last executing test programs: 18.851574408s ago: executing program 2 (id=3058): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000005000000080000000f"], 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(0x3) r2 = add_key$keyring(0x0, &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='user\x00', 0x0, &(0x7f0000000040)="feffa3028a71cb7e981ecbf7ded9179cffc052207f855b36ee13b5245412a17c213e40", 0x23, r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) io_uring_enter(0xffffffffffffffff, 0x2273, 0x85e3, 0x4, &(0x7f00000001c0)={[0x81]}, 0x8) r3 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r4, &(0x7f00000001c0)='\\', 0x1) r5 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000040)) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r6, 0xc06c4124, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='GPL\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="4be88fa3027b", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x8, 0x3a, 0xff, @local, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0x71, 0x7}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_usb_connect(0x3, 0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000005b1710720500cbc9bb000203010902340001fb0000"], 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000b4000000002700003d918cae8f787928d2cd86ba5b351f477381d9bd067a137b77f09791fd092a1bb37d2ab11c3554b335727eed19bcf2c26db1c4ed3cc17a1ac63ef05b457d883e5151ecb043b7ea8a06d960bf9e3ac18aea85e3b3d2a2a012507789c7a3e58e"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r8, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r9}, 0xc) 16.343310841s ago: executing program 3 (id=3065): accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000013906c08e90f01db9be9010203010902120001000000000904"], 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14) socket(0x10, 0x3, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='\x00', 0x89901) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat(r1, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x118) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000340), 0xc00, &(0x7f0000000240)=ANY=[@ANYBLOB='mpol=bind']) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000020301000000000000000000000000000800010001000000e211c99ef8e44607a4f006ba03374bc9e5508e443ede4b50b0be6f5082f76025ca49133fbb1e438f2e7d4ec1f6486b2219"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="20000000030301010000000000000600000000000c00020000000003000000ff160d85bca3e6eabf4f0749b3dcb2c6337119557b9c9e4eda8e78c761e4c04df40d304c2f30e32575e0d5f9e27f095c0b45732c09d8b5eabc3720788681f5ab"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x800, 0x0, 0x437a, 0x0, r2}, &(0x7f0000000240), &(0x7f0000000100), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_NAPI(r5, 0x1b, &(0x7f0000000040)={0xffffff01, 0x3}, 0x1) 15.024997328s ago: executing program 2 (id=3068): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000090a01040000b4c0fce27293f81b000208000a400000000008000640ffffff000900010073797a3000000000080005400000001c0900020073797a3200000000080003400000008c38000980340002800c00018008000140000000090c00018008000140000000080c00018008000140000000040c0001800800014000000002140000001000010000000000000000000784000a"], 0xac}, 0x1, 0x0, 0x0, 0x4404c810}, 0x0) 12.681719886s ago: executing program 1 (id=3070): connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x40004) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4bfa, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x1f, 0x101, 0x100}}) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x5, 0x2000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102384, 0x18ff0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@private=0xa010102, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100020000000843550400000000000001090224000100000020090400030503000200092104000001222800090581034000fdffffffffb0b1c1394d7ce573cb50db"], 0x0) syz_usb_control_io(r4, &(0x7f0000000000)={0x2c, &(0x7f00000005c0)=ANY=[@ANYBLOB='\x00!('], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) syz_open_dev$MSR(0x0, 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x410480, 0x0) ioctl$DVB_DVR_DMX_EXPBUF(r5, 0xc00c6f3e, &(0x7f0000000180)={0xa, 0x80000, r5}) read$msr(r6, 0x0, 0xffffffffffffff02) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) 11.748524411s ago: executing program 2 (id=3072): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5ff0a6c000000060a0b04000000000000000002000000400004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a3000000000140001800d00010073796e70726f7879000000000900010073797a30000000000900020073797a320000000020000000020a01080000000000000000030000090c000450000000000000000214000000020a010400000000000000000200000a14000000110001"], 0xc8}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 11.26239698s ago: executing program 2 (id=3074): connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x40004) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) syz_clone(0x800, &(0x7f0000000080), 0x0, &(0x7f00000000c0), &(0x7f0000000280), &(0x7f00000003c0)="c485411436b5b8d22e402f96") r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4bfa, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x1f, 0x101, 0x100}}) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x5, 0x2000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102384, 0x18ff0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@private=0xa010102, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100020000000843550400000000000001090224000100000020090400030503000200092104000001222800090581034000fdffffffffb0b1c1394d7ce573cb50db"], 0x0) syz_usb_control_io(r4, &(0x7f0000000000)={0x2c, &(0x7f00000005c0)=ANY=[@ANYBLOB='\x00!('], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x800}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) syz_open_dev$MSR(0x0, 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x410480, 0x0) ioctl$DVB_DVR_DMX_EXPBUF(r5, 0xc00c6f3e, &(0x7f0000000180)={0xa, 0x80000, r5}) read$msr(r6, 0x0, 0xffffffffffffff02) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 10.032943051s ago: executing program 3 (id=3075): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000080)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f00000000c0), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b7020000b0ffffffbfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x702, 0x36, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd4b3547f2cbfad47001bd34d04351caf1f9a07be047c25d7670ea4a41b8a6800c0de87b6f8e6a7256", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.832853465s ago: executing program 3 (id=3077): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x2000000000001005, 0x19dff, 0x4}}}, 0x90) io_uring_setup(0x3450, 0x0) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x1000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e23, @local}}, 0x5, 0x5, 0x0, 0x200}, &(0x7f00000004c0)=0x98) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3}) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0xfcfd, 0x25dfdbfb, {0x2, 0x0, 0x2}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) file_setattr(r7, 0x0, 0x0, 0x0, 0x1000) 8.822396682s ago: executing program 3 (id=3078): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x2c, 0x3e, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="725eb862"]}]}, 0x2c}, 0x1, 0xffffff8c, 0x0, 0xc000}, 0x4040) 8.732737754s ago: executing program 4 (id=3079): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647", 0x9}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x4048800) recvmsg$can_j1939(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f00000007c0)=""/4096, 0x1000}], 0x1}, 0x1003) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003080)={&(0x7f0000001d40)={0x288, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x21c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x208, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '$]%^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'gretap0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x63a51532}]}, {0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '.^,$&!-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'skcipher\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'cbc(des3_ede)\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'cbc(des3_ede)\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'skcipher\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'skcipher\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'skcipher\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x87\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff8001}]}, {0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'cbc(des3_ede)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'skcipher\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'cbc(des3_ede)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'cbc(des3_ede)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'skcipher\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'skcipher\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'cbc(des3_ede)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x92e0e2d}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x55c}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '*&\x04{\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}]}]}, 0x288}, 0x1, 0x0, 0x0, 0x41}, 0x20000095) 8.716921178s ago: executing program 1 (id=3080): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) epoll_create(0x7) request_key(0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040613b33392b07bdfa8882e9617ff887c7619790f34bb", @ANYRESDEC=0x0], 0x6) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0xfffe}, 0xfffffffffffffe30) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') read$FUSE(r3, &(0x7f0000001300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) preadv(r3, &(0x7f0000000440)=[{&(0x7f0000000340)=""/255, 0xff}], 0x1, 0x7, 0x7) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, 0x0, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40408d4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYRES16=r4], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0xb}, 0xfffffffffffffdcd}, 0x94) socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00'}) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000bc0)={0x1, @sdr={0x41416770, 0x66c2}}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x890}, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 8.165005287s ago: executing program 0 (id=3081): r0 = fanotify_init(0x1, 0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r3, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x9, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x8, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x83, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x455, 0x40001010, r4, 0x0) fanotify_mark(r0, 0x7e, 0x8000022, r4, 0x0) 8.097955176s ago: executing program 4 (id=3082): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_clone3(&(0x7f0000000080)={0x1a4060100, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) 7.535854247s ago: executing program 3 (id=3083): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4040845}, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) clock_getres(0x8, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x8, 0xfff3}, {}, {0xf, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @rand_addr=0x64010102}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x40, &(0x7f0000000300)=0xffffff7f, 0x4) getsockopt$SO_TIMESTAMP(r7, 0x1, 0x40, 0x0, &(0x7f0000000ac0)) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x38) r10 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) ioctl$XFS_IOC_SET_RESBLKS(r10, 0xc0105872, &(0x7f0000000140)={0x1d, 0x8}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f00006bf000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000080)="3ed9df3e0fc76b039a0c00b5000f6e7f8f0f01ca67660f3806270fc76ef30f090f01c80f01cf", 0x26}], 0x1, 0x20, &(0x7f0000000000)=[@cr4={0x1, 0x9e2}], 0x1) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f00000000c0)) 6.813613563s ago: executing program 2 (id=3084): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000"], 0xe4}}, 0x800) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000002c0)) ioctl$PPPIOCSACTIVE(r7, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r7, 0x0, 0xff40) write$ppp(r7, &(0x7f0000000200)="bc72", 0x2) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x5, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xff85}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x8}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) readlink(&(0x7f0000000540)='./cgroup\x00', &(0x7f0000000ac0)=""/157, 0x9d) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r9 = dup3(r8, r0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000180)=[@decrefs], 0x0, 0x0, 0x0}) 6.654799873s ago: executing program 4 (id=3085): userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x80000001, 0x162842) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x2000, {0x0, 0x0, 0xfffffffffffffffd, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e00000010e200", [0x0, 0x400]}}) r3 = dup(r2) write$binfmt_aout(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="cc000205420100003f010000fbffffffe90200000400000000000000000000006d9c3e1275d5ae4f2543c06cb8329607a6c46dc146e4df2932e3048b349131889886ce03cead51cfd0be7e3a7625f42433c7eb3330722cb11c6989c00441e3b78b2c7d6108b6b41824bc25608dce89731ac4d4b61862dcbb3020a77e8269fda18c"], 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) setreuid(0xee01, 0x0) setreuid(0x0, 0x0) io_setup(0x2, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) io_cancel(0x0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 6.411200808s ago: executing program 1 (id=3086): syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100008010bd401ef66c60cc1f820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f445b218ed25905000000000000003af7131c3527f97740ac4df4f55d9e3959c4aaded3482af3cf93879facd28044eea15bccd6b2312a"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x2941, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000008380)={0x28, 0x12, 0x1, 0x0, 0x8000, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @nested={0x8, 0x1d, 0x0, 0x1, [@nested={0x4, 0x141}]}]}, 0x28}], 0x1, 0x0, 0x0, 0x8001}, 0x0) close(r0) 6.287927171s ago: executing program 3 (id=3087): r0 = inotify_init1(0x0) r1 = dup(r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd700001dcdf25070000000000010001000017000201aaaaaaaaaaaa"], 0x24}, 0x1, 0x0, 0x0, 0x173f5c0030b5cd57}, 0x80) setsockopt$inet_int(r2, 0x0, 0x19, &(0x7f0000000140)=0x400030, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xfe, 0x1008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r9 = io_uring_setup(0x9f9, &(0x7f0000000040)={0x0, 0x76be, 0x8, 0x3, 0x20002f7}) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x0, 0x3, 0x3, 0x2, {0xa, 0x4e20, 0x9a1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}}, 0x80, 0x0}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffe4, &(0x7f00000003c0)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x0) io_uring_enter(r9, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 4.088106067s ago: executing program 4 (id=3089): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x6d91fb6102d8910c, 0x0, 0x0) writev(r2, &(0x7f0000003b40), 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x49, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000040)="415b7ac700000000", 0x8) r9 = accept(r8, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmsg(r9, &(0x7f000000b680)={0x0, 0xfffffe58, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb7b}], 0x2, 0x0, 0xf4}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=@getchain={0x24, 0x66, 0x803, 0x70bd2e, 0x25dfdc03, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xb}, {0xffff, 0xfff1}, {0x6, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x48}, 0x8000) 3.686557829s ago: executing program 0 (id=3090): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010027bd7000fbd3df2502000000410004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) 2.952027076s ago: executing program 0 (id=3091): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000ff00da000000000000000000000000426f9150ef73fe12fe2d33895dac00e6ed5450"], 0x50) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x9) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'rose0\x00'}) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="18004000d40001002bbd70000200000007000000", @ANYRES64=r1], 0x18}, 0x1, 0x0, 0x0, 0x5}, 0x80c4) (async) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) rmdir(&(0x7f00000004c0)='./cgroup/../file0\x00') setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) (async) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e005", 0x26}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a0", 0xca}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000000, 0xa131, 0xffffffffffffffff, 0xa9d0d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r5, &(0x7f00000000c0), 0x0, 0x2000, 0x0) (async) syz_emit_ethernet(0x22, &(0x7f00000000c0)=ANY=[], 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x1, &(0x7f0000000340)) (async) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) (async) syz_open_dev$ndb(0x0, 0x0, 0x8180) 2.864906483s ago: executing program 1 (id=3092): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000000)=0x9, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x1, 0xffffffffffffffff}, {"0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000045b45011c8c377fe00"}}) 2.719973963s ago: executing program 4 (id=3093): socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x0, 0x0, 0xa, 0x0, 0x9}, @exit={0x95, 0x0, 0x7b00}]}, &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000480)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000300000000001019078ac1e0001ac1414aa030490781200183f2500000000000000000100007f0000017f00000112a075148c1d3d5ee1eda56cf1beaa9e6ab6d950713a967dae0e01db625455cf02507a4834d080d919b1e0e5b088ea0acd"], 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000200025a729bd0ae2fdfddf250a0000cdff0000010200010008000600000000000c0014"], 0x30}, 0x1, 0x0, 0x0, 0xc001}, 0x4000890) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/udp6\x00') preadv(r4, 0x0, 0x0, 0x2a, 0xd) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x7, 0xa, 0x3, 0x1}) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2d}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000000100)={&(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{0x9, 0x10001}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000440)=""/53, 0x35}], 0x1}}], 0x48, 0x20000080}, 0x0) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x280000, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00000000000000f5ff07000800000010000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="000000000000000000000000000600"/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r8, 0x0, &(0x7f0000000200)=""/76}, 0x20) 2.680982572s ago: executing program 0 (id=3094): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0xd1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002600), 0xffffffffffffffff) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="21072abd7000fcdbdf251c"], 0x1c}, 0x1, 0x0, 0x0, 0x4044085}, 0x24008840) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.440679273s ago: executing program 0 (id=3095): r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000006800e978000000000000da0008000000000000000400040014454df6019d3ed358f9ba77ae1e92ad0dc88d47370d6fbb9a0d773a719cc76f9f2fdbf7a64adfcabc09d09c98d1495d01128dbfa2db68742281dbc8a33ba6701d9b62b6cf1e6a5ceac7c3faa025e0eee5a075ea29aaf86ad8b0e8aacb0f2a4ba34488530e9bcc47d6100d1982e0bfe88fde426469d78d7dc4b7d36c1787f199ef4b6c6d44f48a1ca432c1adec8ac9482d2e7003ede585fa7090eddc50552348c6bac51d8f00fbc80580bfeedf91df5c7f8063b910086491d656bb9ec2c53a01dc60ec"], 0x1c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001800dd8d00000000fedbdf2502201000fd00fe020000002008001e000100000008000f00020000000231ca29e26b7ac4150d7c2ff0358cb18ffd27d94b0949c7ea00e03bf1f3317bced7333291f462326aa6ca2c0c1aa44d274800d13d66115afc70fa77cd60d8b51ffe7ebd30a99c74beb6ad99f5e8ca990752a8e2b42ece0c2d8be7a21c4ca6a68078b46eceb59ccddb5162b249a8e19aed1ea773f664d90e5497dac0283729bf"], 0x2c}, 0x1, 0x0, 0x0, 0x400a044}, 0x20004090) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006804090300000000000000000a00000000000000040004000800010000000000"], 0x24}}, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x3d) write(r1, &(0x7f0000000000)="41000200010001", 0x7) close_range(r1, r1, 0x0) write(r1, &(0x7f0000000040)="8fd38ce89907bc690852db6aaa4c47073172e6c0", 0x14) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000000206010800000000000001000500000005000100070000000900020073797a30000000000c00078008001240fffffffe050004000000000012000300686173683a6e65742c706f7274000000050005000a"], 0x58}, 0x1, 0x0, 0x0, 0x40280d5}, 0x0) read$msr(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) 2.392098048s ago: executing program 1 (id=3096): socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x174, 0xc, 0xa, 0x373737da35221fda, 0x70bd27, 0x25dfdbfc, {0x2, 0x0, 0x4}, [@nested={0x9e, 0xcc, 0x0, 0x1, [@generic="a2c152db8b3769", @generic="489356267a4c222cff28de54684d228a112407cf2217274bae5850c1ee7602900d60eb0e328b117ad16116531ff7685d68aa5bc6217abe3c7e8ca303c82e00cea9e507ca2f6e01750245518c8f620d6e9c92286f805e9ef2c7980c8c9560023c80d3c4087248b31acf0881e078ab252f6a947910ebcb753d6e15e1e2d94959fa14f2b96d0fb634b13ce8ee74c120aa67098cbb"]}, @typed={0x4, 0x32, 0x0, 0x0, @binary}, @typed={0x4, 0x4d}, @typed={0x8, 0x55, 0x0, 0x0, @u32=0x1}, @generic="23888da6219e5ceeb964b8e3691c2a495025daea7412ddea8542d382bcaa53822cd3aa26178e001dcc62a24e7d6ebcfea0d414690e3712c2ec82950f1a253451f52016ee6db259cc4d62a249b670248ceecb1070ceea3e1c7a23390fece1c98b43d30a23f096ce678e7a17f1b231327111f1ac4231c7d1c11ae2bde08ddd89e8a681821bbd7b408d3a8d1cca2e849f1a29a56c22e6a3b2dd57453e710cae77cac11c575c2ac6f053560f727d5c0a"]}, 0x174}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x2b) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x561d0076, 0xa, 0x1, 0x0, 0xfd}) syz_init_net_socket$nl_generic(0x9, 0x3, 0x10) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000140)={0x0, "609e4531fb94e2e446d41cb6ca52e3009fbeaa339bab28ac9144a16e8bd899e8", 0x1, 0x7, 0x401, 0x2, 0x2}) flistxattr(r1, &(0x7f00000000c0)=""/89, 0x59) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000080)=0x1000) 638.040878ms ago: executing program 0 (id=3097): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) syz_genetlink_get_family_id$tipc2(&(0x7f0000002e40), 0xffffffffffffffff) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f000000b800)={0x24, @none={0x0, 0x3}}, 0x14, 0x0, 0x1, 0x0, 0x0, 0x200080e0}, 0x20044050) sendmsg$nl_generic(r0, 0x0, 0x4844) 457.506563ms ago: executing program 2 (id=3098): syz_emit_ethernet(0x4e, &(0x7f0000000240)=ANY=[@ANYBLOB="0000ddffffff0080c200000086dd6000f42000183a01fc000000000000000000000000000001fe80000000000000000000000000003e8300907800090000fe8000000000000000000000001e20a51731ba397da7472c589ab9fff42d331f72c0b3cad9a14ac0efc2c99c60ccefda71062b42784c0c6d7d14f2ef0441704f39e31e638a7978ea4be0c1936f6f883a8d1768a82d16d0fffb000000"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x9, 0x14, 0x200, &(0x7f0000019900)="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"}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x140, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) readv(r5, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r6 = socket$kcm(0x2, 0xa, 0x2) r7 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000005c0)={r8, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x12, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x8, 0x40000000000000]}}) r9 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88102) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001d00810ce00f80ecdb4cb9f207c804a01f000000810006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000001280)={r4, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) r11 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x68040200) mmap(&(0x7f00008d1000/0x2000)=nil, 0x2000, 0x3, 0x8031, r11, 0xfdffa000) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r13 = gettid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0xa23, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r13}]}, 0x24}, 0x1, 0x20000000, 0x0, 0x4008880}, 0x20000084) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000e5"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r14}]}, &(0x7f0000000180)='syzkaller\x00', 0x28000000, 0x0, 0x0, 0x0, 0x20}, 0x94) 244.069016ms ago: executing program 1 (id=3099): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x8002, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$evdev(&(0x7f0000000240), 0x7, 0x100) r3 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x22802, 0x0) writev(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r6, 0x0, 0x4, 0x0, 0x0) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x0, 0x44010) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x240}, 0xe) setsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, &(0x7f0000000000)={0x2, 0x8}, 0x2) sendmsg$NL80211_CMD_PROBE_CLIENT(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x24000094) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000040)={{0x3, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r8, 0x80e85411, &(0x7f00000000c0)) 0s ago: executing program 4 (id=3100): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r0, 0x40015b19, &(0x7f0000000000)={0x2, 0xfffffffe, 0x7, 0xff, 0x1}) write$char_usb(r0, &(0x7f0000000100)='l', 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYRESOCT=r0], 0x5c}, 0x1, 0x0, 0x0, 0x85}, 0x4000000) r1 = socket(0x10, 0x4, 0xffffffff) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_GET_HW_INFO(r2, 0x3b8a, &(0x7f00000000c0)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/wakeup_count', 0x0, 0x50) io_setup(0x100, &(0x7f00000009c0)=0x0) io_submit(r4, 0x1, &(0x7f00000002c0)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x40, r3, &(0x7f0000000340)="fe35e9f50d", 0x5, 0x10000000005971}]) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) r5 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r5, 0x89f2, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) kernel console output (not intermixed with test programs): ±¨ä“›å¯£ï»¦éµ¬î‘—ഊ扖瞌댷剫㎙邲鲛兖ê¡ï€°á®¿ä¬ä­žè™ƒæ´«ç°¶â‹½ë £æ³™î§”Щ鎙鈛駙ᥘㆱâ“ὧíŸëŸ›í„»ï¾¼á“°æª§ [ 789.527133][ T1221] usb 2-1: SerialNumber: а [ 789.715535][ T5717] usb 3-1: USB disconnect, device number 53 [ 789.796034][ T1221] usb 2-1: USB disconnect, device number 81 [ 789.988580][T17131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2747'. [ 790.208410][T17140] netlink: 'syz.4.2751': attribute type 1 has an invalid length. [ 790.264362][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 790.264379][ T30] audit: type=1400 audit(1781433828.658:940): avc: denied { listen } for pid=17139 comm="syz.4.2751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 790.367785][T17140] 8021q: adding VLAN 0 to HW filter on device bond10 [ 791.274442][ T29] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 791.445409][ T29] usb 1-1: Using ep0 maxpacket: 8 [ 791.459489][ T29] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 791.481207][ T29] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 791.518434][ T29] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 791.546575][ T29] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 791.578205][ T29] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 791.609910][ T29] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 791.626945][ T10] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 791.638275][ T29] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 791.667260][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.800987][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 791.823175][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 791.845911][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 791.874434][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 791.894365][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.917604][ T10] usb 2-1: config 0 descriptor?? [ 791.923240][ T29] usb 1-1: GET_CAPABILITIES returned 0 [ 791.930272][ T29] usbtmc 1-1:16.0: can't read capabilities [ 792.168490][ T5717] usb 1-1: USB disconnect, device number 93 [ 792.282217][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 792.289012][ T1313] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 792.524583][ T29] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 792.562172][ T10] plantronics 0003:047F:FFFF.001F: reserved main item tag 0xd [ 792.590259][ T10] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 792.762813][ T29] usb 5-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 176, changing to 11 [ 792.844885][ T29] usb 5-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 792.940219][ T29] usb 5-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 793.006617][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 793.029958][ T29] usb 5-1: New USB device found, idVendor=06cb, idProduct=2968, bcdDevice= 0.00 [ 793.039554][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.206457][ T29] usb 5-1: config 0 descriptor?? [ 793.242099][T17168] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 793.294458][T17181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2764'. [ 793.705755][ T29] itetech 0003:06CB:2968.0020: unknown main item tag 0x2 [ 793.740517][ T29] itetech 0003:06CB:2968.0020: unknown main item tag 0x7 [ 793.788656][ T29] itetech 0003:06CB:2968.0020: hidraw1: USB HID v0.08 Device [HID 06cb:2968] on usb-dummy_hcd.4-1/input0 [ 793.969445][ T5349] usb 2-1: reset high-speed USB device number 82 using dummy_hcd [ 794.077421][T17168] binder: BINDER_SET_CONTEXT_MGR already set [ 794.097307][T17168] binder: 17167:17168 ioctl 4018620d 200000000240 returned -16 [ 794.117080][ T5819] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 794.132477][T17194] block device autoloading is deprecated and will be removed. [ 794.282033][T17168] binder: BINDER_SET_CONTEXT_MGR already set [ 794.329217][T17168] binder: 17167:17168 ioctl 4018620d 200000000040 returned -16 [ 794.907538][T17177] SELinux: failed to load policy [ 794.995822][ T5819] usb 4-1: Using ep0 maxpacket: 8 [ 795.048156][ T5717] usb 5-1: USB disconnect, device number 81 [ 796.668082][ T5819] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 796.743110][T17232] netlink: 'syz.0.2773': attribute type 10 has an invalid length. [ 797.361337][ T5819] usb 4-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 797.374571][ T5819] usb 4-1: config 0 interface 0 has no altsetting 0 [ 797.381256][ T5819] usb 4-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 797.398565][ T5819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.412188][ T5819] usb 4-1: config 0 descriptor?? [ 797.440950][T17232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 797.514811][T17232] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 797.653963][ T5717] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 797.715317][T17234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2772'. [ 797.790677][T17249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2775'. [ 797.818866][ T5717] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 797.852171][ T5717] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.871386][ T5717] usb 1-1: Product: syz [ 797.877897][T17249] macvlan3: entered allmulticast mode [ 797.943859][ T5717] usb 1-1: Manufacturer: syz [ 797.966031][ T5717] usb 1-1: SerialNumber: syz [ 797.967022][T17251] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2776'. [ 798.055261][ T5717] usb 1-1: config 0 descriptor?? [ 798.466286][ T5724] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 798.531802][ T29] usb 2-1: USB disconnect, device number 82 [ 798.620833][T17232] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 798.660442][T17232] bond0 (unregistering): Released all slaves [ 798.670640][ T5724] usb 3-1: Using ep0 maxpacket: 8 [ 798.675917][ T5819] usb 4-1: can't set config #0, error -71 [ 798.696221][ T5724] usb 3-1: config 0 interface 0 has no altsetting 0 [ 798.708746][ T5819] usb 4-1: USB disconnect, device number 86 [ 798.729846][ T5724] usb 3-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.00 [ 798.744212][T17263] FAULT_INJECTION: forcing a failure. [ 798.744212][T17263] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 798.757681][ T5724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.797381][T17263] CPU: 0 UID: 0 PID: 17263 Comm: syz.1.2780 Tainted: G L syzkaller #0 PREEMPT(full) [ 798.797401][T17263] Tainted: [L]=SOFTLOCKUP [ 798.797405][T17263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 798.797412][T17263] Call Trace: [ 798.797416][T17263] [ 798.797421][T17263] dump_stack_lvl+0x100/0x190 [ 798.797438][T17263] should_fail_ex.cold+0x5/0xa [ 798.797454][T17263] _copy_from_user+0x2e/0xd0 [ 798.797473][T17263] video_usercopy+0xe74/0x1700 [ 798.797497][T17263] ? __pfx___video_do_ioctl+0x10/0x10 [ 798.797519][T17263] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 798.797544][T17263] ? __pfx_video_usercopy+0x10/0x10 [ 798.797567][T17263] v4l2_ioctl+0x1bd/0x250 [ 798.797582][T17263] ? __pfx_v4l2_ioctl+0x10/0x10 [ 798.797599][T17263] __x64_sys_ioctl+0x18e/0x210 [ 798.797612][T17263] do_syscall_64+0x115/0x870 [ 798.797627][T17263] ? clear_bhb_loop+0x40/0x90 [ 798.797642][T17263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.797654][T17263] RIP: 0033:0x7f7a7439ce59 [ 798.797664][T17263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 798.797675][T17263] RSP: 002b:00007f7a751cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 798.797686][T17263] RAX: ffffffffffffffda RBX: 00007f7a74616090 RCX: 00007f7a7439ce59 [ 798.797693][T17263] RDX: 0000200000000080 RSI: 0000000040085618 RDI: 0000000000000006 [ 798.797700][T17263] RBP: 00007f7a751cb090 R08: 0000000000000000 R09: 0000000000000000 [ 798.797710][T17263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 798.797716][T17263] R13: 00007f7a74616128 R14: 00007f7a74616090 R15: 00007ffe63e7baa8 [ 798.797738][T17263] [ 798.805379][ T5724] usb 3-1: config 0 descriptor?? [ 798.892057][ T5717] usb 1-1: Firmware version (0.0) predates our first public release. [ 798.934310][ T5724] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input36 [ 798.937564][ T5717] usb 1-1: Please update to version 0.2 or newer [ 799.063682][T17267] FAULT_INJECTION: forcing a failure. [ 799.063682][T17267] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 799.079514][T17267] CPU: 0 UID: 0 PID: 17267 Comm: syz.3.2782 Tainted: G L syzkaller #0 PREEMPT(full) [ 799.079544][T17267] Tainted: [L]=SOFTLOCKUP [ 799.079550][T17267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 799.079560][T17267] Call Trace: [ 799.079566][T17267] [ 799.079573][T17267] dump_stack_lvl+0x100/0x190 [ 799.079598][T17267] should_fail_ex.cold+0x5/0xa [ 799.079623][T17267] _copy_from_user+0x2e/0xd0 [ 799.079652][T17267] copy_msghdr_from_user+0x9f/0x4f0 [ 799.079675][T17267] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 799.079707][T17267] ___sys_sendmsg+0x106/0x1e0 [ 799.079729][T17267] ? __pfx____sys_sendmsg+0x10/0x10 [ 799.079778][T17267] __sys_sendmsg+0x170/0x220 [ 799.079805][T17267] ? __pfx___sys_sendmsg+0x10/0x10 [ 799.079841][T17267] ? rcu_is_watching+0x12/0xc0 [ 799.079868][T17267] do_syscall_64+0x115/0x870 [ 799.079891][T17267] ? clear_bhb_loop+0x40/0x90 [ 799.079911][T17267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.079928][T17267] RIP: 0033:0x7fd63639ce59 [ 799.079944][T17267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 799.079959][T17267] RSP: 002b:00007fd6372e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 799.079976][T17267] RAX: ffffffffffffffda RBX: 00007fd636615fa0 RCX: 00007fd63639ce59 [ 799.079988][T17267] RDX: 00000000040480d4 RSI: 0000200000000540 RDI: 0000000000000004 [ 799.079998][T17267] RBP: 00007fd6372e1090 R08: 0000000000000000 R09: 0000000000000000 [ 799.080008][T17267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 799.080018][T17267] R13: 00007fd636616038 R14: 00007fd636615fa0 R15: 00007ffe0ba275d8 [ 799.080041][T17267] [ 799.083104][ T5717] usb 1-1: USB disconnect, device number 94 [ 799.322921][T17257] xt_bpf: check failed: parse error [ 799.349730][T17257] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2778'. [ 799.394297][ T4967] bcm5974 3-1:0.0: could not read from device [ 799.432330][ T4967] bcm5974 3-1:0.0: could not read from device [ 799.434274][ T5724] usb 3-1: USB disconnect, device number 54 [ 799.535806][ T5634] bcm5974 3-1:0.0: could not read from device [ 800.216630][ T5634] udevd[5634]: Error opening device "/dev/input/event4": No such file or directory [ 800.233468][ T5634] udevd[5634]: Unable to EVIOCGABS device "/dev/input/event4" [ 800.260170][ T5634] udevd[5634]: Unable to EVIOCGABS device "/dev/input/event4" [ 800.273407][ T5634] udevd[5634]: Unable to EVIOCGABS device "/dev/input/event4" [ 800.293343][ T5717] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 800.294602][ T5634] udevd[5634]: Unable to EVIOCGABS device "/dev/input/event4" [ 800.518567][ T5717] usb 4-1: Using ep0 maxpacket: 8 [ 800.542623][ T5717] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 800.561149][T17303] syzkaller0: entered promiscuous mode [ 800.573631][ T5717] usb 4-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 800.659627][T17303] syzkaller0: entered allmulticast mode [ 800.663729][ T5717] usb 4-1: config 0 interface 0 has no altsetting 0 [ 800.935432][ T5717] usb 4-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 800.949936][ T5717] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.996985][ T5717] usb 4-1: config 0 descriptor?? [ 801.307114][T17320] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2792'. [ 801.335195][T17320] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2792'. [ 801.347253][ T5724] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 801.543550][ T5724] usb 3-1: Using ep0 maxpacket: 8 [ 801.854628][ T5724] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 801.877683][ T5724] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 801.916964][ T5724] usb 3-1: config 0 interface 0 has no altsetting 0 [ 801.933652][T17331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2793'. [ 801.943439][T17331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2793'. [ 801.952633][T17331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2793'. [ 801.982255][ T5724] usb 3-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 802.001488][ T5724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.031535][ T5724] usb 3-1: config 0 descriptor?? [ 802.239226][T17339] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.2794'. [ 802.309964][T17339] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 802.448523][T17344] netlink: 'syz.4.2796': attribute type 10 has an invalid length. [ 802.523597][ T5724] usbhid 3-1:0.0: can't add hid device: -71 [ 802.540287][ T5724] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 802.564912][ T5724] usb 3-1: USB disconnect, device number 55 [ 802.720597][ T5717] usbhid 4-1:0.0: can't add hid device: -71 [ 802.727859][ T5717] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 802.738640][ T1221] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 802.753017][ T5717] usb 4-1: USB disconnect, device number 87 [ 802.904812][ T1221] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 802.922064][ T1221] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.943971][ T1221] usb 5-1: Product: syz [ 802.948607][ T1221] usb 5-1: Manufacturer: syz [ 802.953284][ T1221] usb 5-1: SerialNumber: syz [ 802.960906][ T1221] usb 5-1: config 0 descriptor?? [ 803.233675][ T5739] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 803.413655][ T5739] usb 2-1: Using ep0 maxpacket: 8 [ 803.428645][ T5739] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 803.438080][ T5739] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.442524][T17344] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 803.470986][ T5717] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 803.492349][ T5739] usb 2-1: Product: syz [ 803.508268][ T5739] usb 2-1: Manufacturer: syz [ 803.522170][T17344] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 803.526382][ T5739] usb 2-1: SerialNumber: syz [ 803.569737][ T5739] usb 2-1: config 0 descriptor?? [ 803.581684][T17344] bond0 (unregistering): Released all slaves [ 803.660141][ T5717] usb 1-1: Using ep0 maxpacket: 8 [ 803.682875][ T5717] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 803.702570][ T5717] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.712087][ T1221] usb 5-1: Firmware version (0.0) predates our first public release. [ 803.723859][ T5717] usb 1-1: Product: syz [ 803.732719][ T1221] usb 5-1: Please update to version 0.2 or newer [ 803.739351][ T5717] usb 1-1: Manufacturer: syz [ 803.748148][ T5717] usb 1-1: SerialNumber: syz [ 803.777387][ T5717] usb 1-1: config 0 descriptor?? [ 803.814956][ T5739] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 803.854858][ T1221] usb 5-1: USB disconnect, device number 82 [ 804.012239][ T5717] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 804.321484][T17354] sctp: [Deprecated]: syz.1.2798 (pid 17354) Use of struct sctp_assoc_value in delayed_ack socket option. [ 804.321484][T17354] Use struct sctp_sack_info instead [ 804.377736][ T5739] usb write operation failed. (-71) [ 804.402254][ T5739] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 804.413085][ T5739] dvbdev: DVB: registering new adapter (Terratec H7) [ 804.419904][ T5739] usb 2-1: media controller created [ 804.425592][ T5739] usb read operation failed. (-71) [ 804.433181][ T5739] usb write operation failed. (-71) [ 804.442738][ T5739] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 804.455115][T17385] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2804'. [ 804.469191][ T5739] usb 2-1: USB disconnect, device number 83 [ 804.478571][T17385] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2804'. [ 804.505839][T17359] sctp: [Deprecated]: syz.0.2799 (pid 17359) Use of struct sctp_assoc_value in delayed_ack socket option. [ 804.505839][T17359] Use struct sctp_sack_info instead [ 804.550009][ T5717] usb write operation failed. (-71) [ 804.570203][ T5717] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 804.583852][ T5717] dvbdev: DVB: registering new adapter (Terratec H7) [ 804.591687][ T5717] usb 1-1: media controller created [ 804.597390][ T5717] usb read operation failed. (-71) [ 804.604281][ T5717] usb write operation failed. (-71) [ 804.623634][ T5717] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 804.642123][ T5717] usb 1-1: USB disconnect, device number 95 [ 805.102560][T17394] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2808'. [ 805.266025][ T30] audit: type=1400 audit(1781433842.695:941): avc: denied { ioctl } for pid=17393 comm="syz.3.2808" path="socket:[53548]" dev="sockfs" ino=53548 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 806.078802][ T30] audit: type=1400 audit(1781433843.463:942): avc: denied { getattr } for pid=17400 comm="syz.1.2810" name="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 806.195223][T17406] netlink: 'syz.4.2809': attribute type 64 has an invalid length. [ 806.665980][ T30] audit: type=1804 audit(1781433844.006:943): pid=17409 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.2810" name="/newroot/581/file0" dev="tmpfs" ino=3008 res=1 errno=0 [ 806.750837][T17412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2811'. [ 806.982298][T17415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2812'. [ 807.130855][T17416] futex_wake_op: syz.4.2813 tries to shift op by -1; fix this program [ 807.550854][ T29] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 807.875154][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 807.970393][ T29] usb 5-1: unable to get BOS descriptor or descriptor too short [ 808.075003][ T29] usb 5-1: config 4 has an invalid interface number: 127 but max is 0 [ 808.167214][ T29] usb 5-1: config 4 has no interface number 0 [ 808.231359][ T29] usb 5-1: config 4 interface 127 has no altsetting 0 [ 808.319512][ T29] usb 5-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.48 [ 808.564095][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.609146][ T29] usb 5-1: Product: syz [ 808.621348][ T29] usb 5-1: SerialNumber: syz [ 808.910651][ T29] usb 5-1: USB disconnect, device number 83 [ 809.059270][T17445] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2820'. [ 809.069167][T17445] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2820'. [ 809.269206][T17447] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2821'. [ 810.106767][T17451] binder: 17449:17451 ioctl c00c620f 2000000003c0 returned -22 [ 810.814121][T17456] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2824'. [ 810.946346][T17460] trusted_key: encrypted_key: keylen parameter is missing [ 811.003287][ T30] audit: type=1401 audit(1781433848.020:944): op=fscreate invalid_context="system_u:object_r:apt_var_lib_t:s0" [ 811.203820][ T5717] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 811.260359][T17468] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 811.364052][ T5717] usb 2-1: Using ep0 maxpacket: 8 [ 811.370546][ T5717] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 811.381714][ T5717] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 811.394608][ T5739] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 811.402282][ T5717] usb 2-1: New USB device found, idVendor=17ef, idProduct=6049, bcdDevice= 0.00 [ 811.411553][ T5717] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.419750][ T5746] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 811.434142][ T5717] usb 2-1: config 0 descriptor?? [ 811.610043][ T5746] usb 1-1: Using ep0 maxpacket: 8 [ 811.615846][ T5739] usb 4-1: Using ep0 maxpacket: 32 [ 811.622942][ T5739] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 811.631434][ T5746] usb 1-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 811.642556][ T5739] usb 4-1: config 0 has no interface number 0 [ 811.648651][ T5746] usb 1-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 811.658670][ T5739] usb 4-1: config 0 interface 12 has no altsetting 0 [ 811.665871][ T5746] usb 1-1: config 0 interface 0 has no altsetting 0 [ 811.672908][ T5746] usb 1-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 811.682369][ T5746] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.691404][ T5739] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 811.701248][ T5739] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.711945][ T5746] usb 1-1: config 0 descriptor?? [ 811.717257][ T5739] usb 4-1: Product: syz [ 811.721512][ T5739] usb 4-1: Manufacturer: syz [ 811.728851][ T5739] usb 4-1: SerialNumber: syz [ 811.736662][ T5739] usb 4-1: config 0 descriptor?? [ 811.892996][ T5717] lenovo 0003:17EF:6049.0021: unknown main item tag 0x0 [ 811.900098][ T5717] lenovo 0003:17EF:6049.0021: unknown main item tag 0x0 [ 811.907288][ T5717] lenovo 0003:17EF:6049.0021: unknown main item tag 0x0 [ 811.914406][ T5717] lenovo 0003:17EF:6049.0021: unknown main item tag 0x0 [ 811.922015][ T5717] lenovo 0003:17EF:6049.0021: unknown main item tag 0x0 [ 811.929377][ T5717] lenovo 0003:17EF:6049.0021: unknown main item tag 0x0 [ 811.936718][ T5717] lenovo 0003:17EF:6049.0021: unknown main item tag 0x0 [ 811.951854][ T5717] lenovo 0003:17EF:6049.0021: unknown main item tag 0x0 [ 811.962230][ T5717] lenovo 0003:17EF:6049.0021: unknown main item tag 0x0 [ 811.969674][ T5717] lenovo 0003:17EF:6049.0021: unknown main item tag 0x0 [ 811.984613][ T5717] lenovo 0003:17EF:6049.0021: hidraw0: USB HID v0.00 Device [HID 17ef:6049] on usb-dummy_hcd.1-1/input0 [ 812.344307][ T5746] usbhid 1-1:0.0: can't add hid device: -32 [ 812.352620][ T5746] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 812.404017][ T5746] usb 2-1: USB disconnect, device number 84 [ 812.509560][T17470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2830'. [ 812.691215][T17481] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2831'. [ 813.137579][T17479] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2832'. [ 813.575040][T17495] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2835'. [ 813.589136][T17495] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2835'. [ 813.595181][T17497] FAULT_INJECTION: forcing a failure. [ 813.595181][T17497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 813.613123][T17497] CPU: 0 UID: 0 PID: 17497 Comm: syz.4.2837 Tainted: G L syzkaller #0 PREEMPT(full) [ 813.613157][T17497] Tainted: [L]=SOFTLOCKUP [ 813.613164][T17497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 813.613175][T17497] Call Trace: [ 813.613181][T17497] [ 813.613189][T17497] dump_stack_lvl+0x100/0x190 [ 813.613214][T17497] should_fail_ex.cold+0x5/0xa [ 813.613239][T17497] _copy_to_user+0x32/0xd0 [ 813.613264][T17497] simple_read_from_buffer+0xcb/0x170 [ 813.613289][T17497] proc_fail_nth_read+0x1af/0x230 [ 813.613310][T17497] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 813.613331][T17497] ? rw_verify_area+0xce/0x6d0 [ 813.613348][T17497] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 813.613367][T17497] vfs_read+0x1e4/0xb30 [ 813.613391][T17497] ? __pfx_vfs_read+0x10/0x10 [ 813.613409][T17497] ? __fget_files+0x215/0x3d0 [ 813.613435][T17497] ? __fget_files+0x21f/0x3d0 [ 813.613463][T17497] ksys_read+0x12a/0x250 [ 813.613482][T17497] ? __pfx_ksys_read+0x10/0x10 [ 813.613503][T17497] ? rcu_is_watching+0x12/0xc0 [ 813.613532][T17497] do_syscall_64+0x115/0x870 [ 813.613555][T17497] ? clear_bhb_loop+0x40/0x90 [ 813.613577][T17497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.613596][T17497] RIP: 0033:0x7f2967d5d68e [ 813.613611][T17497] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 813.613628][T17497] RSP: 002b:00007f2968cb2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 813.613645][T17497] RAX: ffffffffffffffda RBX: 00007f2968cb36c0 RCX: 00007f2967d5d68e [ 813.613657][T17497] RDX: 000000000000000f RSI: 00007f2968cb30a0 RDI: 0000000000000003 [ 813.613668][T17497] RBP: 00007f2968cb3090 R08: 0000000000000000 R09: 0000000000000000 [ 813.613679][T17497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 813.613689][T17497] R13: 00007f2968016038 R14: 00007f2968015fa0 R15: 00007ffce98b2698 [ 813.613713][T17497] [ 813.875278][ T5724] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 814.165357][ T5724] usb 3-1: Using ep0 maxpacket: 8 [ 814.270185][ T5724] usb 3-1: unable to get BOS descriptor or descriptor too short [ 814.279301][ T5724] usb 3-1: config 86 has an invalid interface number: 149 but max is 0 [ 814.289518][ T5724] usb 3-1: config 86 has no interface number 0 [ 814.296245][ T5724] usb 3-1: config 86 interface 149 has no altsetting 0 [ 814.340896][ T5724] usb 3-1: New USB device found, idVendor=056c, idProduct=8007, bcdDevice= a.5c [ 814.356376][ T5724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.373668][ T5739] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 814.383604][ T5739] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 814.397722][ T5739] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 814.429821][ T5739] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 814.439452][ T5746] usb 1-1: USB disconnect, device number 96 [ 814.468328][ T5724] usb 3-1: Product: syz [ 814.481801][ T5724] usb 3-1: Manufacturer: syz [ 814.489497][ T5739] usb 4-1: USB disconnect, device number 88 [ 814.494461][ T5724] usb 3-1: SerialNumber: syz [ 814.761762][T17493] IPVS: set_ctl: invalid protocol: 255 100.1.1.2:20002 [ 815.047176][T17520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2842'. [ 815.685989][ T5724] belkin_sa 3-1:86.149: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 815.709749][ T5724] usb 3-1: bcdDevice: 0a5c, bfc: 0 [ 815.719399][ T5724] usb 3-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 815.762198][ T5724] usb 3-1: USB disconnect, device number 56 [ 815.836504][ T5724] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 815.880649][ T5724] belkin_sa 3-1:86.149: device disconnected [ 815.974172][T17536] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2850'. [ 816.123726][T17539] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2849'. [ 816.145859][T17539] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2849'. [ 816.397901][ T5717] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 817.216254][ T5717] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 817.329039][ T5717] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 817.339232][ T5717] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 817.362310][ T30] audit: type=1326 audit(1781433854.009:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17528 comm="syz.2.2848" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200559ce59 code=0x7fc00000 [ 817.369047][ T5717] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 817.580154][ T5717] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.602484][ T5717] usb 1-1: Product: syz [ 817.611037][ T5717] usb 1-1: Manufacturer: syz [ 817.624640][ T5717] usb 1-1: SerialNumber: syz [ 817.627601][T17541] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 817.654294][ T5717] cdc_mbim 1-1:1.0: MBIM functional descriptor missing [ 817.664924][T17541] UDF-fs: Scanning with blocksize 512 failed [ 817.679293][ T5717] cdc_mbim 1-1:1.0: bind() failure [ 817.690522][ T29] usb 4-1: new full-speed USB device number 89 using dummy_hcd [ 817.775916][T17565] syzkaller0: entered promiscuous mode [ 817.784030][T17541] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 817.796699][T17565] syzkaller0: entered allmulticast mode [ 817.809794][T17541] UDF-fs: Scanning with blocksize 1024 failed [ 817.862817][ T29] usb 4-1: config 43 interface 0 has no altsetting 0 [ 817.885114][T17541] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 817.888483][ T29] usb 4-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=db.82 [ 817.915148][T17541] UDF-fs: Scanning with blocksize 2048 failed [ 817.960841][T17568] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.2857'. [ 817.988152][T17541] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 817.996571][T17568] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 818.007127][T17541] UDF-fs: Scanning with blocksize 4096 failed [ 818.013503][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.027613][ T29] usb 4-1: Product: syz [ 818.034297][ T29] usb 4-1: Manufacturer: syz [ 818.042394][ T30] audit: type=1326 audit(1781433854.655:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17528 comm="syz.2.2848" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f200559ce59 code=0x7fc00000 [ 818.159666][ T29] usb 4-1: SerialNumber: syz [ 818.211556][ T30] audit: type=1326 audit(1781433854.758:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17528 comm="syz.2.2848" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200559ce59 code=0x7fc00000 [ 818.270652][ T30] audit: type=1326 audit(1781433854.758:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17528 comm="syz.2.2848" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200559ce59 code=0x7fc00000 [ 818.308347][ T30] audit: type=1326 audit(1781433854.758:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17528 comm="syz.2.2848" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200559ce59 code=0x7fc00000 [ 818.335124][ T30] audit: type=1326 audit(1781433854.758:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17528 comm="syz.2.2848" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200559ce59 code=0x7fc00000 [ 818.367683][ T30] audit: type=1326 audit(1781433854.758:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17528 comm="syz.2.2848" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200559ce59 code=0x7fc00000 [ 818.395533][ T30] audit: type=1326 audit(1781433854.758:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17528 comm="syz.2.2848" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200559ce59 code=0x7fc00000 [ 818.423542][ T30] audit: type=1326 audit(1781433854.758:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17528 comm="syz.2.2848" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200559ce59 code=0x7fc00000 [ 818.455691][ T30] audit: type=1326 audit(1781433854.758:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17528 comm="syz.2.2848" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200559ce59 code=0x7fc00000 [ 818.489019][ T29] usb 4-1: dvb_usb_v2: found a 'Anysee' in warm state [ 818.497959][ T29] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 818.506578][ T29] dvb_usb_anysee 4-1:43.0: probe with driver dvb_usb_anysee failed with error -22 [ 819.245807][ T5739] usb 1-1: USB disconnect, device number 97 [ 819.417754][ T29] usb 4-1: USB disconnect, device number 89 [ 819.700371][T17591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2866'. [ 820.008517][T17593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2863'. [ 820.171086][T17601] input input37: cannot allocate more than FF_MAX_EFFECTS effects [ 820.436529][ T10] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 820.607845][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 820.621328][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 820.640887][T17602] syzkaller0: entered promiscuous mode [ 820.644576][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 820.657098][T17602] syzkaller0: entered allmulticast mode [ 820.674120][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.739451][ T10] usb 5-1: config 0 descriptor?? [ 820.893540][ T10] rc_core: IR keymap rc-xbox-dvd not found [ 821.355605][T17601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 821.365771][ T10] Registered IR keymap rc-empty [ 821.385795][ T10] rc rc0: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 821.401387][T17601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 821.440634][ T10] input: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input38 [ 821.650564][ T10] xbox_remote 5-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 821.806979][ T5620] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 821.826233][ T5620] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 821.842194][ T5620] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 821.900520][ T5717] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 821.912546][ T5620] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 821.924314][ T5620] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 821.987981][ T10] input: failed to attach handler kbd to device input38, error: -5 [ 822.082719][ T5717] usb 1-1: Using ep0 maxpacket: 8 [ 822.402377][ T4967] xbox_remote 5-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 822.418113][ T5717] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 822.436523][ T10] usb 5-1: USB disconnect, device number 84 [ 822.462933][ T5717] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 822.523426][ T5717] usb 1-1: config 0 interface 0 has no altsetting 0 [ 822.608712][ T5717] usb 1-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 822.674306][ T5717] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.729316][ T5717] usb 1-1: config 0 descriptor?? [ 824.174457][ T5620] Bluetooth: hci0: command tx timeout [ 824.625459][ T5746] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 824.664314][ T5717] usbhid 1-1:0.0: can't add hid device: -71 [ 824.703134][ T5717] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 824.733602][ T5717] usb 1-1: USB disconnect, device number 98 [ 824.818972][ T5746] usb 5-1: Using ep0 maxpacket: 8 [ 824.830673][ T5746] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 824.855859][ T5746] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 824.871643][ T5746] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 824.881811][ T5746] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 824.894039][ T5746] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 824.937127][ T5746] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 824.956857][ T5746] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 824.960610][T17681] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.2882'. [ 824.966060][ T5746] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.084154][T17683] xt_cgroup: invalid path, errno=-2 [ 825.230273][ T5746] usb 5-1: GET_CAPABILITIES returned 0 [ 825.236643][ T5746] usbtmc 5-1:16.0: can't read capabilities [ 825.481262][ T5746] usb 5-1: USB disconnect, device number 85 [ 826.420767][ T5620] Bluetooth: hci0: command tx timeout [ 827.405312][T17703] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2887'. [ 827.791831][T17702] binder: BINDER_SET_CONTEXT_MGR already set [ 827.797832][T17702] binder: 17700:17702 ioctl 4018620d 200000000480 returned -16 [ 828.622028][ T5620] Bluetooth: hci0: command tx timeout [ 828.981138][T17715] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2890'. [ 829.039888][T17718] IPVS: length: 4096 != 8 [ 829.903240][ T5867] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.010556][T17727] netlink: 'syz.0.2892': attribute type 1 has an invalid length. [ 830.029067][T17727] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2892'. [ 830.172085][T17736] usb usb8: usbfs: process 17736 (syz.0.2895) did not claim interface 0 before use [ 830.246630][ T5867] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.843218][ T5620] Bluetooth: hci0: command tx timeout [ 830.925217][ T5867] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.947453][T17748] overlayfs: overlapping lowerdir path [ 831.128187][ T5867] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.154645][ T10] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 831.329338][ T10] usb 4-1: config 0 has no interfaces? [ 831.348357][ T10] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 831.395097][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.444461][ T10] usb 4-1: config 0 descriptor?? [ 831.872783][ T5349] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 831.919273][T17765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2900'. [ 831.928573][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 831.928602][ T30] audit: type=1400 audit(1781433867.634:1016): avc: denied { map } for pid=17740 comm="syz.3.2897" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 831.934070][ T5819] usb 4-1: USB disconnect, device number 90 [ 832.101604][ T5349] usb 5-1: unable to get BOS descriptor or descriptor too short [ 832.121814][ T5349] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 832.168669][ T5349] usb 5-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 832.210015][ T5349] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.518070][T17632] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.529297][ T5349] usb 5-1: Product: syz [ 832.536820][ T5349] usb 5-1: Manufacturer: syz [ 832.544727][T17632] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.552314][ T5349] usb 5-1: SerialNumber: syz [ 832.563073][T17632] bridge_slave_0: entered allmulticast mode [ 832.575043][ T5349] usb 5-1: config 0 descriptor?? [ 832.611454][ T5349] pn533_usb 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 832.625077][T17632] bridge_slave_0: entered promiscuous mode [ 832.762301][ T5867] geneve2: left allmulticast mode [ 832.785669][ T5867] geneve2: left promiscuous mode [ 832.806925][ T5867] bridge0: port 3(geneve2) entered disabled state [ 832.851953][ T5867] bridge_slave_1: left allmulticast mode [ 832.874616][ T5867] bridge_slave_1: left promiscuous mode [ 832.895577][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.976912][T17767] xt_hashlimit: size too large, truncated to 1048576 [ 833.357817][ T30] audit: type=1400 audit(1781433868.991:1017): avc: denied { write } for pid=17778 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 833.561655][ T30] audit: type=1400 audit(1781433869.169:1018): avc: denied { write } for pid=17806 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 833.644543][ T806] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 833.879607][ T806] usb 1-1: Using ep0 maxpacket: 8 [ 833.910806][ T806] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 833.953303][ T806] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 833.974642][ T806] usb 1-1: config 0 interface 0 has no altsetting 0 [ 833.983563][ T5867] gretap0 (unregistering): left allmulticast mode [ 834.034872][ T806] usb 1-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 834.060994][ T806] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.091259][ T806] usb 1-1: config 0 descriptor?? [ 834.673986][ T806] usbhid 1-1:0.0: can't add hid device: -71 [ 834.681911][ T806] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 834.731069][ T806] usb 1-1: USB disconnect, device number 99 [ 834.773626][ T5867] bond1 (unregistering): Released all slaves [ 834.828650][ T5867] bond2 (unregistering): (slave bond3): Releasing backup interface [ 834.840748][ T5867] bond3 (unregistering): left promiscuous mode [ 834.851806][ T5867] bond2 (unregistering): Released all slaves [ 834.869589][ T5867] bond3 (unregistering): Released all slaves [ 834.887568][ T5867] bond0 (unregistering): Released all slaves [ 834.914407][ T5867] bond4 (unregistering): Released all slaves [ 834.934549][ T5867] bond5 (unregistering): Released all slaves [ 834.962317][ T5867] bond6 (unregistering): (slave lo): Releasing backup interface [ 834.978809][ T5867] bond6 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 835.011303][ T5867] bond6 (unregistering): Released all slaves [ 835.036447][ T5867] bond7 (unregistering): Released all slaves [ 835.062928][ T5867] bond8 (unregistering): Released all slaves [ 835.095454][ T5867] bond9 (unregistering): Released all slaves [ 835.112664][ T5867] bond10 (unregistering): Released all slaves [ 835.133459][ T806] usb 5-1: USB disconnect, device number 86 [ 835.166032][T17632] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.175752][T17632] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.184794][T17632] bridge_slave_1: entered allmulticast mode [ 835.208819][T17632] bridge_slave_1: entered promiscuous mode [ 835.262294][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 835.291038][T17820] lo speed is unknown, defaulting to 1000 [ 835.356274][T17820] lo speed is unknown, defaulting to 1000 [ 835.362076][ T5867] : left promiscuous mode [ 835.475619][T17632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 835.503646][T17820] lo speed is unknown, defaulting to 1000 [ 835.514305][T17820] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 835.524678][T17836] FAULT_INJECTION: forcing a failure. [ 835.524678][T17836] name failslab, interval 1, probability 0, space 0, times 0 [ 835.536954][ T5867] tipc: Left network mode [ 835.547845][T17632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 835.569419][T17820] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 835.602360][T17820] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 835.620821][T17836] CPU: 0 UID: 0 PID: 17836 Comm: syz.4.2911 Tainted: G L syzkaller #0 PREEMPT(full) [ 835.620848][T17836] Tainted: [L]=SOFTLOCKUP [ 835.620853][T17836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 835.620862][T17836] Call Trace: [ 835.620867][T17836] [ 835.620873][T17836] dump_stack_lvl+0x100/0x190 [ 835.620894][T17836] should_fail_ex.cold+0x5/0xa [ 835.620914][T17836] should_failslab+0xc2/0x120 [ 835.620931][T17836] __kmalloc_cache_noprof+0x7a/0x6f0 [ 835.620950][T17836] ? nfnetlink_rcv_batch+0x780/0x2880 [ 835.620972][T17836] ? __nla_parse+0x40/0x60 [ 835.620992][T17836] nfnetlink_rcv_batch+0x780/0x2880 [ 835.621024][T17836] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 835.621060][T17836] ? avc_has_perm_noaudit+0x145/0x3b0 [ 835.621098][T17836] ? __nla_parse+0x40/0x60 [ 835.621117][T17836] nfnetlink_rcv+0x3bd/0x440 [ 835.621141][T17836] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 835.621171][T17836] netlink_unicast+0x585/0x850 [ 835.621192][T17836] ? __pfx_netlink_unicast+0x10/0x10 [ 835.621217][T17836] netlink_sendmsg+0x8b0/0xda0 [ 835.621239][T17836] ? __pfx_netlink_sendmsg+0x10/0x10 [ 835.621257][T17836] ? __might_fault+0xa0/0x140 [ 835.621286][T17836] ____sys_sendmsg+0x9e1/0xb70 [ 835.621303][T17836] ? __pfx_netlink_sendmsg+0x10/0x10 [ 835.621323][T17836] ? __pfx_____sys_sendmsg+0x10/0x10 [ 835.621350][T17836] ___sys_sendmsg+0x190/0x1e0 [ 835.621371][T17836] ? __pfx____sys_sendmsg+0x10/0x10 [ 835.621415][T17836] __sys_sendmsg+0x170/0x220 [ 835.621439][T17836] ? __pfx___sys_sendmsg+0x10/0x10 [ 835.621471][T17836] ? rcu_is_watching+0x12/0xc0 [ 835.621497][T17836] do_syscall_64+0x115/0x870 [ 835.621517][T17836] ? clear_bhb_loop+0x40/0x90 [ 835.621543][T17836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.621559][T17836] RIP: 0033:0x7f2967d9ce59 [ 835.621573][T17836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 835.621589][T17836] RSP: 002b:00007f2968cb3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 835.621604][T17836] RAX: ffffffffffffffda RBX: 00007f2968015fa0 RCX: 00007f2967d9ce59 [ 835.621614][T17836] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 835.621623][T17836] RBP: 00007f2968cb3090 R08: 0000000000000000 R09: 0000000000000000 [ 835.621632][T17836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 835.621641][T17836] R13: 00007f2968016038 R14: 00007f2968015fa0 R15: 00007ffce98b2698 [ 835.621662][T17836] [ 835.639811][T17632] team0: Port device team_slave_0 added [ 835.749721][ T10] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 835.788405][T17820] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 835.968011][T17820] lo speed is unknown, defaulting to 1000 [ 836.953404][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 836.981544][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 836.998012][T17820] lo speed is unknown, defaulting to 1000 [ 837.009621][T17632] team0: Port device team_slave_1 added [ 837.015523][ T6072] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 837.043864][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 837.099057][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 837.151799][T17632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 837.157672][T17820] lo speed is unknown, defaulting to 1000 [ 837.164765][T17632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 837.170958][ T10] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 837.229143][T17632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 837.235031][ T6072] usb 1-1: Using ep0 maxpacket: 8 [ 837.248954][T17820] lo speed is unknown, defaulting to 1000 [ 837.262766][T17632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 837.267663][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.278000][T17632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 837.288671][ T6072] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 837.334170][ T10] usb 3-1: config 0 descriptor?? [ 837.341310][T17632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 837.375354][ T6072] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 837.404757][T17820] lo speed is unknown, defaulting to 1000 [ 837.413574][ T6072] usb 1-1: New USB device found, idVendor=17ef, idProduct=6049, bcdDevice= 0.00 [ 837.436821][ T6072] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.446839][T17820] lo speed is unknown, defaulting to 1000 [ 837.483786][ T6072] usb 1-1: config 0 descriptor?? [ 837.634555][ T30] audit: type=1400 audit(1781433872.987:1019): avc: denied { write } for pid=17838 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 837.660252][T17632] hsr_slave_0: entered promiscuous mode [ 837.673681][T17632] hsr_slave_1: entered promiscuous mode [ 837.935562][ T10] hid_parser_main: 15 callbacks suppressed [ 837.935605][ T10] kone 0003:1E7D:2CED.0022: unknown main item tag 0x0 [ 837.988337][ T10] kone 0003:1E7D:2CED.0022: unknown main item tag 0x0 [ 838.009456][ T6072] lenovo 0003:17EF:6049.0023: unknown main item tag 0x0 [ 838.021094][ T10] kone 0003:1E7D:2CED.0022: unknown main item tag 0x0 [ 838.032329][ T6072] lenovo 0003:17EF:6049.0023: unknown main item tag 0x0 [ 838.080280][ T10] kone 0003:1E7D:2CED.0022: unknown main item tag 0x0 [ 838.197678][ T6072] lenovo 0003:17EF:6049.0023: unknown main item tag 0x0 [ 838.209789][ T10] kone 0003:1E7D:2CED.0022: unknown main item tag 0x0 [ 838.226288][ T6072] lenovo 0003:17EF:6049.0023: unknown main item tag 0x0 [ 838.235317][ T10] kone 0003:1E7D:2CED.0022: unknown main item tag 0x0 [ 838.245249][ T30] audit: type=1400 audit(1781433873.539:1020): avc: denied { write } for pid=17861 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 838.282603][ T6072] lenovo 0003:17EF:6049.0023: hidraw0: USB HID v0.00 Device [HID 17ef:6049] on usb-dummy_hcd.0-1/input0 [ 838.297334][ T10] kone 0003:1E7D:2CED.0022: hidraw1: USB HID v0.09 Device [HID 1e7d:2ced] on usb-dummy_hcd.2-1/input0 [ 838.358132][ T6072] usb 1-1: USB disconnect, device number 100 [ 838.507280][T17868] fido_id[17868]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 838.544202][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 838.610860][T17872] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1548 sclass=netlink_route_socket pid=17872 comm=syz.4.2914 [ 838.790762][ T5746] usb 3-1: USB disconnect, device number 57 [ 838.891371][ T29] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 839.779831][ T29] usb 4-1: Using ep0 maxpacket: 8 [ 839.792986][ T29] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 839.810827][ T29] usb 4-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 839.826448][ T29] usb 4-1: config 0 interface 0 has no altsetting 0 [ 839.843362][ T29] usb 4-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 839.852690][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.863625][ T29] usb 4-1: config 0 descriptor?? [ 839.929231][ T6072] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 840.078000][ T6072] usb 1-1: device descriptor read/64, error -71 [ 840.293988][T17901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2920'. [ 840.324237][T17901] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2920'. [ 840.334913][ T6072] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 840.414424][ T30] audit: type=1400 audit(1781433875.589:1021): avc: denied { listen } for pid=17899 comm="syz.4.2920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 840.516864][ T6072] usb 1-1: device descriptor read/64, error -71 [ 840.603222][ T30] audit: type=1400 audit(1781433875.767:1022): avc: denied { write } for pid=17912 comm="syz.4.2922" name="usbmon5" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 840.644471][ T5349] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 840.656776][ T6072] usb usb1-port1: attempt power cycle [ 840.680761][ T5724] kernel read not supported for file /usbmon5 (pid: 5724 comm: kworker/1:4) [ 840.805070][ T5349] usb 3-1: Using ep0 maxpacket: 8 [ 840.822180][ T5349] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 840.841037][ T30] audit: type=1400 audit(1781433875.982:1023): avc: denied { write } for pid=17896 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 840.864540][ T5349] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.878065][ T5349] usb 3-1: Product: syz [ 840.892491][ T5349] usb 3-1: Manufacturer: syz [ 840.904080][ T5349] usb 3-1: SerialNumber: syz [ 840.919593][ T5349] usb 3-1: config 0 descriptor?? [ 840.948726][ T5349] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 840.971417][ T5349] pctv452e: pctv452e_power_ctrl: 1 [ 840.971417][ T5349] [ 840.979433][ T29] usbhid 4-1:0.0: can't add hid device: -71 [ 840.998355][ T29] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 841.010825][ T5349] usb 3-1: selecting invalid altsetting 3 [ 841.033768][ T5349] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 841.033768][ T5349] [ 841.034863][ T6072] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 841.044239][ T806] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 841.068723][ T29] usb 4-1: USB disconnect, device number 91 [ 841.075188][ T6072] usb 1-1: device descriptor read/8, error -71 [ 841.082240][ T5349] dvb-usb: bulk message failed: -22 (5/0) [ 841.083600][ T30] audit: type=1400 audit(1781433876.206:1024): avc: denied { write } for pid=17924 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 841.103995][ T5349] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 841.157229][ T5349] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 841.194287][ T5349] usb 3-1: media controller created [ 841.254908][ T806] usb 5-1: Using ep0 maxpacket: 32 [ 841.373734][ T806] usb 5-1: config 8 has an invalid interface number: 26 but max is 1 [ 841.462463][ T6072] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 841.482981][ T5349] dvb-usb: bulk message failed: -22 (8/0) [ 841.493255][ T806] usb 5-1: config 8 has an invalid interface number: 151 but max is 1 [ 841.493321][ T6072] usb 1-1: device descriptor read/8, error -71 [ 841.508493][ T5349] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 841.519624][ T806] usb 5-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 841.529402][ T5349] dvb-usb: MAC address reading failed. [ 841.531261][ T5867] hsr_slave_0: left promiscuous mode [ 841.535329][ T806] usb 5-1: config 8 has an invalid interface number: 179 but max is 1 [ 841.557910][ T5349] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 841.570462][ T806] usb 5-1: config 8 has 3 interfaces, different from the descriptor's value: 2 [ 841.571838][ T5867] veth1_macvtap: left promiscuous mode [ 841.589214][ T806] usb 5-1: config 8 has no interface number 0 [ 841.596551][ T806] usb 5-1: config 8 has no interface number 1 [ 841.603799][ T5867] veth0_macvtap: left promiscuous mode [ 841.610504][ T5867] veth1_vlan: left promiscuous mode [ 841.615961][ T5867] veth0_vlan: left promiscuous mode [ 841.616302][ T806] usb 5-1: config 8 has no interface number 2 [ 841.621841][ T6072] usb usb1-port1: unable to enumerate USB device [ 841.638571][ T5349] DVB: Unable to find symbol stb0899_attach() [ 841.645002][ T806] usb 5-1: config 8 interface 26 altsetting 8 endpoint 0xE has an invalid bInterval 129, changing to 7 [ 841.656258][ T5349] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 841.665687][ T806] usb 5-1: config 8 interface 26 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 841.678687][ T806] usb 5-1: config 8 interface 26 altsetting 8 has an endpoint descriptor with address 0x4D, changing to 0xD [ 841.691263][ T806] usb 5-1: config 8 interface 26 altsetting 8 endpoint 0xD has invalid maxpacket 576, setting to 64 [ 841.702825][ T806] usb 5-1: config 8 interface 26 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 841.715742][ T806] usb 5-1: config 8 interface 26 altsetting 8 has a duplicate endpoint with address 0xD, skipping [ 841.727814][ T806] usb 5-1: config 8 interface 26 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 841.738804][ T806] usb 5-1: config 8 interface 151 altsetting 127 has a duplicate endpoint with address 0x9, skipping [ 841.749975][ T806] usb 5-1: config 8 interface 151 altsetting 127 has a duplicate endpoint with address 0xD, skipping [ 841.761050][ T806] usb 5-1: config 8 interface 151 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 841.775296][ T806] usb 5-1: config 8 interface 151 altsetting 127 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 841.786522][ T806] usb 5-1: config 8 interface 151 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 841.798120][ T5349] rc_core: IR keymap rc-tt-1500 not found [ 841.803942][ T5349] Registered IR keymap rc-empty [ 841.809637][ T5349] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 841.820298][ T806] usb 5-1: config 8 interface 151 altsetting 127 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 841.833983][ T5349] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input39 [ 841.854504][ T5349] dvb-usb: schedule remote query interval to 100 msecs. [ 841.861526][ T806] usb 5-1: config 8 interface 151 altsetting 127 endpoint 0x81 has invalid maxpacket 37237, setting to 1024 [ 841.876960][ T5349] pctv452e: pctv452e_power_ctrl: 0 [ 841.876960][ T5349] [ 841.884626][ T806] usb 5-1: config 8 interface 151 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 1024 [ 841.895469][ T5349] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 841.905797][ T806] usb 5-1: config 8 interface 151 altsetting 127 has 9 endpoint descriptors, different from the interface descriptor's value: 11 [ 841.922005][ T5349] usb 3-1: USB disconnect, device number 58 [ 841.934079][ T806] usb 5-1: too many endpoints for config 8 interface 179 altsetting 111: 79, using maximum allowed: 30 [ 841.966344][ T806] usb 5-1: config 8 interface 179 altsetting 111 has a duplicate endpoint with address 0xC, skipping [ 841.978844][ T806] usb 5-1: config 8 interface 179 altsetting 111 has an invalid descriptor for endpoint zero, skipping [ 842.055674][ T806] usb 5-1: config 8 interface 179 altsetting 111 has a duplicate endpoint with address 0x2, skipping [ 842.069624][ T5349] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 842.725973][ T806] usb 5-1: config 8 interface 179 altsetting 111 has 3 endpoint descriptors, different from the interface descriptor's value: 79 [ 842.745214][ T806] usb 5-1: config 8 interface 26 has no altsetting 0 [ 842.789594][ T806] usb 5-1: config 8 interface 151 has no altsetting 0 [ 842.831114][ T806] usb 5-1: config 8 interface 179 has no altsetting 0 [ 842.860405][ T806] usb 5-1: New USB device found, idVendor=1b3d, idProduct=01da, bcdDevice=d6.3f [ 842.877458][ T806] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.897942][ T806] usb 5-1: Product: syz [ 842.913211][ T806] usb 5-1: Manufacturer: syz [ 842.934477][ T806] usb 5-1: SerialNumber: syz [ 843.056763][ T5867] team0 (unregistering): Port device team_slave_1 removed [ 843.144210][T17943] fuse: Unknown parameter '000000000000000000000x0000000000000007' [ 843.582246][T17947] CIFS: VFS: UNC: missing share name [ 843.588601][T17947] CIFS: VFS: Malformed UNC in devname [ 844.240257][ T806] ftdi_sio 5-1:8.26: FTDI USB Serial Device converter detected [ 844.285072][ T806] ftdi_sio ttyUSB0: unknown device type: 0xd63f [ 844.300724][ T5867] team0 (unregistering): Port device team_slave_0 removed [ 844.303340][ T806] ftdi_sio 5-1:8.151: FTDI USB Serial Device converter detected [ 844.334867][ T806] ftdi_sio ttyUSB1: unknown device type: 0xd63f [ 844.353863][ T806] ftdi_sio 5-1:8.179: FTDI USB Serial Device converter detected [ 844.363674][ T806] ftdi_sio ttyUSB2: unknown device type: 0xd63f [ 844.382125][ T806] usb 5-1: USB disconnect, device number 87 [ 844.388537][ T29] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 844.415707][ T806] ftdi_sio 5-1:8.26: device disconnected [ 844.430140][ T806] ftdi_sio 5-1:8.151: device disconnected [ 844.440855][ T806] ftdi_sio 5-1:8.179: device disconnected [ 844.538534][ T29] usb 3-1: device descriptor read/64, error -71 [ 844.544408][ T6072] usb 1-1: new full-speed USB device number 105 using dummy_hcd [ 844.746421][ T6072] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 844.783832][ T6072] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 844.800989][ T806] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 844.803976][ T6072] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 844.812833][ T29] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 844.833917][ T6072] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.900167][ T6072] usb 1-1: config 0 descriptor?? [ 844.943155][ T6072] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 844.981778][ T6072] dvb-usb: bulk message failed: -22 (3/0) [ 844.997784][ T806] usb 5-1: device descriptor read/64, error -71 [ 845.009994][ T6072] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 845.014714][ T29] usb 3-1: device descriptor read/64, error -71 [ 845.054843][ T6072] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 845.090908][ T6072] usb 1-1: media controller created [ 845.117758][ T6072] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 845.172344][ T5867] IPVS: stop unused estimator thread 0... [ 845.175405][ T29] usb usb3-port1: attempt power cycle [ 845.185523][ T6072] dvb-usb: bulk message failed: -22 (6/0) [ 845.218033][ T6072] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 845.267324][ T6072] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input40 [ 845.292132][T17632] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 845.305913][ T806] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 845.316455][ T6072] dvb-usb: schedule remote query interval to 150 msecs. [ 845.358934][ T6072] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 845.367939][ T10] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 845.388117][T17632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 845.435629][T17632] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 845.463910][ T806] usb 5-1: device descriptor read/64, error -71 [ 845.498470][T17632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 845.529587][ T6072] dvb-usb: bulk message failed: -22 (1/0) [ 845.537213][ T30] audit: type=1400 audit(1781433880.371:1025): avc: denied { write } for pid=17960 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 845.567541][ T6072] dvb-usb: error while querying for an remote control event. [ 845.580739][T17632] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 845.602351][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 845.603088][ T806] usb usb5-port1: attempt power cycle [ 845.624635][ T10] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 845.636308][T17632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 845.645191][ T29] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 845.653623][T17632] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 845.672091][ T10] usb 4-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 845.689120][ T29] usb 3-1: device descriptor read/8, error -71 [ 845.724216][T17632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 845.732499][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 845.762572][ T5717] dvb-usb: bulk message failed: -22 (1/0) [ 845.768522][ T5717] dvb-usb: error while querying for an remote control event. [ 845.779247][ T10] usb 4-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 845.795781][ T5349] usb 1-1: USB disconnect, device number 105 [ 845.815724][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.855462][ T10] usb 4-1: config 0 descriptor?? [ 845.862082][ T30] audit: type=1400 audit(1781433880.680:1026): avc: denied { write } for pid=17983 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 845.974933][ T5349] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 845.998178][ T29] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 846.031521][ T806] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 846.062557][ T29] usb 3-1: device descriptor read/8, error -71 [ 846.086356][ T806] usb 5-1: device descriptor read/8, error -71 [ 846.186323][T17632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 846.269528][ T29] usb usb3-port1: unable to enumerate USB device [ 846.344696][T17632] 8021q: adding VLAN 0 to HW filter on device team0 [ 846.385253][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.392370][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 846.414805][ T806] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 846.462618][T18004] futex_wake_op: syz.2.2930 tries to shift op by -1; fix this program [ 846.855985][ T806] usb 5-1: device descriptor read/8, error -71 [ 846.949245][ T5717] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 847.836775][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.843926][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 847.942649][ T806] usb usb5-port1: unable to enumerate USB device [ 847.951403][T18013] FAULT_INJECTION: forcing a failure. [ 847.951403][T18013] name failslab, interval 1, probability 0, space 0, times 0 [ 847.954032][ T5717] usb 3-1: Using ep0 maxpacket: 16 [ 847.972598][T18013] CPU: 0 UID: 0 PID: 18013 Comm: syz.0.2931 Tainted: G L syzkaller #0 PREEMPT(full) [ 847.972618][T18013] Tainted: [L]=SOFTLOCKUP [ 847.972622][T18013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 847.972629][T18013] Call Trace: [ 847.972633][T18013] [ 847.972638][T18013] dump_stack_lvl+0x100/0x190 [ 847.972656][T18013] should_fail_ex.cold+0x5/0xa [ 847.972672][T18013] should_failslab+0xc2/0x120 [ 847.972685][T18013] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 847.972703][T18013] ? __alloc_skb+0x140/0x710 [ 847.972724][T18013] ? __alloc_skb+0x5b7/0x710 [ 847.972771][T18013] __alloc_skb+0x140/0x710 [ 847.972787][T18013] ? __alloc_skb+0x5b7/0x710 [ 847.972811][T18013] ? __pfx___alloc_skb+0x10/0x10 [ 847.972834][T18013] netlink_alloc_large_skb+0x69/0x150 [ 847.972851][T18013] netlink_sendmsg+0x680/0xda0 [ 847.972867][T18013] ? __pfx_netlink_sendmsg+0x10/0x10 [ 847.972881][T18013] ? __might_fault+0xa0/0x140 [ 847.972902][T18013] ____sys_sendmsg+0x9e1/0xb70 [ 847.972916][T18013] ? __pfx_netlink_sendmsg+0x10/0x10 [ 847.972931][T18013] ? __pfx_____sys_sendmsg+0x10/0x10 [ 847.972950][T18013] ___sys_sendmsg+0x190/0x1e0 [ 847.972965][T18013] ? __pfx____sys_sendmsg+0x10/0x10 [ 847.972998][T18013] __sys_sendmsg+0x170/0x220 [ 847.973016][T18013] ? __pfx___sys_sendmsg+0x10/0x10 [ 847.973040][T18013] ? rcu_is_watching+0x12/0xc0 [ 847.973059][T18013] do_syscall_64+0x115/0x870 [ 847.973074][T18013] ? clear_bhb_loop+0x40/0x90 [ 847.973089][T18013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.973101][T18013] RIP: 0033:0x7f6faf99ce59 [ 847.973112][T18013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 847.973124][T18013] RSP: 002b:00007f6fb07bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 847.973136][T18013] RAX: ffffffffffffffda RBX: 00007f6fafc15fa0 RCX: 00007f6faf99ce59 [ 847.973143][T18013] RDX: 0000000000004840 RSI: 0000200000000340 RDI: 0000000000000003 [ 847.973150][T18013] RBP: 00007f6fb07bd090 R08: 0000000000000000 R09: 0000000000000000 [ 847.973157][T18013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 847.973163][T18013] R13: 00007f6fafc16038 R14: 00007f6fafc15fa0 R15: 00007ffdd7695668 [ 847.973178][T18013] [ 848.500363][ T5717] usb 3-1: unable to get BOS descriptor or descriptor too short [ 848.530284][ T5717] usb 3-1: config 4 has an invalid interface number: 127 but max is 0 [ 848.540048][ T5717] usb 3-1: config 4 has no interface number 0 [ 848.548674][ T5717] usb 3-1: config 4 interface 127 has no altsetting 0 [ 848.810321][T18023] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2932'. [ 849.296641][ T5717] usb 3-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.48 [ 849.376375][ T5717] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.418505][ T30] audit: type=1400 audit(1781433884.020:1027): avc: denied { write } for pid=17995 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 849.445223][ T5717] usb 3-1: Product: syz [ 849.492563][ T5717] usb 3-1: SerialNumber: syz [ 849.583591][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 849.618151][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 849.677642][ T30] audit: type=1400 audit(1781433884.254:1028): avc: denied { write } for pid=18030 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 849.726656][ T10] usb 4-1: USB disconnect, device number 92 [ 850.142838][T18037] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56315 sclass=netlink_route_socket pid=18037 comm=syz.3.2935 [ 850.465674][ T5717] usb 3-1: USB disconnect, device number 63 [ 850.762044][T18051] kAFS: unparsable volume name [ 851.261853][ T30] audit: type=1400 audit(1781433885.714:1029): avc: denied { write } for pid=18038 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 851.624783][ T30] audit: type=1400 audit(1781433886.079:1030): avc: denied { write } for pid=18075 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 851.959306][T17632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 852.413998][T17632] veth0_vlan: entered promiscuous mode [ 852.494865][T18094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2943'. [ 852.658139][T17632] veth1_vlan: entered promiscuous mode [ 852.807976][T17632] veth0_macvtap: entered promiscuous mode [ 852.846196][T17632] veth1_macvtap: entered promiscuous mode [ 852.927050][T17632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 853.059263][T17632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 853.088825][ T30] audit: type=1400 audit(1781433887.445:1031): avc: denied { write } for pid=18080 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 853.644851][T18117] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 854.058633][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.220799][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.295680][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.341740][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.383063][ T30] audit: type=1400 audit(1781433888.662:1032): avc: denied { write } for pid=18118 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 854.632323][ T5819] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 854.868574][ T5819] usb 1-1: Using ep0 maxpacket: 32 [ 855.004351][ T5819] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 855.092313][ T5819] usb 1-1: config 0 interface 0 has no altsetting 0 [ 855.141568][ T5819] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 855.213540][ T5819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.246837][ T5819] usb 1-1: config 0 descriptor?? [ 855.329859][ T5865] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 855.359363][ T5865] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 855.466961][ T5867] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 855.476413][T18138] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 855.497299][ T5867] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 856.351690][ T5819] corsair-cpro 0003:1B1C:0C10.0024: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.0-1/input0 [ 856.362126][T18151] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2874'. [ 856.731212][T18121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 856.740881][ T30] audit: type=1400 audit(1781433890.861:1033): avc: denied { write } for pid=18139 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 856.773320][T18121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 856.776728][ T5819] corsair-cpro 0003:1B1C:0C10.0024: probe with driver corsair-cpro failed with error -110 [ 856.809853][T18121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 856.838060][ T30] audit: type=1400 audit(1781433890.908:1034): avc: denied { ioctl } for pid=18161 comm="syz.2.2957" path="socket:[57555]" dev="sockfs" ino=57555 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 856.868421][T18134] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 856.883807][T18121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 856.941669][ T30] audit: type=1400 audit(1781433891.001:1035): avc: denied { getopt } for pid=18161 comm="syz.2.2957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 856.974676][ T5819] usb 1-1: USB disconnect, device number 106 [ 857.016037][ T30] audit: type=1400 audit(1781433891.086:1036): avc: denied { write } for pid=18165 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 857.051137][T18134] usb 2-1: device descriptor read/64, error -71 [ 857.170764][T18171] syzkaller0: entered promiscuous mode [ 857.176531][T18171] syzkaller0: entered allmulticast mode [ 857.324767][T18134] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 857.424154][ T30] audit: type=1400 audit(1781433891.507:1037): avc: denied { write } for pid=18173 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 857.463767][T18134] usb 2-1: device descriptor read/64, error -71 [ 857.566912][T18190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2961'. [ 857.584295][T18134] usb usb2-port1: attempt power cycle [ 857.940177][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 858.032330][T18134] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 858.040848][ T30] audit: type=1400 audit(1781433892.068:1038): avc: denied { write } for pid=18192 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 858.119104][T18134] usb 2-1: device descriptor read/8, error -71 [ 860.746131][T18214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2963'. [ 861.239097][T18217] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2967'. [ 861.560074][T18228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2970'. [ 861.708537][T18238] netlink: 'syz.4.2971': attribute type 49 has an invalid length. [ 861.860975][ T5724] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 862.287949][ T30] audit: type=1400 audit(1781433896.055:1039): avc: denied { write } for pid=18206 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 862.368643][ T5724] usb 4-1: Using ep0 maxpacket: 8 [ 862.408454][ T5724] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 862.471574][ T5724] usb 4-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 862.537564][T18238] bond_slave_0: entered promiscuous mode [ 862.547350][ T5724] usb 4-1: config 0 interface 0 has no altsetting 0 [ 862.554810][T18238] bond_slave_0: entered allmulticast mode [ 862.587821][ T30] audit: type=1400 audit(1781433896.335:1040): avc: denied { create } for pid=18237 comm="syz.2.2972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 862.593746][ T5724] usb 4-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 862.631241][T18248] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2972'. [ 862.742199][T18251] loop9: detected capacity change from 0 to 2640 [ 862.761998][T18251] buffer_io_error: 11 callbacks suppressed [ 862.762034][T18251] Buffer I/O error on dev loop9, logical block 0, async page read [ 862.776453][T18251] Buffer I/O error on dev loop9, logical block 0, async page read [ 862.784505][T18251] Buffer I/O error on dev loop9, logical block 0, async page read [ 862.792625][T18251] Buffer I/O error on dev loop9, logical block 0, async page read [ 862.800715][T18251] Buffer I/O error on dev loop9, logical block 0, async page read [ 862.816578][T18251] Buffer I/O error on dev loop9, logical block 0, async page read [ 862.824711][T18251] Buffer I/O error on dev loop9, logical block 0, async page read [ 862.832865][T18251] Buffer I/O error on dev loop9, logical block 0, async page read [ 862.840849][T18251] ldm_validate_partition_table(): Disk read failed. [ 862.847542][T18251] Buffer I/O error on dev loop9, logical block 0, async page read [ 862.855597][T18251] Buffer I/O error on dev loop9, logical block 0, async page read [ 862.863828][T18251] Dev loop9: unable to read RDB block 0 [ 862.870088][T18251] loop9: unable to read partition table [ 862.876278][T18251] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 863.267856][ T30] audit: type=1400 audit(1781433896.382:1041): avc: denied { write } for pid=18237 comm="syz.2.2972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 863.298638][ T5724] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.320388][ T5724] usb 4-1: config 0 descriptor?? [ 863.336363][ T30] audit: type=1400 audit(1781433896.382:1042): avc: denied { nlmsg_write } for pid=18237 comm="syz.2.2972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 863.375296][ T30] audit: type=1400 audit(1781433897.047:1043): avc: denied { write } for pid=18247 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 864.101021][T18134] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 864.423797][T18134] usb 5-1: Using ep0 maxpacket: 8 [ 864.461779][T18134] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 864.503741][T18134] usb 5-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 864.528893][T18273] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.2965'. [ 864.540381][T18273] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 864.552714][T18134] usb 5-1: config 0 interface 0 has no altsetting 0 [ 864.598645][T18134] usb 5-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 864.673309][T18134] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.750396][T18134] usb 5-1: config 0 descriptor?? [ 864.905362][T18284] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2977'. [ 864.935164][T18285] netlink: 'syz.1.2978': attribute type 1 has an invalid length. [ 865.171394][ T30] audit: type=1400 audit(1781433898.759:1044): avc: denied { execute } for pid=18283 comm="syz.1.2978" path="/proc/18/mountinfo" dev="proc" ino=56706 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 865.208656][T18289] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2978'. [ 865.355342][ T30] audit: type=1400 audit(1781433898.928:1045): avc: denied { write } for pid=18265 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 865.396309][T18289] nlmon0: entered promiscuous mode [ 865.526144][T18134] usbhid 5-1:0.0: can't add hid device: -71 [ 865.578046][T18134] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 865.639770][T18134] usb 5-1: USB disconnect, device number 92 [ 865.900063][T18305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2979'. [ 865.927507][ T30] audit: type=1400 audit(1781433899.461:1046): avc: denied { write } for pid=18303 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 866.194651][T18310] futex_wake_op: syz.2.2981 tries to shift op by -1; fix this program [ 866.204905][T18134] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 867.806152][T18318] blktrace: Concurrent blktraces are not allowed on loop0 [ 868.609570][ T29] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 868.780392][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 868.790191][ T29] usb 3-1: unable to get BOS descriptor or descriptor too short [ 868.804379][ T29] usb 3-1: config 4 has an invalid interface number: 127 but max is 0 [ 868.814823][ T29] usb 3-1: config 4 has no interface number 0 [ 868.822161][ T29] usb 3-1: config 4 interface 127 has no altsetting 0 [ 868.840775][ T29] usb 3-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.48 [ 868.850982][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.861111][ T29] usb 3-1: Product: syz [ 868.869100][ T29] usb 3-1: SerialNumber: syz [ 869.017535][T18327] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 869.059904][ T5724] usbhid 4-1:0.0: can't add hid device: -32 [ 869.349227][T18134] usb 1-1: unable to get BOS descriptor or descriptor too short [ 869.424140][T18134] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 869.493081][T18134] usb 1-1: can't read configurations, error -71 [ 870.091124][ T5724] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 870.318901][ T29] usb 3-1: USB disconnect, device number 64 [ 870.810265][ T30] audit: type=1400 audit(1781433904.028:1047): avc: denied { write } for pid=18312 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 870.885190][T18352] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2990'. [ 870.920144][ T29] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 871.135298][ T29] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 871.174585][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 871.212568][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 871.247144][ T29] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 871.291476][ T5725] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 871.309755][ T29] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 871.336512][ T29] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 871.364859][ T29] usb 5-1: Manufacturer: syz [ 871.396057][ T29] usb 5-1: config 0 descriptor?? [ 871.422886][ T30] audit: type=1400 audit(1781433904.608:1048): avc: denied { write } for pid=18360 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 871.499433][ T5724] usb 4-1: USB disconnect, device number 93 [ 871.507521][ T5725] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 871.566712][ T5725] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.599877][ T5725] usb 3-1: Product: syz [ 871.616392][ T5725] usb 3-1: Manufacturer: syz [ 871.638114][ T5725] usb 3-1: SerialNumber: syz [ 871.665177][ T5725] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 871.707923][ T806] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 871.745505][T18365] fuse: Unknown parameter './file0' [ 872.144117][T18374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2992'. [ 872.785875][T18136] usb 3-1: USB disconnect, device number 65 [ 872.894487][ T806] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 873.390296][ T806] ath9k_htc: Failed to initialize the device [ 873.411181][T18136] usb 3-1: ath9k_htc: USB layer deinitialized [ 873.514991][ T30] audit: type=1400 audit(1781433906.573:1049): avc: denied { write } for pid=18362 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 873.765683][ T30] audit: type=1400 audit(1781433906.798:1050): avc: denied { write } for pid=18389 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 873.949453][T18397] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2996'. [ 873.992197][ T29] usbhid 5-1:0.0: can't add hid device: -71 [ 874.005160][T18397] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2996'. [ 874.026943][ T29] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 874.093608][ T29] usb 5-1: USB disconnect, device number 93 [ 875.594378][T16274] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 875.611667][T16274] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 875.621227][T16274] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 875.629574][T16274] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 875.639409][T16274] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 876.132831][T18134] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 876.370119][T18134] usb 2-1: Using ep0 maxpacket: 8 [ 876.467171][T18134] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 876.532011][T18134] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 876.708385][T18134] usb 2-1: config 0 interface 0 has no altsetting 0 [ 876.715105][T18134] usb 2-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 876.724236][T18134] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.749443][T18134] usb 2-1: config 0 descriptor?? [ 877.852984][T16274] Bluetooth: hci4: command tx timeout [ 878.154450][ T30] audit: type=1400 audit(1781433910.896:1051): avc: denied { write } for pid=18425 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 878.319153][T18417] lo speed is unknown, defaulting to 1000 [ 878.547342][ T30] audit: type=1400 audit(1781433911.271:1052): avc: denied { write } for pid=18467 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 879.106942][T18480] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3003'. [ 880.075417][T16274] Bluetooth: hci4: command tx timeout [ 880.152037][T18417] bridge0: port 1(bridge_slave_0) entered blocking state [ 880.193424][T18417] bridge0: port 1(bridge_slave_0) entered disabled state [ 880.214568][T18417] bridge_slave_0: entered allmulticast mode [ 880.247347][T18417] bridge_slave_0: entered promiscuous mode [ 880.287483][T18417] bridge0: port 2(bridge_slave_1) entered blocking state [ 880.313418][T18417] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.339433][T18417] bridge_slave_1: entered allmulticast mode [ 880.362627][T18417] bridge_slave_1: entered promiscuous mode [ 880.421625][ T30] audit: type=1400 audit(1781433913.021:1053): avc: denied { write } for pid=18484 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 880.558398][T18417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 880.650388][T18417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 880.772452][ T30] audit: type=1400 audit(1781433913.348:1054): avc: denied { write } for pid=18507 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 880.828559][T18417] team0: Port device team_slave_0 added [ 880.852698][T18417] team0: Port device team_slave_1 added [ 881.059332][T18417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 881.087362][T18417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 881.233875][T18417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 881.273455][T18417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 881.290933][T18417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 881.322116][T18417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 881.435534][T18527] Cannot find map_set index 135 as target [ 882.302715][T16274] Bluetooth: hci4: command tx timeout [ 882.509423][T18417] hsr_slave_0: entered promiscuous mode [ 882.550024][T18417] hsr_slave_1: entered promiscuous mode [ 882.591874][T18417] debugfs: 'hsr0' already exists in 'hsr' [ 882.632306][T18417] Cannot create hsr debugfs directory [ 882.672978][T18134] usbhid 2-1:0.0: can't add hid device: -71 [ 882.706346][T18134] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 882.765533][T18134] usb 2-1: USB disconnect, device number 89 [ 884.405602][ T806] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 884.490432][ T30] audit: type=1400 audit(1781433916.839:1055): avc: denied { read } for pid=18524 comm="syz.3.3013" name="/" dev="configfs" ino=1159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 884.520970][T16274] Bluetooth: hci4: command tx timeout [ 884.566646][ T30] audit: type=1400 audit(1781433916.886:1056): avc: denied { read open } for pid=18524 comm="syz.3.3013" path="/" dev="configfs" ino=1159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 884.628932][ T806] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 884.656168][ T806] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 884.666772][ T30] audit: type=1400 audit(1781433916.960:1057): avc: denied { write } for pid=18522 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 884.711367][ T806] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 884.740642][ T806] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.768225][ T806] usb 3-1: config 0 descriptor?? [ 885.337398][T18417] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 885.386828][T18417] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.389822][ T30] audit: type=1400 audit(1781433917.681:1058): avc: denied { write } for pid=18558 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 885.960042][T18417] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 885.987803][T18417] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.413296][T18136] usb 2-1: new full-speed USB device number 90 using dummy_hcd [ 886.659220][T18136] usb 2-1: device descriptor read/64, error -71 [ 886.990366][T18136] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 887.013033][T18582] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3023'. [ 887.025254][T18417] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 887.036076][T18417] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.150331][ T806] usbhid 3-1:0.0: can't add hid device: -71 [ 887.168944][ T806] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 887.171128][T18136] usb 2-1: device descriptor read/64, error -71 [ 887.208738][ T806] usb 3-1: USB disconnect, device number 66 [ 888.168596][T18136] usb usb2-port1: attempt power cycle [ 888.192972][T18417] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 888.230375][T18417] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.561037][T18136] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 888.637825][T18136] usb 2-1: device descriptor read/8, error -71 [ 888.923626][T18136] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 889.276160][T18136] usb 2-1: device not accepting address 93, error -71 [ 889.459839][T18136] usb usb2-port1: unable to enumerate USB device [ 890.109580][T18134] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 890.119403][T18417] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 890.609871][T18417] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 890.634043][T18417] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 890.657630][T18417] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 890.675401][T18417] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 890.708011][T18134] usb 2-1: Using ep0 maxpacket: 8 [ 890.714449][T18417] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 890.744974][T18134] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 890.758657][T18417] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 890.782551][T18134] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 890.798438][T18417] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 890.837050][T18134] usb 2-1: config 0 interface 0 has no altsetting 0 [ 890.852969][T18134] usb 2-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 890.874970][T18602] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3029'. [ 890.886473][T18134] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.899971][T18602] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3029'. [ 890.906083][T18134] usb 2-1: config 0 descriptor?? [ 892.355879][T18134] usbhid 2-1:0.0: can't add hid device: -71 [ 892.362075][T18134] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 892.516836][T18134] usb 2-1: USB disconnect, device number 94 [ 892.565320][T18417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 892.675753][T18417] 8021q: adding VLAN 0 to HW filter on device team0 [ 892.684707][T18620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3033'. [ 892.754001][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.761158][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 892.837833][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.844983][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 893.208837][ T6072] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 893.297143][T18647] 9p: Bad value for 'rfdno' [ 893.341394][T18646] 9p: Bad value for 'rfdno' [ 893.400918][ T6072] usb 4-1: Using ep0 maxpacket: 8 [ 893.480757][ T6072] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 893.538010][ T6072] usb 4-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 893.620976][ T6072] usb 4-1: config 0 interface 0 has no altsetting 0 [ 893.664753][ T6072] usb 4-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 893.725923][ T6072] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.527194][ T6072] usb 4-1: config 0 descriptor?? [ 897.869129][T18417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 898.455562][T16274] Bluetooth: hci5: command 0x0406 tx timeout [ 901.013910][T18417] veth0_vlan: entered promiscuous mode [ 901.118537][ T6072] usbhid 4-1:0.0: can't add hid device: -32 [ 901.124570][ T6072] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 901.125335][ T30] audit: type=1400 audit(1781433932.401:1059): avc: denied { write } for pid=18700 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 901.160451][T18417] veth1_vlan: entered promiscuous mode [ 901.468905][ T10] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 902.044147][ T30] audit: type=1400 audit(1781433932.701:1060): avc: denied { connect } for pid=18731 comm="syz.1.3051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 902.290029][ T30] audit: type=1400 audit(1781433933.487:1061): avc: denied { write } for pid=18738 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 902.335069][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 902.392621][ T10] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 902.431316][ T10] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 902.436776][T18417] veth0_macvtap: entered promiscuous mode [ 902.538887][T18417] veth1_macvtap: entered promiscuous mode [ 902.591884][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 902.643885][ T10] usb 1-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 902.664635][ T806] usb 4-1: USB disconnect, device number 94 [ 902.694376][T18417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 902.740477][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.769550][T18417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 902.821548][ T10] usb 1-1: config 0 descriptor?? [ 902.846679][ T137] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.895578][ T137] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.953035][ T137] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.991989][ T137] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.422473][T18757] xt_hashlimit: size too large, truncated to 1048576 [ 903.620015][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 903.662986][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 903.850644][ T5865] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 903.900206][ T5865] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 903.950578][ T30] audit: type=1400 audit(1781433935.049:1062): avc: denied { write } for pid=18747 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 904.377579][ T30] audit: type=1400 audit(1781433935.442:1063): avc: denied { write } for pid=18772 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 905.220351][ T5717] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 905.561710][ T5717] usb 5-1: Using ep0 maxpacket: 8 [ 906.238518][ T5717] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 906.251660][ T5717] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.260963][ T5717] usb 5-1: Product: syz [ 906.265358][ T5717] usb 5-1: Manufacturer: syz [ 906.270369][ T5717] usb 5-1: SerialNumber: syz [ 906.282985][ T5717] usb 5-1: config 0 descriptor?? [ 906.295323][ T5717] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 906.307730][ T5717] pctv452e: pctv452e_power_ctrl: 1 [ 906.307730][ T5717] [ 906.329025][ T5717] usb 5-1: selecting invalid altsetting 3 [ 906.385877][ T5717] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 906.385877][ T5717] [ 906.902763][ T5717] dvb-usb: bulk message failed: -22 (5/0) [ 907.492116][ T5717] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 907.540841][ T5717] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 907.604392][ T5717] usb 5-1: media controller created [ 907.633511][T18807] xt_hashlimit: size too large, truncated to 1048576 [ 907.678282][ T5717] dvb-usb: bulk message failed: -22 (8/0) [ 907.713597][ T5717] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 907.746060][ T5717] dvb-usb: MAC address reading failed. [ 907.800366][T18801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3057'. [ 907.858906][ T5717] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 908.101182][T18813] netlink: 18 bytes leftover after parsing attributes in process `syz.3.3060'. [ 908.147826][ T806] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 908.293152][ T5717] DVB: Unable to find symbol stb0899_attach() [ 908.307327][ T10] usbhid 1-1:0.0: can't add hid device: -32 [ 908.322012][ T5717] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 908.340083][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 908.416307][ T806] usb 3-1: Using ep0 maxpacket: 16 [ 908.489183][ T806] usb 3-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 908.535342][ T806] usb 3-1: config 251 has 0 interfaces, different from the descriptor's value: 1 [ 908.563202][ T806] usb 3-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 908.575254][ T806] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 908.583880][ T806] usb 3-1: Product: syz [ 908.596536][ T5717] rc_core: IR keymap rc-tt-1500 not found [ 908.601925][ T806] usb 3-1: SerialNumber: syz [ 908.620532][ T5717] Registered IR keymap rc-empty [ 908.650996][ T5717] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 908.739865][ T5717] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input41 [ 908.779979][ T10] usb 1-1: USB disconnect, device number 109 [ 908.846458][T18823] IPVS: set_ctl: invalid protocol: 22 172.30.1.2:20003 [ 908.851597][T18825] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3063'. [ 908.858095][ T5717] dvb-usb: schedule remote query interval to 100 msecs. [ 908.909269][ T5717] pctv452e: pctv452e_power_ctrl: 0 [ 908.909269][ T5717] [ 908.932713][ T5717] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 908.962644][ T5717] usb 5-1: USB disconnect, device number 94 [ 909.339288][ T5717] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 909.434756][ T10] usb 3-1: USB disconnect, device number 67 [ 909.591934][T18831] netlink: 'syz.0.3064': attribute type 1 has an invalid length. [ 909.615431][T18831] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3064'. [ 909.766206][T18833] netlink: 'syz.0.3066': attribute type 4 has an invalid length. [ 909.793283][ T5739] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 909.805933][T18833] netlink: 'syz.0.3066': attribute type 4 has an invalid length. [ 909.926013][T18835] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3067'. [ 909.985759][ T5739] usb 4-1: Using ep0 maxpacket: 8 [ 910.001529][T18837] IPVS: length: 4096 != 8 [ 910.007760][ T5739] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 910.025333][ T5739] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.036264][ T5739] usb 4-1: Product: syz [ 910.045918][ T5739] usb 4-1: Manufacturer: syz [ 910.054758][ T5739] usb 4-1: SerialNumber: syz [ 910.071222][ T5739] usb 4-1: config 0 descriptor?? [ 910.099033][ T5739] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 910.111020][ T5717] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 910.129163][ T5739] dvb-usb: bulk message failed: -22 (2/0) [ 910.152182][ T5739] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 910.171531][ T5739] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 910.186976][ T5739] usb 4-1: media controller created [ 910.232270][ T5739] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 910.318483][ T5717] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 910.352918][ T5717] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 910.393612][ T5717] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 910.439974][ T5717] usb 1-1: config 0 interface 0 has no altsetting 0 [ 910.468866][ T5717] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 910.499004][ T5717] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 910.544364][ T5717] usb 1-1: config 0 interface 0 has no altsetting 0 [ 910.562892][ T5739] dvb-usb: bulk message failed: -22 (1/0) [ 910.570902][ T5717] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 910.590447][ T5717] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 910.650906][ T5717] usb 1-1: config 0 interface 0 has no altsetting 0 [ 910.687109][ T5717] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 910.749586][ T5717] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 910.780453][ T5739] DVB: Unable to find symbol mt352_attach() [ 910.856507][T18838] tmpfs: Bad value for 'mpol' [ 911.743485][ T5739] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 912.356601][ T5717] usb 1-1: config 0 interface 0 has no altsetting 0 [ 913.331121][ T5739] rc_core: IR keymap rc-dvico-portable not found [ 913.338651][ T5739] Registered IR keymap rc-empty [ 913.345191][ T5739] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 913.361857][ T5739] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input42 [ 913.374046][ T5717] usb 1-1: unable to read config index 4 descriptor/start: -71 [ 913.382130][ T5717] usb 1-1: can't read configurations, error -71 [ 913.390258][ T5739] dvb-usb: schedule remote query interval to 100 msecs. [ 913.398115][ T5739] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 913.972537][T18136] dvb-usb: bulk message failed: -22 (1/0) [ 913.995336][T18850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3069'. [ 914.052096][ T10] usb 4-1: USB disconnect, device number 95 [ 914.184921][ T10] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 914.201810][T18856] Cannot find map_set index 135 as target [ 914.345569][T18136] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 915.275641][T18136] usb 2-1: Using ep0 maxpacket: 8 [ 915.664184][T18136] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 915.675706][T18136] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 915.688936][T18136] usb 2-1: config 0 interface 0 has no altsetting 0 [ 915.725649][T18136] usb 2-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 915.745012][T18136] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.801916][T18136] usb 2-1: config 0 descriptor?? [ 915.927561][ T10] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 916.098091][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 916.434566][ T10] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 916.456584][T18136] usbhid 2-1:0.0: can't add hid device: -71 [ 916.465331][T18868] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 916.473623][T18136] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 916.481430][ T10] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 916.497908][T18136] usb 2-1: USB disconnect, device number 95 [ 916.506874][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 916.531616][ T10] usb 3-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 916.545743][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.569644][ T10] usb 3-1: config 0 descriptor?? [ 917.237149][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 917.244477][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 917.260790][ T10] usb 3-1: USB disconnect, device number 68 [ 918.393502][T18886] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3082'. [ 918.842595][ T30] audit: type=1326 audit(1781433948.852:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18889 comm="syz.3.3083" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63639ce59 code=0x7ffc0000 [ 918.962811][ T30] audit: type=1326 audit(1781433948.852:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18889 comm="syz.3.3083" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63639ce59 code=0x7ffc0000 [ 919.053289][ T30] audit: type=1326 audit(1781433948.871:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18889 comm="syz.3.3083" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fd63639ce59 code=0x7ffc0000 [ 919.314941][ T30] audit: type=1326 audit(1781433948.871:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18889 comm="syz.3.3083" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63639ce59 code=0x7ffc0000 [ 919.414217][T18900] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3084'. [ 919.505121][ T30] audit: type=1326 audit(1781433948.871:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18889 comm="syz.3.3083" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63639ce59 code=0x7ffc0000 [ 919.673213][T18906] loop9: detected capacity change from 0 to 2640 [ 919.684223][T18906] buffer_io_error: 11 callbacks suppressed [ 919.684255][T18906] Buffer I/O error on dev loop9, logical block 0, async page read [ 919.698228][T18906] Buffer I/O error on dev loop9, logical block 0, async page read [ 919.708309][T18906] Buffer I/O error on dev loop9, logical block 0, async page read [ 919.716841][T18906] Buffer I/O error on dev loop9, logical block 0, async page read [ 919.725143][T18906] Buffer I/O error on dev loop9, logical block 0, async page read [ 919.736318][T18906] Buffer I/O error on dev loop9, logical block 0, async page read [ 919.745320][T18906] Buffer I/O error on dev loop9, logical block 0, async page read [ 919.753789][T18906] Buffer I/O error on dev loop9, logical block 0, async page read [ 919.761807][T18906] ldm_validate_partition_table(): Disk read failed. [ 919.768878][T18906] Buffer I/O error on dev loop9, logical block 0, async page read [ 919.778201][T18906] Buffer I/O error on dev loop9, logical block 0, async page read [ 919.788700][T18906] Dev loop9: unable to read RDB block 0 [ 919.795396][T18906] loop9: unable to read partition table [ 919.801421][T18906] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 920.211977][ T30] audit: type=1326 audit(1781433948.871:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18889 comm="syz.3.3083" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd63639ce59 code=0x7ffc0000 [ 920.261422][ T30] audit: type=1326 audit(1781433948.881:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18889 comm="syz.3.3083" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63639ce59 code=0x7ffc0000 [ 920.469794][ T30] audit: type=1326 audit(1781433948.881:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18889 comm="syz.3.3083" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63639ce59 code=0x7ffc0000 [ 920.831178][ T30] audit: type=1326 audit(1781433948.890:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18889 comm="syz.3.3083" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd63639ce59 code=0x7ffc0000 [ 920.858884][ T30] audit: type=1326 audit(1781433948.890:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18889 comm="syz.3.3083" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63639ce59 code=0x7ffc0000 [ 920.885524][ T10] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 921.047565][ T10] usb 2-1: no configurations [ 921.052297][ T10] usb 2-1: can't read configurations, error -22 [ 921.206091][ T10] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 921.388396][ T10] usb 2-1: no configurations [ 921.396989][ T10] usb 2-1: can't read configurations, error -22 [ 921.423578][ T10] usb usb2-port1: attempt power cycle [ 921.706980][T16274] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 921.726526][T16274] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 921.741214][T16274] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 921.758873][T16274] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 921.768449][T16274] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 921.804426][ T10] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 921.839115][ T10] usb 2-1: no configurations [ 921.843914][ T10] usb 2-1: can't read configurations, error -22 [ 922.050311][ T10] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 922.113185][ T10] usb 2-1: no configurations [ 922.161952][ T10] usb 2-1: can't read configurations, error -22 [ 922.254012][ T10] usb usb2-port1: unable to enumerate USB device [ 922.475916][T18924] netlink: 'syz.0.3090': attribute type 4 has an invalid length. [ 922.523856][T18924] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3090'. [ 923.970239][T18947] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1128 sclass=netlink_route_socket pid=18947 comm=syz.0.3095 [ 923.988375][T18947] Bluetooth: MGMT ver 1.23 [ 924.818219][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 924.824802][ T5620] Bluetooth: hci2: command tx timeout [ 924.916735][ T5875] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 924.932403][ T5875] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.969046][ T5875] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 925.252960][T18938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3093'. [ 925.376070][ T5875] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 925.395726][ T5875] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.418594][ T5875] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 925.526943][T18955] syz.2.3098: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 925.547990][T18955] CPU: 1 UID: 0 PID: 18955 Comm: syz.2.3098 Tainted: G L syzkaller #0 PREEMPT(full) [ 925.548027][T18955] Tainted: [L]=SOFTLOCKUP [ 925.548034][T18955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 925.548046][T18955] Call Trace: [ 925.548053][T18955] [ 925.548062][T18955] dump_stack_lvl+0x100/0x190 [ 925.548089][T18955] warn_alloc.cold+0x95/0x1c1 [ 925.548112][T18955] ? __pfx_warn_alloc+0x10/0x10 [ 925.548147][T18955] ? stack_depot_save_flags+0x27/0x9d0 [ 925.548174][T18955] ? __lock_acquire+0x4a5/0x2630 [ 925.548205][T18955] ? xskq_create+0xfb/0x1d0 [ 925.548227][T18955] __vmalloc_node_range_noprof+0x136c/0x1630 [ 925.548261][T18955] ? xskq_create+0xfb/0x1d0 [ 925.548288][T18955] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 925.548324][T18955] ? xskq_create+0xfb/0x1d0 [ 925.548344][T18955] vmalloc_user_noprof+0x9e/0xe0 [ 925.548369][T18955] ? xskq_create+0xfb/0x1d0 [ 925.548389][T18955] xskq_create+0xfb/0x1d0 [ 925.548417][T18955] xsk_setsockopt+0x743/0xab0 [ 925.548438][T18955] ? __pfx_xsk_setsockopt+0x10/0x10 [ 925.548458][T18955] ? find_held_lock+0x2b/0x80 [ 925.548476][T18955] ? __fget_files+0x215/0x3d0 [ 925.548504][T18955] ? selinux_socket_setsockopt+0x6a/0x80 [ 925.548531][T18955] ? __pfx_xsk_setsockopt+0x10/0x10 [ 925.548551][T18955] do_sock_setsockopt+0xf3/0x1d0 [ 925.548576][T18955] __sys_setsockopt+0x195/0x220 [ 925.548610][T18955] __x64_sys_setsockopt+0xbd/0x160 [ 925.548638][T18955] ? do_syscall_64+0x90/0x870 [ 925.548661][T18955] ? lockdep_hardirqs_on+0x78/0x100 [ 925.548686][T18955] do_syscall_64+0x115/0x870 [ 925.548709][T18955] ? clear_bhb_loop+0x40/0x90 [ 925.548733][T18955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.548753][T18955] RIP: 0033:0x7f200559ce59 [ 925.548771][T18955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 925.548789][T18955] RSP: 002b:00007f2006509028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 925.548809][T18955] RAX: ffffffffffffffda RBX: 00007f2005815fa0 RCX: 00007f200559ce59 [ 925.548821][T18955] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 925.548832][T18955] RBP: 00007f2005632d6f R08: 0000000000000004 R09: 0000000000000000 [ 925.548844][T18955] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 925.548855][T18955] R13: 00007f2005816038 R14: 00007f2005815fa0 R15: 00007ffc1ebc1f28 [ 925.548881][T18955] [ 925.548968][T18955] Mem-Info: [ 925.625611][T18957] 9p: Bad value for 'rfdno' [ 925.705271][T18955] active_anon:24633 inactive_anon:0 isolated_anon:0 [ 925.705271][T18955] active_file:6995 inactive_file:56272 isolated_file:0 [ 925.705271][T18955] unevictable:768 dirty:381 writeback:0 [ 925.705271][T18955] slab_reclaimable:7735 slab_unreclaimable:110662 [ 925.705271][T18955] mapped:31641 shmem:13762 pagetables:1414 [ 925.705271][T18955] sec_pagetables:0 bounce:0 [ 925.705271][T18955] kernel_misc_reclaimable:0 [ 925.705271][T18955] free:1224253 free_pcp:31624 free_cma:0 [ 1037.929649][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1037.929669][ C0] rcu: 1-...!: (5 ticks this GP) idle=f084/1/0x4000000000000000 softirq=107939/107939 fqs=5 [ 1037.930394][ C0] rcu: (detected by 0, t=10502 jiffies, g=118193, q=542 ncpus=2) [ 1037.930414][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1037.930437][ C1] NMI backtrace for cpu 1 [ 1037.930452][ C1] CPU: 1 UID: 0 PID: 18955 Comm: syz.2.3098 Tainted: G L syzkaller #0 PREEMPT(full) [ 1037.930472][ C1] Tainted: [L]=SOFTLOCKUP [ 1037.930477][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1037.930485][ C1] RIP: 0010:check_preemption_disabled+0x1a/0xe0 [ 1037.930510][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 54 55 53 48 83 ec 08 65 8b 1d 85 e6 7f 08 65 f7 05 76 e6 7f 08 ff ff ff 7f <74> 0f 48 83 c4 08 89 d8 5b 5d 41 5c e9 d5 22 03 00 9c 58 f6 c4 02 [ 1037.930522][ C1] RSP: 0018:ffffc90000a08d70 EFLAGS: 00000002 [ 1037.930534][ C1] RAX: 00000000ffffffff RBX: 0000000000000001 RCX: 0000000000000001 [ 1037.930543][ C1] RDX: 0000000000000000 RSI: ffffffff8e000f43 RDI: ffffffff8c1c4780 [ 1037.930552][ C1] RBP: ffff888078e0a540 R08: 0000000000000005 R09: 0000000000000000 [ 1037.930561][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: 00000000ffffffff [ 1037.930569][ C1] R13: 0000000000000046 R14: dffffc0000000000 R15: ffff8880b8528750 [ 1037.930579][ C1] FS: 00007f20065096c0(0000) GS:ffff888124487000(0000) knlGS:0000000000000000 [ 1037.930594][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1037.930603][ C1] CR2: 00007f74ec799d0f CR3: 00000000626ec000 CR4: 00000000003526f0 [ 1037.930612][ C1] Call Trace: [ 1037.930617][ C1] [ 1037.930625][ C1] lock_is_held_type+0x60/0x140 [ 1037.930643][ C1] advance_sched+0x838/0xd20 [ 1037.930663][ C1] ? find_held_lock+0x2b/0x80 [ 1037.930678][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 1037.930701][ C1] ? __pfx_advance_sched+0x10/0x10 [ 1037.930720][ C1] __hrtimer_run_queues+0x470/0xa00 [ 1037.930743][ C1] hrtimer_interrupt+0x3e5/0x940 [ 1037.930766][ C1] __sysvec_apic_timer_interrupt+0x10b/0x460 [ 1037.930785][ C1] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 1037.930802][ C1] [ 1037.930806][ C1] [ 1037.930812][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1037.930826][ C1] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 1037.930848][ C1] Code: 00 e8 61 cd 29 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 4f 84 21 00 48 85 ed 0f 85 d7 01 00 00 e8 61 89 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 1037.930860][ C1] RSP: 0018:ffffc900041473b0 EFLAGS: 00000287 [ 1037.930870][ C1] RAX: ffffffff8f52b3f8 RBX: ffffffff8f52b3a0 RCX: ffffc9001d351000 [ 1037.930879][ C1] RDX: 0000000000080000 RSI: ffffffff81e7281f RDI: ffff888078e0a540 [ 1037.930887][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 1037.930895][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000033fc [ 1037.930903][ C1] R13: ffffffff8f52b3f8 R14: ffffc90004147430 R15: dffffc0000000000 [ 1037.930915][ C1] ? console_flush_one_record+0xabf/0xe50 [ 1037.930938][ C1] ? __pfx_console_flush_one_record+0x10/0x10 [ 1037.930961][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1037.930976][ C1] console_unlock+0x103/0x260 [ 1037.930994][ C1] ? __pfx_console_unlock+0x10/0x10 [ 1037.931012][ C1] ? lock_acquire+0x100/0x370 [ 1037.931031][ C1] vprintk_emit+0x407/0x6b0 [ 1037.931051][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 1037.931069][ C1] ? rcu_is_watching+0x12/0xc0 [ 1037.931087][ C1] ? trace_sched_exit_tp+0x11c/0x160 [ 1037.931103][ C1] _printk+0xcf/0x110 [ 1037.931116][ C1] ? __pfx__printk+0x10/0x10 [ 1037.931130][ C1] ? irqentry_exit+0x24d/0x970 [ 1037.931149][ C1] show_free_areas+0x881/0x1d60 [ 1037.931174][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 1037.931193][ C1] ? __pfx_show_free_areas+0x10/0x10 [ 1037.931209][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 1037.931227][ C1] ? _printk+0xcf/0x110 [ 1037.931239][ C1] ? __pfx__printk+0x10/0x10 [ 1037.931255][ C1] ? __show_mem+0x28/0x134 [ 1037.931271][ C1] __show_mem+0x41/0x134 [ 1037.931288][ C1] warn_alloc.cold+0x13c/0x1c1 [ 1037.931303][ C1] ? __pfx_warn_alloc+0x10/0x10 [ 1037.931324][ C1] ? stack_depot_save_flags+0x27/0x9d0 [ 1037.931343][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1037.931360][ C1] ? xskq_create+0xfb/0x1d0 [ 1037.931374][ C1] __vmalloc_node_range_noprof+0x136c/0x1630 [ 1037.931395][ C1] ? xskq_create+0xfb/0x1d0 [ 1037.931411][ C1] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1037.931431][ C1] ? xskq_create+0xfb/0x1d0 [ 1037.931445][ C1] vmalloc_user_noprof+0x9e/0xe0 [ 1037.931461][ C1] ? xskq_create+0xfb/0x1d0 [ 1037.931474][ C1] xskq_create+0xfb/0x1d0 [ 1037.931488][ C1] xsk_setsockopt+0x743/0xab0 [ 1037.931501][ C1] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1037.931514][ C1] ? find_held_lock+0x2b/0x80 [ 1037.931526][ C1] ? __fget_files+0x215/0x3d0 [ 1037.931543][ C1] ? selinux_socket_setsockopt+0x6a/0x80 [ 1037.931562][ C1] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1037.931576][ C1] do_sock_setsockopt+0xf3/0x1d0 [ 1037.931591][ C1] __sys_setsockopt+0x195/0x220 [ 1037.931612][ C1] __x64_sys_setsockopt+0xbd/0x160 [ 1037.931629][ C1] ? do_syscall_64+0x90/0x870 [ 1037.931645][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 1037.931661][ C1] do_syscall_64+0x115/0x870 [ 1037.931676][ C1] ? clear_bhb_loop+0x40/0x90 [ 1037.931691][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.931710][ C1] RIP: 0033:0x7f200559ce59 [ 1037.931721][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1037.931734][ C1] RSP: 002b:00007f2006509028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1037.931746][ C1] RAX: ffffffffffffffda RBX: 00007f2005815fa0 RCX: 00007f200559ce59 [ 1037.931755][ C1] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 1037.931763][ C1] RBP: 00007f2005632d6f R08: 0000000000000004 R09: 0000000000000000 [ 1037.931771][ C1] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1037.931780][ C1] R13: 00007f2005816038 R14: 00007f2005815fa0 R15: 00007ffc1ebc1f28 [ 1037.931794][ C1] [ 1037.932432][ C0] rcu: rcu_preempt kthread starved for 10492 jiffies! g118193 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1037.932452][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1037.932461][ C0] rcu: RCU grace-period kthread stack dump: [ 1037.932468][ C0] task:rcu_preempt state:R running task stack:27992 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1037.932527][ C0] Call Trace: [ 1037.932533][ C0] [ 1037.932544][ C0] __schedule+0x1295/0x67a0 [ 1037.932582][ C0] ? __pfx___schedule+0x10/0x10 [ 1037.932601][ C0] ? find_held_lock+0x2b/0x80 [ 1037.932619][ C0] ? schedule+0x2bf/0x390 [ 1037.932643][ C0] schedule+0xdd/0x390 [ 1037.932664][ C0] schedule_timeout+0x127/0x280 [ 1037.932684][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1037.932702][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1037.932724][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1037.932746][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 1037.932773][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 1037.932795][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1037.932816][ C0] ? prepare_to_swait_event+0xae/0x4a0 [ 1037.932838][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1037.932861][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 1037.932881][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1037.932906][ C0] rcu_gp_kthread+0x179/0x230 [ 1037.932927][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1037.932946][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1037.932970][ C0] ? __kthread_parkme+0x18c/0x230 [ 1037.933001][ C0] ? kthread+0x13a/0x450 [ 1037.933020][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1037.933039][ C0] kthread+0x370/0x450 [ 1037.933058][ C0] ? __pfx_kthread+0x10/0x10 [ 1037.933080][ C0] ret_from_fork+0x72b/0xd50 [ 1037.933102][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1037.933125][ C0] ? __switch_to+0x800/0x1100 [ 1037.933150][ C0] ? __pfx_kthread+0x10/0x10 [ 1037.933171][ C0] ret_from_fork_asm+0x1a/0x30 [ 1037.933213][ C0] [ 1037.933220][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1037.933231][ C0] CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 1037.933254][ C0] Tainted: [L]=SOFTLOCKUP [ 1037.933260][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1037.933272][ C0] Workqueue: events_unbound toggle_allocation_gate [ 1037.933292][ C0] RIP: 0010:smp_call_function_many_cond+0x589/0x1700 [ 1037.933313][ C0] Code: b8 00 00 00 00 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 a9 83 0c 00 f3 90 <41> 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 63 0f 00 00 8b 45 08 31 [ 1037.933329][ C0] RSP: 0018:ffffc90000ac7870 EFLAGS: 00000293 [ 1037.933343][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff81fc2dfd [ 1037.933354][ C0] RDX: ffff88801eea4a80 RSI: ffffffff81fc2dd7 RDI: ffff88801eea4a80 [ 1037.933366][ C0] RBP: ffff8880b8541180 R08: 0000000000000005 R09: 0000000000000000 [ 1037.933377][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 1037.933387][ C0] R13: ffffed10170a8231 R14: 0000000000000001 R15: ffff8880b843c800 [ 1037.933399][ C0] FS: 0000000000000000(0000) GS:ffff888124387000(0000) knlGS:0000000000000000 [ 1037.933416][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1037.933428][ C0] CR2: 000000110c3c2187 CR3: 000000000e596000 CR4: 00000000003526f0 [ 1037.933440][ C0] Call Trace: [ 1037.933447][ C0] [ 1037.933457][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1037.933486][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1037.933507][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 1037.933535][ C0] ? __pfx___text_poke+0x10/0x10 [ 1037.933561][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1037.933585][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 1037.933607][ C0] ? kmem_cache_alloc_from_sheaf_noprof+0x39/0x190 [ 1037.933631][ C0] smp_text_poke_batch_finish+0x337/0xc60 [ 1037.933662][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1037.933692][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 1037.933710][ C0] ? find_held_lock+0x2b/0x80 [ 1037.933732][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 1037.933750][ C0] jump_label_update+0x37a/0x550 [ 1037.933772][ C0] static_key_enable_cpuslocked+0x1bc/0x270 [ 1037.933793][ C0] static_key_enable+0x1a/0x20 [ 1037.933813][ C0] toggle_allocation_gate+0xfe/0x2d0 [ 1037.933832][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1037.933854][ C0] ? rcu_is_watching+0x12/0xc0 [ 1037.933882][ C0] process_one_work+0xa0e/0x1980 [ 1037.933914][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1037.933943][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1037.933965][ C0] worker_thread+0x5ef/0xe50 [ 1037.933993][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1037.934015][ C0] ? kthread+0x13a/0x450 [ 1037.934033][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1037.934054][ C0] kthread+0x370/0x450 [ 1037.934072][ C0] ? __pfx_kthread+0x10/0x10 [ 1037.934093][ C0] ret_from_fork+0x72b/0xd50 [ 1037.934115][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1037.934138][ C0] ? __switch_to+0x800/0x1100 [ 1037.934162][ C0] ? __pfx_kthread+0x10/0x10 [ 1037.934183][ C0] ret_from_fork_asm+0x1a/0x30 [ 1037.934224][ C0] [ 1195.174278][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 263s! [kworker/u8:2:36] [ 1195.174300][ C0] Modules linked in: [ 1195.174309][ C0] irq event stamp: 3628918 [ 1195.174316][ C0] hardirqs last enabled at (3628917): [] irqentry_exit+0x24d/0x970 [ 1195.174347][ C0] hardirqs last disabled at (3628918): [] sysvec_apic_timer_interrupt+0xe/0xc0 [ 1195.174372][ C0] softirqs last enabled at (3628906): [] __irq_exit_rcu+0x162/0x210 [ 1195.174399][ C0] softirqs last disabled at (3628875): [] __irq_exit_rcu+0x162/0x210 [ 1195.174430][ C0] CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 1195.174454][ C0] Tainted: [L]=SOFTLOCKUP [ 1195.174466][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1195.174478][ C0] Workqueue: events_unbound toggle_allocation_gate [ 1195.174496][ C0] RIP: 0010:smp_call_function_many_cond+0x589/0x1700 [ 1195.174518][ C0] Code: b8 00 00 00 00 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 a9 83 0c 00 f3 90 <41> 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 63 0f 00 00 8b 45 08 31 [ 1195.174534][ C0] RSP: 0018:ffffc90000ac7870 EFLAGS: 00000293 [ 1195.174547][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff81fc2dfd [ 1195.174558][ C0] RDX: ffff88801eea4a80 RSI: ffffffff81fc2dd7 RDI: ffff88801eea4a80 [ 1195.174570][ C0] RBP: ffff8880b8541180 R08: 0000000000000005 R09: 0000000000000000 [ 1195.174580][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 1195.174590][ C0] R13: ffffed10170a8231 R14: 0000000000000001 R15: ffff8880b843c800 [ 1195.174601][ C0] FS: 0000000000000000(0000) GS:ffff888124387000(0000) knlGS:0000000000000000 [ 1195.174619][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1195.174630][ C0] CR2: 000000110c3c2187 CR3: 000000000e596000 CR4: 00000000003526f0 [ 1195.174640][ C0] Call Trace: [ 1195.174648][ C0] [ 1195.174660][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1195.174690][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1195.174710][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 1195.174737][ C0] ? __pfx___text_poke+0x10/0x10 [ 1195.174761][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1195.174783][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 1195.174804][ C0] ? kmem_cache_alloc_from_sheaf_noprof+0x39/0x190 [ 1195.174823][ C0] smp_text_poke_batch_finish+0x337/0xc60 [ 1195.174853][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1195.174882][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 1195.174900][ C0] ? find_held_lock+0x2b/0x80 [ 1195.174922][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 1195.174939][ C0] jump_label_update+0x37a/0x550 [ 1195.174961][ C0] static_key_enable_cpuslocked+0x1bc/0x270 [ 1195.174981][ C0] static_key_enable+0x1a/0x20 [ 1195.174999][ C0] toggle_allocation_gate+0xfe/0x2d0 [ 1195.175017][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1195.175038][ C0] ? rcu_is_watching+0x12/0xc0 [ 1195.175067][ C0] process_one_work+0xa0e/0x1980 [ 1195.175099][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1195.175127][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1195.175148][ C0] worker_thread+0x5ef/0xe50 [ 1195.175175][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1195.175196][ C0] ? kthread+0x13a/0x450 [ 1195.175213][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1195.175232][ C0] kthread+0x370/0x450 [ 1195.175250][ C0] ? __pfx_kthread+0x10/0x10 [ 1195.175270][ C0] ret_from_fork+0x72b/0xd50 [ 1195.175292][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1195.175313][ C0] ? __switch_to+0x800/0x1100 [ 1195.175338][ C0] ? __pfx_kthread+0x10/0x10 [ 1195.175358][ C0] ret_from_fork_asm+0x1a/0x30 [ 1195.175393][ C0] [ 1195.175401][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1195.175425][ C1] NMI backtrace for cpu 1 [ 1195.175436][ C1] CPU: 1 UID: 0 PID: 18955 Comm: syz.2.3098 Tainted: G L syzkaller #0 PREEMPT(full) [ 1195.175454][ C1] Tainted: [L]=SOFTLOCKUP [ 1195.175459][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1195.175467][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x0/0x80 [ 1195.175484][ C1] Code: c0 74 06 5b e9 41 4a 00 00 e8 7c 47 e9 f5 5b c3 cc cc cc cc 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 48 89 f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 [ 1195.175496][ C1] RSP: 0018:ffffc90000a08d58 EFLAGS: 00000002 [ 1195.175507][ C1] RAX: 0000000000000000 RBX: ffff888056c7a230 RCX: 1ffff1100ad8f448 [ 1195.175516][ C1] RDX: ffffffff8bb2dd80 RSI: 0000000000000002 RDI: ffffffff9b3f00a0 [ 1195.175524][ C1] RBP: ffffc90000a08e48 R08: 0000000000000001 R09: fffff5200014119a [ 1195.175532][ C1] R10: 0000000000000002 R11: 0000000000000001 R12: 0000000000000002 [ 1195.175540][ C1] R13: ffff888031c48300 R14: dffffc0000000000 R15: 1ffff920001411b0 [ 1195.175550][ C1] FS: 00007f20065096c0(0000) GS:ffff888124487000(0000) knlGS:0000000000000000 [ 1195.175564][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1195.175573][ C1] CR2: 00007f74ec799d0f CR3: 00000000626ec000 CR4: 00000000003526f0 [ 1195.175582][ C1] Call Trace: [ 1195.175587][ C1] [ 1195.175592][ C1] debug_object_activate+0x331/0x490 [ 1195.175611][ C1] ? __pfx_debug_object_activate+0x10/0x10 [ 1195.175627][ C1] ? do_raw_spin_lock+0x128/0x260 [ 1195.175647][ C1] enqueue_hrtimer+0x75/0x2f0 [ 1195.175666][ C1] __hrtimer_run_queues+0x73d/0xa00 [ 1195.175688][ C1] hrtimer_interrupt+0x3e5/0x940 [ 1195.175712][ C1] __sysvec_apic_timer_interrupt+0x10b/0x460 [ 1195.175730][ C1] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 1195.175747][ C1] [ 1195.175751][ C1] [ 1195.175756][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1195.175776][ C1] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 1195.175797][ C1] Code: 00 e8 61 cd 29 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 4f 84 21 00 48 85 ed 0f 85 d7 01 00 00 e8 61 89 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 1195.175809][ C1] RSP: 0018:ffffc900041473b0 EFLAGS: 00000287 [ 1195.175819][ C1] RAX: ffffffff8f52b3f8 RBX: ffffffff8f52b3a0 RCX: ffffc9001d351000 [ 1195.175828][ C1] RDX: 0000000000080000 RSI: ffffffff81e7281f RDI: ffff888078e0a540 [ 1195.175837][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 1195.175846][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000033fc [ 1195.175854][ C1] R13: ffffffff8f52b3f8 R14: ffffc90004147430 R15: dffffc0000000000 [ 1195.175867][ C1] ? console_flush_one_record+0xabf/0xe50 [ 1195.175891][ C1] ? __pfx_console_flush_one_record+0x10/0x10 [ 1195.175913][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1195.175928][ C1] console_unlock+0x103/0x260 [ 1195.175946][ C1] ? __pfx_console_unlock+0x10/0x10 [ 1195.175988][ C1] ? lock_acquire+0x100/0x370 [ 1195.176008][ C1] vprintk_emit+0x407/0x6b0 [ 1195.176027][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 1195.176045][ C1] ? rcu_is_watching+0x12/0xc0 [ 1195.176063][ C1] ? trace_sched_exit_tp+0x11c/0x160 [ 1195.176079][ C1] _printk+0xcf/0x110 [ 1195.176093][ C1] ? __pfx__printk+0x10/0x10 [ 1195.176107][ C1] ? irqentry_exit+0x24d/0x970 [ 1195.176126][ C1] show_free_areas+0x881/0x1d60 [ 1195.176150][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 1195.176170][ C1] ? __pfx_show_free_areas+0x10/0x10 [ 1195.176185][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 1195.176203][ C1] ? _printk+0xcf/0x110 [ 1195.176215][ C1] ? __pfx__printk+0x10/0x10 [ 1195.176230][ C1] ? __show_mem+0x28/0x134 [ 1195.176247][ C1] __show_mem+0x41/0x134 [ 1195.176263][ C1] warn_alloc.cold+0x13c/0x1c1 [ 1195.176276][ C1] ? __pfx_warn_alloc+0x10/0x10 [ 1195.176298][ C1] ? stack_depot_save_flags+0x27/0x9d0 [ 1195.176316][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1195.176333][ C1] ? xskq_create+0xfb/0x1d0 [ 1195.176347][ C1] __vmalloc_node_range_noprof+0x136c/0x1630 [ 1195.176368][ C1] ? xskq_create+0xfb/0x1d0 [ 1195.176385][ C1] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1195.176405][ C1] ? xskq_create+0xfb/0x1d0 [ 1195.176418][ C1] vmalloc_user_noprof+0x9e/0xe0 [ 1195.176434][ C1] ? xskq_create+0xfb/0x1d0 [ 1195.176448][ C1] xskq_create+0xfb/0x1d0 [ 1195.176463][ C1] xsk_setsockopt+0x743/0xab0 [ 1195.176476][ C1] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1195.176489][ C1] ? find_held_lock+0x2b/0x80 [ 1195.176500][ C1] ? __fget_files+0x215/0x3d0 [ 1195.176518][ C1] ? selinux_socket_setsockopt+0x6a/0x80 [ 1195.176536][ C1] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1195.176550][ C1] do_sock_setsockopt+0xf3/0x1d0 [ 1195.176566][ C1] __sys_setsockopt+0x195/0x220 [ 1195.176587][ C1] __x64_sys_setsockopt+0xbd/0x160 [ 1195.176604][ C1] ? do_syscall_64+0x90/0x870 [ 1195.176621][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 1195.176637][ C1] do_syscall_64+0x115/0x870 [ 1195.176654][ C1] ? clear_bhb_loop+0x40/0x90 [ 1195.176669][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1195.176682][ C1] RIP: 0033:0x7f200559ce59 [ 1195.176694][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1195.176706][ C1] RSP: 002b:00007f2006509028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1195.176718][ C1] RAX: ffffffffffffffda RBX: 00007f2005815fa0 RCX: 00007f200559ce59 [ 1195.176727][ C1] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 1195.176736][ C1] RBP: 00007f2005632d6f R08: 0000000000000004 R09: 0000000000000000 [ 1195.176744][ C1] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1195.176753][ C1] R13: 00007f2005816038 R14: 00007f2005815fa0 R15: 00007ffc1ebc1f28 [ 1195.176767][ C1] [ 1195.177423][ C0] Kernel panic - not syncing: softlockup: hung tasks [ 1195.177436][ C0] CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 1195.177464][ C0] Tainted: [L]=SOFTLOCKUP [ 1195.177471][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1195.177482][ C0] Workqueue: events_unbound toggle_allocation_gate [ 1195.177500][ C0] Call Trace: [ 1195.177507][ C0] [ 1195.177514][ C0] dump_stack_lvl+0x100/0x190 [ 1195.177535][ C0] vpanic+0x552/0x970 [ 1195.177552][ C0] ? __pfx_vpanic+0x10/0x10 [ 1195.177571][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 1195.177599][ C0] panic+0xd1/0xe0 [ 1195.177620][ C0] ? __pfx_panic+0x10/0x10 [ 1195.177638][ C0] ? __pfx_printk_trigger_flush+0x10/0x10 [ 1195.177658][ C0] ? wq_watchdog_touch+0xec/0x1a0 [ 1195.177677][ C0] ? watchdog_timer_fn.cold+0x5/0x25 [ 1195.177697][ C0] ? watchdog_timer_fn+0x702/0x7a0 [ 1195.177719][ C0] watchdog_timer_fn.cold+0x16/0x25 [ 1195.177739][ C0] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 1195.177762][ C0] __hrtimer_run_queues+0x142/0xa00 [ 1195.177796][ C0] hrtimer_interrupt+0x3e5/0x940 [ 1195.177832][ C0] __sysvec_apic_timer_interrupt+0x10b/0x460 [ 1195.177857][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 1195.177879][ C0] [ 1195.177885][ C0] [ 1195.177893][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1195.177912][ C0] RIP: 0010:smp_call_function_many_cond+0x589/0x1700 [ 1195.177933][ C0] Code: b8 00 00 00 00 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 a9 83 0c 00 f3 90 <41> 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 63 0f 00 00 8b 45 08 31 [ 1195.177949][ C0] RSP: 0018:ffffc90000ac7870 EFLAGS: 00000293 [ 1195.177961][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff81fc2dfd [ 1195.177972][ C0] RDX: ffff88801eea4a80 RSI: ffffffff81fc2dd7 RDI: ffff88801eea4a80 [ 1195.177984][ C0] RBP: ffff8880b8541180 R08: 0000000000000005 R09: 0000000000000000 [ 1195.177995][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 1195.178006][ C0] R13: ffffed10170a8231 R14: 0000000000000001 R15: ffff8880b843c800 [ 1195.178024][ C0] ? smp_call_function_many_cond+0x5ad/0x1700 [ 1195.178044][ C0] ? smp_call_function_many_cond+0x587/0x1700 [ 1195.178070][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1195.178099][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1195.178119][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 1195.178147][ C0] ? __pfx___text_poke+0x10/0x10 [ 1195.178172][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1195.178196][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 1195.178217][ C0] ? kmem_cache_alloc_from_sheaf_noprof+0x39/0x190 [ 1195.178236][ C0] smp_text_poke_batch_finish+0x337/0xc60 [ 1195.178267][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1195.178297][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 1195.178315][ C0] ? find_held_lock+0x2b/0x80 [ 1195.178337][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 1195.178355][ C0] jump_label_update+0x37a/0x550 [ 1195.178377][ C0] static_key_enable_cpuslocked+0x1bc/0x270 [ 1195.178398][ C0] static_key_enable+0x1a/0x20 [ 1195.178418][ C0] toggle_allocation_gate+0xfe/0x2d0 [ 1195.178436][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1195.178463][ C0] ? rcu_is_watching+0x12/0xc0 [ 1195.178491][ C0] process_one_work+0xa0e/0x1980 [ 1195.178523][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1195.178552][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1195.178573][ C0] worker_thread+0x5ef/0xe50 [ 1195.178601][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1195.178623][ C0] ? kthread+0x13a/0x450 [ 1195.178641][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1195.178661][ C0] kthread+0x370/0x450 [ 1195.178680][ C0] ? __pfx_kthread+0x10/0x10 [ 1195.178701][ C0] ret_from_fork+0x72b/0xd50 [ 1195.178723][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1195.178746][ C0] ? __switch_to+0x800/0x1100 [ 1195.178770][ C0] ? __pfx_kthread+0x10/0x10 [ 1195.178791][ C0] ret_from_fork_asm+0x1a/0x30 [ 1195.178825][ C0] [ 1196.256667][ C0] Shutting down cpus with NMI [ 1196.256891][ C0] Kernel Offset: disabled