xfffffff7, 0x7, 0x3c5b, 0x1, 0x24, 0x22e, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x5, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0xd, 0x8000012f, 0x8004, 0x7, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0xa, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x9, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x13, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x0, 0x3], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x8002, 0x0, 0x9, 0xb, 0x4, 0x45, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x0, 0xac8, 0xbe, 0x2, 0x3, 0x7ff, 0x12b, 0x1, 0xc921, 0xa, 0xffffffff, 0x7, 0x2, 0x120040, 0x807ff, 0x2b59, 0x80a2ed, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x2, 0x0, 0x4, 0x2, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95:\x00\x01\x00\x00', 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000740)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x5, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000100)}, {&(0x7f00000001c0)="13db4bc2e3acafb427c8dc127626c86ea4f13c324ddf10d02563031e3c75fe9f614f21c31a47d91dbd87", 0x2a}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)="6b151671d722df82423e49f857c2f5fe607d8739c0df2d3ac4f573a9386b807a268c4f56a1fce3fefbc6804933a82c4dcde187b653d24e6c84e2f785d11c1f59873bd20154eef932fec54dfee6894b42557729284eb60a5e60", 0x59}, {&(0x7f00000005c0)="7cb4770b4f80bf62916a043a61bee8df648187c64139893f4b1ff9d17701feb1ab0ea858be656d01572ec7d6f193ed109caf87cfa2442d980430ef24efc1fd59adab91e2b13c9d8860933dc8bb94486db4c4cded3dd08d17145de72d5a31cef4528cd24b5af97233e2b751eb44dba7d2a19e206b8c6ecbd07620a5beb5e31201cf6423dd44c9ddfe1f1a738938", 0x8d}], 0x7}, 0x20040000) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r2], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) dup2(r2, r2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x3ffffffd, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 258.820543ms ago: executing program 3 (id=2646): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c0000f5"], 0x78) 164.90438ms ago: executing program 1 (id=2647): r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') r1 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='source', &(0x7f0000001bc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8br0, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000300)={r4, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc01064d2, &(0x7f0000000140)={r5}) kernel console output (not intermixed with test programs): 9634.260:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13624 comm="syz.2.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4fb18f749 code=0x7ffc0000 [ 695.703294][ T30] audit: type=1326 audit(1766989634.260:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13624 comm="syz.2.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa4fb18f749 code=0x7ffc0000 [ 695.726826][ T30] audit: type=1326 audit(1766989634.260:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13624 comm="syz.2.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4fb18f749 code=0x7ffc0000 [ 695.750312][ T30] audit: type=1326 audit(1766989634.260:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13624 comm="syz.2.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa4fb18f749 code=0x7ffc0000 [ 695.857973][ T30] audit: type=1326 audit(1766989634.270:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13624 comm="syz.2.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4fb18f749 code=0x7ffc0000 [ 695.983243][ T30] audit: type=1326 audit(1766989634.270:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13624 comm="syz.2.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4fb18f749 code=0x7ffc0000 [ 697.095589][ T30] audit: type=1400 audit(1766989636.110:760): avc: denied { ioctl } for pid=13640 comm="syz.1.2024" path="/dev/ptyq7" dev="devtmpfs" ino=126 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 697.214239][T13647] FAULT_INJECTION: forcing a failure. [ 697.214239][T13647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 697.227633][T13647] CPU: 0 UID: 0 PID: 13647 Comm: syz.4.2026 Tainted: G L syzkaller #0 PREEMPT(full) [ 697.227657][T13647] Tainted: [L]=SOFTLOCKUP [ 697.227663][T13647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 697.227672][T13647] Call Trace: [ 697.227677][T13647] [ 697.227683][T13647] dump_stack_lvl+0x16c/0x1f0 [ 697.227708][T13647] should_fail_ex+0x512/0x640 [ 697.227735][T13647] _copy_from_iter+0x2a4/0x16c0 [ 697.227760][T13647] ? irqentry_exit+0x1dd/0x8c0 [ 697.227786][T13647] ? __pfx__copy_from_iter+0x10/0x10 [ 697.227818][T13647] netlink_sendmsg+0x820/0xdd0 [ 697.227841][T13647] ? __pfx_netlink_sendmsg+0x10/0x10 [ 697.227868][T13647] ____sys_sendmsg+0xa5d/0xc30 [ 697.227890][T13647] ? copy_msghdr_from_user+0x10a/0x160 [ 697.227906][T13647] ? __pfx_____sys_sendmsg+0x10/0x10 [ 697.227930][T13647] ? __lock_acquire+0x436/0x2890 [ 697.227956][T13647] ___sys_sendmsg+0x134/0x1d0 [ 697.227974][T13647] ? __pfx____sys_sendmsg+0x10/0x10 [ 697.227990][T13647] ? find_held_lock+0x2b/0x80 [ 697.228032][T13647] ? __schedule+0x1090/0x6150 [ 697.228057][T13647] __sys_sendmsg+0x16d/0x220 [ 697.228074][T13647] ? __pfx___sys_sendmsg+0x10/0x10 [ 697.228106][T13647] do_syscall_64+0xcd/0xf80 [ 697.228128][T13647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.228144][T13647] RIP: 0033:0x7f0308d8f749 [ 697.228158][T13647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 697.228173][T13647] RSP: 002b:00007f0309cb8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 697.228189][T13647] RAX: ffffffffffffffda RBX: 00007f0308fe6090 RCX: 00007f0308d8f749 [ 697.228200][T13647] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000009 [ 697.228210][T13647] RBP: 00007f0309cb8090 R08: 0000000000000000 R09: 0000000000000000 [ 697.228218][T13647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 697.228228][T13647] R13: 00007f0308fe6128 R14: 00007f0308fe6090 R15: 00007ffe4e5ca418 [ 697.228251][T13647] [ 697.613300][ T7453] usb 4-1: new low-speed USB device number 59 using dummy_hcd [ 698.048022][ T30] audit: type=1400 audit(1766989636.720:761): avc: denied { bind } for pid=13648 comm="syz.1.2027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 698.167691][ T7453] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 698.179664][ T7453] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 698.204645][ T7453] usb 4-1: config 0 has no interface number 0 [ 698.212003][ T7453] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 698.222840][ T7453] usb 4-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 698.236324][ T7453] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 698.245406][ T7453] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.262349][ T7453] usb 4-1: config 0 descriptor?? [ 698.344053][ T7453] ldusb 4-1:0.55: Interrupt in endpoint not found [ 698.370468][T13658] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 698.370468][T13658] program syz.2.2029 not setting count and/or reply_len properly [ 698.657136][ T30] audit: type=1400 audit(1766989637.670:762): avc: denied { ioctl } for pid=13642 comm="syz.3.2025" path="socket:[37663]" dev="sockfs" ino=37663 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 698.731170][T13662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 698.739841][T13662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.764738][T12353] usb 4-1: USB disconnect, device number 59 [ 699.254362][ T7453] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 699.414399][ T7453] usb 3-1: config 0 has an invalid interface number: 49 but max is 0 [ 699.422559][ T7453] usb 3-1: config 0 has no interface number 0 [ 699.428950][ T7453] usb 3-1: config 0 interface 49 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 699.511465][ T7453] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 699.525692][ T7453] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.541072][ T7453] usb 3-1: Product: syz [ 699.545892][ T7453] usb 3-1: Manufacturer: syz [ 699.550616][ T7453] usb 3-1: SerialNumber: syz [ 699.555892][T13672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2033'. [ 699.565805][T13672] syz_tun: refused to change device tx_queue_len [ 699.572510][ T7453] usb 3-1: config 0 descriptor?? [ 700.518872][T13656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.527458][T13656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.538529][ T7453] qmi_wwan 3-1:0.49: probe with driver qmi_wwan failed with error -22 [ 700.559598][ T7453] usb 3-1: USB disconnect, device number 65 [ 701.529608][T13698] kAFS: unable to lookup cell 'Þ({^ú@' [ 702.143809][ T5965] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 702.347506][ T5965] usb 5-1: Using ep0 maxpacket: 32 [ 702.453788][ T5965] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 702.461937][ T5965] usb 5-1: config 0 has no interface number 0 [ 702.483294][ T5965] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 702.521789][ T5965] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 702.537377][ T5965] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.561866][ T5965] usb 5-1: Product: syz [ 702.575301][ T5965] usb 5-1: Manufacturer: syz [ 702.585836][ T5965] usb 5-1: SerialNumber: syz [ 702.597181][ T5965] usb 5-1: config 0 descriptor?? [ 702.614797][ T5965] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 702.630779][ T5965] em28xx 5-1:0.132: Video interface 132 found: [ 702.706779][T13718] rdma_op ffff88806bb5f1f0 conn xmit_rdma 0000000000000000 [ 703.373927][ T5965] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 703.685474][T13725] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2050'. [ 703.711881][T13725] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 703.885305][ T9] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 704.023856][ T5965] em28xx 5-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 704.032484][ T5965] em28xx 5-1:0.132: failed to read eeprom (err=-5) [ 704.039046][ T5965] em28xx 5-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 704.054855][ T9] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 704.063300][ T9] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 704.073998][ T9] usb 2-1: config 220 has no interface number 2 [ 704.080234][ T9] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 704.093519][ T9] usb 2-1: config 220 interface 0 has no altsetting 0 [ 704.100265][ T9] usb 2-1: config 220 interface 76 has no altsetting 0 [ 704.109246][ T9] usb 2-1: config 220 interface 1 has no altsetting 0 [ 704.113224][ T5965] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 704.124437][ T5965] em28xx 5-1:0.132: analog set to bulk mode. [ 704.125750][ T9] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 704.130471][ T5920] em28xx 5-1:0.132: Registering V4L2 extension [ 704.145818][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.149636][ T5965] usb 5-1: USB disconnect, device number 50 [ 704.169692][ T5965] em28xx 5-1:0.132: Disconnecting em28xx [ 704.172833][ T9] usb 2-1: Product: syz [ 704.189690][ T9] usb 2-1: Manufacturer: syz [ 704.194474][ T9] usb 2-1: SerialNumber: syz [ 704.266576][ T5920] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 704.274817][ T5920] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 704.281937][ T5920] em28xx 5-1:0.132: No AC97 audio processor [ 704.288657][ T5920] usb 5-1: Decoder not found [ 704.293304][ T5920] em28xx 5-1:0.132: failed to create media graph [ 704.299651][ T5920] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 704.307203][ T5920] em28xx 5-1:0.132: Remote control support is not available for this card. [ 704.315829][ T5965] em28xx 5-1:0.132: Closing input extension [ 704.324836][ T5965] em28xx 5-1:0.132: Freeing device [ 704.417955][ T9] usb 2-1: selecting invalid altsetting 0 [ 704.439273][ T9] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 704.448968][ T9] uvcvideo 2-1:220.0: No valid video chain found. [ 704.456205][ T7453] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 704.469885][ T9] usb 2-1: selecting invalid altsetting 0 [ 704.475642][ T9] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 704.498637][ T9] usb 2-1: USB disconnect, device number 53 [ 704.613719][ T7453] usb 4-1: Using ep0 maxpacket: 32 [ 704.786861][ T7453] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 704.807206][ T7453] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.819151][ T7453] usb 4-1: config 0 descriptor?? [ 705.289515][T13740] netlink: 'syz.4.2054': attribute type 9 has an invalid length. [ 705.811087][ T7453] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 705.825489][ T7453] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 705.840087][ T7453] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 705.848148][ T7453] usb 4-1: media controller created [ 705.872772][ T7453] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 706.639768][T13748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 706.657909][T13748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 707.693444][T13760] netlink: 'syz.1.2061': attribute type 9 has an invalid length. [ 707.846097][ T7453] az6027: usb out operation failed. (-71) [ 707.869176][ T7453] az6027: usb out operation failed. (-71) [ 707.883194][ T7453] stb0899_attach: Driver disabled by Kconfig [ 707.889177][ T7453] az6027: no front-end attached [ 707.889177][ T7453] [ 707.909802][ T7453] az6027: usb out operation failed. (-71) [ 707.937484][ T7453] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 707.957139][ T7453] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input17 [ 708.051779][T13765] SELinux: failed to load policy [ 708.084882][ T7453] dvb-usb: schedule remote query interval to 400 msecs. [ 708.132171][ T7453] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 708.152807][ T7453] usb 4-1: USB disconnect, device number 60 [ 708.649993][T13776] JFS: discard option not supported on device [ 708.657295][T13776] Mount JFS Failure: -22 [ 708.661530][T13776] jfs_mount failed w/return code = -22 [ 708.731172][ T7453] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 710.471695][ T24] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 710.663396][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 710.670088][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 710.691196][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 710.702901][ T24] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 710.713262][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.743199][ T5965] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 710.751722][ T24] usb 2-1: config 0 descriptor?? [ 710.893217][ T5965] usb 4-1: Using ep0 maxpacket: 16 [ 710.900130][ T5965] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 710.913294][ T5965] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 710.917457][ T9] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 710.950770][ T5965] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 711.021129][ T5965] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 711.048534][ T5965] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.085938][ T5965] usb 4-1: config 0 descriptor?? [ 711.097285][ T9] usb 5-1: config 0 has an invalid interface number: 49 but max is 0 [ 711.105784][ T9] usb 5-1: config 0 has no interface number 0 [ 711.114980][ T9] usb 5-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x96, changing to 0x86 [ 711.146375][ T9] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 711.156761][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.175695][ T9] usb 5-1: Product: syz [ 711.182422][T13789] vivid-003: ================= START STATUS ================= [ 711.194519][ T9] usb 5-1: Manufacturer: syz [ 711.202454][T13789] vivid-003: Radio HW Seek Mode: Bounded [ 711.211764][ T9] usb 5-1: SerialNumber: syz [ 711.222635][T13789] vivid-003: Radio Programmable HW Seek: false [ 711.231096][ T9] usb 5-1: config 0 descriptor?? [ 711.245393][T13789] vivid-003: RDS Rx I/O Mode: Block I/O [ 711.256985][T13789] vivid-003: Generate RBDS Instead of RDS: false [ 711.270652][T13789] vivid-003: RDS Reception: true [ 711.280188][T13789] vivid-003: RDS Program Type: 0 inactive [ 711.287594][T13789] vivid-003: RDS PS Name: inactive [ 711.293505][T13789] vivid-003: RDS Radio Text: inactive [ 711.300381][T13789] vivid-003: RDS Traffic Announcement: false inactive [ 711.312781][T13789] vivid-003: RDS Traffic Program: false inactive [ 711.314459][ T24] hid (null): global environment stack underflow [ 711.330378][T13789] vivid-003: RDS Music: false inactive [ 711.333065][ T24] hid (null): unknown global tag 0x7c [ 711.343064][T13789] vivid-003: ================== END STATUS ================== [ 711.397797][ T24] hid (null): unknown global tag 0xd [ 711.403608][ T24] hid (null): report_id 9959 is invalid [ 711.409254][ T24] hid (null): nested delimiters [ 711.415813][ T24] hid (null): unknown global tag 0xc [ 711.422629][ T24] hid (null): unknown global tag 0xe7 [ 711.450988][ T24] cougar 0003:060B:500A.000B: unknown main item tag 0x0 [ 711.514126][T13805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 711.523041][ T24] cougar 0003:060B:500A.000B: unknown main item tag 0x0 [ 711.533747][ T24] cougar 0003:060B:500A.000B: unknown main item tag 0x0 [ 711.542844][ T5965] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 711.563484][T13805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 711.571341][ T24] cougar 0003:060B:500A.000B: unknown main item tag 0x0 [ 711.578426][ T5965] microsoft 0003:045E:07DA.000C: ignoring exceeding usage max [ 711.594161][ T24] cougar 0003:060B:500A.000B: unknown main item tag 0x0 [ 711.604636][ T5965] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 711.614549][ T24] cougar 0003:060B:500A.000B: unknown main item tag 0x0 [ 711.621500][ T24] cougar 0003:060B:500A.000B: unknown main item tag 0x0 [ 711.623200][ T9] usb 5-1: USB disconnect, device number 51 [ 711.629403][ T5965] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 711.642913][ T24] cougar 0003:060B:500A.000B: global environment stack underflow [ 711.698781][ T5965] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000C/input/input18 [ 711.712528][ T24] cougar 0003:060B:500A.000B: item 0 4 1 11 parsing failed [ 711.720413][ T24] cougar 0003:060B:500A.000B: parse failed [ 711.730759][ T24] cougar 0003:060B:500A.000B: probe with driver cougar failed with error -22 [ 711.838422][ T5965] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 711.875349][ T5965] usb 4-1: USB disconnect, device number 61 [ 712.665685][ T30] audit: type=1400 audit(1766989651.680:763): avc: denied { name_bind } for pid=13826 comm="syz.2.2082" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 712.756184][T13830] fuse: Bad value for 'fd' [ 713.395119][T13847] SELinux: failed to load policy [ 713.537958][ T7453] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 713.763217][ T7453] usb 4-1: Using ep0 maxpacket: 16 [ 714.117782][ T7453] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 714.134043][ T9] usb 2-1: USB disconnect, device number 54 [ 714.149409][ T7453] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 714.165097][ T7453] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.179412][ T7453] usb 4-1: config 0 descriptor?? [ 715.203297][ T5821] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 715.373193][ T5821] usb 3-1: Using ep0 maxpacket: 32 [ 715.598063][ T5821] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 715.606867][ T5821] usb 3-1: config 0 has no interface number 0 [ 715.612989][ T5821] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 715.629839][ T5821] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 715.639821][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.647958][ T5821] usb 3-1: Product: syz [ 715.652965][ T5821] usb 3-1: Manufacturer: syz [ 715.657857][ T5821] usb 3-1: SerialNumber: syz [ 715.756146][ T5821] usb 3-1: config 0 descriptor?? [ 715.764819][ T5821] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 715.774748][ T5821] em28xx 3-1:0.132: Video interface 132 found: [ 717.013245][ T5821] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 717.034035][ T7453] usbhid 4-1:0.0: can't add hid device: -71 [ 717.041791][ T7453] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 717.057119][ T7453] usb 4-1: USB disconnect, device number 62 [ 717.686943][ T5821] em28xx 3-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 717.782224][ T5821] em28xx 3-1:0.132: failed to read eeprom (err=-5) [ 717.839062][ T5821] em28xx 3-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 717.936218][ T5821] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 717.980262][ T5821] em28xx 3-1:0.132: analog set to bulk mode. [ 718.191315][ T9] em28xx 3-1:0.132: Registering V4L2 extension [ 718.202292][ T5821] usb 3-1: USB disconnect, device number 66 [ 718.224087][ T5821] em28xx 3-1:0.132: Disconnecting em28xx [ 718.609727][ T9] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 718.628936][ T9] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 718.673225][ T9] em28xx 3-1:0.132: No AC97 audio processor [ 718.690121][ T9] usb 3-1: Decoder not found [ 718.709462][ T9] em28xx 3-1:0.132: failed to create media graph [ 718.726296][ T9] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 718.759738][ T9] em28xx 3-1:0.132: Remote control support is not available for this card. [ 718.794291][ T5821] em28xx 3-1:0.132: Closing input extension [ 718.817134][ T5821] em28xx 3-1:0.132: Freeing device [ 719.598332][ T30] audit: type=1400 audit(1766989658.610:764): avc: denied { getopt } for pid=13922 comm="syz.0.2107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 719.757912][ T9] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 719.973213][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 719.979822][ T9] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 719.993325][ T9] usb 2-1: config 0 has no interface number 0 [ 719.999419][ T9] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 720.052822][ T9] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 720.062258][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.070275][ T9] usb 2-1: Product: syz [ 720.074921][ T9] usb 2-1: Manufacturer: syz [ 720.079509][ T9] usb 2-1: SerialNumber: syz [ 720.094235][ T9] usb 2-1: config 0 descriptor?? [ 720.158180][T13937] FAULT_INJECTION: forcing a failure. [ 720.158180][T13937] name failslab, interval 1, probability 0, space 0, times 0 [ 720.170920][T13937] CPU: 0 UID: 0 PID: 13937 Comm: syz.0.2110 Tainted: G L syzkaller #0 PREEMPT(full) [ 720.170946][T13937] Tainted: [L]=SOFTLOCKUP [ 720.170951][T13937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 720.170959][T13937] Call Trace: [ 720.170963][T13937] [ 720.170967][T13937] dump_stack_lvl+0x16c/0x1f0 [ 720.170984][T13937] should_fail_ex+0x512/0x640 [ 720.171000][T13937] ? __kvmalloc_node_noprof+0x129/0xa40 [ 720.171014][T13937] should_failslab+0xc2/0x120 [ 720.171028][T13937] __kvmalloc_node_noprof+0x14a/0xa40 [ 720.171039][T13937] ? trace_kmalloc+0x2b/0xb0 [ 720.171051][T13937] ? __kmalloc_noprof+0x35d/0x910 [ 720.171066][T13937] ? jent_entropy_collector_alloc+0x76/0x160 [ 720.171083][T13937] ? jent_entropy_collector_alloc+0x2d/0x160 [ 720.171101][T13937] ? jent_entropy_collector_alloc+0x76/0x160 [ 720.171117][T13937] jent_entropy_collector_alloc+0x76/0x160 [ 720.171133][T13937] jent_kcapi_init+0x154/0x230 [ 720.171149][T13937] ? __pfx_jent_kcapi_init+0x10/0x10 [ 720.171165][T13937] crypto_create_tfm_node+0x1c0/0x350 [ 720.171174][T13937] ? __kmalloc_noprof+0x35d/0x910 [ 720.171191][T13937] crypto_alloc_tfm_node+0x102/0x260 [ 720.171203][T13937] drbg_kcapi_seed+0xb00/0xee0 [ 720.171219][T13937] ? __pfx_drbg_kcapi_seed+0x10/0x10 [ 720.171233][T13937] ? find_held_lock+0x2b/0x80 [ 720.171249][T13937] ? __might_fault+0x13b/0x190 [ 720.171262][T13937] crypto_rng_reset+0x7b/0x130 [ 720.171275][T13937] ? __pfx_rng_setkey+0x10/0x10 [ 720.171287][T13937] alg_setsockopt+0x499/0xef0 [ 720.171299][T13937] ? __pfx_alg_setsockopt+0x10/0x10 [ 720.171312][T13937] ? selinux_socket_setsockopt+0x6a/0x80 [ 720.171324][T13937] ? __pfx_alg_setsockopt+0x10/0x10 [ 720.171335][T13937] do_sock_setsockopt+0xf3/0x1d0 [ 720.171350][T13937] __sys_setsockopt+0x1a0/0x230 [ 720.171362][T13937] __x64_sys_setsockopt+0xbd/0x160 [ 720.171370][T13937] ? do_syscall_64+0x9a/0xf80 [ 720.171384][T13937] do_syscall_64+0xcd/0xf80 [ 720.171397][T13937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.171407][T13937] RIP: 0033:0x7fe809f8f749 [ 720.171416][T13937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 720.171426][T13937] RSP: 002b:00007fe80ae8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 720.171436][T13937] RAX: ffffffffffffffda RBX: 00007fe80a1e6090 RCX: 00007fe809f8f749 [ 720.171442][T13937] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000005 [ 720.171448][T13937] RBP: 00007fe80ae8c090 R08: 0000000000000440 R09: 0000000000000000 [ 720.171454][T13937] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 720.171460][T13937] R13: 00007fe80a1e6128 R14: 00007fe80a1e6090 R15: 00007ffc6c01b0c8 [ 720.171473][T13937] [ 720.171656][T13937] DRBG: Continuing without Jitter RNG [ 720.629886][ T9] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 720.642584][ T9] em28xx 2-1:0.132: Video interface 132 found: [ 721.843301][ T9] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 721.849724][T13946] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 722.616239][ T9] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 722.628400][ T9] em28xx 2-1:0.132: board has no eeprom [ 722.753226][ T9] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 722.936634][ T9] em28xx 2-1:0.132: analog set to bulk mode. [ 722.942791][T13233] em28xx 2-1:0.132: Registering V4L2 extension [ 723.262524][ T7453] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 723.273995][ T9] usb 2-1: USB disconnect, device number 55 [ 723.281530][ T9] em28xx 2-1:0.132: Disconnecting em28xx [ 723.300846][ T30] audit: type=1400 audit(1766989662.310:765): avc: denied { accept } for pid=13965 comm="syz.2.2118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 723.423223][ T7453] usb 5-1: Using ep0 maxpacket: 8 [ 723.431394][T13233] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 723.449327][ T7453] usb 5-1: config 0 has an invalid interface number: 200 but max is 0 [ 723.460678][T13233] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 723.494963][ T7453] usb 5-1: config 0 has no interface number 0 [ 723.505507][T13233] em28xx 2-1:0.132: No AC97 audio processor [ 723.518320][ T7453] usb 5-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 723.573331][T13233] usb 2-1: Decoder not found [ 723.578202][T13233] em28xx 2-1:0.132: failed to create media graph [ 723.603915][ T7453] usb 5-1: config 0 interface 200 has no altsetting 0 [ 723.619627][T13233] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 723.627792][ T7453] usb 5-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 723.652858][ T7453] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.667055][T13984] usb usb1: usbfs: process 13984 (syz.0.2122) did not claim interface 9 before use [ 723.677058][ T7453] usb 5-1: Product: syz [ 723.685380][ T7453] usb 5-1: Manufacturer: syz [ 723.695286][ T7453] usb 5-1: SerialNumber: syz [ 723.767920][T13233] em28xx 2-1:0.132: Remote control support is not available for this card. [ 723.780163][ T7453] usb 5-1: config 0 descriptor?? [ 723.789933][ T9] em28xx 2-1:0.132: Closing input extension [ 723.795426][T13987] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2124'. [ 723.804031][ T9] em28xx 2-1:0.132: Freeing device [ 724.315595][ T7453] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.200/input/input19 [ 724.332400][ T7453] usb 5-1: USB disconnect, device number 52 [ 724.884603][T13996] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2125'. [ 724.893729][T13996] lo: Caught tx_queue_len zero misconfig [ 725.524347][ T30] audit: type=1326 audit(1766989664.160:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13998 comm="syz.1.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727598f749 code=0x7ffc0000 [ 725.968225][T14015] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 725.982145][ T30] audit: type=1326 audit(1766989664.160:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13998 comm="syz.1.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f727598f749 code=0x7ffc0000 [ 726.043508][ T30] audit: type=1326 audit(1766989664.170:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13998 comm="syz.1.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727598f749 code=0x7ffc0000 [ 726.096480][T14016] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 726.096480][T14016] program syz.2.2128 not setting count and/or reply_len properly [ 726.433318][ T30] audit: type=1326 audit(1766989664.170:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13998 comm="syz.1.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f727598f749 code=0x7ffc0000 [ 726.923679][ T30] audit: type=1326 audit(1766989664.170:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13998 comm="syz.1.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727598f749 code=0x7ffc0000 [ 726.973304][ T30] audit: type=1326 audit(1766989664.180:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13998 comm="syz.1.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727598f749 code=0x7ffc0000 [ 727.003248][T12353] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 727.214671][T12353] usb 3-1: config 0 has an invalid interface number: 49 but max is 0 [ 727.222864][T12353] usb 3-1: config 0 has no interface number 0 [ 727.356325][T12353] usb 3-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x96, changing to 0x86 [ 727.476266][T12353] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 727.496620][T12353] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.514722][T12353] usb 3-1: Product: syz [ 727.520791][T12353] usb 3-1: Manufacturer: syz [ 727.528813][T12353] usb 3-1: SerialNumber: syz [ 727.603222][ T7453] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 727.624139][T12353] usb 3-1: config 0 descriptor?? [ 727.732205][T14042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2138'. [ 727.803667][ T7453] usb 2-1: device descriptor read/64, error -71 [ 728.237785][T12353] usb 3-1: USB disconnect, device number 67 [ 728.337203][ T7453] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 728.546895][ T7453] usb 2-1: device descriptor read/64, error -71 [ 728.642534][T14053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2140'. [ 728.711255][ T7453] usb usb2-port1: attempt power cycle [ 729.066007][ T7453] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 729.127322][ T7453] usb 2-1: device descriptor read/8, error -71 [ 729.437840][ T7453] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 729.463613][ T7453] usb 2-1: device descriptor read/8, error -71 [ 729.573409][ T7453] usb usb2-port1: unable to enumerate USB device [ 729.798617][T14064] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2146'. [ 729.925052][ T9] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 730.485155][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 730.492937][ T9] usb 4-1: config 0 has an invalid interface number: 145 but max is 0 [ 730.501159][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 730.511312][ T9] usb 4-1: config 0 has no interface number 0 [ 730.517762][ T9] usb 4-1: config 0 interface 145 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 730.533519][ T9] usb 4-1: New USB device found, idVendor=7d72, idProduct=445f, bcdDevice=98.21 [ 730.542972][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.551127][ T9] usb 4-1: Product: syz [ 730.555490][ T9] usb 4-1: Manufacturer: syz [ 730.562257][ T9] usb 4-1: SerialNumber: syz [ 730.572144][ T9] usb 4-1: config 0 descriptor?? [ 730.578880][ T9] usb 4-1: bad CDC descriptors [ 731.303268][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 731.384513][T14087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2152'. [ 732.675808][ T9] usb 4-1: USB disconnect, device number 63 [ 732.828297][T14106] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2154'. [ 732.872490][T14108] FAULT_INJECTION: forcing a failure. [ 732.872490][T14108] name failslab, interval 1, probability 0, space 0, times 0 [ 732.917093][T14108] CPU: 0 UID: 0 PID: 14108 Comm: syz.0.2158 Tainted: G L syzkaller #0 PREEMPT(full) [ 732.917118][T14108] Tainted: [L]=SOFTLOCKUP [ 732.917124][T14108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 732.917133][T14108] Call Trace: [ 732.917139][T14108] [ 732.917145][T14108] dump_stack_lvl+0x16c/0x1f0 [ 732.917167][T14108] should_fail_ex+0x512/0x640 [ 732.917183][T14108] ? __kmalloc_noprof+0xca/0x910 [ 732.917201][T14108] should_failslab+0xc2/0x120 [ 732.917215][T14108] __kmalloc_noprof+0xeb/0x910 [ 732.917231][T14108] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 732.917249][T14108] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 732.917264][T14108] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 732.917282][T14108] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 732.917299][T14108] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 732.917318][T14108] ? bpf_lsm_capable+0x9/0x10 [ 732.917330][T14108] ? security_capable+0x7e/0x260 [ 732.917341][T14108] ? ns_capable+0xd7/0x110 [ 732.917356][T14108] genl_rcv_msg+0x55c/0x800 [ 732.917372][T14108] ? __pfx_genl_rcv_msg+0x10/0x10 [ 732.917386][T14108] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 732.917397][T14108] ? __pfx_nl80211_connect+0x10/0x10 [ 732.917405][T14108] ? __pfx_nl80211_post_doit+0x10/0x10 [ 732.917421][T14108] netlink_rcv_skb+0x158/0x420 [ 732.917433][T14108] ? __pfx_genl_rcv_msg+0x10/0x10 [ 732.917448][T14108] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 732.917466][T14108] ? netlink_deliver_tap+0x1ae/0xd30 [ 732.917479][T14108] genl_rcv+0x28/0x40 [ 732.917491][T14108] netlink_unicast+0x5aa/0x870 [ 732.917505][T14108] ? __pfx_netlink_unicast+0x10/0x10 [ 732.917523][T14108] netlink_sendmsg+0x8c8/0xdd0 [ 732.917537][T14108] ? __pfx_netlink_sendmsg+0x10/0x10 [ 732.917559][T14108] ____sys_sendmsg+0xa5d/0xc30 [ 732.917573][T14108] ? copy_msghdr_from_user+0x10a/0x160 [ 732.917583][T14108] ? __pfx_____sys_sendmsg+0x10/0x10 [ 732.917603][T14108] ___sys_sendmsg+0x134/0x1d0 [ 732.917613][T14108] ? __pfx____sys_sendmsg+0x10/0x10 [ 732.917641][T14108] __sys_sendmsg+0x16d/0x220 [ 732.917651][T14108] ? __pfx___sys_sendmsg+0x10/0x10 [ 732.917670][T14108] do_syscall_64+0xcd/0xf80 [ 732.917684][T14108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.917695][T14108] RIP: 0033:0x7fe809f8f749 [ 732.917703][T14108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 732.917713][T14108] RSP: 002b:00007fe80aead038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 732.917723][T14108] RAX: ffffffffffffffda RBX: 00007fe80a1e5fa0 RCX: 00007fe809f8f749 [ 732.917729][T14108] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 732.917735][T14108] RBP: 00007fe80aead090 R08: 0000000000000000 R09: 0000000000000000 [ 732.917741][T14108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 732.917746][T14108] R13: 00007fe80a1e6038 R14: 00007fe80a1e5fa0 R15: 00007ffc6c01b0c8 [ 732.917760][T14108] [ 733.027065][T14110] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2154'. [ 733.233177][ T9] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 733.400201][T14110] lo speed is unknown, defaulting to 1000 [ 733.413339][T14110] lo speed is unknown, defaulting to 1000 [ 733.429968][T14110] lo speed is unknown, defaulting to 1000 [ 733.527376][T14110] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 733.613208][ T24] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 733.763234][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 733.780836][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 733.812408][ T24] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 733.846034][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.879302][ T24] usb 5-1: config 0 descriptor?? [ 733.932815][T14110] lo speed is unknown, defaulting to 1000 [ 733.965722][T14110] lo speed is unknown, defaulting to 1000 [ 733.986067][T14110] lo speed is unknown, defaulting to 1000 [ 734.025522][T14110] lo speed is unknown, defaulting to 1000 [ 734.066989][T14110] lo speed is unknown, defaulting to 1000 [ 734.704593][ T9] usb 4-1: config 1 has an invalid descriptor of length 116, skipping remainder of the config [ 734.715009][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 734.724835][ T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 734.735534][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 734.743769][ T9] usb 4-1: SerialNumber: syz [ 735.162155][ T9] usb 4-1: 0:2 : does not exist [ 735.168440][ T9] usb 4-1: unit 5 not found! [ 735.206108][ T9] usb 4-1: USB disconnect, device number 64 [ 735.922770][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 735.928750][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 735.944161][ T24] usb 5-1: USB disconnect, device number 53 [ 736.754268][T14159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 736.872827][T14159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 737.118828][T14159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 738.489971][ T24] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 738.766885][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 738.990722][ T24] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 739.020924][ T24] usb 3-1: config 0 has no interface number 0 [ 739.043263][ T24] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 739.070124][ T24] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 739.080429][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.094863][ T24] usb 3-1: Product: syz [ 739.099024][ T24] usb 3-1: Manufacturer: syz [ 739.106156][ T24] usb 3-1: SerialNumber: syz [ 739.119078][ T24] usb 3-1: config 0 descriptor?? [ 739.134131][ T24] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 739.155721][ T24] em28xx 3-1:0.132: Video interface 132 found: [ 739.468229][T14199] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2183'. [ 739.626552][ T24] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 740.515165][T14221] netlink: 284 bytes leftover after parsing attributes in process `syz.1.2189'. [ 740.527173][ T24] em28xx 3-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 740.540521][ T24] em28xx 3-1:0.132: failed to read eeprom (err=-5) [ 740.553671][ T24] em28xx 3-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 740.632764][T14226] syzkaller0: entered promiscuous mode [ 740.635281][ T24] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 740.638445][T14226] syzkaller0: entered allmulticast mode [ 740.661058][ T24] em28xx 3-1:0.132: analog set to bulk mode. [ 740.673759][ T49] em28xx 3-1:0.132: Registering V4L2 extension [ 740.695433][ T24] usb 3-1: USB disconnect, device number 68 [ 740.713703][ T30] audit: type=1400 audit(1766989679.720:772): avc: denied { map } for pid=14223 comm="syz.3.2190" path="socket:[39799]" dev="sockfs" ino=39799 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 740.718786][ T24] em28xx 3-1:0.132: Disconnecting em28xx [ 741.021042][T14231] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 741.021042][T14231] program syz.4.2192 not setting count and/or reply_len properly [ 741.038978][ T30] audit: type=1400 audit(1766989679.720:773): avc: denied { read accept } for pid=14223 comm="syz.3.2190" path="socket:[39799]" dev="sockfs" ino=39799 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 741.271232][ T49] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 741.278299][ T49] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 741.287317][ T49] em28xx 3-1:0.132: No AC97 audio processor [ 741.301482][ T49] usb 3-1: Decoder not found [ 741.306816][ T49] em28xx 3-1:0.132: failed to create media graph [ 741.726489][ T49] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 741.742069][ T49] em28xx 3-1:0.132: Remote control support is not available for this card. [ 741.759953][ T24] em28xx 3-1:0.132: Closing input extension [ 741.772024][ T24] em28xx 3-1:0.132: Freeing device [ 741.792402][ T30] audit: type=1400 audit(1766989680.800:774): avc: denied { ioctl } for pid=14239 comm="syz.3.2194" path="socket:[38877]" dev="sockfs" ino=38877 ioctlcmd=0x894c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 741.821485][ T7453] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 742.337152][ T7453] usb 5-1: config 0 has an invalid interface number: 49 but max is 0 [ 742.358126][ T7453] usb 5-1: config 0 has no interface number 0 [ 742.364699][ T7453] usb 5-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x96, changing to 0x86 [ 742.414684][ T7453] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 742.431877][ T7453] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.453552][ T7453] usb 5-1: Product: syz [ 742.459541][ T7453] usb 5-1: Manufacturer: syz [ 742.464265][ T7453] usb 5-1: SerialNumber: syz [ 742.570060][ T7453] usb 5-1: config 0 descriptor?? [ 742.703195][ T24] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 742.978579][T14231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 743.009544][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 743.016093][T14231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 743.026158][ T24] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 743.040288][ T24] usb 4-1: config 0 has no interface number 0 [ 743.136396][ T24] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 743.153615][ T7453] usb 5-1: USB disconnect, device number 54 [ 743.168540][ T24] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 743.185498][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.206788][ T24] usb 4-1: Product: syz [ 743.216862][ T24] usb 4-1: Manufacturer: syz [ 743.228547][ T24] usb 4-1: SerialNumber: syz [ 743.246705][ T24] usb 4-1: config 0 descriptor?? [ 743.258247][ T24] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 743.272967][ T24] em28xx 4-1:0.132: Video interface 132 found: [ 743.662221][ T24] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 743.763938][T14276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2205'. [ 744.649108][ T24] em28xx 4-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 744.661370][ T24] em28xx 4-1:0.132: failed to read eeprom (err=-5) [ 744.675282][ T24] em28xx 4-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 744.896985][ T24] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 744.912917][ T24] em28xx 4-1:0.132: analog set to bulk mode. [ 744.953759][ T5920] em28xx 4-1:0.132: Registering V4L2 extension [ 745.039979][ T24] usb 4-1: USB disconnect, device number 65 [ 745.099582][ T5920] em28xx 4-1:0.132: failed to trigger read from i2c address 0x4a (error=-19) [ 745.117370][ T24] em28xx 4-1:0.132: Disconnecting em28xx [ 745.835210][ T5920] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 745.884399][ T5920] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 745.891865][ T5920] em28xx 4-1:0.132: No AC97 audio processor [ 745.900707][T14314] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 745.900707][T14314] program syz.2.2214 not setting count and/or reply_len properly [ 745.938299][ T5920] usb 4-1: Decoder not found [ 745.948195][ T5920] em28xx 4-1:0.132: failed to create media graph [ 745.959986][ T5920] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 746.101445][ T5920] em28xx 4-1:0.132: Remote control support is not available for this card. [ 746.118871][ T24] em28xx 4-1:0.132: Closing input extension [ 746.184149][T14322] xt_nat: multiple ranges no longer supported [ 746.213267][ T7453] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 746.220997][ T6159] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 746.902779][ T24] em28xx 4-1:0.132: Freeing device [ 748.091804][ T7453] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 748.100137][ T7453] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 748.119599][ T7453] usb 5-1: config 220 has no interface number 2 [ 748.137460][ T6159] usb 3-1: config 0 has an invalid interface number: 49 but max is 0 [ 748.152588][ T7453] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 748.165883][ T6159] usb 3-1: config 0 has no interface number 0 [ 748.171933][ T6159] usb 3-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x96, changing to 0x86 [ 748.247728][T14335] FAULT_INJECTION: forcing a failure. [ 748.247728][T14335] name failslab, interval 1, probability 0, space 0, times 0 [ 748.309758][ T7453] usb 5-1: config 220 interface 0 has no altsetting 0 [ 748.318227][ T7453] usb 5-1: config 220 interface 76 has no altsetting 0 [ 748.326621][ T7453] usb 5-1: config 220 interface 1 has no altsetting 0 [ 748.388692][ T7453] usb 5-1: string descriptor 0 read error: -71 [ 748.395330][ T7453] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 748.395813][T14335] CPU: 1 UID: 0 PID: 14335 Comm: syz.3.2221 Tainted: G L syzkaller #0 PREEMPT(full) [ 748.395835][T14335] Tainted: [L]=SOFTLOCKUP [ 748.395840][T14335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 748.395849][T14335] Call Trace: [ 748.395854][T14335] [ 748.395860][T14335] dump_stack_lvl+0x16c/0x1f0 [ 748.395882][T14335] should_fail_ex+0x512/0x640 [ 748.395902][T14335] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 748.395920][T14335] should_failslab+0xc2/0x120 [ 748.395939][T14335] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 748.395954][T14335] ? __d_alloc+0x35/0xa80 [ 748.395971][T14335] ? __d_alloc+0x35/0xa80 [ 748.395982][T14335] __d_alloc+0x35/0xa80 [ 748.395993][T14335] ? lockdep_init_map_type+0x5c/0x270 [ 748.396013][T14335] d_alloc_pseudo+0x1c/0xc0 [ 748.396029][T14335] alloc_file_pseudo+0xcf/0x230 [ 748.396044][T14335] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 748.396064][T14335] sock_alloc_file+0x50/0x210 [ 748.396081][T14335] do_accept+0x240/0x530 [ 748.396100][T14335] ? do_raw_spin_lock+0x12c/0x2b0 [ 748.396124][T14335] ? __pfx_do_accept+0x10/0x10 [ 748.396156][T14335] __sys_accept4_file+0xcd/0x210 [ 748.396176][T14335] ? __pfx___sys_accept4_file+0x10/0x10 [ 748.396201][T14335] __x64_sys_accept4+0xd5/0x150 [ 748.396221][T14335] do_syscall_64+0xcd/0xf80 [ 748.396240][T14335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.396254][T14335] RIP: 0033:0x7f486b98f749 [ 748.396266][T14335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 748.396279][T14335] RSP: 002b:00007f486c892038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 748.396294][T14335] RAX: ffffffffffffffda RBX: 00007f486bbe5fa0 RCX: 00007f486b98f749 [ 748.396303][T14335] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 748.396311][T14335] RBP: 00007f486c892090 R08: 0000000000000000 R09: 0000000000000000 [ 748.396319][T14335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 748.396327][T14335] R13: 00007f486bbe6038 R14: 00007f486bbe5fa0 R15: 00007ffe89fc5938 [ 748.396348][T14335] [ 748.654904][ T7453] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.678106][T14335] wireguard3: entered promiscuous mode [ 748.969458][ T7453] usb 5-1: can't set config #220, error -71 [ 748.989741][ T7453] usb 5-1: USB disconnect, device number 55 [ 748.995887][T14345] wireguard3: entered promiscuous mode [ 749.063226][T14352] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2225'. [ 749.407690][ T7453] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 749.481575][ T6159] usb 3-1: string descriptor 0 read error: -71 [ 749.488505][ T6159] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 749.507606][ T6159] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.534111][ T6159] usb 3-1: config 0 descriptor?? [ 749.545184][ T6159] usb 3-1: can't set config #0, error -71 [ 749.563315][ T7453] usb 5-1: Using ep0 maxpacket: 32 [ 749.570117][ T7453] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 749.579795][ T6159] usb 3-1: USB disconnect, device number 69 [ 749.588408][ T7453] usb 5-1: config 0 has no interface number 0 [ 749.600763][ T7453] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 749.614492][ T7453] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 749.623683][ T7453] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.632693][ T7453] usb 5-1: Product: syz [ 749.652000][ T7453] usb 5-1: Manufacturer: syz [ 749.661389][ T7453] usb 5-1: SerialNumber: syz [ 749.674891][ T7453] usb 5-1: config 0 descriptor?? [ 749.690334][ T7453] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 749.714522][ T7453] em28xx 5-1:0.132: Video interface 132 found: [ 750.241860][ T7453] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 750.855157][ T7453] em28xx 5-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 750.876519][ T7453] em28xx 5-1:0.132: failed to read eeprom (err=-5) [ 750.883047][ T7453] em28xx 5-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 750.964544][ T7453] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 750.983146][ T7453] em28xx 5-1:0.132: analog set to bulk mode. [ 751.027977][ T6159] em28xx 5-1:0.132: Registering V4L2 extension [ 751.153371][ T7453] usb 5-1: USB disconnect, device number 56 [ 751.204140][ T7453] em28xx 5-1:0.132: Disconnecting em28xx [ 751.287985][T14383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2235'. [ 751.297949][T14383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2235'. [ 751.732349][ T6159] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 751.758301][ T6159] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 751.848955][ T6159] em28xx 5-1:0.132: No AC97 audio processor [ 751.856098][ T6159] usb 5-1: Decoder not found [ 751.860746][ T6159] em28xx 5-1:0.132: failed to create media graph [ 751.869604][ T6159] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 751.880407][ T6159] em28xx 5-1:0.132: Remote control support is not available for this card. [ 752.320456][ T7453] em28xx 5-1:0.132: Closing input extension [ 752.332956][ T7453] em28xx 5-1:0.132: Freeing device [ 752.479862][T14408] binder: 14407:14408 ioctl c018620c 200000000380 returned -22 [ 753.194393][T14417] netlink: 'syz.4.2243': attribute type 12 has an invalid length. [ 753.202557][T14417] netlink: 'syz.4.2243': attribute type 29 has an invalid length. [ 753.211125][T14417] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2243'. [ 753.608461][T14430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2247'. [ 753.630280][T14430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2247'. [ 753.796756][T14434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2249'. [ 753.816774][ T30] audit: type=1400 audit(1766989692.800:775): avc: denied { create } for pid=14432 comm="syz.1.2249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 753.819686][T14434] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2249'. [ 754.030750][T14444] lo speed is unknown, defaulting to 1000 [ 754.039574][T14444] lo speed is unknown, defaulting to 1000 [ 754.243224][ T6159] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 754.329648][T14444] lo speed is unknown, defaulting to 1000 [ 754.335464][ T5919] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 754.603167][ T6159] usb 4-1: Using ep0 maxpacket: 32 [ 754.616913][ T6159] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 754.644780][ T6159] usb 4-1: config 0 has no interface number 0 [ 754.650873][ T30] audit: type=1800 audit(1766989693.650:776): pid=14452 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.2255" name="bus" dev="overlay" ino=2389 res=0 errno=0 [ 754.686853][ T6159] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 754.860460][ T6159] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 754.863163][ T5919] usb 2-1: Using ep0 maxpacket: 8 [ 754.869700][ T6159] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.880366][ T5919] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 754.882663][ T6159] usb 4-1: Product: syz [ 754.895801][ T5919] usb 2-1: config 0 has no interface number 0 [ 754.895813][ T6159] usb 4-1: Manufacturer: syz [ 754.895829][ T6159] usb 4-1: SerialNumber: syz [ 754.911761][ T5919] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 754.916068][ T6159] usb 4-1: config 0 descriptor?? [ 754.936276][ T5919] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 754.939919][ T6159] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 754.960187][ T6159] em28xx 4-1:0.132: Video interface 132 found: [ 754.973045][ T5919] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 754.990754][ T5919] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 755.003233][ T5919] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 755.017234][ T5919] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 755.039629][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.053701][ T5919] usb 2-1: config 0 descriptor?? [ 755.062611][ T5919] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 755.277199][ T5879] usb 2-1: USB disconnect, device number 60 [ 755.285189][ T5879] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 755.338831][ T6159] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 755.383234][T14444] lo speed is unknown, defaulting to 1000 [ 756.319153][ T6159] em28xx 4-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 756.422818][ T6159] em28xx 4-1:0.132: failed to read eeprom (err=-5) [ 756.431283][ T6159] em28xx 4-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 756.503633][ T6159] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 756.511446][ T6159] em28xx 4-1:0.132: analog set to bulk mode. [ 756.583849][T14453] em28xx 4-1:0.132: Registering V4L2 extension [ 756.595432][ T6159] usb 4-1: USB disconnect, device number 66 [ 756.639538][ T6159] em28xx 4-1:0.132: Disconnecting em28xx [ 756.977500][T14453] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 756.990329][T14453] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 757.010020][T14453] em28xx 4-1:0.132: No AC97 audio processor [ 757.029762][T14453] usb 4-1: Decoder not found [ 757.039582][T14453] em28xx 4-1:0.132: failed to create media graph [ 757.053578][T14453] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 757.076478][T14453] em28xx 4-1:0.132: Remote control support is not available for this card. [ 757.097729][ T6159] em28xx 4-1:0.132: Closing input extension [ 757.119931][ T6159] em28xx 4-1:0.132: Freeing device [ 758.162705][T14502] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 758.273387][ T5919] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 758.420065][ T30] audit: type=1400 audit(1766989697.430:777): avc: denied { setopt } for pid=14501 comm="syz.4.2268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 758.513200][ T5919] usb 3-1: Using ep0 maxpacket: 32 [ 758.531398][ T5919] usb 3-1: config 0 has an invalid interface number: 80 but max is 0 [ 758.543950][ T5919] usb 3-1: config 0 has no interface number 0 [ 758.571737][ T5919] usb 3-1: config 0 interface 80 has no altsetting 0 [ 758.585943][T14506] netlink: 'syz.4.2269': attribute type 142 has an invalid length. [ 758.589811][ T5919] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=54.b7 [ 758.593879][T14506] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2269'. [ 758.612098][T14506] netlink: 'syz.4.2269': attribute type 142 has an invalid length. [ 758.620012][T14506] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2269'. [ 758.623187][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.790951][ T5919] usb 3-1: Product: syz [ 758.796234][ T5919] usb 3-1: Manufacturer: syz [ 758.800802][ T5919] usb 3-1: SerialNumber: syz [ 758.814429][ T5919] usb 3-1: config 0 descriptor?? [ 758.822010][ T5919] usbhid 3-1:0.80: couldn't find an input interrupt endpoint [ 759.996735][T14528] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2275'. [ 760.016920][T14528] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 760.800635][ T49] usb 3-1: USB disconnect, device number 70 [ 760.895868][T14538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2280'. [ 760.973225][ T5879] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 761.145694][ T5879] usb 2-1: Using ep0 maxpacket: 32 [ 761.154158][ T5879] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 761.162379][ T5879] usb 2-1: config 0 has no interface number 0 [ 761.169439][ T5879] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 761.196643][ T5879] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 761.205754][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.213911][ T5879] usb 2-1: Product: syz [ 761.218140][ T5879] usb 2-1: Manufacturer: syz [ 761.224033][ T5879] usb 2-1: SerialNumber: syz [ 761.439426][ T5879] usb 2-1: config 0 descriptor?? [ 761.454781][ T5879] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 761.464566][ T5879] em28xx 2-1:0.132: Video interface 132 found: [ 761.553348][T14554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2281'. [ 762.071655][T14556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2283'. [ 762.209376][ T5879] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 763.207459][ T5879] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 763.231413][ T5879] em28xx 2-1:0.132: board has no eeprom [ 763.313473][ T5879] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 763.328806][ T5879] em28xx 2-1:0.132: analog set to bulk mode. [ 763.340207][ T7453] em28xx 2-1:0.132: Registering V4L2 extension [ 763.352991][ T5879] usb 2-1: USB disconnect, device number 61 [ 763.365824][ T5879] em28xx 2-1:0.132: Disconnecting em28xx [ 763.567933][ T7453] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 763.578022][ T7453] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 763.593152][ T7453] em28xx 2-1:0.132: No AC97 audio processor [ 763.609837][ T7453] usb 2-1: Decoder not found [ 763.616012][ T7453] em28xx 2-1:0.132: failed to create media graph [ 763.625583][ T7453] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 763.655836][ T7453] em28xx 2-1:0.132: Remote control support is not available for this card. [ 763.670357][ T5879] em28xx 2-1:0.132: Closing input extension [ 763.685199][ T5879] em28xx 2-1:0.132: Freeing device [ 765.201541][T14603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2294'. [ 767.031207][T14628] netlink: 'syz.1.2301': attribute type 16 has an invalid length. [ 767.039434][T14628] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2301'. [ 767.479949][T14600] SELinux: failed to load policy [ 767.550696][T14630] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 767.761222][T14630] SELinux: failed to load policy [ 769.033185][T12353] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 769.213242][T12353] usb 2-1: Using ep0 maxpacket: 16 [ 769.222935][T12353] usb 2-1: config 0 has an invalid interface number: 49 but max is 0 [ 769.242870][T12353] usb 2-1: config 0 has no interface number 0 [ 769.291925][T12353] usb 2-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 769.337559][T12353] usb 2-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 769.463864][T12353] usb 2-1: config 0 interface 49 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 769.492511][T12353] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 769.508767][T12353] usb 2-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 769.526972][T12353] usb 2-1: Product: syz [ 769.573151][T12353] usb 2-1: Manufacturer: syz [ 769.589746][T12353] usb 2-1: SerialNumber: syz [ 769.626934][T12353] usb 2-1: config 0 descriptor?? [ 769.634381][T14653] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 771.039898][T12353] usb 2-1: USB disconnect, device number 62 [ 772.062188][ T30] audit: type=1326 audit(1766989710.960:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14677 comm="syz.0.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe809f8f749 code=0x7ffc0000 [ 772.173621][ T30] audit: type=1326 audit(1766989710.960:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14677 comm="syz.0.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe809f8f749 code=0x7ffc0000 [ 772.305984][ T30] audit: type=1326 audit(1766989710.960:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14677 comm="syz.0.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe809f8f749 code=0x7ffc0000 [ 772.360044][ T30] audit: type=1326 audit(1766989710.960:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14677 comm="syz.0.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe809f8f749 code=0x7ffc0000 [ 772.426482][ T30] audit: type=1326 audit(1766989710.960:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14677 comm="syz.0.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe809f8f749 code=0x7ffc0000 [ 772.546281][ T30] audit: type=1326 audit(1766989710.960:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14677 comm="syz.0.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe809f8f749 code=0x7ffc0000 [ 772.576361][T14685] netlink: 'syz.1.2318': attribute type 12 has an invalid length. [ 772.584516][T14685] netlink: 'syz.1.2318': attribute type 29 has an invalid length. [ 772.610099][T14685] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2318'. [ 773.424298][T14701] siw: device registration error -23 [ 774.172979][T14717] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 774.172979][T14717] program syz.1.2323 not setting count and/or reply_len properly [ 774.525371][ T5965] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 774.602304][ T5821] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 775.235351][ T5821] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 775.243649][ T5821] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 775.254147][ T5821] usb 3-1: config 220 has no interface number 2 [ 775.261819][ T5821] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 775.277704][ T5821] usb 3-1: config 220 interface 0 has no altsetting 0 [ 775.286146][ T5965] usb 2-1: config 0 has an invalid interface number: 49 but max is 0 [ 775.286161][ T5821] usb 3-1: config 220 interface 76 has no altsetting 0 [ 775.301387][ T5821] usb 3-1: config 220 interface 1 has no altsetting 0 [ 775.322924][ T5821] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 775.335314][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.335489][ T5965] usb 2-1: config 0 has no interface number 0 [ 775.365169][ T5821] usb 3-1: Product: syz [ 775.374794][ T5821] usb 3-1: Manufacturer: syz [ 775.383552][ T5965] usb 2-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x96, changing to 0x86 [ 775.395317][ T5821] usb 3-1: SerialNumber: syz [ 775.437108][ T5965] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 775.451346][ T5965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.471161][ T5965] usb 2-1: Product: syz [ 775.476308][ T5965] usb 2-1: Manufacturer: syz [ 775.481271][ T5965] usb 2-1: SerialNumber: syz [ 776.140245][ T5965] usb 2-1: config 0 descriptor?? [ 776.158416][ T5821] usb 3-1: selecting invalid altsetting 0 [ 776.173566][ T5821] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 776.187029][ T5821] uvcvideo 3-1:220.0: No valid video chain found. [ 776.205525][ T5821] usb 3-1: selecting invalid altsetting 0 [ 776.211225][ T5821] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 776.240248][ T5821] usb 3-1: USB disconnect, device number 71 [ 777.380906][ T5965] usb 2-1: USB disconnect, device number 63 [ 777.506737][T14755] Bluetooth: MGMT ver 1.23 [ 778.873638][T14775] overlayfs: failed to resolve './file0': -2 [ 779.548088][ T5818] Bluetooth: hci0: command 0x0406 tx timeout [ 779.553204][T12241] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 780.494786][T14789] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.633536][ T9] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 780.697800][T14789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 780.737793][T14789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 780.803460][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 780.812709][ T9] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 780.836269][ T9] usb 5-1: config 0 has no interface number 0 [ 780.848139][ T9] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 780.858007][T14806] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 780.858007][T14806] program syz.0.2348 not setting count and/or reply_len properly [ 780.902730][ T9] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 780.923380][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.942101][ T9] usb 5-1: Product: syz [ 780.961472][ T9] usb 5-1: Manufacturer: syz [ 780.972351][T14789] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 780.980657][ T9] usb 5-1: SerialNumber: syz [ 780.995325][ T9] usb 5-1: config 0 descriptor?? [ 781.012614][ T9] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 781.024210][T14789] wireguard0: left promiscuous mode [ 781.039919][ T9] em28xx 5-1:0.132: Video interface 132 found: [ 781.066780][T14789] wireguard1: left promiscuous mode [ 781.095259][T14789] wireguard2: left promiscuous mode [ 781.132519][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.145388][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.173819][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.204691][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.473902][ T9] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 781.974415][T14819] netlink: 'syz.3.2352': attribute type 1 has an invalid length. [ 781.982183][T14819] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2352'. [ 782.007531][T14819] netlink: 'syz.3.2352': attribute type 1 has an invalid length. [ 782.015303][T14819] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2352'. [ 782.825177][ T9] em28xx 5-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 782.838809][ T9] em28xx 5-1:0.132: failed to read eeprom (err=-5) [ 782.859131][ T9] em28xx 5-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 783.045634][ T9] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 783.057527][ T9] em28xx 5-1:0.132: analog set to bulk mode. [ 783.064117][T14453] em28xx 5-1:0.132: Registering V4L2 extension [ 783.072258][ T9] usb 5-1: USB disconnect, device number 57 [ 783.078757][ T9] em28xx 5-1:0.132: Disconnecting em28xx [ 783.213347][T14453] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 783.224538][T14453] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 783.235329][T14453] em28xx 5-1:0.132: No AC97 audio processor [ 783.242970][T14453] usb 5-1: Decoder not found [ 783.247767][T14453] em28xx 5-1:0.132: failed to create media graph [ 783.257318][T14453] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 783.272608][T14453] em28xx 5-1:0.132: Remote control support is not available for this card. [ 783.285925][ T5872] libceph: connect (1)[c::]:6789 error -101 [ 783.305721][ T5872] libceph: mon0 (1)[c::]:6789 connect error [ 783.313205][ T9] em28xx 5-1:0.132: Closing input extension [ 783.327791][T14832] ceph: No mds server is up or the cluster is laggy [ 783.336406][ T9] em28xx 5-1:0.132: Freeing device [ 783.341770][ T5872] libceph: connect (1)[c::]:6789 error -101 [ 783.356002][ T5872] libceph: mon0 (1)[c::]:6789 connect error [ 784.655977][T14856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2359'. [ 784.665055][T14856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2359'. [ 784.673956][T14856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2359'. [ 784.682816][T14856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2359'. [ 784.691724][T14856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2359'. [ 784.700627][T14856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2359'. [ 784.709536][T14856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2359'. [ 784.718412][T14856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2359'. [ 785.312774][T14861] netlink: 'syz.4.2361': attribute type 12 has an invalid length. [ 785.369343][T14861] netlink: 'syz.4.2361': attribute type 29 has an invalid length. [ 787.157931][ T9] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 787.380456][ T9] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 787.400042][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.422584][ T9] usb 3-1: Product: syz [ 787.432655][ T9] usb 3-1: Manufacturer: syz [ 787.444985][ T9] usb 3-1: SerialNumber: syz [ 787.468502][ T9] usb 3-1: config 0 descriptor?? [ 787.773430][T12241] Bluetooth: hci2: unknown advertising packet type: 0x17 [ 787.800568][T14874] bond0: (slave bond_slave_1): Device is not bonding slave [ 787.840201][T14874] bond0: option active_slave: invalid value (bond_slave_1) [ 788.047427][T14874] bond0 (unregistering): Released all slaves [ 788.639571][ T9] usb-storage 3-1:0.0: USB Mass Storage device detected [ 788.946805][ T9] usb 3-1: USB disconnect, device number 72 [ 790.133333][ T9] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 790.725487][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 790.732998][ T9] usb 4-1: config 0 has an invalid interface number: 80 but max is 0 [ 790.742466][ T30] audit: type=1326 audit(1766989729.730:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14927 comm="syz.4.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0308d8f749 code=0x7ffc0000 [ 790.863285][ T30] audit: type=1326 audit(1766989729.730:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14927 comm="syz.4.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0308d8f749 code=0x7ffc0000 [ 790.893168][ T9] usb 4-1: config 0 has no interface number 0 [ 790.903184][ T30] audit: type=1326 audit(1766989729.730:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14927 comm="syz.4.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0308d8f749 code=0x7ffc0000 [ 790.975050][ T9] usb 4-1: config 0 interface 80 has no altsetting 0 [ 790.975741][ T30] audit: type=1326 audit(1766989729.730:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14927 comm="syz.4.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0308d8f749 code=0x7ffc0000 [ 790.984300][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=54.b7 [ 791.377107][ T30] audit: type=1326 audit(1766989729.730:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14927 comm="syz.4.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0308d8f749 code=0x7ffc0000 [ 791.448317][ T30] audit: type=1326 audit(1766989729.730:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14927 comm="syz.4.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0308d8f749 code=0x7ffc0000 [ 791.454434][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.553571][ T30] audit: type=1326 audit(1766989729.730:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14927 comm="syz.4.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0308d8f749 code=0x7ffc0000 [ 791.563152][ T9] usb 4-1: Product: syz [ 791.628048][ T9] usb 4-1: Manufacturer: syz [ 791.644472][ T9] usb 4-1: SerialNumber: syz [ 791.649488][ T30] audit: type=1326 audit(1766989729.730:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14927 comm="syz.4.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0308d8f749 code=0x7ffc0000 [ 791.655605][ T9] usb 4-1: config 0 descriptor?? [ 791.738602][ T9] usbhid 4-1:0.80: couldn't find an input interrupt endpoint [ 793.043398][ T9] usb 4-1: USB disconnect, device number 67 [ 793.290338][T14961] netlink: 'syz.3.2384': attribute type 12 has an invalid length. [ 793.298346][T14961] netlink: 'syz.3.2384': attribute type 29 has an invalid length. [ 793.323191][T14961] __nla_validate_parse: 64 callbacks suppressed [ 793.323217][T14961] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2384'. [ 793.627826][T14966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2386'. [ 795.545339][T14981] tmpfs: Unknown parameter '00000000000000000000003' [ 796.023530][T14992] netlink: 'syz.2.2394': attribute type 10 has an invalid length. [ 796.039709][T14992] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2394'. [ 796.052947][T14992] bridge0: port 2(team0) entered blocking state [ 796.063293][T14992] bridge0: port 2(team0) entered disabled state [ 796.452320][T14992] team0: entered allmulticast mode [ 796.515857][T14992] team_slave_1: entered allmulticast mode [ 796.585545][T14992] dummy0: entered allmulticast mode [ 796.631464][T14992] team0: entered promiscuous mode [ 796.636621][T14992] team_slave_1: entered promiscuous mode [ 796.644551][T14992] dummy0: entered promiscuous mode [ 796.966233][T15003] netlink: 'syz.4.2395': attribute type 11 has an invalid length. [ 796.974234][T15003] netlink: 141556 bytes leftover after parsing attributes in process `syz.4.2395'. [ 798.055262][ T5965] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 798.374695][ T5965] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 798.394310][ T5965] usb 2-1: config 0 interface 0 has no altsetting 0 [ 798.481468][ T5965] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 798.501292][ T5965] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 798.586489][ T5965] usb 2-1: Product: syz [ 798.612357][ T5965] usb 2-1: Manufacturer: syz [ 798.641300][ T5965] usb 2-1: SerialNumber: syz [ 798.786535][ T5965] usb 2-1: config 0 descriptor?? [ 799.003021][ T5965] usb 2-1: selecting invalid altsetting 0 [ 799.331142][T15006] snd-usb-audio 2-1:0.0: Runtime PM usage count underflow! [ 799.539496][T15032] SELinux: failed to load policy [ 801.222979][T11358] usb 2-1: USB disconnect, device number 64 [ 801.543262][ T5879] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 801.723239][ T5879] usb 4-1: Using ep0 maxpacket: 32 [ 801.729583][ T5879] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 801.738177][ T5879] usb 4-1: config 0 has no interface number 0 [ 801.745659][ T5879] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 801.908042][ T5879] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 801.917316][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.925496][ T5879] usb 4-1: Product: syz [ 801.929665][ T5879] usb 4-1: Manufacturer: syz [ 801.934278][ T5879] usb 4-1: SerialNumber: syz [ 801.941368][ T5879] usb 4-1: config 0 descriptor?? [ 801.949828][ T5879] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 801.959740][ T5879] em28xx 4-1:0.132: Video interface 132 found: [ 802.195539][T15058] netlink: 'syz.2.2411': attribute type 12 has an invalid length. [ 802.203524][T15058] netlink: 'syz.2.2411': attribute type 29 has an invalid length. [ 802.211357][T15058] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2411'. [ 802.351243][ T5879] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 802.561394][T15073] overlayfs: missing 'lowerdir' [ 803.055499][ T5879] em28xx 4-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 803.069155][ T5879] em28xx 4-1:0.132: failed to read eeprom (err=-5) [ 803.084188][T15081] xt_connbytes: Forcing CT accounting to be enabled [ 803.091649][T15081] Cannot find del_set index 1 as target [ 803.117648][ T5879] em28xx 4-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 803.203232][ T5879] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 803.211154][ T5879] em28xx 4-1:0.132: analog set to bulk mode. [ 803.218168][ T9] em28xx 4-1:0.132: Registering V4L2 extension [ 803.240386][ T5879] usb 4-1: USB disconnect, device number 68 [ 803.254886][ T5879] em28xx 4-1:0.132: Disconnecting em28xx [ 803.925816][ T9] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 803.932912][ T9] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 803.951459][ T9] em28xx 4-1:0.132: No AC97 audio processor [ 803.975567][ T9] usb 4-1: Decoder not found [ 803.992650][ T9] em28xx 4-1:0.132: failed to create media graph [ 804.012939][ T9] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 804.113637][T11358] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 804.122312][ T9] em28xx 4-1:0.132: Remote control support is not available for this card. [ 804.141144][ T5879] em28xx 4-1:0.132: Closing input extension [ 804.153661][ T5879] em28xx 4-1:0.132: Freeing device [ 804.337216][T11358] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 804.351544][T11358] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 804.543275][ T5879] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 804.692026][T11358] usb 5-1: config 220 has no interface number 2 [ 804.715116][T11358] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 804.748033][T15108] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 804.748033][T15108] program syz.1.2423 not setting count and/or reply_len properly [ 804.785597][ T5879] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 804.797668][T11358] usb 5-1: config 220 interface 0 has no altsetting 0 [ 804.818397][T11358] usb 5-1: config 220 interface 76 has no altsetting 0 [ 804.893295][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.902436][T11358] usb 5-1: config 220 interface 1 has no altsetting 0 [ 805.035103][ T5879] usb 4-1: config 0 descriptor?? [ 805.073191][T14793] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 805.102108][T11358] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 805.120840][T11358] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.137892][ T5879] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 805.208867][T11358] usb 5-1: Product: syz [ 805.213204][T11358] usb 5-1: Manufacturer: syz [ 805.226593][T11358] usb 5-1: SerialNumber: syz [ 805.263185][T14793] usb 2-1: device descriptor read/64, error -71 [ 805.336814][ T5879] gp8psk: usb in 128 operation failed. [ 805.395185][ T30] audit: type=1400 audit(1766989744.410:792): avc: denied { ioctl } for pid=15111 comm="syz.0.2425" path="socket:[42875]" dev="sockfs" ino=42875 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 805.611200][ T5879] gp8psk: FW Version = 56.76.16 (0x384c10) Build 2191/151/134 [ 805.836337][T15097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2421'. [ 805.864662][ T5879] gp8psk: usb in 149 operation failed. [ 805.870305][ T5879] gp8psk: failed to get FPGA version [ 805.880992][ T5879] gp8psk: usb in 138 operation failed. [ 805.900494][ T5879] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 805.936733][ T5879] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 805.986509][ T5879] usb 4-1: USB disconnect, device number 69 [ 806.084426][T14793] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 806.252980][T15114] SELinux: failed to load policy [ 806.532529][T11358] usb 5-1: selecting invalid altsetting 0 [ 807.030485][T11358] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 807.043167][T11358] uvcvideo 5-1:220.0: No valid video chain found. [ 807.062698][ T30] audit: type=1400 audit(1766989744.840:793): avc: granted { setsecparam } for pid=15096 comm="syz.3.2421" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 807.091360][T11358] usb 5-1: selecting invalid altsetting 0 [ 807.107821][T11358] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 807.138752][T11358] usb 5-1: USB disconnect, device number 58 [ 807.163225][T14793] usb 2-1: device descriptor read/64, error -71 [ 807.284095][T14793] usb usb2-port1: attempt power cycle [ 807.468265][T11358] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 807.553221][ T9] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 807.657063][T11358] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 807.665748][T14793] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 807.673522][T11358] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 807.684944][T11358] usb 5-1: config 220 has no interface number 2 [ 807.691238][T11358] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 807.706874][T11358] usb 5-1: config 220 interface 0 has no altsetting 0 [ 807.717164][T11358] usb 5-1: config 220 interface 76 has no altsetting 0 [ 807.724511][T11358] usb 5-1: config 220 interface 1 has no altsetting 0 [ 807.728568][ T9] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 807.746284][ T9] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 807.748237][T11358] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 807.756645][ T9] usb 4-1: config 220 has no interface number 2 [ 807.765845][T11358] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.771996][ T9] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 807.780315][T11358] usb 5-1: Product: syz [ 807.797455][T11358] usb 5-1: Manufacturer: syz [ 807.797737][ T9] usb 4-1: config 220 interface 0 has no altsetting 0 [ 807.802043][T11358] usb 5-1: SerialNumber: syz [ 807.808853][ T9] usb 4-1: config 220 interface 76 has no altsetting 0 [ 807.808872][ T9] usb 4-1: config 220 interface 1 has no altsetting 0 [ 807.828706][ T9] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 807.838347][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.846426][ T9] usb 4-1: Product: syz [ 807.850587][ T9] usb 4-1: Manufacturer: syz [ 807.855346][ T9] usb 4-1: SerialNumber: syz [ 807.893186][T14793] usb 2-1: device not accepting address 67, error -71 [ 808.019328][T11358] usb 5-1: selecting invalid altsetting 0 [ 808.025855][T11358] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 808.033240][T11358] uvcvideo 5-1:220.0: No valid video chain found. [ 808.042916][T11358] usb 5-1: selecting invalid altsetting 0 [ 808.048730][T11358] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 808.059018][T11358] usb 5-1: USB disconnect, device number 59 [ 808.069353][ T9] usb 4-1: selecting invalid altsetting 0 [ 808.076086][ T9] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 808.088118][ T9] uvcvideo 4-1:220.0: No valid video chain found. [ 808.096719][ T9] usb 4-1: selecting invalid altsetting 0 [ 808.102500][ T9] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 808.116978][ T9] usb 4-1: USB disconnect, device number 70 [ 808.233183][T14793] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 808.254717][T14793] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 808.263009][T14793] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 808.280171][T14793] usb 2-1: config 220 has no interface number 2 [ 808.289043][T14793] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 808.302718][T14793] usb 2-1: config 220 interface 0 has no altsetting 0 [ 808.309891][T14793] usb 2-1: config 220 interface 76 has no altsetting 0 [ 808.317160][T14793] usb 2-1: config 220 interface 1 has no altsetting 0 [ 808.327808][T14793] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 808.417840][T14793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.426375][T14793] usb 2-1: Product: syz [ 808.430531][T14793] usb 2-1: Manufacturer: syz [ 808.448350][T14793] usb 2-1: SerialNumber: syz [ 808.996773][T14793] usb 2-1: selecting invalid altsetting 0 [ 809.018519][T14793] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 809.025968][T14793] uvcvideo 2-1:220.0: No valid video chain found. [ 809.121493][T15134] netlink: 'syz.4.2432': attribute type 12 has an invalid length. [ 809.129404][T15134] netlink: 'syz.4.2432': attribute type 29 has an invalid length. [ 809.137313][T15134] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2432'. [ 809.146411][T15134] netlink: 'syz.4.2432': attribute type 1 has an invalid length. [ 809.211081][T15134] netlink: 'syz.4.2432': attribute type 2 has an invalid length. [ 809.219973][T15134] netlink: 31 bytes leftover after parsing attributes in process `syz.4.2432'. [ 809.231673][T14793] usb 2-1: selecting invalid altsetting 0 [ 809.268579][T15135] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2432'. [ 809.277652][T14793] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 809.461163][T14793] usb 2-1: USB disconnect, device number 68 [ 809.963992][T15152] kAFS: No cell specified [ 811.056963][T15176] syzkaller0: entered promiscuous mode [ 811.070082][T15176] syzkaller0: entered allmulticast mode [ 811.187834][T15168] overlayfs: failed to resolve './file0': -2 [ 811.198865][T15168] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 811.256140][ T30] audit: type=1400 audit(1766989750.270:794): avc: denied { mounton } for pid=15182 comm="syz.0.2447" path="/509/file0" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 811.297142][T15183] netlink: 'syz.0.2447': attribute type 2 has an invalid length. [ 811.355209][ T30] audit: type=1400 audit(1766989750.270:795): avc: denied { getattr } for pid=15182 comm="syz.0.2447" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 812.313173][T14793] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 812.989021][T14793] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 812.997360][T14793] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 813.010635][T14793] usb 2-1: config 220 has no interface number 2 [ 813.018862][T14793] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 813.462139][T14793] usb 2-1: config 220 interface 0 has no altsetting 0 [ 813.476861][T14793] usb 2-1: config 220 interface 76 has no altsetting 0 [ 813.492212][T14793] usb 2-1: config 220 interface 1 has no altsetting 0 [ 813.567682][T14793] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 814.137853][T14793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.181452][T14793] usb 2-1: Product: syz [ 814.193192][T14793] usb 2-1: Manufacturer: syz [ 814.199153][T14793] usb 2-1: SerialNumber: syz [ 814.391837][T14793] usb 2-1: can't set config #220, error -71 [ 814.663383][T14793] usb 2-1: USB disconnect, device number 69 [ 814.887080][T15219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2457'. [ 815.386415][T15230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2460'. [ 816.034967][T15243] Device name cannot be null; rc = [-22] [ 816.060554][T15243] netlink: 'syz.4.2464': attribute type 2 has an invalid length. [ 816.723148][T14793] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 817.238273][T15265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2469'. [ 817.252445][T12824] Bluetooth: (null): Too short H5 packet [ 817.291879][T12824] Bluetooth: (null): Invalid header checksum [ 817.353358][T12824] Bluetooth: (null): Invalid header checksum [ 817.808059][T12801] Bluetooth: (null): Invalid header checksum [ 818.019795][T12801] Bluetooth: (null): Invalid header checksum [ 818.269108][T15280] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 818.269108][T15280] program syz.1.2472 not setting count and/or reply_len properly [ 818.709621][T15284] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 819.440303][T15293] FAULT_INJECTION: forcing a failure. [ 819.440303][T15293] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 819.455525][T15293] CPU: 0 UID: 0 PID: 15293 Comm: syz.4.2477 Tainted: G L syzkaller #0 PREEMPT(full) [ 819.455551][T15293] Tainted: [L]=SOFTLOCKUP [ 819.455557][T15293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 819.455566][T15293] Call Trace: [ 819.455572][T15293] [ 819.455578][T15293] dump_stack_lvl+0x16c/0x1f0 [ 819.455604][T15293] should_fail_ex+0x512/0x640 [ 819.455636][T15293] _copy_from_user+0x2e/0xd0 [ 819.455662][T15293] drm_ioctl+0x4fb/0xc30 [ 819.455689][T15293] ? __pfx_drm_gem_open_ioctl+0x10/0x10 [ 819.455712][T15293] ? __pfx_drm_ioctl+0x10/0x10 [ 819.455745][T15293] ? selinux_file_ioctl+0x180/0x270 [ 819.455766][T15293] ? selinux_file_ioctl+0xb4/0x270 [ 819.455789][T15293] ? __pfx_drm_ioctl+0x10/0x10 [ 819.455812][T15293] __x64_sys_ioctl+0x18e/0x210 [ 819.455834][T15293] do_syscall_64+0xcd/0xf80 [ 819.455858][T15293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.455874][T15293] RIP: 0033:0x7f0308d8f749 [ 819.455888][T15293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 819.455904][T15293] RSP: 002b:00007f0309cd9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 819.455921][T15293] RAX: ffffffffffffffda RBX: 00007f0308fe5fa0 RCX: 00007f0308d8f749 [ 819.455932][T15293] RDX: 0000200000000140 RSI: 00000000c010640b RDI: 0000000000000005 [ 819.455943][T15293] RBP: 00007f0309cd9090 R08: 0000000000000000 R09: 0000000000000000 [ 819.455953][T15293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 819.455963][T15293] R13: 00007f0308fe6038 R14: 00007f0308fe5fa0 R15: 00007ffe4e5ca418 [ 819.455988][T15293] [ 820.394066][T15306] xt_nat: multiple ranges no longer supported [ 821.233207][T14793] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 821.943198][T14793] usb 5-1: Using ep0 maxpacket: 32 [ 821.950505][T14793] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 821.958867][T14793] usb 5-1: config 0 has no interface number 0 [ 821.965401][T14793] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 821.977830][T14793] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 821.987058][T14793] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.995180][T14793] usb 5-1: Product: syz [ 822.148535][T14793] usb 5-1: Manufacturer: syz [ 822.282107][T14793] usb 5-1: SerialNumber: syz [ 822.299638][T14793] usb 5-1: config 0 descriptor?? [ 822.307651][T14793] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 822.763164][T14793] em28xx 5-1:0.132: Video interface 132 found: [ 823.017332][T14793] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 823.631511][T14793] em28xx 5-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 823.741798][T14793] em28xx 5-1:0.132: failed to read eeprom (err=-5) [ 823.763354][T14793] em28xx 5-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 823.873325][T14793] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 824.150143][T14793] em28xx 5-1:0.132: analog set to bulk mode. [ 824.307877][T11358] em28xx 5-1:0.132: Registering V4L2 extension [ 824.318713][T14793] usb 5-1: USB disconnect, device number 61 [ 824.333986][T14793] em28xx 5-1:0.132: Disconnecting em28xx [ 825.344418][T11358] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 825.351469][T11358] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 825.393137][T11358] em28xx 5-1:0.132: No AC97 audio processor [ 825.400121][T11358] usb 5-1: Decoder not found [ 825.413142][T11358] em28xx 5-1:0.132: failed to create media graph [ 825.419479][T11358] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 825.444124][T11358] em28xx 5-1:0.132: Remote control support is not available for this card. [ 825.452741][T14793] em28xx 5-1:0.132: Closing input extension [ 825.509731][T14793] em28xx 5-1:0.132: Freeing device [ 826.155669][T15350] SELinux: failed to load policy [ 826.166986][T15372] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 826.176709][T15372] SELinux: failed to load policy [ 826.532587][T15379] program syz.2.2502 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 827.279948][T15379] program syz.2.2502 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 827.329620][T15379] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 827.537294][T15379] syz.2.2502 (15379): /proc/15379/oom_adj is deprecated, please use /proc/15379/oom_score_adj instead. [ 827.559246][T15379] lo: entered allmulticast mode [ 827.564275][T15379] tunl0: entered allmulticast mode [ 827.573837][T15379] gre0: entered allmulticast mode [ 827.578883][T15379] gretap0: entered allmulticast mode [ 827.614209][T15383] loop5: detected capacity change from 0 to 7 [ 827.622231][T15379] erspan0: entered allmulticast mode [ 828.613949][T15383] Dev loop5: unable to read RDB block 7 [ 828.630750][T15383] loop5: AHDI p1 [ 828.702255][T15379] ip_vti0: entered allmulticast mode [ 828.704496][T15383] loop5: partition table partially beyond EOD, truncated [ 828.882786][T15379] ip6_vti0: entered allmulticast mode [ 828.893759][T15379] sit0: entered allmulticast mode [ 828.913870][T15379] ip6tnl0: entered allmulticast mode [ 828.922629][T15379] ip6gre0: entered allmulticast mode [ 829.360453][T15379] ip6gretap0: entered allmulticast mode [ 829.372618][T15396] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2504'. [ 829.385012][T15379] bridge0: entered allmulticast mode [ 829.398594][T15379] vcan0: entered allmulticast mode [ 829.424286][T15379] nlmon0: entered allmulticast mode [ 829.430453][T15379] caif0: entered allmulticast mode [ 829.483338][T15379] batadv0: entered allmulticast mode [ 829.500968][T15379] vxcan0: entered allmulticast mode [ 829.518142][T15379] vxcan1: entered allmulticast mode [ 829.543631][T15379] veth0: entered allmulticast mode [ 829.559704][T15379] veth1: entered allmulticast mode [ 829.578680][T15379] wg0: entered allmulticast mode [ 829.649819][T15379] wg1: entered allmulticast mode [ 829.678657][T15379] wg2: entered allmulticast mode [ 829.684629][T15379] veth0_to_bridge: entered allmulticast mode [ 829.694983][T15379] veth0_to_bond: entered allmulticast mode [ 829.700965][T15379] bond_slave_0: entered allmulticast mode [ 829.707099][T15379] veth1_to_bond: entered allmulticast mode [ 829.712944][T15379] bond_slave_1: entered allmulticast mode [ 829.721782][T15379] veth1_to_team: entered allmulticast mode [ 829.742720][T15379] veth0_to_batadv: entered allmulticast mode [ 829.984233][T15379] batadv_slave_0: entered allmulticast mode [ 830.058856][T15379] veth1_to_batadv: entered allmulticast mode [ 830.089715][T15379] batadv_slave_1: entered allmulticast mode [ 830.123251][T15379] xfrm0: entered allmulticast mode [ 830.128411][T15379] veth0_to_hsr: entered allmulticast mode [ 830.183031][T15379] hsr_slave_0: entered allmulticast mode [ 830.209969][T15379] veth1_to_hsr: entered allmulticast mode [ 830.232319][T15379] hsr_slave_1: entered allmulticast mode [ 830.253373][T15379] hsr0: entered allmulticast mode [ 830.266515][T15379] veth1_virt_wifi: entered allmulticast mode [ 830.287850][T15379] veth0_virt_wifi: entered allmulticast mode [ 830.308629][T15379] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 830.332105][T15379] veth1_vlan: entered allmulticast mode [ 830.341240][T15379] veth0_vlan: entered allmulticast mode [ 830.353202][T15379] vlan0: entered allmulticast mode [ 830.359395][T15379] vlan1: entered allmulticast mode [ 830.369416][T15379] macvlan0: entered allmulticast mode [ 830.391619][T15379] macvlan1: entered allmulticast mode [ 830.402896][T15379] ipvlan0: entered allmulticast mode [ 830.410014][T15379] ipvlan1: entered allmulticast mode [ 830.416345][T15379] veth1_macvtap: entered allmulticast mode [ 830.423067][T15379] veth0_macvtap: entered allmulticast mode [ 830.483033][T15379] macvtap0: entered allmulticast mode [ 830.499390][T15379] macsec0: entered allmulticast mode [ 830.516309][T15379] geneve0: entered allmulticast mode [ 830.530234][T15379] geneve1: entered allmulticast mode [ 830.543401][T15379] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 830.561817][T15379] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 830.581994][T15379] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 830.590269][T15379] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 830.597513][T15379] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 830.605139][T15379] syztnl2: entered allmulticast mode [ 830.610612][T15379] wireguard0: entered allmulticast mode [ 830.616782][T15379] ip6erspan0: entered allmulticast mode [ 830.622460][T15379] wireguard1: entered allmulticast mode [ 830.630252][T15379] wireguard2: entered allmulticast mode [ 830.635985][T15379] sit1: entered allmulticast mode [ 830.873417][T15415] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2510'. [ 830.885730][T15415] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 831.363442][T15424] dlm: no locking on control device [ 831.467353][T15424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 831.520281][T15424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 831.533395][ T30] audit: type=1400 audit(1766989770.540:796): avc: denied { ioctl } for pid=15423 comm="syz.1.2514" path="socket:[43822]" dev="sockfs" ino=43822 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 831.828771][T15430] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2516'. [ 831.848707][T15430] bridge2: port 1(veth5) entered blocking state [ 831.855137][T15430] bridge2: port 1(veth5) entered disabled state [ 831.861455][T15430] veth5: entered allmulticast mode [ 831.867877][T15430] veth5: entered promiscuous mode [ 831.897638][T15431] bridge2: port 2(veth7) entered blocking state [ 831.913867][T15431] bridge2: port 2(veth7) entered disabled state [ 831.931810][T15431] veth7: entered allmulticast mode [ 831.942161][T15431] veth7: entered promiscuous mode [ 832.050600][T15436] netlink: 'syz.1.2517': attribute type 12 has an invalid length. [ 832.101531][T15436] netlink: 'syz.1.2517': attribute type 29 has an invalid length. [ 832.119134][T15436] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2517'. [ 832.173196][T15436] netlink: 59 bytes leftover after parsing attributes in process `syz.1.2517'. [ 832.332029][T15447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2519'. [ 833.095063][ T9] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 833.409830][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 833.418960][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.489819][ T9] usb 2-1: config 0 descriptor?? [ 833.504680][ T9] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 834.051893][T15465] netlink: 312 bytes leftover after parsing attributes in process `syz.0.2524'. [ 834.489872][ T9] usb 2-1: USB disconnect, device number 70 [ 835.135560][T15470] SELinux: failed to load policy [ 836.040290][T15470] /dev/nullb0: Can't open blockdev [ 836.237260][T15487] netlink: 'syz.1.2529': attribute type 12 has an invalid length. [ 836.253161][T15487] netlink: 'syz.1.2529': attribute type 29 has an invalid length. [ 836.261267][T15487] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2529'. [ 836.509683][ T30] audit: type=1400 audit(1766989775.350:797): avc: denied { setopt } for pid=15484 comm="syz.3.2531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 837.348954][T15496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2533'. [ 838.192688][ T30] audit: type=1400 audit(1766989777.200:798): avc: denied { setopt } for pid=15501 comm="syz.2.2536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 838.243415][T14453] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 838.423286][T14453] usb 5-1: Using ep0 maxpacket: 32 [ 838.430760][T14453] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 838.440078][T14453] usb 5-1: config 0 has no interface number 0 [ 838.447921][T14453] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 838.460680][T14453] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 838.469954][T14453] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.478117][T14453] usb 5-1: Product: syz [ 838.482407][T14453] usb 5-1: Manufacturer: syz [ 838.487211][T14453] usb 5-1: SerialNumber: syz [ 838.495429][T14453] usb 5-1: config 0 descriptor?? [ 838.504883][T14453] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 838.514876][T14453] em28xx 5-1:0.132: Video interface 132 found: [ 838.693513][ T5920] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 838.879098][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 838.920835][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 838.951161][ T5920] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 838.991043][ T5920] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 839.024832][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.064961][ T5920] usb 3-1: config 0 descriptor?? [ 839.250397][T14453] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 839.530427][ T5920] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 840.285593][T14453] em28xx 5-1:0.132: failed to get i2c transfer status from bridge register (error=-5) [ 840.307057][T14453] em28xx 5-1:0.132: board has no eeprom [ 840.363143][T14453] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 840.370961][T14453] em28xx 5-1:0.132: analog set to bulk mode. [ 840.377073][ T5872] em28xx 5-1:0.132: Registering V4L2 extension [ 840.386558][T14453] usb 5-1: USB disconnect, device number 62 [ 840.399343][T14453] em28xx 5-1:0.132: Disconnecting em28xx [ 840.751747][ T5872] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 840.769052][ T5872] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 840.777432][ T5872] em28xx 5-1:0.132: No AC97 audio processor [ 841.659175][T11358] usb 3-1: reset high-speed USB device number 73 using dummy_hcd [ 841.660288][ T5872] usb 5-1: Decoder not found [ 841.678389][ T5872] em28xx 5-1:0.132: failed to create media graph [ 841.702365][ T5872] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 841.730353][ T5872] em28xx 5-1:0.132: Remote control support is not available for this card. [ 841.763300][T14453] em28xx 5-1:0.132: Closing input extension [ 841.795829][T14453] em28xx 5-1:0.132: Freeing device [ 841.813672][T11358] usb 3-1: device descriptor read/64, error -32 [ 842.134882][T15543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2546'. [ 842.573217][T11358] usb 3-1: reset high-speed USB device number 73 using dummy_hcd [ 842.903851][T11358] usb 3-1: device descriptor read/64, error -32 [ 843.177122][T15552] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=15552 comm=syz.4.2551 [ 843.197701][T11358] usb 3-1: reset high-speed USB device number 73 using dummy_hcd [ 843.253426][T11358] usb 3-1: device descriptor read/8, error -32 [ 843.701889][T15556] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2549'. [ 844.381754][T11358] usb 3-1: reset high-speed USB device number 73 using dummy_hcd [ 844.443411][T11358] usb 3-1: device descriptor read/8, error -32 [ 844.533478][T15561] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2553'. [ 844.553229][T11358] raw-gadget.2 gadget.2: failed to queue suspend event [ 844.563876][ T5920] usb 3-1: USB disconnect, device number 73 [ 844.586635][ T5920] raw-gadget.2 gadget.2: failed to queue reset event [ 845.378287][ T5920] raw-gadget.2 gadget.2: failed to queue resume event [ 845.446757][T15570] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 845.446757][T15570] program syz.3.2545 not setting count and/or reply_len properly [ 845.463469][ T5920] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 845.463677][ C1] raw-gadget.2 gadget.2: ignoring, device is not running [ 845.497145][ T5920] raw-gadget.2 gadget.2: failed to queue reset event [ 846.493210][ T5920] raw-gadget.2 gadget.2: failed to queue resume event [ 846.553226][T11358] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 846.563135][ T5920] usb 3-1: device descriptor read/64, error -32 [ 846.763489][ T5920] raw-gadget.2 gadget.2: failed to queue suspend event [ 846.770595][ T5920] raw-gadget.2 gadget.2: failed to queue reset event [ 846.823340][T11358] usb 4-1: device descriptor read/64, error -71 [ 846.931411][ T5920] raw-gadget.2 gadget.2: failed to queue resume event [ 847.132155][T11358] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 847.207222][T15528] raw-gadget.2 gadget.2: failed to queue suspend event [ 847.283173][ T5920] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 847.283222][T15528] raw-gadget.2 gadget.2: failed to queue disconnect event [ 847.333202][T11358] usb 4-1: device descriptor read/64, error -71 [ 847.443351][T11358] usb usb4-port1: attempt power cycle [ 847.873173][T11358] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 849.017410][ T49] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 849.063263][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 849.187880][T11358] usb 4-1: device descriptor read/8, error -71 [ 849.303267][ T49] usb 3-1: Using ep0 maxpacket: 32 [ 849.311532][ T49] usb 3-1: config 0 has an invalid interface number: 80 but max is 0 [ 849.331677][ T49] usb 3-1: config 0 has no interface number 0 [ 849.348256][ T49] usb 3-1: config 0 interface 80 has no altsetting 0 [ 849.369514][ T49] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=54.b7 [ 849.500433][ T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.534566][ T49] usb 3-1: Product: syz [ 849.650461][ T49] usb 3-1: Manufacturer: syz [ 849.990615][ T49] usb 3-1: SerialNumber: syz [ 850.010655][ T49] usb 3-1: config 0 descriptor?? [ 850.042075][ T49] usbhid 3-1:0.80: couldn't find an input interrupt endpoint [ 850.735602][T15629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2567'. [ 851.506158][ T5920] usb 3-1: USB disconnect, device number 76 [ 851.617160][T15634] ªªªªªª: renamed from lo [ 851.854691][T15636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2569'. [ 855.385924][T15664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2572'. [ 855.427045][T15664] ip6gretap0: entered promiscuous mode [ 855.432784][T15664] macvtap1: entered promiscuous mode [ 855.485621][T15664] macvtap1: entered allmulticast mode [ 855.490998][T15664] ip6gretap0: entered allmulticast mode [ 855.914628][T15650] ip6gretap0: left allmulticast mode [ 855.939232][T15650] ip6gretap0: left promiscuous mode [ 856.074511][T15682] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 856.281729][T15671] SELinux: failed to load policy [ 856.455941][T15684] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 856.549344][T11358] lo speed is unknown, defaulting to 1000 [ 856.556690][T11358] syz2: Port: 1 Link DOWN [ 856.621690][T15686] netlink: 'syz.2.2582': attribute type 10 has an invalid length. [ 856.654642][T15686] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2582'. [ 859.234004][ T30] audit: type=1326 audit(1766989804.296:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15700 comm="syz.1.2587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727598f749 code=0x7ffc0000 [ 859.554060][T15711] xt_hashlimit: max too large, truncated to 1048576 [ 859.633197][ T30] audit: type=1326 audit(1766989804.306:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15700 comm="syz.1.2587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f727598f749 code=0x7ffc0000 [ 859.707292][ T30] audit: type=1326 audit(1766989804.346:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15700 comm="syz.1.2587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727598f749 code=0x7ffc0000 [ 859.824338][ T30] audit: type=1326 audit(1766989804.376:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15700 comm="syz.1.2587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7275991667 code=0x7ffc0000 [ 859.870392][ T30] audit: type=1326 audit(1766989804.376:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15700 comm="syz.1.2587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727598f749 code=0x7ffc0000 [ 860.205348][T15721] FAT-fs (loop7): unable to read boot sector [ 860.633698][ T30] audit: type=1326 audit(1766989804.376:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15700 comm="syz.1.2587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f727598f749 code=0x7ffc0000 [ 860.663278][ T30] audit: type=1326 audit(1766989804.386:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15700 comm="syz.1.2587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727598f749 code=0x7ffc0000 [ 860.713191][ T30] audit: type=1326 audit(1766989804.386:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15700 comm="syz.1.2587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727598f749 code=0x7ffc0000 [ 860.757111][ T30] audit: type=1400 audit(1766989806.206:807): avc: denied { mounton } for pid=15709 comm="syz.3.2588" path="/504/file0" dev="tmpfs" ino=2650 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 861.853146][ T789] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 861.973159][ T49] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 862.123377][ T49] usb 5-1: Using ep0 maxpacket: 32 [ 862.138768][ T49] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 862.190709][T15738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2596'. [ 862.214861][ T49] usb 5-1: config 0 has no interface number 0 [ 862.306581][ T49] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 862.414194][ T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.478327][ T789] usb 4-1: Using ep0 maxpacket: 32 [ 862.484957][ T789] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 862.493288][ T789] usb 4-1: config 0 has no interface number 0 [ 862.499424][ T789] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 862.521326][ T49] usb 5-1: Product: syz [ 862.524902][ T789] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 862.534843][ T49] usb 5-1: Manufacturer: syz [ 862.543135][ T49] usb 5-1: SerialNumber: syz [ 862.556465][ T49] usb 5-1: config 0 descriptor?? [ 862.573424][ T49] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 862.574804][ T789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.606854][ T789] usb 4-1: Product: syz [ 862.625705][ T789] usb 4-1: Manufacturer: syz [ 862.638579][ T789] usb 4-1: SerialNumber: syz [ 862.659156][ T789] usb 4-1: config 0 descriptor?? [ 862.679677][ T789] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 862.700852][ T789] em28xx 4-1:0.132: Video interface 132 found: [ 863.459289][T15744] openvswitch: netlink: Missing key (keys=10000040, expected=100) [ 863.697121][ T789] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 863.922758][ T49] usb 5-1: qt2_attach - failed to power on unit: -71 [ 863.931023][ T49] quatech2 5-1:0.51: probe with driver quatech2 failed with error -71 [ 863.966594][ T49] usb 5-1: USB disconnect, device number 63 [ 864.177147][ T30] audit: type=1400 audit(1766989810.176:808): avc: denied { listen } for pid=15753 comm="syz.1.2601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 864.339712][ T789] em28xx 4-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 864.601869][ T30] audit: type=1800 audit(1766989810.276:809): pid=15764 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.2597" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 864.988241][ T789] em28xx 4-1:0.132: failed to read eeprom (err=-5) [ 865.050937][ T789] em28xx 4-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 865.143655][T15772] openvswitch: netlink: IP tunnel dst address not specified [ 865.163293][ T789] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 865.171106][ T789] em28xx 4-1:0.132: analog set to bulk mode. [ 865.207539][ T9] em28xx 4-1:0.132: Registering V4L2 extension [ 865.219884][ T789] usb 4-1: USB disconnect, device number 75 [ 865.244171][ T789] em28xx 4-1:0.132: Disconnecting em28xx [ 866.019108][ T5919] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 866.262364][ T9] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 866.285597][ T5919] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 866.303170][ T5919] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 866.327261][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 866.351392][ T9] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 866.353123][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 212, setting to 64 [ 866.531967][ T5919] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 866.533041][ T9] em28xx 4-1:0.132: No AC97 audio processor [ 866.570613][ T9] usb 4-1: Decoder not found [ 866.574912][ T5919] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 866.577615][ T9] em28xx 4-1:0.132: failed to create media graph [ 866.607043][ T9] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 866.621798][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.630768][ T9] em28xx 4-1:0.132: Remote control support is not available for this card. [ 866.724361][ T5919] usb 3-1: Product: syz [ 866.728523][ T5919] usb 3-1: Manufacturer: syz [ 866.743134][ T5919] usb 3-1: SerialNumber: syz [ 866.749720][ T5919] usb 3-1: config 0 descriptor?? [ 866.754600][ T789] em28xx 4-1:0.132: Closing input extension [ 866.755741][T15774] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 866.913371][ T789] em28xx 4-1:0.132: Freeing device [ 867.244579][T15774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 867.268857][T15774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 867.353171][ T5919] rc_core: IR keymap rc-xbox-dvd not found [ 867.359138][ T5919] Registered IR keymap rc-empty [ 867.424028][ T5919] rc rc0: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 867.814204][ T5919] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input20 [ 867.836089][ T5919] usb 3-1: USB disconnect, device number 77 [ 867.842002][ C1] xbox_remote 3-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 868.813332][ T9] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 869.373252][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 869.620738][ T49] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 869.643159][ T9] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 869.651426][ T9] usb 5-1: config 0 has no interface number 0 [ 869.662834][ T9] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 869.713841][ T9] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 869.722868][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.761520][ T9] usb 5-1: Product: syz [ 869.769987][ T9] usb 5-1: Manufacturer: syz [ 869.784175][ T9] usb 5-1: SerialNumber: syz [ 869.799381][ T9] usb 5-1: config 0 descriptor?? [ 869.893021][ T9] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 869.902949][ T9] em28xx 5-1:0.132: Video interface 132 found: [ 869.925149][ T49] usb 2-1: Using ep0 maxpacket: 32 [ 869.939686][T15856] netlink: 'syz.2.2625': attribute type 12 has an invalid length. [ 869.948462][ T49] usb 2-1: config 0 has an invalid interface number: 80 but max is 0 [ 869.967984][T15856] netlink: 'syz.2.2625': attribute type 29 has an invalid length. [ 869.977644][T15856] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2625'. [ 869.977712][ T49] usb 2-1: config 0 has no interface number 0 [ 870.041397][ T49] usb 2-1: config 0 interface 80 has no altsetting 0 [ 870.075907][ T49] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=54.b7 [ 870.084361][T15860] netlink: 'syz.3.2626': attribute type 12 has an invalid length. [ 870.092998][T15860] netlink: 'syz.3.2626': attribute type 29 has an invalid length. [ 870.101040][T15860] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2626'. [ 870.159846][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.186952][ T49] usb 2-1: Product: syz [ 870.198391][ T49] usb 2-1: Manufacturer: syz [ 870.209380][ T49] usb 2-1: SerialNumber: syz [ 870.227966][ T49] usb 2-1: config 0 descriptor?? [ 870.246444][ T49] usbhid 2-1:0.80: couldn't find an input interrupt endpoint [ 870.355480][ T9] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 870.969251][ T9] em28xx 5-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 870.978826][ T9] em28xx 5-1:0.132: failed to read eeprom (err=-5) [ 870.992376][ T9] em28xx 5-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 871.073153][ T9] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 871.085156][ T9] em28xx 5-1:0.132: analog set to bulk mode. [ 871.097824][ T789] em28xx 5-1:0.132: Registering V4L2 extension [ 871.287271][ T9] usb 5-1: USB disconnect, device number 64 [ 871.440768][ T9] em28xx 5-1:0.132: Disconnecting em28xx [ 871.663549][ T49] usb 2-1: USB disconnect, device number 71 [ 871.739139][ T789] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 871.755790][ T789] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 871.776468][ T789] em28xx 5-1:0.132: No AC97 audio processor [ 871.835578][ T789] usb 5-1: Decoder not found [ 871.847466][ T789] em28xx 5-1:0.132: failed to create media graph [ 871.864019][ T789] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 871.880937][ T789] em28xx 5-1:0.132: Remote control support is not available for this card. [ 871.890779][ T9] em28xx 5-1:0.132: Closing input extension [ 871.899149][ T9] em28xx 5-1:0.132: Freeing device [ 873.248844][ T30] audit: type=1326 audit(1766989819.256:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15902 comm="syz.2.2638" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa4fb18f749 code=0x0 [ 873.302380][T15904] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2638'. [ 873.593928][T15918] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2641'. [ 873.818849][ T30] audit: type=1400 audit(1766989819.616:811): avc: denied { accept } for pid=15912 comm="syz.0.2641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 875.117337][T15932] ------------[ cut here ]------------ [ 875.122817][T15932] WARNING: drivers/gpu/drm/drm_prime.c:224 at drm_prime_destroy_file_private+0x43/0x60, CPU#0: syz.4.2648/15932 [ 875.134678][T15932] Modules linked in: [ 875.138549][T15932] CPU: 0 UID: 0 PID: 15932 Comm: syz.4.2648 Tainted: G L syzkaller #0 PREEMPT(full) [ 875.149466][T15932] Tainted: [L]=SOFTLOCKUP [ 875.153775][T15932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 875.163919][T15932] RIP: 0010:drm_prime_destroy_file_private+0x43/0x60 [ 875.170570][T15932] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 21 48 8b 83 90 00 00 00 48 85 c0 75 06 5b e9 63 3f 6c fc e8 5e 3f 6c fc 90 <0f> 0b 90 5b e9 54 3f 6c fc e8 4f 19 d6 fc eb d8 66 66 2e 0f 1f 84 [ 875.190630][T15932] RSP: 0018:ffffc90003787ca0 EFLAGS: 00010293 [ 875.196719][T15932] RAX: 0000000000000000 RBX: ffff88803008e380 RCX: ffffffff8b7965d1 [ 875.204681][T15932] RDX: ffff8880562da4c0 RSI: ffffffff8552a762 RDI: ffff88803008e410 [ 875.212622][T15932] RBP: ffff88803008e000 R08: 0000000000000001 R09: fffff520006f0f74 [ 875.220571][T15932] R10: ffffc90003787ba7 R11: 0000000000000000 R12: ffff888025c84000 [ 875.228526][T15932] R13: ffff88803008e2b0 R14: 0000000000000000 R15: ffff88803008e2d8 [ 875.236573][T15932] FS: 000055555fc46500(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 875.245522][T15932] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 875.252087][T15932] CR2: 000000110c3d54e7 CR3: 000000004d194000 CR4: 00000000003526f0 [ 875.260143][T15932] Call Trace: [ 875.263487][T15932] [ 875.266401][T15932] drm_file_free.part.0+0x7ee/0xcd0 [ 875.271577][T15932] ? __pfx___fsnotify_parent+0x10/0x10 [ 875.277030][T15932] drm_close_helper.isra.0+0x186/0x1f0 [ 875.282464][T15932] drm_release+0x1ab/0x360 [ 875.286886][T15932] ? __pfx_drm_release+0x10/0x10 [ 875.291797][T15932] __fput+0x402/0xb70 [ 875.295774][T15932] task_work_run+0x150/0x240 [ 875.300336][T15932] ? __pfx_task_work_run+0x10/0x10 [ 875.305469][T15932] ? __do_sys_close_range+0x278/0x730 [ 875.310821][T15932] exit_to_user_mode_loop+0xfb/0x540 [ 875.316096][T15932] do_syscall_64+0x4ee/0xf80 [ 875.320660][T15932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.326538][T15932] RIP: 0033:0x7f0308d8f749 [ 875.330922][T15932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 875.350521][T15932] RSP: 002b:00007ffe4e5ca578 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 875.358919][T15932] RAX: 0000000000000000 RBX: 00000000000d5a52 RCX: 00007f0308d8f749 [ 875.366943][T15932] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 875.374971][T15932] RBP: 00007f0308fe7da0 R08: 0000000000000001 R09: 000000074e5ca86f [ 875.382912][T15932] R10: 0000001b2f020000 R11: 0000000000000246 R12: 00007f0308fe5fac [ 875.390863][T15932] R13: 00007f0308fe5fa0 R14: ffffffffffffffff R15: 00007ffe4e5ca690 [ 875.398847][T15932] [ 875.401854][T15932] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 875.409117][T15932] CPU: 0 UID: 0 PID: 15932 Comm: syz.4.2648 Tainted: G L syzkaller #0 PREEMPT(full) [ 875.420028][T15932] Tainted: [L]=SOFTLOCKUP [ 875.424325][T15932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 875.434358][T15932] Call Trace: [ 875.437616][T15932] [ 875.440522][T15932] dump_stack_lvl+0x3d/0x1f0 [ 875.445097][T15932] vpanic+0x640/0x6f0 [ 875.449056][T15932] ? drm_prime_destroy_file_private+0x43/0x60 [ 875.455100][T15932] panic+0xca/0xd0 [ 875.458799][T15932] ? __pfx_panic+0x10/0x10 [ 875.463198][T15932] ? check_panic_on_warn+0x1f/0xb0 [ 875.468287][T15932] check_panic_on_warn+0xab/0xb0 [ 875.473204][T15932] __warn+0x108/0x3c0 [ 875.477164][T15932] __report_bug+0x2a0/0x520 [ 875.481642][T15932] ? drm_prime_destroy_file_private+0x43/0x60 [ 875.487688][T15932] ? __pfx___report_bug+0x10/0x10 [ 875.492691][T15932] ? find_held_lock+0x2b/0x80 [ 875.497354][T15932] ? drm_master_release+0x2c1/0x600 [ 875.502533][T15932] ? drm_prime_destroy_file_private+0x43/0x60 [ 875.508575][T15932] report_bug+0xb2/0x220 [ 875.512793][T15932] ? drm_prime_destroy_file_private+0x43/0x60 [ 875.518837][T15932] handle_bug+0x127/0x260 [ 875.523154][T15932] exc_invalid_op+0x17/0x50 [ 875.527645][T15932] asm_exc_invalid_op+0x1a/0x20 [ 875.532471][T15932] RIP: 0010:drm_prime_destroy_file_private+0x43/0x60 [ 875.539121][T15932] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 21 48 8b 83 90 00 00 00 48 85 c0 75 06 5b e9 63 3f 6c fc e8 5e 3f 6c fc 90 <0f> 0b 90 5b e9 54 3f 6c fc e8 4f 19 d6 fc eb d8 66 66 2e 0f 1f 84 [ 875.558707][T15932] RSP: 0018:ffffc90003787ca0 EFLAGS: 00010293 [ 875.564750][T15932] RAX: 0000000000000000 RBX: ffff88803008e380 RCX: ffffffff8b7965d1 [ 875.572699][T15932] RDX: ffff8880562da4c0 RSI: ffffffff8552a762 RDI: ffff88803008e410 [ 875.580648][T15932] RBP: ffff88803008e000 R08: 0000000000000001 R09: fffff520006f0f74 [ 875.588596][T15932] R10: ffffc90003787ba7 R11: 0000000000000000 R12: ffff888025c84000 [ 875.596544][T15932] R13: ffff88803008e2b0 R14: 0000000000000000 R15: ffff88803008e2d8 [ 875.604494][T15932] ? __mutex_unlock_slowpath+0x161/0x790 [ 875.610107][T15932] ? drm_prime_destroy_file_private+0x42/0x60 [ 875.616153][T15932] drm_file_free.part.0+0x7ee/0xcd0 [ 875.621333][T15932] ? __pfx___fsnotify_parent+0x10/0x10 [ 875.626778][T15932] drm_close_helper.isra.0+0x186/0x1f0 [ 875.632223][T15932] drm_release+0x1ab/0x360 [ 875.636621][T15932] ? __pfx_drm_release+0x10/0x10 [ 875.641538][T15932] __fput+0x402/0xb70 [ 875.645498][T15932] task_work_run+0x150/0x240 [ 875.650068][T15932] ? __pfx_task_work_run+0x10/0x10 [ 875.655159][T15932] ? __do_sys_close_range+0x278/0x730 [ 875.660517][T15932] exit_to_user_mode_loop+0xfb/0x540 [ 875.665784][T15932] do_syscall_64+0x4ee/0xf80 [ 875.670355][T15932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.676225][T15932] RIP: 0033:0x7f0308d8f749 [ 875.680615][T15932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 875.700197][T15932] RSP: 002b:00007ffe4e5ca578 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 875.708585][T15932] RAX: 0000000000000000 RBX: 00000000000d5a52 RCX: 00007f0308d8f749 [ 875.716534][T15932] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 875.724479][T15932] RBP: 00007f0308fe7da0 R08: 0000000000000001 R09: 000000074e5ca86f [ 875.732425][T15932] R10: 0000001b2f020000 R11: 0000000000000246 R12: 00007f0308fe5fac [ 875.740373][T15932] R13: 00007f0308fe5fa0 R14: ffffffffffffffff R15: 00007ffe4e5ca690 [ 875.748334][T15932] [ 875.751591][T15932] Kernel Offset: disabled [ 875.755886][T15932] Rebooting in 86400 seconds..