last executing test programs: 22.939840798s ago: executing program 3 (id=6381): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0x1) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x2a, &(0x7f0000000100)=r5, 0x4) sendmsg$unix(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)="2f036792620408", 0x7}], 0x1, 0x0, 0x0, 0x8c1}, 0x20004011) recvmsg$unix(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000080)={{}, {0x1, 0x7}, [], {0x4, 0x5}, [], {0x10, 0x3}, {0x20, 0x7}}, 0x24, 0x3) setreuid(0xffffffffffffffff, 0xee01) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x2000, 0x1) 19.966695301s ago: executing program 3 (id=6396): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000180)=ANY=[@ANYRES16=r0], 0x7c}}, 0x40800) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101e040031000022000001090224000100000000090400000103000000092100000001220500090581030002"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r2, &(0x7f00000019c0)={0x2020}, 0x2020) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24008004) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) msgsnd(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0102000000070000"], 0x8, 0x0) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_ADD_PID(r4, 0x40026f33, &(0x7f0000000100)=0x808c) r5 = add_key(&(0x7f0000000300)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000200)='u', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) r6 = syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x3, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x10, 0xa4, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x4, 0xa, 0xc}}]}}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x201, 0x0, 0x6, 0x1, 0x20, 0x8}, 0x4a, &(0x7f0000000580)={0x5, 0xf, 0x4a, 0x5, [@wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0x1, 0x7, 0xfa, 0x8e}, @wireless={0xb, 0x10, 0x1, 0xc, 0x42, 0x4, 0xf8, 0xa, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "5e3d52d5ead54273333945d5e9630a7b"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "f7ce93308177a68ae9d7fb66905d0681"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x5, 0x4, 0xdab}]}, 0x9, [{0x40, &(0x7f0000000380)=@string={0x40, 0x3, "50cc2e624ee3c26143d04db9469349fbb37470b7c27e0239aef3cc57437a6148cd2d8cfcf79648fe5cddefad859bd4de1abadd06646fd2b444ebcbf64800"}}, {0xed, &(0x7f0000000600)=@string={0xed, 0x3, "77dfdba1d0575669898ce2bbe5a6335c47e9cb2a59c5e01ccc7ff9b0a70dcf531459bb85c857f132a9001b5b1b7513d8ba1628d208b783d895d452e24ab8d08857662e058a7a59df3de4a6b9fbd593951ef38a1df3c5f089098e447e96c278370f01ccb717a6fac296fdb663841ef92df668b6d34d2bc00845a9a570c8996d2b2874d52208bc336f4526eb5c4bea6aafdfe3de6cb870f57cb42432966f0688971e83a6a481336ba9d5f9161b6028429ad360ad0a42a09464725a2f5fd7321829717b016ce19c383f64c25a2090957450404ef8f46df0707fd9b7d4a862fa7c674478d07b89da1989ac83b6"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x44a}}, {0xae, &(0x7f0000000740)=@string={0xae, 0x3, "86978bc2327565f734835554c421629bd1ebea2834fbad70147fc70806f6e58442cd3c79f47753597b0b37fc0e58f724200b0ab65ea8907c7d59c13527eee5d8674c32c4557fd9dc6b6fe0d0d961728877379ed1b5eac99d6e90c0c2065a85a9b2a3dc9c402748c554aec0d6d1ed7150ea5a8bef3578c3fb7e87f3d14fb21ab3dd789186943f6410c79452cabd9b7669bc37dee78d31be8cd29b3c115ccf4c52351adde48b1380710ee9fccb"}}, {0xdb, &(0x7f0000000800)=@string={0xdb, 0x3, "96761758a160cae776d16f7409407e50189c120774a65dc202f0a21b61d26e33c5f5d1cb78b7d92de5c8304aa9cc16f4f498c8dcbdc300adf67a6bb7c474873ec957547bfa08adc625509b6cdc3c4764ab0b51bf13955bb22537951829eea72f263c10b71b3badc484aff5fc5050ee70536ae089fd3a64c87a644cf66b54d9a7e5859e8a323a0b9d542e80a8b3d1d7f95ecfffd60ea123f1c44b874e311e842dd6c3292172db1baebb8529bdd73ed1443cbc2369c8fdeaa4805d8637a2e1fc5600080c662922e22e6b880b08bf9d18ca15ca76586f2e286a08"}}, {0x77, &(0x7f0000000900)=@string={0x77, 0x3, "0a38e30bcfab3a87af9b7f85da6d0ce0e56e7e203f0f74bce0130845a22493788bd5d6cd8ffa1ac932cd7b46a27f1abe87193fec86ff21e7e6df61a9ee097f75d6f796f6125fa9052a09e2e0fc1e998417a5bb5f85fd16751e27a1c752f359bf7eef1eb127080e02a81f4b98612a4a9aa3e03faebf"}}, {0x3e, &(0x7f0000000980)=ANY=[@ANYBLOB="3e039e1dccaee7baf082e1c89817b40c002ab1bcdb68d26979d7f9ead0baa083114b9a5af79dd9667751bccf0c8baa454b575bf55eeeb58c446449469856"]}, {0xe6, &(0x7f00000009c0)=@string={0xe6, 0x3, "e26d97d196c420844c60d47758ab5ac460ca29d6f27a2e93410bc462865c97d8d34f3111daeede39d9a22f27e55864756efe2447668d2d87663e243d8200de7c7c5d39a3851a60b6c138d62081d400ffaaa6c4ca8302f610e39f2f3d9301ba618b06ef66ab466e536de6b6be11c55e857d819806652aeefe34887aaa2c3a4111f8212a067850072fd8039977763599abe15de89dc058318f89d50e8899f3e8693bd17632c6db34fa8162f33d6c8b4833aafa3d04634f290cd124398e0c942183192e35942c2747e6c977b5c61775696a1415ee3c22f0fb6ed3f964ab1f28cd16ecb4ad7e"}}, {0x5e, &(0x7f0000000ac0)=@string={0x5e, 0x3, "0abee0a285193beb797f4d28e782338e46b067d56768084b045170caa57a01cca2139decd1ff80efcd07bd333d720068e9f86c25376b41b6768602bfef1c69d6c36747d519a297449d57ff260d2b3ecdaa2c0d0fb0e292c93ee86370"}}]}) syz_usb_control_io$printer(r6, &(0x7f0000000dc0)={0x14, &(0x7f0000000c00)={0x40, 0x9, 0xff, {0xff, 0x22, "eb38b01f08d5f78f7624f16ff14b19b4217a3dba63595f06ddd60f478c182382843f97aaa2d928dac3482afddf1f3e070ceb5434918611555d244063aa360f37ed1ffaedce10cfe564c115eaabc4a4eb63697395a4b9c320a383e9c1abe33fa7c1a379a1a203b2296b5b3bf09c6197dcdafee39fb433a9d5c6eeff60d1b4aeebaf6026b6fdb5e7ff5b48ccbe04f7bb97c7f204ca0bc4542453d7f8ccb0cb17084ce1a36943ddb8fa37628d40d24082a70122acf7d870e36a1128979cb39a143f1de10b50d271f5712c1f0c9ab5a5ee2df5e130810f204cf095f27252eed52869f362c19321e7582aed31c995f5d88d857dfa9cb7b8b755fc3aeebf9dd7"}}, &(0x7f0000000d40)={0x0, 0x3, 0x69, @string={0x69, 0x3, "4dc7a2c93a09bb1d57b1a2227e6cbd3899849760815254d6ee1a45e4c647486286021ceab5f6deb0254058670602bc5ee2c7d188318d5031474e4445ac6b8f722a78711387efd2d9817a072f506feeaf58d00d50e5d0e40e67dab52ec69afb4609a2d238bb7d82"}}}, &(0x7f0000001000)={0x34, &(0x7f0000000e00)={0x40, 0x13, 0xfffffffffffffd10, "c810aee8dcd4f6028b86da0f875d49e06eeae7be1029674905b61a87"}, &(0x7f0000000e40)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000e80)={0x0, 0x8, 0x1, 0xf3}, &(0x7f0000000ec0)={0x20, 0x0, 0xd, {0x91, "1352a4b83d8e8fa86eff76a74c02cd4497a7b068012ee25cca443690abb3d347e686e40404ed2b57cc31dfc25b26e758c116eae75fdc4134fbd6d896e99cc8da952d2e491a0681a61fd071096451fe21a135a601941667b116bddc5bc113c3ab038c1f1f5d473e402f677c93fe4ed73eebb474c9baf9882415e5e0947fd4a63005aacecbc208cb5cf1da34002f1e0cc9ce"}}, &(0x7f0000000f80)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000fc0)={0x20, 0x0, 0x1, 0x10}}) 16.890527027s ago: executing program 3 (id=6405): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000480)={{'\x00', 0x1}, {0x3c}, 0x16, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)="89f5b14e4706ea30db65ca88f9f9e21dbf2c774c8c5851048a24a56977a6adf266c840d4bf8c13", 0x27, 0x0, &(0x7f0000000280)={0x2, 0x1a8, {0x1, 0xc, 0xe7, "0884138108708ad1998e03d944a18ecd061630d4215f8c8a7f8e5a407e137e34ce2eec59994d0af3df0f23a0cad94263357c12713f53731c007dba5da46351bbf64c130e1a3210f959042f43796f14f1f8c63045194993936060c22446a0914d58a843ba7332ac740b108cfc1f7458847bc9ee14b9ae251ed1fad5ec35bc317a9292b82fd45f6186ed543dd539a6157a56641e7aa613f9df6fa3b183d221414e7adea606fe37cec0f0d70edb98282cb2efb3e74c34109897d9fb40a2453cb7a803e3a2ec11a721a61c9d22c7bdccc9b31c0f6e49eb690a6052d351b80e3429e806444863fd32e0", 0xb4, "abf48086c40fe3938065e0e99cc9072a20f17dbb38858a262e0a1a8392ebe9742708af1b1a14986674e554eef98b3a75393584148252c29b2d8e8c3c3b76b3a8885e4403681389e3a02df392339df2d8358073540ee84960fb78e95daea1b1ea4dce3c94e1763c9914b630c1fe0664f9acc2d08c5ec858d5e13872d48eba5e9243701cf4495b6df877514352360afd886c56b3d19a160501824bf3f6c9efa7016fc33f3b4ce4984e05617331b7da732529db673d"}, 0x13, "4654282f583d58dea30bdd2a10216bcbdcf961"}, 0x1c7}) sendmmsg(r0, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000c00), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1000000000000000010000000800003fef3ee07135ba528b9ec8307509a665758106fd0a925bf29e10bc73eed1908fc99dedaa605c4f5b8403accba2ca0b8a43d4906d678afabf4e6d5c4c9e801a42aea0acb7fd68080024233fda844260e483ed29cdfc61f5a6a3cda43f1f8ceff7625a25ddcbb4953cc7c3b9bd1d3bb4ab3e47a39ca5c97ec1ad95bfa14bd0a0f2fd8506721a0a000000000000001839ecec83ef30727d2a9ce4d1eb915c29ea0cab0d208d13fe4b8213f48a46"], 0x10}}], 0x2, 0x4000045) syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) close(r2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(r7, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x42, &(0x7f0000001440)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @broadcast, @val={@void, {0x8100, 0x4, 0x1, 0x3}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0xb, 0x30, 0x66, 0x0, 0x8, 0x1, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x29}}, @redirect={0x5, 0x2, 0x0, @loopback, {0x5, 0x4, 0x3, 0x7, 0x501, 0x66, 0x7f2, 0x48, 0x2f, 0xf, @empty, @private=0xa010101}}}}}}, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @random="4910075ad2b9", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0x18, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x2, 0x0, 0x0, {[@mss={0x2, 0x4}]}}}}}}}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r11, {}, {0xd, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9, 0xb, 0x4}}}}]}, 0x40}}, 0x4010004) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="640000004ec6"}) 16.343654706s ago: executing program 3 (id=6411): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x1) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@generic={0x7, 0x3, '\x00'}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}}}}}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000500)=@mmap={0x1, 0x2, 0x4, 0x2000, 0x9, {}, {0x1, 0xc, 0x4, 0xc0, 0x0, 0x9, "04000010"}, 0x1, 0x1, {}, 0x1}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x8, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x20000000, 0x0, 0x0, 0x0, 0xd}, 0x94) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x4, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) personality(0x8) uname(&(0x7f0000000640)=""/4096) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x8, 0x81, {}, {0x4, 0x2, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000001500)=@multiplanar_overlay={0xf8, 0x1, 0x4, 0x40, 0x3f7402, {}, {0x1, 0x1, 0x7, 0x2, 0x6, 0x7, "7bec075c"}, 0x8001, 0x3, {0x0}, 0xfffffffc}) 15.407746327s ago: executing program 3 (id=6415): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xcfe3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) 15.303953696s ago: executing program 3 (id=6418): rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0x8, 0x2}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, 0x0, 0x9) prlimit64(0x0, 0xe, 0x0, 0x0) ptrace$pokeuser(0x6, 0x0, 0x388, 0x41d9fda7) openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) sync() sync() 14.21941951s ago: executing program 0 (id=6423): bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000079e35de55eb8000000000000000000000053f62b3bdbf040361d1d266f93c604547c8f461754edff49a1442d16f98c10b25e75df409e7ac6ad4b8941508e40aad50ce6ec462c6b58ac02d841cc0009b9385da60e11510a14bf5324a02add357ac7c286f168f93afb808a2d527cce81d41b2c7966369b0e375810ab318bf211b1e1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0xd8000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000ac0)={0xc4, 0x0, &(0x7f00000008c0)=[@exit_looper, @acquire_done={0x40106309, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000680)={@flat=@weak_handle={0x77682a85, 0x1, 0x1}, @fda={0x66646185, 0x8, 0x0, 0x27}, @fda={0x66646185, 0x3, 0x1, 0x7}}, &(0x7f00000005c0)={0x0, 0x18, 0x38}}, 0x40}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000800)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x4, 0x1, 0x32}, @ptr={0x70742a85, 0x0, &(0x7f0000000700)=""/222, 0xde, 0x2, 0x2e}}, &(0x7f0000000880)={0x0, 0x18, 0x38}}}, @enter_looper], 0xf9, 0x0, &(0x7f00000009c0)="96b9006dcccdb5eeab4dd902ed97cf1bb46034cef24f60bf130daee1dd6d1e36e6e1d969ac868f1d000f3ab37e42845e627d4e3940424bfc7e87a509ea4ea54648806573f9f057bd3a73700c30f60db9ae5338052e518251e4d931981a6495d3d3603121c7cb3fd83ac63066888ea5d4ee90d9c2207b820b53a8ccdfda3574cfb86d1f3aba4224fc85d27c824e7355bb298d0c30f0403dd493483354fd422f2ab45c271dadfe07f898978530bd74221117f2576c28e93ca5a369736aad457377248a50e7412ca178ad5c6f5133fcb967a7aaab6af9bc75b485189a77cf994a27e93f25418ff7cb6069b510fb55f06a7e632180699efa31c439"}) 14.004269334s ago: executing program 0 (id=6424): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) close(r2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0xd, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9, 0xb, 0x4}}}}]}, 0x40}}, 0x4010004) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="640000004ec6"}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f00000000c0)={0x80, [0x1ff, 0x2ff, 0x6dc, 0x1b, 0x9, 0x8, 0x1, 0x1, 0x5, 0x4, 0x7, 0x10, 0x1000, 0x57, 0x6, 0xa, 0xfff7, 0x3, 0xb53, 0x4, 0x7, 0x0, 0x200, 0x64d, 0x0, 0x1, 0x45, 0xb, 0xd4, 0x759b, 0x4, 0x2c, 0xf, 0x10, 0xfff, 0x6, 0x100, 0xfc, 0x9, 0x3ff, 0x6, 0x3, 0x201, 0x4002, 0x9, 0x8007, 0x6, 0x6], 0xa}) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r11) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) ptrace$setregs(0xd, r11, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r11, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) 13.486051877s ago: executing program 0 (id=6427): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x1) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x4, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) uname(&(0x7f0000000640)=""/4096) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000001500)=@multiplanar_overlay={0xf8, 0x1, 0x4, 0x40, 0x3f7402, {}, {0x1, 0x1, 0x7, 0x2, 0x6, 0x7, "7bec075c"}, 0x8001, 0x3, {0x0}, 0xfffffffc}) 12.284073242s ago: executing program 0 (id=6429): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000104000000000000", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fdffffff000000000000000000000000a329000000000000"], 0x50) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000500)={0x9, 0x0, [{0x0, 0x1, 0x0, 0x0, @irqchip={0x3}}, {0x9, 0x5, 0x1, 0x0, @sint={0x8, 0x5}}, {0x80000001, 0x3, 0x1, 0x0, @irqchip={0x7, 0x1}}, {0x6, 0x1, 0x0, 0x0, @irqchip={0x20002, 0x2}}, {0x5d400000, 0x3, 0x1, 0x0, @adapter={0xd, 0x5d889c2, 0x3, 0x3, 0x2}}, {0x80000000, 0x2, 0x1, 0x0, @adapter={0x6, 0x6, 0x4, 0x5dd, 0x2}}, {0x1, 0x1, 0x1, 0x0, @sint={0x5, 0x7}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x6, 0x5e9, 0x8000000000000001, 0x200, 0x58e}}, {0x8, 0x6, 0x0, 0x0, @irqchip={0x4, 0x6}}]}) fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x5, &(0x7f0000000040)=[{0xe3, 0x6, 0x3, 0x8}, {0x3, 0x1f, 0x5, 0x3}, {0x7, 0xff, 0x86, 0x10001}, {0x1, 0x5, 0x7, 0x1}, {0x8, 0x6, 0x8, 0x1}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, r5, 0x1, 0x80000, 0x1, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x54}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008000) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6400000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a310000000018000680050043001f0000000c00018008000140ffffffff05000500020000000500010006"], 0x64}}, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESOCT, @ANYRES32=r2, @ANYRESOCT=r6, @ANYRESOCT=0x0], 0x48) migrate_pages(r1, 0xa94b, &(0x7f0000000b80), 0x0) syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x0) openat$dsp(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) 11.35307702s ago: executing program 0 (id=6430): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x1) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@generic={0x7, 0x3, '\x00'}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}}}}}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000500)=@mmap={0x1, 0x2, 0x4, 0x2000, 0x9, {}, {0x1, 0xc, 0x4, 0xc0, 0x0, 0x9, "04000010"}, 0x1, 0x1, {}, 0x1}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x8, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x20000000, 0x0, 0x0, 0x0, 0xd}, 0x94) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x4, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) personality(0x8) uname(&(0x7f0000000640)=""/4096) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x8, 0x81, {}, {0x4, 0x2, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000001500)=@multiplanar_overlay={0xf8, 0x1, 0x4, 0x40, 0x3f7402, {}, {0x1, 0x1, 0x7, 0x2, 0x6, 0x7, "7bec075c"}, 0x8001, 0x3, {0x0}, 0xfffffffc}) 10.656202584s ago: executing program 0 (id=6431): add_key$fscrypt_provisioning(&(0x7f0000000280), 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6}) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r7 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x22001) ioctl$BLKBSZSET(r7, 0x40081271, 0x0) 9.199267171s ago: executing program 4 (id=6438): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89fc, &(0x7f0000000900)={'bond0\x00', @random="0000330c1100"}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0x0) fchdir(r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x14, 0x0, 0xfe, 0x4, 0xff, 0x6, 0x2000}}, 0x1c}}, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf50009058402"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000000400)=@string={0x4, 0x3, 'B7'}}, {0x0, 0x0}, {0x0, 0x0}]}) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x60) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4012011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 7.785859936s ago: executing program 4 (id=6443): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) r0 = getpid() getrlimit(0x2, &(0x7f0000000040)) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xd, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) syz_emit_ethernet(0xe, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffbb25467565691899bbbbbbbbbb88f7"], 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000006800e97800000000ffdbdf250a0000000000000008000500", @ANYRES32=r6, @ANYBLOB="024b6e36a11f104c8e5ca9e452400dde22c09a5d0b9b59158331a926c811251a7f8e3fee33a5cfc53ebac5cb7dd833eb865fc05e8a7ffbb21a657ca1a2d726e59f4b60b566d2a809c867aa06c90a580af446094f9889436cda73c9cb8ed300bf39f4381f42621fb755942dec89f171a9849e3f238b11ac5c635022ec5733370aba97c4d7359f651dfa02574e231fc1f7bdbf52e4687e5e5eb9d6036900d7bafd12df8842300b9f3dbe021c38a1953e6d7a82448440272909bb"], 0x20}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) preadv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x1a, 0x20f5) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x2192}}, 0x20}}, 0x0) madvise(&(0x7f00008a2000/0x1000)=nil, 0x1000, 0x11) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x6000001, 0x3032, 0xffffffffffffffff, 0x0) r8 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_control_io$uac2(r8, 0x0, &(0x7f00000008c0)={0x44, &(0x7f00000003c0)={0x40, 0xc, 0x9, "c21b5687afe1b6866f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r8, 0x82, 0x40, &(0x7f0000000080)=ANY=[@ANYRESHEX]) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 5.892190259s ago: executing program 2 (id=6452): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r4, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r3, 0x0) r7 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r7, &(0x7f0000000040), 0xc) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x10001, 0x1, 0x28}, 0x50) writev(r7, &(0x7f0000000180)=[{&(0x7f0000000280)="84", 0x1}], 0x1) 4.992185127s ago: executing program 2 (id=6454): socket$netlink(0x10, 0x3, 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.791932109s ago: executing program 2 (id=6455): socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) (async) r1 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r1, &(0x7f0000000a40)={&(0x7f0000000200)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000300)=""/152, 0x98}, {&(0x7f00000003c0)=""/131, 0x83}], 0x2, &(0x7f0000000800)=[@mask_cswp={0x58, 0x114, 0x9, {{0x3, 0x7f}, &(0x7f0000000280)=0xe, &(0x7f0000000480)=0x10001, 0x0, 0x4, 0x0, 0x0, 0x2, 0xffffffffffff7fff}}, @cswp={0x58, 0x114, 0x7, {{0x37d30c90, 0x9}, &(0x7f0000000600)=0xf, &(0x7f0000000640)=0x4c, 0x7ff, 0x100000000, 0x4, 0x9, 0x15, 0x200}}, @mask_cswp={0x58, 0x114, 0x9, {{0x10000, 0x5}, &(0x7f0000000680)=0x1, &(0x7f00000006c0)=0x101, 0x8d, 0x7, 0x1, 0x71e9, 0x40, 0x8000000000000001}}, @cswp={0x58, 0x114, 0x7, {{0x1, 0x10000}, &(0x7f0000000700)=0x40, &(0x7f0000000740)=0x6, 0x1, 0x52, 0x5, 0x4, 0x14, 0x6}}, @cswp={0x58, 0x114, 0x7, {{0xfcb8, 0x6}, &(0x7f0000000780)=0x7fffffffffffffff, &(0x7f00000007c0)=0x9ec00000, 0x1ff, 0x9, 0x511, 0x7, 0x42, 0x10000}}], 0x1b8, 0x4011}, 0x5010) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x421, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x50}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x44}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303, 0x39}, '\x00\x00\x00\x00\x00\x00\x00@', "0bf70000000000000000061000000001", "00000004", "ba0200"}, 0x28) (async, rerun: 64) syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x17b}, 0x0, 0x0) (rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) (async) close(0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005002100000000080500010004"], 0x4c}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) (async, rerun: 64) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000041782830eda83e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0xc) (rerun: 64) inotify_init() r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) (async, rerun: 32) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000500)=ANY=[@ANYBLOB="12010102000000006b1d010140000102030109025f0003010390040904000000010100000a2401000000000201020904010000010200000904010101010200000905010900000000000025010000000009040200000102000009040201010102000009058209000000000000250100000000c7b3c779d2adedd3c97604a22a86a97e2e8444c34ccaa64e7aec7c3d3f3b381f6c2d"], 0x0) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000a80)={'syztnl1\x00', 0x0, 0x1, 0x0, 0x10, 0xc9, {{0x12, 0x4, 0x2, 0x1, 0x48, 0x68, 0x0, 0x2, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x14, 0xde, 0x0, 0x5, [0x0, 0x9, 0xfffffa48, 0x5]}, @ra={0x94, 0x4, 0x1}, @noop, @lsrr={0x83, 0xf, 0x38, [@remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x26}]}, @generic={0x94, 0xa, "8ecb6a38e6f054c7"}]}}}}}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000180)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) r6 = socket(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0xf0fe, @loopback, 0x2}, 0x1c) (async) setsockopt$inet6_udp_int(r6, 0x11, 0x65, &(0x7f0000000040)=0x5, 0x4) (async, rerun: 64) sendmmsg$inet6(r6, &(0x7f0000006240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4004845) (async, rerun: 64) sendmsg$can_j1939(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x15, {0x0, 0xff}}, 0x18, &(0x7f0000000100)={&(0x7f0000000140)='\x00', 0x1}, 0x1, 0x0, 0x0, 0x8084}, 0x0) socket$tipc(0x1e, 0x5, 0x0) (async, rerun: 32) bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x6, {0x41, 0x0, 0xfffffffe}}, 0x10) (rerun: 32) socket$tipc(0x1e, 0x2, 0x0) 4.702113644s ago: executing program 4 (id=6456): syz_open_dev$radio(&(0x7f0000000040), 0x1, 0x2) r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) io_setup(0x1, &(0x7f0000000300)=0x0) io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0xfffffffe, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xf0f041, 0x2, '\x00', @value=0x1}}) (fail_nth: 1) 4.628096784s ago: executing program 2 (id=6457): bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) io_setup(0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0xa, 0x800, 0xfe) fsopen(0x0, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, 0x0, 0x0) 4.15207818s ago: executing program 4 (id=6458): syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002d3d6a08c6050592ac29000000010902240003000000000904030000ff4f9b000904b000003a3846000904"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000008102f8edb45038e9000086e8a4d009d472972245c03ea054d5ff9b344d62373d37ad08d453b4959418f977fd93812bcb6c28203ea174a00b3c92da977766f28eb5754609863983aa529d21eb64546edb0fed26731064cff711bc2ffc284da2e4111aa0eeb379e5856ffc86d0272d68aea2d31ceef9c02510650493a0d56982424fd3dbca60d7488b8484b8f154322d43bdc2e72abb2ee783ff0815a5c409dc9804ad1b12293f036635f269dc35c6072f573d2800e930539f76230a8b3160a8ea1f1772c4"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000740)=ANY=[@ANYRES64=r1, @ANYRES16=r2, @ANYRES32=r3, @ANYBLOB="426fd37471f1e7f594726459bf5ea505fcfec10898a8b438e72f5073b76aab68cd0d823af57bafe46c24e20d9caea8992a54f460a07aa2794b6103e6e09a6caf8af90f6f0c942875f0f9499b0c515a33bfe9555df760d8d80659102c28920ebb88ecbada03690e383f84f22b7d207a70e4d9d23ad92d98b6ec9eb8052b5698b4e05097b28d60"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(0x0, 0x0) openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x1, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x2c, &(0x7f0000000080)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}, @in6={0xa, 0x4e22, 0x9c, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) dup(r5) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000000c0)={r7, 0xfff, 0x6, 0x1ff, 0x3}, 0x14) 3.964873908s ago: executing program 2 (id=6459): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000180)=ANY=[@ANYRES16=r0], 0x7c}}, 0x40800) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101e040031000022000001090224000100000000090400000103000000092100000001220500090581030002"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r2, &(0x7f00000019c0)={0x2020}, 0x2020) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24008004) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) msgsnd(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0102000000070000"], 0x8, 0x0) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_ADD_PID(r4, 0x40026f33, &(0x7f0000000100)=0x808c) r5 = add_key(&(0x7f0000000300)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000200)='u', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) r6 = syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x3, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x10, 0xa4, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x4, 0xa, 0xc}}]}}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x201, 0x0, 0x6, 0x1, 0x20, 0x8}, 0x4a, &(0x7f0000000580)={0x5, 0xf, 0x4a, 0x5, [@wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0x1, 0x7, 0xfa, 0x8e}, @wireless={0xb, 0x10, 0x1, 0xc, 0x42, 0x4, 0xf8, 0xa, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "5e3d52d5ead54273333945d5e9630a7b"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "f7ce93308177a68ae9d7fb66905d0681"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x5, 0x4, 0xdab}]}, 0x9, [{0x40, &(0x7f0000000380)=@string={0x40, 0x3, "50cc2e624ee3c26143d04db9469349fbb37470b7c27e0239aef3cc57437a6148cd2d8cfcf79648fe5cddefad859bd4de1abadd06646fd2b444ebcbf64800"}}, {0xed, &(0x7f0000000600)=@string={0xed, 0x3, "77dfdba1d0575669898ce2bbe5a6335c47e9cb2a59c5e01ccc7ff9b0a70dcf531459bb85c857f132a9001b5b1b7513d8ba1628d208b783d895d452e24ab8d08857662e058a7a59df3de4a6b9fbd593951ef38a1df3c5f089098e447e96c278370f01ccb717a6fac296fdb663841ef92df668b6d34d2bc00845a9a570c8996d2b2874d52208bc336f4526eb5c4bea6aafdfe3de6cb870f57cb42432966f0688971e83a6a481336ba9d5f9161b6028429ad360ad0a42a09464725a2f5fd7321829717b016ce19c383f64c25a2090957450404ef8f46df0707fd9b7d4a862fa7c674478d07b89da1989ac83b6"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x44a}}, {0xae, &(0x7f0000000740)=@string={0xae, 0x3, "86978bc2327565f734835554c421629bd1ebea2834fbad70147fc70806f6e58442cd3c79f47753597b0b37fc0e58f724200b0ab65ea8907c7d59c13527eee5d8674c32c4557fd9dc6b6fe0d0d961728877379ed1b5eac99d6e90c0c2065a85a9b2a3dc9c402748c554aec0d6d1ed7150ea5a8bef3578c3fb7e87f3d14fb21ab3dd789186943f6410c79452cabd9b7669bc37dee78d31be8cd29b3c115ccf4c52351adde48b1380710ee9fccb"}}, {0xdb, &(0x7f0000000800)=@string={0xdb, 0x3, "96761758a160cae776d16f7409407e50189c120774a65dc202f0a21b61d26e33c5f5d1cb78b7d92de5c8304aa9cc16f4f498c8dcbdc300adf67a6bb7c474873ec957547bfa08adc625509b6cdc3c4764ab0b51bf13955bb22537951829eea72f263c10b71b3badc484aff5fc5050ee70536ae089fd3a64c87a644cf66b54d9a7e5859e8a323a0b9d542e80a8b3d1d7f95ecfffd60ea123f1c44b874e311e842dd6c3292172db1baebb8529bdd73ed1443cbc2369c8fdeaa4805d8637a2e1fc5600080c662922e22e6b880b08bf9d18ca15ca76586f2e286a08"}}, {0x77, &(0x7f0000000900)=@string={0x77, 0x3, "0a38e30bcfab3a87af9b7f85da6d0ce0e56e7e203f0f74bce0130845a22493788bd5d6cd8ffa1ac932cd7b46a27f1abe87193fec86ff21e7e6df61a9ee097f75d6f796f6125fa9052a09e2e0fc1e998417a5bb5f85fd16751e27a1c752f359bf7eef1eb127080e02a81f4b98612a4a9aa3e03faebf"}}, {0x3e, &(0x7f0000000980)=ANY=[@ANYBLOB="3e039e1dccaee7baf082e1c89817b40c002ab1bcdb68d26979d7f9ead0baa083114b9a5af79dd9667751bccf0c8baa454b575bf55eeeb58c446449469856"]}, {0xe6, &(0x7f00000009c0)=@string={0xe6, 0x3, "e26d97d196c420844c60d47758ab5ac460ca29d6f27a2e93410bc462865c97d8d34f3111daeede39d9a22f27e55864756efe2447668d2d87663e243d8200de7c7c5d39a3851a60b6c138d62081d400ffaaa6c4ca8302f610e39f2f3d9301ba618b06ef66ab466e536de6b6be11c55e857d819806652aeefe34887aaa2c3a4111f8212a067850072fd8039977763599abe15de89dc058318f89d50e8899f3e8693bd17632c6db34fa8162f33d6c8b4833aafa3d04634f290cd124398e0c942183192e35942c2747e6c977b5c61775696a1415ee3c22f0fb6ed3f964ab1f28cd16ecb4ad7e"}}, {0x5e, &(0x7f0000000ac0)=@string={0x5e, 0x3, "0abee0a285193beb797f4d28e782338e46b067d56768084b045170caa57a01cca2139decd1ff80efcd07bd333d720068e9f86c25376b41b6768602bfef1c69d6c36747d519a297449d57ff260d2b3ecdaa2c0d0fb0e292c93ee86370"}}]}) syz_usb_control_io$printer(r6, &(0x7f0000000dc0)={0x14, &(0x7f0000000c00)={0x40, 0x9, 0xff, {0xff, 0x22, "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"}}, &(0x7f0000000d40)={0x0, 0x3, 0x69, @string={0x69, 0x3, "4dc7a2c93a09bb1d57b1a2227e6cbd3899849760815254d6ee1a45e4c647486286021ceab5f6deb0254058670602bc5ee2c7d188318d5031474e4445ac6b8f722a78711387efd2d9817a072f506feeaf58d00d50e5d0e40e67dab52ec69afb4609a2d238bb7d82"}}}, &(0x7f0000001000)={0x34, &(0x7f0000000e00)={0x40, 0x13, 0xfffffffffffffd10, "c810aee8dcd4f6028b86da0f875d49e06eeae7be1029674905b61a87"}, &(0x7f0000000e40)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000e80)={0x0, 0x8, 0x1, 0xf3}, &(0x7f0000000ec0)={0x20, 0x0, 0xd, {0x91, "1352a4b83d8e8fa86eff76a74c02cd4497a7b068012ee25cca443690abb3d347e686e40404ed2b57cc31dfc25b26e758c116eae75fdc4134fbd6d896e99cc8da952d2e491a0681a61fd071096451fe21a135a601941667b116bddc5bc113c3ab038c1f1f5d473e402f677c93fe4ed73eebb474c9baf9882415e5e0947fd4a63005aacecbc208cb5cf1da34002f1e0cc9ce"}}, &(0x7f0000000f80)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000fc0)={0x20, 0x0, 0x1, 0x10}}) 1.39382285s ago: executing program 1 (id=6464): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}], 0x1, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x11, 0x29, 0x2}}, @ip_tos_u8={{0x11}}], 0x48}, 0x0) 1.147666009s ago: executing program 1 (id=6465): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x80080, 0x0) fsopen(&(0x7f0000000340)='ocfs2\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.083535143s ago: executing program 1 (id=6466): socket$netlink(0x10, 0x3, 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.046714483s ago: executing program 4 (id=6467): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000213000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mlock(&(0x7f0000655000/0x4000)=nil, 0x4000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x8, 0x4) 971.619776ms ago: executing program 2 (id=6468): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000180)=ANY=[@ANYRES16=r0], 0x7c}}, 0x40800) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101e040031000022000001090224000100000000090400000103000000092100000001220500090581030002"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r2, &(0x7f00000019c0)={0x2020}, 0x2020) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24008004) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_ADD_PID(r4, 0x40026f33, &(0x7f0000000100)=0x808c) r5 = add_key(&(0x7f0000000300)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000200)='u', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) r6 = syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x3, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x10, 0xa4, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x4, 0xa, 0xc}}]}}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x201, 0x0, 0x6, 0x1, 0x20, 0x8}, 0x4a, &(0x7f0000000580)={0x5, 0xf, 0x4a, 0x5, [@wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0x1, 0x7, 0xfa, 0x8e}, @wireless={0xb, 0x10, 0x1, 0xc, 0x42, 0x4, 0xf8, 0xa, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "5e3d52d5ead54273333945d5e9630a7b"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "f7ce93308177a68ae9d7fb66905d0681"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x5, 0x4, 0xdab}]}, 0x9, [{0x40, &(0x7f0000000380)=@string={0x40, 0x3, "50cc2e624ee3c26143d04db9469349fbb37470b7c27e0239aef3cc57437a6148cd2d8cfcf79648fe5cddefad859bd4de1abadd06646fd2b444ebcbf64800"}}, {0xed, &(0x7f0000000600)=@string={0xed, 0x3, "77dfdba1d0575669898ce2bbe5a6335c47e9cb2a59c5e01ccc7ff9b0a70dcf531459bb85c857f132a9001b5b1b7513d8ba1628d208b783d895d452e24ab8d08857662e058a7a59df3de4a6b9fbd593951ef38a1df3c5f089098e447e96c278370f01ccb717a6fac296fdb663841ef92df668b6d34d2bc00845a9a570c8996d2b2874d52208bc336f4526eb5c4bea6aafdfe3de6cb870f57cb42432966f0688971e83a6a481336ba9d5f9161b6028429ad360ad0a42a09464725a2f5fd7321829717b016ce19c383f64c25a2090957450404ef8f46df0707fd9b7d4a862fa7c674478d07b89da1989ac83b6"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x44a}}, {0xae, &(0x7f0000000740)=@string={0xae, 0x3, "86978bc2327565f734835554c421629bd1ebea2834fbad70147fc70806f6e58442cd3c79f47753597b0b37fc0e58f724200b0ab65ea8907c7d59c13527eee5d8674c32c4557fd9dc6b6fe0d0d961728877379ed1b5eac99d6e90c0c2065a85a9b2a3dc9c402748c554aec0d6d1ed7150ea5a8bef3578c3fb7e87f3d14fb21ab3dd789186943f6410c79452cabd9b7669bc37dee78d31be8cd29b3c115ccf4c52351adde48b1380710ee9fccb"}}, {0xdb, &(0x7f0000000800)=@string={0xdb, 0x3, "96761758a160cae776d16f7409407e50189c120774a65dc202f0a21b61d26e33c5f5d1cb78b7d92de5c8304aa9cc16f4f498c8dcbdc300adf67a6bb7c474873ec957547bfa08adc625509b6cdc3c4764ab0b51bf13955bb22537951829eea72f263c10b71b3badc484aff5fc5050ee70536ae089fd3a64c87a644cf66b54d9a7e5859e8a323a0b9d542e80a8b3d1d7f95ecfffd60ea123f1c44b874e311e842dd6c3292172db1baebb8529bdd73ed1443cbc2369c8fdeaa4805d8637a2e1fc5600080c662922e22e6b880b08bf9d18ca15ca76586f2e286a08"}}, {0x77, &(0x7f0000000900)=@string={0x77, 0x3, "0a38e30bcfab3a87af9b7f85da6d0ce0e56e7e203f0f74bce0130845a22493788bd5d6cd8ffa1ac932cd7b46a27f1abe87193fec86ff21e7e6df61a9ee097f75d6f796f6125fa9052a09e2e0fc1e998417a5bb5f85fd16751e27a1c752f359bf7eef1eb127080e02a81f4b98612a4a9aa3e03faebf"}}, {0x3e, &(0x7f0000000980)=ANY=[@ANYBLOB="3e039e1dccaee7baf082e1c89817b40c002ab1bcdb68d26979d7f9ead0baa083114b9a5af79dd9667751bccf0c8baa454b575bf55eeeb58c446449469856"]}, {0xe6, &(0x7f00000009c0)=@string={0xe6, 0x3, "e26d97d196c420844c60d47758ab5ac460ca29d6f27a2e93410bc462865c97d8d34f3111daeede39d9a22f27e55864756efe2447668d2d87663e243d8200de7c7c5d39a3851a60b6c138d62081d400ffaaa6c4ca8302f610e39f2f3d9301ba618b06ef66ab466e536de6b6be11c55e857d819806652aeefe34887aaa2c3a4111f8212a067850072fd8039977763599abe15de89dc058318f89d50e8899f3e8693bd17632c6db34fa8162f33d6c8b4833aafa3d04634f290cd124398e0c942183192e35942c2747e6c977b5c61775696a1415ee3c22f0fb6ed3f964ab1f28cd16ecb4ad7e"}}, {0x5e, &(0x7f0000000ac0)=@string={0x5e, 0x3, "0abee0a285193beb797f4d28e782338e46b067d56768084b045170caa57a01cca2139decd1ff80efcd07bd333d720068e9f86c25376b41b6768602bfef1c69d6c36747d519a297449d57ff260d2b3ecdaa2c0d0fb0e292c93ee86370"}}]}) syz_usb_control_io$printer(r6, &(0x7f0000000dc0)={0x14, &(0x7f0000000c00)={0x40, 0x9, 0xff, {0xff, 0x22, "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"}}, &(0x7f0000000d40)={0x0, 0x3, 0x69, @string={0x69, 0x3, "4dc7a2c93a09bb1d57b1a2227e6cbd3899849760815254d6ee1a45e4c647486286021ceab5f6deb0254058670602bc5ee2c7d188318d5031474e4445ac6b8f722a78711387efd2d9817a072f506feeaf58d00d50e5d0e40e67dab52ec69afb4609a2d238bb7d82"}}}, &(0x7f0000001000)={0x34, &(0x7f0000000e00)={0x40, 0x13, 0xfffffffffffffd10, "c810aee8dcd4f6028b86da0f875d49e06eeae7be1029674905b61a87"}, &(0x7f0000000e40)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000e80)={0x0, 0x8, 0x1, 0xf3}, &(0x7f0000000ec0)={0x20, 0x0, 0xd, {0x91, "1352a4b83d8e8fa86eff76a74c02cd4497a7b068012ee25cca443690abb3d347e686e40404ed2b57cc31dfc25b26e758c116eae75fdc4134fbd6d896e99cc8da952d2e491a0681a61fd071096451fe21a135a601941667b116bddc5bc113c3ab038c1f1f5d473e402f677c93fe4ed73eebb474c9baf9882415e5e0947fd4a63005aacecbc208cb5cf1da34002f1e0cc9ce"}}, &(0x7f0000000f80)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000fc0)={0x20, 0x0, 0x1, 0x10}}) 970.529774ms ago: executing program 1 (id=6469): bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) io_setup(0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0xa, 0x800, 0xfe) fsopen(0x0, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, 0x0, 0x0) 547.169167ms ago: executing program 4 (id=6470): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89fc, &(0x7f0000000900)={'bond0\x00', @random="0000330c1100"}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0x0) fchdir(r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x14, 0x0, 0xfe, 0x4, 0xff, 0x6, 0x2000}}, 0x1c}}, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf50009058402"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000000400)=@string={0x4, 0x3, 'B7'}}, {0x0, 0x0}, {0x0, 0x0}]}) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x60) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4012011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 531.201871ms ago: executing program 1 (id=6471): add_key$fscrypt_provisioning(&(0x7f0000000280), 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6}) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r7 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x22001) ioctl$BLKBSZSET(r7, 0x40081271, 0x0) 31.186492ms ago: executing program 1 (id=6472): r0 = socket(0x1d, 0x2, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000000300)=""/87, 0x57}], 0x2) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) openat$cgroup_int(r4, &(0x7f00000001c0)='cgroup.max.descendants\x00', 0x2, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$COMEDI_SUBDINFO(r4, 0x80486402, &(0x7f00000000c0)) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000240)=0x8) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = syz_io_uring_setup(0x891, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x4, 0x299}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}, 0x0, {0x0, r9}}) io_uring_enter(r6, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 0s ago: executing program 32 (id=6418): rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0x8, 0x2}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, 0x0, 0x9) prlimit64(0x0, 0xe, 0x0, 0x0) ptrace$pokeuser(0x6, 0x0, 0x388, 0x41d9fda7) openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) sync() sync() kernel console output (not intermixed with test programs): avc: denied { write } for pid=28959 comm="syz.1.6160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1769.843982][ T29] audit: type=1400 audit(1772468473.683:1983): avc: denied { connect } for pid=28959 comm="syz.1.6160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1769.864160][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1769.873818][ T24] usb 2-1: USB disconnect, device number 59 [ 1769.903374][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1769.918556][ T29] audit: type=1400 audit(1772468473.683:1984): avc: denied { setopt } for pid=28959 comm="syz.1.6160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1769.925104][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1769.952499][ T24] quatech2 2-1:0.51: device disconnected [ 1770.397498][T24371] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1770.408389][T24371] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1770.420697][T24371] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1770.663972][T29000] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1770.665737][T24371] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1770.709744][T24371] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1771.721757][T29014] Bluetooth: MGMT ver 1.23 [ 1771.747862][ T29] audit: type=1400 audit(1772468475.583:1985): avc: denied { create } for pid=29013 comm="syz.1.6169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1771.836145][ T29] audit: type=1400 audit(1772468475.583:1986): avc: denied { setopt } for pid=29013 comm="syz.1.6169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1772.649298][T28996] chnl_net:caif_netlink_parms(): no params data found [ 1772.732138][T28996] bridge0: port 1(bridge_slave_0) entered blocking state [ 1772.741096][T28996] bridge0: port 1(bridge_slave_0) entered disabled state [ 1772.749219][T28996] bridge_slave_0: entered allmulticast mode [ 1772.758424][T24371] Bluetooth: hci0: command tx timeout [ 1772.759459][T28996] bridge_slave_0: entered promiscuous mode [ 1772.834261][T28996] bridge0: port 2(bridge_slave_1) entered blocking state [ 1772.852737][T28996] bridge0: port 2(bridge_slave_1) entered disabled state [ 1773.098233][T28996] bridge_slave_1: entered allmulticast mode [ 1773.122784][T28996] bridge_slave_1: entered promiscuous mode [ 1773.755646][T28996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1773.802576][T28996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1773.855611][T29037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6175'. [ 1773.940507][T29048] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1774.046477][T29053] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1774.070751][T28996] team0: Port device team_slave_0 added [ 1774.087190][ T1102] bridge_slave_1: left allmulticast mode [ 1774.092847][ T1102] bridge_slave_1: left promiscuous mode [ 1774.102244][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 1774.167132][ T1102] bridge_slave_0: left allmulticast mode [ 1774.186575][ T1102] bridge_slave_0: left promiscuous mode [ 1774.216307][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state [ 1774.260155][T29063] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1774.373072][T29063] overlayfs: missing 'lowerdir' [ 1775.225091][T24371] Bluetooth: hci0: command tx timeout [ 1775.366163][ T10] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1775.527962][ T10] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 1775.545742][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1775.557033][ T10] usb 1-1: config 0 has no interface number 0 [ 1775.575600][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1775.585954][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1775.589548][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 1775.603749][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1775.614184][ T1102] bond0 (unregistering): Released all slaves [ 1775.619697][ T10] usb 1-1: Product: syz [ 1775.630281][ T10] usb 1-1: Manufacturer: syz [ 1775.639850][ T1102] bond1 (unregistering): Released all slaves [ 1775.640573][ T10] usb 1-1: SerialNumber: syz [ 1775.678184][ T1102] bond2 (unregistering): Released all slaves [ 1775.701343][ T10] usb 1-1: config 0 descriptor?? [ 1775.720391][ T1102] bond3 (unregistering): Released all slaves [ 1775.765913][ T1102] bond4 (unregistering): Released all slaves [ 1775.790026][T28996] team0: Port device team_slave_1 added [ 1775.810169][T29065] can0: slcan on pts0. [ 1775.898433][T28996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1775.915550][T29063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1775.921356][T28996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1775.950282][T29063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1776.009385][T29084] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 1776.026158][T28996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1776.067906][T28996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1776.078192][T28996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1776.144939][T28996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1776.163929][ T29] audit: type=1400 audit(1772468480.023:1987): avc: denied { getopt } for pid=29085 comm="syz.1.6184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1776.334752][T28996] hsr_slave_0: entered promiscuous mode [ 1776.352806][T28996] hsr_slave_1: entered promiscuous mode [ 1776.363596][T28996] debugfs: 'hsr0' already exists in 'hsr' [ 1776.369678][T28996] Cannot create hsr debugfs directory [ 1776.377887][ T29] audit: type=1400 audit(1772468480.243:1988): avc: denied { append } for pid=29091 comm="syz.1.6187" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1776.404006][T29093] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1776.441292][T29093] Error validating options; rc = [-22] [ 1776.449972][T29097] ip6tnl0: Caught tx_queue_len zero misconfig [ 1776.879006][ T1102] hsr_slave_0: left promiscuous mode [ 1776.893952][ T1102] hsr_slave_1: left promiscuous mode [ 1776.903238][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1776.933818][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1777.218119][ T10] uvcvideo 1-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 1777.240048][T24371] Bluetooth: hci0: command tx timeout [ 1777.247837][ T10] uvcvideo 1-1:0.64: No valid video chain found. [ 1777.426379][ T10] usb 1-1: USB disconnect, device number 67 [ 1778.139037][ T29] audit: type=1400 audit(1772468482.003:1989): avc: denied { ioctl } for pid=29133 comm="syz.1.6195" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0x4113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1778.277894][ T1102] team0 (unregistering): Port device team_slave_1 removed [ 1778.589387][ T1102] team0 (unregistering): Port device team_slave_0 removed [ 1779.059880][T29063] can0 (unregistered): slcan off pts0. [ 1779.194300][ T10] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 1779.356277][T24371] Bluetooth: hci0: command tx timeout [ 1779.756195][ T10] usb 2-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 1779.787455][ T5878] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1779.792738][ T10] usb 2-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 1779.815299][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1779.986340][ T5878] usb 1-1: Using ep0 maxpacket: 32 [ 1779.995809][ T10] usb 2-1: Product: syz [ 1779.999893][ T5878] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 1780.006845][ T10] usb 2-1: Manufacturer: syz [ 1780.022097][ T10] usb 2-1: SerialNumber: syz [ 1780.072066][ T5878] usb 1-1: config 0 has no interface number 0 [ 1780.116007][ T5878] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1780.156698][ T5878] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1780.208738][ T5878] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1780.219952][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1780.237135][ T5878] usb 1-1: Product: syz [ 1780.241386][ T5878] usb 1-1: Manufacturer: syz [ 1780.246468][ T5878] usb 1-1: SerialNumber: syz [ 1780.263126][ T10] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 1780.272152][ T5878] usb 1-1: config 0 descriptor?? [ 1780.285058][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 1780.324007][ T10] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1780.367714][ T10] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19) [ 1780.419552][ T10] dvb_usb_umt_010 2-1:54.0: probe with driver dvb_usb_umt_010 failed with error -22 [ 1780.562445][T29175] input: syz0 as /devices/virtual/input/input64 [ 1780.686940][ T5878] radio-si470x 1-1:0.35: DeviceID=0x9242 ChipID=0x0000 [ 1780.696240][ T5878] radio-si470x 1-1:0.35: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1780.842959][ T29] audit: type=1400 audit(1772468484.543:1990): avc: denied { connect } for pid=29173 comm="syz.4.6203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1780.894731][ T5878] radio-si470x 1-1:0.35: software version 146, hardware version 66 [ 1780.931447][ T5878] radio-si470x 1-1:0.35: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1781.021083][T20642] usb 2-1: USB disconnect, device number 60 [ 1781.122422][ T5878] radio-si470x 1-1:0.35: si470x_set_report: usb_control_msg returned -71 [ 1781.147515][ T5878] radio-si470x 1-1:0.35: submitting int urb failed (-90) [ 1781.180197][ T5878] radio-si470x 1-1:0.35: si470x_set_report: usb_control_msg returned -71 [ 1781.205579][ T5878] radio-si470x 1-1:0.35: probe with driver radio-si470x failed with error -22 [ 1781.207963][T28996] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1781.258991][T28996] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1781.270494][ T5878] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 1781.271622][T28996] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1781.305814][T28996] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1781.325330][ T5878] usb 1-1: USB disconnect, device number 68 [ 1782.001932][T28996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1782.073651][T28996] 8021q: adding VLAN 0 to HW filter on device team0 [ 1782.122328][ T693] bridge0: port 1(bridge_slave_0) entered blocking state [ 1782.129429][ T693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1782.170628][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 1782.177743][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1783.450736][T28996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1783.905384][T28996] veth0_vlan: entered promiscuous mode [ 1783.978201][T29243] cgroup: release_agent respecified [ 1783.994097][T28996] veth1_vlan: entered promiscuous mode [ 1784.099062][T28996] veth0_macvtap: entered promiscuous mode [ 1784.226172][ T10] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1784.280147][T28996] veth1_macvtap: entered promiscuous mode [ 1784.396208][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1784.444429][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1784.525724][T28996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1784.559966][ T10] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1784.647161][T28996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1784.658896][ T10] usb 2-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 1784.709366][ T10] usb 2-1: Manufacturer: syz [ 1784.747896][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1784.760881][ T10] usb 2-1: config 0 descriptor?? [ 1784.771631][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1784.781444][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1784.814339][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1785.081604][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1785.107160][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1785.215313][T27454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1785.255668][T27454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1785.996039][ T10] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:041E:3100.0017/input/input65 [ 1786.113951][ T10] creative-sb0540 0003:041E:3100.0017: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 1786.134082][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1786.426376][T29256] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1786.477354][ T10] usb 2-1: USB disconnect, device number 61 [ 1786.746395][T29280] fido_id[29280]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1787.553055][T14334] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1787.566156][T14334] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1787.582823][T14334] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1787.590470][T14334] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1787.600578][T14334] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1790.125896][T24371] Bluetooth: hci3: command tx timeout [ 1797.310862][T24371] Bluetooth: hci3: command tx timeout [ 1797.801128][T29302] chnl_net:caif_netlink_parms(): no params data found [ 1797.831379][T29328] FAULT_INJECTION: forcing a failure. [ 1797.831379][T29328] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1797.845382][T29328] CPU: 0 UID: 0 PID: 29328 Comm: syz.1.6227 Tainted: G L syzkaller #0 PREEMPT(full) [ 1797.845412][T29328] Tainted: [L]=SOFTLOCKUP [ 1797.845419][T29328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1797.845430][T29328] Call Trace: [ 1797.845436][T29328] [ 1797.845444][T29328] dump_stack_lvl+0x100/0x190 [ 1797.845478][T29328] should_fail_ex.cold+0x5/0xa [ 1797.845502][T29328] _copy_from_user+0x2e/0xd0 [ 1797.845529][T29328] __sys_bpf+0x243/0x4b90 [ 1797.845552][T29328] ? __pfx___sys_bpf+0x10/0x10 [ 1797.845569][T29328] ? proc_fail_nth_write+0x9f/0x220 [ 1797.845594][T29328] ? find_held_lock+0x2b/0x80 [ 1797.845623][T29328] ? find_held_lock+0x2b/0x80 [ 1797.845645][T29328] ? ksys_write+0x190/0x250 [ 1797.845677][T29328] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1797.845700][T29328] ? __fget_files+0x215/0x3d0 [ 1797.845731][T29328] ? fput+0x79/0x100 [ 1797.845751][T29328] ? ksys_write+0x1ac/0x250 [ 1797.845777][T29328] ? __pfx_ksys_write+0x10/0x10 [ 1797.845808][T29328] __x64_sys_bpf+0x7b/0xc0 [ 1797.845826][T29328] ? lockdep_hardirqs_on+0x78/0x100 [ 1797.845845][T29328] do_syscall_64+0x106/0xf80 [ 1797.845870][T29328] ? clear_bhb_loop+0x40/0x90 [ 1797.845893][T29328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1797.845912][T29328] RIP: 0033:0x7fd5ea99c799 [ 1797.845929][T29328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1797.845946][T29328] RSP: 002b:00007fd5eb8a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1797.845964][T29328] RAX: ffffffffffffffda RBX: 00007fd5eac16180 RCX: 00007fd5ea99c799 [ 1797.845976][T29328] RDX: 0000000000000038 RSI: 0000200000000100 RDI: 0000000000000018 [ 1797.845987][T29328] RBP: 00007fd5eb8a1090 R08: 0000000000000000 R09: 0000000000000000 [ 1797.845998][T29328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1797.846009][T29328] R13: 00007fd5eac16218 R14: 00007fd5eac16180 R15: 00007fff810f27b8 [ 1797.846038][T29328] [ 1798.353727][T29302] bridge0: port 1(bridge_slave_0) entered blocking state [ 1798.383000][T29302] bridge0: port 1(bridge_slave_0) entered disabled state [ 1798.407834][T29302] bridge_slave_0: entered allmulticast mode [ 1798.423990][T29302] bridge_slave_0: entered promiscuous mode [ 1798.551364][T29302] bridge0: port 2(bridge_slave_1) entered blocking state [ 1798.566781][ T24] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1798.578591][T29302] bridge0: port 2(bridge_slave_1) entered disabled state [ 1798.616742][T29302] bridge_slave_1: entered allmulticast mode [ 1798.624116][T29302] bridge_slave_1: entered promiscuous mode [ 1798.668274][T27454] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1798.786414][ T24] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1798.823744][T27454] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1798.853897][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1798.884664][ T24] usb 3-1: Product: syz [ 1798.893119][ T24] usb 3-1: Manufacturer: syz [ 1798.895922][T29302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1798.918579][ T24] usb 3-1: SerialNumber: syz [ 1798.945381][ T24] usb 3-1: config 0 descriptor?? [ 1798.965477][ T24] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 068 [ 1798.989070][T29302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1799.029314][T27454] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1799.120726][T27454] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1799.215964][T29302] team0: Port device team_slave_0 added [ 1799.225861][T29302] team0: Port device team_slave_1 added [ 1799.278936][T29302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1799.286030][T29302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1799.347351][T29302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1799.406638][T24371] Bluetooth: hci3: command tx timeout [ 1799.406714][ T10] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1799.470808][T29302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1799.504670][T29347] sctp: [Deprecated]: syz.0.6228 (pid 29347) Use of int in max_burst socket option. [ 1799.504670][T29347] Use struct sctp_assoc_value instead [ 1799.529657][T29302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1799.689898][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1799.691127][ T24] i2c i2c-1: connected i2c-tiny-usb device [ 1799.700056][T29302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1799.763334][ T10] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1799.791712][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1799.811999][ T10] usb 4-1: config 0 descriptor?? [ 1799.932894][T29302] hsr_slave_0: entered promiscuous mode [ 1799.952782][T29302] hsr_slave_1: entered promiscuous mode [ 1799.959435][T29302] debugfs: 'hsr0' already exists in 'hsr' [ 1799.965924][T29302] Cannot create hsr debugfs directory [ 1799.990732][T29349] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1800.036032][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1800.206174][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1800.384296][T18816] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1800.660526][T18816] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1800.661025][ T5912] usb 3-1: USB disconnect, device number 68 [ 1800.741445][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1800.752885][ T10] usb 4-1: media controller created [ 1800.802237][T27454] bridge_slave_1: left allmulticast mode [ 1800.810386][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1800.828760][T27454] bridge_slave_1: left promiscuous mode [ 1800.834501][T27454] bridge0: port 2(bridge_slave_1) entered disabled state [ 1800.900431][T27454] bridge_slave_0: left allmulticast mode [ 1800.917634][T27454] bridge_slave_0: left promiscuous mode [ 1800.939328][T27454] bridge0: port 1(bridge_slave_0) entered disabled state [ 1801.486177][T24371] Bluetooth: hci3: command tx timeout [ 1801.871313][T27454] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1801.894628][T27454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1801.910471][T27454] bond0 (unregistering): Released all slaves [ 1802.084972][T18816] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1802.133092][ T10] az6027: usb out operation failed. (-71) [ 1802.146640][T27454] bond1 (unregistering): Released all slaves [ 1802.157422][ T10] az6027: usb out operation failed. (-71) [ 1802.188091][ T10] stb0899_attach: Driver disabled by Kconfig [ 1802.211175][ T10] az6027: no front-end attached [ 1802.211175][ T10] [ 1802.211262][T29374] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6240'. [ 1802.238568][T27454] bond2 (unregistering): Released all slaves [ 1802.286399][ T10] az6027: usb out operation failed. (-71) [ 1802.299788][T18816] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1802.308715][T18816] usb 3-1: no configurations [ 1802.319482][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1802.326786][T27454] bond3 (unregistering): Released all slaves [ 1802.332971][T18816] usb 3-1: can't read configurations, error -22 [ 1802.355223][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input66 [ 1802.369849][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 1802.377172][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1802.390115][ T10] usb 4-1: USB disconnect, device number 45 [ 1802.407785][T27454] bond4 (unregistering): Released all slaves [ 1802.468265][T27454] bond5 (unregistering): Released all slaves [ 1802.479633][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1802.496187][T18816] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1802.514499][T27454] bond6 (unregistering): Released all slaves [ 1802.670592][T18816] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1802.690757][ T29] audit: type=1400 audit(1772468506.553:1991): avc: denied { accept } for pid=29381 comm="syz.3.6242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1802.712173][T18816] usb 3-1: no configurations [ 1802.734383][T18816] usb 3-1: can't read configurations, error -22 [ 1802.751638][T18816] usb usb3-port1: attempt power cycle [ 1803.412997][T29388] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1804.535228][T18816] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1804.656197][T20642] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1804.858682][T18816] usb 3-1: device not accepting address 71, error -71 [ 1804.920861][T20642] usb 1-1: Using ep0 maxpacket: 16 [ 1804.956161][T20642] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1805.002519][T20642] usb 1-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1805.023352][T20642] usb 1-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 1805.056245][T20642] usb 1-1: Manufacturer: syz [ 1805.106802][T20642] usb 1-1: config 0 descriptor?? [ 1805.488266][T27454] hsr_slave_0: left promiscuous mode [ 1805.514944][T27454] hsr_slave_1: left promiscuous mode [ 1805.536327][T27454] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1805.571672][T27454] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1805.608127][T29415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1805.622137][T29415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1805.866981][T27454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1805.894165][T27454] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1805.902850][T20642] usbhid 1-1:0.0: can't add hid device: -71 [ 1805.928568][T27454] veth1_macvtap: left promiscuous mode [ 1805.934076][T27454] veth0_macvtap: left promiscuous mode [ 1805.936718][T20642] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1805.962845][T20642] usb 1-1: USB disconnect, device number 69 [ 1805.969116][T27454] veth1_vlan: left promiscuous mode [ 1805.984588][T27454] veth0_vlan: left promiscuous mode [ 1806.784875][T27454] team0 (unregistering): Port device team_slave_1 removed [ 1806.864162][T27454] team0 (unregistering): Port device team_slave_0 removed [ 1807.508842][T29433] block device autoloading is deprecated and will be removed. [ 1808.656824][T29302] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1808.689316][T29302] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1808.793810][T29302] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1808.859757][T29302] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1809.335375][T29302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1809.415424][T29302] 8021q: adding VLAN 0 to HW filter on device team0 [ 1809.451059][T27456] bridge0: port 1(bridge_slave_0) entered blocking state [ 1809.458166][T27456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1809.537531][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1809.544718][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1809.812767][T29302] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1809.884251][T29302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1810.127490][T24559] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1810.223342][T29302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1810.289389][T24559] usb 1-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 1810.299117][T24559] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 1810.308728][T18816] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1810.337260][T24559] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1810.358824][T24559] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1810.400151][T24559] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1810.438760][T24559] usb 1-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 1810.464568][T24559] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1810.487739][T18816] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1810.498794][ T5924] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1810.510381][T18816] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1810.523122][T24559] usb 1-1: config 0 descriptor?? [ 1810.545427][T18816] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 1810.555179][T18816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1810.590175][T18816] usb 3-1: config 0 descriptor?? [ 1810.697211][ T5924] usb 4-1: Using ep0 maxpacket: 16 [ 1810.714618][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1810.751879][ T5924] usb 4-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1810.763599][ T5924] usb 4-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 1810.783923][ T5924] usb 4-1: Manufacturer: syz [ 1810.846054][ T5924] usb 4-1: config 0 descriptor?? [ 1810.919177][T29302] veth0_vlan: entered promiscuous mode [ 1810.931566][T29302] veth1_vlan: entered promiscuous mode [ 1810.965630][T29302] veth0_macvtap: entered promiscuous mode [ 1810.979704][T29302] veth1_macvtap: entered promiscuous mode [ 1811.011119][T18816] arvo 0003:1E7D:30D4.0019: unknown main item tag 0x0 [ 1811.023692][T18816] arvo 0003:1E7D:30D4.0019: unknown main item tag 0x0 [ 1811.024839][T29302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1811.032955][T18816] arvo 0003:1E7D:30D4.0019: unknown main item tag 0x0 [ 1811.062611][T29302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1811.083640][T18816] arvo 0003:1E7D:30D4.0019: unknown main item tag 0x0 [ 1811.094164][T18816] arvo 0003:1E7D:30D4.0019: unknown main item tag 0x0 [ 1811.098143][T27454] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1811.134664][T18816] arvo 0003:1E7D:30D4.0019: unknown main item tag 0x0 [ 1811.177101][ T1102] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1811.202741][ T1102] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1811.209516][T18816] arvo 0003:1E7D:30D4.0019: unknown main item tag 0x0 [ 1811.232572][T18816] arvo 0003:1E7D:30D4.0019: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 1811.256398][ T1102] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1811.922354][T29498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1811.933329][T29498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1812.172094][ T5924] usbhid 4-1:0.0: can't add hid device: -71 [ 1812.190570][ T5924] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1812.194006][T27402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1812.222116][ T5924] usb 4-1: USB disconnect, device number 46 [ 1812.254937][T27402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1812.317930][T27454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1812.326792][T27454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1813.035436][T24559] usbhid 1-1:0.0: can't add hid device: -71 [ 1813.168840][T24559] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1813.177177][T18816] arvo 0003:1E7D:30D4.0019: couldn't init struct arvo_device [ 1813.189983][T24559] usb 1-1: USB disconnect, device number 70 [ 1813.196692][T18816] arvo 0003:1E7D:30D4.0019: couldn't install keyboard [ 1813.215121][T18816] arvo 0003:1E7D:30D4.0019: probe with driver arvo failed with error -71 [ 1813.439776][T18816] usb 3-1: USB disconnect, device number 73 [ 1814.264660][ T5924] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1814.410799][ T29] audit: type=1804 audit(1772468518.263:1992): pid=29523 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.6268" name="/newroot/1/file0" dev="tmpfs" ino=23 res=1 errno=0 [ 1814.752938][ T5924] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1814.806197][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1814.814673][ T29] audit: type=1400 audit(1772468518.273:1993): avc: denied { write } for pid=29518 comm="syz.4.6268" path="socket:[132401]" dev="sockfs" ino=132401 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1814.843566][ T5924] usb 4-1: Product: syz [ 1814.848299][ T5924] usb 4-1: Manufacturer: syz [ 1814.866458][ T5924] usb 4-1: SerialNumber: syz [ 1814.890852][ T5924] usb 4-1: config 0 descriptor?? [ 1815.098439][ T5924] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 047 [ 1815.578356][ T5924] i2c i2c-1: connected i2c-tiny-usb device [ 1815.612861][T29535] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6273'. [ 1816.307502][T20642] usb 4-1: USB disconnect, device number 47 [ 1816.447851][ T24] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1816.651577][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 1816.658952][ T24] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1816.691157][ T29] audit: type=1400 audit(1772468520.553:1994): avc: denied { getopt } for pid=29549 comm="syz.4.6278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1816.711460][ T10] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1816.738947][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1816.780661][ T24] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1816.794553][ T24] pvrusb2: ********** [ 1816.801037][ T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1816.818527][ T24] pvrusb2: Important functionality might not be entirely working. [ 1816.831698][ T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1816.856187][ T24] pvrusb2: ********** [ 1816.896998][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 1816.914546][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1816.944156][ T10] usb 1-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1816.988192][ T10] usb 1-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 1817.266231][ T10] usb 1-1: Manufacturer: syz [ 1817.278532][ T2340] pvrusb2: Invalid write control endpoint [ 1817.303193][ T10] usb 1-1: config 0 descriptor?? [ 1817.451027][ T2340] pvrusb2: Invalid write control endpoint [ 1817.468874][ T2340] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1817.500033][T29558] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6278'. [ 1817.563788][ T2340] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1817.572822][ T2340] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1817.583509][ T2340] pvrusb2: Device being rendered inoperable [ 1817.589534][ T2340] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1817.598201][ T2340] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 1817.616740][ T2340] pvrusb2: Attached sub-driver cx25840 [ 1817.628395][ T2340] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1817.730042][ T2340] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1818.211699][T24559] libceph: connect (1)[c::]:6789 error -101 [ 1818.406881][T24559] libceph: mon0 (1)[c::]:6789 connect error [ 1818.579916][T29548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1818.591270][T29548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1818.985871][ T5924] libceph: connect (1)[c::]:6789 error -101 [ 1819.000790][ T5924] libceph: mon0 (1)[c::]:6789 connect error [ 1819.033156][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 1819.055369][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1819.082520][ T10] usb 1-1: USB disconnect, device number 71 [ 1819.585089][T24559] libceph: connect (1)[c::]:6789 error -101 [ 1819.591454][T29564] ceph: No mds server is up or the cluster is laggy [ 1819.618789][T24559] libceph: mon0 (1)[c::]:6789 connect error [ 1819.891462][T24559] usb 3-1: USB disconnect, device number 74 [ 1820.119004][T29585] gfs2: error -5 reading superblock [ 1820.205725][T29585] 9p: Could not find request transport: dno=q *Ш."qRJ4f [ 1821.216385][ T29] audit: type=1400 audit(1772468524.493:1995): avc: denied { module_load } for pid=29590 comm="syz.0.6288" path="/sys/power/pm_wakeup_irq" dev="sysfs" ino=1415 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 1821.269811][ T29] audit: type=1400 audit(1772468524.633:1996): avc: denied { bpf } for pid=29590 comm="syz.0.6288" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1821.329671][ T29] audit: type=1400 audit(1772468524.633:1997): avc: denied { perfmon } for pid=29590 comm="syz.0.6288" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1821.476103][ T29] audit: type=1400 audit(1772468525.333:1998): avc: denied { read write } for pid=28996 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1821.559082][ T29] audit: type=1400 audit(1772468525.333:1999): avc: denied { open } for pid=28996 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1821.686241][ T29] audit: type=1400 audit(1772468525.333:2000): avc: denied { ioctl } for pid=28996 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1821.715204][T29601] batman_adv: batadv0: Adding interface: dummy0 [ 1821.726205][T29601] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1821.782488][T29601] batman_adv: batadv0: Interface activated: dummy0 [ 1822.246214][T29606] binder: BINDER_SET_CONTEXT_MGR already set [ 1822.266930][T29606] binder: 29605:29606 ioctl 4018620d 200000000040 returned -16 [ 1822.301396][T29606] binder: 29605:29606 ioctl c0306201 200000000240 returned -11 [ 1822.359197][ T29] audit: type=1400 audit(1772468526.223:2001): avc: denied { listen } for pid=29610 comm="syz.3.6293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1822.400418][ T29] audit: type=1400 audit(1772468526.223:2002): avc: denied { accept } for pid=29610 comm="syz.3.6293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1822.660087][T29616] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 1822.776912][ T29] audit: type=1804 audit(1772468526.633:2003): pid=29623 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.6294" name="/newroot/133/file0" dev="tmpfs" ino=723 res=1 errno=0 [ 1823.386194][ T10] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1823.416202][ T5878] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1823.566155][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 1823.577435][ T5878] usb 3-1: Using ep0 maxpacket: 32 [ 1823.584357][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1823.584528][ T5878] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1823.609521][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1823.621668][ T10] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1823.639523][ T10] usb 5-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 1823.642225][ T5878] usb 3-1: config 0 descriptor?? [ 1823.654799][ T10] usb 5-1: Manufacturer: syz [ 1823.668187][T29632] binder: 29631:29632 ioctl c0306201 200000000240 returned -11 [ 1823.686500][ T10] usb 5-1: config 0 descriptor?? [ 1823.687632][T20642] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 1823.961171][ T5878] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1823.982614][T20642] usb 4-1: config 0 has an invalid interface number: 3 but max is 2 [ 1823.991369][ T5878] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1824.000754][T20642] usb 4-1: config 0 has an invalid interface number: 176 but max is 2 [ 1824.009781][T20642] usb 4-1: config 0 has no interface number 1 [ 1824.016422][ T5878] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1824.023875][ T29] audit: type=1400 audit(1772468527.883:2004): avc: denied { bind } for pid=29633 comm="syz.0.6301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1824.043369][T20642] usb 4-1: config 0 has no interface number 2 [ 1824.052140][ T5878] usb 3-1: media controller created [ 1824.057458][T20642] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 1824.072810][ T5878] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1824.084389][T20642] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1824.102697][T20642] usb 4-1: config 0 descriptor?? [ 1824.248988][T18816] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 1824.871525][T18816] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1825.546553][T29640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1825.566037][T29640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1825.567658][T20642] usb 4-1: Could not set interface, error -71 [ 1825.804339][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 1825.815179][T20642] usb 4-1: USB disconnect, device number 48 [ 1825.817417][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1825.906956][ T10] usb 5-1: USB disconnect, device number 64 [ 1826.235633][ T5878] az6027: usb out operation failed. (-71) [ 1826.246398][ T5878] az6027: usb out operation failed. (-71) [ 1826.252589][ T5878] stb0899_attach: Driver disabled by Kconfig [ 1826.258671][ T5878] az6027: no front-end attached [ 1826.258671][ T5878] [ 1826.267016][ T5878] az6027: usb out operation failed. (-71) [ 1826.273277][ T5878] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1826.282571][ T5878] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input68 [ 1826.348122][ T5878] dvb-usb: schedule remote query interval to 400 msecs. [ 1826.376087][ T5878] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1826.418341][ T5878] usb 3-1: USB disconnect, device number 75 [ 1826.474472][T29652] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1826.515223][ T5878] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1827.053220][ T5878] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1827.073517][T20642] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1827.156190][T29665] nbd0: detected capacity change from 0 to 63 [ 1827.288073][ T5878] usb 3-1: config 0 has an invalid interface number: 238 but max is 0 [ 1827.296666][ T5878] usb 3-1: config 0 has no interface number 0 [ 1827.302986][ T5878] usb 3-1: config 0 interface 238 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1827.312953][ T5878] usb 3-1: config 0 interface 238 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 0 [ 1827.326022][T20642] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1827.336323][ T5878] usb 3-1: config 0 interface 238 altsetting 2 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1827.346272][T20642] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1827.366146][T20642] usb 1-1: Product: syz [ 1827.370400][T20642] usb 1-1: Manufacturer: syz [ 1827.375274][ T5878] usb 3-1: config 0 interface 238 altsetting 2 bulk endpoint 0x88 has invalid maxpacket 0 [ 1827.385444][T20642] usb 1-1: SerialNumber: syz [ 1827.394448][ T5878] usb 3-1: config 0 interface 238 has no altsetting 0 [ 1827.425582][ T5878] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=f6.6a [ 1827.762315][T20642] usb 1-1: config 0 descriptor?? [ 1827.769868][ T5878] usb 3-1: New USB device strings: Mfr=181, Product=147, SerialNumber=160 [ 1827.907918][ T5878] usb 3-1: Product: syz [ 1827.914605][T20642] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 072 [ 1827.924657][ T5878] usb 3-1: Manufacturer: syz [ 1827.931426][ T5878] usb 3-1: SerialNumber: syz [ 1827.943206][ T5878] usb 3-1: config 0 descriptor?? [ 1828.037425][ T5878] ni6501 3-1:0.238: driver 'ni6501' failed to auto-configure device. [ 1828.119862][T24371] block nbd0: Receive control failed (result -104) [ 1828.269351][T29650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1828.278210][T29650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1828.411189][T29677] syz.2.6303 (29677): /proc/29649/oom_adj is deprecated, please use /proc/29649/oom_score_adj instead. [ 1828.431293][T29675] binder: 29674:29675 ioctl c0306201 200000000240 returned -11 [ 1828.846730][T20642] i2c i2c-1: connected i2c-tiny-usb device [ 1828.859298][ T29] audit: type=1804 audit(1772468532.393:2005): pid=29686 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.6310" name="/newroot/41/file0" dev="tmpfs" ino=232 res=1 errno=0 [ 1829.038870][ T29] audit: type=1400 audit(1772468532.903:2006): avc: denied { append } for pid=29690 comm="syz.3.6313" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1829.709346][ T5878] usb 3-1: USB disconnect, device number 76 [ 1829.876498][ T5924] usb 1-1: USB disconnect, device number 72 [ 1830.576395][ T29] audit: type=1400 audit(1772468534.193:2007): avc: denied { read } for pid=29699 comm="syz.4.6316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1830.954349][ T5878] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1830.998323][T29723] binder: 29722:29723 ioctl c0306201 200000000240 returned -11 [ 1831.152779][ T5878] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1831.172792][ T5878] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1831.188679][ T5878] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1831.198777][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1831.207513][ T5878] usb 3-1: Product: syz [ 1831.211832][ T5878] usb 3-1: Manufacturer: syz [ 1831.217978][ T5878] usb 3-1: SerialNumber: syz [ 1831.238566][ T5878] usb 3-1: config 0 descriptor?? [ 1831.448835][T20642] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 1831.512202][T29732] 8021q: VLANs not supported on tunl0 [ 1831.638270][T20642] usb 2-1: config 0 has an invalid interface number: 3 but max is 2 [ 1831.646841][T20642] usb 2-1: config 0 has an invalid interface number: 176 but max is 2 [ 1831.658900][T20642] usb 2-1: config 0 has no interface number 1 [ 1831.687263][T20642] usb 2-1: config 0 has no interface number 2 [ 1831.703248][T20642] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 1831.729089][T20642] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1831.926361][T20642] usb 2-1: config 0 descriptor?? [ 1832.017443][T27295] usb 3-1: USB disconnect, device number 77 [ 1832.533975][T20642] usb 2-1: Could not set interface, error -71 [ 1832.996619][T20642] usb 2-1: USB disconnect, device number 62 [ 1833.319280][T29748] xt_hashlimit: max too large, truncated to 1048576 [ 1834.721653][T14334] Bluetooth: hci2: command 0x0406 tx timeout [ 1834.782362][T29759] FAULT_INJECTION: forcing a failure. [ 1834.782362][T29759] name failslab, interval 1, probability 0, space 0, times 0 [ 1834.844520][T29759] CPU: 1 UID: 0 PID: 29759 Comm: syz.3.6330 Tainted: G L syzkaller #0 PREEMPT(full) [ 1834.844539][T29759] Tainted: [L]=SOFTLOCKUP [ 1834.844543][T29759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1834.844550][T29759] Call Trace: [ 1834.844554][T29759] [ 1834.844559][T29759] dump_stack_lvl+0x100/0x190 [ 1834.844582][T29759] should_fail_ex.cold+0x5/0xa [ 1834.844596][T29759] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1834.844609][T29759] should_failslab+0xc2/0x120 [ 1834.844626][T29759] __kmalloc_noprof+0xe0/0x850 [ 1834.844644][T29759] tomoyo_realpath_from_path+0xb6/0x690 [ 1834.844660][T29759] tomoyo_path_number_perm+0x23c/0x580 [ 1834.844670][T29759] ? tomoyo_path_number_perm+0x22e/0x580 [ 1834.844682][T29759] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1834.844707][T29759] ? find_held_lock+0x2b/0x80 [ 1834.844720][T29759] ? __fget_files+0x215/0x3d0 [ 1834.844731][T29759] ? hook_file_ioctl_common+0x146/0x410 [ 1834.844748][T29759] ? __fget_files+0x21f/0x3d0 [ 1834.844761][T29759] security_file_ioctl+0xd3/0x230 [ 1834.844774][T29759] __x64_sys_ioctl+0xb7/0x210 [ 1834.844791][T29759] do_syscall_64+0x106/0xf80 [ 1834.844802][T29759] ? clear_bhb_loop+0x40/0x90 [ 1834.844816][T29759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1834.844827][T29759] RIP: 0033:0x7ff77119c799 [ 1834.844836][T29759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1834.844847][T29759] RSP: 002b:00007ff7720ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1834.844858][T29759] RAX: ffffffffffffffda RBX: 00007ff771415fa0 RCX: 00007ff77119c799 [ 1834.844864][T29759] RDX: 0000200000000100 RSI: 00000000c040565f RDI: 0000000000000003 [ 1834.844871][T29759] RBP: 00007ff7720ac090 R08: 0000000000000000 R09: 0000000000000000 [ 1834.844877][T29759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1834.844883][T29759] R13: 00007ff771416038 R14: 00007ff771415fa0 R15: 00007ffd82588158 [ 1834.844897][T29759] [ 1834.845256][T29759] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1835.064605][ T5924] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1835.246737][T29768] binder: 29765:29768 ioctl c0306201 200000000240 returned -11 [ 1835.261382][ T29] audit: type=1400 audit(1772468539.123:2008): avc: denied { getopt } for pid=29766 comm="syz.1.6332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1835.318881][ T5924] usb 3-1: Using ep0 maxpacket: 32 [ 1835.324342][T24371] block nbd1: Receive control failed (result -32) [ 1835.342082][ T5924] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 1835.357922][ T5924] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1835.370160][ T5924] usb 3-1: config 0 has no interface number 0 [ 1835.376396][ T5924] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1835.386194][ T5924] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1835.397019][ T5924] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1835.405224][ T5924] usb 3-1: config 0 has no interface number 0 [ 1835.411713][ T5924] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1835.427490][ T5924] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1835.443504][T29773] netlink: 13 bytes leftover after parsing attributes in process `syz.1.6336'. [ 1835.446886][ T5924] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1835.699670][ T5924] usb 3-1: config 0 has no interface number 0 [ 1835.705913][ T5924] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1835.724867][ T5924] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1835.736008][ T5924] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1835.744423][ T5924] usb 3-1: config 0 has no interface number 0 [ 1835.761341][ T5924] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1835.836703][ T29] audit: type=1326 audit(1772468539.693:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29775 comm="syz.4.6337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8859c799 code=0x7fc00000 [ 1835.867126][ T5924] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1835.911826][ T5924] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1835.925347][ T5924] usb 3-1: config 0 has no interface number 0 [ 1835.933694][ T5924] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1836.007014][T29772] mmap: syz.1.6336 (29772): VmData 25763840 exceed data ulimit 12. Update limits or use boot option ignore_rlimit_data. [ 1836.026309][ T5924] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1836.083468][ T5924] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1836.166148][ T5924] usb 3-1: config 0 has no interface number 0 [ 1836.218337][ T5924] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1836.244926][ T5924] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1836.276585][ T5924] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1836.284842][ T5924] usb 3-1: config 0 has no interface number 0 [ 1836.318680][ T29] audit: type=1326 audit(1772468540.183:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29775 comm="syz.4.6337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6f8853db19 code=0x7fc00000 [ 1836.376106][ T5924] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1836.406363][ T5924] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1836.536969][ T5924] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1836.545643][ T5924] usb 3-1: config 0 has no interface number 0 [ 1836.566146][ T5924] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1836.596153][ T5924] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1836.617857][ T5924] usb 3-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1836.627061][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1836.643324][ T5924] usb 3-1: Product: syz [ 1836.665988][ T5924] usb 3-1: Manufacturer: syz [ 1836.756211][ T5924] usb 3-1: SerialNumber: syz [ 1836.762798][ T5924] usb 3-1: config 0 descriptor?? [ 1836.772300][ T5924] etas_es58x 3-1:0.2: Starting syz syz (Serial Number syz) [ 1836.904220][T29796] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 1837.187757][ T5924] etas_es58x 3-1:0.2: could not retrieve the product info string [ 1837.233143][ T5924] usb 3-1: USB disconnect, device number 78 [ 1837.262147][ T5924] etas_es58x 3-1:0.2: Disconnecting syz syz [ 1837.788761][T29809] FAULT_INJECTION: forcing a failure. [ 1837.788761][T29809] name failslab, interval 1, probability 0, space 0, times 0 [ 1838.374951][T29809] CPU: 0 UID: 0 PID: 29809 Comm: syz.3.6345 Tainted: G L syzkaller #0 PREEMPT(full) [ 1838.374970][T29809] Tainted: [L]=SOFTLOCKUP [ 1838.374975][T29809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1838.374981][T29809] Call Trace: [ 1838.374985][T29809] [ 1838.374990][T29809] dump_stack_lvl+0x100/0x190 [ 1838.375012][T29809] should_fail_ex.cold+0x5/0xa [ 1838.375026][T29809] should_failslab+0xc2/0x120 [ 1838.375044][T29809] __kvmalloc_node_noprof+0xfa/0xa00 [ 1838.375064][T29809] ? traverse.part.0.constprop.0+0x397/0x650 [ 1838.375082][T29809] ? kernel_text_address+0x8d/0x100 [ 1838.375097][T29809] traverse.part.0.constprop.0+0x397/0x650 [ 1838.375119][T29809] seq_read_iter+0x93f/0x1270 [ 1838.375137][T29809] ? _kstrtoull+0x13c/0x1f0 [ 1838.375151][T29809] seq_read+0x33b/0x4c0 [ 1838.375168][T29809] ? __pfx_seq_read+0x10/0x10 [ 1838.375184][T29809] ? __lock_acquire+0x4a5/0x2630 [ 1838.375203][T29809] ? import_ubuf+0x1b6/0x220 [ 1838.375219][T29809] ? selinux_file_permission+0x8f/0x6d0 [ 1838.375234][T29809] ? __pfx_seq_read+0x10/0x10 [ 1838.375250][T29809] proc_reg_read+0x240/0x330 [ 1838.375261][T29809] ? __pfx_proc_reg_read+0x10/0x10 [ 1838.375271][T29809] vfs_readv+0x5d8/0x8d0 [ 1838.375290][T29809] ? __pfx_vfs_readv+0x10/0x10 [ 1838.375305][T29809] ? find_held_lock+0x2b/0x80 [ 1838.375326][T29809] ? __fget_files+0x21f/0x3d0 [ 1838.375341][T29809] ? do_preadv+0x1ac/0x270 [ 1838.375354][T29809] do_preadv+0x1ac/0x270 [ 1838.375369][T29809] ? __pfx_do_preadv+0x10/0x10 [ 1838.375388][T29809] do_syscall_64+0x106/0xf80 [ 1838.375398][T29809] ? clear_bhb_loop+0x40/0x90 [ 1838.375412][T29809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1838.375422][T29809] RIP: 0033:0x7ff77119c799 [ 1838.375432][T29809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1838.375443][T29809] RSP: 002b:00007ff7720ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1838.375454][T29809] RAX: ffffffffffffffda RBX: 00007ff771415fa0 RCX: 00007ff77119c799 [ 1838.375460][T29809] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 [ 1838.375467][T29809] RBP: 00007ff7720ac090 R08: 0000000000000009 R09: 0000000000000000 [ 1838.375473][T29809] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 1838.375479][T29809] R13: 00007ff771416038 R14: 00007ff771415fa0 R15: 00007ffd82588158 [ 1838.375493][T29809] [ 1838.675063][T29813] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6346'. [ 1838.867302][T29816] binder: 29815:29816 ioctl c0306201 200000000240 returned -11 [ 1839.125306][T29820] overlay: filesystem on ./file0 not supported as upperdir [ 1839.133077][T27295] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1839.320680][T27295] usb 3-1: Using ep0 maxpacket: 32 [ 1839.340472][T27295] usb 3-1: config index 0 descriptor too short (expected 3659, got 75) [ 1839.358031][T27295] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1839.420582][T27295] usb 3-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 1839.438653][T27295] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1839.446766][T27295] usb 3-1: Product: syz [ 1839.453331][T27295] usb 3-1: Manufacturer: syz [ 1839.458200][T27295] usb 3-1: SerialNumber: syz [ 1839.469520][T27295] usb 3-1: config 0 descriptor?? [ 1839.493896][T27295] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 1839.716143][ T5924] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1839.823886][T20642] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1839.866221][ T5924] usb 2-1: Using ep0 maxpacket: 32 [ 1839.907704][ T5924] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1839.926126][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1839.948067][ T5924] usb 2-1: config 0 descriptor?? [ 1840.159177][ T5924] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1840.168566][ T5924] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1840.179087][ T5924] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1840.186700][ T5924] usb 2-1: media controller created [ 1840.204407][ T5924] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1840.256147][T20642] usb 5-1: Using ep0 maxpacket: 8 [ 1840.256157][ T10] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1840.270352][T20642] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1840.279665][T20642] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1840.293883][T20642] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1840.301019][T20642] pvrusb2: ********** [ 1840.305008][T20642] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1840.315829][T20642] pvrusb2: Important functionality might not be entirely working. [ 1840.323684][T20642] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1840.336677][T20642] pvrusb2: ********** [ 1840.369263][ T47] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 1840.381223][ T47] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1840.539395][ T10] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1840.549095][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1840.557306][ T10] usb 4-1: Product: syz [ 1840.560973][ T2340] pvrusb2: Invalid write control endpoint [ 1840.563947][ T10] usb 4-1: Manufacturer: syz [ 1840.578455][ T10] usb 4-1: SerialNumber: syz [ 1840.586768][ T10] usb 4-1: config 0 descriptor?? [ 1840.600631][ T10] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 049 [ 1841.082608][T27295] gspca_sunplus: reg_r err -110 [ 1841.145307][ T2340] pvrusb2: Invalid write control endpoint [ 1841.157680][ T2340] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1841.167155][ T2340] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1841.174924][ T2340] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1841.185347][ T2340] pvrusb2: Device being rendered inoperable [ 1841.194554][ T2340] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1841.203914][ T2340] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_f) [ 1841.213320][ T2340] pvrusb2: Attached sub-driver cx25840 [ 1841.219224][ T2340] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1841.229885][ T2340] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1841.304488][T29847] netlink: 'syz.0.6354': attribute type 7 has an invalid length. [ 1841.312911][T29847] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6354'. [ 1841.437325][T20642] libceph: connect (1)[c::]:6789 error -101 [ 1841.444241][T20642] libceph: mon0 (1)[c::]:6789 connect error [ 1841.739136][T20642] libceph: connect (1)[c::]:6789 error -101 [ 1841.755702][T20642] libceph: mon0 (1)[c::]:6789 connect error [ 1841.832717][ T10] i2c i2c-3: connected i2c-tiny-usb device [ 1841.880830][T29858] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6356'. [ 1841.890796][T29858] unsupported nlmsg_type 40 [ 1841.932603][T29860] FAULT_INJECTION: forcing a failure. [ 1841.932603][T29860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1841.945818][T29860] CPU: 0 UID: 0 PID: 29860 Comm: syz.0.6357 Tainted: G L syzkaller #0 PREEMPT(full) [ 1841.945838][T29860] Tainted: [L]=SOFTLOCKUP [ 1841.945842][T29860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1841.945849][T29860] Call Trace: [ 1841.945853][T29860] [ 1841.945858][T29860] dump_stack_lvl+0x100/0x190 [ 1841.945879][T29860] should_fail_ex.cold+0x5/0xa [ 1841.945894][T29860] _copy_from_user+0x2e/0xd0 [ 1841.945910][T29860] copy_msghdr_from_user+0x9f/0x4f0 [ 1841.945926][T29860] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1841.945948][T29860] ___sys_sendmsg+0x106/0x1e0 [ 1841.945963][T29860] ? __pfx____sys_sendmsg+0x10/0x10 [ 1841.945998][T29860] __sys_sendmsg+0x170/0x220 [ 1841.946009][T29860] ? __pfx___sys_sendmsg+0x10/0x10 [ 1841.946029][T29860] do_syscall_64+0x106/0xf80 [ 1841.946040][T29860] ? clear_bhb_loop+0x40/0x90 [ 1841.946056][T29860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1841.946074][T29860] RIP: 0033:0x7fc87519c799 [ 1841.946089][T29860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1841.946104][T29860] RSP: 002b:00007fc8760d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1841.946121][T29860] RAX: ffffffffffffffda RBX: 00007fc875415fa0 RCX: 00007fc87519c799 [ 1841.946131][T29860] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 1841.946141][T29860] RBP: 00007fc8760d0090 R08: 0000000000000000 R09: 0000000000000000 [ 1841.946151][T29860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1841.946161][T29860] R13: 00007fc875416038 R14: 00007fc875415fa0 R15: 00007ffd2456a088 [ 1841.946186][T29860] [ 1842.160786][T29862] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6358'. [ 1842.731389][T20642] libceph: connect (1)[c::]:6789 error -101 [ 1842.731526][ T5924] az6027: usb out operation failed. (-110) [ 1842.743638][ T5924] az6027: usb out operation failed. (-32) [ 1842.749472][ T5924] stb0899_attach: Driver disabled by Kconfig [ 1842.755491][ T5924] az6027: no front-end attached [ 1842.755491][ T5924] [ 1842.762882][T20642] libceph: mon0 (1)[c::]:6789 connect error [ 1842.763101][ T5924] az6027: usb out operation failed. (-32) [ 1842.774608][ T5924] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1842.781203][T20642] usb 4-1: USB disconnect, device number 49 [ 1842.847982][ T5924] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input69 [ 1842.912586][T29866] binder: 29863:29866 ioctl c0306201 200000000240 returned -11 [ 1842.920392][T29851] ceph: No mds server is up or the cluster is laggy [ 1842.970006][ T10] usb 5-1: USB disconnect, device number 65 [ 1842.989753][T27295] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 1843.095992][ T5924] dvb-usb: schedule remote query interval to 400 msecs. [ 1843.127152][ T5924] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1843.139625][T27295] usb 3-1: USB disconnect, device number 79 [ 1843.149341][ T5924] usb 2-1: USB disconnect, device number 63 [ 1843.803901][T29881] FAULT_INJECTION: forcing a failure. [ 1843.803901][T29881] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1843.986289][T29881] CPU: 1 UID: 0 PID: 29881 Comm: syz.0.6363 Tainted: G L syzkaller #0 PREEMPT(full) [ 1843.986321][T29881] Tainted: [L]=SOFTLOCKUP [ 1843.986327][T29881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1843.986338][T29881] Call Trace: [ 1843.986344][T29881] [ 1843.986353][T29881] dump_stack_lvl+0x100/0x190 [ 1843.986387][T29881] should_fail_ex.cold+0x5/0xa [ 1843.986416][T29881] _copy_from_user+0x2e/0xd0 [ 1843.986444][T29881] copy_msghdr_from_user+0x9f/0x4f0 [ 1843.986470][T29881] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1843.986507][T29881] ___sys_sendmsg+0x106/0x1e0 [ 1843.986532][T29881] ? __pfx____sys_sendmsg+0x10/0x10 [ 1843.986587][T29881] __sys_sendmsg+0x170/0x220 [ 1843.986605][T29881] ? __pfx___sys_sendmsg+0x10/0x10 [ 1843.986640][T29881] do_syscall_64+0x106/0xf80 [ 1843.986658][T29881] ? clear_bhb_loop+0x40/0x90 [ 1843.986681][T29881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1843.986699][T29881] RIP: 0033:0x7fc87519c799 [ 1843.986715][T29881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1843.986732][T29881] RSP: 002b:00007fc8760d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1843.986750][T29881] RAX: ffffffffffffffda RBX: 00007fc875415fa0 RCX: 00007fc87519c799 [ 1843.986763][T29881] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1843.986774][T29881] RBP: 00007fc8760d0090 R08: 0000000000000000 R09: 0000000000000000 [ 1843.986784][T29881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1843.986795][T29881] R13: 00007fc875416038 R14: 00007fc875415fa0 R15: 00007ffd2456a088 [ 1843.986821][T29881] [ 1844.185405][ T5924] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1844.217572][ T29] audit: type=1400 audit(1772468548.083:2011): avc: denied { read } for pid=29885 comm="syz.0.6367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1844.491444][T29891] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6369'. [ 1844.675355][ T5924] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1844.866291][ T5924] usb 2-1: Using ep0 maxpacket: 32 [ 1845.179287][ T5924] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1845.203832][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1845.219933][ T5924] usb 2-1: config 0 descriptor?? [ 1845.321919][T29905] xt_hashlimit: size too large, truncated to 1048576 [ 1845.448814][ T5924] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1845.487132][ T5924] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1845.496515][ T10] usb 1-1: new low-speed USB device number 73 using dummy_hcd [ 1845.505972][ T5924] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1845.513553][ T5924] usb 2-1: media controller created [ 1845.532610][ T5924] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1845.739699][T24559] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1845.757410][ T10] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 1845.765712][ T10] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 1845.778686][T24559] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1845.788357][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1846.270896][ T10] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1846.283378][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1846.293691][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1846.314302][ T10] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1846.366148][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1846.374848][ T10] usb 1-1: Manufacturer: 㝂 [ 1846.403867][ T10] usb 1-1: config 0 descriptor?? [ 1846.420295][T29902] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1846.438285][ T10] hub 1-1:0.0: bad descriptor, ignoring hub [ 1846.449556][T29913] fido_id[29913]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1846.463279][ T10] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1846.491834][ T10] input: 㝂 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input70 [ 1846.773102][ T10] usb 1-1: USB disconnect, device number 73 [ 1846.862950][T29925] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1848.083780][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1848.113400][ T5924] az6027: usb out operation failed. (-110) [ 1848.144058][ T5924] az6027: usb out operation failed. (-71) [ 1848.153982][ T5924] stb0899_attach: Driver disabled by Kconfig [ 1848.164075][ T5924] az6027: no front-end attached [ 1848.164075][ T5924] [ 1848.181810][ T5924] az6027: usb out operation failed. (-71) [ 1848.196125][ T5924] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1848.234598][ T5924] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input71 [ 1848.264790][ T5924] dvb-usb: schedule remote query interval to 400 msecs. [ 1848.276357][ T5924] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1848.323985][ T5924] usb 2-1: USB disconnect, device number 64 [ 1848.390280][T29931] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1848.464358][ T10] IPVS: starting estimator thread 0... [ 1848.724886][ T5924] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1848.736347][T29933] IPVS: using max 49 ests per chain, 117600 per kthread [ 1848.896187][ T10] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1849.636229][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 1849.650289][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1849.662556][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1849.679320][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1849.690038][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1849.704419][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1849.714129][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1850.095001][ T10] usb 4-1: GET_CAPABILITIES returned 0 [ 1850.106401][ T10] usbtmc 4-1:16.0: can't read capabilities [ 1850.502042][T29957] FAULT_INJECTION: forcing a failure. [ 1850.502042][T29957] name failslab, interval 1, probability 0, space 0, times 0 [ 1850.518252][T24559] usb 4-1: USB disconnect, device number 50 [ 1850.536230][ T10] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1850.544393][T29957] CPU: 0 UID: 0 PID: 29957 Comm: syz.2.6379 Tainted: G L syzkaller #0 PREEMPT(full) [ 1850.544420][T29957] Tainted: [L]=SOFTLOCKUP [ 1850.544426][T29957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1850.544436][T29957] Call Trace: [ 1850.544442][T29957] [ 1850.544448][T29957] dump_stack_lvl+0x100/0x190 [ 1850.544478][T29957] should_fail_ex.cold+0x5/0xa [ 1850.544500][T29957] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1850.544520][T29957] should_failslab+0xc2/0x120 [ 1850.544547][T29957] __kmalloc_noprof+0xe0/0x850 [ 1850.544575][T29957] tomoyo_realpath_from_path+0xb6/0x690 [ 1850.544601][T29957] tomoyo_path_number_perm+0x23c/0x580 [ 1850.544616][T29957] ? tomoyo_path_number_perm+0x22e/0x580 [ 1850.544634][T29957] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1850.544677][T29957] ? find_held_lock+0x2b/0x80 [ 1850.544698][T29957] ? __fget_files+0x215/0x3d0 [ 1850.544714][T29957] ? hook_file_ioctl_common+0x146/0x410 [ 1850.544742][T29957] ? __fget_files+0x21f/0x3d0 [ 1850.544763][T29957] security_file_ioctl+0xd3/0x230 [ 1850.544784][T29957] __x64_sys_ioctl+0xb7/0x210 [ 1850.544809][T29957] do_syscall_64+0x106/0xf80 [ 1850.544826][T29957] ? clear_bhb_loop+0x40/0x90 [ 1850.544846][T29957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1850.544863][T29957] RIP: 0033:0x7f76c5b9c799 [ 1850.544878][T29957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1850.544893][T29957] RSP: 002b:00007f76c3df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1850.544910][T29957] RAX: ffffffffffffffda RBX: 00007f76c5e15fa0 RCX: 00007f76c5b9c799 [ 1850.544921][T29957] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1850.544930][T29957] RBP: 00007f76c3df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1850.544939][T29957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1850.544954][T29957] R13: 00007f76c5e16038 R14: 00007f76c5e15fa0 R15: 00007ffe65e13e88 [ 1850.544978][T29957] [ 1850.544984][T29957] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1850.896168][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 1850.902583][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1850.924786][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1850.944062][ T10] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1850.963515][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1850.985775][ T10] usb 5-1: config 0 descriptor?? [ 1851.366772][T27295] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1851.496190][ T47] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1851.516106][T27295] usb 3-1: Using ep0 maxpacket: 16 [ 1851.524920][T27295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1851.539362][T27295] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1851.551671][T27295] usb 3-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 1851.569718][T27295] usb 3-1: Manufacturer: syz [ 1851.579985][T27295] usb 3-1: config 0 descriptor?? [ 1851.646220][ T47] usb 4-1: Using ep0 maxpacket: 16 [ 1851.660577][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1851.709840][T27459] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 1851.711592][ T10] ft260 0003:0403:6030.001D: unknown main item tag 0x0 [ 1851.729431][ T47] usb 4-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1851.745536][ T47] usb 4-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 1851.746183][ T10] ft260 0003:0403:6030.001D: unknown main item tag 0x0 [ 1851.756147][ T47] usb 4-1: Manufacturer: syz [ 1851.791732][ T47] usb 4-1: config 0 descriptor?? [ 1852.052440][ T10] ft260 0003:0403:6030.001D: failed to retrieve chip version [ 1852.062325][ T10] ft260 0003:0403:6030.001D: probe with driver ft260 failed with error -5 [ 1852.515984][T29992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1852.528984][T29992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1852.914507][T29993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1852.925028][T29993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1853.092382][T27295] usbhid 3-1:0.0: can't add hid device: -71 [ 1853.258330][T27295] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1853.268849][T27295] usb 3-1: USB disconnect, device number 80 [ 1853.516387][ T29] audit: type=1400 audit(1772468557.323:2012): avc: denied { lock } for pid=30003 comm="syz.0.6402" path="socket:[133842]" dev="sockfs" ino=133842 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1853.748842][ T47] usbhid 4-1:0.0: can't add hid device: -71 [ 1853.759211][ T47] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1853.772312][ T47] usb 4-1: USB disconnect, device number 51 [ 1854.271566][T30011] FAULT_INJECTION: forcing a failure. [ 1854.271566][T30011] name failslab, interval 1, probability 0, space 0, times 0 [ 1854.294858][T30011] CPU: 0 UID: 0 PID: 30011 Comm: syz.1.6404 Tainted: G L syzkaller #0 PREEMPT(full) [ 1854.294886][T30011] Tainted: [L]=SOFTLOCKUP [ 1854.294892][T30011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1854.294902][T30011] Call Trace: [ 1854.294907][T30011] [ 1854.294914][T30011] dump_stack_lvl+0x100/0x190 [ 1854.294945][T30011] should_fail_ex.cold+0x5/0xa [ 1854.294966][T30011] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1854.294986][T30011] should_failslab+0xc2/0x120 [ 1854.295014][T30011] __kmalloc_noprof+0xe0/0x850 [ 1854.295040][T30011] tomoyo_realpath_from_path+0xb6/0x690 [ 1854.295064][T30011] tomoyo_path_number_perm+0x23c/0x580 [ 1854.295080][T30011] ? tomoyo_path_number_perm+0x22e/0x580 [ 1854.295099][T30011] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1854.295137][T30011] ? find_held_lock+0x2b/0x80 [ 1854.295158][T30011] ? __fget_files+0x215/0x3d0 [ 1854.295174][T30011] ? hook_file_ioctl_common+0x146/0x410 [ 1854.295203][T30011] ? __fget_files+0x21f/0x3d0 [ 1854.295225][T30011] security_file_ioctl+0xd3/0x230 [ 1854.295247][T30011] __x64_sys_ioctl+0xb7/0x210 [ 1854.295275][T30011] do_syscall_64+0x106/0xf80 [ 1854.295301][T30011] ? clear_bhb_loop+0x40/0x90 [ 1854.295324][T30011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1854.295343][T30011] RIP: 0033:0x7fd5ea99c799 [ 1854.295358][T30011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1854.295378][T30011] RSP: 002b:00007fd5eb8e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1854.295396][T30011] RAX: ffffffffffffffda RBX: 00007fd5eac15fa0 RCX: 00007fd5ea99c799 [ 1854.295407][T30011] RDX: 0000200000000040 RSI: 00000000c014563b RDI: 0000000000000003 [ 1854.295417][T30011] RBP: 00007fd5eb8e3090 R08: 0000000000000000 R09: 0000000000000000 [ 1854.295428][T30011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1854.295437][T30011] R13: 00007fd5eac16038 R14: 00007fd5eac15fa0 R15: 00007fff810f27b8 [ 1854.295460][T30011] [ 1854.295486][T30011] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1854.498252][T30014] tipc: Enabled bearer , priority 0 [ 1854.512256][T30013] syzkaller0: entered promiscuous mode [ 1854.526154][T30013] syzkaller0: entered allmulticast mode [ 1854.543767][ T5924] usb 5-1: USB disconnect, device number 66 [ 1854.594324][T30013] tipc: Resetting bearer [ 1854.616481][T30012] tipc: Resetting bearer [ 1854.667980][T30012] tipc: Disabling bearer [ 1856.176806][T30055] evm: overlay not supported [ 1856.296372][ T10] usb 5-1: new low-speed USB device number 67 using dummy_hcd [ 1856.511494][T30057] netlink: 25 bytes leftover after parsing attributes in process `syz.2.6419'. [ 1856.563776][T30059] FAULT_INJECTION: forcing a failure. [ 1856.563776][T30059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1856.577075][T30059] CPU: 1 UID: 0 PID: 30059 Comm: syz.0.6420 Tainted: G L syzkaller #0 PREEMPT(full) [ 1856.577105][T30059] Tainted: [L]=SOFTLOCKUP [ 1856.577111][T30059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1856.577122][T30059] Call Trace: [ 1856.577129][T30059] [ 1856.577136][T30059] dump_stack_lvl+0x100/0x190 [ 1856.577170][T30059] should_fail_ex.cold+0x5/0xa [ 1856.577194][T30059] regset_tls_set+0x35c/0x410 [ 1856.577219][T30059] ? __pfx_regset_tls_set+0x10/0x10 [ 1856.577238][T30059] ? __lock_acquire+0x4a5/0x2630 [ 1856.577271][T30059] ? lock_acquire+0x1cf/0x380 [ 1856.577300][T30059] ? __pfx_regset_tls_set+0x10/0x10 [ 1856.577321][T30059] ptrace_regset+0x2cd/0x380 [ 1856.577349][T30059] ptrace_request+0x7d5/0x12a0 [ 1856.577375][T30059] ? __pfx_ptrace_request+0x10/0x10 [ 1856.577397][T30059] ? wait_task_inactive+0x47b/0x790 [ 1856.577424][T30059] ? rcu_is_watching+0x12/0xc0 [ 1856.577445][T30059] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1856.577475][T30059] ? lockdep_hardirqs_on+0x78/0x100 [ 1856.577493][T30059] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1856.577521][T30059] ? wait_task_inactive+0x47b/0x790 [ 1856.577551][T30059] ? __pfx_wait_task_inactive+0x10/0x10 [ 1856.577581][T30059] ? mark_held_locks+0x40/0x70 [ 1856.577612][T30059] arch_ptrace+0x3c6/0x6a0 [ 1856.577632][T30059] __x64_sys_ptrace+0x181/0x2a0 [ 1856.577658][T30059] do_syscall_64+0x106/0xf80 [ 1856.577676][T30059] ? clear_bhb_loop+0x40/0x90 [ 1856.577698][T30059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1856.577715][T30059] RIP: 0033:0x7fc87519c799 [ 1856.577731][T30059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1856.577747][T30059] RSP: 002b:00007fc8760d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 1856.577771][T30059] RAX: ffffffffffffffda RBX: 00007fc875415fa0 RCX: 00007fc87519c799 [ 1856.577782][T30059] RDX: 0000000000000200 RSI: 000000000000012a RDI: 0000000000004205 [ 1856.577793][T30059] RBP: 00007fc8760d0090 R08: 0000000000000000 R09: 0000000000000000 [ 1856.577803][T30059] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 1856.577813][T30059] R13: 00007fc875416038 R14: 00007fc875415fa0 R15: 00007ffd2456a088 [ 1856.577836][T30059] [ 1856.963207][ T10] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 1856.971743][ T10] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 1856.996266][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1857.028303][ T10] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1857.066192][ T29] audit: type=1400 audit(1772468560.873:2013): avc: denied { create } for pid=30062 comm="syz.2.6421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1857.138264][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1857.270791][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1857.286172][ T29] audit: type=1400 audit(1772468560.873:2014): avc: denied { write } for pid=30062 comm="syz.2.6421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1857.399978][ T10] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1857.409234][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1857.430773][ T10] usb 5-1: Manufacturer: 㝂 [ 1857.454345][T30097] tipc: Started in network mode [ 1857.456536][ T10] usb 5-1: config 0 descriptor?? [ 1857.495879][T30052] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1857.506821][T30097] tipc: Node identity c2e5526f9bcf, cluster identity 4711 [ 1857.514047][T30097] tipc: Enabled bearer , priority 0 [ 1857.516960][ T10] hub 5-1:0.0: bad descriptor, ignoring hub [ 1857.534009][ T10] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1857.554600][ T10] input: 㝂 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input72 [ 1857.573712][T30097] tipc: Resetting bearer [ 1857.579907][T30102] syzkaller0: entered promiscuous mode [ 1857.586674][T30102] syzkaller0: entered allmulticast mode [ 1857.745883][T27295] usb 5-1: USB disconnect, device number 67 [ 1857.819180][T17590] block nbd0: Possible stuck request ffff888027a10000: control (read@0,1024B). Runtime 30 seconds [ 1857.826132][ T10] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 1857.832162][T17590] block nbd0: Possible stuck request ffff888027a28000: control (read@1024,1024B). Runtime 30 seconds [ 1857.850002][T17590] block nbd0: Possible stuck request ffff888027a28200: control (read@2048,1024B). Runtime 30 seconds [ 1857.862510][T17590] block nbd0: Possible stuck request ffff888027a28400: control (read@3072,1024B). Runtime 30 seconds [ 1858.027430][ T10] usb 2-1: config 0 has an invalid interface number: 3 but max is 2 [ 1858.035456][ T10] usb 2-1: config 0 has an invalid interface number: 176 but max is 2 [ 1858.044066][ T10] usb 2-1: config 0 has no interface number 1 [ 1858.051147][ T10] usb 2-1: config 0 has no interface number 2 [ 1858.056137][ T47] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1858.057314][ T10] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 1858.073833][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1858.083799][ T10] usb 2-1: config 0 descriptor?? [ 1858.209124][ T47] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1858.218585][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1858.226863][ T47] usb 3-1: Product: syz [ 1858.231174][ T47] usb 3-1: Manufacturer: syz [ 1858.235765][ T47] usb 3-1: SerialNumber: syz [ 1858.242318][ T47] usb 3-1: config 0 descriptor?? [ 1858.251210][ T47] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 081 [ 1858.792710][ T10] usb 2-1: Could not set interface, error -71 [ 1858.821521][ T10] usb 2-1: USB disconnect, device number 65 [ 1858.836005][T29997] tipc: Node number set to 1495945839 [ 1858.936141][T18816] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1859.097326][T18816] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1859.105381][T18816] usb 5-1: config 0 has no interface number 0 [ 1859.113253][T18816] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1859.123822][T18816] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1859.389678][ T47] i2c i2c-1: connected i2c-tiny-usb device [ 1859.479315][T18816] usb 5-1: Product: syz [ 1859.483578][T18816] usb 5-1: Manufacturer: syz [ 1859.488300][T18816] usb 5-1: SerialNumber: syz [ 1859.497982][T18816] usb 5-1: config 0 descriptor?? [ 1859.735790][T18816] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1859.747218][T18816] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1859.757733][T18816] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1859.765836][T18816] usb 5-1: media controller created [ 1859.780090][T18816] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1860.148876][ T47] usb 3-1: USB disconnect, device number 81 [ 1860.153546][T18816] i2c i2c-2: ec100: i2c rd failed=-32 reg=33 [ 1860.156019][T30115] i2c i2c-1: failure reading functionality [ 1860.198043][T30127] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=30127 comm=syz.4.6428 [ 1860.218821][T30127] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=30127 comm=syz.4.6428 [ 1860.450567][ T29] audit: type=1400 audit(1772468564.313:2015): avc: denied { ioctl } for pid=30114 comm="syz.4.6428" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1860.477830][T30115] fuse: Bad value for 'fd' [ 1860.492650][ T10] usb 5-1: USB disconnect, device number 68 [ 1860.704474][T30132] FAULT_INJECTION: forcing a failure. [ 1860.704474][T30132] name failslab, interval 1, probability 0, space 0, times 0 [ 1860.737350][T30132] CPU: 0 UID: 0 PID: 30132 Comm: syz.1.6432 Tainted: G L syzkaller #0 PREEMPT(full) [ 1860.737380][T30132] Tainted: [L]=SOFTLOCKUP [ 1860.737387][T30132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1860.737397][T30132] Call Trace: [ 1860.737403][T30132] [ 1860.737411][T30132] dump_stack_lvl+0x100/0x190 [ 1860.737445][T30132] should_fail_ex.cold+0x5/0xa [ 1860.737465][T30132] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1860.737485][T30132] should_failslab+0xc2/0x120 [ 1860.737511][T30132] __kmalloc_noprof+0xe0/0x850 [ 1860.737540][T30132] tomoyo_realpath_from_path+0xb6/0x690 [ 1860.737569][T30132] tomoyo_path_number_perm+0x23c/0x580 [ 1860.737587][T30132] ? tomoyo_path_number_perm+0x22e/0x580 [ 1860.737606][T30132] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1860.737648][T30132] ? find_held_lock+0x2b/0x80 [ 1860.737669][T30132] ? __fget_files+0x215/0x3d0 [ 1860.737685][T30132] ? hook_file_ioctl_common+0x146/0x410 [ 1860.737715][T30132] ? __fget_files+0x21f/0x3d0 [ 1860.737737][T30132] security_file_ioctl+0xd3/0x230 [ 1860.737759][T30132] __x64_sys_ioctl+0xb7/0x210 [ 1860.737783][T30132] do_syscall_64+0x106/0xf80 [ 1860.737800][T30132] ? clear_bhb_loop+0x40/0x90 [ 1860.737821][T30132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1860.737838][T30132] RIP: 0033:0x7fd5ea99c799 [ 1860.737853][T30132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1860.737868][T30132] RSP: 002b:00007fd5eb8e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1860.737885][T30132] RAX: ffffffffffffffda RBX: 00007fd5eac15fa0 RCX: 00007fd5ea99c799 [ 1860.737896][T30132] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 1860.737906][T30132] RBP: 00007fd5eb8e3090 R08: 0000000000000000 R09: 0000000000000000 [ 1860.737915][T30132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1860.737925][T30132] R13: 00007fd5eac16038 R14: 00007fd5eac15fa0 R15: 00007fff810f27b8 [ 1860.737948][T30132] [ 1860.737955][T30132] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1861.134167][T30140] FAULT_INJECTION: forcing a failure. [ 1861.134167][T30140] name failslab, interval 1, probability 0, space 0, times 0 [ 1861.146889][T30140] CPU: 0 UID: 0 PID: 30140 Comm: syz.1.6435 Tainted: G L syzkaller #0 PREEMPT(full) [ 1861.146908][T30140] Tainted: [L]=SOFTLOCKUP [ 1861.146912][T30140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1861.146919][T30140] Call Trace: [ 1861.146923][T30140] [ 1861.146928][T30140] dump_stack_lvl+0x100/0x190 [ 1861.146949][T30140] should_fail_ex.cold+0x5/0xa [ 1861.146963][T30140] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1861.146977][T30140] should_failslab+0xc2/0x120 [ 1861.146995][T30140] __kmalloc_noprof+0xe0/0x850 [ 1861.147014][T30140] tomoyo_realpath_from_path+0xb6/0x690 [ 1861.147030][T30140] tomoyo_path_number_perm+0x23c/0x580 [ 1861.147040][T30140] ? tomoyo_path_number_perm+0x22e/0x580 [ 1861.147052][T30140] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1861.147077][T30140] ? find_held_lock+0x2b/0x80 [ 1861.147090][T30140] ? __fget_files+0x215/0x3d0 [ 1861.147100][T30140] ? hook_file_ioctl_common+0x146/0x410 [ 1861.147118][T30140] ? __fget_files+0x21f/0x3d0 [ 1861.147131][T30140] security_file_ioctl+0xd3/0x230 [ 1861.147144][T30140] __x64_sys_ioctl+0xb7/0x210 [ 1861.147160][T30140] do_syscall_64+0x106/0xf80 [ 1861.147172][T30140] ? clear_bhb_loop+0x40/0x90 [ 1861.147185][T30140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1861.147196][T30140] RIP: 0033:0x7fd5ea99c799 [ 1861.147205][T30140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1861.147216][T30140] RSP: 002b:00007fd5eb8e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1861.147228][T30140] RAX: ffffffffffffffda RBX: 00007fd5eac15fa0 RCX: 00007fd5ea99c799 [ 1861.147234][T30140] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1861.147241][T30140] RBP: 00007fd5eb8e3090 R08: 0000000000000000 R09: 0000000000000000 [ 1861.147247][T30140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1861.147253][T30140] R13: 00007fd5eac16038 R14: 00007fd5eac15fa0 R15: 00007fff810f27b8 [ 1861.147267][T30140] [ 1861.147273][T30140] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1861.369593][T30141] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 1861.699615][T30152] FAULT_INJECTION: forcing a failure. [ 1861.699615][T30152] name failslab, interval 1, probability 0, space 0, times 0 [ 1861.713462][T30152] CPU: 1 UID: 0 PID: 30152 Comm: syz.4.6437 Tainted: G L syzkaller #0 PREEMPT(full) [ 1861.713490][T30152] Tainted: [L]=SOFTLOCKUP [ 1861.713497][T30152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1861.713507][T30152] Call Trace: [ 1861.713514][T30152] [ 1861.713521][T30152] dump_stack_lvl+0x100/0x190 [ 1861.713554][T30152] should_fail_ex.cold+0x5/0xa [ 1861.713576][T30152] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1861.713598][T30152] should_failslab+0xc2/0x120 [ 1861.713627][T30152] __kmalloc_noprof+0xe0/0x850 [ 1861.713658][T30152] tomoyo_realpath_from_path+0xb6/0x690 [ 1861.713686][T30152] tomoyo_path_number_perm+0x23c/0x580 [ 1861.713704][T30152] ? tomoyo_path_number_perm+0x22e/0x580 [ 1861.713724][T30152] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1861.713768][T30152] ? find_held_lock+0x2b/0x80 [ 1861.713792][T30152] ? __fget_files+0x215/0x3d0 [ 1861.713809][T30152] ? hook_file_ioctl_common+0x146/0x410 [ 1861.713845][T30152] ? __fget_files+0x21f/0x3d0 [ 1861.713869][T30152] security_file_ioctl+0xd3/0x230 [ 1861.713890][T30152] __x64_sys_ioctl+0xb7/0x210 [ 1861.713919][T30152] do_syscall_64+0x106/0xf80 [ 1861.713938][T30152] ? clear_bhb_loop+0x40/0x90 [ 1861.713961][T30152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1861.713979][T30152] RIP: 0033:0x7f6f8859c799 [ 1861.713997][T30152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1861.714014][T30152] RSP: 002b:00007f6f894e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1861.714032][T30152] RAX: ffffffffffffffda RBX: 00007f6f88815fa0 RCX: 00007f6f8859c799 [ 1861.714043][T30152] RDX: 0000200000000300 RSI: 00000000000089f3 RDI: 0000000000000003 [ 1861.714053][T30152] RBP: 00007f6f894e0090 R08: 0000000000000000 R09: 0000000000000000 [ 1861.714065][T30152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1861.714076][T30152] R13: 00007f6f88816038 R14: 00007f6f88815fa0 R15: 00007ffe20df1198 [ 1861.714102][T30152] [ 1861.714110][T30152] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1862.226230][ T10] usb 5-1: new low-speed USB device number 69 using dummy_hcd [ 1862.559745][ T10] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 1862.575392][ T10] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 1862.584125][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1862.593962][ T10] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1862.607427][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1862.619020][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1862.638646][ T10] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1862.647994][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1862.657017][ T10] usb 5-1: Manufacturer: 㝂 [ 1862.663453][ T10] usb 5-1: config 0 descriptor?? [ 1862.669173][T30154] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1862.677626][ T10] hub 5-1:0.0: bad descriptor, ignoring hub [ 1862.683643][ T10] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1862.694102][ T10] input: 㝂 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input73 [ 1862.892566][ T10] usb 5-1: USB disconnect, device number 69 [ 1862.907731][ T29] audit: type=1804 audit(1772468566.753:2016): pid=30154 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.6438" name="file1" dev="ramfs" ino=135084 res=1 errno=0 [ 1863.641103][T30172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1863.648859][T30172] batadv_slave_1: entered promiscuous mode [ 1863.824826][T30175] binder: 30174:30175 ioctl c0046209 200000000000000 returned -22 [ 1863.945809][T30179] binder: 30178:30179 ioctl c0046209 200000000000000 returned -22 [ 1863.956175][T29997] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1864.017529][T30181] overlayfs: failed to resolve './file1': -2 [ 1864.088241][T29997] usb 5-1: device descriptor read/64, error -71 [ 1865.070216][T30190] netlink: 'syz.2.6449': attribute type 1 has an invalid length. [ 1865.086148][T29997] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1865.226150][T29997] usb 5-1: device descriptor read/64, error -71 [ 1865.254432][T30194] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6451'. [ 1865.337134][T29997] usb usb5-port1: attempt power cycle [ 1865.879871][ T29] audit: type=1804 audit(1772468569.393:2017): pid=30198 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.6452" name="/newroot/46/file0" dev="tmpfs" ino=262 res=1 errno=0 [ 1865.936217][T29997] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1865.956894][T29997] usb 5-1: device descriptor read/8, error -71 [ 1866.200915][T29997] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1866.241095][T29997] usb 5-1: device descriptor read/8, error -71 [ 1866.357074][T29997] usb usb5-port1: unable to enumerate USB device [ 1866.468152][T30210] FAULT_INJECTION: forcing a failure. [ 1866.468152][T30210] name failslab, interval 1, probability 0, space 0, times 0 [ 1866.496765][T30210] CPU: 1 UID: 0 PID: 30210 Comm: syz.4.6456 Tainted: G L syzkaller #0 PREEMPT(full) [ 1866.496799][T30210] Tainted: [L]=SOFTLOCKUP [ 1866.496805][T30210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1866.496817][T30210] Call Trace: [ 1866.496823][T30210] [ 1866.496839][T30210] dump_stack_lvl+0x100/0x190 [ 1866.496873][T30210] should_fail_ex.cold+0x5/0xa [ 1866.496895][T30210] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1866.496916][T30210] should_failslab+0xc2/0x120 [ 1866.496943][T30210] __kmalloc_noprof+0xe0/0x850 [ 1866.496972][T30210] tomoyo_realpath_from_path+0xb6/0x690 [ 1866.496999][T30210] tomoyo_path_number_perm+0x23c/0x580 [ 1866.497017][T30210] ? tomoyo_path_number_perm+0x22e/0x580 [ 1866.497035][T30210] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1866.497080][T30210] ? find_held_lock+0x2b/0x80 [ 1866.497102][T30210] ? __fget_files+0x215/0x3d0 [ 1866.497118][T30210] ? hook_file_ioctl_common+0x146/0x410 [ 1866.497147][T30210] ? __fget_files+0x21f/0x3d0 [ 1866.497169][T30210] security_file_ioctl+0xd3/0x230 [ 1866.497191][T30210] __x64_sys_ioctl+0xb7/0x210 [ 1866.497216][T30210] do_syscall_64+0x106/0xf80 [ 1866.497233][T30210] ? clear_bhb_loop+0x40/0x90 [ 1866.497254][T30210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1866.497269][T30210] RIP: 0033:0x7f6f8859c799 [ 1866.497284][T30210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1866.497300][T30210] RSP: 002b:00007f6f894e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1866.497317][T30210] RAX: ffffffffffffffda RBX: 00007f6f88815fa0 RCX: 00007f6f8859c799 [ 1866.497328][T30210] RDX: 00002000000001c0 RSI: 00000000c0205648 RDI: 0000000000000004 [ 1866.497339][T30210] RBP: 00007f6f894e0090 R08: 0000000000000000 R09: 0000000000000000 [ 1866.497349][T30210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1866.497359][T30210] R13: 00007f6f88816038 R14: 00007f6f88815fa0 R15: 00007ffe20df1198 [ 1866.497384][T30210] [ 1866.497391][T30210] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1866.538578][ T10] usb 2-1: new low-speed USB device number 66 using dummy_hcd [ 1866.716192][T30210] vivid-003: disconnect [ 1866.720677][T30209] vivid-003: reconnect [ 1867.000047][ T10] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 1867.012480][ T10] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 1867.066105][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1867.075066][ T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1867.133568][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1867.153004][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1867.203210][ T10] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1867.212653][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1867.222729][ T10] usb 2-1: Manufacturer: 㝂 [ 1867.245486][ T10] usb 2-1: config 0 descriptor?? [ 1867.266848][T30200] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1867.274826][ T10] hub 2-1:0.0: bad descriptor, ignoring hub [ 1867.292077][ T10] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1867.304427][ T10] input: 㝂 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input74 [ 1867.328052][ C1] usb_acecad 2-1:0.0: can't resubmit intr, dummy_hcd.1-1/input0, status -1 [ 1867.356145][T27295] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 1867.488590][ T29] audit: type=1804 audit(1772468571.353:2018): pid=30200 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.6453" name="file1" dev="ramfs" ino=135421 res=1 errno=0 [ 1867.516152][T29997] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1867.529277][T20642] usb 2-1: USB disconnect, device number 66 [ 1867.557458][T27295] usb 5-1: config 0 has an invalid interface number: 3 but max is 2 [ 1867.565470][T27295] usb 5-1: config 0 has an invalid interface number: 176 but max is 2 [ 1867.575424][T27295] usb 5-1: config 0 has no interface number 1 [ 1867.582964][T27295] usb 5-1: config 0 has no interface number 2 [ 1867.589304][T27295] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 1867.598662][T27295] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1867.608557][T27295] usb 5-1: config 0 descriptor?? [ 1867.676502][T29997] usb 3-1: Using ep0 maxpacket: 16 [ 1867.682963][T29997] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1867.694961][T29997] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1867.704046][T29997] usb 3-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 1867.712157][T29997] usb 3-1: Manufacturer: syz [ 1867.718979][T29997] usb 3-1: config 0 descriptor?? [ 1867.984191][T27295] usb 5-1: Could not set interface, error -71 [ 1868.058734][T27295] usb 5-1: USB disconnect, device number 74 [ 1868.391663][T30223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1868.412782][T30223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1868.683999][T29997] usbhid 3-1:0.0: can't add hid device: -71 [ 1868.691268][T29997] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1868.702866][T29997] usb 3-1: USB disconnect, device number 82 [ 1868.780531][T30231] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1870.506255][T29997] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1870.686142][T29997] usb 3-1: Using ep0 maxpacket: 16 [ 1870.697869][T29997] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1870.714883][T29997] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1870.724781][T29997] usb 3-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 1870.734111][T29997] usb 3-1: Manufacturer: syz [ 1870.851036][T29997] usb 3-1: config 0 descriptor?? [ 1870.960854][ T5924] usb 5-1: new low-speed USB device number 75 using dummy_hcd [ 1871.167142][ T5924] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 1871.175454][ T5924] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 1871.192930][ T5924] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1871.217680][ T5924] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1871.237211][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1871.255700][ T5924] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1871.294416][ T5924] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1871.306164][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1871.314230][ T5924] usb 5-1: Manufacturer: 㝂 [ 1871.505794][T30264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1871.516687][T30264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1871.646709][T14334] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1871.658619][T14334] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1871.686933][T14334] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1871.694652][ T5924] usb 5-1: config 0 descriptor?? [ 1871.700490][T30254] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1871.710018][ T5924] hub 5-1:0.0: bad descriptor, ignoring hub [ 1871.718924][T14334] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1871.727574][ T5924] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1871.739279][T14334] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1871.750489][ T5924] input: 㝂 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input75 [ 1871.853526][T29997] usbhid 3-1:0.0: can't add hid device: -71 [ 1871.888583][T29997] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1871.913011][T29997] usb 3-1: USB disconnect, device number 83 [ 1872.009297][ T29] audit: type=1804 audit(1772468575.873:2019): pid=30254 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.6470" name="file1" dev="ramfs" ino=135536 res=1 errno=0 [ 1872.039437][T20642] usb 5-1: USB disconnect, device number 75 [ 1872.119995][T30262] chnl_net:caif_netlink_parms(): no params data found [ 1872.247933][T30262] bridge0: port 1(bridge_slave_0) entered blocking state [ 1872.255177][T30262] bridge0: port 1(bridge_slave_0) entered disabled state [ 1872.263149][T30262] bridge_slave_0: entered allmulticast mode [ 1872.271243][T30262] bridge_slave_0: entered promiscuous mode [ 1872.282238][T30262] bridge0: port 2(bridge_slave_1) entered blocking state [ 1872.289842][T30262] bridge0: port 2(bridge_slave_1) entered disabled state [ 1872.297332][T30262] bridge_slave_1: entered allmulticast mode [ 1872.304735][T30262] bridge_slave_1: entered promiscuous mode [ 1872.334176][T30262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1872.346671][T30262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1872.377824][T30262] team0: Port device team_slave_0 added [ 1872.387642][T30262] team0: Port device team_slave_1 added [ 1872.396135][T20642] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1872.452819][T30262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1872.468451][T30262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1872.576213][T20642] usb 2-1: Using ep0 maxpacket: 16 [ 1873.056561][ T5924] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 1873.207865][ T5924] usb 5-1: config 0 has an invalid interface number: 3 but max is 2 [ 1873.215962][ T5924] usb 5-1: config 0 has an invalid interface number: 176 but max is 2 [ 1873.226941][ T5924] usb 5-1: config 0 has no interface number 1 [ 1873.233285][ T5924] usb 5-1: config 0 has no interface number 2 [ 1873.242417][ T5924] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 1873.251849][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1873.262737][ T5924] usb 5-1: config 0 descriptor?? [ 1873.340387][T20642] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 1873.348611][T20642] usb 2-1: config 0 has no interface number 0 [ 1873.354723][T20642] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1873.365678][T30262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1873.377999][T30262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1873.384957][T30262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1873.411728][T20642] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1873.422237][T30262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1873.434034][T20642] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1873.443262][T20642] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1873.451418][T20642] usb 2-1: Product: syz [ 1873.455728][T20642] usb 2-1: SerialNumber: syz [ 1873.478945][T20642] usb 2-1: config 0 descriptor?? [ 1873.487813][T20642] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 1873.495640][T20642] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input76 [ 1873.519889][T30262] hsr_slave_0: entered promiscuous mode [ 1873.527447][T30262] hsr_slave_1: entered promiscuous mode [ 1873.535560][T30262] debugfs: 'hsr0' already exists in 'hsr' [ 1873.541649][T30262] Cannot create hsr debugfs directory [ 1873.718889][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1873.726114][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1873.733229][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1873.740353][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1873.747508][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1873.754637][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1873.761774][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1873.768901][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1873.776008][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1873.783145][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1873.798703][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1873.808978][T20642] usb 2-1: USB disconnect, device number 67 [ 1873.866657][T14334] Bluetooth: hci4: command tx timeout [ 1873.873864][T20642] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1873.986376][ T5924] usb 5-1: Could not set interface, error -71 [ 1874.025665][ T5924] usb 5-1: USB disconnect, device number 76 [ 1874.046253][T18816] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1874.140325][T30262] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1874.149308][T30262] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1874.158396][T30262] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1874.167599][T30262] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1874.220784][T30262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1874.241630][T30262] 8021q: adding VLAN 0 to HW filter on device team0 [ 1874.246189][T18816] usb 3-1: Using ep0 maxpacket: 16 [ 1874.255199][ T87] bridge0: port 1(bridge_slave_0) entered blocking state [ 1874.262317][ T87] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1874.272057][T18816] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1874.285583][T18816] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1874.295461][T18816] usb 3-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 1874.297232][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 1874.303732][T18816] usb 3-1: Manufacturer: syz [ 1874.310698][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1874.328449][T18816] usb 3-1: config 0 descriptor?? [ 1874.496854][T30262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1874.646276][ T5924] usb 2-1: new low-speed USB device number 68 using dummy_hcd [ 1874.681892][T30262] veth0_vlan: entered promiscuous mode [ 1874.691849][T30262] veth1_vlan: entered promiscuous mode [ 1874.714813][T30262] veth0_macvtap: entered promiscuous mode [ 1874.723674][T30262] veth1_macvtap: entered promiscuous mode [ 1874.779434][T30262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1874.788587][ T5924] usb 2-1: device descriptor read/64, error -71 [ 1874.880626][T30305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1874.890944][T30305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1874.906442][T30262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1875.079764][ T693] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1875.088705][ T693] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1875.098856][ T693] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1875.120536][ T693] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1875.135961][ T5924] usb 2-1: new low-speed USB device number 69 using dummy_hcd [ 1875.155311][T18816] usbhid 3-1:0.0: can't add hid device: -71 [ 1875.162050][T18816] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1875.174239][T18816] usb 3-1: USB disconnect, device number 84 [ 1875.221705][ T693] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1875.233997][ T693] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1875.258908][T16050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1875.270875][T16050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1875.276410][ T5924] usb 2-1: device descriptor read/64, error -71 [ 1875.335444][ T29] audit: type=1400 audit(1772468579.193:2020): avc: denied { map } for pid=30306 comm="syz.5.6473" path="socket:[135901]" dev="sockfs" ino=135901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1875.430449][ T5924] usb usb2-port1: attempt power cycle [ 1875.903882][T14334] Bluetooth: hci4: command tx timeout [ 1876.006210][ T5924] usb 2-1: new low-speed USB device number 70 using dummy_hcd [ 1876.257893][ T5924] usb 2-1: device descriptor read/8, error -71 [ 1876.426447][T24371] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1876.437511][T24371] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1876.445700][T24371] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1876.454651][T24371] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1876.543484][ T5924] usb 2-1: new low-speed USB device number 71 using dummy_hcd [ 1876.551815][ T29] audit: type=1804 audit(1772468580.393:2021): pid=30321 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.6482" name="/newroot/54/file0" dev="tmpfs" ino=303 res=1 errno=0 [ 1876.618538][ T5924] usb 2-1: device descriptor read/8, error -71 [ 1876.664739][T24371] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1876.757822][ T5924] usb usb2-port1: unable to enumerate USB device [ 1877.115755][T30106] tipc: Resetting bearer [ 1877.141600][T30106] tipc: Disabling bearer [ 1877.346788][T30319] chnl_net:caif_netlink_parms(): no params data found [ 1877.396671][T30319] bridge0: port 1(bridge_slave_0) entered blocking state [ 1877.413668][T30319] bridge0: port 1(bridge_slave_0) entered disabled state [ 1877.422285][T30319] bridge_slave_0: entered allmulticast mode [ 1877.429865][T30319] bridge_slave_0: entered promiscuous mode [ 1877.439311][T30319] bridge0: port 2(bridge_slave_1) entered blocking state [ 1877.447304][T30319] bridge0: port 2(bridge_slave_1) entered disabled state [ 1877.454448][T30319] bridge_slave_1: entered allmulticast mode [ 1877.461365][T30319] bridge_slave_1: entered promiscuous mode [ 1877.483919][T30319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1877.494999][T30319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1877.518104][T30319] team0: Port device team_slave_0 added [ 1877.525257][T30319] team0: Port device team_slave_1 added [ 1877.543178][T30319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1877.550756][T30319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1877.578018][T30319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1877.589922][T30319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1877.596978][T30319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1877.623832][T30319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1877.655057][T30319] hsr_slave_0: entered promiscuous mode [ 1877.661392][T30319] hsr_slave_1: entered promiscuous mode [ 1877.667651][T30319] debugfs: 'hsr0' already exists in 'hsr' [ 1877.673353][T30319] Cannot create hsr debugfs directory [ 1877.779463][T30319] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1877.788990][T30319] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1877.799723][T30319] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1877.811135][T30319] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1877.831667][T30319] bridge0: port 2(bridge_slave_1) entered blocking state [ 1877.838769][T30319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1877.846097][T30319] bridge0: port 1(bridge_slave_0) entered blocking state [ 1877.853172][T30319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1877.893527][T30319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1877.911464][ T693] bridge0: port 1(bridge_slave_0) entered disabled state [ 1877.919883][ T693] bridge0: port 2(bridge_slave_1) entered disabled state [ 1877.931170][T30319] 8021q: adding VLAN 0 to HW filter on device team0 [ 1877.942153][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 1877.949257][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1877.961578][ T693] bridge0: port 2(bridge_slave_1) entered blocking state [ 1877.968686][ T693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1877.976381][T24371] Bluetooth: hci4: command tx timeout [ 1878.094477][T30319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1878.230934][T30319] veth0_vlan: entered promiscuous mode [ 1878.242219][T30319] veth1_vlan: entered promiscuous mode [ 1878.263680][T30319] veth0_macvtap: entered promiscuous mode [ 1878.271779][T30319] veth1_macvtap: entered promiscuous mode [ 1878.291536][T30319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1878.304832][T30319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1878.323242][T27463] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1878.336972][T27463] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1878.345685][T27463] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1878.359806][T27463] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1878.415404][T27463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1878.430563][T27463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1878.451605][ T87] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1878.460457][ T87] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1878.756403][T24371] Bluetooth: hci6: command tx timeout [ 1880.036274][T24371] Bluetooth: hci4: command tx timeout [ 1880.359234][T24371] Bluetooth: hci5: command 0x0406 tx timeout [ 1880.837484][T14334] Bluetooth: hci6: command tx timeout [ 1882.916798][T14334] Bluetooth: hci6: command tx timeout [ 1884.996238][T14334] Bluetooth: hci6: command tx timeout [ 1887.877150][T17590] block nbd0: Possible stuck request ffff888027a10000: control (read@0,1024B). Runtime 60 seconds [ 1887.889288][T17590] block nbd0: Possible stuck request ffff888027a28000: control (read@1024,1024B). Runtime 60 seconds [ 1887.900187][T17590] block nbd0: Possible stuck request ffff888027a28200: control (read@2048,1024B). Runtime 60 seconds [ 1887.911106][T17590] block nbd0: Possible stuck request ffff888027a28400: control (read@3072,1024B). Runtime 60 seconds [ 1889.380424][ T5176] udevd[5176]: worker [28307] /devices/virtual/block/nbd0 is taking a long time [ 1895.716831][T20581] Bluetooth: hci0: command 0x0406 tx timeout [ 1909.002818][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1917.967505][T17590] block nbd0: Possible stuck request ffff888027a10000: control (read@0,1024B). Runtime 90 seconds [ 1917.980206][T17590] block nbd0: Possible stuck request ffff888027a28000: control (read@1024,1024B). Runtime 90 seconds [ 1917.991157][T17590] block nbd0: Possible stuck request ffff888027a28200: control (read@2048,1024B). Runtime 90 seconds [ 1918.002061][T17590] block nbd0: Possible stuck request ffff888027a28400: control (read@3072,1024B). Runtime 90 seconds [ 1936.676442][T20581] Bluetooth: hci3: command 0x0406 tx timeout [ 1948.050379][T17590] block nbd0: Possible stuck request ffff888027a10000: control (read@0,1024B). Runtime 120 seconds [ 1948.062309][T17590] block nbd0: Possible stuck request ffff888027a28000: control (read@1024,1024B). Runtime 120 seconds [ 1948.073327][T17590] block nbd0: Possible stuck request ffff888027a28200: control (read@2048,1024B). Runtime 120 seconds [ 1948.084412][T17590] block nbd0: Possible stuck request ffff888027a28400: control (read@3072,1024B). Runtime 120 seconds [ 1970.439383][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1978.127459][ T9808] block nbd0: Possible stuck request ffff888027a10000: control (read@0,1024B). Runtime 150 seconds [ 1978.138234][ T9808] block nbd0: Possible stuck request ffff888027a28000: control (read@1024,1024B). Runtime 150 seconds [ 1978.149203][ T9808] block nbd0: Possible stuck request ffff888027a28200: control (read@2048,1024B). Runtime 150 seconds [ 1978.161034][ T9808] block nbd0: Possible stuck request ffff888027a28400: control (read@3072,1024B). Runtime 150 seconds [ 1998.116144][T20581] Bluetooth: hci4: command 0x0406 tx timeout [ 2003.246561][T20581] Bluetooth: hci6: command 0x0406 tx timeout [ 2005.647450][ T30] INFO: task syz.3.6418:30050 blocked for more than 143 seconds. [ 2005.655178][ T30] Tainted: G L syzkaller #0 [ 2005.662372][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2005.671080][ T30] task:syz.3.6418 state:D stack:23424 pid:30050 tgid:30049 ppid:26906 task_flags:0x400140 flags:0x00080002 [ 2005.683882][ T30] Call Trace: [ 2005.687198][ T30] [ 2005.690121][ T30] __schedule+0xfee/0x6120 [ 2005.694521][ T30] ? __lock_acquire+0x4a5/0x2630 [ 2005.699625][ T30] ? __pfx___schedule+0x10/0x10 [ 2005.704496][ T30] ? find_held_lock+0x2b/0x80 [ 2005.710319][ T30] ? schedule+0x2bf/0x390 [ 2005.714671][ T30] schedule+0xdd/0x390 [ 2005.718841][ T30] schedule_preempt_disabled+0x13/0x30 [ 2005.724307][ T30] __mutex_lock+0xc9a/0x1b90 [ 2005.728971][ T30] ? sync_bdevs+0x153/0x480 [ 2005.733502][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2005.738621][ T30] ? __mutex_unlock_slowpath+0x15c/0x790 [ 2005.744266][ T30] ? iput.part.0+0x1a0/0xf50 [ 2005.748903][ T30] ? sync_bdevs+0x153/0x480 [ 2005.753404][ T30] sync_bdevs+0x153/0x480 [ 2005.757788][ T30] ksys_sync+0xb0/0xf0 [ 2005.761862][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 2005.766687][ T30] ? do_syscall_64+0x95/0xf80 [ 2005.771368][ T30] __do_sys_sync+0xe/0x20 [ 2005.775692][ T30] do_syscall_64+0x106/0xf80 [ 2005.780371][ T30] ? clear_bhb_loop+0x40/0x90 [ 2005.785049][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2005.791025][ T30] RIP: 0033:0x7ff77119c799 [ 2005.795431][ T30] RSP: 002b:00007ff7720ac028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 2005.804578][ T30] RAX: ffffffffffffffda RBX: 00007ff771415fa0 RCX: 00007ff77119c799 [ 2005.813682][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2005.821875][ T30] RBP: 00007ff771415fa0 R08: 0000000000000000 R09: 0000000000000000 [ 2005.829889][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2005.837887][ T30] R13: 00007ff771416038 R14: 00007ff771415fa0 R15: 00007ffd82588158 [ 2005.845862][ T30] [ 2005.848928][ T30] INFO: task syz.3.6418:30053 blocked for more than 143 seconds. [ 2005.856669][ T30] Tainted: G L syzkaller #0 [ 2005.863175][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2005.871847][ T30] task:syz.3.6418 state:D stack:27464 pid:30053 tgid:30049 ppid:26906 task_flags:0x400040 flags:0x00080002 [ 2005.883813][ T30] Call Trace: [ 2005.887119][ T30] [ 2005.890044][ T30] __schedule+0xfee/0x6120 [ 2005.894447][ T30] ? __lock_acquire+0x4a5/0x2630 [ 2005.899418][ T30] ? __pfx___schedule+0x10/0x10 [ 2005.904266][ T30] ? find_held_lock+0x2b/0x80 [ 2005.908962][ T30] ? schedule+0x2bf/0x390 [ 2005.914339][ T30] schedule+0xdd/0x390 [ 2005.918483][ T30] schedule_preempt_disabled+0x13/0x30 [ 2005.923938][ T30] __mutex_lock+0xc9a/0x1b90 [ 2005.928736][ T30] ? sync_bdevs+0x153/0x480 [ 2005.933244][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2005.938347][ T30] ? __mutex_unlock_slowpath+0x15c/0x790 [ 2005.943984][ T30] ? iput.part.0+0x1a0/0xf50 [ 2005.948635][ T30] ? sync_bdevs+0x153/0x480 [ 2005.953141][ T30] sync_bdevs+0x153/0x480 [ 2005.957565][ T30] ksys_sync+0xb0/0xf0 [ 2005.961629][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 2005.966408][ T30] ? do_syscall_64+0x95/0xf80 [ 2005.971076][ T30] __do_sys_sync+0xe/0x20 [ 2005.975393][ T30] do_syscall_64+0x106/0xf80 [ 2005.979992][ T30] ? clear_bhb_loop+0x40/0x90 [ 2005.984684][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2005.990610][ T30] RIP: 0033:0x7ff77119c799 [ 2005.995021][ T30] RSP: 002b:00007ff77208b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 2006.003462][ T30] RAX: ffffffffffffffda RBX: 00007ff771416090 RCX: 00007ff77119c799 [ 2006.011458][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2006.020722][ T30] RBP: 00007ff771416090 R08: 0000000000000000 R09: 0000000000000000 [ 2006.028733][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2006.038621][ T30] R13: 00007ff771416128 R14: 00007ff771416090 R15: 00007ffd82588158 [ 2006.046788][ T30] [ 2006.049846][ T30] INFO: task syz.0.6431:30133 blocked for more than 143 seconds. [ 2006.057592][ T30] Tainted: G L syzkaller #0 [ 2006.064088][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2006.072823][ T30] task:syz.0.6431 state:D stack:28792 pid:30133 tgid:30128 ppid:28103 task_flags:0x400040 flags:0x00080002 [ 2006.084767][ T30] Call Trace: [ 2006.088064][ T30] [ 2006.091011][ T30] __schedule+0xfee/0x6120 [ 2006.095413][ T30] ? __lock_acquire+0x4a5/0x2630 [ 2006.100395][ T30] ? __pfx___schedule+0x10/0x10 [ 2006.105246][ T30] ? find_held_lock+0x2b/0x80 [ 2006.109957][ T30] ? schedule+0x2bf/0x390 [ 2006.114278][ T30] schedule+0xdd/0x390 [ 2006.119498][ T30] schedule_preempt_disabled+0x13/0x30 [ 2006.124975][ T30] __mutex_lock+0xc9a/0x1b90 [ 2006.129611][ T30] ? bdev_open+0x41a/0xe40 [ 2006.134048][ T30] ? find_held_lock+0x2b/0x80 [ 2006.138752][ T30] ? find_inode_fast+0x5e3/0x910 [ 2006.143695][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2006.148907][ T30] ? find_inode_fast+0x1fa/0x910 [ 2006.153846][ T30] ? bdev_open+0x41a/0xe40 [ 2006.158276][ T30] bdev_open+0x41a/0xe40 [ 2006.162536][ T30] ? iput+0x3a/0x40 [ 2006.166363][ T30] blkdev_open+0x34e/0x4f0 [ 2006.170772][ T30] do_dentry_open+0x6d8/0x1660 [ 2006.175515][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 2006.180482][ T30] vfs_open+0x82/0x3f0 [ 2006.184560][ T30] path_openat+0x208c/0x31a0 [ 2006.189256][ T30] ? __pfx_path_openat+0x10/0x10 [ 2006.194189][ T30] do_file_open+0x20e/0x430 [ 2006.198735][ T30] ? __pfx_do_file_open+0x10/0x10 [ 2006.203762][ T30] ? alloc_fd+0x476/0x790 [ 2006.208139][ T30] ? do_getname+0x191/0x390 [ 2006.212651][ T30] do_sys_openat2+0x10d/0x1e0 [ 2006.218749][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 2006.223959][ T30] ? do_raw_spin_lock+0x128/0x260 [ 2006.229038][ T30] ? kcov_ioctl+0x16a/0x720 [ 2006.233555][ T30] __x64_sys_openat+0x12d/0x210 [ 2006.238427][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 2006.243795][ T30] ? kcov_ioctl+0x16a/0x720 [ 2006.248336][ T30] do_syscall_64+0x106/0xf80 [ 2006.252920][ T30] ? clear_bhb_loop+0x40/0x90 [ 2006.257796][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2006.263688][ T30] RIP: 0033:0x7fc87515cfce [ 2006.268127][ T30] RSP: 002b:00007fc87608db28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2006.279063][ T30] RAX: ffffffffffffffda RBX: 00007fc87608e6c0 RCX: 00007fc87515cfce [ 2006.287262][ T30] RDX: 0000000000000000 RSI: 00007fc87608dc00 RDI: ffffffffffffff9c [ 2006.295239][ T30] RBP: 00007fc87608dc00 R08: 0000000000000000 R09: 0000000000000000 [ 2006.303231][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 2006.311252][ T30] R13: 00007fc875416218 R14: 00007fc875416180 R15: 00007ffd2456a088 [ 2006.319287][ T30] [ 2006.323640][ T30] INFO: task syz.0.6431:30134 blocked for more than 143 seconds. [ 2006.331792][ T30] Tainted: G L syzkaller #0 [ 2006.338325][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2006.347029][ T30] task:syz.0.6431 state:D stack:28200 pid:30134 tgid:30128 ppid:28103 task_flags:0x400040 flags:0x00080002 [ 2006.359266][ T30] Call Trace: [ 2006.362538][ T30] [ 2006.365453][ T30] __schedule+0xfee/0x6120 [ 2006.370069][ T30] ? __lock_acquire+0x4a5/0x2630 [ 2006.375037][ T30] ? __pfx___schedule+0x10/0x10 [ 2006.379926][ T30] ? find_held_lock+0x2b/0x80 [ 2006.384595][ T30] ? schedule+0x2bf/0x390 [ 2006.388948][ T30] schedule+0xdd/0x390 [ 2006.393024][ T30] schedule_preempt_disabled+0x13/0x30 [ 2006.398509][ T30] __mutex_lock+0xc9a/0x1b90 [ 2006.403094][ T30] ? bdev_open+0x41a/0xe40 [ 2006.407534][ T30] ? find_held_lock+0x2b/0x80 [ 2006.412209][ T30] ? find_inode_fast+0x5e3/0x910 [ 2006.417177][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2006.423631][ T30] ? find_inode_fast+0x1fa/0x910 [ 2006.428655][ T30] ? bdev_open+0x41a/0xe40 [ 2006.433086][ T30] bdev_open+0x41a/0xe40 [ 2006.437453][ T30] ? iput+0x3a/0x40 [ 2006.441270][ T30] blkdev_open+0x34e/0x4f0 [ 2006.445688][ T30] do_dentry_open+0x6d8/0x1660 [ 2006.450515][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 2006.455446][ T30] vfs_open+0x82/0x3f0 [ 2006.459543][ T30] path_openat+0x208c/0x31a0 [ 2006.464130][ T30] ? __pfx_path_openat+0x10/0x10 [ 2006.469128][ T30] do_file_open+0x20e/0x430 [ 2006.473622][ T30] ? __pfx_do_file_open+0x10/0x10 [ 2006.478831][ T30] ? alloc_fd+0x476/0x790 [ 2006.483144][ T30] ? do_getname+0x191/0x390 [ 2006.487669][ T30] do_sys_openat2+0x10d/0x1e0 [ 2006.492340][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 2006.497555][ T30] ? do_raw_spin_lock+0x128/0x260 [ 2006.502584][ T30] ? kcov_ioctl+0x16a/0x720 [ 2006.507099][ T30] __x64_sys_openat+0x12d/0x210 [ 2006.511945][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 2006.517413][ T30] ? kcov_ioctl+0x16a/0x720 [ 2006.522096][ T30] do_syscall_64+0x106/0xf80 [ 2006.527823][ T30] ? clear_bhb_loop+0x40/0x90 [ 2006.532507][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2006.538423][ T30] RIP: 0033:0x7fc87515cfce [ 2006.542829][ T30] RSP: 002b:00007fc87606cb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2006.551293][ T30] RAX: ffffffffffffffda RBX: 00007fc87606d6c0 RCX: 00007fc87515cfce [ 2006.559305][ T30] RDX: 0000000000022001 RSI: 00007fc87606cc00 RDI: ffffffffffffff9c [ 2006.567383][ T30] RBP: 00007fc87606cc00 R08: 0000000000000000 R09: 0000000000000000 [ 2006.575343][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 2006.583336][ T30] R13: 00007fc875416308 R14: 00007fc875416270 R15: 00007ffd2456a088 [ 2006.591435][ T30] [ 2006.594458][ T30] [ 2006.594458][ T30] Showing all locks held in the system: [ 2006.602283][ T30] 1 lock held by khungtaskd/30: [ 2006.607143][ T30] #0: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 2006.617006][ T30] 1 lock held by klogd/5165: [ 2006.621583][ T30] #0: ffff8880b843b1a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 2006.632652][ T30] 2 locks held by getty/5565: [ 2006.637361][ T30] #0: ffff8880344be0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 2006.647163][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 2006.657271][ T30] 1 lock held by udevd/28307: [ 2006.661940][ T30] #0: ffff888027918358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 2006.671299][ T30] 1 lock held by syz.3.6418/30050: [ 2006.676444][ T30] #0: ffff888027918358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 2006.685871][ T30] 1 lock held by syz.3.6418/30053: [ 2006.691005][ T30] #0: ffff888027918358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 2006.700602][ T30] 1 lock held by syz.0.6431/30133: [ 2006.705687][ T30] #0: ffff888027918358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 2006.715023][ T30] 1 lock held by syz.0.6431/30134: [ 2006.720187][ T30] #0: ffff888027918358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 2006.731041][ T30] [ 2006.733378][ T30] ============================================= [ 2006.733378][ T30] [ 2006.742118][ T30] NMI backtrace for cpu 1 [ 2006.742134][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2006.742159][ T30] Tainted: [L]=SOFTLOCKUP [ 2006.742165][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2006.742176][ T30] Call Trace: [ 2006.742182][ T30] [ 2006.742189][ T30] dump_stack_lvl+0x100/0x190 [ 2006.742221][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 2006.742241][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2006.742271][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 2006.742299][ T30] sys_info+0x141/0x190 [ 2006.742322][ T30] watchdog+0xd25/0x1050 [ 2006.742352][ T30] ? __pfx_watchdog+0x10/0x10 [ 2006.742376][ T30] ? __kthread_parkme+0x18c/0x230 [ 2006.742405][ T30] ? kthread+0x13a/0x450 [ 2006.742419][ T30] ? __pfx_watchdog+0x10/0x10 [ 2006.742441][ T30] kthread+0x370/0x450 [ 2006.742457][ T30] ? __pfx_kthread+0x10/0x10 [ 2006.742475][ T30] ret_from_fork+0x754/0xd80 [ 2006.742495][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 2006.742515][ T30] ? __switch_to+0x7b4/0x1120 [ 2006.742536][ T30] ? __pfx_kthread+0x10/0x10 [ 2006.742554][ T30] ret_from_fork_asm+0x1a/0x30 [ 2006.742585][ T30] [ 2006.742592][ T30] Sending NMI from CPU 1 to CPUs 0: [ 2006.868729][ C0] NMI backtrace for cpu 0 [ 2006.868746][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 2006.868766][ C0] Tainted: [L]=SOFTLOCKUP [ 2006.868771][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2006.868780][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 2006.868799][ C0] Code: 78 82 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 9f 1b 00 fb f4 fc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 2006.868812][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000242 [ 2006.868825][ C0] RAX: 0000000007dd2297 RBX: ffffffff8e4975c0 RCX: ffffffff8b8fec75 [ 2006.868834][ C0] RDX: 0000000000000000 RSI: ffffffff8de72ef9 RDI: ffffffff8c1af6a0 [ 2006.868843][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1017086795 [ 2006.868852][ C0] R10: ffff8880b8433cab R11: 0000000000000000 R12: fffffbfff1c92eb8 [ 2006.868861][ C0] R13: 0000000000000000 R14: ffffffff90d98410 R15: 0000000000000000 [ 2006.868870][ C0] FS: 0000000000000000(0000) GS:ffff888124345000(0000) knlGS:0000000000000000 [ 2006.868884][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2006.868893][ C0] CR2: 000055e7cbadc168 CR3: 000000000e598000 CR4: 00000000003526f0 [ 2006.868902][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2006.868911][ C0] DR3: 000000000000db67 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2006.868920][ C0] Call Trace: [ 2006.868925][ C0] [ 2006.868930][ C0] default_idle+0x9/0x10 [ 2006.868945][ C0] default_idle_call+0x6c/0xb0 [ 2006.868961][ C0] do_idle+0x35b/0x4b0 [ 2006.868979][ C0] ? __pfx_do_idle+0x10/0x10 [ 2006.868998][ C0] cpu_startup_entry+0x4f/0x60 [ 2006.869015][ C0] rest_init+0x251/0x260 [ 2006.869030][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 2006.869051][ C0] start_kernel+0x47f/0x480 [ 2006.869068][ C0] x86_64_start_reservations+0x24/0x30 [ 2006.869085][ C0] x86_64_start_kernel+0x12b/0x130 [ 2006.869102][ C0] common_startup_64+0x13e/0x148 [ 2006.869123][ C0] [ 2007.073009][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 2007.079847][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2007.090510][ T30] Tainted: [L]=SOFTLOCKUP [ 2007.094803][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2007.104831][ T30] Call Trace: [ 2007.108083][ T30] [ 2007.110987][ T30] dump_stack_lvl+0x100/0x190 [ 2007.115642][ T30] vpanic+0x552/0x970 [ 2007.119594][ T30] ? __pfx_vpanic+0x10/0x10 [ 2007.124072][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 2007.130206][ T30] panic+0xd1/0xe0 [ 2007.133921][ T30] ? __pfx_panic+0x10/0x10 [ 2007.138317][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 2007.144454][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 2007.150593][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 2007.156730][ T30] ? watchdog.cold+0x198/0x1ca [ 2007.161475][ T30] ? watchdog+0xd35/0x1050 [ 2007.165876][ T30] watchdog.cold+0x1a9/0x1ca [ 2007.170452][ T30] ? __pfx_watchdog+0x10/0x10 [ 2007.175123][ T30] ? __kthread_parkme+0x18c/0x230 [ 2007.180136][ T30] ? kthread+0x13a/0x450 [ 2007.184356][ T30] ? __pfx_watchdog+0x10/0x10 [ 2007.189015][ T30] kthread+0x370/0x450 [ 2007.193073][ T30] ? __pfx_kthread+0x10/0x10 [ 2007.197642][ T30] ret_from_fork+0x754/0xd80 [ 2007.202226][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 2007.207318][ T30] ? __switch_to+0x7b4/0x1120 [ 2007.211976][ T30] ? __pfx_kthread+0x10/0x10 [ 2007.216545][ T30] ret_from_fork_asm+0x1a/0x30 [ 2007.221299][ T30] [ 2007.224494][ T30] Kernel Offset: disabled [ 2007.228793][ T30] Rebooting in 86400 seconds..