last executing test programs: 11m23.470061557s ago: executing program 3 (id=606): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = syz_io_uring_setup(0x60e8, &(0x7f0000000040)={0x0, 0x21e9, 0x8000, 0x3, 0x340}, &(0x7f0000000180), &(0x7f0000000280)) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[], 0x6c}}, 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x0) fchdir(r6) r7 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r7, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r7, r7, &(0x7f0000000080)=0x2, 0x7f03) io_uring_enter(r1, 0x5b13, 0x4ff1, 0x8, &(0x7f00000002c0)={[0x6]}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000001d008500000082000000850000002a00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$FUSE(r7, &(0x7f0000000400)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$sock_SIOCSPGRP(r7, 0x8902, &(0x7f0000000300)=r9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r8, 0x0, 0xe, 0x0, &(0x7f0000000000)="0000001254934e43b42f7fb4606b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 11m20.919959855s ago: executing program 3 (id=616): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x4008001) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f000014f000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0xaaaaaaaaaaaac3f, 0x14, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000005740)={{0x0, 0x0, 0x80, {0x0, 0x80a0000}}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000000c0)="f30fc7b351efbaa000b80000ef0f1bafca00660fd18b0048660f3881867e000f20c06635000001000f22c0d97d269066b90c0a00000f3266b9cd0000000f32", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}]}, 0x4c}}, 0x0) 11m19.650426704s ago: executing program 3 (id=621): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000001400030628bd7000fddbdf25011f08"], 0x4c}, 0x1, 0x0, 0x0, 0x404c0c8}, 0x4040000) (fail_nth: 4) 11m17.218724888s ago: executing program 3 (id=632): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000004280)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="23db5037805f177d136115e6a1a5903469af39c1fb9cb38215fe64cff9f2f0444a57e22b0cc5cb4f74c9792365400d9e1c68539ea5eff0a5ed0864814d39251bee8dfea69aa052d900bc0c792e1c9752b7d3a3222f6a1ad3e44c1f65617b128aea51911861ca36ba7c96b96b2fba0fdaa49ffb2612f3e81fe565327dd9965a60046442c9dcd0d552c6a00388be3b438a08883c7349761531880294ad9887db97d8c2f74921c57910cf1f5cc528e17bd5c3746b6202f26d621535aac5f7872c2cb3295e42524b5acb249b2d1ac1b53a4e31271decfca3fad2e2f740768adf00875c18cb7d115150f83ceb73f77a1f61f1666c2bb9f6bd9f0fb55b3a619446e32bae2a1d99aa49e5f3822e048f8be44b707f2db10d7916ec9a10a695d573d871cf24959c3d15e61344a68309d186956537c6ea8532fc2e1c7649f8409d8dcde4c8ee1530470ac9c870f9f1837574e444ba6addf5ddb2dec67c0e76df79f265b403818dddb4efc27c90985ed69a48b12056e548f9c99edf80d2b195d26acb1127661727a0600257f4b2546513d03930a0638a71bd3223e51fbb75c832ef737907f2f4d3f0505f431ea02783c798b5c4579c99961fb73dc623a0d99c1b306435464d413b537d42c6444851b36482597140b22fbc0ebc7e795b2f96739bf139f5823bc869ede547da4f394fa1b1787836095e1013264042e53d5006ea059d0488cb2f5ccd44b30d25ea53c2dda71d112d7d441dbfc9f8462c99c098b1958c80b237d83c32f2759c9a9c081d7d7666a477cfda59354309b09f2a8b9f6c3077b0df1e8d0c71ac07232de4f437107cb0eb9b47b2267efe31938a337cf11cadad72ced56895bb14763cca5bdadd245d801e829a1eb3bb4ed851a345918efd2dcf8d38f66badc773068e6a2ef59b2bb838abd8b043cf6ac54550f3fde1bbb9e761095e4b8ef1891757d376be1f778142610c0acbbfc697f51fbb7a1602ed46e82813c74f41ee2bae818174809f3692084bea7310ebec3d6166702ae62aad84313e19b4d145167185ea8d53cb21d099fb592d7d7f8bc305dd375b5c0cd73be44f49ff53cee220085d4706bbf50c6f63b02e7e805e8fa4c73046a57a8700886da29ea53e5a316e7b011c44a0f7be5cc5cb5641ba0069ff591eee18966c7f005ef40046a5fe2bf325b2545b009867761264aa9611d184fa372ba3c5c33d9a50717210f7cec7f6dc4418a87a797eb6aaf6ab3892bd3f559547c88d8c29646c8173fad1588f52beb34ff863be65e7ec1598cfb465f270bd5532fa7035aae077eedbc846058fa19f58ffb1cf0f1863f6d33f2e5c454d18b66be766ca369af2cc9656fa34c6c10e4d4da44ce5e2370aaf60c4e130da331d3489e8f44c600246323409fdd35d11da27128c9d64be65dd3a90c1546a6eb9185cb6d3a4a9cfad0e41ea03896fd2346f745eb3563d7a79fd345b037c040e56f0677840bf9b0d295bcfa98b931464c5ce9fcaf745720deac2d8b4edeffc0fe6f089ed7c3880959fcf8e31f7b7054bc4f5c9d3ed3f66c968d0bc20b2d66c374f030f3f1965f43a98519e527caf693362412d523eeb38c8b016ff77f78f833d7513e4b5a53d5ed5143916673f822ceac9967b8788bc6428283181eaf8d99e48286aacf4f658a903e9f08659450f7f9483807c2e013a1d9d199f18886a8cb4e14d41c71e5731455a4394551281eca12a1bb6ae717f5da2949175d0f1f3d718b761dfc1099c7d9d8928c899ac8e936e69d19fcbfcfdee83b68ef8e15eed41a8ac0d54aa92d7d2ee58bb4799f378225ec9ba4709e5ce2b77208ecc85c22c64967a9ef3360c54d311b8917ceb7b432c90cc5e98de9327c1400f8ec89261b1d77d8874b0bbdd2c5eb59df415705de52b08b0e12c07fb7367c6d461c19f282d51e482cb4fb9ceb0249ac2d6400ca170fbd6c0063224179c616bb030a5c10102aa2eea92f1e6f5828590b250b09e6d1a9535c298a68160b7c281fecdd295dc3396c4e6eb3395d5a677d5fa95a732dfdef81f4346545dd1a74bb3aa9b516699bdf0a59165077ab459a5ffe0dbb3ef8afa7a8382a8441e0c36ffabbed8f93f4bbeb97e5f6a704bf63a0de9ccf8fef643ebc530a80920931002003b027014de317c42f861d98ef4fef66d232d9706e6bd263347384dadadaa43a7e106bbb21bd822d468ace171b3f04b996112135b63dcbd612b5888ec40da583ab549c340ddaf5d7406c3e99322c68874214356c1fd9b5f84348e629cc3487a901d1b7a2fa531b1509ac1c93de3da9f1c3773e3a2aba2b29d2419f240ae6d24ed9f14bf0b9b0f1e740a2db06dab64d6386f950bff4e4c94160ef4b832bbde3af4937b7528658b5c16a51cb22193fe99385721ce5b048d9338e289dcb40683140c413eca52c8e4b64b306f47569477379c864cfb3aa3e349262407d3935ab9a0916eb0f6db2be71a7eb8f9968dfac44995d5bff8ef617fceeaa448f5e5f8d4b39e3512fe7ae9ee1d8a0d5912b6148969ab0325f3f76e2340fbd67ce156bdf638140b3ccdb08e5049db15957915cb05db8901249b10c59cc5c3ff836290e3334eee2df387e44c57b4d6198c3749f5dc57f6c3de115ced6b43cbddd762b58f1fb40b2baf3b381febdc073142e30d2e9a1a69e8d86314221e540f195509d223b206173dc5406865d8064817c30c284c034035a63190ab86df3bae4168c58e01d2251748fd5d9d610024129e83a5730fe83cf0918790e6854ab765c78649b91c06655f0cb9e26d8432df78bbadd99583b6a8afcf177ed6f339e08c0b36a16c6d31d8a24cb6f2bc3ba58d7711b6f8b988dc3e3144be619548457d4f40509f17eeb186cb93a2928ecb951593d1907c8bbb9f4c8999caba3059c8e73dce54ad6f87bcd51d559f7759902b14e68d3b845c0b179b38f4e6f0bd3a89cbcd5ebed9972102048647da1eda5c8456442369f4ae871d4037ba26f27d27371ce57e23adca5af8dc93f934f2ef8d69ad3b2db66657b3868dd839c2b522f5461f24407ef091b77242fc70a48b7eec45f3bcbcfbc6bdc36e4b67295020a345233a32a0a0af4d03a53ef67e69716d5ae35342722afbe7558946475a9ebf5b39c18558a0011f68bc8a78590b0cb63618379a512790c42d94bb239dd3ef5b8d1036cf0391aded8802a7a447c38f231ae611aeeab9bba44cd14369473758b64108d0bc9b6bc9e9b497c2d1d2acbae7c620a55c226cf371331688eaddec61fe961c5fcef71dad45820ed0ac8dc7641d82150f1318ac15aa41e7be585b6a50da1b3cd95239ee61cfde15aba80ae8ebc21ba4540883c6f44cd35b6b97da4640c97f5a2b6efa8d184fec823abc754ab8a0db6c45c2293e90d9c154c4a3e0b9ec2b6113ce6583b80f0d234dec9a9815067244733e2134b9ba93bb9692fb44200bb5501bb109f2401e8baaf0115d795bb0346dfafaf953bed8e9a52a5b9b02d490c55fd89daf311ad5e08b070a9571f696d6df4715c8b69b840e4e03d6f361326e20d9546c47b3a63163e7df9bd260621358c166177ee7c69ed63a8c43dd4a78543aa9f922c0ef527f4aa61ff65bb14595f518412ce25a1e103df89cd4b363593da16c11d80a23a9b5ad8e3a7be8f697cecf82c8fbd889a4f743c839b67f7ba5453b10bbf59b1e4f4e821872c061a4125c0c15c1ca5164efe61a58bb54dcedc849800a6021a448d4660c3b85e2362b7cd8ce95156fbf408a09a30a8ccfc3554004e9f9a35382907eec00617e2ae1f8803146bc8c28b4f3bf3c6b183ae9248e7f05c4adce3e0b7ff29252b5be9b19431e3fe612d471f52c5c34cc12c83049189f4d2e5ca516df78766ba3449d07ef9436c68052c986d9dde8802c931194e2ce34acb8cc26663a09348b15c6c145d26306bded0d1f482803ae6dee26562b03fcb183b69ee4a0491e8776ecdadfca395cb4eac2948d4d64321a4e669f2f663eb54f05f12ed9c685835c3e79f982152dbe701073b9a4ab2932b46ee2424a5e18bbe5f25ce0b898ff6937927f4670defe430ac86021226ae055daf39b535cdc0899fcc99d15e67d66bd2dd89bb21b8d2689a8af10a1b0bd44103c469922c36fc0228d7b6febf5e366dceecf8bb1db385c8ab95d86ff09b76c2fa6282de81fd6864c495a4c8295df61a2548e1b81c3e3f30d7a41216801d6c2d1743f66ae2055756083e8bf403d436b8244ac214f4d84a693d13f299ba267401d094f2df70840e8a980622794212f0992ecf5a47980ab2cf7d5a6f12b0a489af3c3c847ac59bc89f36fbb0e08bf283b68213a17de38b3a45eade6f0b198def408f7711c16367bcc0ded794a9a323c7e7f07fad96ea9c4d7344c26e43844a27c21076b8d7cd07677602d91eac825eb5fd0631755c2dd1dbf7bce3eb3c3f7377fc6080ecd0b894e29769845725943e25932d4249abb4ab78d4e2ff2e2df42c8d884cd6bd13886cef080c6491c217abae0eec6e9d4d49eab6657f15cfd38e6cd6d0bd33198c4685ab302d0f46e42f4a5d5bb7d2840a0a8817b98a856700d4de74351896fe7d7d5a0d1bc57fb4c828aa51f9637807aeb905780f239527ed4affd83f68be8b7ad1e10d9e797ba39cdee24f7be0a0ab0ac22ea3968dac61eb4bdd522c9ce570edf63a439abfd9954bf6a16c88d86157d05477200a83255cde279b454979cee4de00e81cb44acdc4295c877566a749ab5b91d250f03d46ecc14210c196700338eea028c930ce104f20a9e7fabb0ad1d314ec1a2d97d1d1b9e09114dee0e3e513eacede01971ff85dc98634156073df4e8acd6c3aadd615adaffa7a81573813bc4ca21886ddd532021bba5c84b34c34665534db48d61903a03c1cca4ed955ca92c1e33b7664b494e3db6d1e637a49e537808a2669ebeca301691acd4fab0af197b9c7db01b7862466b568ab3a4712a25210264fb297a6b679dfc3fceb65bddd1a23d5b507a0d6da83d73b716d971c5179a92e57b9b93451eb943845a549de737f2d082a83682c32649b4941e787758ead9d2c256b2b4ed1e0255952ce83cccecc39e5bbdd38490f1960b26e5379943be3d9a64b5149c84d577e5fd099560baa292befa06ce9065fb03ed432a9e055ca4ad0e952f8368b3d230fd5239726f79f4c98a0b4a9648382b245d324cb61049562f765f923fc657ef36747658494d78590a1e27a2d09856acf50c3b26271c6d5aa96e8ff9bdb9043859665e21ea53a050c335cac414bbf27b0328ac2c7450acb26b093bf232358afd1135ee50ac3fb26b5f0256ccdd37033c8a59740607cfd549d4c6540afe4a6b4425ae1f633872dcfb5da8d0547cf0c4888817b71fbc7c45b2a641e9c1a76b6a6be124402422ada35edc02ed997d6b87b361aee95a16d2c528d89a52fe40dfd83434969bd86f02e63fc1ae72941209af39a08cfbb4c320bc47d853f5dbaf0cd60ec54608aadbc382fa6b5cab3e9cac57bea26609f4c79f6a6b4eb4a9336fa95783b0c0c366f36d5d6b8310b3cfdb800207919a131bc7f984f7fa11fd0bf2c89e060e9d1286e453fe97363ef72bd6eba29a85ffeccdc3bee72e12284333a5a40622c01619558d2750fc45abfa22059ebdf743f8e50ad29770d19f84d8a34232d6918514769b3bb2a1ea5e59e9556332ba669675764458e9349a1835c501a93e91dd3b31018979880a9913f54ec1e8526b8cffcb776b97fbb9424faa5c5eb60d2ac74955bba4b5182571d0d9f84f0df1baa722b20a78c9c0011c667f688b58489c9e450d83e40ac5eb41c5564b6d76a226448abe4a3f499927074125aa9c0e7e704c36df5bb110a0f15f8433a470e81db414827d5ce21ca1da1c8d51d746d1e1ca110127c15e92afd75d3cd05ce0b632cfa03745de3cdd4b57373d46676583c89f045c26c6fc5793e5489555ced08f83ba351135834a2028113c319af30cc85bc01a7f8208822d7d607aed0d2e12c80aa009100441b75beaccfe0adbda7e8bb870edf4963158794c8c3a5baacf6eec7b5efaefb7602dab8409d161beeb281cba21f1da0ccdc092d0433fb940d79699ffeb87ea775829a6e7e3b308a2ee0b7aec8ac5f35eed61be374c7c77196f7119a8882deff68230f461cb917b0ccb2b8597efcbdd1003b7b77b2c601ebd4b45c35b8426f7b9138ab3df0ec00819604ab8e1e64cf2aa2282b1269585af127a268cd207f964edff172e555398a16df44bdc52889538c3a27f8fbfffb61f7aeb55b259952bbfea81d73058d8b0f78ece9dc08e660437d21d4e3ec38b19e5afda7a6e33023f9158db8a1c14dabd9b8b307ddc66927f7b19df5e0da2237d98ddd890b81f1963808977d02198e8ae2e97419dbb1f8e51cad36a3424b955500fbdaab6ff8dbf028708b1f951fe43864b59b6c2368b816c98023d4480a91b3f1059e9c214bf55a7f8c7da907f79ff5568fd787d3aa022ab9d03cde551f7e3295f02c4f3aa37e4cebdd968c0f82f09eb004fbdb1a4ef3a0d426691bde3964c29ea65622f5d3ffd854053545ba1ec164495e4bef4845439c058f9438d13be7922b656db499c246ee6176a15b97e6a68e42f0c703033b699504e1f92b43054c7237199bd013d96faab47433b6b3f91dc66368706439d4ef7da3942ce8b9c1c9a9d0643fc4540e7d3f1c3821267e866cacd3e904be9f9df80381eec09eb2b0d745ff03ffb199b917a14fdd8fbfbffe8bfb0cf7023aa7183301a8a41e7097ff9f5247f8b78f7d08bbfc596a81047807cf0929677222e7e9e921b294e04088c3746d8dc19294645f1c093a21b4c5e6d92e54dd90465b11dd5d9d42af849070edff4ec63970f4088daaa33afdebb28d01df5ee043a8150ab1b25d864ef31e20c84696596cfbea92d02ea29c4a3933c41ec68aee7d68d7eea7f30d8920e14e62be42bcf856d7a58f46fdb2438b023e974f77281c5a462553627e9614504cbd3f1cae6e0fd9f7e89d9bce48946d0508616fbe542303dc542982c61d7bb4afbf3e76bf1fb2381cdc99f2175ef944dcd826aabdca2b7678db5262733c69ce504c38e7deb7adfb9b6d8bb00d8e4251e0438417ea615cde58bd76c2427b3d7a0578bbbff9fde2abbc5d60307aff0050b18176158aaedb34e283886378ff798b4f74e0a0c95d64271f1916280dd247304d9201c67f5e2640d9706add8703cac81795a0190107e2bb2941ed13738595da1c86ba0f68e2283a435cb5f162c74071a13dfe2266d05abaef080dd6b1dade115e883e04f0bb4be4d91f535ae6f822b02e814e65d2b7807d199a23d3f26209f6c9f93602a3a93ccfdebb5f8161b7928059674e15820d1848a980c8d1af5a73aadc5c402fbb6e730ba51227913ca27f0d78d331d6325d0a7926c238296b2a22b10a69cdffeb087dfe175511ed8e2cde8d7dae140e4ce92f892b129d9940e4a30b19f822ef7611b8750eaea8e55502604b7d2358c09a217af8be6c86d67cf6ff6130c971c9765d56631fe6224fbe1e833d497b534fbf6b030af93691f59295279aa1bdfb5d5d9d4668d5aea70e2b8fc117df0042e91c7e6225f27329727ed6e14a87c7943c040dfee4e5c06a20251c39a45ab4865951b0daefb9c05571fdcc21d1761945bd2b8047ccedd6f1e708646fbe61e75bb2728e8cee893d7e6f642119e786155a6cbab057d6d83b77716145119e974ad7355179d2adc3d748fa249cb58e32e6791d646240c05da4427b2f359976c8fd1486c604cb7ee647e24633d8fca8314cf1f85110ca6351156a2b26e44b040f7d2810acd36f45a3969c1fafd1a7e0bc14fd9b26593375be8e750c3f6534ffb85904d15d75fba05dac4a673de97f7543ee931724cd35474cd7ff5cf3e8abaf206f3030e92895633fa9d8499ea763601560260109dad18bd64b990531fc5377e6eaa5da050b98e1c6515ea48c7de1a15b63283d4a694cbad379356bfdac50e6c343879e29f6b9ab425600d51f257ceb35d0ca00f83cf5bd734223de716747614666ba1f1a8fa756e5f3ff0fc94fa4bd4073bddb0098cf565ee40af5732ee9218d262e5b64ad6b8118c54eeaf7072f2e15514a401779b425fa89d8abb1750e56cc3108dffdcf2d3fd86b8af4560d56f7ff0702154211f9949e3992d93e66892b297fa2d4bfe18de3fd74e96c9d30eb14fd458fdbc9e9a34e00f3280dd732520147fa2a8fa83e91dd0687501466a300015bf888c03fc08190c2753d7719acf6f84885c4c5642f466c1984f15a7716a9b608ee5f1b395726bcc8519766667d24d11e396e62ea39640c9e73e4e9e9e5076d7019ca1bebbd7097807f46b3b6fcb96ed4b433b25ec551fb176a5fa252ed1d81b0350cfdfb8069c9916495bef3a262b6668910896c0b37eee40547c663a901e92f41b417ac50e88d058d021a8f9a5783bd936cca4962bec1c9886689cc547970f9215232596392515182e563f720bb79d29baaabf0e2697de6500bc677e346847011ee3450358c0b16ca528368b5cbb8df5ab974a3cef072d20c9906fa585e0f3083ec6d8507b8561f64e65aa1aecf825fc47ad1459c87771549fd5c9a9cc094e7b1179ee1e90eff7158f28f59f029d90e708f4ec50b4f67d8b4bb7140065528354a7e25d63e92977183a0284ec22aa923210f0bfea89cca53547137381e5de0f60bc484bc2daf129b0380244f1ed4bfb674eb2791e76dce33cae684ad36620d5d67cb587f840caed316b7439b0e8c3de0e065e62680f3997369be3466670278168c9a1a644d870e3a8d0a79b2b720e8c3c51bb9133532beee64319e98714bb2e6d5c0b723962d923b0ef454361d4b3cb470bf8c39031ed4a75267f499741be15aacac92d8e6afdcb01a2e7d2dbf549ceb2a2108c4079c620f05ca1bd31d631c2c8d35ca0d73155f56ed020c25e389db356edf510ae088d11b5e4fed51d0dce4d3aa04924b09c28200ede5bec1a8f38cc5f081055e0f28d75afc4d588ca0e828d00085d150beafdda17b8df9e7d9218ea7d81f2e076412901c5ae04d6929d717fea2fcc8e5a1e69dbd7b5258799a2fa5eb108b6cc35dfab599fb27e6d75f1030b83f452af8137830337141f031942eba83123d3f87b5f01623d4613e5a44b4952c300baf3d4d3dbbfb0ad024a19b3810a174ef8453d85a25822f66e45eba2490f29de1077683ccc32e3517f88b51e010672a982f7c8591450c9ab1573143aefb61c17ebb0c92dcb0494d116b970c2a827a6b3608ae10d583d1f7d092263fa873de9f31cd59bc9491ff012059b63a9120af89477f2ccc34eee7bd66de60af64730c879128b49d31da6400c2471e0d5abf707e560574b477b8e20ca45d92182d639eb434e14aea1a3f91ad8fb60e4859b77389753990513181ea3a82884235e8520294359435cfba220502b591fc28ac36ec697442657d290bd7aad7fce53a3f1766f2bf7d55c24d7c0e9c7a71d6f1282ea1478e0a36378b50e4fee281f686bc53f50138036e2a5d6199d40caff084fde7b63b3c0a47da0791107c3218330f7c2e2c7609aba202fae5290243b6033379eb15edc572eee452008e04c9b53efd5f3d88327317b38934745bc3de4c55bd818febc7a7953bf03c4029f77177c2a974310f0485aa46252f1000dc71934947287c38ea5854f29c7b82f630afb8caf1fd880670307b155a6e7feddc019cfbbbdc18f3bc03da3bd371d93ccbf56bcb39eea55c2d113efc148127c30089d21ce6a5088dbfbcf8f8d75c19456bc962c371548634a95382acb5a0886efc46a87bdc111dc0d1e54084cea0d58054f00762c91d7fe0f0fbcf4c280f29f9cd5999a5e8c6f507f8080d7c7ea9a8685be50722cf1a082f3728dec8d6152cdc72f8da6b1805643c042f4f6780ba79cc8a2165d9d7acec8ab2f421bc3e77b51c62c4bbb262b5674ea7d2dcf9acb894d050e91b052364322a5b08bd9667249571c004fb495da7e24fc5620adda3af6848ccf238911a52bdbff766e4e279ac274afa2c2302faba25b5fe98d972a04aa13f77c0c05d7dd82b0a19f1ded8cf5f99c80e392b0aab1264a29e9fbcf0b69f6b0a9f2332e09ab74dea7277106d0883bb264e279c67e5bc69009225bf4fd1a8532f9392a011b55a73a7cf8d16a59d695b2a65b57fad64a2041f8c28804ee1a48845c5dab757d04f1d95520aa9ddb69904d6529c0e14bd789dfe37067073b3e0e136ae2aebb1c34c55b94ce942f786be4b45f801f35f7c768d91a460b92ffa57ff675f0b4b00437a07f871a8650f21b2bf7c722c1d9e860e8955fef5699ee53a5f6fe46fb9e5e17a1c69fe2538af4718b7215ad2c00c3d420589a8653ee511b809945451fb8205b19ce377c8d0253b05493c557cf2bd8ef208e8fc01beceea1acca38d025f328f28d69bcfaa3adc6d9573a3832dc3f3c758fe08cf9cd0c32acfddae81b3682869e8aa9725b64336252aeb2ee8eb78f0721aa3158217a3009948adb297c5ea45ec26cb6d963c7be47ee1b93fa136ebe73a21936df0148fa311206f8bca2e80719aeca8745ff74ddaad5182644762c66333f942d9a93c467d5f9fd5d0dbbe57480362d4bb0f760294f4eba3e1b08047d256dbda157635d21a43aff3a71f6ad574b402bb36e5270d7ed082c6fbae07771721513ae9ddb22d23b00733046c898ee6ac05ef8a51ce41919e1f241cb98e0592ace68214620ba1a748ef81131661f58f1635713ca2873e150a3e848c8d2ebd039769fda112b73050efa4d1c35dbb46ca5a7b7ccbed1dcded36af272f6838b4c1e7e6778e7e9ca3d794f275d49c9e32e768097349118d2337e7c031ada38d0cc5c04c286ff93083f6d58d73a821118c93432fda9a8c76fa2cbcc093a7decac8e4f001ecc9f67faf1c2f102120f0618469cf653bbd5fcefd4ef2bae86dc4f5393b840f9f47140cf7f46a186c21878a43612a71d3b540b9994f010ab623f878264cf46c7366d0bec5d43d481b47846091fd3cda73a9a28ceb7f839eca695c9f084a16c812475f6575ef2368c88cc6655f47663ef69ce4779fe3ccc4dd85a07a9e4c6f39f42690d231f5727f45c247a53fd8df029fcefda4f328658435892519c17205a3c715ad6bb7387d09a5e387c83f008daf626f5977c66203af1143ef7b59ccd8e3c17bb156bca317861f0b9f222ea63c044075a3a74beaf05c23d0a75caa60397d831bbe507234fff154960faf0f02776d3f9038c955bf0c1ec9c92523cf0b855c18d6ac3b35d437796420ba3dfd581dc6adac64315c1cb1a2c3a45ec4655bb2bd6e0b4a3082281ed0697a213d1d93142e96b4fd57431d2f4547451d008ab58bcd9765ccf3ca3297becd5de9e2be0263cfca09935c9334b5e687bc7e7057dc2ed03873be22200c9fe32a9497dd00a336cf4c723ead302340b5cd1fef8cd88330a9089fc93af4ef739295b94407b291bf33f4f39c936736e1166106428f8796a4b92805f4dfcf46d8692b54e40a9e8584c0eaac4caada87bb33f553eafeef5051b889402176ab766936a38ddd7e5205d2c87e133a02e84ab24ba2d889a4c4db8cbe18b271455e84da716f4a32acdbc0a5aaba25a2ec757c73847dd1c4ccb2967c651e5257692a4553dde227846bfe2977021805f46a287c835ea8dc5", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xfffffffe, 0x0, 0x0, 0xfffe, 0x6, 0xfffffffe, 0x0, 0x0, 0x100, 0xe8}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(0x3) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x2}) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x30) 11m16.202665342s ago: executing program 3 (id=636): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "41328ac33100", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89a06afff55f00fd"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x304}, '\t\x00', "9f1b21bfcdd63f97d0778b079513f25d", "27bbde0a", "bcc42c7cc2eb2a34"}, 0x28) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c000000100005ff00000000fcdbdf250000004a", @ANYRES32=0x0, @ANYBLOB="20000000080000001c0012800a00010069704fe0b8f509ebdd7d94d97583c3cc7b69620000000c00022b597e62cfe9c570641fcfc02f557e1ce503ed968d8208d1741b0f423292b173890b0c8e303fb931eebde493dd00eee0fab18512eae78b1181ee8a4edba895673b475d82a3df3b7803484422f06b002dfa5146fc6af3486ccf5df34fb10ad21d3bb28e9ac52797dfae0777b112d1f433922ecdf5be6659fb6dd201319a2eeef37eb3b246ac5ed31eac5a7a4ff162c41de4dedc9f26d7d27f209674e0f8cdc38cc40540dace4de8a519930d434ac71ced5002ee8eeb6a7cd62e83132777954285ef2ce42a99324c"], 0x3c}}, 0x4048015) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r7) sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x2c, r8, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x64000) 11m15.064069587s ago: executing program 3 (id=638): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x2a242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) read(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000440)={0x2, 0xfa}, 0x2) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'ovf\x00', 0x10, 0xfffffffd, 0x35}, 0x2c) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102394, 0xffffff43) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000000), 0x0, 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="69f709a600e8ffffffffffefff00", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syslog(0x2, 0xfffffffffffffffc, 0x3a) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000a00)) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[], 0x0) write$binfmt_script(r7, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 10m59.626498428s ago: executing program 32 (id=638): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x2a242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) read(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000440)={0x2, 0xfa}, 0x2) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'ovf\x00', 0x10, 0xfffffffd, 0x35}, 0x2c) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102394, 0xffffff43) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000000), 0x0, 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="69f709a600e8ffffffffffefff00", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syslog(0x2, 0xfffffffffffffffc, 0x3a) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000a00)) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[], 0x0) write$binfmt_script(r7, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 10.983261422s ago: executing program 0 (id=3090): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES8, @ANYRES32=r0, @ANYRES64=r0], 0x10}, 0x19}, 0x0) 10.854642347s ago: executing program 0 (id=3095): r0 = syz_open_dev$sndctrl(&(0x7f0000000400), 0x6, 0x40800) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000004c0)=0x6) r1 = syz_io_uring_setup(0x2368, &(0x7f0000000300)={0x0, 0xaee2, 0x0, 0x10000002, 0xbfdfffff}, &(0x7f0000000200), &(0x7f00000001c0)) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8982, &(0x7f0000000000)={0x7, 'vlan0\x00', {0xa}, 0x4}) r3 = syz_open_dev$usbfs(&(0x7f0000000380), 0x1, 0x400000) ioctl$USBDEVFS_FREE_STREAMS(r3, 0xc0105500, &(0x7f0000000000)=ANY=[]) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r4, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0x10000, 0x6, 0x2, 0x1], 0xc000, 0x18743}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000480)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f00000003c0)=0x1, 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xd0a00, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r6 = syz_io_uring_setup(0x1e7f, 0x0, &(0x7f0000000080), &(0x7f0000000180)) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r7, 0x65, 0x3, &(0x7f0000000000), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$can_raw(r7, &(0x7f00000003c0)={&(0x7f0000000280)={0x1d, r8}, 0x10, &(0x7f0000000380)={&(0x7f00000002c0)=@can={{0x3, 0x0, 0x1}, 0x4, 0x2, 0x0, 0x0, "e3997e3df56fe25b"}, 0x10}, 0x1, 0x0, 0x0, 0x20000004}, 0x40) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 9.63088694s ago: executing program 0 (id=3099): sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc1}, [@IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4604}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x12, 0x0, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) writev(r3, &(0x7f0000002100)=[{&(0x7f0000002080)='T01\n', 0x4}], 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3", 0xb6) sendto$inet(r4, 0x0, 0x0, 0x240240c5, &(0x7f0000000040)={0x2, 0x4e24, @private=0xa010101}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x2f) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa4000960) unshare(0x40000000) syz_open_dev$sndctrl(&(0x7f0000000040), 0x8, 0x200) setsockopt$MRT_PIM(r3, 0x0, 0xcf, &(0x7f00000001c0)=0x1, 0x4) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) futex(&(0x7f0000004000)=0x2, 0x8d, 0xfffffffd, 0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) 7.699024491s ago: executing program 4 (id=3105): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000700), 0x448d40, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x4, 0xff, 0x6}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x7}, 0x3, 0x8, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x104, 0x2, 0xc, 0xfff, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63c4, 0x0, 0x7ffd, 0x400, 0x255, 0x6, 0xc, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0xc, 0x200, 0xfffffffd, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x3, 0x80000001, 0x7c, 0xfffffffc, 0x5, 0x3, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0x400, 0x80, 0x90000010, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf6, 0x81, 0xfffffffa, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x5, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0xa, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x9, 0x3, 0x1, 0x80, 0x10008e, 0x80000005, 0xfffff76b, 0x0, 0x7, 0x4275c4e9, 0xb53, 0x5, 0x800, 0x4, 0x955, 0x5, 0x6cdf139e, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000001, 0xed2, 0x5, 0xfffffffa, 0x10002, 0x18d0, 0x0, 0x3, 0x9486, 0x80, 0x5, 0x80000000, 0xdb, 0x3, 0x80, 0xffbf7ffc, 0x5, 0x8, 0x7, 0x1, 0x2, 0x8008, 0x2, 0x8, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc1, 0x2, 0x40, 0x5, 0x27f, 0x200, 0x7, 0x40, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x104, 0x62cc, 0x2, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x7, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xfffffffb, 0x2, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff7, 0x81, 0x382ae49d, 0x9, 0xffffffff, 0xffdf, 0xdf3b, 0x8d, 0x6, 0xfffffef7, 0x89c3, 0x6319da67, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x77, 0x7, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0xfffffffd]}]}}]}, 0x45c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x7}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r4) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r5, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4000000) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000640)={0x5c, r5, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x5}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x8}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0xf9}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x3}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x7}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x5}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x4}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0xb}]}, 0x5c}}, 0x800) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) 7.234470585s ago: executing program 4 (id=3106): ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x9, 0xffffffffffffffff, 'id1\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='kfree\x00', r0}, 0x18) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timerfd_create(0x9, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000002ec0)=""/261, 0x105, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) syz_open_dev$vim2m(&(0x7f0000000100), 0x5, 0x2) r2 = syz_open_dev$usbfs(0x0, 0x77, 0x24040) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x3c, r5, 0x801, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) mmap(&(0x7f00002bf000/0x4000)=nil, 0x4000, 0x2, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000001880)={0x90000002}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x20) 6.820952354s ago: executing program 4 (id=3107): fanotify_init(0x4, 0x101000) socket$inet6(0xa, 0x80002, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x20000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) pipe2$watch_queue(&(0x7f0000001100), 0x80) pselect6(0x40, &(0x7f00000001c0)={0x5, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x3, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x1, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.414955143s ago: executing program 2 (id=3109): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@private2, 0x10200000, 0x0, 0x1, 0x9, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x10200000, 0x0, 0xff, 0xa, 0x3, 0x3}, 0x1f) 6.386132439s ago: executing program 2 (id=3110): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4605, &(0x7f0000000780)={0x0, 0x2000, 0x200000}) 6.348297589s ago: executing program 2 (id=3111): ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 6.305896134s ago: executing program 1 (id=3112): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000000)=0x400, 0x4) mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x300000b, 0x11, r4, 0x80000000) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) fchdir(r0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r6 = openat$cgroup_freezer_state(r0, &(0x7f00000002c0), 0x2, 0x0) sendfile(r6, r6, 0x0, 0x8000002) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000000900)={'syz_tun\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0x4) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) 5.809934385s ago: executing program 4 (id=3113): r0 = socket$igmp(0x2, 0x3, 0x2) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x40000000100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) r2 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) fcntl$setpipe(r5, 0x407, 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000080)='\x00', 0x0, r3) setsockopt$inet_tcp_int(r6, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) connect$inet(r7, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r6, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) splice(r6, 0x0, r5, 0x0, 0xfea8, 0xa) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$smc(&(0x7f00000033c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x34, r9, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'hsr0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x24040000}, 0x800) sendmsg$SMC_PNETID_FLUSH(r8, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x800) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000001c0)={0x0, 0x1, 0x6, 0x738, @vifc_lcl_ifindex, @empty}, 0x10) 5.322233358s ago: executing program 0 (id=3115): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f0000000000)=0xd51, 0xfffffffffffffd85) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) socket$tipc(0x1e, 0x2, 0x0) (async) socket$tipc(0x1e, 0x2, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) (async) bind$tipc(0xffffffffffffffff, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r4, 0x29, 0xb1, 0x0, &(0x7f0000000280)) (async) getsockopt$inet6_int(r4, 0x29, 0xb1, 0x0, &(0x7f0000000280)) socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x404) setresuid(0x0, 0x0, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) process_madvise(r6, 0x0, 0x0, 0x14, 0x0) (async) process_madvise(r6, 0x0, 0x0, 0x14, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x4008af83, &(0x7f00000001c0)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x4008af83, &(0x7f00000001c0)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.232372966s ago: executing program 4 (id=3116): ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 5.026230385s ago: executing program 0 (id=3117): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) creat(&(0x7f0000000040)='./file0\x00', 0x4b) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r1, &(0x7f0000000100)={{0x3, @null, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) connect$ax25(r1, &(0x7f0000000280)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x4}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) accept4$ax25(r1, 0x0, 0x0, 0x80000) 5.025386107s ago: executing program 2 (id=3118): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac4824362864", 0x1f}], 0x2}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xa8, 0x29, 0x4, {0x4, 0x11, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe}, @generic={0x80, 0xf, "09e12e5f0b6bdcf72f2ec7008a15fa"}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0xd, "e80ee304ecb784ec4655260cec"}]}}}, @hopopts={{0x110, 0x29, 0x36, {0x5e, 0x1e, '\x00', [@generic={0xff, 0x45, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70dac43574"}, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0x81, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc"}, @calipso={0x7, 0x8, {0x3, 0x0, 0x3, 0x7}}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}], 0x238}}], 0x1, 0x810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.777077392s ago: executing program 0 (id=3119): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x2c, r2, 0x1, 0x70bd24, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24014804}, 0x9590f6cc3aa711f2) (fail_nth: 7) 4.287293323s ago: executing program 2 (id=3121): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80002, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) timerfd_create(0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) prctl$PR_MCE_KILL(0x23, 0x9, 0x7fffffffeffe) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000005ac0), 0x32, 0x20008000) setsockopt$sock_int(r4, 0x1, 0x2a, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001140), 0x195, 0x10002, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) semget(0x3, 0x2, 0x39c) semget(0x3, 0x1, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="050004000000000000000600000008000300", @ANYRES32, @ANYBLOB="44000e008000000008"], 0x74}}, 0x240000c4) socket$key(0xf, 0x3, 0x2) socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r6}, 0x10) 4.170478606s ago: executing program 1 (id=3122): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x4, 0x17, 0x1, 0x7, 0x5, 0x0, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x9, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x1, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x7, 0x800003, 0x200, 0x400080, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0xfffffffe, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807fc, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x1ea, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0x1, 0x200, 0xb, 0xfff]}, 0x45c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x78, &(0x7f0000000600)=""/120}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2d8d}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20}, 0x94) socket(0x11, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x40000, &(0x7f0000000040)={[], [{@dont_appraise}], 0x3a}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) close(0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) getitimer(0x2, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000009000000000000000000000018110000", @ANYRES64], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) 3.63758978s ago: executing program 4 (id=3123): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0xf, 0x803, 0x9) r4 = syz_clone(0x60218000, 0x0, 0x0, &(0x7f0000001440), &(0x7f0000001480), &(0x7f00000014c0)) sched_setattr(r4, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x10008001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x3}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) setsockopt$inet_tcp_int(r3, 0x6, 0x8, &(0x7f0000000040)=0xf, 0x4) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) ioctl$SNDCTL_TMR_START(r5, 0x5402) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240), 0x2) r7 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%\x1f\xe09@:\x06\x00\xb9x0\aP\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5s\xa5\x00\x8d\xaeh\x17$\xd6\xacbQ=D\xda\xb6\xd6\xb8\xb6F\x1a\xc82\x8b\x8cl\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\xd8`Q\x9b2x\xec\x97\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xefg\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj\x00\x00\x00\x00\x00\x00\x00\xd2\xb9+\xdd\xbf\xef\xe0\xa5M\xcd\x06\xfe\x18\xf3\xed\xc6\xf5\xcc]`0\xa2\xcb1\x1d\xa9\xb1\xd9?\xa0\x9a\x7f\xe1\x1e/', 0x2) ftruncate(r7, 0x10000) fcntl$addseals(r7, 0x409, 0x7) r8 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000000)={r7, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f0000000440)=0x2) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000240)={'fscrypt:', @auto=[0x33, 0x62, 0x32, 0x35, 0x33, 0x36, 0x32, 0x38, 0x34, 0x61, 0x36, 0x65, 0x64, 0x37, 0x65, 0x64]}, &(0x7f0000000340)={0x0, "ccb9490a2b9cd16d4bb6b1878b185d761fe6ef51f2fd0b4230da9e08134e22912f729cdb1b6f015a62c8ed3d596854d654201d7909d8f3933c1e69c07d17b758", 0x1a}, 0x48, 0xfffffffffffffffa) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000", 0x17}], 0x1}, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000380)={0x12, 0x1, 0x1, "33c500100000130040fcd828a45b729f09085780ee0f00", 0x32525942}) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d10501200002000000010902120001000000000904"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.197495439s ago: executing program 2 (id=3124): openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/comedi0\x00', 0xa8802, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0xc0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_usb_connect(0x6, 0x0, 0x0, &(0x7f0000001b80)={0xa, &(0x7f0000001740)={0xa, 0x6, 0x310, 0x8, 0x8, 0x4, 0xff, 0xf}, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f00000018c0)=@lang_id={0x4, 0x3, 0x1c31}}, {0x2, &(0x7f00000004c0)=ANY=[@ANYBLOB="020b7f80c1bcac798c7bdf4619bb844963c80fd879654df5755d612aec3bae70672f5e835d7ab461887810257486de878080dfea46bd8f65783cc8b1f694cf4c495e6d02964128afec39f9bfcd337edba3613739e9464c636bbf75926d6db4c096b46db157415445a9fa1e8856a7b9e133125a30428ed4d762aea1e8d434195bbb31df47eac3b854ef22ac12e2390d52dd2d6845a8e382211fd46c987f46c030d280e3f2271be6374a8533e4c5dba2bb25eabb90e9cdd15153106ba340"]}, {0x1f, 0x0}]}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='=', @ANYRESHEX=r5, @ANYBLOB="606f3df44f7d75", @ANYRESOCT=r3, @ANYRESOCT=r4]) pselect6(0x40, &(0x7f0000000080)={0x0, 0x3, 0x0, 0xfffffffffffffffd, 0x8000, 0x6, 0x0, 0x817}, &(0x7f00000000c0)={0x1b, 0x0, 0xfffffffffffffffc, 0x5, 0xfffffffffffffff8, 0x0, 0x4000000000, 0x4}, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x5, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7ff], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x31]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x280000000000000}]}}]}, 0xb0}}, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'dt2815\x00', [0x4f27, 0x5, 0x6, 0x47, 0x2, 0xcc7, 0x1000, 0x7, 0x4, 0x3fd, 0x7, 0x15fe, 0xd73c0000, 0x3, 0x3, 0xe1cb, 0xff7fffc0, 0x0, 0x2f, 0x295, 0x80000089, 0xfffff7fc, 0x8, 0x406, 0xffffeadb, 0x3, 0x10039, 0x5, 0x2004, 0x2, 0x5]}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40081271, 0x0) 2.446381036s ago: executing program 1 (id=3125): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)="bae4e6c90e2c2528899c4dafaadec1", 0xf}, {&(0x7f0000000040)="863df703007092133340e45590eac45df1f0a54f338c0000000000", 0x1b}, {&(0x7f0000000900)="5e9a96da6c96c227926d725c264c8db1743e2a714194d97fd4a96b32f3a0cc57ff3d188ab8257403ab87aac73eb1db3cffb4c9b525154c45716736588985037d1390ae2dfd39d2cc24a7a4170eebea1d87b1321de2c2a9", 0x57}, {&(0x7f0000000a40)="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", 0x36a}, {&(0x7f00000003c0)="d114d0ad8f442071017384ca41dfad6d5c63fa52f6c1f545c5aaab8827efce16c330ea48c98ca5f64faf91ab9fc477804891d05356250fc9bc3b8a59600488085ff8ef672c1d85e588e1e9a75cee32f3e143ea7f4fd54f67c388cce95d5e7b2b205c044e4e244928e853ccc98478c3a7543e7e7460a2eb27ea4160c4a06b7acfab9d4c4dd3f17939f3604ab6a07f2018d7b3216a156c0c9632802cca821671430430630418aae244f9e4cbb1295a9e15804c29d4325b640588aa8db78f52b5a4e38edde2886b9c860badfd607d08003c55ecc2042d6aa01bf9", 0xd9}], 0x5}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="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", 0x17f}, {&(0x7f0000000e80)="b7fba17afc4f45ee0f038c68b3ae602a0f9c5f87cb71c869c6b0957d4add", 0x1e}], 0x2}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000007c0)="0d27dfb699d09669e4696688fb01a0a4f2b685b9805cc789e847745bae9b9cdd193de0687d09ae5417eab0830fb080220da204af9babed0f2af60617741b3b970fe6e48716e21090cd0bc481aa70949f2ddafe0d04eb1aa917bb38bfce3750871727e13abedb67a6c661ccbd68c6281245b37e21f867", 0x76}], 0x1, &(0x7f0000000fc0)=[@ip_retopts={{0xdc, 0x0, 0x7, {[@timestamp={0x44, 0x20, 0x58, 0x0, 0xb, [0x6, 0xe35f, 0x4, 0x4, 0x2594, 0x5, 0xa27a]}, @timestamp_addr={0x44, 0x24, 0x8, 0x1, 0xd, [{@empty, 0x2}, {@remote, 0xd}, {@broadcast, 0x400}, {@multicast2, 0x800}]}, @ssrr={0x89, 0x13, 0xb, [@dev={0xac, 0x14, 0x14, 0x31}, @multicast1, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4, 0x1}, @noop, @timestamp_prespec={0x44, 0x54, 0xf7, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@private=0xa010100, 0x7}, {@rand_addr=0x64010100}, {@rand_addr=0x64010102, 0xc0000000}, {@loopback, 0x3}, {@empty, 0x38e}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xf}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xf}, {@rand_addr=0x64010102, 0x1d}, {@broadcast, 0x6}]}, @generic={0x44, 0xf, "c43da344ac989289d40577e857"}, @ssrr={0x89, 0xb, 0xb7, [@private=0xa010101, @multicast1]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@lsrr={0x83, 0x17, 0x55, [@private=0xa010101, @private=0xa010101, @local, @multicast1, @remote]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xa}}, @ip_retopts={{0x48, 0x0, 0x7, {[@ssrr={0x89, 0x1f, 0x78, [@empty, @rand_addr=0x64010102, @empty, @empty, @multicast2, @multicast1, @rand_addr=0x64010101]}, @timestamp={0x44, 0x18, 0x69, 0x0, 0x6, [0x6, 0x0, 0x266e3f52, 0x5, 0x3]}]}}}], 0x1c8}}], 0x3, 0x4004004) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.376076515s ago: executing program 5 (id=3126): r0 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000000)={0x0, 0x2000000, 0x3014, 0x36e8, 0x5, 0x0, 0x4}) 2.073456635s ago: executing program 5 (id=3127): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x0, 0x1, 0x0, 0x1, 0x3}}) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) lsetxattr$security_ima(0x0, 0x0, 0x0, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594011d24fc60", 0x14}], 0x1}, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r7}, 0x10) r8 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[], [], 0x6b}}) 1.213840867s ago: executing program 1 (id=3128): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}) (async, rerun: 32) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) (async, rerun: 64) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (rerun: 64) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r4 = syz_io_uring_setup(0xbe0, &(0x7f0000000300)={0x0, 0xbf56, 0x20, 0x3, 0x40000330}, &(0x7f0000000000)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async, rerun: 64) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) (rerun: 64) io_uring_enter(r4, 0x47ba, 0x0, 0x28, 0x0, 0x0) utime(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x5, 0x8000}) (async) r7 = dup(r0) write$UHID_INPUT(r7, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) (async, rerun: 32) syz_usb_connect(0x1, 0x4a, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0], 0x0) (rerun: 32) 997.97719ms ago: executing program 5 (id=3129): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x1, [{0xfffffff9}]}}) 857.970657ms ago: executing program 1 (id=3130): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac4824362864", 0x1f}], 0x2}}], 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x108, 0x29, 0x4, {0x4, 0x1d, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x71, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888"}, @generic={0x80, 0xf, "09e12e5f0b6bdcf72f2ec7008a15fa"}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93}]}}}, @hopopts={{0x110, 0x29, 0x36, {0x5e, 0x1e, '\x00', [@generic={0xff, 0x45, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70dac43574"}, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0x81, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc"}, @calipso={0x7, 0x8, {0x3, 0x0, 0x3, 0x7}}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}], 0x278}}], 0x1, 0x810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 622.581958ms ago: executing program 5 (id=3131): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ptrace$getregset(0x4204, 0x0, 0x200, &(0x7f0000000000)={&(0x7f0000000080)=""/176, 0xb0}) socket(0x10, 0x3, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) io_uring_setup(0x6e9e, &(0x7f0000003180)={0x0, 0x1e3d, 0x1000, 0x0, 0xc3}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) 568.265358ms ago: executing program 1 (id=3132): keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/116, 0x74) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xa3) r3 = socket(0x15, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x86) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x16d) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x20400, 0x180) chown(&(0x7f0000000240)='./file0/file1\x00', 0x0, 0x0) lseek(r4, 0x3, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) ioctl$KDGKBTYPE(r4, 0x4b33, &(0x7f0000000280)) getsockopt(r3, 0x200000000114, 0x2710, 0x0, &(0x7f0000000000)) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000140)={'dt2814\x00', [0xb02f, 0x401, 0xe2, 0x3, 0x88d7, 0x80000001, 0x1007, 0x1, 0x1002, 0xffffffff, 0x200, 0x7, 0x10000007, 0x1, 0x5, 0x1ff, 0x8, 0x3, 0x9, 0x8e, 0x10c, 0x4005, 0x2, 0xa, 0x5, 0x1, 0xb0c4, 0xe, 0xff, 0x400002, 0x4000004]}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @empty}], 0xfffffffffffffdca) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f00000002c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000300)="b9f2f3a2a5eed5b2271ea17700ca07f73e52aa6d83ae0f704124c948ec5865094e48124d7f09b3c262be", 0x2a}], 0x1, 0x0, 0x0, 0x4008040}, 0x1) r7 = dup(r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x2000000, @empty, 0x80000001}}, 0x2400, 0x4002}, 0x90) 201.02157ms ago: executing program 5 (id=3133): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1000000000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, 'team0\x00'}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x432143, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x280, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x6) ioctl$PPPIOCBRIDGECHAN(r1, 0x40047435, &(0x7f0000000200)=0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe, 0x0, &(0x7f0000000d40)="3e7657b25ae01d038031b14d1db2", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$BLKIOOPT(r4, 0x1279, &(0x7f0000000080)) 0s ago: executing program 5 (id=3134): socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0xef) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000300)=0x40) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff00", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xf, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xb}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newtfilter={0x2c, 0x2c, 0xd27, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r7, {0xfff2}, {0xb, 0x6}, {0x4}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffc}]}, 0x2c}}, 0x58) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7e) creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): endpoint 0x84 has invalid wMaxPacketSize 0 [ 805.297209][T15200] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 805.335998][T15200] usb 6-1: language id specifier not provided by device, defaulting to English [ 805.355253][T15200] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 805.420142][T15200] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.498169][T15461] fuse: Unknown parameter 'group_id00000000000000000000' [ 807.003947][T15200] usb 6-1: config 0 descriptor?? [ 807.020842][T15200] hub 6-1:0.0: bad descriptor, ignoring hub [ 807.026772][T15200] hub 6-1:0.0: probe with driver hub failed with error -5 [ 807.036949][T15200] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input38 [ 807.055543][T15464] program syz.2.2628 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 807.241481][T15200] usb 6-1: USB disconnect, device number 58 [ 807.612531][ T30] audit: type=1326 audit(6061798453.386:3764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15470 comm="syz.1.2632" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe99d78f749 code=0x0 [ 808.456228][ T30] audit: type=1326 audit(6061798454.172:3765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15470 comm="syz.1.2632" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe99d78f749 code=0x0 [ 809.107943][T15489] FAULT_INJECTION: forcing a failure. [ 809.107943][T15489] name failslab, interval 1, probability 0, space 0, times 0 [ 809.125440][T15489] CPU: 0 UID: 0 PID: 15489 Comm: syz.5.2637 Tainted: G L syzkaller #0 PREEMPT(full) [ 809.125462][T15489] Tainted: [L]=SOFTLOCKUP [ 809.125467][T15489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 809.125474][T15489] Call Trace: [ 809.125479][T15489] [ 809.125484][T15489] dump_stack_lvl+0x16c/0x1f0 [ 809.125503][T15489] should_fail_ex+0x512/0x640 [ 809.125522][T15489] ? __kmalloc_cache_noprof+0x5f/0x800 [ 809.125542][T15489] should_failslab+0xc2/0x120 [ 809.125558][T15489] __kmalloc_cache_noprof+0x80/0x800 [ 809.125576][T15489] ? comedi_buf_map_put.part.0+0x2c3/0x620 [ 809.125595][T15489] ? comedi_buf_alloc+0x24e/0x9d0 [ 809.125607][T15489] ? comedi_buf_alloc+0x24e/0x9d0 [ 809.125617][T15489] comedi_buf_alloc+0x24e/0x9d0 [ 809.125632][T15489] resize_async_buffer+0x132/0x3f0 [ 809.125646][T15489] comedi_unlocked_ioctl+0x25bb/0x2eb0 [ 809.125665][T15489] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 809.125684][T15489] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 809.125698][T15489] ? do_vfs_ioctl+0x128/0x14f0 [ 809.125713][T15489] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 809.125734][T15489] ? hook_file_ioctl_common+0x144/0x410 [ 809.125756][T15489] ? selinux_file_ioctl+0x180/0x270 [ 809.125770][T15489] ? selinux_file_ioctl+0xb4/0x270 [ 809.125785][T15489] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 809.125801][T15489] __x64_sys_ioctl+0x18e/0x210 [ 809.125816][T15489] do_syscall_64+0xcd/0xf80 [ 809.125832][T15489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.125845][T15489] RIP: 0033:0x7f31f478f749 [ 809.125854][T15489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 809.125865][T15489] RSP: 002b:00007f31f55ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 809.125877][T15489] RAX: ffffffffffffffda RBX: 00007f31f49e5fa0 RCX: 00007f31f478f749 [ 809.125884][T15489] RDX: 0000200000000040 RSI: 000000008020640d RDI: 0000000000000003 [ 809.125891][T15489] RBP: 00007f31f55ef090 R08: 0000000000000000 R09: 0000000000000000 [ 809.125897][T15489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 809.125904][T15489] R13: 00007f31f49e6038 R14: 00007f31f49e5fa0 R15: 00007ffcfbed77a8 [ 809.125919][T15489] [ 809.675002][T15491] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 809.681536][T15491] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 809.767155][T15492] vhci_hcd: connection closed [ 809.769686][T15491] vhci_hcd vhci_hcd.0: Device attached [ 809.813943][ T2965] vhci_hcd vhci_hcd.4: stop threads [ 809.819985][ T30] audit: type=1326 audit(6061798455.435:3766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15483 comm="syz.2.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc5dbd865e7 code=0x7ffc0000 [ 809.865080][ T2965] vhci_hcd vhci_hcd.4: release socket [ 809.906536][ T2965] vhci_hcd vhci_hcd.4: disconnect device [ 810.042032][ T30] audit: type=1326 audit(6061798455.444:3767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15483 comm="syz.2.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc5dbd2b829 code=0x7ffc0000 [ 810.153676][ T30] audit: type=1326 audit(6061798455.444:3768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15483 comm="syz.2.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc5dbd865e7 code=0x7ffc0000 [ 810.290400][ T30] audit: type=1326 audit(6061798455.444:3769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15483 comm="syz.2.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc5dbd2b829 code=0x7ffc0000 [ 810.389965][ T30] audit: type=1326 audit(6061798455.444:3770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15483 comm="syz.2.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5dbd8f749 code=0x7ffc0000 [ 810.479703][ T30] audit: type=1326 audit(6061798455.444:3771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15483 comm="syz.2.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5dbd8f749 code=0x7ffc0000 [ 810.565399][ T30] audit: type=1326 audit(6061798455.444:3772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15483 comm="syz.2.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc5dbd865e7 code=0x7ffc0000 [ 810.598328][ T30] audit: type=1326 audit(6061798455.444:3773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15483 comm="syz.2.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc5dbd2b829 code=0x7ffc0000 [ 810.698034][ T30] audit: type=1326 audit(6061798455.444:3774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15483 comm="syz.2.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5dbd8f749 code=0x7ffc0000 [ 810.793957][ T30] audit: type=1326 audit(6061798455.453:3775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15483 comm="syz.2.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc5dbd865e7 code=0x7ffc0000 [ 810.971170][T15510] fuse: Bad value for 'user_id' [ 810.976169][T15510] fuse: Bad value for 'user_id' [ 811.767787][T15517] netlink: 512 bytes leftover after parsing attributes in process `syz.5.2645'. [ 811.966744][T15518] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2645'. [ 812.511916][T15528] program syz.4.2646 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 812.533912][T15200] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 812.747329][T15200] usb 6-1: device descriptor read/64, error -71 [ 813.014425][T15200] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 813.313594][T15200] usb 6-1: device descriptor read/64, error -71 [ 813.433680][T15200] usb usb6-port1: attempt power cycle [ 813.473962][ T5929] usb 3-1: new low-speed USB device number 84 using dummy_hcd [ 813.645026][T12119] usb 1-1: new full-speed USB device number 88 using dummy_hcd [ 813.741221][ T5929] usb 3-1: device descriptor read/64, error -71 [ 813.794693][T15200] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 813.829210][T15200] usb 6-1: device descriptor read/8, error -71 [ 813.840534][T12119] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 813.868738][T12119] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 813.893677][T12119] usb 1-1: config 0 interface 0 has no altsetting 0 [ 813.903370][T12119] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 813.917247][T12119] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.926484][T12119] usb 1-1: Product: syz [ 813.942120][T12119] usb 1-1: Manufacturer: syz [ 813.950213][T12119] usb 1-1: SerialNumber: syz [ 813.968411][T12119] usb 1-1: config 0 descriptor?? [ 814.008489][ T5929] usb 3-1: new low-speed USB device number 85 using dummy_hcd [ 814.094035][T15200] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 814.126840][T15200] usb 6-1: device descriptor read/8, error -71 [ 814.158165][ T5929] usb 3-1: device descriptor read/64, error -71 [ 814.199296][T12119] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 814.211374][T12119] imon 1-1:0.0: unable to initialize intf0, err -90 [ 814.228149][T12119] imon:imon_probe: failed to initialize context! [ 814.234589][T12119] imon 1-1:0.0: unable to register, err -19 [ 814.249041][T12119] usb 1-1: USB disconnect, device number 88 [ 814.255334][T15200] usb usb6-port1: unable to enumerate USB device [ 814.275920][ T5929] usb usb3-port1: attempt power cycle [ 814.639304][ T5929] usb 3-1: new low-speed USB device number 86 using dummy_hcd [ 814.661656][ T5929] usb 3-1: device descriptor read/8, error -71 [ 814.918225][ T5929] usb 3-1: new low-speed USB device number 87 using dummy_hcd [ 814.950019][ T5929] usb 3-1: device descriptor read/8, error -71 [ 815.110166][T15559] smc: net device hsr0 applied user defined pnetid SYZ2 [ 815.137330][ T5929] usb usb3-port1: unable to enumerate USB device [ 815.155813][T15559] smc: net device hsr0 erased user defined pnetid SYZ2 [ 815.469834][T15565] program syz.5.2660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 815.621911][T12119] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 815.792487][T15572] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2662'. [ 815.801944][T12119] usb 2-1: Using ep0 maxpacket: 16 [ 815.808877][T12119] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 815.819628][T12119] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 815.834810][T12119] usb 2-1: config 0 interface 0 has no altsetting 0 [ 815.841487][T12119] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 815.851208][T12119] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.861789][T12119] usb 2-1: config 0 descriptor?? [ 815.869225][T12119] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 816.061159][ T5929] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 816.221447][ T5929] usb 3-1: Using ep0 maxpacket: 32 [ 816.228014][ T5929] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 816.236687][ T5929] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 816.257514][ T5929] usb 3-1: config 0 has no interface number 0 [ 816.264618][ T5929] usb 3-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 816.275121][ T5929] usb 3-1: config 0 interface 133 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 816.285112][ T5929] usb 3-1: config 0 interface 133 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 816.311050][ T5929] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 816.328364][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.343423][ T5929] usb 3-1: Product: syz [ 816.350373][ T5929] usb 3-1: Manufacturer: syz [ 816.358719][ T5929] usb 3-1: SerialNumber: syz [ 816.370280][ T5929] usb 3-1: config 0 descriptor?? [ 816.380259][T15572] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 816.463994][T15578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 816.472934][T15578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 817.190479][ T5929] usb 3-1: probing VID:PID(0424:012C) [ 817.192352][ T5929] usb 3-1: vub300 testing BULK OUT EndPoint(0) 0B [ 817.192373][ T5929] usb 3-1: vub300 testing UNKNOWN EndPoint(1) 0F [ 817.193010][ T5929] usb 3-1: vub300 ignoring EndPoint(1) 0F [ 817.193030][ T5929] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 817.193094][ T5929] vub300 3-1:0.133: probe with driver vub300 failed with error -22 [ 817.202811][ T5929] usb 3-1: USB disconnect, device number 88 [ 817.251318][T15588] 9p: Bad value for 'rfdno' [ 817.356202][T15590] binder: 15589:15590 ioctl c0306201 200000000640 returned -22 [ 817.369226][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 817.369241][ T30] audit: type=1326 audit(6061798462.516:3818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15589 comm="syz.5.2666" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f31f478f749 code=0x0 [ 817.455917][T15594] adf_ctl_ioctl: 16 callbacks suppressed [ 817.455929][T15594] QAT: Invalid ioctl 1075883590 [ 817.469801][T15594] QAT: Invalid ioctl 1075883590 [ 817.480607][T15594] QAT: Invalid ioctl 1075883590 [ 817.491375][T15594] QAT: Invalid ioctl 1075883590 [ 817.499021][T15594] QAT: Invalid ioctl 1075883590 [ 817.509860][T15594] QAT: Invalid ioctl 1075883590 [ 817.514738][T15594] QAT: Invalid ioctl 1075883590 [ 817.522356][T15594] QAT: Invalid ioctl 1075883590 [ 817.541773][T15594] QAT: Invalid ioctl 1075883590 [ 817.552281][T15594] QAT: Invalid ioctl 1075883590 [ 817.603396][T15597] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 817.621129][T15597] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 817.632346][T15597] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 817.645982][T15597] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 817.757261][ T30] audit: type=1326 audit(6061798462.871:3819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15602 comm="syz.5.2672" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f31f478f749 code=0x0 [ 817.879790][T15608] program syz.2.2673 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 818.128254][T15610] wireguard0: entered promiscuous mode [ 818.501434][ T8078] usb 2-1: USB disconnect, device number 95 [ 818.730737][T15623] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2678'. [ 818.962142][ T30] audit: type=1326 audit(6061798464.003:3820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15631 comm="syz.5.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f478f749 code=0x7ffc0000 [ 818.996538][ T30] audit: type=1326 audit(6061798464.031:3821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15631 comm="syz.5.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f31f47865e7 code=0x7ffc0000 [ 819.022489][ T30] audit: type=1326 audit(6061798464.031:3822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15631 comm="syz.5.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f31f472b829 code=0x7ffc0000 [ 819.052559][ T30] audit: type=1326 audit(6061798464.031:3823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15631 comm="syz.5.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31f478f749 code=0x7ffc0000 [ 819.093212][ T30] audit: type=1326 audit(6061798464.031:3824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15631 comm="syz.5.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f478f749 code=0x7ffc0000 [ 819.207522][ T30] audit: type=1326 audit(6061798464.031:3825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15631 comm="syz.5.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f478f749 code=0x7ffc0000 [ 819.232894][ T30] audit: type=1326 audit(6061798464.031:3826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15631 comm="syz.5.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f31f47865e7 code=0x7ffc0000 [ 819.274087][ T30] audit: type=1326 audit(6061798464.031:3827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15631 comm="syz.5.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f31f472b829 code=0x7ffc0000 [ 819.602651][T15641] program syz.1.2684 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 820.202059][ T5929] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 820.209062][T12119] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 820.330751][ T8077] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 820.455992][ T5929] usb 5-1: Using ep0 maxpacket: 16 [ 820.462845][ T5929] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 820.482600][T15652] binder: 15651:15652 unknown command 0 [ 820.490256][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.502651][T15652] binder: 15651:15652 ioctl c0306201 200000000080 returned -22 [ 820.517381][ T5929] usb 5-1: config 0 descriptor?? [ 820.517391][T12119] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 820.598115][ T5929] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 820.604649][ T8077] usb 2-1: Using ep0 maxpacket: 16 [ 820.610852][T12119] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.621606][T12119] usb 3-1: Product: syz [ 820.625873][ T8077] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 820.636065][ T8077] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 820.649634][T12119] usb 3-1: Manufacturer: syz [ 820.654229][T12119] usb 3-1: SerialNumber: syz [ 820.660572][T12119] usb 3-1: config 0 descriptor?? [ 820.678893][ T8077] usb 2-1: config 0 interface 0 has no altsetting 0 [ 820.689010][ T8077] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 820.703100][ T8077] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.866373][ T8077] usb 2-1: config 0 descriptor?? [ 820.879583][ T8077] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 820.896208][T12119] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 822.367412][T15671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 822.376205][T15671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 822.988874][ T8077] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 823.174523][T12119] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 823.186083][T12119] usb 3-1: USB disconnect, device number 89 [ 823.259478][ T5929] usb 5-1: Detected FT232A [ 823.267287][ T5929] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 823.278804][ T5929] usb 5-1: USB disconnect, device number 20 [ 823.287431][ T5929] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 823.297129][ T5929] ftdi_sio 5-1:0.0: device disconnected [ 823.345202][ T8077] usb 1-1: config 0 has an invalid interface number: 244 but max is 0 [ 823.357149][ T8077] usb 1-1: config 0 has no interface number 0 [ 823.381834][T15682] program syz.4.2696 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 823.498806][ T8077] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=ff.d1 [ 823.512609][ T8077] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.523769][ T8077] usb 1-1: Product: syz [ 823.528007][ T8077] usb 1-1: Manufacturer: syz [ 823.681218][T15200] usb 2-1: USB disconnect, device number 96 [ 823.682817][ T8077] usb 1-1: SerialNumber: syz [ 823.694550][ T8077] usb 1-1: config 0 descriptor?? [ 823.702695][ T8077] usb_ehset_test 1-1:0.244: probe with driver usb_ehset_test failed with error -32 [ 823.728415][ T30] kauditd_printk_skb: 159 callbacks suppressed [ 823.728431][ T30] audit: type=1400 audit(6061798468.465:3987): avc: denied { bind } for pid=15684 comm="syz.5.2697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 823.928948][ T8078] usb 1-1: USB disconnect, device number 89 [ 824.025804][ T8077] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 824.057719][T12119] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 824.164567][ T8077] usb 6-1: device descriptor read/64, error -71 [ 824.218005][T12119] usb 5-1: Using ep0 maxpacket: 8 [ 824.218406][T15200] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 824.224491][T12119] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 824.238798][T12119] usb 5-1: config 0 has no interface number 0 [ 824.244962][T12119] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 824.255894][T12119] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 824.268853][T12119] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 824.279887][T12119] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 824.300214][T12119] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 824.303811][ T5929] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 824.309287][T12119] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.309310][T12119] usb 5-1: Product: syz [ 824.309324][T12119] usb 5-1: Manufacturer: syz [ 824.309339][T12119] usb 5-1: SerialNumber: syz [ 824.311120][T12119] usb 5-1: config 0 descriptor?? [ 824.401034][T15200] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 824.411258][T15200] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 824.420287][T15200] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.430374][T15200] usb 2-1: config 0 descriptor?? [ 824.437584][T15200] pwc: Askey VC010 type 2 USB webcam detected. [ 824.453255][ T8077] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 824.474651][ T5929] usb 3-1: Using ep0 maxpacket: 8 [ 824.481115][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 824.492225][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 824.502684][ T5929] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 824.512503][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 824.522928][ T5929] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 824.534107][ T5929] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 824.543239][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.556132][ T5929] usb 3-1: config 0 descriptor?? [ 824.577830][ T5830] Bluetooth: hci2: urb ffff88801fb95900 submission failed (90) [ 824.779655][ T8077] usb 6-1: device descriptor read/64, error -71 [ 824.849200][T15694] hfs: can't find a HFS filesystem on dev nullb0 [ 825.228981][ T8077] usb usb6-port1: attempt power cycle [ 825.849935][T15200] pwc: recv_control_msg error -32 req 02 val 2b00 [ 825.859582][T12119] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 825.886753][T12119] usb 5-1: USB disconnect, device number 21 [ 826.072010][T15200] pwc: recv_control_msg error -32 req 02 val 2c00 [ 826.080088][T15200] pwc: recv_control_msg error -32 req 04 val 1000 [ 826.087426][T15200] pwc: recv_control_msg error -32 req 04 val 1300 [ 826.094591][T15200] pwc: recv_control_msg error -32 req 04 val 1400 [ 826.101576][T15200] pwc: recv_control_msg error -32 req 02 val 2000 [ 826.108461][T15200] pwc: recv_control_msg error -32 req 02 val 2100 [ 826.115485][T15200] pwc: recv_control_msg error -32 req 04 val 1500 [ 826.122360][T15200] pwc: recv_control_msg error -32 req 02 val 2500 [ 826.129217][T15200] pwc: recv_control_msg error -32 req 02 val 2400 [ 826.139460][T15200] pwc: recv_control_msg error -32 req 02 val 2600 [ 826.146440][T15200] pwc: recv_control_msg error -32 req 02 val 2900 [ 826.153262][T15200] pwc: recv_control_msg error -32 req 02 val 2800 [ 826.160163][T15200] pwc: recv_control_msg error -32 req 04 val 1100 [ 826.167056][T15200] pwc: recv_control_msg error -32 req 04 val 1200 [ 826.175375][T15200] pwc: Registered as video103. [ 826.181334][T15200] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input39 [ 826.238572][ T8077] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 826.303134][ T8077] usb 6-1: device descriptor read/8, error -71 [ 826.570215][ T8077] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 826.579178][T15706] binder: 15686:15706 ioctl c0306201 200000000040 returned -22 [ 826.602447][ T8077] usb 6-1: device descriptor read/8, error -71 [ 826.719932][ T8077] usb usb6-port1: unable to enumerate USB device [ 826.922752][ T8077] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 827.636203][T15200] usb 3-1: USB disconnect, device number 90 [ 827.676694][ T8077] usb 5-1: Using ep0 maxpacket: 16 [ 827.717585][ T8077] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 827.728558][ T8077] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 827.744894][ T8077] usb 5-1: config 0 interface 0 has no altsetting 0 [ 827.751610][ T8077] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 827.752697][T15721] program syz.2.2710 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 827.760894][ T8077] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.981444][ T8077] usb 5-1: config 0 descriptor?? [ 827.989267][T12119] usb 2-1: USB disconnect, device number 97 [ 827.998251][T15724] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15724 comm=syz.0.2711 [ 828.760896][ T8077] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 829.654971][T15736] smc: net device hsr0 applied user defined pnetid SYZ2 [ 829.686295][T15735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 829.695023][T15735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 829.740524][T15736] smc: net device hsr0 erased user defined pnetid SYZ2 [ 831.087803][ T5929] usb 5-1: USB disconnect, device number 22 [ 831.925185][T15200] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 832.422345][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 832.642417][T15200] usb 2-1: Using ep0 maxpacket: 8 [ 832.663787][T15200] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 832.701252][T15200] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 832.714738][T15200] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.727732][T15200] usb 2-1: Product: syz [ 832.731903][T15200] usb 2-1: Manufacturer: syz [ 832.745939][T15200] usb 2-1: SerialNumber: syz [ 832.752751][T15200] usb 2-1: config 0 descriptor?? [ 832.762865][T15200] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 832.769040][T15200] usb 2-1: selecting invalid altsetting 1 [ 832.977226][T15767] netlink: 'syz.1.2724': attribute type 10 has an invalid length. [ 833.046399][T15789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 833.056561][T15789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 833.102074][T15200] gspca_stk014: reg_r err -71 [ 833.107607][T15200] stk014 2-1:0.0: probe with driver stk014 failed with error -71 [ 833.118441][T15200] usb 2-1: USB disconnect, device number 98 [ 833.853189][T15814] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 833.864616][T15814] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 833.874309][T15814] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 833.882077][T15814] UDF-fs: Scanning with blocksize 512 failed [ 833.896873][T15814] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 833.907187][T15814] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 833.916874][T15814] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 833.924566][T15814] UDF-fs: Scanning with blocksize 1024 failed [ 833.934481][T15814] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 833.944685][T15814] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 833.955577][T15814] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 833.963354][T15814] UDF-fs: Scanning with blocksize 2048 failed [ 833.971043][T15814] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 833.990813][T15814] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 834.000518][T15814] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 834.008215][T15814] UDF-fs: Scanning with blocksize 4096 failed [ 834.014496][T15814] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1) [ 834.081900][ T30] audit: type=1400 audit(6061798478.146:3988): avc: denied { recv } for pid=15811 comm="syz.5.2738" saddr=10.128.0.169 src=30006 daddr=10.128.0.232 dest=40198 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 834.545644][T15829] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 834.646344][T15833] fuse: Bad value for 'fd' [ 836.054979][T15838] mkiss: ax0: crc mode is auto. [ 836.076567][ T30] audit: type=1400 audit(6061798479.998:3989): avc: denied { sys_module } for pid=15839 comm="syz.1.2748" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 836.078603][T15838] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2746'. [ 836.636710][T15858] syz_tun: entered allmulticast mode [ 836.648826][T15858] syz_tun: left allmulticast mode [ 836.788219][ T30] audit: type=1326 audit(6061798480.672:3990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15866 comm="syz.0.2753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c5f98f749 code=0x7ffc0000 [ 836.831161][ T30] audit: type=1326 audit(6061798480.672:3991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15866 comm="syz.0.2753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c5f98f749 code=0x7ffc0000 [ 836.859456][ T30] audit: type=1326 audit(6061798480.672:3992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15866 comm="syz.0.2753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c5f98f749 code=0x7ffc0000 [ 836.884418][ T30] audit: type=1326 audit(6061798480.672:3993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15866 comm="syz.0.2753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9c5f98f749 code=0x7ffc0000 [ 836.911669][ T30] audit: type=1326 audit(6061798480.672:3994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15866 comm="syz.0.2753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c5f98f749 code=0x7ffc0000 [ 836.919833][ T5929] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 836.938279][ T30] audit: type=1326 audit(6061798480.672:3995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15866 comm="syz.0.2753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c5f98f749 code=0x7ffc0000 [ 836.977697][ T30] audit: type=1326 audit(6061798480.672:3996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15866 comm="syz.0.2753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c5f98f749 code=0x7ffc0000 [ 837.001974][T12119] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 837.010678][ T30] audit: type=1326 audit(6061798480.672:3997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15866 comm="syz.0.2753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f9c5f98f749 code=0x7ffc0000 [ 838.151300][T12119] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 838.163242][T12119] usb 5-1: config 0 has no interface number 0 [ 838.177607][T12119] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 838.191524][ T5929] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 838.201334][T12119] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.211076][ T5929] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 838.227004][ T5929] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 838.277406][ T5929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.288320][T12119] usb 5-1: Product: syz [ 838.292782][T15857] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 838.319187][T12119] usb 5-1: Manufacturer: syz [ 838.323811][T12119] usb 5-1: SerialNumber: syz [ 838.355176][T12119] usb 5-1: config 0 descriptor?? [ 838.356013][ T5929] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 838.806661][T12119] peak_usb 5-1:0.29 can0: unable to request usb[type=0 value=1] err=-32 [ 838.831874][T12119] peak_usb 5-1:0.29: unable to read PCAN-USB X6 firmware info (err -32) [ 838.886334][T15857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.898219][T12119] peak_usb 5-1:0.29: probe with driver peak_usb failed with error -32 [ 838.914882][T15857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 839.103398][T15897] smc: net device hsr0 applied user defined pnetid SYZ2 [ 839.115235][T15897] smc: net device hsr0 erased user defined pnetid SYZ2 [ 839.539411][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 839.539426][ T30] audit: type=1400 audit(6061798483.254:4021): avc: denied { getopt } for pid=15898 comm="syz.1.2762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 839.928706][T12119] usb 5-1: USB disconnect, device number 23 [ 840.157620][ T49] usb 6-1: USB disconnect, device number 67 [ 840.767586][T15922] program syz.5.2768 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 841.080448][T15927] PKCS7: Unknown OID: [4] (bad) [ 841.085330][T15927] PKCS7: Only support pkcs7_signedData type [ 841.439115][T15931] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.909571][T15931] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.407735][T15931] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.592949][T15953] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 842.603005][T15953] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 842.616223][T15953] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 842.625780][T15953] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 842.752721][ T5830] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 842.793704][T12119] usb 1-1: new full-speed USB device number 90 using dummy_hcd [ 844.153812][T12119] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 844.179908][T12119] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.187932][T12119] usb 1-1: Product: syz [ 844.202179][ T49] usb 3-1: new full-speed USB device number 91 using dummy_hcd [ 844.213948][ T3874] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.222343][T12119] usb 1-1: Manufacturer: syz [ 844.222364][T12119] usb 1-1: SerialNumber: syz [ 844.235901][T12119] usb 1-1: config 0 descriptor?? [ 844.271079][ T6037] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.294003][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.313520][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.412399][ T49] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 844.640202][ T49] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 844.654004][T12119] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 844.690548][ T49] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 844.709199][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.739249][T15965] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 844.905292][ T5830] Bluetooth: hci4: command 0x0406 tx timeout [ 844.956172][ T49] usb 3-1: usb_control_msg returned -32 [ 844.968921][ T49] usbtmc 3-1:16.0: can't read capabilities [ 846.325749][ T49] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 847.563588][T12119] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 847.630470][ T49] usb 5-1: Using ep0 maxpacket: 16 [ 847.771045][T15999] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 847.810695][T15999] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 847.932250][T15999] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 847.990303][T15999] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 847.992218][T12119] usb 1-1: USB disconnect, device number 90 [ 848.022262][ T49] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 848.022290][ T49] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.053479][ T791] usb 3-1: USB disconnect, device number 91 [ 848.060342][ T49] usb 5-1: config 0 descriptor?? [ 848.087888][ T49] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 849.311507][ T30] audit: type=1400 audit(6061798492.364:4022): avc: denied { accept } for pid=16005 comm="syz.5.2793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 850.307502][ T791] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 850.499986][ T30] audit: type=1326 audit(6061798493.496:4023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16003 comm="syz.0.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c5f98f749 code=0x7ffc0000 [ 850.590150][ T30] audit: type=1326 audit(6061798493.496:4024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16003 comm="syz.0.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c5f98f749 code=0x7ffc0000 [ 850.616027][ T30] audit: type=1326 audit(6061798493.580:4025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16003 comm="syz.0.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c5f98f749 code=0x7ffc0000 [ 850.647674][ T49] usb 5-1: Detected FT232A [ 850.746647][ T791] usb 3-1: Using ep0 maxpacket: 16 [ 850.774536][ T49] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 850.810156][ T30] audit: type=1326 audit(6061798493.580:4026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16003 comm="syz.0.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9c5f9865e7 code=0x7ffc0000 [ 850.834275][ T30] audit: type=1326 audit(6061798493.580:4027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16003 comm="syz.0.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9c5f92b829 code=0x7ffc0000 [ 850.858212][ T30] audit: type=1326 audit(6061798493.580:4028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16003 comm="syz.0.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c5f98f749 code=0x7ffc0000 [ 850.937347][ T791] usb 3-1: config 0 has no interfaces? [ 850.943666][ T791] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 850.977499][ T791] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 851.000619][ T30] audit: type=1326 audit(6061798493.580:4029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16003 comm="syz.0.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c5f98f749 code=0x7ffc0000 [ 851.017000][ T791] usb 3-1: Manufacturer: syz [ 851.274845][ T49] usb 5-1: USB disconnect, device number 24 [ 851.285974][ T49] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 851.436460][ T49] ftdi_sio 5-1:0.0: device disconnected [ 851.436924][ T791] usb 3-1: config 0 descriptor?? [ 851.480426][ T30] audit: type=1326 audit(6061798493.608:4030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16003 comm="syz.0.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9c5f9865e7 code=0x7ffc0000 [ 852.040131][ T791] usb 3-1: can't set config #0, error -71 [ 852.082608][ T791] usb 3-1: USB disconnect, device number 92 [ 852.106586][ T30] audit: type=1326 audit(6061798493.608:4031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16003 comm="syz.0.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9c5f92b829 code=0x7ffc0000 [ 853.553055][ T791] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 853.748214][ T791] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 854.607182][ T791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.615838][ T791] usb 3-1: Product: syz [ 854.619993][ T791] usb 3-1: Manufacturer: syz [ 854.624580][ T791] usb 3-1: SerialNumber: syz [ 854.632946][ T791] usb 3-1: config 0 descriptor?? [ 855.234990][T16056] netlink: 'syz.4.2807': attribute type 4 has an invalid length. [ 855.394687][T16059] netlink: 'syz.4.2807': attribute type 17 has an invalid length. [ 855.739294][T16055] xt_CT: You must specify a L4 protocol and not use inversions on it [ 855.768324][ T791] dvb_usb_rtl28xxu 3-1:0.0: chip type detection failed -110 [ 855.775777][ T791] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 855.887946][ T89] usb 3-1: USB disconnect, device number 93 [ 856.255002][T16062] program syz.2.2809 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 856.760541][ T791] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 856.931412][ T791] usb 6-1: Using ep0 maxpacket: 16 [ 856.945515][ T791] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 856.972718][ T791] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 856.996236][ T791] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 857.016398][ T791] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 857.047359][ T791] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 857.094731][ T791] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 857.121583][ T791] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 857.145356][ T791] usb 6-1: Manufacturer: syz [ 857.163333][ T791] usb 6-1: config 0 descriptor?? [ 857.467000][ T791] rc_core: IR keymap rc-hauppauge not found [ 857.478730][ T791] Registered IR keymap rc-empty [ 857.517065][ T791] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 857.551516][ T791] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 857.584284][ T791] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 857.620333][ T791] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input41 [ 857.650594][ T791] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 857.690495][ T791] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 857.701049][ T5929] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 857.733941][ T791] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 857.765327][ T791] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 857.797628][ T791] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 857.830529][ T791] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 857.850805][ T5929] usb 5-1: device descriptor read/64, error -71 [ 857.862290][ T791] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 857.895656][ T791] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 857.937507][ T791] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 857.969127][ T791] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 858.002136][ T791] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 858.020419][ T791] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 858.055745][ T791] usb 6-1: USB disconnect, device number 68 [ 858.107283][ T5929] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 858.276707][ T5929] usb 5-1: device descriptor read/64, error -71 [ 858.350790][T16096] program syz.2.2817 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 858.535205][ T5929] usb usb5-port1: attempt power cycle [ 858.844896][ T10] usb 6-1: new full-speed USB device number 69 using dummy_hcd [ 858.855604][ T791] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 858.898366][ T5929] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 858.920182][ T5929] usb 5-1: device descriptor read/8, error -71 [ 859.038778][ T791] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 859.048804][ T791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.069435][ T10] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 859.079094][ T791] usb 3-1: config 0 descriptor?? [ 859.089303][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.097462][ T10] usb 6-1: Product: syz [ 859.118957][ T10] usb 6-1: Manufacturer: syz [ 859.127532][ T10] usb 6-1: SerialNumber: syz [ 859.135725][ T10] usb 6-1: config 0 descriptor?? [ 859.187014][ T5929] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 859.208842][ T5929] usb 5-1: device descriptor read/8, error -71 [ 859.326335][ T5929] usb usb5-port1: unable to enumerate USB device [ 859.362551][ T10] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 859.556701][T16102] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2820'. [ 859.657680][ T89] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 859.819089][ T791] usb 3-1: Cannot set autoneg [ 859.824546][ T791] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 859.836373][ T89] usb 1-1: config index 0 descriptor too short (expected 64548, got 36) [ 859.848023][ T89] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 859.857486][ T791] usb 3-1: USB disconnect, device number 94 [ 859.858854][ T89] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 859.876476][ T89] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 859.887707][ T89] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 859.898831][ T89] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 859.909061][ T89] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.919130][ T89] usb 1-1: config 0 descriptor?? [ 860.143213][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 860.143230][ T30] audit: type=1326 audit(6061798502.523:4053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16114 comm="syz.0.2825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c5f98f749 code=0x7ffc0000 [ 860.173305][ T30] audit: type=1326 audit(6061798502.523:4054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16114 comm="syz.0.2825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9c5f98f749 code=0x7ffc0000 [ 860.197592][ T30] audit: type=1326 audit(6061798502.523:4055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16114 comm="syz.0.2825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c5f98f749 code=0x7ffc0000 [ 860.236719][ T30] audit: type=1326 audit(6061798502.523:4056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16114 comm="syz.0.2825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9c5f98f749 code=0x7ffc0000 [ 860.260872][ T30] audit: type=1326 audit(6061798502.551:4057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16114 comm="syz.0.2825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c5f98f749 code=0x7ffc0000 [ 860.284551][ T30] audit: type=1326 audit(6061798502.551:4058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16114 comm="syz.0.2825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9c5f98f749 code=0x7ffc0000 [ 860.308230][ T30] audit: type=1326 audit(6061798502.616:4059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16114 comm="syz.0.2825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c5f98f749 code=0x7ffc0000 [ 860.332164][ T30] audit: type=1326 audit(6061798502.616:4060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16114 comm="syz.0.2825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c5f98f749 code=0x7ffc0000 [ 860.410160][ T5814] Bluetooth: hci3: unexpected cc 0x042d length: 63 > 7 [ 860.411434][ T30] audit: type=1400 audit(6061798502.775:4061): avc: denied { write } for pid=16121 comm="syz.2.2827" path="socket:[57791]" dev="sockfs" ino=57791 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 860.418989][ T5814] Bluetooth: hci3: unexpected event for opcode 0x042d [ 860.795205][ T10] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 860.807218][T16115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 860.817766][ T10] usb 6-1: USB disconnect, device number 69 [ 860.823942][ T30] audit: type=1326 audit(6061798502.813:4062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16114 comm="syz.0.2825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9c5f98f34b code=0x7ffc0000 [ 860.852532][T16115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 860.928006][ T89] usbhid 1-1:0.0: can't add hid device: -71 [ 860.949408][ T89] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 860.967242][ T89] usb 1-1: USB disconnect, device number 91 [ 861.293314][ T791] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 861.411482][T16147] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 861.442794][T16147] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 861.453309][T16147] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 861.462039][T16147] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 861.497398][ T791] usb 5-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 861.517014][ T791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.543289][ T791] usb 5-1: Product: syz [ 861.552521][ T791] usb 5-1: Manufacturer: syz [ 861.559535][ T791] usb 5-1: SerialNumber: syz [ 861.799788][ T5814] Bluetooth: hci1: command 0x0406 tx timeout [ 861.923687][ T791] usb 5-1: palm_os_4_probe - error -110 getting connection info [ 861.963680][ T791] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 861.998216][ T791] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 862.010928][ T791] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 862.029587][ T791] usb 5-1: USB disconnect, device number 29 [ 862.038870][ T791] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 862.050543][ T791] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 862.052112][ T49] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 862.060315][ T791] visor 5-1:1.0: device disconnected [ 862.255265][ T49] usb 6-1: Using ep0 maxpacket: 16 [ 862.261637][ T49] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 101, changing to 7 [ 862.273679][ T49] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 25714, setting to 1024 [ 862.287159][ T49] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 862.296395][ T49] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.304727][ T49] usb 6-1: Product: syz [ 862.309021][ T49] usb 6-1: Manufacturer: syz [ 862.313603][ T49] usb 6-1: SerialNumber: syz [ 862.319663][ T49] usb 6-1: config 0 descriptor?? [ 862.326457][ T49] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 862.335926][ T49] em28xx 6-1:0.0: DVB interface 0 found: isoc [ 862.469074][ T791] usb 1-1: new full-speed USB device number 92 using dummy_hcd [ 862.610557][ T791] usb 1-1: device descriptor read/64, error -71 [ 862.810439][T16177] program syz.2.2848 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 862.962624][ T791] usb 1-1: new full-speed USB device number 93 using dummy_hcd [ 863.046862][ T49] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 863.196004][ T791] usb 1-1: device descriptor read/64, error -71 [ 863.345760][ T791] usb usb1-port1: attempt power cycle [ 863.359736][ T49] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 863.359934][T16184] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2850'. [ 863.394742][ T49] em28xx 6-1:0.0: board has no eeprom [ 863.474051][ T49] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 863.484074][ T49] em28xx 6-1:0.0: dvb set to isoc mode. [ 863.489852][ T89] em28xx 6-1:0.0: Binding DVB extension [ 863.500185][ T49] usb 6-1: USB disconnect, device number 70 [ 863.511003][ T49] em28xx 6-1:0.0: Disconnecting em28xx [ 863.526150][ T89] em28xx 6-1:0.0: Registering input extension [ 863.532545][ T49] em28xx 6-1:0.0: Closing input extension [ 863.544706][ T49] em28xx 6-1:0.0: Freeing device [ 863.730843][ T791] usb 1-1: new full-speed USB device number 94 using dummy_hcd [ 863.752441][ T791] usb 1-1: device descriptor read/8, error -71 [ 863.848179][ T89] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 863.968804][T16199] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2854'. [ 864.040806][ T791] usb 1-1: new full-speed USB device number 95 using dummy_hcd [ 864.073038][ T791] usb 1-1: device descriptor read/8, error -71 [ 864.137498][ T89] usb 2-1: Using ep0 maxpacket: 16 [ 864.144235][ T89] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 864.154915][ T89] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 864.168406][ T89] usb 2-1: config 0 interface 0 has no altsetting 0 [ 864.175360][ T89] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 864.186803][ T89] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.204550][ T791] usb usb1-port1: unable to enumerate USB device [ 864.216795][ T89] usb 2-1: config 0 descriptor?? [ 864.243485][ T89] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 864.789125][ T5830] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 864.799796][ T5830] Bluetooth: hci3: Injecting HCI hardware error event [ 864.808349][ T5814] Bluetooth: hci3: hardware error 0x00 [ 864.852872][T16211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 864.890486][T16211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 865.054427][T16213] 9p: Bad value for 'wfdno' [ 865.939435][T16229] IPVS: set_ctl: invalid protocol: 50 172.20.20.25:20002 [ 867.068162][ T5814] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 867.293156][ T791] usb 2-1: USB disconnect, device number 99 [ 868.033251][T16281] fuse: Bad value for 'rootmode' [ 869.372589][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 869.372601][ T30] audit: type=1400 audit(6061798511.157:4078): avc: denied { set_context_mgr } for pid=16283 comm="syz.0.2871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 869.411220][T16284] syzkaller0: entered promiscuous mode [ 869.420641][T16284] syzkaller0: entered allmulticast mode [ 869.440334][T16288] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 869.458634][T16288] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 869.469241][ T30] audit: type=1400 audit(6061798511.194:4079): avc: denied { call } for pid=16283 comm="syz.0.2871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 869.489368][T16288] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 869.498904][T16288] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 869.644753][ T5930] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 869.686270][T16294] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2875'. [ 869.706608][ T791] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 870.177237][T16294] netlink: 666 bytes leftover after parsing attributes in process `syz.5.2875'. [ 870.187255][T16294] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16294 comm=syz.5.2875 [ 870.200829][ T5930] usb 2-1: device descriptor read/64, error -71 [ 870.228123][ T791] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 870.239190][ T791] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 870.249422][ T791] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 870.259406][ T791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.271885][T16280] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 870.283263][ T791] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 870.454994][ T5930] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 870.968629][ T5930] usb 2-1: device descriptor read/64, error -71 [ 870.981873][T16282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 870.990545][T16282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 871.050617][ T791] usb 5-1: USB disconnect, device number 30 [ 871.117958][ T5930] usb usb2-port1: attempt power cycle [ 871.224767][ T9] usb 1-1: new low-speed USB device number 96 using dummy_hcd [ 871.363841][ T9] usb 1-1: device descriptor read/64, error -71 [ 871.557491][ T5930] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 871.605428][ T5930] usb 2-1: device descriptor read/8, error -71 [ 871.617655][ T3527] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.695096][ T49] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 871.705992][ T9] usb 1-1: new low-speed USB device number 97 using dummy_hcd [ 871.767186][T16323] fuse: Unknown parameter 'use00000000000000000000' [ 871.956911][ T49] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 871.999298][ T49] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 872.071289][ T49] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 872.120204][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.206470][T16317] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 872.258319][ T49] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 872.399892][ T5930] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 873.031955][ T5930] usb 2-1: device descriptor read/8, error -71 [ 873.162670][ T9] usb 1-1: device descriptor read/64, error -71 [ 873.177511][ T5930] usb usb2-port1: unable to enumerate USB device [ 873.184426][T16317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 873.200310][T16317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 873.309710][ T9] usb usb1-port1: attempt power cycle [ 873.591497][T16342] input: syz0 as /devices/virtual/input/input43 [ 873.739447][ T9] usb 1-1: new low-speed USB device number 98 using dummy_hcd [ 874.387030][ T9] usb 1-1: device not accepting address 98, error -71 [ 874.452276][ T89] usb 3-1: USB disconnect, device number 95 [ 874.688383][ T49] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 875.449065][ T49] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 875.460097][ T49] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 875.471089][ T49] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 875.495357][ T49] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 875.510126][ T49] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 875.567076][ T49] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 875.590675][ T49] usb 5-1: Manufacturer: syz [ 875.609203][ T49] usb 5-1: config 0 descriptor?? [ 876.188568][ T49] appleir 0003:05AC:8243.000E: unknown main item tag 0x0 [ 876.221331][ T49] appleir 0003:05AC:8243.000E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 877.101028][ T49] usb 6-1: new low-speed USB device number 71 using dummy_hcd [ 877.596383][ T49] usb 6-1: device descriptor read/64, error -71 [ 877.788690][ T5927] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 877.864016][ T49] usb 6-1: new low-speed USB device number 72 using dummy_hcd [ 877.939641][ T89] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 877.954784][ T5927] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 877.964233][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.991160][ T5927] usb 2-1: config 0 descriptor?? [ 878.014089][ T49] usb 6-1: device descriptor read/64, error -71 [ 878.122643][ T89] usb 3-1: config 67 has an invalid interface number: 177 but max is 0 [ 878.131325][ T89] usb 3-1: config 67 has no interface number 0 [ 878.139104][ T49] usb usb6-port1: attempt power cycle [ 878.147762][ T89] usb 3-1: config 67 interface 177 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 32 [ 878.161960][ T89] usb 3-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=eb.17 [ 878.171223][ T89] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.208130][T16403] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 878.277656][ T89] usb 3-1: bad CDC descriptors [ 878.293358][ T89] cdc_acm 3-1:67.177: Zero length descriptor references [ 878.300698][ T89] cdc_acm 3-1:67.177: probe with driver cdc_acm failed with error -22 [ 878.509144][ T9] usb 5-1: USB disconnect, device number 31 [ 879.053767][ T49] usb 6-1: new low-speed USB device number 73 using dummy_hcd [ 879.067009][ T5927] usb 2-1: Cannot set autoneg [ 879.072843][ T5927] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 879.105741][ T49] usb 6-1: device descriptor read/8, error -71 [ 879.113770][ T5927] usb 2-1: USB disconnect, device number 104 [ 879.117402][ T9] usb 3-1: USB disconnect, device number 96 [ 879.905470][ T30] audit: type=1400 audit(6061798520.875:4080): avc: denied { watch watch_reads } for pid=16417 comm="syz.4.2912" path="pipe:[48880]" dev="pipefs" ino=48880 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 880.229720][ T89] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 880.413394][T16431] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2916'. [ 880.419976][ T89] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 880.436223][ T89] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 880.454732][ T89] usb 1-1: config 0 interface 0 has no altsetting 0 [ 880.467591][ T89] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 880.485206][ T89] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.504746][ T89] usb 1-1: config 0 descriptor?? [ 880.617024][ T30] audit: type=1800 audit(6061798521.670:4081): pid=16441 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2920" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 880.658086][ T30] audit: type=1326 audit(6061798521.708:4082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16440 comm="syz.5.2920" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f31f478f749 code=0x0 [ 880.764433][ T30] audit: type=1400 audit(6061798521.811:4083): avc: denied { read } for pid=16440 comm="syz.5.2920" dev="sockfs" ino=59989 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 880.856678][T16451] netlink: 'syz.2.2923': attribute type 1 has an invalid length. [ 880.901845][T16451] 8021q: adding VLAN 0 to HW filter on device bond2 [ 880.936004][T16451] bond2: (slave ip6gretap1): making interface the new active one [ 880.946565][T16451] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 881.748419][ T5930] usb 1-1: USB disconnect, device number 100 [ 882.299439][T16484] x_tables: duplicate entry at hook 2 [ 883.711420][T16501] atomic_op ffff88803318d998 conn xmit_atomic 0000000000000000 [ 884.945508][T16527] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2946'. [ 885.995904][T15200] usb 2-1: new low-speed USB device number 105 using dummy_hcd [ 886.171591][T15200] usb 2-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 886.186840][T15200] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.204793][T15200] usb 2-1: config 0 descriptor?? [ 886.218743][T15200] pwc: Logitech QuickCam Notebook Pro USB webcam detected. [ 886.266392][ T49] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 886.567072][T16547] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2949'. [ 886.592662][ T49] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 886.732303][ T49] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 886.746216][ T49] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 886.756926][T15200] pwc: Failed to set LED on/off time (-71) [ 886.763404][ T49] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.770534][T15200] pwc: send_video_command error -71 [ 886.773815][T16540] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 886.793679][T15200] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 886.799405][ T49] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 886.809203][T15200] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 886.882174][T15200] usb 2-1: USB disconnect, device number 105 [ 887.404297][T16540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 887.412922][T16540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 887.854907][T16562] program syz.0.2957 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 888.397358][ T30] audit: type=1400 audit(6061798528.920:4084): avc: denied { connect } for pid=16572 comm="syz.2.2961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 888.867135][T12119] usb 6-1: USB disconnect, device number 75 [ 888.938678][ T49] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 889.249064][ T49] usb 3-1: Using ep0 maxpacket: 32 [ 889.356970][ T49] usb 3-1: config 0 interface 0 has no altsetting 0 [ 889.381919][ T49] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 889.399030][ T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.407827][ T49] usb 3-1: Product: syz [ 889.516001][T16586] program syz.0.2963 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 889.624617][ T49] usb 3-1: Manufacturer: syz [ 889.749210][ T49] usb 3-1: SerialNumber: syz [ 889.772509][ T49] usb 3-1: config 0 descriptor?? [ 890.040165][ T5930] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 890.267933][ T5930] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 890.280953][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.302372][ T5930] usb 5-1: Product: syz [ 890.306646][ T5930] usb 5-1: Manufacturer: syz [ 890.311455][ T5930] usb 5-1: SerialNumber: syz [ 890.322269][ T5930] usb 5-1: config 0 descriptor?? [ 890.510035][T15200] usb 2-1: new full-speed USB device number 106 using dummy_hcd [ 890.551833][ T5930] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 890.718747][T15200] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 890.728125][T15200] usb 2-1: config 0 has no interface number 0 [ 890.771106][T15200] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 890.780833][T15200] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.789035][T15200] usb 2-1: Product: syz [ 890.798701][T15200] usb 2-1: Manufacturer: syz [ 890.803506][T15200] usb 2-1: SerialNumber: syz [ 890.863233][T15200] usb 2-1: config 0 descriptor?? [ 891.033551][T16605] input: syz0 as /devices/virtual/input/input44 [ 891.087264][ T49] gs_usb 3-1:0.0: Couldn't get device config: (err=-110) [ 891.094689][ T49] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -110 [ 891.141990][T15200] peak_usb 2-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 891.311644][ T49] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 891.370850][ T9] usb 3-1: USB disconnect, device number 97 [ 891.381168][ T30] audit: type=1400 audit(6061798531.745:4085): avc: denied { unmount } for pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 891.381302][T15200] peak_usb 2-1:0.29 can0: sending command failure: -22 [ 891.488203][T15200] peak_usb 2-1:0.29 can0: sending command failure: -22 [ 891.501918][T15200] peak_usb 2-1:0.29 can0: sending command failure: -22 [ 891.568230][ T49] usb 1-1: Using ep0 maxpacket: 32 [ 891.577173][ T49] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 891.588036][T15200] peak_usb 2-1:0.29: probe with driver peak_usb failed with error -22 [ 891.606130][ T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.608409][T15200] usb 2-1: USB disconnect, device number 106 [ 891.616390][ T49] usb 1-1: Product: syz [ 891.624822][ T49] usb 1-1: Manufacturer: syz [ 891.629429][ T49] usb 1-1: SerialNumber: syz [ 891.636007][ T49] usb 1-1: config 0 descriptor?? [ 891.726653][T16614] program syz.5.2972 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 891.856312][ T49] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 891.865300][ T49] peak_usb 1-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 891.931872][ T9] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 891.941671][ T49] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 891.962250][ T49] usb 1-1: USB disconnect, device number 101 [ 892.091950][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 892.098363][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 892.108650][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 892.117816][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 892.127252][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.137716][ T5930] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 892.147321][ T9] usb 3-1: config 0 descriptor?? [ 892.154762][ T5930] usb 5-1: USB disconnect, device number 32 [ 892.573202][ T49] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 892.871372][T16627] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 892.990270][ T49] usb 2-1: Using ep0 maxpacket: 16 [ 893.000401][ T49] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 893.010118][ T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.022154][ T49] usb 2-1: config 0 descriptor?? [ 893.030527][ T49] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 894.098749][T16649] FAULT_INJECTION: forcing a failure. [ 894.098749][T16649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 894.139490][T16649] CPU: 0 UID: 0 PID: 16649 Comm: syz.4.2983 Tainted: G L syzkaller #0 PREEMPT(full) [ 894.139521][T16649] Tainted: [L]=SOFTLOCKUP [ 894.139528][T16649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 894.139538][T16649] Call Trace: [ 894.139544][T16649] [ 894.139551][T16649] dump_stack_lvl+0x16c/0x1f0 [ 894.139580][T16649] should_fail_ex+0x512/0x640 [ 894.139600][T16649] _copy_from_iter+0x2a4/0x16c0 [ 894.139620][T16649] ? __alloc_skb+0x220/0x410 [ 894.139636][T16649] ? __alloc_skb+0x35d/0x410 [ 894.139660][T16649] ? __pfx__copy_from_iter+0x10/0x10 [ 894.139690][T16649] ? netlink_autobind.isra.0+0x158/0x370 [ 894.139722][T16649] netlink_sendmsg+0x820/0xdd0 [ 894.139749][T16649] ? __pfx_netlink_sendmsg+0x10/0x10 [ 894.139779][T16649] ____sys_sendmsg+0xa5d/0xc30 [ 894.139803][T16649] ? copy_msghdr_from_user+0x10a/0x160 [ 894.139821][T16649] ? __pfx_____sys_sendmsg+0x10/0x10 [ 894.139856][T16649] ___sys_sendmsg+0x134/0x1d0 [ 894.139877][T16649] ? __pfx____sys_sendmsg+0x10/0x10 [ 894.139925][T16649] __sys_sendmsg+0x16d/0x220 [ 894.139944][T16649] ? __pfx___sys_sendmsg+0x10/0x10 [ 894.139978][T16649] do_syscall_64+0xcd/0xf80 [ 894.140010][T16649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.140030][T16649] RIP: 0033:0x7faf2a58f749 [ 894.140045][T16649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 894.140063][T16649] RSP: 002b:00007faf2b46f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 894.140081][T16649] RAX: ffffffffffffffda RBX: 00007faf2a7e5fa0 RCX: 00007faf2a58f749 [ 894.140091][T16649] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 894.140102][T16649] RBP: 00007faf2b46f090 R08: 0000000000000000 R09: 0000000000000000 [ 894.140113][T16649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 894.140124][T16649] R13: 00007faf2a7e6038 R14: 00007faf2a7e5fa0 R15: 00007ffd86f38e98 [ 894.140150][T16649] [ 894.850358][T16654] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2984'. [ 895.022638][ T5930] usb 3-1: USB disconnect, device number 98 [ 895.757695][T16661] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 895.803290][ T30] audit: type=1400 audit(6061798535.852:4086): avc: denied { read } for pid=16658 comm="syz.4.2986" name="mouse0" dev="devtmpfs" ino=1000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 896.053986][ T49] usb 2-1: Detected FT232A [ 896.104279][ T49] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 896.154302][ T49] usb 2-1: USB disconnect, device number 107 [ 896.303751][T15200] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 896.483719][ T49] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 896.524343][ T49] ftdi_sio 2-1:0.0: device disconnected [ 896.677626][ T9] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 896.685684][T15200] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 896.697643][T15200] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 896.719051][T15200] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 896.796963][T16677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2991'. [ 897.148397][T15200] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.167881][T16657] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 897.187332][T15200] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 897.238597][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 897.249798][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.259529][ T9] usb 1-1: Product: syz [ 897.263779][ T9] usb 1-1: Manufacturer: syz [ 897.268575][ T9] usb 1-1: SerialNumber: syz [ 897.280274][ T9] usb 1-1: config 0 descriptor?? [ 897.709542][T16687] xt_CT: You must specify a L4 protocol and not use inversions on it [ 897.719831][ T9] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 897.739464][ T30] audit: type=1400 audit(6061798537.658:4087): avc: denied { getopt } for pid=16681 comm="syz.1.2993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 897.855901][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 897.880112][T16659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 897.888732][T16659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 898.080629][T15200] usb 3-1: USB disconnect, device number 99 [ 898.218601][ T49] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 898.219094][T16695] program syz.5.2996 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 898.392028][ T49] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 898.411835][ T49] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.451937][ T49] usb 5-1: config 0 descriptor?? [ 899.112168][ T49] usb 5-1: Cannot set autoneg [ 899.118240][ T49] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 899.140334][ T49] usb 5-1: USB disconnect, device number 33 [ 899.254875][ T9] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 899.311327][ T9] usb 1-1: USB disconnect, device number 102 [ 899.585090][ T791] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 899.585090][ T8078] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 899.766786][ T791] usb 3-1: Using ep0 maxpacket: 16 [ 899.781898][ T8078] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 899.791243][ T8078] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 899.803178][ T791] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 899.855692][ T8078] usb 6-1: Product: syz [ 899.863093][ T791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.893395][ T791] usb 3-1: config 0 descriptor?? [ 899.918182][ T791] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 899.976128][ T8078] usb 6-1: Manufacturer: syz [ 900.002138][ T8078] usb 6-1: SerialNumber: syz [ 900.028900][ T8078] usb 6-1: config 0 descriptor?? [ 900.058015][ T8078] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 900.087933][ T8078] dvb-usb: bulk message failed: -22 (2/0) [ 900.131356][ T8078] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 900.161128][ T8078] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 900.200788][ T8078] usb 6-1: media controller created [ 900.250572][ T8078] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 900.270507][ T9] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 900.525837][ T9] usb 5-1: device descriptor read/64, error -71 [ 900.680281][ T30] audit: type=1400 audit(6061798540.446:4088): avc: denied { getopt } for pid=16724 comm="syz.1.3007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 900.846911][ T9] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 901.003328][ T9] usb 5-1: device descriptor read/64, error -71 [ 901.402620][ T9] usb usb5-port1: attempt power cycle [ 902.278767][ T9] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 902.311468][ T9] usb 5-1: device descriptor read/8, error -71 [ 902.584126][ T8078] cxusb: set interface failed [ 902.591522][ T8078] dvb-usb: bulk message failed: -22 (1/0) [ 902.624411][ T8078] DVB: Unable to find symbol mt352_attach() [ 902.630635][ T8078] dvb-usb: bulk message failed: -22 (5/0) [ 902.649192][ T8078] zl10353_read_register: readreg error (reg=127, ret==-121) [ 902.669551][ T8078] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 902.686984][ T9] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 902.753397][ T8078] rc_core: IR keymap rc-dvico-mce not found [ 902.759355][ T8078] Registered IR keymap rc-empty [ 902.765125][ T8078] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 902.775141][ T9] usb 5-1: device descriptor read/8, error -71 [ 902.783853][ T8078] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input45 [ 902.795946][ T8078] dvb-usb: schedule remote query interval to 100 msecs. [ 902.805151][ T8078] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 902.817131][ T8078] usb 6-1: USB disconnect, device number 76 [ 902.847076][ T8078] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 902.940323][ T9] usb usb5-port1: unable to enumerate USB device [ 903.012778][ T89] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 903.574644][ T791] usb 3-1: Detected FT232A [ 903.596843][ T89] usb 1-1: Using ep0 maxpacket: 16 [ 903.603348][ T89] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 903.631632][ T89] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 903.633991][ T791] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 903.684573][ T791] usb 3-1: USB disconnect, device number 100 [ 903.684805][ T89] usb 1-1: New USB device found, idVendor=056a, idProduct=00b2, bcdDevice= 0.00 [ 903.700542][ T791] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 903.710853][ T791] ftdi_sio 3-1:0.0: device disconnected [ 903.743397][ T89] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.774091][ T89] usb 1-1: config 0 descriptor?? [ 904.110319][T16776] smc: net device hsr0 applied user defined pnetid SYZ2 [ 904.113431][ T30] audit: type=1400 audit(6061798543.542:4089): avc: denied { write } for pid=16764 comm="syz.5.3018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 904.401681][T12119] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 904.401801][ T5814] Bluetooth: hci0: unexpected event for opcode 0x0c13 [ 904.417077][ T89] usbhid 1-1:0.0: can't add hid device: -71 [ 904.427398][ T89] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 904.444839][ T89] usb 1-1: USB disconnect, device number 103 [ 904.579837][T12119] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 904.591463][T12119] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 904.601907][T12119] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 904.612671][T12119] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.637915][T16775] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 904.665388][T16787] program syz.1.3024 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 904.674984][T12119] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 904.801458][ T791] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 904.983346][ T791] usb 5-1: Using ep0 maxpacket: 16 [ 904.999996][ T791] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 905.011881][ T791] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 905.026277][ T791] usb 5-1: config 0 interface 0 has no altsetting 0 [ 905.037027][ T791] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 905.047818][ T791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.071518][ T791] usb 5-1: config 0 descriptor?? [ 905.084115][ T791] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 905.320109][T16798] program syz.2.3028 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 905.887309][T16802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 905.900358][T16802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 906.009358][T12119] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 906.186737][T12119] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 906.205133][T12119] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 906.229594][T12119] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 906.247506][T12119] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.268940][T16801] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 906.370338][T12119] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 906.774391][ T791] usb 1-1: USB disconnect, device number 104 [ 906.830249][T12119] usb 6-1: USB disconnect, device number 77 [ 906.850306][T16812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3032'. [ 906.877447][T16812] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 906.896616][T16812] macsec1: entered promiscuous mode [ 906.901930][T16812] macsec1: entered allmulticast mode [ 906.920302][T16812] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 907.015723][ T30] audit: type=1326 audit(6061798546.368:4090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16814 comm="syz.5.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f478f749 code=0x7ffc0000 [ 907.050284][ T30] audit: type=1326 audit(6061798546.396:4091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16814 comm="syz.5.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f31f47865e7 code=0x7ffc0000 [ 907.078605][ T30] audit: type=1326 audit(6061798546.396:4092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16814 comm="syz.5.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f31f472b829 code=0x7ffc0000 [ 907.129263][ T30] audit: type=1326 audit(6061798546.396:4093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16814 comm="syz.5.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31f478f749 code=0x7ffc0000 [ 907.154695][ T30] audit: type=1326 audit(6061798546.405:4094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16814 comm="syz.5.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f31f47865e7 code=0x7ffc0000 [ 907.505962][ T30] audit: type=1326 audit(6061798546.405:4095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16814 comm="syz.5.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f31f472b829 code=0x7ffc0000 [ 907.531806][ T30] audit: type=1326 audit(6061798546.405:4096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16814 comm="syz.5.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f478f749 code=0x7ffc0000 [ 907.830360][T12119] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 907.911569][ T791] usb 5-1: USB disconnect, device number 38 [ 907.936912][ T30] audit: type=1326 audit(6061798546.405:4097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16814 comm="syz.5.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f478f749 code=0x7ffc0000 [ 908.036466][T12119] usb 2-1: config 0 has an invalid interface number: 168 but max is 0 [ 908.037135][ T30] audit: type=1326 audit(6061798546.405:4098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16814 comm="syz.5.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31f478f749 code=0x7ffc0000 [ 908.048303][T12119] usb 2-1: config 0 has no interface number 0 [ 908.097468][T12119] usb 2-1: config 0 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 908.133544][T12119] usb 2-1: config 0 interface 168 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 225 [ 908.205694][T12119] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 908.219753][T12119] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.244044][T12119] usb 2-1: config 0 descriptor?? [ 908.252776][T16822] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 908.490526][T12119] usb 2-1: string descriptor 0 read error: -71 [ 908.615971][T12119] keyspan 2-1:0.168: Keyspan 2 port adapter converter detected [ 908.733340][T12119] keyspan 2-1:0.168: found no endpoint descriptor for endpoint 1 [ 908.832252][T12119] keyspan 2-1:0.168: found no endpoint descriptor for endpoint 84 [ 908.842750][T12119] keyspan 2-1:0.168: found no endpoint descriptor for endpoint 2 [ 909.057556][T12119] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 909.155935][T12119] keyspan 2-1:0.168: found no endpoint descriptor for endpoint 88 [ 909.176739][T12119] keyspan 2-1:0.168: found no endpoint descriptor for endpoint 6 [ 909.220786][T12119] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 909.264886][T12119] usb 2-1: USB disconnect, device number 108 [ 909.296508][T12119] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 909.576520][T12119] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 909.616373][T16862] smc: net device hsr0 applied user defined pnetid SYZ2 [ 909.619266][T12119] keyspan 2-1:0.168: device disconnected [ 909.651248][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 909.651266][ T30] audit: type=1400 audit(6061798548.828:4163): avc: denied { create } for pid=16859 comm="syz.1.3048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 909.675936][T16865] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 909.698941][ T30] audit: type=1400 audit(6061798548.856:4164): avc: denied { write } for pid=16859 comm="syz.1.3048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 910.605822][ T8078] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 910.740245][ T30] audit: type=1326 audit(6061798549.848:4165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16855 comm="syz.2.3046" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5dbd8f749 code=0x0 [ 910.883204][ T8078] usb 6-1: Using ep0 maxpacket: 16 [ 910.895510][ T8078] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 910.908207][ T30] audit: type=1400 audit(6061798550.016:4166): avc: denied { read } for pid=16855 comm="syz.2.3046" dev="sockfs" ino=62387 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 910.909370][ T8078] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 911.375557][ T8078] usb 6-1: config 0 interface 0 has no altsetting 0 [ 911.382211][ T8078] usb 6-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 911.391326][ T8078] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.401330][ T8078] usb 6-1: config 0 descriptor?? [ 911.409227][ T8078] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 912.030921][T16889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 912.049016][T16889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 912.080924][ T791] usb 3-1: new full-speed USB device number 101 using dummy_hcd [ 912.221462][ T9] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 912.283050][T16899] program syz.0.3059 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 912.376282][ T791] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 912.386386][ T791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.394543][ T791] usb 3-1: Product: syz [ 912.494255][ T791] usb 3-1: Manufacturer: syz [ 912.498945][ T791] usb 3-1: SerialNumber: syz [ 912.504857][ T791] usb 3-1: config 0 descriptor?? [ 912.572709][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 912.580364][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 912.592637][ T9] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 912.602090][ T9] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 912.610474][ T9] usb 5-1: Product: syz [ 912.614846][ T9] usb 5-1: Manufacturer: syz [ 912.619688][ T9] usb 5-1: SerialNumber: syz [ 912.730334][ T791] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 912.843284][ T9] usb 5-1: Handspring Visor / Palm OS: No valid connect info available [ 912.856004][ T9] usb 5-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 912.864475][ T9] usb 5-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 912.872820][ T9] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2 [ 913.066278][ T9] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 913.079760][ T9] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 913.090629][ T9] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 913.248798][ T9] usb 6-1: USB disconnect, device number 78 [ 913.292890][T16886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 913.293827][T16909] FAULT_INJECTION: forcing a failure. [ 913.293827][T16909] name failslab, interval 1, probability 0, space 0, times 0 [ 913.306679][T16886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 913.314622][T16909] CPU: 1 UID: 0 PID: 16909 Comm: syz.5.3062 Tainted: G L syzkaller #0 PREEMPT(full) [ 913.314649][T16909] Tainted: [L]=SOFTLOCKUP [ 913.314655][T16909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 913.314665][T16909] Call Trace: [ 913.314671][T16909] [ 913.314677][T16909] dump_stack_lvl+0x16c/0x1f0 [ 913.314702][T16909] should_fail_ex+0x512/0x640 [ 913.314725][T16909] ? __kmalloc_cache_noprof+0x5f/0x800 [ 913.314754][T16909] should_failslab+0xc2/0x120 [ 913.314775][T16909] __kmalloc_cache_noprof+0x80/0x800 [ 913.314800][T16909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.314817][T16909] ? drm_atomic_state_alloc+0xb8/0x120 [ 913.314853][T16909] ? drm_atomic_state_alloc+0xb8/0x120 [ 913.314875][T16909] drm_atomic_state_alloc+0xb8/0x120 [ 913.314900][T16909] drm_mode_atomic_ioctl+0x393/0x2640 [ 913.314929][T16909] ? avc_has_extended_perms+0x33a/0x1090 [ 913.314959][T16909] ? avc_has_extended_perms+0x47c/0x1090 [ 913.314987][T16909] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 913.315011][T16909] ? __lock_acquire+0x436/0x2890 [ 913.315031][T16909] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 913.315070][T16909] ? drm_is_current_master+0x2c/0x40 [ 913.315096][T16909] ? do_raw_spin_unlock+0x172/0x230 [ 913.315122][T16909] drm_ioctl_kernel+0x1f4/0x3e0 [ 913.315143][T16909] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 913.315168][T16909] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 913.315198][T16909] drm_ioctl+0x5c9/0xc30 [ 913.315223][T16909] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 913.315249][T16909] ? __pfx_drm_ioctl+0x10/0x10 [ 913.315281][T16909] ? selinux_file_ioctl+0x180/0x270 [ 913.315302][T16909] ? selinux_file_ioctl+0xb4/0x270 [ 913.315324][T16909] ? __pfx_drm_ioctl+0x10/0x10 [ 913.315347][T16909] __x64_sys_ioctl+0x18e/0x210 [ 913.315368][T16909] do_syscall_64+0xcd/0xf80 [ 913.315390][T16909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.315406][T16909] RIP: 0033:0x7f31f478f749 [ 913.315419][T16909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 913.315435][T16909] RSP: 002b:00007f31f55ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 913.315451][T16909] RAX: ffffffffffffffda RBX: 00007f31f49e5fa0 RCX: 00007f31f478f749 [ 913.315462][T16909] RDX: 0000200000000380 RSI: 00000000c03864bc RDI: 0000000000000003 [ 913.315471][T16909] RBP: 00007f31f55ef090 R08: 0000000000000000 R09: 0000000000000000 [ 913.315481][T16909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 913.315490][T16909] R13: 00007f31f49e6038 R14: 00007f31f49e5fa0 R15: 00007ffcfbed77a8 [ 913.315513][T16909] [ 913.615025][T15200] usb 5-1: USB disconnect, device number 39 [ 913.625900][T15200] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 913.636748][T15200] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 913.647917][T16916] FAULT_INJECTION: forcing a failure. [ 913.647917][T16916] name failslab, interval 1, probability 0, space 0, times 0 [ 913.649655][T15200] visor 5-1:1.0: device disconnected [ 913.673734][T16916] CPU: 0 UID: 0 PID: 16916 Comm: syz.5.3064 Tainted: G L syzkaller #0 PREEMPT(full) [ 913.673765][T16916] Tainted: [L]=SOFTLOCKUP [ 913.673772][T16916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 913.673784][T16916] Call Trace: [ 913.673791][T16916] [ 913.673798][T16916] dump_stack_lvl+0x16c/0x1f0 [ 913.673826][T16916] should_fail_ex+0x512/0x640 [ 913.673851][T16916] ? kmem_cache_alloc_noprof+0x62/0x770 [ 913.673874][T16916] should_failslab+0xc2/0x120 [ 913.673898][T16916] kmem_cache_alloc_noprof+0x83/0x770 [ 913.673917][T16916] ? getname_flags.part.0+0x4c/0x550 [ 913.673943][T16916] ? getname_flags.part.0+0x4c/0x550 [ 913.673961][T16916] getname_flags.part.0+0x4c/0x550 [ 913.673984][T16916] getname_flags+0x93/0xf0 [ 913.674006][T16916] user_path_at+0x24/0x60 [ 913.674029][T16916] __x64_sys_mount+0x1fb/0x310 [ 913.674049][T16916] ? __pfx___x64_sys_mount+0x10/0x10 [ 913.674074][T16916] do_syscall_64+0xcd/0xf80 [ 913.674106][T16916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.674124][T16916] RIP: 0033:0x7f31f478f749 [ 913.674140][T16916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 913.674157][T16916] RSP: 002b:00007f31f55ef038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 913.674175][T16916] RAX: ffffffffffffffda RBX: 00007f31f49e5fa0 RCX: 00007f31f478f749 [ 913.674187][T16916] RDX: 0000200000000080 RSI: 0000200000000540 RDI: 0000000000000000 [ 913.674198][T16916] RBP: 00007f31f55ef090 R08: 0000200000000200 R09: 0000000000000000 [ 913.674209][T16916] R10: 0000000000000084 R11: 0000000000000246 R12: 0000000000000001 [ 913.674219][T16916] R13: 00007f31f49e6038 R14: 00007f31f49e5fa0 R15: 00007ffcfbed77a8 [ 913.674243][T16916] [ 914.354790][ T791] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 914.376714][ T791] usb 3-1: USB disconnect, device number 101 [ 914.667728][ T10] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 915.247875][ T30] audit: type=1400 audit(6061798554.058:4167): avc: denied { watch } for pid=16940 comm="syz.1.3070" path="/579/file0" dev="tmpfs" ino=3047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 915.531255][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 915.576231][T16947] program syz.0.3071 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 915.585958][ T10] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 915.597627][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.656188][ T30] audit: type=1400 audit(6061798554.058:4168): avc: denied { watch_sb } for pid=16940 comm="syz.1.3070" path="/579/file0" dev="tmpfs" ino=3047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 915.683604][ T10] usb 6-1: config 0 descriptor?? [ 915.908326][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 915.914382][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 915.949771][ T10] usb 6-1: USB disconnect, device number 79 [ 915.987575][T15200] libceph: connect (1)[c::]:6789 error -101 [ 915.993878][T15200] libceph: mon0 (1)[c::]:6789 connect error [ 916.006991][T15200] libceph: connect (1)[c::]:6789 error -101 [ 916.013066][T15200] libceph: mon0 (1)[c::]:6789 connect error [ 916.089371][T16957] ceph: No mds server is up or the cluster is laggy [ 916.153620][ T49] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 916.196269][ T8078] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 916.351397][ T10] libceph: connect (1)[c::]:6789 error -101 [ 916.369215][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 916.409635][T16963] FAULT_INJECTION: forcing a failure. [ 916.409635][T16963] name failslab, interval 1, probability 0, space 0, times 0 [ 916.424591][ T49] usb 2-1: Using ep0 maxpacket: 16 [ 916.431426][T16963] CPU: 0 UID: 0 PID: 16963 Comm: syz.0.3076 Tainted: G L syzkaller #0 PREEMPT(full) [ 916.431456][T16963] Tainted: [L]=SOFTLOCKUP [ 916.431462][T16963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 916.431473][T16963] Call Trace: [ 916.431479][T16963] [ 916.431487][T16963] dump_stack_lvl+0x16c/0x1f0 [ 916.431515][T16963] should_fail_ex+0x512/0x640 [ 916.431542][T16963] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 916.431564][T16963] should_failslab+0xc2/0x120 [ 916.431589][T16963] kmem_cache_alloc_node_noprof+0x86/0x800 [ 916.431607][T16963] ? __alloc_skb+0x156/0x410 [ 916.431633][T16963] ? __alloc_skb+0x35d/0x410 [ 916.431662][T16963] ? __alloc_skb+0x156/0x410 [ 916.431685][T16963] __alloc_skb+0x156/0x410 [ 916.431710][T16963] ? __alloc_skb+0x35d/0x410 [ 916.431733][T16963] ? __pfx___alloc_skb+0x10/0x10 [ 916.431758][T16963] ? __pfx_cgw_create_job+0x10/0x10 [ 916.431785][T16963] netlink_ack+0x15d/0xb80 [ 916.431814][T16963] netlink_rcv_skb+0x332/0x420 [ 916.431835][T16963] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 916.431858][T16963] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 916.431889][T16963] ? netlink_deliver_tap+0x1ae/0xd30 [ 916.431914][T16963] netlink_unicast+0x5aa/0x870 [ 916.431939][T16963] ? __pfx_netlink_unicast+0x10/0x10 [ 916.431970][T16963] netlink_sendmsg+0x8c8/0xdd0 [ 916.431994][T16963] ? __pfx_netlink_sendmsg+0x10/0x10 [ 916.432025][T16963] ____sys_sendmsg+0xa5d/0xc30 [ 916.432049][T16963] ? copy_msghdr_from_user+0x10a/0x160 [ 916.432067][T16963] ? __pfx_____sys_sendmsg+0x10/0x10 [ 916.432108][T16963] ___sys_sendmsg+0x134/0x1d0 [ 916.432128][T16963] ? __pfx____sys_sendmsg+0x10/0x10 [ 916.432162][ T8078] usb 3-1: config index 0 descriptor too short (expected 65069, got 45) [ 916.432176][T16963] __sys_sendmsg+0x16d/0x220 [ 916.432196][T16963] ? __pfx___sys_sendmsg+0x10/0x10 [ 916.432227][T16963] do_syscall_64+0xcd/0xf80 [ 916.432250][T16963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.432267][T16963] RIP: 0033:0x7f9c5f98f749 [ 916.432281][T16963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 916.432297][T16963] RSP: 002b:00007f9c607d2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 916.432313][T16963] RAX: ffffffffffffffda RBX: 00007f9c5fbe5fa0 RCX: 00007f9c5f98f749 [ 916.432324][T16963] RDX: 000000000004c0c8 RSI: 0000200000000000 RDI: 0000000000000003 [ 916.432334][T16963] RBP: 00007f9c607d2090 R08: 0000000000000000 R09: 0000000000000000 [ 916.432343][T16963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 916.432353][T16963] R13: 00007f9c5fbe6038 R14: 00007f9c5fbe5fa0 R15: 00007ffe256c0598 [ 916.432375][T16963] [ 916.479367][ T30] audit: type=1400 audit(6061798555.218:4169): avc: denied { setattr } for pid=16964 comm="syz.4.3077" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 916.480780][ T49] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 916.666453][ T10] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 916.677284][ T8078] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 916.757736][ T8078] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 916.770211][ T8078] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 916.780439][ T8078] usb 3-1: config 0 has no interfaces? [ 916.786020][ T8078] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 916.796050][ T8078] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.806047][ T8078] usb 3-1: config 0 descriptor?? [ 916.811108][ T49] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 916.824769][ T49] usb 2-1: config 0 interface 0 has no altsetting 0 [ 916.833160][ T49] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 916.842235][ T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.852579][ T49] usb 2-1: config 0 descriptor?? [ 916.860727][ T49] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 916.998438][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 917.004898][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 917.021057][ T10] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 917.030283][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.062899][ T10] usb 6-1: config 0 descriptor?? [ 917.070258][ T10] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 917.091962][ T10] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 917.350866][ T10] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 917.359370][T16928] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=16928 comm=syz.5.3067 [ 917.377085][ T791] usb 3-1: USB disconnect, device number 102 [ 917.482768][T16986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 917.517971][T16986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 917.532407][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 917.539583][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 917.557611][ T10] usb 5-1: can't read configurations, error -61 [ 917.725408][ T10] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 917.981215][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 917.988146][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 917.995950][ T10] usb 5-1: can't read configurations, error -61 [ 918.002673][ T10] usb usb5-port1: attempt power cycle [ 918.337160][T15200] usb 6-1: USB disconnect, device number 80 [ 918.353760][T15200] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 918.387676][ T10] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 918.409402][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 918.422062][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 918.429831][ T10] usb 5-1: can't read configurations, error -61 [ 918.572003][ T10] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 918.590608][ T791] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 918.612523][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 918.624146][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 918.637540][ T10] usb 5-1: can't read configurations, error -61 [ 918.652538][ T10] usb usb5-port1: unable to enumerate USB device [ 918.763449][ T791] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 918.774634][ T791] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 918.787315][ T791] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 918.797087][ T791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.814530][T16998] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 918.827373][ T791] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 918.944640][T17007] program syz.0.3086 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 919.065821][ T49] usb 3-1: USB disconnect, device number 103 [ 919.224147][ T8078] usb 2-1: USB disconnect, device number 109 [ 919.869929][T17014] FAULT_INJECTION: forcing a failure. [ 919.869929][T17014] name failslab, interval 1, probability 0, space 0, times 0 [ 919.883169][T17014] CPU: 0 UID: 0 PID: 17014 Comm: syz.0.3088 Tainted: G L syzkaller #0 PREEMPT(full) [ 919.883188][T17014] Tainted: [L]=SOFTLOCKUP [ 919.883192][T17014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 919.883198][T17014] Call Trace: [ 919.883203][T17014] [ 919.883207][T17014] dump_stack_lvl+0x16c/0x1f0 [ 919.883226][T17014] should_fail_ex+0x512/0x640 [ 919.883243][T17014] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 919.883255][T17014] should_failslab+0xc2/0x120 [ 919.883271][T17014] kmem_cache_alloc_noprof+0x83/0x770 [ 919.883284][T17014] ? skb_clone+0x190/0x3f0 [ 919.883298][T17014] ? skb_clone+0x190/0x3f0 [ 919.883308][T17014] skb_clone+0x190/0x3f0 [ 919.883320][T17014] netlink_deliver_tap+0xabd/0xd30 [ 919.883336][T17014] netlink_unicast+0x64c/0x870 [ 919.883352][T17014] ? __pfx_netlink_unicast+0x10/0x10 [ 919.883371][T17014] netlink_sendmsg+0x8c8/0xdd0 [ 919.883388][T17014] ? __pfx_netlink_sendmsg+0x10/0x10 [ 919.883418][T17014] ____sys_sendmsg+0xa5d/0xc30 [ 919.883443][T17014] ? copy_msghdr_from_user+0x10a/0x160 [ 919.883457][T17014] ? __pfx_____sys_sendmsg+0x10/0x10 [ 919.883478][T17014] ___sys_sendmsg+0x134/0x1d0 [ 919.883490][T17014] ? __pfx____sys_sendmsg+0x10/0x10 [ 919.883518][T17014] __sys_sendmsg+0x16d/0x220 [ 919.883530][T17014] ? __pfx___sys_sendmsg+0x10/0x10 [ 919.883550][T17014] do_syscall_64+0xcd/0xf80 [ 919.883566][T17014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.883578][T17014] RIP: 0033:0x7f9c5f98f749 [ 919.883587][T17014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 919.883598][T17014] RSP: 002b:00007f9c607d2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 919.883609][T17014] RAX: ffffffffffffffda RBX: 00007f9c5fbe5fa0 RCX: 00007f9c5f98f749 [ 919.883616][T17014] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 919.883623][T17014] RBP: 00007f9c607d2090 R08: 0000000000000000 R09: 0000000000000000 [ 919.883630][T17014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 919.883636][T17014] R13: 00007f9c5fbe6038 R14: 00007f9c5fbe5fa0 R15: 00007ffe256c0598 [ 919.883651][T17014] [ 919.883727][T17014] tipc: Enabling of bearer rejected, failed to enable media [ 920.131280][T17016] FAULT_INJECTION: forcing a failure. [ 920.131280][T17016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 920.148522][T17016] CPU: 1 UID: 0 PID: 17016 Comm: syz.0.3089 Tainted: G L syzkaller #0 PREEMPT(full) [ 920.148553][T17016] Tainted: [L]=SOFTLOCKUP [ 920.148559][T17016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 920.148571][T17016] Call Trace: [ 920.148578][T17016] [ 920.148585][T17016] dump_stack_lvl+0x16c/0x1f0 [ 920.148613][T17016] should_fail_ex+0x512/0x640 [ 920.148645][T17016] _copy_from_user+0x2e/0xd0 [ 920.148673][T17016] copy_msghdr_from_user+0x98/0x160 [ 920.148693][T17016] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 920.148717][T17016] ? __pfx__kstrtoull+0x10/0x10 [ 920.148743][T17016] ___sys_sendmsg+0xfe/0x1d0 [ 920.148764][T17016] ? __pfx____sys_sendmsg+0x10/0x10 [ 920.148806][T17016] ? __pfx___might_resched+0x10/0x10 [ 920.148829][T17016] __sys_sendmmsg+0x200/0x420 [ 920.148859][T17016] ? __pfx___sys_sendmmsg+0x10/0x10 [ 920.148887][T17016] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 920.148922][T17016] ? fput+0x70/0xf0 [ 920.148940][T17016] ? ksys_write+0x1ac/0x250 [ 920.148963][T17016] ? __pfx_ksys_write+0x10/0x10 [ 920.148990][T17016] __x64_sys_sendmmsg+0x9c/0x100 [ 920.149009][T17016] ? lockdep_hardirqs_on+0x7c/0x110 [ 920.149033][T17016] do_syscall_64+0xcd/0xf80 [ 920.149058][T17016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.149078][T17016] RIP: 0033:0x7f9c5f98f749 [ 920.149092][T17016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 920.149110][T17016] RSP: 002b:00007f9c607d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 920.149129][T17016] RAX: ffffffffffffffda RBX: 00007f9c5fbe5fa0 RCX: 00007f9c5f98f749 [ 920.149141][T17016] RDX: 000000000000fdef RSI: 00002000000020c0 RDI: 0000000000000004 [ 920.149153][T17016] RBP: 00007f9c607d2090 R08: 0000000000000000 R09: 0000000000000000 [ 920.149164][T17016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 920.149174][T17016] R13: 00007f9c5fbe6038 R14: 00007f9c5fbe5fa0 R15: 00007ffe256c0598 [ 920.149200][T17016] [ 920.632065][T17032] smc: net device hsr0 applied user defined pnetid SYZ2 [ 921.102187][T17039] tmpfs: Unknown parameter 'usrquota_inodeâÚ«¤Ø؃$it' [ 921.689117][ T30] audit: type=1800 audit(6061798560.092:4170): pid=17047 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.3098" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 921.713627][T17047] hfsplus: unable to find HFS+ superblock [ 921.720538][T17047] openvswitch: netlink: IPv4 tunnel dst address is zero [ 921.743849][ T8078] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 921.880060][T17052] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3100'. [ 921.904837][ T8078] usb 3-1: Using ep0 maxpacket: 16 [ 921.924146][ T8078] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 921.946069][ T8078] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 922.037869][ T8078] usb 3-1: config 0 interface 0 has no altsetting 0 [ 922.046007][T17057] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17057 comm=syz.5.3100 [ 922.065465][ T8078] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 922.074705][ T8078] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.680546][ T8078] usb 3-1: config 0 descriptor?? [ 922.695065][ T8078] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 922.890018][T17068] netlink: 'syz.0.3099': attribute type 2 has an invalid length. [ 923.207857][T17068] : entered promiscuous mode [ 923.336810][T17056] GUP no longer grows the stack in syz.0.3099 (17056): 200000005000-200000008000 (200000004000) [ 923.369269][T17056] CPU: 1 UID: 0 PID: 17056 Comm: syz.0.3099 Tainted: G L syzkaller #0 PREEMPT(full) [ 923.369307][T17056] Tainted: [L]=SOFTLOCKUP [ 923.369315][T17056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 923.369327][T17056] Call Trace: [ 923.369334][T17056] [ 923.369342][T17056] dump_stack_lvl+0x16c/0x1f0 [ 923.369372][T17056] gup_vma_lookup+0x1d2/0x220 [ 923.369400][T17056] fixup_user_fault+0x26e/0x540 [ 923.369429][T17056] fault_in_user_writeable+0x70/0xe0 [ 923.369455][T17056] futex_lock_pi+0x690/0x7c0 [ 923.369472][T17056] ? __pfx_futex_lock_pi+0x10/0x10 [ 923.369485][T17056] ? __futex_wait+0x24b/0x2f0 [ 923.369501][T17056] ? rcu_is_watching+0x12/0xc0 [ 923.369528][T17056] ? futex_private_hash_put+0x160/0x1b0 [ 923.369550][T17056] ? __pfx_futex_wake_mark+0x10/0x10 [ 923.369580][T17056] do_futex+0x11a/0x350 [ 923.369601][T17056] ? __pfx_do_futex+0x10/0x10 [ 923.369621][T17056] ? fput+0x70/0xf0 [ 923.369634][T17056] ? __sys_sendmsg+0x18c/0x220 [ 923.369652][T17056] __x64_sys_futex+0x1e0/0x4c0 [ 923.369676][T17056] ? __pfx___x64_sys_futex+0x10/0x10 [ 923.369697][T17056] ? xfd_validate_state+0x61/0x180 [ 923.369719][T17056] do_syscall_64+0xcd/0xf80 [ 923.369740][T17056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.369754][T17056] RIP: 0033:0x7f9c5f98f749 [ 923.369768][T17056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 923.369783][T17056] RSP: 002b:00007f9c607b1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 923.369798][T17056] RAX: ffffffffffffffda RBX: 00007f9c5fbe6090 RCX: 00007f9c5f98f749 [ 923.369808][T17056] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 923.369818][T17056] RBP: 00007f9c5fa13f91 R08: 0000000000000000 R09: 0000000000000000 [ 923.369827][T17056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 923.369836][T17056] R13: 00007f9c5fbe6128 R14: 00007f9c5fbe6090 R15: 00007ffe256c0598 [ 923.369857][T17056] [ 923.587540][T17076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 923.599256][T17076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 923.710961][ T791] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 923.751040][T17080] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 924.085678][ T791] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 924.159664][ T791] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 924.202862][ T791] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 924.217826][ T791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.229242][T17067] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 924.240668][ T791] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 924.563903][ T791] usb 2-1: USB disconnect, device number 110 [ 924.739153][T15200] usb 3-1: USB disconnect, device number 104 [ 926.018168][T17107] smc: net device hsr0 applied user defined pnetid SYZ2 [ 926.205445][T15200] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 926.415295][T15200] usb 6-1: Using ep0 maxpacket: 8 [ 926.423083][T15200] usb 6-1: unable to get BOS descriptor or descriptor too short [ 926.443966][T15200] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 926.461518][T15200] usb 6-1: can't read configurations, error -61 [ 926.619244][T15200] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 926.804875][T15200] usb 6-1: Using ep0 maxpacket: 8 [ 926.906930][T15200] usb 6-1: unable to get BOS descriptor or descriptor too short [ 927.019759][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 927.030125][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 927.040503][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 927.101401][T15200] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 927.113662][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 927.123591][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 927.124356][T15200] usb 6-1: can't read configurations, error -61 [ 927.176099][T15200] usb usb6-port1: attempt power cycle [ 927.697858][T15200] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 927.730224][T15200] usb 6-1: Using ep0 maxpacket: 8 [ 927.762225][T15200] usb 6-1: unable to get BOS descriptor or descriptor too short [ 927.845621][T15200] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 927.864110][T15200] usb 6-1: can't read configurations, error -61 [ 927.876089][ T791] syz1: Port: 1 Link DOWN [ 927.951951][ T2965] smc: removing ib device syz1 [ 928.049094][T15200] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 928.094044][T15200] usb 6-1: Using ep0 maxpacket: 8 [ 928.148973][T15200] usb 6-1: unable to get BOS descriptor or descriptor too short [ 928.162505][T15200] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 928.170263][T15200] usb 6-1: can't read configurations, error -61 [ 928.177479][T15200] usb usb6-port1: unable to enumerate USB device [ 928.360696][ T5927] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 928.624428][ T5927] usb 5-1: Using ep0 maxpacket: 16 [ 928.765018][ T5927] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 928.799874][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.877746][ T5927] usb 5-1: config 0 descriptor?? [ 928.914082][ T5927] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 929.222009][T17127] chnl_net:caif_netlink_parms(): no params data found [ 929.317440][ T5830] Bluetooth: hci2: command tx timeout [ 930.310330][T17127] bridge0: port 1(bridge_slave_0) entered blocking state [ 930.337302][T17127] bridge0: port 1(bridge_slave_0) entered disabled state [ 930.456817][T17127] bridge_slave_0: entered allmulticast mode [ 930.478325][T17127] bridge_slave_0: entered promiscuous mode [ 930.496305][T17127] bridge0: port 2(bridge_slave_1) entered blocking state [ 930.559243][T17127] bridge0: port 2(bridge_slave_1) entered disabled state [ 930.581313][T17127] bridge_slave_1: entered allmulticast mode [ 930.619625][T17127] bridge_slave_1: entered promiscuous mode [ 930.750548][T17127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 930.767266][T17127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 930.966980][T17127] team0: Port device team_slave_0 added [ 931.011883][T17127] team0: Port device team_slave_1 added [ 931.084292][T17175] comedi: valid board names for 8255 driver are: [ 931.098919][T17127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 931.102008][T17175] 8255 [ 931.120840][T17175] comedi: valid board names for vmk80xx driver are: [ 931.131292][T17127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 931.189967][T17127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 931.204304][T17175] vmk80xx [ 931.207357][T17175] comedi: valid board names for usbduxsigma driver are: [ 931.242132][T17127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 931.252039][T17175] usbduxsigma [ 931.266123][T17175] comedi: valid board names for usbduxfast driver are: [ 931.274422][T17127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 931.276218][T17175] usbduxfast [ 931.367272][T17175] comedi: valid board names for usbdux driver are: [ 931.368196][T17127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 931.402792][ T2965] ------------[ cut here ]------------ [ 931.408996][ T2965] GID entry ref leak for dev syz1 index 2 ref=1 [ 931.415481][ T2965] WARNING: drivers/infiniband/core/cache.c:806 at gid_table_release_one+0x1ad/0x450, CPU#0: kworker/u8:9/2965 [ 931.427455][ T2965] Modules linked in: [ 931.432308][ T2965] CPU: 0 UID: 0 PID: 2965 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 931.444070][ T2965] Tainted: [L]=SOFTLOCKUP [ 931.448622][ T2965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 931.459101][ T2965] Workqueue: ib-unreg-wq ib_unregister_work SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 931.465866][ T2965] RIP: 0010:gid_table_release_one+0x1b6/0x450 [ 931.472201][ T2965] Code: 4c 24 38 48 c1 e8 03 4d 01 fc 48 89 44 24 08 eb 54 48 89 34 24 e8 aa 67 4d f9 48 8d 3d 53 af 23 08 48 8b 34 24 89 e9 44 89 f2 <67> 48 0f b9 3a e8 90 67 4d f9 48 89 d8 41 83 c6 01 48 c1 e8 03 42 [ 931.492285][ T2965] RSP: 0018:ffffc9000c0a7ac8 EFLAGS: 00010293 [ 931.498880][ T2965] RAX: 0000000000000000 RBX: ffff88807dde5400 RCX: 0000000000000001 [ 931.507269][ T2965] RDX: 0000000000000002 RSI: ffff88802ae89a20 RDI: ffffffff90952e20 [ 931.515611][ T2965] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffed100ad52160 [ 931.524005][ T2965] R10: ffff888056a90b03 R11: ffffffff8228beeb R12: ffffed100fbbca9b [ 931.524466][ T30] audit: type=1400 audit(6061798569.288:4171): avc: denied { recv } for pid=6710 comm="kworker/u8:20" saddr=10.128.0.169 src=35666 daddr=10.128.0.232 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 931.532338][ T2965] R13: ffff8880337ec000 R14: 0000000000000002 R15: dffffc0000000000 [ 931.566926][ T2965] FS: 0000000000000000(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 931.576137][ T2965] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 931.582999][ T2965] CR2: 000020000061d000 CR3: 000000007df30000 CR4: 00000000003526f0 [ 931.591338][ T2965] Call Trace: [ 931.594947][ T2965] [ 931.598189][ T2965] ib_device_release+0xef/0x1e0 [ 931.603281][ T2965] ? __pfx_ib_device_release+0x10/0x10 [ 931.608958][ T2965] device_release+0xa4/0x240 [ 931.613793][ T2965] kobject_put+0x1ef/0x6f0 [ 931.618450][ T2965] put_device+0x1f/0x30 [ 931.624134][ T2965] process_one_work+0x9ba/0x1b20 [ 931.629309][ T2965] ? __pfx_netdevice_event_work_handler+0x10/0x10 [ 931.635988][ T2965] ? __pfx_process_one_work+0x10/0x10 [ 931.641617][ T2965] ? assign_work+0x1a0/0x250 [ 931.646470][ T2965] worker_thread+0x6c8/0xf10 [ 931.651307][ T2965] ? __pfx_worker_thread+0x10/0x10 [ 931.656721][ T2965] kthread+0x3c5/0x780 [ 931.660811][ T2965] ? __pfx_kthread+0x10/0x10 [ 931.665464][ T2965] ? rcu_is_watching+0x12/0xc0 [ 931.670244][ T2965] ? __pfx_kthread+0x10/0x10 [ 931.674160][ T5830] Bluetooth: hci2: command tx timeout [ 931.674882][ T2965] ret_from_fork+0x983/0xb10 [ 931.684893][ T2965] ? __pfx_ret_from_fork+0x10/0x10 [ 931.690055][ T2965] ? __switch_to+0x7af/0x10d0 [ 931.694771][ T2965] ? __pfx_kthread+0x10/0x10 [ 931.699427][ T2965] ret_from_fork_asm+0x1a/0x30 [ 931.704382][ T2965] [ 931.707563][ T2965] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 931.714828][ T2965] CPU: 0 UID: 0 PID: 2965 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 931.725831][ T2965] Tainted: [L]=SOFTLOCKUP [ 931.730130][ T2965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 931.740173][ T2965] Workqueue: ib-unreg-wq ib_unregister_work [ 931.746073][ T2965] Call Trace: [ 931.749340][ T2965] [ 931.752255][ T2965] dump_stack_lvl+0x3d/0x1f0 [ 931.756836][ T2965] vpanic+0x640/0x6f0 [ 931.760797][ T2965] ? gid_table_release_one+0x1ad/0x450 [ 931.766230][ T2965] panic+0xca/0xd0 [ 931.769927][ T2965] ? __pfx_panic+0x10/0x10 [ 931.774327][ T2965] ? check_panic_on_warn+0x1f/0xb0 [ 931.779426][ T2965] check_panic_on_warn+0xab/0xb0 [ 931.784351][ T2965] __warn+0x108/0x3c0 [ 931.788319][ T2965] __report_bug+0x2a0/0x520 [ 931.792805][ T2965] ? gid_table_release_one+0x1ad/0x450 [ 931.798274][ T2965] ? __pfx___report_bug+0x10/0x10 [ 931.803295][ T2965] report_bug_entry+0xe1/0x290 [ 931.808045][ T2965] ? gid_table_release_one+0x1b6/0x450 [ 931.813487][ T2965] handle_bug+0x18a/0x260 [ 931.817814][ T2965] exc_invalid_op+0x17/0x50 [ 931.822312][ T2965] asm_exc_invalid_op+0x1a/0x20 [ 931.827146][ T2965] RIP: 0010:gid_table_release_one+0x1b6/0x450 [ 931.833197][ T2965] Code: 4c 24 38 48 c1 e8 03 4d 01 fc 48 89 44 24 08 eb 54 48 89 34 24 e8 aa 67 4d f9 48 8d 3d 53 af 23 08 48 8b 34 24 89 e9 44 89 f2 <67> 48 0f b9 3a e8 90 67 4d f9 48 89 d8 41 83 c6 01 48 c1 e8 03 42 [ 931.852786][ T2965] RSP: 0018:ffffc9000c0a7ac8 EFLAGS: 00010293 [ 931.858838][ T2965] RAX: 0000000000000000 RBX: ffff88807dde5400 RCX: 0000000000000001 [ 931.866789][ T2965] RDX: 0000000000000002 RSI: ffff88802ae89a20 RDI: ffffffff90952e20 [ 931.874744][ T2965] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffed100ad52160 [ 931.882696][ T2965] R10: ffff888056a90b03 R11: ffffffff8228beeb R12: ffffed100fbbca9b [ 931.890648][ T2965] R13: ffff8880337ec000 R14: 0000000000000002 R15: dffffc0000000000 [ 931.898608][ T2965] ? kasan_save_free_info+0x3b/0x60 [ 931.903808][ T2965] ? gid_table_release_one+0x1a6/0x450 [ 931.909261][ T2965] ib_device_release+0xef/0x1e0 [ 931.914103][ T2965] ? __pfx_ib_device_release+0x10/0x10 [ 931.919551][ T2965] device_release+0xa4/0x240 [ 931.924139][ T2965] kobject_put+0x1ef/0x6f0 [ 931.928546][ T2965] put_device+0x1f/0x30 [ 931.932686][ T2965] process_one_work+0x9ba/0x1b20 [ 931.937618][ T2965] ? __pfx_netdevice_event_work_handler+0x10/0x10 [ 931.944029][ T2965] ? __pfx_process_one_work+0x10/0x10 [ 931.949410][ T2965] ? assign_work+0x1a0/0x250 [ 931.954006][ T2965] worker_thread+0x6c8/0xf10 [ 931.958608][ T2965] ? __pfx_worker_thread+0x10/0x10 [ 931.963712][ T2965] kthread+0x3c5/0x780 [ 931.967772][ T2965] ? __pfx_kthread+0x10/0x10 [ 931.972354][ T2965] ? rcu_is_watching+0x12/0xc0 [ 931.977100][ T2965] ? __pfx_kthread+0x10/0x10 [ 931.981674][ T2965] ret_from_fork+0x983/0xb10 [ 931.986250][ T2965] ? __pfx_ret_from_fork+0x10/0x10 [ 931.991345][ T2965] ? __switch_to+0x7af/0x10d0 [ 931.996010][ T2965] ? __pfx_kthread+0x10/0x10 [ 932.000594][ T2965] ret_from_fork_asm+0x1a/0x30 [ 932.005380][ T2965] [ 932.008660][ T2965] Kernel Offset: disabled [ 932.012971][ T2965] Rebooting in 86400 seconds..