last executing test programs: 13m23.652221083s ago: executing program 0 (id=1556): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001a00)={0x1, 0x0, [{0x2ffc, 0x48, &(0x7f0000000280)=""/72}]}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000001c0)=0x304008000) 13m23.389671692s ago: executing program 0 (id=1561): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001001600060008000000100007007f0000017f000001910040001400020010000c000900090073"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) 13m23.285826593s ago: executing program 0 (id=1562): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) timer_create(0x0, 0x0, 0x0) timer_create(0x4, &(0x7f0000000240)={0x0, 0x2b, 0x5ce053d68285e68c}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000040)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e0000002ebe660f38049f9e0064f30fc7b000101f20f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f08b8f4008ee0", 0x5b}], 0x1, 0x4b, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4012011, r0, 0x0) 13m22.908643553s ago: executing program 0 (id=1566): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x1, 0x2, 0x1010, 0xffffffffffffffff, 0x20000000) mmap$IORING_OFF_PBUF_RING(0x0, 0x6, 0x1000001, 0x18030, 0xffffffffffffffff, 0x806650b3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x40050) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1bf) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./myconfig/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0xe8202, 0x24) memfd_create(0x0, 0x3) socket$phonet(0x23, 0x2, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x4000018) sendmsg$NFT_BATCH(r3, 0x0, 0x24000000) sendmsg$NFT_BATCH(r3, 0x0, 0x4000000) write$uinput_user_dev(r2, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 13m22.495618662s ago: executing program 0 (id=1570): write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x13c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x20040405) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$inet6(0x10, 0x3, 0x4) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r2, &(0x7f0000000400)="9400000042000100020000000000000003010000102700003200010000112233445566778899aabb080045000020000140004011b778c0a80101c0a8010204d2162e000c00007465737400003c00020008000300010000001000040066778899aabb001122334455060006000800000010000700c0a80101c0a801021100400008000a0004d2162e0c00030008000c0004000100", 0x94, 0x0, 0x0, 0x0) 13m22.035634711s ago: executing program 0 (id=1572): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000270009002dbd7000fedbdf2502000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40070) 13m6.637607181s ago: executing program 32 (id=1572): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000270009002dbd7000fedbdf2502000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40070) 19.559440799s ago: executing program 2 (id=5864): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x12000, @loopback, 0x7}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x515002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) r4 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r4, &(0x7f0000001fc0)=""/177, 0xb1) r5 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000400)='v2\x00ul\x00\x00\n\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfcn\x85o\a\x00\x00\x00\x00\x00\x00\x00\xaa?4\xafq^\x00\x00\x00\x00\x00\x00\x00\xffDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9e\xf1\xe4:\xe2\x05\x00\x00\x00\x00\x00\x00\x00%\x95xX$\x84gRUo\xcd\x83\x95\xc3\xe4I\xc44)%\xb8\x9b\xcbF<\xfb#<\xe2d\xbd\xbd\x9eR\x84M\xa8\v}rQ\xc9\x9f\x9e1]\x9a\xe6\xbe\xc2\xcfc\x04\x17\"\x1a\x00o\x17\xdf\xf1\xa2`}0\x9a\xe8\xf0x\x15\x84`3\xf9\x813\x94\xecj\xd1\xa4\x03\xe6Q\xa9\xcf\xdf\x9a=\xfe\x06\xf2\xb9n|N2\xec\v\x14P\xb1\x8fh9\xa0,\xca!\xc1`\xce\x80\xf8Y)\xd6u\xb9 \x88\x7f\xad+\xc1\xc6\xb0D\x90\xff2\xadc-\x06\xdf<:-\xadA\bTH\xecg\x13\"\xa6\x94q\x83\x19\xd3\x12\x9dbI(\xf6+B\x12Ud\x83\ndv\x8f\xe0H\xba\xf1F\xa2\xbb\x11\xc2M\x92(\xf1%I\a\x9eRu\xe4\xc7L\x93\xa8\xa9\x12\x9c\xe2{]\xff\xff\xff\xffg\x9c\x13\x89\xdd\x1e\xc8\x83\xcf\xc7\xd9\xa4)o\x1aj\x8e\b>c\x9f\x8e\xf3H\xcc\xe0\xc1z\xbd\xae2\x9a\xb7\xd4}f\x9c\x0fA\xcd\xa3\xd5\xbb\xc2-r\xb2M\x15!3f=\xc4\x9f~\xbc[:\v[FT\xec$\xd5\x1c\x99^\x80\x1a\xb5zv\xa9\xed\x1f\xe5\xec\x9f\xdd\xf1\x8f\xe4C\xee\xeb\xaa^\xaf\x86\r>\xde\xa6L\xb3D\xd8v\\\x9f\xfb\xb2\r\xc8\'\x9aAa\xca\xd5\x91\xd9\xe2\x1b\x9d~ \x98\xee\xcf\xb7\xc0n\x9d>q6\xe6\xc6\x025\xef\xbajN\x8f\xd1a\xc6\t\xe4\xb4\x95\xda\xc9\xe6X\xeba\xfb\xce9\xeedZ\xcb\xff4s\x91\xf8\x90rYR\xec%\xd3\x03@\\\xda\xd7,\x035\xb6\xac\xb9', 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x427b5000) mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x71, &(0x7f0000000100)={0x800, 0x4, 0x1, 0xc05}) 19.478138312s ago: executing program 1 (id=5865): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1500", @ANYRESHEX], 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0xc, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @ldst={0x1, 0x1, 0x3, 0x0, 0x1, 0x6}]}, &(0x7f0000000fc0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a140)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x1, 0x2000c080) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bdf000fddbdf2506000000200001800800030006000000140002007665746830"], 0x34}, 0x1, 0x0, 0x0, 0x8094}, 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000cc0)={0x18, 0x110, 0xfa00, {r5, 0x7ffffffb, 0x12, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e20, @loopback}}}, 0x118) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000280)={0x20, 0x31, 0x4, "209c8c53"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="2015078feeb3f5674a3eb348df"], &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xd8}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000340)={0x20, 0x81, 0x2, "db68"}, 0x0, 0x0, 0x0, 0x0}) 16.318681267s ago: executing program 5 (id=5869): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000840), r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005f80), 0x0, 0x8040) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000}, 0x38) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000040)={0x2, @pix_mp={0x0, 0x2, 0x33565348, 0x5, 0x0, [{0x4, 0x7}, {0x80000001, 0xffffffff}, {0xfffffff7, 0x5}, {0x6, 0x4}, {0x10, 0x7}, {0xe2, 0xaa6}, {0xfffffffb, 0x8}, {0xffffffff, 0x400}], 0xe9, 0x3, 0x3, 0x0, 0x6}}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r2, 0x0, 0x200480d0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r4) setxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=@known='user.syz\x00', &(0x7f0000000300)='val\x00', 0x3, 0x0) getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=@known='user.syz\x00', &(0x7f0000000400), 0x100) listxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000400), 0x100) fgetxattr(0xffffffffffffffff, &(0x7f0000000200)=@known='user.syz\x00', &(0x7f0000000400), 0x100) removexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=@known='user.syz\x00') sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000040)={0x1c, r1, 0x515, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 14.020205496s ago: executing program 5 (id=5871): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) ioctl$UBLK_U_CMD_STOP_DEV(0xffffffffffffffff, 0xc0207507, &(0x7f0000000900)={0x0}) syz_io_uring_submit$UBLK(0x0, 0x0, 0x0, &(0x7f0000000980)=@ublk_stop_dev_sqe={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0207507, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {r3}}) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') syz_open_procfs(0xffffffffffffffff, 0x0) rename(&(0x7f0000000580)='./file0\x00', 0x0) symlinkat(&(0x7f0000001040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') mount$nfs(&(0x7f0000000340)=')./.,\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x80000, &(0x7f0000000400)={[{}, {'erspan0\x00'}, {}, {}, {'GPL\x00'}, {'\\@'}], [{@fsuuid={'fsuuid', 0x3d, {[0x63, 0x63, 0x66, 0x30, 0x61, 0x61, 0x63], 0x2d, [0x64, 0xd, 0x63, 0x64], 0x2d, [0x37, 0x1, 0x32, 0x38], 0x2d, [0x39, 0x63, 0x64, 0x35], 0x2d, [0x38, 0x0, 0x37, 0x30, 0x31, 0x33, 0x31, 0x30]}}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@obj_role={'obj_role', 0x3d, ')'}}, {@smackfshat={'smackfshat', 0x3d, 'erspan0\x00'}}, {@appraise_type}, {@euid_eq}]}) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7313}, [@printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 13.059211967s ago: executing program 1 (id=5872): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) lseek(r0, 0x7fffffffffffffff, 0x0) 11.03612514s ago: executing program 1 (id=5874): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpgrp(0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 10.978333364s ago: executing program 3 (id=5875): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf250e000000340041090800080006000000060002004e2000000800070008"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00000000000000002800128009000100626f6e64000000"], 0x48}}, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) ioctl$MEMREAD(0xffffffffffffffff, 0xc0404d1a, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0x2, 0x4, 0x4bb}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 10.841368563s ago: executing program 5 (id=5876): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff07bbbf7f00931c"], 0x1c}}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) shutdown(r3, 0x1) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e20, 0x8001, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000240)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @empty, 0x6}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace\x00', 0x5e3f8b2d08cbb781) pipe(&(0x7f0000000280)) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl(r5, 0x400452c8, &(0x7f0000000000)="000000000000000000000000000000000000000001") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000580)='./dev/rfcomm0\x00', 0x40000, 0x235) write(r4, &(0x7f0000000180)='traceon', 0x7) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x169e41, 0x0) 9.215944859s ago: executing program 5 (id=5878): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='tracefs\x00', &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) read(r4, &(0x7f0000000180), 0x1000) mount(0x0, 0x0, &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x6, 0x0) open(0x0, 0x14927f, 0x1e9) 8.421917165s ago: executing program 1 (id=5879): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x12, 0x0, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf4", 0x0, 0xcb95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3ff}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f00000002c0)="fc0000001c000704ab5b2509b86803000aab087a0400000001481193210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4b", 0xbd) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='tracefs\x00', &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfdef) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x44080}, 0x40440cc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) write$binfmt_register(r3, &(0x7f0000000040)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x0, 0x3a, 'tracefs\x00', 0x3a, '*:@{\':', 0x3a, './trace'}, 0x35) 8.347992348s ago: executing program 3 (id=5880): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) read$FUSE(r0, &(0x7f0000000500)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) write(0xffffffffffffffff, &(0x7f0000000000)="5a000300010003", 0x7) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, 0x0, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x2, 0x33d, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x20, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x80, 0xffffffff, 0x135}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x1, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 8.335603169s ago: executing program 2 (id=5881): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x11) ioctl$TCFLSH(r2, 0x400455c8, 0x4) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) sendto$inet(r0, 0x0, 0x0, 0xb, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x81}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="1907e004", 0x4) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00'}) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000100)={0x2, 0x326e, 0xfffffff9, 0x0, 0x1b, "201253d3245ff6f4757ee02fa755abba149aff"}) 7.33617566s ago: executing program 3 (id=5883): ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x1ff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000b80)="91f8a9848519def38491bbe1173c3c6f357d0272b7319130feaab952ac4703cad04bdc890ee50e997fc26e0000ea4feb931647fc5393de2500000000000012f67dd0000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d500891e58a3f851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7bebc905a984c", 0xda}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000e40)="31fdffffffffffffff74098b2e5e55a1828636f60fbfcfdac56c75f1687f0c562874230300d69f117e766bdbad0c2171ad6227e1173afcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbb9de494c9721d9bf80f2f75c3b4bea78e385ea382294882839a22674037b89108a1420e33eb9be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d889c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8d", 0xc0}], 0x1}}], 0x2, 0x2090) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000021c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 5.998629315s ago: executing program 4 (id=5885): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000005000000018010000776c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000b00), &(0x7f0000000ac0)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 5.080943041s ago: executing program 3 (id=5886): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) memfd_create(&(0x7f00000063c0)=':\x00', 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x40000000000018e, 0x4000000) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0xb0, 0x67, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cb7a5918c004a9971a46afced2c32642b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, 0x0) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xde9f, 0x1000, 0x2, 0x15b}, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x12, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r9, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xe}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r9, 0x84, 0x12, &(0x7f0000001a00), &(0x7f0000001a40)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xa, 0x32, 0xffffffffffffffff, 0x0) 5.016518818s ago: executing program 4 (id=5887): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x3f799000) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000440)="e9", 0x1}], 0x1) writev(r0, &(0x7f0000000980)=[{0x0}], 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 4.141644946s ago: executing program 5 (id=5888): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYBLOB="100029bd7000ffdbdf250e000000340041090800080006000000060002004e200000080007000800000005000d0001"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00000000000000002800128009000100626f6e64000000001800028014"], 0x48}}, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = syz_open_dev$vcsa(&(0x7f0000000380), 0x5b95b610, 0x701c83) ioctl$MEMREAD(r4, 0xc0404d1a, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0x2, 0x4, 0x4bb}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 4.056609121s ago: executing program 3 (id=5889): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x12000, @loopback, 0x7}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000017c0)=@raw={'raw\x00', 0x4001, 0x3, 0x210, 0x10f0, 0x700001b, 0x148, 0x0, 0x148, 0x11d0, 0x206, 0x240, 0x11d0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast1, @empty, 0xffffff00, 0xffffffff, 'veth0_to_hsr\x00', 'sit0\x00', {0xff}, {0xff}, 0x2f, 0x1, 0x46}, 0x1ea, 0xa0, 0xc0, 0x0, {0x390, 0x8f00}, [@common=@addrtype={{0x30}, {0x158, 0x202}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xd4, 'syz1\x00', {0x9e2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r3 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r3, &(0x7f0000001fc0)=""/177, 0xb1) r4 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000400)='v2\x00ul\x00\x00\n\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfcn\x85o\a\x00\x00\x00\x00\x00\x00\x00\xaa?4\xafq^\x00\x00\x00\x00\x00\x00\x00\xffDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9e\xf1\xe4:\xe2\x05\x00\x00\x00\x00\x00\x00\x00%\x95xX$\x84gRUo\xcd\x83\x95\xc3\xe4I\xc44)%\xb8\x9b\xcbF<\xfb#<\xe2d\xbd\xbd\x9eR\x84M\xa8\v}rQ\xc9\x9f\x9e1]\x9a\xe6\xbe\xc2\xcfc\x04\x17\"\x1a\x00o\x17\xdf\xf1\xa2`}0\x9a\xe8\xf0x\x15\x84`3\xf9\x813\x94\xecj\xd1\xa4\x03\xe6Q\xa9\xcf\xdf\x9a=\xfe\x06\xf2\xb9n|N2\xec\v\x14P\xb1\x8fh9\xa0,\xca!\xc1`\xce\x80\xf8Y)\xd6u\xb9 \x88\x7f\xad+\xc1\xc6\xb0D\x90\xff2\xadc-\x06\xdf<:-\xadA\bTH\xecg\x13\"\xa6\x94q\x83\x19\xd3\x12\x9dbI(\xf6+B\x12Ud\x83\ndv\x8f\xe0H\xba\xf1F\xa2\xbb\x11\xc2M\x92(\xf1%I\a\x9eRu\xe4\xc7L\x93\xa8\xa9\x12\x9c\xe2{]\xff\xff\xff\xffg\x9c\x13\x89\xdd\x1e\xc8\x83\xcf\xc7\xd9\xa4)o\x1aj\x8e\b>c\x9f\x8e\xf3H\xcc\xe0\xc1z\xbd\xae2\x9a\xb7\xd4}f\x9c\x0fA\xcd\xa3\xd5\xbb\xc2-r\xb2M\x15!3f=\xc4\x9f~\xbc[:\v[FT\xec$\xd5\x1c\x99^\x80\x1a\xb5zv\xa9\xed\x1f\xe5\xec\x9f\xdd\xf1\x8f\xe4C\xee\xeb\xaa^\xaf\x86\r>\xde\xa6L\xb3D\xd8v\\\x9f\xfb\xb2\r\xc8\'\x9aAa\xca\xd5\x91\xd9\xe2\x1b\x9d~ \x98\xee\xcf\xb7\xc0n\x9d>q6\xe6\xc6\x025\xef\xbajN\x8f\xd1a\xc6\t\xe4\xb4\x95\xda\xc9\xe6X\xeba\xfb\xce9\xeedZ\xcb\xff4s\x91\xf8\x90rYR\xec%\xd3\x03@\\\xda\xd7,\x035\xb6\xac\xb9', 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x427b5000) mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x71, &(0x7f0000000100)={0x800, 0x4, 0x1, 0xc05}) 4.034359169s ago: executing program 2 (id=5890): r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000340)='0fc5:1227:', 0xa) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x4, 0x401d031, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfd, 0x1000000}, 0xc) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x9}, 0x94) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r4, r6, 0x3, 0x0, @void}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r7, &(0x7f0000000140)='()', 0x2) 4.019074766s ago: executing program 1 (id=5891): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x48}}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x14, 0xa, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x40c0040}, 0x408c4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000380)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x7, 0x2}]}}}}}}}}, 0x0) 3.786950361s ago: executing program 1 (id=5892): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1500", @ANYRESHEX], 0x15) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmmsg$unix(r3, &(0x7f000000a140)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x1, 0x2000c080) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bdf000fddbdf2506000000200001800800030006000000140002007665746830"], 0x34}, 0x1, 0x0, 0x0, 0x8094}, 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000cc0)={0x18, 0x110, 0xfa00, {r6, 0x7ffffffb, 0x12, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e20, @loopback}}}, 0x118) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000280)={0x20, 0x31, 0x4, "209c8c53"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="2015078feeb3f5674a3eb348df"], &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xd8}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000340)={0x20, 0x81, 0x2, "db68"}, 0x0, 0x0, 0x0, 0x0}) 3.748378362s ago: executing program 2 (id=5893): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) inotify_init1(0x800) pipe(&(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000240)=r2) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f0000000300)='1', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r5, &(0x7f0000000300)='1', 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x1, 0x1}) fcntl$lock(r0, 0x7, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 2.746716045s ago: executing program 4 (id=5894): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) readv(r1, &(0x7f00000000c0)=[{0x0}], 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000380)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) 1.704408492s ago: executing program 4 (id=5895): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) unshare(0x6a060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001840)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x50, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.664180399s ago: executing program 5 (id=5896): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000180)={&(0x7f0000000140)=[{0x7, 0x0, 0x1, &(0x7f0000000080)="ce"}], 0x1}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.57181133s ago: executing program 2 (id=5897): r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r0, &(0x7f0000000600)={0x0, &(0x7f00000002c0)=[@rdmsr={0x66, 0x18, {0xdc5}}], 0x18}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1c) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000000000/0x400000)=nil) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f0000000000)={0x0, 0x200000}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x200000, &(0x7f0000000000/0x200000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x88603, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) close(0x5) close(0x4) 1.412408426s ago: executing program 3 (id=5898): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='tracefs\x00', &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) read(r4, &(0x7f0000000180), 0x1000) mount(0x0, 0x0, &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x6, 0x0) open(0x0, 0x14927f, 0x1e9) 643.215977ms ago: executing program 2 (id=5899): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00', 0x0, 0x0, 0x73}, {@loopback, 0x11, 0x0, 0x1}}, 0x44) setsockopt(r0, 0x0, 0x488, &(0x7f0000000500)="060000007f00000100150000000000006d6800000000000000000000000000000000000000000000000000007f000001001500"/68, 0x44) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r1, &(0x7f0000000c80)={0x2020}, 0x2020) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05400000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f736600140002800500020000000000080001400000001408000b40000000000900010073797a"], 0xd4}}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f00000006c0)={{r1, &(0x7f00000001c0)='%+#^&\x00', 0x20202, &(0x7f0000000280)={@_ha_fsid={[0x9]}, {0x10, 0x7, 0xe, 0x5}}, 0x2, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)}, 0x1, &(0x7f0000000680)=[{0x0, 0x4, &(0x7f0000000380)='rr\x00', &(0x7f0000000580)="b7487bbe3b2525d7d1fb3db9547cd0dc3ea6e15d383b6c52de36875512b59cc07757eca2cf3f5ae1c9356d08cfdaace3d404dd7e10299fdf4d02a456c5dd2f4042aa02b3030f1bc50a1581fb6309cd9e396542087d045fa36f2435d4199fd6ed0c4306715741ecb3cb7b53d501cf2fa977c6e002205de60b5398c4396c20759bf9d5586604227ed3f4a989d15d93210eb1ad6c82e3924e50e8fd4c43b8d0de3a481b14d140730fa8edc00f832141d68f74854f76c3d7a88c8abf0f923f733b9cee3d52164981455968b56ccfaa333d57abd46f2a19a7099be71390d35292d28d247ef50c15a92c", 0xe7, 0x10}]}) syz_usb_connect_ath9k(0x3, 0x87, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c000705ab092509b86813000aab080102000000b85b0e93210001c0f0060848050000010000000000039815fa2c53c28648000000b937799f377a00bc000c00f0036cdf0db400600033d44000040060b16a482c0a3c313012dafd5a32e273fc83ab82d710f74cec18444ef90d475ef8b2863ef3d92c94170e5bba2e177312e081f691bc5110556888100000463ae4f5df1b394cfd6239ec2a0f0d1bcae5f5502943283f4b9e611183b102b2b8f5566791cb19020191bd0733802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4794eedfca92c09d776e7a90ab79a6f00a1960548deac279c00"/252, 0xfc) syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) 264.868667ms ago: executing program 4 (id=5900): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) memfd_create(&(0x7f00000063c0)=':\x00', 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x40000000000018e, 0x4000000) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0xb0, 0x67, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cb7a5918c004a9971a46afced2c32642b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xde9f, 0x1000, 0x2, 0x15b}, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x12, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xe}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f0000001a00), &(0x7f0000001a40)=0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xa, 0x32, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=5901): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x3, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x1bd, @loopback}, 0x10) listen(r1, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./cifs\x00', 0x0) mount(&(0x7f0000000300)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000200)='./cifs\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='vers=1.0,user=root,pass=root\x00') kernel console output (not intermixed with test programs): 16 bulk endpoint 0x1 has invalid maxpacket 8 [ 794.610852][ T5719] usb 4-1: config 1 interface 0 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 1023 [ 794.610867][ T5719] usb 4-1: config 1 interface 0 has no altsetting 0 [ 794.612310][ T5719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.612322][ T5719] usb 4-1: Product: syz [ 794.612331][ T5719] usb 4-1: Manufacturer: syz [ 794.612339][ T5719] usb 4-1: SerialNumber: syz [ 794.645635][T19893] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 794.645705][T19893] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 794.744650][ T5703] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 52 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 794.942148][ T30] audit: type=1400 audit(1790551992.524:1312): avc: denied { read write } for pid=19888 comm="syz.1.4842" name="lp0" dev="devtmpfs" ino=3948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 794.942178][ T30] audit: type=1400 audit(1790551992.524:1313): avc: denied { open } for pid=19888 comm="syz.1.4842" path="/dev/usb/lp0" dev="devtmpfs" ino=3948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 795.752176][ T5719] usblp 4-1:1.0: usblp1: USB Bidirectional printer dev 43 if 0 alt 16 proto 3 vid 0x0525 pid 0xA4A8 [ 795.777162][ T5719] usb 4-1: USB disconnect, device number 43 [ 795.797188][ T5719] usblp1: removed [ 795.822020][ T5737] usb 2-1: USB disconnect, device number 52 [ 795.974122][T19889] usblp0: removed [ 797.184551][T19919] FAULT_INJECTION: forcing a failure. [ 797.184551][T19919] name failslab, interval 1, probability 0, space 0, times 0 [ 797.184574][T19919] CPU: 0 UID: 0 PID: 19919 Comm: syz.5.4850 Tainted: G L syzkaller #0 PREEMPT(full) [ 797.184590][T19919] Tainted: [L]=SOFTLOCKUP [ 797.184594][T19919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 797.184600][T19919] Call Trace: [ 797.184605][T19919] [ 797.184610][T19919] dump_stack_lvl+0x100/0x190 [ 797.184632][T19919] should_fail_ex.cold+0x5/0xa [ 797.184648][T19919] should_failslab+0xc2/0x120 [ 797.184664][T19919] kmem_cache_alloc_noprof+0x92/0x6a0 [ 797.184679][T19919] ? do_getname+0x35/0x390 [ 797.184692][T19919] do_getname+0x35/0x390 [ 797.184703][T19919] do_sys_openat2+0xc7/0x1e0 [ 797.184721][T19919] ? __pfx_do_sys_openat2+0x10/0x10 [ 797.184737][T19919] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 797.184754][T19919] __x64_sys_openat+0x12d/0x210 [ 797.184771][T19919] ? __pfx___x64_sys_openat+0x10/0x10 [ 797.184793][T19919] do_syscall_64+0x123/0x790 [ 797.184805][T19919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.184817][T19919] RIP: 0033:0x7f158f19e159 [ 797.184826][T19919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 797.184838][T19919] RSP: 002b:00007f159004f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 797.184849][T19919] RAX: ffffffffffffffda RBX: 00007f158f425fa0 RCX: 00007f158f19e159 [ 797.184858][T19919] RDX: 0000000000000002 RSI: 0000200000000300 RDI: 0000000000000003 [ 797.184865][T19919] RBP: 00007f158f23506b R08: 0000000000000000 R09: 0000000000000000 [ 797.184873][T19919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 797.184881][T19919] R13: 00007f158f426038 R14: 00007f158f425fa0 R15: 00007ffdecf99188 [ 797.184895][T19919] [ 797.395310][T19921] xt_IDLETIMER: timeout value is zero [ 797.409965][ T30] audit: type=1400 audit(1790551994.994:1314): avc: denied { bind } for pid=19920 comm="syz.1.4851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 797.816415][T19938] input: syz0 as /devices/virtual/input/input40 [ 798.684095][T19939] kAFS: No cell specified [ 800.409188][ T5703] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 800.537941][ T5719] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 800.559423][ T5703] usb 3-1: unable to get BOS descriptor or descriptor too short [ 800.559454][ T5703] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 800.560175][ T5703] usb 3-1: config 1 interface 0 altsetting 16 bulk endpoint 0x1 has invalid maxpacket 8 [ 800.560191][ T5703] usb 3-1: config 1 interface 0 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 1023 [ 800.560205][ T5703] usb 3-1: config 1 interface 0 has no altsetting 0 [ 800.561633][ T5703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.561646][ T5703] usb 3-1: Product: syz [ 800.561656][ T5703] usb 3-1: Manufacturer: syz [ 800.561664][ T5703] usb 3-1: SerialNumber: syz [ 800.565382][T19946] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 800.565447][T19946] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 800.688316][ T5719] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 800.689205][ T5719] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 800.689219][ T5719] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 800.689244][ T5719] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 800.689265][ T5719] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 800.689280][ T5719] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 800.690430][ T5719] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 800.690444][ T5719] usb 4-1: Product: syz [ 800.690452][ T5719] usb 4-1: Manufacturer: syz [ 800.773647][ T5719] cdc_wdm 4-1:1.0: skipping garbage [ 800.773658][ T5719] cdc_wdm 4-1:1.0: skipping garbage [ 800.800219][ T5719] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 800.800233][ T5719] cdc_wdm 4-1:1.0: Unknown control protocol [ 801.670965][ T5703] usblp 3-1:1.0: usblp1: USB Bidirectional printer dev 64 if 0 alt 16 proto 3 vid 0x0525 pid 0xA4A8 [ 801.698263][ T5703] usb 3-1: USB disconnect, device number 64 [ 801.742091][ T5703] usblp1: removed [ 801.772592][ T5719] usb 4-1: USB disconnect, device number 44 [ 803.132474][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 803.132506][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 803.323523][T19983] gadgetfs: bound to dummy_udc driver [ 803.532319][T19982] gadgetfs: suspended from state 2 [ 803.579476][ T5719] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 803.645322][ T30] audit: type=1400 audit(1790552001.224:1315): avc: denied { unmount } for pid=10523 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 804.448969][ T30] audit: type=1400 audit(1790552002.024:1316): avc: denied { write } for pid=19997 comm="syz.3.4876" name="functions" dev="configfs" ino=44916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 807.562966][ T30] audit: type=1400 audit(1790552005.084:1317): avc: denied { map } for pid=20023 comm="syz.3.4883" path="socket:[78498]" dev="sockfs" ino=78498 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 807.618039][ T5703] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 807.848616][ T5703] usb 3-1: unable to get BOS descriptor or descriptor too short [ 807.848643][ T5703] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 807.866149][ T5703] usb 3-1: config 1 interface 0 altsetting 16 bulk endpoint 0x1 has invalid maxpacket 8 [ 807.866166][ T5703] usb 3-1: config 1 interface 0 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 1023 [ 807.866180][ T5703] usb 3-1: config 1 interface 0 has no altsetting 0 [ 807.897078][ T5703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.897094][ T5703] usb 3-1: Product: syz [ 807.897102][ T5703] usb 3-1: Manufacturer: syz [ 807.897111][ T5703] usb 3-1: SerialNumber: syz [ 807.935167][T20017] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 807.935221][T20017] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 808.853943][T20036] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 808.854935][T20036] CIFS: Attempting to mount //127.0.0.1/share [ 808.857968][T20036] CIFS: VFS: Error connecting to socket. Aborting operation. [ 808.858039][T20036] CIFS: VFS: cifs_mount failed w/return code = -111 [ 809.762828][ T5703] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 65 if 0 alt 16 proto 3 vid 0x0525 pid 0xA4A8 [ 809.787202][ T5703] usb 3-1: USB disconnect, device number 65 [ 809.809185][ T5703] usblp0: removed [ 810.792923][T20048] FAULT_INJECTION: forcing a failure. [ 810.792923][T20048] name failslab, interval 1, probability 0, space 0, times 0 [ 810.792945][T20048] CPU: 0 UID: 0 PID: 20048 Comm: syz.5.4891 Tainted: G L syzkaller #0 PREEMPT(full) [ 810.792961][T20048] Tainted: [L]=SOFTLOCKUP [ 810.792965][T20048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 810.792971][T20048] Call Trace: [ 810.792976][T20048] [ 810.792981][T20048] dump_stack_lvl+0x100/0x190 [ 810.793001][T20048] should_fail_ex.cold+0x5/0xa [ 810.793023][T20048] should_failslab+0xc2/0x120 [ 810.793040][T20048] kmem_cache_alloc_noprof+0x92/0x6a0 [ 810.793054][T20048] ? do_getname+0x35/0x390 [ 810.793067][T20048] do_getname+0x35/0x390 [ 810.793080][T20048] do_sys_openat2+0xc7/0x1e0 [ 810.793097][T20048] ? __pfx_do_sys_openat2+0x10/0x10 [ 810.793114][T20048] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 810.793130][T20048] __x64_sys_openat+0x12d/0x210 [ 810.793147][T20048] ? __pfx___x64_sys_openat+0x10/0x10 [ 810.793169][T20048] do_syscall_64+0x123/0x790 [ 810.793182][T20048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.793193][T20048] RIP: 0033:0x7f158f19e159 [ 810.793203][T20048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 810.793214][T20048] RSP: 002b:00007f159004f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 810.793226][T20048] RAX: ffffffffffffffda RBX: 00007f158f425fa0 RCX: 00007f158f19e159 [ 810.793234][T20048] RDX: 0000000000000002 RSI: 0000200000000300 RDI: 0000000000000003 [ 810.793241][T20048] RBP: 00007f158f23506b R08: 0000000000000000 R09: 0000000000000000 [ 810.793248][T20048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 810.793255][T20048] R13: 00007f158f426038 R14: 00007f158f425fa0 R15: 00007ffdecf99188 [ 810.793269][T20048] [ 811.875133][ T30] audit: type=1400 audit(1790552009.454:1318): avc: denied { write } for pid=20049 comm="syz.2.4892" name="functions" dev="configfs" ino=44916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 811.907079][ T30] audit: type=1400 audit(1790552009.494:1319): avc: denied { ioctl } for pid=20049 comm="syz.2.4892" path="/395/myconfig/usb_gadget/g1/functions/uac2.usb0/c_srate" dev="configfs" ino=78588 ioctlcmd=0x587e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 812.024165][T20056] FAULT_INJECTION: forcing a failure. [ 812.024165][T20056] name failslab, interval 1, probability 0, space 0, times 0 [ 812.024186][T20056] CPU: 0 UID: 0 PID: 20056 Comm: syz.3.4894 Tainted: G L syzkaller #0 PREEMPT(full) [ 812.024202][T20056] Tainted: [L]=SOFTLOCKUP [ 812.024206][T20056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 812.024214][T20056] Call Trace: [ 812.024218][T20056] [ 812.024223][T20056] dump_stack_lvl+0x100/0x190 [ 812.024244][T20056] should_fail_ex.cold+0x5/0xa [ 812.024262][T20056] should_failslab+0xc2/0x120 [ 812.024280][T20056] __kmalloc_noprof+0xfc/0x840 [ 812.024293][T20056] ? nft_trans_alloc+0x1d/0x2d0 [ 812.024311][T20056] nft_trans_alloc+0x1d/0x2d0 [ 812.024325][T20056] nf_tables_newset+0x3224/0x4250 [ 812.024343][T20056] ? net_generic+0xea/0x2a0 [ 812.024357][T20056] ? __pfx_nf_tables_newset+0x10/0x10 [ 812.024372][T20056] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 812.024387][T20056] ? __nla_validate_parse+0x1e7/0x28b0 [ 812.024408][T20056] ? lock_acquire+0x1d1/0x380 [ 812.024421][T20056] ? net_generic+0x25/0x2a0 [ 812.024440][T20056] ? __nla_parse+0x40/0x60 [ 812.024453][T20056] nfnetlink_rcv_batch+0x1410/0x2880 [ 812.024478][T20056] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 812.024498][T20056] ? lock_acquire+0x1d1/0x380 [ 812.024510][T20056] ? avc_has_perm_noaudit+0x56/0x470 [ 812.024533][T20056] ? avc_has_perm_noaudit+0x145/0x470 [ 812.024564][T20056] ? __nla_parse+0x40/0x60 [ 812.024577][T20056] nfnetlink_rcv+0x3bd/0x440 [ 812.024594][T20056] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 812.024616][T20056] netlink_unicast+0x585/0x850 [ 812.024633][T20056] ? __pfx_netlink_unicast+0x10/0x10 [ 812.024651][T20056] netlink_sendmsg+0x8b0/0xda0 [ 812.024668][T20056] ? __pfx_netlink_sendmsg+0x10/0x10 [ 812.024684][T20056] ? selinux_socket_sendmsg+0x198/0x2f0 [ 812.024699][T20056] ____sys_sendmsg+0xa4d/0xbe0 [ 812.024710][T20056] ? __pfx_netlink_sendmsg+0x10/0x10 [ 812.024726][T20056] ? __pfx_____sys_sendmsg+0x10/0x10 [ 812.024744][T20056] ___sys_sendmsg+0x190/0x1e0 [ 812.024757][T20056] ? __pfx____sys_sendmsg+0x10/0x10 [ 812.024769][T20056] ? futex_wait+0x11e/0x370 [ 812.024786][T20056] ? find_held_lock+0x2b/0x80 [ 812.024812][T20056] __sys_sendmsg+0x160/0x210 [ 812.024828][T20056] ? __pfx___sys_sendmsg+0x10/0x10 [ 812.024851][T20056] do_syscall_64+0x123/0x790 [ 812.024865][T20056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.024876][T20056] RIP: 0033:0x7fd0dbf9e159 [ 812.024886][T20056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 812.024897][T20056] RSP: 002b:00007fd0dce45028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 812.024909][T20056] RAX: ffffffffffffffda RBX: 00007fd0dc225fa0 RCX: 00007fd0dbf9e159 [ 812.024917][T20056] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000004 [ 812.024924][T20056] RBP: 00007fd0dc03506b R08: 0000000000000000 R09: 0000000000000000 [ 812.024932][T20056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 812.024939][T20056] R13: 00007fd0dc226038 R14: 00007fd0dc225fa0 R15: 00007ffc80ddc0d8 [ 812.024954][T20056] [ 812.528927][T20065] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4898'. [ 812.528943][T20065] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4898'. [ 812.948035][ T5719] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 813.108885][ T5719] usb 4-1: unable to get BOS descriptor or descriptor too short [ 813.108911][ T5719] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 813.109631][ T5719] usb 4-1: config 1 interface 0 altsetting 16 bulk endpoint 0x1 has invalid maxpacket 8 [ 813.109648][ T5719] usb 4-1: config 1 interface 0 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 1023 [ 813.109661][ T5719] usb 4-1: config 1 interface 0 has no altsetting 0 [ 813.114909][ T5719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.114923][ T5719] usb 4-1: Product: syz [ 813.114932][ T5719] usb 4-1: Manufacturer: syz [ 813.114940][ T5719] usb 4-1: SerialNumber: syz [ 813.135486][T20077] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 813.135542][T20077] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 813.314505][T20090] FAULT_INJECTION: forcing a failure. [ 813.314505][T20090] name failslab, interval 1, probability 0, space 0, times 0 [ 813.314527][T20090] CPU: 0 UID: 0 PID: 20090 Comm: syz.5.4907 Tainted: G L syzkaller #0 PREEMPT(full) [ 813.314542][T20090] Tainted: [L]=SOFTLOCKUP [ 813.314546][T20090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 813.314553][T20090] Call Trace: [ 813.314557][T20090] [ 813.314562][T20090] dump_stack_lvl+0x100/0x190 [ 813.314583][T20090] should_fail_ex.cold+0x5/0xa [ 813.314600][T20090] should_failslab+0xc2/0x120 [ 813.314618][T20090] kmem_cache_alloc_noprof+0x92/0x6a0 [ 813.314634][T20090] ? do_getname+0x35/0x390 [ 813.314647][T20090] do_getname+0x35/0x390 [ 813.314659][T20090] do_sys_openat2+0xc7/0x1e0 [ 813.314676][T20090] ? __pfx_do_sys_openat2+0x10/0x10 [ 813.314693][T20090] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 813.314710][T20090] __x64_sys_openat+0x12d/0x210 [ 813.314727][T20090] ? __pfx___x64_sys_openat+0x10/0x10 [ 813.314748][T20090] do_syscall_64+0x123/0x790 [ 813.314761][T20090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.314772][T20090] RIP: 0033:0x7f158f19e159 [ 813.314782][T20090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 813.314792][T20090] RSP: 002b:00007f159004f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 813.314804][T20090] RAX: ffffffffffffffda RBX: 00007f158f425fa0 RCX: 00007f158f19e159 [ 813.314811][T20090] RDX: 0000000000000002 RSI: 0000200000000300 RDI: 0000000000000003 [ 813.314818][T20090] RBP: 00007f158f23506b R08: 0000000000000000 R09: 0000000000000000 [ 813.314824][T20090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 813.314831][T20090] R13: 00007f158f426038 R14: 00007f158f425fa0 R15: 00007ffdecf99188 [ 813.314859][T20090] [ 814.413051][ T5719] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 45 if 0 alt 16 proto 3 vid 0x0525 pid 0xA4A8 [ 814.445301][ T5719] usb 4-1: USB disconnect, device number 45 [ 814.462122][ T5719] usblp0: removed [ 814.733390][T10523] process 18483 (syz.5.4380) no longer affine to cpu1 [ 815.155168][T20111] FAULT_INJECTION: forcing a failure. [ 815.155168][T20111] name failslab, interval 1, probability 0, space 0, times 0 [ 815.155192][T20111] CPU: 0 UID: 0 PID: 20111 Comm: syz.2.4915 Tainted: G L syzkaller #0 PREEMPT(full) [ 815.155209][T20111] Tainted: [L]=SOFTLOCKUP [ 815.155214][T20111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 815.155221][T20111] Call Trace: [ 815.155226][T20111] [ 815.155231][T20111] dump_stack_lvl+0x100/0x190 [ 815.155252][T20111] should_fail_ex.cold+0x5/0xa [ 815.155269][T20111] should_failslab+0xc2/0x120 [ 815.155286][T20111] __kmalloc_cache_noprof+0x91/0x6d0 [ 815.155298][T20111] ? xprt_alloc+0x590/0x9d0 [ 815.155314][T20111] xprt_alloc+0x590/0x9d0 [ 815.155330][T20111] xs_setup_xprt+0xaf/0x3c0 [ 815.155347][T20111] xs_setup_tcp+0x95/0xad0 [ 815.155358][T20111] xprt_create_transport+0x16c/0x740 [ 815.155374][T20111] rpc_create+0x390/0x7f0 [ 815.155391][T20111] ? __pfx_rpc_create+0x10/0x10 [ 815.155412][T20111] ? __lock_acquire+0x5c0/0x1f40 [ 815.155434][T20111] ? lock_acquire+0x1d1/0x380 [ 815.155447][T20111] ? is_bpf_text_address+0x25/0x1a0 [ 815.155465][T20111] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 815.155482][T20111] nfs_mount+0x42d/0x7f0 [ 815.155499][T20111] ? __pfx_nfs_mount+0x10/0x10 [ 815.155516][T20111] ? is_bpf_text_address+0x8a/0x1a0 [ 815.155531][T20111] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 815.155544][T20111] ? bpf_ksym_find+0x128/0x1c0 [ 815.155556][T20111] ? is_bpf_text_address+0x94/0x1a0 [ 815.155571][T20111] ? kernel_text_address+0x8d/0x100 [ 815.155596][T20111] ? stack_trace_save+0x8e/0xc0 [ 815.155611][T20111] ? __pfx_stack_trace_save+0x10/0x10 [ 815.155624][T20111] nfs_request_mount.constprop.0.isra.0+0x56e/0x730 [ 815.155639][T20111] ? __pfx_nfs_request_mount.constprop.0.isra.0+0x10/0x10 [ 815.155657][T20111] ? check_prev_add+0x354/0xe60 [ 815.155672][T20111] nfs_try_get_tree+0x32d/0xa40 [ 815.155687][T20111] ? __pfx_nfs_try_get_tree+0x10/0x10 [ 815.155702][T20111] ? lock_acquire+0x1d1/0x380 [ 815.155714][T20111] ? find_nfs_version+0x21/0x1a0 [ 815.155731][T20111] ? find_held_lock+0x2b/0x80 [ 815.155752][T20111] ? do_raw_read_unlock+0x3f/0x70 [ 815.155770][T20111] nfs_get_tree+0xa61/0x1450 [ 815.155784][T20111] vfs_get_tree+0x92/0x320 [ 815.155795][T20111] vfs_cmd_create+0xd7/0x2a0 [ 815.155808][T20111] __do_sys_fsconfig+0x55a/0xcb0 [ 815.155822][T20111] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 815.155841][T20111] do_syscall_64+0x123/0x790 [ 815.155854][T20111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.155866][T20111] RIP: 0033:0x7f0e0179e159 [ 815.155876][T20111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 815.155886][T20111] RSP: 002b:00007f0e02591028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 815.155898][T20111] RAX: ffffffffffffffda RBX: 00007f0e01a25fa0 RCX: 00007f0e0179e159 [ 815.155906][T20111] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 815.155912][T20111] RBP: 00007f0e0183506b R08: 0000000000000000 R09: 0000000000000000 [ 815.155919][T20111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 815.155926][T20111] R13: 00007f0e01a26038 R14: 00007f0e01a25fa0 R15: 00007ffec4722ff8 [ 815.155948][T20111] [ 815.668294][T19772] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 815.673345][T19772] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 815.675942][T19772] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 815.676329][T19772] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 815.676562][T19772] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 816.045056][ T59] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.363955][ T59] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.532296][ T59] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.701306][ T59] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.291180][T19772] Bluetooth: hci2: command tx timeout [ 818.727365][ T59] bridge_slave_1: left allmulticast mode [ 818.727382][ T59] bridge_slave_1: left promiscuous mode [ 818.727490][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.785153][ T59] bridge_slave_0: left allmulticast mode [ 818.785171][ T59] bridge_slave_0: left promiscuous mode [ 818.785271][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 818.956835][ T30] audit: type=1400 audit(1790552016.534:1320): avc: denied { create } for pid=20179 comm="syz.1.4934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 818.957519][ T30] audit: type=1400 audit(1790552016.534:1321): avc: denied { getopt } for pid=20179 comm="syz.1.4934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 819.386392][ T30] audit: type=1400 audit(1790552016.964:1322): avc: denied { write } for pid=20170 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 819.430150][T20189] binder: 20187:20189 ioctl c0306201 0 returned -14 [ 819.431134][T20189] binder: 20187:20189 ioctl c0306201 0 returned -14 [ 819.608455][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 819.636225][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 819.661572][ T59] bond0 (unregistering): Released all slaves [ 819.687898][ T30] audit: type=1400 audit(1790552017.274:1323): avc: denied { write } for pid=20192 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 820.327843][T19772] Bluetooth: hci2: command tx timeout [ 820.707375][ T5268] 8021q: adding VLAN 0 to HW filter on device eth5 [ 821.461745][T20201] tmpfs: Unknown parameter '‘Çhè9å­±ÍH{üÛÞdx‰iÿ‰©ø8¼àã­0ZÑl |wµ?–VHü²C\W4ÒÙÆtµC|þA [ 821.461745][T20201] Ä5¾' [ 821.462015][ T30] audit: type=1400 audit(1790552019.044:1324): avc: denied { mounton } for pid=20200 comm="syz.4.4937" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 821.792848][ T59] hsr_slave_0: left promiscuous mode [ 821.793205][ T59] hsr_slave_1: left promiscuous mode [ 821.793550][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 821.793562][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 821.795370][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 821.795381][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 821.850070][ T59] veth1_macvtap: left promiscuous mode [ 821.850093][ T59] veth0_macvtap: left promiscuous mode [ 821.850139][ T59] veth1_vlan: left promiscuous mode [ 821.850170][ T59] veth0_vlan: left promiscuous mode [ 822.320576][ T30] audit: type=1400 audit(1790552019.904:1325): avc: denied { write } for pid=20206 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 822.408108][T19772] Bluetooth: hci2: command tx timeout [ 822.448699][ T59] team0 (unregistering): Port device team_slave_1 removed [ 822.475057][ T59] team0 (unregistering): Port device team_slave_0 removed [ 822.550517][ T30] audit: type=1400 audit(1790552020.134:1326): avc: denied { write } for pid=20223 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 822.777857][ T5268] 8021q: adding VLAN 0 to HW filter on device eth6 [ 822.897362][T20113] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.897441][T20113] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.897498][T20113] bridge_slave_0: entered allmulticast mode [ 822.926583][T20113] bridge_slave_0: entered promiscuous mode [ 822.940618][T20113] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.949416][T20113] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.949485][T20113] bridge_slave_1: entered allmulticast mode [ 822.975315][T20113] bridge_slave_1: entered promiscuous mode [ 823.920917][T20113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 823.969942][T20113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 824.139218][T20113] team0: Port device team_slave_0 added [ 824.145555][T20113] team0: Port device team_slave_1 added [ 824.443238][T20113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 824.443250][T20113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 824.443263][T20113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 824.483666][T20113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 824.483676][T20113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 824.483689][T20113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 824.496820][T19772] Bluetooth: hci2: command tx timeout [ 824.654595][T20113] hsr_slave_0: entered promiscuous mode [ 824.664682][T20113] hsr_slave_1: entered promiscuous mode [ 825.143150][ T30] audit: type=1400 audit(1790552022.724:1327): avc: denied { write } for pid=20244 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 825.175170][ T5719] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 825.338258][ T5719] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 825.342638][ T5719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.342653][ T5719] usb 3-1: Product: syz [ 825.342662][ T5719] usb 3-1: Manufacturer: syz [ 825.342670][ T5719] usb 3-1: SerialNumber: syz [ 825.348634][ T5719] usb 3-1: config 0 descriptor?? [ 826.163842][T20274] futex_wake_op: syz.3.4948 tries to shift op by 144; fix this program [ 826.210901][ T5719] ch341 3-1:0.0: ch341-uart converter detected [ 826.349636][ T30] audit: type=1400 audit(1790552023.934:1328): avc: denied { write } for pid=20273 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 826.909850][T14544] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 827.059183][T14544] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 827.061943][T14544] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 827.061959][T14544] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 827.061970][T14544] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 827.061991][T14544] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 827.064101][T14544] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 827.064116][T14544] usb 4-1: Product: syz [ 827.064124][T14544] usb 4-1: Manufacturer: syz [ 827.146534][T14544] cdc_wdm 4-1:1.0: skipping garbage [ 827.146547][T14544] cdc_wdm 4-1:1.0: skipping garbage [ 827.164945][T14544] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 827.164958][T14544] cdc_wdm 4-1:1.0: Unknown control protocol [ 827.167253][ T5719] usb 3-1: failed to send control message: -71 [ 827.167278][ T5719] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 827.199717][ T5719] usb 3-1: USB disconnect, device number 66 [ 827.239951][ T5719] ch341 3-1:0.0: device disconnected [ 827.352874][ T5703] usb 4-1: USB disconnect, device number 46 [ 827.664237][ T30] audit: type=1400 audit(1790552025.244:1329): avc: denied { write } for pid=20284 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 827.819159][ T5703] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 827.912701][ T30] audit: type=1400 audit(1790552025.494:1330): avc: denied { write } for pid=20297 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 827.973946][ T5703] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 827.976667][ T5703] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 827.976698][ T5703] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 827.976710][ T5703] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 827.976733][ T5703] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 828.028947][ T5703] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 828.028963][ T5703] usb 4-1: Product: syz [ 828.028971][ T5703] usb 4-1: Manufacturer: syz [ 828.053543][ T5703] cdc_wdm 4-1:1.0: skipping garbage [ 828.053555][ T5703] cdc_wdm 4-1:1.0: skipping garbage [ 828.070304][ T5703] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 828.070316][ T5703] cdc_wdm 4-1:1.0: Unknown control protocol [ 828.113298][T20113] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 828.157719][T20113] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 828.170057][T20113] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 828.176213][T20113] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 828.213177][T20113] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 828.233323][T20113] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 828.233696][T20113] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 828.272849][T20113] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 828.491163][T20113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 828.526787][T20113] 8021q: adding VLAN 0 to HW filter on device team0 [ 828.549871][ T97] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.549917][ T97] bridge0: port 1(bridge_slave_0) entered forwarding state [ 828.579385][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.579437][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 829.445046][T20326] futex_wake_op: syz.1.4959 tries to shift op by 144; fix this program [ 829.589971][T14544] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 829.736215][ T5737] usb 4-1: USB disconnect, device number 47 [ 829.744364][T14544] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 829.759025][T14544] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 829.759041][T14544] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 829.759052][T14544] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 829.759073][T14544] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 829.759088][T14544] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 829.760332][T14544] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 829.760346][T14544] usb 3-1: Product: syz [ 829.760354][T14544] usb 3-1: Manufacturer: syz [ 829.851714][T14544] cdc_wdm 3-1:1.0: skipping garbage [ 829.851726][T14544] cdc_wdm 3-1:1.0: skipping garbage [ 829.870132][T14544] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 829.870146][T14544] cdc_wdm 3-1:1.0: Unknown control protocol [ 830.036767][ T30] audit: type=1400 audit(1790552027.614:1331): avc: denied { write } for pid=20316 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 830.066259][T20346] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4964'. [ 830.401670][ T30] audit: type=1400 audit(1790552027.974:1332): avc: denied { write } for pid=20355 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 830.814262][T20113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 831.273797][T20384] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 831.273815][T20384] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 831.304694][T20384] vhci_hcd vhci_hcd.0: Device attached [ 831.345454][ T30] audit: type=1400 audit(1790552028.914:1333): avc: denied { cmd } for pid=20383 comm="syz.3.4970" path="/dev/ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 831.389618][T20388] vhci_hcd: connection closed [ 831.395667][ T30] audit: type=1400 audit(1790552028.974:1334): avc: denied { write } for pid=20366 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 831.443186][ T50] vhci_hcd vhci_hcd.3: stop threads [ 831.443989][ T50] vhci_hcd vhci_hcd.3: release socket [ 831.461805][ T50] vhci_hcd vhci_hcd.3: disconnect device [ 831.501528][T20113] veth0_vlan: entered promiscuous mode [ 831.525317][T20113] veth1_vlan: entered promiscuous mode [ 831.597169][T20113] veth0_macvtap: entered promiscuous mode [ 831.619749][T20113] veth1_macvtap: entered promiscuous mode [ 831.643053][ T30] audit: type=1400 audit(1790552029.224:1335): avc: denied { write } for pid=20395 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 831.684845][T20113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 831.707306][T20113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 831.751729][ T5719] usb 3-1: USB disconnect, device number 67 [ 831.758257][ T155] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.758282][ T155] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.758300][ T155] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.758318][ T155] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.065627][ T5999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 832.065638][ T5999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 832.993511][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 832.993525][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 833.490938][T20427] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 833.496848][T20427] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 833.611915][ T30] audit: type=1400 audit(1790552031.194:1336): avc: denied { write } for pid=20400 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 833.617452][T20427] syz.1.4978 (20427) used greatest stack depth: 19928 bytes left [ 833.788955][ T5703] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 833.836472][ T30] audit: type=1400 audit(1790552031.414:1337): avc: denied { write } for pid=20443 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 833.939277][ T5703] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 833.941922][ T5703] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 833.941939][ T5703] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 833.941950][ T5703] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 833.941972][ T5703] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 833.941986][ T5703] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 834.022299][ T5703] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 834.022315][ T5703] usb 4-1: Product: syz [ 834.022324][ T5703] usb 4-1: Manufacturer: syz [ 834.047234][ T5703] cdc_wdm 4-1:1.0: skipping garbage [ 834.047245][ T5703] cdc_wdm 4-1:1.0: skipping garbage [ 834.078601][ T5703] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 834.078614][ T5703] cdc_wdm 4-1:1.0: Unknown control protocol [ 834.894363][T20447] futex_wake_op: syz.5.4984 tries to shift op by 144; fix this program [ 835.076017][T20450] net_ratelimit: 10 callbacks suppressed [ 835.076031][T20450] batadv0: mtu less than device minimum [ 835.076534][T20450] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 835.077016][T20450] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 835.077501][T20450] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 835.078016][T20450] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 835.078500][T20450] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 835.078995][T20450] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 835.079478][T20450] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 835.079961][T20450] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 835.080437][T20450] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 838.232322][ T5703] usb 4-1: USB disconnect, device number 48 [ 838.575099][T20482] futex_wake_op: syz.4.4996 tries to shift op by 144; fix this program [ 839.540462][T20487] kAFS: No cell specified [ 839.823016][T20496] Invalid source name [ 840.345961][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 840.347282][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 840.362042][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 840.376222][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 840.395541][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 840.633593][ T211] Bluetooth: (null): Invalid header checksum [ 841.417388][T20539] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5014'. [ 841.540118][T20543] bond0: invalid ARP target specified [ 842.319829][T20507] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.319911][T20507] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.319970][T20507] bridge_slave_0: entered allmulticast mode [ 842.321370][T20507] bridge_slave_0: entered promiscuous mode [ 842.487975][ T52] Bluetooth: hci3: command tx timeout [ 842.525746][T20507] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.525823][T20507] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.525905][T20507] bridge_slave_1: entered allmulticast mode [ 842.555563][T20507] bridge_slave_1: entered promiscuous mode [ 842.650271][T20507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 842.657516][T20507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 843.062303][ T211] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.126622][T20507] team0: Port device team_slave_0 added [ 843.153013][T20507] team0: Port device team_slave_1 added [ 843.240507][T20507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 843.240520][T20507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 843.240539][T20507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 843.299144][T20507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 843.299155][T20507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 843.299168][T20507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 843.596812][ T211] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.881714][T20507] hsr_slave_0: entered promiscuous mode [ 843.886317][T20507] hsr_slave_1: entered promiscuous mode [ 843.901434][T20507] debugfs: 'hsr0' already exists in 'hsr' [ 843.901446][T20507] Cannot create hsr debugfs directory [ 844.112905][ T211] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.570360][ T52] Bluetooth: hci3: command tx timeout [ 845.097455][ T30] audit: type=1400 audit(1790552042.674:1338): avc: denied { create } for pid=20605 comm="syz.1.5038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 845.832032][ T211] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.003322][T20613] FAULT_INJECTION: forcing a failure. [ 846.003322][T20613] name failslab, interval 1, probability 0, space 0, times 0 [ 846.003343][T20613] CPU: 0 UID: 0 PID: 20613 Comm: syz.1.5041 Tainted: G L syzkaller #0 PREEMPT(full) [ 846.003360][T20613] Tainted: [L]=SOFTLOCKUP [ 846.003365][T20613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 846.003372][T20613] Call Trace: [ 846.003377][T20613] [ 846.003382][T20613] dump_stack_lvl+0x100/0x190 [ 846.003409][T20613] should_fail_ex.cold+0x5/0xa [ 846.003426][T20613] should_failslab+0xc2/0x120 [ 846.003445][T20613] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 846.003459][T20613] ? __alloc_skb+0x140/0x710 [ 846.003476][T20613] __alloc_skb+0x140/0x710 [ 846.003490][T20613] ? __alloc_skb+0x5b7/0x710 [ 846.003504][T20613] ? __pfx___alloc_skb+0x10/0x10 [ 846.003520][T20613] ? __asan_memcpy+0x3c/0x60 [ 846.003533][T20613] alloc_uevent_skb+0x7d/0x210 [ 846.003552][T20613] kobject_uevent_env+0x122c/0x18b0 [ 846.003570][T20613] ? rpc_sysfs_xprt_switch_setup+0xe0/0x370 [ 846.003587][T20613] rpc_sysfs_xprt_switch_setup+0x21c/0x370 [ 846.003602][T20613] xprt_switch_alloc+0x28e/0x3c0 [ 846.003619][T20613] rpc_create_xprt+0x2dc/0x440 [ 846.003637][T20613] rpc_create+0x46e/0x7f0 [ 846.003655][T20613] ? __pfx_rpc_create+0x10/0x10 [ 846.003676][T20613] ? __lock_acquire+0x5c0/0x1f40 [ 846.003699][T20613] ? lock_acquire+0x1d1/0x380 [ 846.003711][T20613] ? is_bpf_text_address+0x25/0x1a0 [ 846.003726][T20613] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 846.003743][T20613] nfs_mount+0x42d/0x7f0 [ 846.003761][T20613] ? __pfx_nfs_mount+0x10/0x10 [ 846.003778][T20613] ? arch_stack_walk+0xa6/0xf0 [ 846.003803][T20613] ? kasan_save_stack+0x3f/0x50 [ 846.003816][T20613] ? kasan_save_stack+0x30/0x50 [ 846.003829][T20613] ? kasan_save_track+0x14/0x30 [ 846.003842][T20613] ? __kasan_kmalloc+0xaa/0xb0 [ 846.003855][T20613] ? __kmalloc_node_track_caller_noprof+0x33d/0x870 [ 846.003869][T20613] ? kmemdup_nul+0x49/0xd0 [ 846.003881][T20613] ? nfs_get_tree+0x7dd/0x1450 [ 846.003891][T20613] ? vfs_get_tree+0x92/0x320 [ 846.003900][T20613] ? vfs_cmd_create+0xd7/0x2a0 [ 846.003912][T20613] ? __do_sys_fsconfig+0x55a/0xcb0 [ 846.003923][T20613] ? do_syscall_64+0x123/0x790 [ 846.003936][T20613] nfs_request_mount.constprop.0.isra.0+0x56e/0x730 [ 846.003951][T20613] ? __pfx_nfs_request_mount.constprop.0.isra.0+0x10/0x10 [ 846.003973][T20613] nfs_try_get_tree+0x32d/0xa40 [ 846.003988][T20613] ? __pfx_nfs_try_get_tree+0x10/0x10 [ 846.004005][T20613] ? lock_acquire+0x1d1/0x380 [ 846.004017][T20613] ? find_nfs_version+0x21/0x1a0 [ 846.004035][T20613] ? find_held_lock+0x2b/0x80 [ 846.004054][T20613] ? do_raw_read_unlock+0x3f/0x70 [ 846.004072][T20613] nfs_get_tree+0xa61/0x1450 [ 846.004085][T20613] vfs_get_tree+0x92/0x320 [ 846.004096][T20613] vfs_cmd_create+0xd7/0x2a0 [ 846.004109][T20613] __do_sys_fsconfig+0x55a/0xcb0 [ 846.004122][T20613] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 846.004142][T20613] do_syscall_64+0x123/0x790 [ 846.004155][T20613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.004166][T20613] RIP: 0033:0x7ff18d19e159 [ 846.004176][T20613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 846.004187][T20613] RSP: 002b:00007ff18e09c028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 846.004198][T20613] RAX: ffffffffffffffda RBX: 00007ff18d425fa0 RCX: 00007ff18d19e159 [ 846.004206][T20613] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 846.004212][T20613] RBP: 00007ff18d23506b R08: 0000000000000000 R09: 0000000000000000 [ 846.004219][T20613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 846.004226][T20613] R13: 00007ff18d426038 R14: 00007ff18d425fa0 R15: 00007fffb14054e8 [ 846.004240][T20613] [ 846.648406][ T52] Bluetooth: hci3: command tx timeout [ 846.983224][ T211] bridge_slave_1: left allmulticast mode [ 846.983241][ T211] bridge_slave_1: left promiscuous mode [ 846.983345][ T211] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.017281][ T211] bridge_slave_0: left allmulticast mode [ 847.017297][ T211] bridge_slave_0: left promiscuous mode [ 847.017423][ T211] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.424252][ T5719] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 847.522689][ T30] audit: type=1400 audit(1790552045.104:1339): avc: denied { create } for pid=20637 comm="syz.4.5042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 847.550429][T20638] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 847.550443][T20638] audit: out of memory in audit_log_start [ 847.588923][ T5719] usb 3-1: Using ep0 maxpacket: 16 [ 847.589385][ T5719] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 847.590700][ T5719] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 847.592152][ T5719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.592166][ T5719] usb 3-1: Product: syz [ 847.592175][ T5719] usb 3-1: Manufacturer: syz [ 847.592183][ T5719] usb 3-1: SerialNumber: syz [ 847.593932][ T5719] usb 3-1: config 0 descriptor?? [ 847.626999][ T5719] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 847.627019][ T5719] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 847.678720][ T211] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 847.736348][ T30] audit: type=1400 audit(1790552045.314:1340): avc: denied { write } for pid=20622 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 847.768495][ T211] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 847.773936][ T211] bond0 (unregistering): Released all slaves [ 847.918456][ T211] rxrpc: Leaked peer 80d {1} 127.0.0.1:7003 [ 848.074973][ T30] audit: type=1400 audit(1790552045.654:1341): avc: denied { write } for pid=20647 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 848.248517][ T5719] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 848.274657][ T5268] 8021q: adding VLAN 0 to HW filter on device eth5 [ 848.362776][T20654] IPVS: set_ctl: invalid protocol: 50 172.30.1.5:20002 [ 848.697047][ T5719] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 848.697068][ T5719] em28xx 3-1:0.0: board has no eeprom [ 848.727960][ T52] Bluetooth: hci3: command tx timeout [ 849.792722][T20668] kAFS: No cell specified [ 849.830940][ T5719] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 849.830958][ T5719] em28xx 3-1:0.0: dvb set to bulk mode. [ 849.831523][ T5703] em28xx 3-1:0.0: Binding DVB extension [ 849.938308][T20629] em28xx 3-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 850.048931][ T5737] usb 3-1: USB disconnect, device number 68 [ 850.049603][ T5737] em28xx 3-1:0.0: Disconnecting em28xx [ 850.217334][ T5703] em28xx 3-1:0.0: Registering input extension [ 850.217528][ T5737] em28xx 3-1:0.0: Closing input extension [ 850.245484][ T30] audit: type=1400 audit(1790552047.824:1342): avc: denied { write } for pid=20658 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 850.506033][T20685] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 850.539846][ T30] audit: type=1400 audit(1790552048.124:1343): avc: denied { write } for pid=20682 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 850.701162][ T5737] em28xx: Freeing device [ 850.724152][ T211] hsr_slave_0: left promiscuous mode [ 850.743870][ T211] hsr_slave_1: left promiscuous mode [ 850.744268][ T211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 850.744280][ T211] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 850.769533][ T211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 850.769547][ T211] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 850.816798][ T211] veth1_vlan: left promiscuous mode [ 850.816850][ T211] veth0_vlan: left promiscuous mode [ 851.066886][T20692] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5057'. [ 851.139815][ T5737] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 851.269537][ T211] team0 (unregistering): Port device team_slave_1 removed [ 851.293029][ T211] team0 (unregistering): Port device team_slave_0 removed [ 852.040833][ T5737] usb 3-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 852.041571][ T5737] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 852.041588][ T5737] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 852.041606][ T5737] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.590567][ T5737] hid-sensor-hub 0003:8086:0000.0029: hiddev0,hidraw0: USB HID v1.11 Device [HID 8086:0000] on usb-dummy_hcd.2-1/input0 [ 852.976151][ T5737] usb 3-1: USB disconnect, device number 69 [ 853.406967][T20507] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 853.422615][T20507] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 853.424643][T20507] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 853.451751][T20507] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 853.454742][T20507] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 853.490846][T20507] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 853.539395][T20507] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 853.544510][T20507] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 853.688351][ T30] audit: type=1400 audit(1790552051.264:1344): avc: denied { write } for pid=20705 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 853.863644][T20507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 853.922435][T20507] 8021q: adding VLAN 0 to HW filter on device team0 [ 853.940915][ T97] bridge0: port 1(bridge_slave_0) entered blocking state [ 853.940961][ T97] bridge0: port 1(bridge_slave_0) entered forwarding state [ 853.975266][T12855] bridge0: port 2(bridge_slave_1) entered blocking state [ 853.975322][T12855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 854.016655][ T30] audit: type=1400 audit(1790552051.594:1345): avc: denied { write } for pid=20738 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 854.107397][T20507] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 854.848533][T20773] Bluetooth: MGMT ver 1.23 [ 854.916157][ T30] audit: type=1400 audit(1790552052.494:1346): avc: denied { write } for pid=20748 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 855.206530][T19772] Bluetooth: hci1: unexpected event for opcode 0x2040 [ 855.226589][ T30] audit: type=1400 audit(1790552052.804:1347): avc: denied { write } for pid=20784 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 855.322307][T20507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 855.440954][T20507] veth0_vlan: entered promiscuous mode [ 855.443662][T20793] FAULT_INJECTION: forcing a failure. [ 855.443662][T20793] name failslab, interval 1, probability 0, space 0, times 0 [ 855.443681][T20793] CPU: 0 UID: 0 PID: 20793 Comm: syz.5.5078 Tainted: G L syzkaller #0 PREEMPT(full) [ 855.443697][T20793] Tainted: [L]=SOFTLOCKUP [ 855.443701][T20793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 855.443707][T20793] Call Trace: [ 855.443712][T20793] [ 855.443717][T20793] dump_stack_lvl+0x100/0x190 [ 855.443738][T20793] should_fail_ex.cold+0x5/0xa [ 855.443756][T20793] should_failslab+0xc2/0x120 [ 855.443773][T20793] __kmalloc_cache_noprof+0x91/0x6d0 [ 855.443785][T20793] ? xprt_switch_alloc+0x91/0x3c0 [ 855.443805][T20793] xprt_switch_alloc+0x91/0x3c0 [ 855.443821][T20793] rpc_create_xprt+0x2dc/0x440 [ 855.443840][T20793] rpc_create+0x46e/0x7f0 [ 855.443857][T20793] ? __pfx_rpc_create+0x10/0x10 [ 855.443878][T20793] ? __lock_acquire+0x5c0/0x1f40 [ 855.443901][T20793] ? lock_acquire+0x1d1/0x380 [ 855.443913][T20793] ? is_bpf_text_address+0x25/0x1a0 [ 855.443929][T20793] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 855.443947][T20793] nfs_mount+0x42d/0x7f0 [ 855.443967][T20793] ? __pfx_nfs_mount+0x10/0x10 [ 855.443984][T20793] ? arch_stack_walk+0xa6/0xf0 [ 855.444010][T20793] ? kasan_save_stack+0x3f/0x50 [ 855.444023][T20793] ? kasan_save_stack+0x30/0x50 [ 855.444037][T20793] ? kasan_save_track+0x14/0x30 [ 855.444050][T20793] ? __kasan_kmalloc+0xaa/0xb0 [ 855.444064][T20793] ? __kmalloc_node_track_caller_noprof+0x33d/0x870 [ 855.444079][T20793] ? kmemdup_nul+0x49/0xd0 [ 855.444090][T20793] ? nfs_get_tree+0x7dd/0x1450 [ 855.444101][T20793] ? vfs_get_tree+0x92/0x320 [ 855.444111][T20793] ? vfs_cmd_create+0xd7/0x2a0 [ 855.444123][T20793] ? __do_sys_fsconfig+0x55a/0xcb0 [ 855.444134][T20793] ? do_syscall_64+0x123/0x790 [ 855.444148][T20793] nfs_request_mount.constprop.0.isra.0+0x56e/0x730 [ 855.444162][T20793] ? __pfx_nfs_request_mount.constprop.0.isra.0+0x10/0x10 [ 855.444185][T20793] nfs_try_get_tree+0x32d/0xa40 [ 855.444201][T20793] ? __pfx_nfs_try_get_tree+0x10/0x10 [ 855.444216][T20793] ? lock_acquire+0x1d1/0x380 [ 855.444228][T20793] ? find_nfs_version+0x21/0x1a0 [ 855.444245][T20793] ? find_held_lock+0x2b/0x80 [ 855.444265][T20793] ? do_raw_read_unlock+0x3f/0x70 [ 855.444282][T20793] nfs_get_tree+0xa61/0x1450 [ 855.444302][T20793] vfs_get_tree+0x92/0x320 [ 855.444315][T20793] vfs_cmd_create+0xd7/0x2a0 [ 855.444329][T20793] __do_sys_fsconfig+0x55a/0xcb0 [ 855.444343][T20793] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 855.444364][T20793] do_syscall_64+0x123/0x790 [ 855.444377][T20793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.444390][T20793] RIP: 0033:0x7fad6119e159 [ 855.444401][T20793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 855.444412][T20793] RSP: 002b:00007fad6213c028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 855.444423][T20793] RAX: ffffffffffffffda RBX: 00007fad61425fa0 RCX: 00007fad6119e159 [ 855.444431][T20793] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 855.444437][T20793] RBP: 00007fad6123506b R08: 0000000000000000 R09: 0000000000000000 [ 855.444444][T20793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 855.444451][T20793] R13: 00007fad61426038 R14: 00007fad61425fa0 R15: 00007ffc0f25f658 [ 855.444465][T20793] [ 855.604987][T20507] veth1_vlan: entered promiscuous mode [ 855.900895][T20507] veth0_macvtap: entered promiscuous mode [ 855.937341][T20507] veth1_macvtap: entered promiscuous mode [ 855.990490][T20507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 856.015826][T20507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 856.090269][ T97] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.090408][ T97] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.090427][ T97] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.090444][ T97] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.338510][ T30] audit: type=1400 audit(1790552053.914:1348): avc: denied { watch } for pid=20798 comm="syz.2.5080" path="/433/net_prio.prioidx" dev="tmpfs" ino=2275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 856.338539][ T30] audit: type=1400 audit(1790552053.914:1349): avc: denied { watch_sb } for pid=20798 comm="syz.2.5080" path="/433/net_prio.prioidx" dev="tmpfs" ino=2275 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 856.450224][ T4306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 856.450238][ T4306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 856.593149][ T211] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 856.593164][ T211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 856.633851][T20811] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5084'. [ 856.659793][ T30] audit: type=1400 audit(1790552054.234:1350): avc: denied { recv } for pid=20798 comm="syz.2.5080" saddr=fe80::1b src=16385 daddr=fe80::c dest=58622 netif=teql0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 856.769151][ T30] audit: type=1400 audit(1790552054.344:1351): avc: denied { search } for pid=20814 comm="sed" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 856.870489][ T30] audit: type=1400 audit(1790552054.454:1352): avc: denied { getattr } for pid=20792 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 856.870530][ T30] audit: type=1400 audit(1790552054.454:1353): avc: denied { write } for pid=20792 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 856.870552][ T30] audit: type=1400 audit(1790552054.454:1354): avc: denied { add_name } for pid=20792 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 856.905874][T19772] Bluetooth: hci2: command 0x0401 tx timeout [ 856.908006][ T52] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 857.536122][ T30] audit: type=1400 audit(1790552055.114:1355): avc: denied { egress } for pid=52 comm="kworker/u9:0" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 857.536153][ T30] audit: type=1400 audit(1790552055.114:1356): avc: denied { sendto } for pid=52 comm="kworker/u9:0" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 857.924502][T20824] bond0: (slave bond_slave_0): Releasing backup interface [ 858.093321][ T30] audit: type=1400 audit(1790552055.674:1357): avc: denied { write } for pid=20832 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 858.212945][ T52] Bluetooth: hci2: unexpected event for opcode 0x2040 [ 858.217707][T20834] lo: Caught tx_queue_len zero misconfig [ 858.217724][T20834] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 858.249402][T20834] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 860.356533][ T10] libceph: connect (1)[c::]:6789 error -101 [ 860.356704][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 860.395674][T20857] ceph: No mds server is up or the cluster is laggy [ 861.281914][T20877] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 861.386918][T20882] hub 1-0:1.0: USB hub found [ 861.403513][T20882] hub 1-0:1.0: 1 port detected [ 862.929540][ T5696] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 863.158274][ T5719] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 863.179171][ T5696] usb 3-1: Using ep0 maxpacket: 16 [ 863.184712][ T5696] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 863.185532][ T5696] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 863.185547][ T5696] usb 3-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 863.185561][ T5696] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 863.185576][ T5696] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 863.185591][ T5696] usb 3-1: config 0 interface 0 has no altsetting 0 [ 863.255523][ T5696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.255540][ T5696] usb 3-1: Product: syz [ 863.255549][ T5696] usb 3-1: Manufacturer: syz [ 863.255557][ T5696] usb 3-1: SerialNumber: syz [ 863.256861][ T5696] usb 3-1: config 0 descriptor?? [ 863.257698][T20900] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 863.325252][ T5719] usb 4-1: unable to get BOS descriptor or descriptor too short [ 863.325287][ T5719] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 863.335627][ T5719] usb 4-1: config 1 interface 0 altsetting 16 bulk endpoint 0x1 has invalid maxpacket 8 [ 863.335645][ T5719] usb 4-1: config 1 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 863.335660][ T5719] usb 4-1: config 1 interface 0 has no altsetting 0 [ 863.382574][ T5719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.382591][ T5719] usb 4-1: Product: syz [ 863.382600][ T5719] usb 4-1: Manufacturer: syz [ 863.382609][ T5719] usb 4-1: SerialNumber: syz [ 863.409870][T20904] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 863.494638][T20900] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 863.510116][ T5696] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input42 [ 863.638790][ T5703] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 864.282463][ T5719] usb 4-1: USB disconnect, device number 49 [ 864.307280][ T5696] usb 3-1: USB disconnect, device number 70 [ 864.319245][ T5703] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 864.323023][ T5703] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 864.323042][ T5703] usb 5-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 864.323055][ T5703] usb 5-1: config 0 interface 0 has no altsetting 0 [ 864.325351][ T5703] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 864.325366][ T5703] usb 5-1: Product: syz [ 864.325374][ T5703] usb 5-1: Manufacturer: syz [ 864.325382][ T5703] usb 5-1: SerialNumber: syz [ 864.326626][ T5703] usb 5-1: config 0 descriptor?? [ 864.327095][T20916] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 864.424468][ T5703] usb 5-1: selecting invalid altsetting 0 [ 864.573360][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 864.573391][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 866.462502][T20916] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 866.491373][T14544] usb 5-1: USB disconnect, device number 57 [ 866.496189][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 866.496200][ T30] audit: type=1400 audit(1790552064.074:1359): avc: denied { read write } for pid=20932 comm="syz.2.5126" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 866.496222][ T30] audit: type=1400 audit(1790552064.074:1360): avc: denied { open } for pid=20932 comm="syz.2.5126" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 867.329886][T20957] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5135'. [ 868.479792][T20959] ovs-dp0: entered promiscuous mode [ 868.611485][ T30] audit: type=1400 audit(1790552066.194:1361): avc: denied { ioctl } for pid=20978 comm="syz.2.5141" path="socket:[82607]" dev="sockfs" ino=82607 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 871.235618][T21001] FAULT_INJECTION: forcing a failure. [ 871.235618][T21001] name failslab, interval 1, probability 0, space 0, times 0 [ 871.235657][T21001] CPU: 0 UID: 0 PID: 21001 Comm: syz.1.5148 Tainted: G L syzkaller #0 PREEMPT(full) [ 871.235674][T21001] Tainted: [L]=SOFTLOCKUP [ 871.235678][T21001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 871.235685][T21001] Call Trace: [ 871.235690][T21001] [ 871.235695][T21001] dump_stack_lvl+0x100/0x190 [ 871.235716][T21001] should_fail_ex.cold+0x5/0xa [ 871.235732][T21001] should_failslab+0xc2/0x120 [ 871.235748][T21001] __kmalloc_cache_noprof+0x91/0x6d0 [ 871.235762][T21001] ? fuse_chan_new+0x40/0x320 [ 871.235781][T21001] fuse_chan_new+0x40/0x320 [ 871.235798][T21001] fuse_dev_chan_new+0x14/0x2b0 [ 871.235809][T21001] ? kobject_get_unless_zero+0x156/0x200 [ 871.235825][T21001] cuse_channel_open+0x1f/0x8f0 [ 871.235842][T21001] ? __pfx_cuse_channel_open+0x10/0x10 [ 871.235859][T21001] misc_open+0x26d/0x450 [ 871.235873][T21001] ? __pfx_misc_open+0x10/0x10 [ 871.235887][T21001] chrdev_open+0x234/0x6a0 [ 871.235903][T21001] ? __pfx_chrdev_open+0x10/0x10 [ 871.235919][T21001] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 871.235933][T21001] do_dentry_open+0x6ab/0x14d0 [ 871.235946][T21001] ? __pfx_chrdev_open+0x10/0x10 [ 871.235963][T21001] vfs_open+0x82/0x3f0 [ 871.235983][T21001] path_openat+0x19fa/0x2440 [ 871.236002][T21001] ? __pfx_path_openat+0x10/0x10 [ 871.236021][T21001] do_file_open+0x20e/0x430 [ 871.236037][T21001] ? __pfx_do_file_open+0x10/0x10 [ 871.236063][T21001] ? _raw_spin_unlock+0x28/0x50 [ 871.236079][T21001] ? alloc_fd+0x471/0x7a0 [ 871.236098][T21001] do_sys_openat2+0x10f/0x1e0 [ 871.236115][T21001] ? __pfx_do_sys_openat2+0x10/0x10 [ 871.236137][T21001] __x64_sys_openat+0x12d/0x210 [ 871.236154][T21001] ? __pfx___x64_sys_openat+0x10/0x10 [ 871.236177][T21001] do_syscall_64+0x123/0x790 [ 871.236189][T21001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.236201][T21001] RIP: 0033:0x7ff18d19e159 [ 871.236211][T21001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 871.236221][T21001] RSP: 002b:00007ff18e09c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 871.236233][T21001] RAX: ffffffffffffffda RBX: 00007ff18d425fa0 RCX: 00007ff18d19e159 [ 871.236246][T21001] RDX: 0000000000002842 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 871.236253][T21001] RBP: 00007ff18d23506b R08: 0000000000000000 R09: 0000000000000000 [ 871.236260][T21001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 871.236267][T21001] R13: 00007ff18d426038 R14: 00007ff18d425fa0 R15: 00007fffb14054e8 [ 871.236282][T21001] [ 872.375447][T21027] net_ratelimit: 10 callbacks suppressed [ 872.375461][T21027] ip_tables: iptables: counters copy to user failed while replacing table [ 873.668288][T21039] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 873.673114][T21039] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 873.766685][T21041] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 873.766728][T21041] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 873.829788][ T30] audit: type=1400 audit(1790552071.414:1362): avc: denied { firmware_load } for pid=21038 comm="syz.3.5161" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 874.101637][T21041] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 874.490487][ T52] Bluetooth: hci2: command 0x0401 tx timeout [ 875.007370][T21054] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 875.007388][T21054] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 875.007422][T21054] vhci_hcd vhci_hcd.0: Device attached [ 875.100709][T21055] vhci_hcd: connection closed [ 875.107003][ T4306] vhci_hcd vhci_hcd.3: stop threads [ 875.107021][ T4306] vhci_hcd vhci_hcd.3: release socket [ 875.107032][ T4306] vhci_hcd vhci_hcd.3: disconnect device [ 876.277947][T21068] bridge_slave_0: left allmulticast mode [ 876.277965][T21068] bridge_slave_0: left promiscuous mode [ 876.278067][T21068] bridge0: port 1(bridge_slave_0) entered disabled state [ 876.376683][T21072] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 876.393229][T21072] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 877.566956][T21087] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 879.016073][T21113] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 879.016092][T21113] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 879.034253][T21113] vhci_hcd vhci_hcd.0: Device attached [ 879.097686][T21114] vhci_hcd: connection closed [ 879.098015][ T211] vhci_hcd vhci_hcd.4: stop threads [ 879.098032][ T211] vhci_hcd vhci_hcd.4: release socket [ 879.098043][ T211] vhci_hcd vhci_hcd.4: disconnect device [ 880.171913][T21126] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 880.288190][ T5737] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 880.377794][ T5719] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 880.525892][ T5737] usb 6-1: Using ep0 maxpacket: 16 [ 880.549754][ T5737] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 880.583067][ T5719] usb 3-1: Using ep0 maxpacket: 32 [ 880.625815][ T5719] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 880.741091][ T5719] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 880.741120][ T5719] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 880.741135][ T5719] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 880.741150][ T5719] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 880.792719][ T5737] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 881.011098][ T5719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.011116][ T5719] usb 3-1: Product: syz [ 881.011124][ T5719] usb 3-1: Manufacturer: syz [ 881.011147][ T5719] usb 3-1: SerialNumber: syz [ 881.364890][ T5737] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.364915][ T5737] usb 6-1: Product: syz [ 881.364924][ T5737] usb 6-1: Manufacturer: syz [ 881.364933][ T5737] usb 6-1: SerialNumber: syz [ 881.401313][ T5737] usb 6-1: config 0 descriptor?? [ 881.405801][ T5737] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 881.405820][ T5737] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 881.443345][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 881.494895][ T5719] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input43 [ 881.684125][ T5719] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 881.684138][ T5719] (id 0x00) [ 881.911013][T21154] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 881.911031][T21154] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 881.911161][T21154] vhci_hcd vhci_hcd.0: Device attached [ 881.917624][T21155] vhci_hcd: connection closed [ 881.944106][ T5719] rc_core: IR keymap rc-imon-pad not found [ 881.944117][ T5719] Registered IR keymap rc-empty [ 881.944151][ T5719] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 881.944161][ T5719] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 881.998220][ T4393] vhci_hcd vhci_hcd.1: stop threads [ 881.998238][ T4393] vhci_hcd vhci_hcd.1: release socket [ 881.998249][ T4393] vhci_hcd vhci_hcd.1: disconnect device [ 882.000575][ T5719] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 882.007725][ T5719] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input44 [ 882.847813][ T5737] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 883.063583][ T5719] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:71> initialized [ 883.082137][ T5719] usb 3-1: USB disconnect, device number 71 [ 883.269355][ T30] audit: type=1400 audit(1790552080.854:1363): avc: denied { cmd } for pid=21162 comm="iou-wrk-21164" path="socket:[83151]" dev="sockfs" ino=83151 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 883.363524][T21171] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 883.407472][ T5737] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 884.118517][ T5737] em28xx 6-1:0.0: board has no eeprom [ 884.576516][ T5737] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 884.576536][ T5737] em28xx 6-1:0.0: dvb set to bulk mode. [ 884.607116][ T10] em28xx 6-1:0.0: Binding DVB extension [ 885.079174][ T5737] usb 6-1: USB disconnect, device number 48 [ 885.095626][ T5737] em28xx 6-1:0.0: Disconnecting em28xx [ 885.227297][ T10] em28xx 6-1:0.0: Registering input extension [ 885.235948][ T5737] em28xx 6-1:0.0: Closing input extension [ 885.451663][ T5737] em28xx: Freeing device [ 885.454697][T21191] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 885.454711][T21191] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 885.454743][T21191] vhci_hcd vhci_hcd.0: Device attached [ 887.376075][T21192] vhci_hcd: connection closed [ 887.378200][ T211] vhci_hcd vhci_hcd.4: stop threads [ 887.378216][ T211] vhci_hcd vhci_hcd.4: release socket [ 887.378275][ T211] vhci_hcd vhci_hcd.4: disconnect device [ 887.970503][ T5737] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 888.472290][ T5737] usb 2-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 888.765279][ T5737] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 888.765300][ T5737] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 888.765319][ T5737] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.328671][ T5719] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 889.482143][ T5719] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 889.513095][ T5719] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.513112][ T5719] usb 5-1: Product: syz [ 889.513120][ T5719] usb 5-1: Manufacturer: syz [ 889.513129][ T5719] usb 5-1: SerialNumber: syz [ 889.515490][ T5719] usb 5-1: config 0 descriptor?? [ 889.536375][ T5737] hid-sensor-hub 0003:8086:0000.002A: hiddev0,hidraw0: USB HID v1.11 Device [HID 8086:0000] on usb-dummy_hcd.1-1/input0 [ 889.566507][ T5719] ch341 5-1:0.0: ch341-uart converter detected [ 889.752190][ T5719] usb 5-1: failed to receive control message: -32 [ 889.752219][ T5719] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32 [ 889.790233][T21239] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 889.814789][ T5737] usb 2-1: USB disconnect, device number 53 [ 889.875176][T21235] fido_id[21235]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 891.552340][T21260] kAFS: No cell specified [ 891.975007][T21281] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5239'. [ 892.077815][ T5737] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 892.130332][ T5719] usb 5-1: USB disconnect, device number 58 [ 892.131108][ T5719] ch341 5-1:0.0: device disconnected [ 892.228697][ T5737] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 892.229620][ T5737] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.233388][ T5737] usb 2-1: config 0 descriptor?? [ 892.690348][ T5737] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 892.691522][ T5737] [drm:udl_init] *ERROR* Selecting channel failed [ 892.889255][ T5737] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 892.889273][ T5737] [drm] Initialized udl on minor 1 [ 892.920013][ T5737] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 892.954988][ T5737] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 892.995911][ T5737] usb 2-1: USB disconnect, device number 54 [ 893.328709][T21314] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5251'. [ 894.962003][T19772] Bluetooth: Unknown LE signaling command 0x03 [ 894.962017][T19772] Bluetooth: Wrong link type (-22) [ 895.862586][T21346] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 896.264398][T19772] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 898.473168][T21387] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 898.917354][T19772] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 902.027596][ T30] audit: type=1400 audit(1790552099.604:1364): avc: denied { map } for pid=21462 comm="syz.4.5307" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 902.027625][ T30] audit: type=1400 audit(1790552099.604:1365): avc: denied { execute } for pid=21462 comm="syz.4.5307" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 902.587839][ T5703] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 902.743881][ T5703] usb 4-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 902.745204][ T5703] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 902.745223][ T5703] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 902.745241][ T5703] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.233993][ T5703] hid-sensor-hub 0003:8086:0000.002B: hiddev0,hidraw0: USB HID v1.11 Device [HID 8086:0000] on usb-dummy_hcd.3-1/input0 [ 903.498723][ T5703] usb 4-1: USB disconnect, device number 50 [ 903.818800][T21521] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5330'. [ 904.292691][T21530] kvm [21529]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010006) = 0x1 [ 904.725393][T21560] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5344'. [ 905.975314][T21604] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3223532450 (12894129800 ns) > initial count (12015864336 ns). Using initial count to start timer. [ 906.629888][T21637] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5374'. [ 907.317278][T21668] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5386'. [ 908.517870][ T5703] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 908.553220][T21680] IPVS: set_ctl: invalid protocol: 50 172.30.1.3:20002 [ 909.567808][ T5703] usb 6-1: device descriptor read/64, error -71 [ 909.809017][ T5703] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 909.948010][ T5703] usb 6-1: device descriptor read/64, error -71 [ 910.058105][ T5703] usb usb6-port1: attempt power cycle [ 911.445404][T21737] FAULT_INJECTION: forcing a failure. [ 911.445404][T21737] name failslab, interval 1, probability 0, space 0, times 0 [ 911.445425][T21737] CPU: 0 UID: 0 PID: 21737 Comm: syz.5.5411 Tainted: G L syzkaller #0 PREEMPT(full) [ 911.445440][T21737] Tainted: [L]=SOFTLOCKUP [ 911.445445][T21737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 911.445451][T21737] Call Trace: [ 911.445456][T21737] [ 911.445461][T21737] dump_stack_lvl+0x100/0x190 [ 911.445483][T21737] should_fail_ex.cold+0x5/0xa [ 911.445500][T21737] should_failslab+0xc2/0x120 [ 911.445518][T21737] __kmalloc_cache_noprof+0x91/0x6d0 [ 911.445533][T21737] ? call_usermodehelper_setup+0xaf/0x360 [ 911.445547][T21737] ? __pfx_free_modprobe_argv+0x10/0x10 [ 911.445564][T21737] call_usermodehelper_setup+0xaf/0x360 [ 911.445584][T21737] __request_module+0x3c7/0x6a0 [ 911.445600][T21737] ? __pfx___request_module+0x10/0x10 [ 911.445622][T21737] ? find_nfs_version+0x21/0x1a0 [ 911.445640][T21737] ? find_held_lock+0x2b/0x80 [ 911.445658][T21737] ? find_nfs_version+0x62/0x1a0 [ 911.445675][T21737] ? find_nfs_version+0x62/0x1a0 [ 911.445695][T21737] find_nfs_version+0xd3/0x1a0 [ 911.445713][T21737] nfs_get_tree+0xdfe/0x1450 [ 911.445726][T21737] vfs_get_tree+0x92/0x320 [ 911.445737][T21737] vfs_cmd_create+0xd7/0x2a0 [ 911.445751][T21737] __do_sys_fsconfig+0x55a/0xcb0 [ 911.445765][T21737] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 911.445784][T21737] do_syscall_64+0x123/0x790 [ 911.445797][T21737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.445809][T21737] RIP: 0033:0x7fad6119e159 [ 911.445818][T21737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 911.445829][T21737] RSP: 002b:00007fad6213c028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 911.445841][T21737] RAX: ffffffffffffffda RBX: 00007fad61425fa0 RCX: 00007fad6119e159 [ 911.445848][T21737] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 911.445854][T21737] RBP: 00007fad6123506b R08: 0000000000000000 R09: 0000000000000000 [ 911.445861][T21737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 911.445867][T21737] R13: 00007fad61426038 R14: 00007fad61425fa0 R15: 00007ffc0f25f658 [ 911.445882][T21737] [ 912.060165][T21756] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 916.019754][T21794] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3223532450 (12894129800 ns) > initial count (12015864336 ns). Using initial count to start timer. [ 919.898289][ T5703] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 920.522254][ T5703] usb 4-1: unable to get BOS descriptor or descriptor too short [ 920.522282][ T5703] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 920.527099][ T5703] usb 4-1: config 1 interface 0 altsetting 16 bulk endpoint 0x1 has invalid maxpacket 8 [ 920.527120][ T5703] usb 4-1: config 1 interface 0 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 1023 [ 920.527134][ T5703] usb 4-1: config 1 interface 0 has no altsetting 0 [ 920.576843][ T5703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.576859][ T5703] usb 4-1: Product: syz [ 920.576867][ T5703] usb 4-1: Manufacturer: syz [ 920.576875][ T5703] usb 4-1: SerialNumber: syz [ 920.602551][T21823] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 920.602619][T21823] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 922.177604][ T5703] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 51 if 0 alt 16 proto 3 vid 0x0525 pid 0xA4A8 [ 922.198853][ T5703] usb 4-1: USB disconnect, device number 51 [ 922.204182][ T5703] usblp0: removed [ 923.308874][T21850] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 923.308891][T21850] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 923.309245][T21850] vhci_hcd vhci_hcd.0: Device attached [ 923.350566][T21851] vhci_hcd: connection closed [ 923.351669][ T97] vhci_hcd vhci_hcd.1: stop threads [ 923.351687][ T97] vhci_hcd vhci_hcd.1: release socket [ 923.351698][ T97] vhci_hcd vhci_hcd.1: disconnect device [ 926.009794][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 926.009824][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 927.225507][T21882] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 934.778888][ T30] audit: type=1400 audit(1790552132.364:1366): avc: denied { write } for pid=21972 comm="syz.5.5494" name="functions" dev="configfs" ino=44916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 934.816874][ T30] audit: type=1400 audit(1790552132.394:1367): avc: denied { write } for pid=21972 comm="syz.5.5494" name="target" dev="configfs" ino=823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 934.841674][ T30] audit: type=1400 audit(1790552132.434:1368): avc: denied { write } for pid=21972 comm="syz.5.5494" name="usb_gadget" dev="configfs" ino=90166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 934.965671][T21974] F2FS-fs: Conflicting test_dummy_encryption options [ 937.461379][ T30] audit: type=1400 audit(1790552135.044:1369): avc: denied { write } for pid=22010 comm="syz.1.5508" name="naa.6001405c935d7912" dev="configfs" ino=90168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 937.779688][T22020] binder: 22018:22020 ioctl c0306201 0 returned -14 [ 938.972372][ T52] Bluetooth: hci2: command 0x0401 tx timeout [ 940.533545][T14544] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 940.701064][T14544] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 940.701090][T14544] usb 6-1: no configurations [ 940.701097][T14544] usb 6-1: can't read configurations, error -22 [ 940.800663][T22051] kAFS: No cell specified [ 940.828029][T14544] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 940.978481][T14544] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 940.978508][T14544] usb 6-1: no configurations [ 940.978515][T14544] usb 6-1: can't read configurations, error -22 [ 940.978729][T14544] usb usb6-port1: attempt power cycle [ 941.404983][T14544] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 941.467180][T14544] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 941.467205][T14544] usb 6-1: no configurations [ 941.467213][T14544] usb 6-1: can't read configurations, error -22 [ 941.757856][T14544] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 941.942082][T14544] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 941.942106][T14544] usb 6-1: no configurations [ 941.942117][T14544] usb 6-1: can't read configurations, error -22 [ 942.026990][T14544] usb usb6-port1: unable to enumerate USB device [ 942.409769][T22073] binder: 22072:22073 ioctl c0306201 0 returned -14 [ 947.555713][T22108] binder: 22107:22108 ioctl c0306201 0 returned -14 [ 949.958810][T22125] F2FS-fs: Conflicting test_dummy_encryption options [ 953.050610][T22153] binder: 22152:22153 ioctl c0306201 0 returned -14 [ 960.389356][ T30] audit: type=1400 audit(1790552157.094:1370): avc: denied { recv } for pid=22180 comm="syz.1.5568" saddr=10.128.0.169 src=41852 daddr=10.128.0.158 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 961.414418][T22187] binder: 22183:22187 ioctl c0306201 0 returned -14 [ 963.994719][T22204] Bluetooth: ISO socket layer initialized [ 963.997587][ T52] Bluetooth: hci0: unexpected event for opcode 0x2003 [ 964.250729][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 965.337929][ T5703] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 965.491552][ T5703] usb 5-1: unable to get BOS descriptor or descriptor too short [ 965.491579][ T5703] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 965.492395][ T5703] usb 5-1: config 1 interface 0 altsetting 16 bulk endpoint 0x1 has invalid maxpacket 8 [ 965.492412][ T5703] usb 5-1: config 1 interface 0 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 1023 [ 965.492426][ T5703] usb 5-1: config 1 interface 0 has no altsetting 0 [ 965.546597][ T5703] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.546614][ T5703] usb 5-1: Product: syz [ 965.546623][ T5703] usb 5-1: Manufacturer: syz [ 965.546631][ T5703] usb 5-1: SerialNumber: syz [ 965.578952][T22213] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 965.579021][T22213] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 965.759107][T22225] binder: 22223:22225 ioctl c0306201 0 returned -14 [ 967.124153][ T5703] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 59 if 0 alt 16 proto 3 vid 0x0525 pid 0xA4A8 [ 967.148646][ T5703] usb 5-1: USB disconnect, device number 59 [ 967.177064][ T5703] usblp0: removed [ 968.849680][T22258] binder: 22257:22258 ioctl c0306201 0 returned -14 [ 970.788610][ T5737] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 970.940156][ T5737] usb 3-1: unable to get BOS descriptor or descriptor too short [ 970.940183][ T5737] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 970.941515][ T5737] usb 3-1: config 1 interface 0 altsetting 16 bulk endpoint 0x1 has invalid maxpacket 8 [ 970.941532][ T5737] usb 3-1: config 1 interface 0 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 1023 [ 970.941545][ T5737] usb 3-1: config 1 interface 0 has no altsetting 0 [ 970.943083][ T5737] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.943098][ T5737] usb 3-1: Product: syz [ 970.943107][ T5737] usb 3-1: Manufacturer: syz [ 970.943115][ T5737] usb 3-1: SerialNumber: syz [ 970.977757][T22274] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 970.977825][T22274] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 972.102039][ T5737] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 72 if 0 alt 16 proto 3 vid 0x0525 pid 0xA4A8 [ 972.124417][ T5737] usb 3-1: USB disconnect, device number 72 [ 972.147485][ T5737] usblp0: removed [ 972.199971][T22293] binder: 22292:22293 ioctl c0306201 0 returned -14 [ 974.514661][T22316] binder: 22314:22316 ioctl c0306201 0 returned -14 [ 975.116888][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 976.478309][ T5703] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 976.607944][ T5703] usb 5-1: device descriptor read/64, error -71 [ 977.611944][ T5703] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 977.756823][ T5703] usb 5-1: device descriptor read/64, error -71 [ 977.858067][ T5703] usb usb5-port1: attempt power cycle [ 978.227904][ T5703] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 978.249016][ T5703] usb 5-1: device descriptor read/8, error -71 [ 978.480826][T22347] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5619'. [ 978.480844][T22347] nbd: must specify at least one socket [ 978.504596][ T5703] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 978.528236][ T5703] usb 5-1: device descriptor read/8, error -71 [ 978.638072][ T5703] usb usb5-port1: unable to enumerate USB device [ 980.451135][T22383] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5637'. [ 980.451154][T22383] nbd: must specify at least one socket [ 981.049468][ T10] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 981.335033][ T10] usb 6-1: device descriptor read/64, error -71 [ 981.604992][ T10] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 981.832612][ T10] usb 6-1: device descriptor read/64, error -71 [ 981.944838][ T10] usb usb6-port1: attempt power cycle [ 982.367786][ T10] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 982.390261][ T10] usb 6-1: device descriptor read/8, error -71 [ 982.629328][ T10] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 982.650575][ T10] usb 6-1: device descriptor read/8, error -71 [ 982.754340][T19772] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 982.766082][ T10] usb usb6-port1: unable to enumerate USB device [ 982.795051][T22417] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5653'. [ 982.795068][T22417] nbd: must specify at least one socket [ 984.758350][T19772] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 986.747499][T22455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5666'. [ 986.747516][T22455] nbd: must specify at least one socket [ 987.699987][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 987.700019][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 988.827844][T22466] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5671'. [ 988.828927][T22466] batadv_slave_0: Caught tx_queue_len zero misconfig [ 989.062913][T22475] binder: 22473:22475 ioctl c0306201 0 returned -14 [ 989.859483][ T5703] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 990.194349][ T5703] usb 3-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 990.290507][ T5703] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 990.290525][ T5703] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 990.290544][ T5703] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.017102][T22496] F2FS-fs: Conflicting test_dummy_encryption options [ 993.100144][ T5719] usb 3-1: USB disconnect, device number 73 [ 993.622615][T22511] binder: 22510:22511 ioctl c0306201 0 returned -14 [ 996.912017][ T5719] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 997.060086][ T5719] usb 3-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 997.060943][ T5719] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 997.060957][ T5719] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 997.060975][ T5719] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.985676][T22540] F2FS-fs: Conflicting test_dummy_encryption options [ 1000.197201][ T10] usb 3-1: USB disconnect, device number 74 [ 1000.350344][ T4306] IPVS: starting estimator thread 0... [ 1000.437778][T22571] IPVS: using max 76 ests per chain, 182400 per kthread [ 1001.567843][ T10] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1001.751343][ T10] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1001.757652][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.757670][ T10] usb 2-1: Product: syz [ 1001.757678][ T10] usb 2-1: Manufacturer: syz [ 1001.757773][ T10] usb 2-1: SerialNumber: syz [ 1002.019797][ T30] audit: type=1400 audit(1790552199.584:1371): avc: denied { firmware_load } for pid=10 comm="kworker/0:1" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1002.095500][ T10] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1003.129258][ T10] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1003.129491][ T10] ath9k_htc: Failed to initialize the device [ 1003.331346][ T10] usb 2-1: ath9k_htc: USB layer deinitialized [ 1003.506561][ T5737] usb 2-1: USB disconnect, device number 55 [ 1004.990334][ T5737] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1005.171890][ T5737] usb 2-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 1005.174245][ T5737] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1005.174260][ T5737] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1005.174278][ T5737] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.307803][ T10] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1005.459257][ T10] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 1005.460000][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1005.460023][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1005.460036][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1005.460049][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 1005.460062][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 1005.460075][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 1005.460087][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 1005.460100][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 1005.460112][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 1005.460124][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1005.460138][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1005.460150][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 1005.460163][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1005.460174][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1005.460186][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 1005.463022][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.463035][ T10] usb 3-1: Product: syz [ 1005.463044][ T10] usb 3-1: Manufacturer: syz [ 1005.463052][ T10] usb 3-1: SerialNumber: syz [ 1005.465001][T22611] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1005.465051][T22611] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1005.465110][T22611] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1005.465157][T22611] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1005.465209][T22611] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1005.465269][T22611] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1005.465315][T22611] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1005.465360][T22611] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1005.465418][T22611] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1005.465462][T22611] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1005.465833][T22611] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1005.546461][ T10] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 1005.568627][ T5737] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1005.634799][ T10] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 7 [ 1005.788702][ T10] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1005.789498][ T10] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 1005.816257][ T5737] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1005.826829][ T10] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1005.838136][ T5737] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1005.840230][ T5737] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.840244][ T5737] usb 5-1: Product: syz [ 1005.840253][ T5737] usb 5-1: Manufacturer: syz [ 1005.840261][ T5737] usb 5-1: SerialNumber: syz [ 1005.841490][ T5737] usb 5-1: config 0 descriptor?? [ 1006.293841][ T5737] usb 3-1: USB disconnect, device number 75 [ 1006.321485][ T5737] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1006.365214][ T5737] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1006.379322][ T5737] keyspan 3-1:1.0: device disconnected [ 1006.919752][T22625] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5722'. [ 1006.919780][T22625] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5722'. [ 1007.120232][ T5737] usb 2-1: USB disconnect, device number 56 [ 1008.690235][ T5737] usb 5-1: USB disconnect, device number 64 [ 1009.945008][ T5737] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 1010.108510][ T5737] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1010.109562][ T5737] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1010.109579][ T5737] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1010.109595][ T5737] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.111010][ T5737] usb 4-1: config 0 descriptor?? [ 1010.165922][ T5737] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1010.276802][ T30] audit: type=1400 audit(1790552207.854:1372): avc: denied { open } for pid=22656 comm="syz.2.5734" path="/dev/ptyq8" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1011.147436][ T5737] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1011.300284][ T5737] usb 5-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 1011.301491][ T5737] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.301514][ T5737] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1011.301535][ T5737] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.304429][ T5737] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 1011.376251][T22667] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5737'. [ 1011.376278][T22667] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5737'. [ 1011.937821][ T5719] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1012.099211][ T5737] usb 4-1: USB disconnect, device number 52 [ 1013.078547][ T29] rcu_tasks_wait_gp: rcu_tasks grace period number 9 (since boot) is 1110 jiffies old. [ 1013.105377][ T5719] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1013.105409][ T5719] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1013.108895][ T5719] usb 2-1: config 1 interface 0 altsetting 16 bulk endpoint 0x1 has invalid maxpacket 8 [ 1013.108913][ T5719] usb 2-1: config 1 interface 0 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 1023 [ 1013.108926][ T5719] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1014.119925][ T5719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.119942][ T5719] usb 2-1: Product: syz [ 1014.119951][ T5719] usb 2-1: Manufacturer: syz [ 1014.119959][ T5719] usb 2-1: SerialNumber: syz [ 1014.121632][T22673] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1014.121680][T22673] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1015.275103][ T5719] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 57 if 0 alt 16 proto 3 vid 0x0525 pid 0xA4A8 [ 1015.297253][ T5719] usb 2-1: USB disconnect, device number 57 [ 1015.322121][ T5719] usblp0: removed [ 1015.326416][ T5737] usb 5-1: USB disconnect, device number 65 [ 1016.204683][T22682] F2FS-fs: Conflicting test_dummy_encryption options [ 1016.428008][ T10] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1016.445167][T22697] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5748'. [ 1016.647898][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1016.648332][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1016.649024][ T10] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1016.649042][ T10] usb 3-1: config 0 has no interface number 0 [ 1016.651124][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.651137][ T10] usb 3-1: Product: syz [ 1016.651146][ T10] usb 3-1: Manufacturer: syz [ 1016.651155][ T10] usb 3-1: SerialNumber: syz [ 1016.653713][ T10] usb 3-1: config 0 descriptor?? [ 1018.658075][T19772] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 1018.694230][T22711] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5751'. [ 1018.868631][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 1018.868651][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1019.074107][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1019.074221][ T10] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 1019.102891][ T10] usb 3-1: USB disconnect, device number 76 [ 1019.250700][T22719] atomic_op ffff888033aae1e0 conn xmit_atomic 0000000000000000 [ 1019.263080][ T30] audit: type=1400 audit(1790552216.834:1373): avc: denied { bind } for pid=22713 comm="syz.4.5755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1019.263111][ T30] audit: type=1400 audit(1790552216.834:1374): avc: denied { write } for pid=22713 comm="syz.4.5755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1019.263131][ T30] audit: type=1400 audit(1790552216.834:1375): avc: denied { setopt } for pid=22713 comm="syz.4.5755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1021.501633][T22730] F2FS-fs: Conflicting test_dummy_encryption options [ 1022.409548][T22738] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 1022.688172][T22718] can0: slcan on ptm0. [ 1022.690078][T22746] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1022.690093][T22746] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1022.691647][T22746] vhci_hcd vhci_hcd.0: Device attached [ 1022.732103][T22749] vhci_hcd: connection closed [ 1022.732257][ T4428] vhci_hcd vhci_hcd.2: stop threads [ 1022.732273][ T4428] vhci_hcd vhci_hcd.2: release socket [ 1022.732283][ T4428] vhci_hcd vhci_hcd.2: disconnect device [ 1022.928737][T14544] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1023.077790][T14544] usb 5-1: Using ep0 maxpacket: 32 [ 1023.078192][T14544] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1023.080474][T14544] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1023.080489][T14544] usb 5-1: config 0 has no interface number 0 [ 1023.084292][T14544] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.084306][T14544] usb 5-1: Product: syz [ 1023.084315][T14544] usb 5-1: Manufacturer: syz [ 1023.084323][T14544] usb 5-1: SerialNumber: syz [ 1023.086195][T14544] usb 5-1: config 0 descriptor?? [ 1023.395147][T22723] can0 (unregistered): slcan off ptm0. [ 1024.064971][T22766] IPVS: set_ctl: invalid protocol: 50 172.30.1.3:20002 [ 1024.983502][T14544] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 1024.983523][T14544] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1025.220975][T14544] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1025.221086][T14544] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 1025.454526][T14544] usb 5-1: USB disconnect, device number 66 [ 1026.112720][T22774] F2FS-fs: Conflicting test_dummy_encryption options [ 1028.148428][T14544] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1028.253189][T20398] kernel read not supported for file /kmsg (pid: 20398 comm: kworker/0:8) [ 1028.299460][T14544] usb 5-1: Using ep0 maxpacket: 32 [ 1028.307033][T14544] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1028.319873][T14544] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1028.319888][T14544] usb 5-1: config 0 has no interface number 0 [ 1028.340380][T14544] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.340395][T14544] usb 5-1: Product: syz [ 1028.340403][T14544] usb 5-1: Manufacturer: syz [ 1028.340412][T14544] usb 5-1: SerialNumber: syz [ 1028.342479][T14544] usb 5-1: config 0 descriptor?? [ 1029.547549][T22822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5786'. [ 1029.929334][T14544] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 1029.929354][T14544] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1030.153754][T14544] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1030.153872][T14544] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 1030.184080][T14544] usb 5-1: USB disconnect, device number 67 [ 1033.373471][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 1033.550801][ T52] Bluetooth: hci0: Malformed LE Event: 0x0d [ 1034.836754][T22860] F2FS-fs: Conflicting test_dummy_encryption options [ 1039.608608][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 1039.871028][T19772] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1042.571054][T19772] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 1044.014810][T19772] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1044.809258][T22960] FAULT_INJECTION: forcing a failure. [ 1044.809258][T22960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1044.809280][T22960] CPU: 0 UID: 0 PID: 22960 Comm: syz.3.5828 Tainted: G L syzkaller #0 PREEMPT(full) [ 1044.809296][T22960] Tainted: [L]=SOFTLOCKUP [ 1044.809300][T22960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1044.809306][T22960] Call Trace: [ 1044.809311][T22960] [ 1044.809315][T22960] dump_stack_lvl+0x100/0x190 [ 1044.809338][T22960] should_fail_ex.cold+0x5/0xa [ 1044.809356][T22960] strncpy_from_user+0x3b/0x2d0 [ 1044.809373][T22960] path_setxattrat+0x127/0x3b0 [ 1044.809392][T22960] ? __pfx_path_setxattrat+0x10/0x10 [ 1044.809410][T22960] ? ksys_write+0x190/0x250 [ 1044.809424][T22960] ? ksys_write+0x190/0x250 [ 1044.809449][T22960] ? xfd_validate_state+0x129/0x190 [ 1044.809465][T22960] __x64_sys_setxattr+0xc6/0x140 [ 1044.809481][T22960] ? do_syscall_64+0xae/0x790 [ 1044.809494][T22960] ? lockdep_hardirqs_on+0x7d/0x110 [ 1044.809504][T22960] do_syscall_64+0x123/0x790 [ 1044.809516][T22960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.809528][T22960] RIP: 0033:0x7f3496d9e159 [ 1044.809538][T22960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1044.809548][T22960] RSP: 002b:00007f3497b7f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 1044.809560][T22960] RAX: ffffffffffffffda RBX: 00007f3497025fa0 RCX: 00007f3496d9e159 [ 1044.809567][T22960] RDX: 0000200000000180 RSI: 00002000000000c0 RDI: 0000000000000000 [ 1044.809580][T22960] RBP: 00007f3496e3506b R08: 0000000000000002 R09: 0000000000000000 [ 1044.809588][T22960] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1044.809595][T22960] R13: 00007f3497026038 R14: 00007f3497025fa0 R15: 00007ffedd5f44e8 [ 1044.809610][T22960] [ 1046.359579][ T30] audit: type=1400 audit(1790552243.944:1376): avc: denied { append } for pid=22977 comm="syz.4.5835" name="dvr0" dev="devtmpfs" ino=927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1047.595626][T19772] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 1049.261265][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1049.261295][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1050.097877][T23005] FAULT_INJECTION: forcing a failure. [ 1050.097877][T23005] name failslab, interval 1, probability 0, space 0, times 0 [ 1050.097900][T23005] CPU: 0 UID: 0 PID: 23005 Comm: syz.1.5843 Tainted: G L syzkaller #0 PREEMPT(full) [ 1050.097915][T23005] Tainted: [L]=SOFTLOCKUP [ 1050.097920][T23005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1050.097926][T23005] Call Trace: [ 1050.097930][T23005] [ 1050.097935][T23005] dump_stack_lvl+0x100/0x190 [ 1050.097957][T23005] should_fail_ex.cold+0x5/0xa [ 1050.097979][T23005] should_failslab+0xc2/0x120 [ 1050.097995][T23005] __kvmalloc_node_noprof+0x113/0x9b0 [ 1050.098011][T23005] ? vmemdup_user+0x2a/0xe0 [ 1050.098025][T23005] vmemdup_user+0x2a/0xe0 [ 1050.098042][T23005] path_setxattrat+0x29e/0x3b0 [ 1050.098060][T23005] ? __pfx_path_setxattrat+0x10/0x10 [ 1050.098080][T23005] ? ksys_write+0x190/0x250 [ 1050.098093][T23005] ? ksys_write+0x190/0x250 [ 1050.098118][T23005] ? xfd_validate_state+0x129/0x190 [ 1050.098136][T23005] __x64_sys_setxattr+0xc6/0x140 [ 1050.098153][T23005] ? do_syscall_64+0xae/0x790 [ 1050.098165][T23005] ? lockdep_hardirqs_on+0x7d/0x110 [ 1050.098176][T23005] do_syscall_64+0x123/0x790 [ 1050.098188][T23005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.098200][T23005] RIP: 0033:0x7ff18d19e159 [ 1050.098210][T23005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1050.098221][T23005] RSP: 002b:00007ff18e09c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 1050.098232][T23005] RAX: ffffffffffffffda RBX: 00007ff18d425fa0 RCX: 00007ff18d19e159 [ 1050.098240][T23005] RDX: 0000200000000180 RSI: 00002000000000c0 RDI: 0000000000000000 [ 1050.098247][T23005] RBP: 00007ff18d23506b R08: 0000000000000002 R09: 0000000000000000 [ 1050.098253][T23005] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1050.098260][T23005] R13: 00007ff18d426038 R14: 00007ff18d425fa0 R15: 00007fffb14054e8 [ 1050.098274][T23005] [ 1053.615987][T23023] F2FS-fs: Conflicting test_dummy_encryption options [ 1058.427224][T23037] kAFS: bad VL server IP address [ 1058.529840][T23040] FAULT_INJECTION: forcing a failure. [ 1058.529840][T23040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1058.529862][T23040] CPU: 0 UID: 0 PID: 23040 Comm: syz.1.5857 Tainted: G L syzkaller #0 PREEMPT(full) [ 1058.529878][T23040] Tainted: [L]=SOFTLOCKUP [ 1058.529882][T23040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1058.529889][T23040] Call Trace: [ 1058.529893][T23040] [ 1058.529898][T23040] dump_stack_lvl+0x100/0x190 [ 1058.529918][T23040] should_fail_ex.cold+0x5/0xa [ 1058.529934][T23040] strncpy_from_user+0x3b/0x2d0 [ 1058.529953][T23040] path_setxattrat+0x127/0x3b0 [ 1058.529971][T23040] ? __pfx_path_setxattrat+0x10/0x10 [ 1058.529989][T23040] ? ksys_write+0x190/0x250 [ 1058.530002][T23040] ? ksys_write+0x190/0x250 [ 1058.530025][T23040] ? xfd_validate_state+0x129/0x190 [ 1058.530042][T23040] __x64_sys_setxattr+0xc6/0x140 [ 1058.530058][T23040] ? do_syscall_64+0xae/0x790 [ 1058.530070][T23040] ? lockdep_hardirqs_on+0x7d/0x110 [ 1058.530081][T23040] do_syscall_64+0x123/0x790 [ 1058.530093][T23040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.530105][T23040] RIP: 0033:0x7ff18d19e159 [ 1058.530114][T23040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1058.530124][T23040] RSP: 002b:00007ff18e09c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 1058.530136][T23040] RAX: ffffffffffffffda RBX: 00007ff18d425fa0 RCX: 00007ff18d19e159 [ 1058.530143][T23040] RDX: 0000200000000180 RSI: 00002000000000c0 RDI: 0000000000000000 [ 1058.530150][T23040] RBP: 00007ff18d23506b R08: 0000000000000002 R09: 0000000000000000 [ 1058.530157][T23040] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1058.530163][T23040] R13: 00007ff18d426038 R14: 00007ff18d425fa0 R15: 00007fffb14054e8 [ 1058.530177][T23040] [ 1060.278964][T23050] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 1066.778802][ T5737] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1066.939275][ T5737] usb 2-1: Using ep0 maxpacket: 32 [ 1066.954463][ T5737] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1066.976023][ T5737] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1066.976042][ T5737] usb 2-1: config 0 has no interface number 0 [ 1066.997009][ T5737] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.997026][ T5737] usb 2-1: Product: syz [ 1066.997034][ T5737] usb 2-1: Manufacturer: syz [ 1066.997043][ T5737] usb 2-1: SerialNumber: syz [ 1067.027763][ T5737] usb 2-1: config 0 descriptor?? [ 1068.026560][T19772] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 1068.752873][ T5737] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 1068.752925][ T5737] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1069.871891][ T5737] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1069.872005][ T5737] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 1069.909080][ T5737] usb 2-1: USB disconnect, device number 58 [ 1076.676563][T23117] F2FS-fs: Conflicting test_dummy_encryption options [ 1077.890971][T23134] can0: slcan on ptm0. [ 1079.886220][T23134] can0 (unregistered): slcan off ptm0. [ 1079.973227][ T30] audit: type=1400 audit(1790552277.554:1377): avc: denied { read } for pid=23149 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1079.974094][ T30] audit: type=1400 audit(1790552277.554:1378): avc: denied { read open } for pid=23149 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1080.890620][ T30] audit: type=1400 audit(1790552278.474:1379): avc: denied { write } for pid=23144 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1081.234737][ T30] audit: type=1400 audit(1790552278.814:1380): avc: denied { write } for pid=23169 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1082.647989][T23175] F2FS-fs: Conflicting test_dummy_encryption options [ 1083.386043][T23197] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 1083.399101][ T5737] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1083.577757][ T5737] usb 2-1: Using ep0 maxpacket: 32 [ 1083.581022][ T5737] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1083.583115][ T5737] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1083.583130][ T5737] usb 2-1: config 0 has no interface number 0 [ 1083.586160][ T5737] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.586174][ T5737] usb 2-1: Product: syz [ 1083.586183][ T5737] usb 2-1: Manufacturer: syz [ 1083.586192][ T5737] usb 2-1: SerialNumber: syz [ 1083.587448][ T5737] usb 2-1: config 0 descriptor?? [ 1083.950275][ T30] audit: type=1400 audit(1790552281.534:1381): avc: denied { write } for pid=23186 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1083.981947][T14544] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1084.129074][T14544] usb 6-1: Using ep0 maxpacket: 16 [ 1084.130366][T14544] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1084.152044][T14544] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1084.158357][T14544] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.158374][T14544] usb 6-1: Product: syz [ 1084.158383][T14544] usb 6-1: Manufacturer: syz [ 1084.158391][T14544] usb 6-1: SerialNumber: syz [ 1084.169646][T14544] usb 6-1: config 0 descriptor?? [ 1084.208310][T14544] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1084.208331][T14544] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 1084.261558][ T30] audit: type=1400 audit(1790552281.844:1382): avc: denied { write } for pid=23222 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1084.573792][ T4428] IPVS: starting estimator thread 0... [ 1084.647270][ T5737] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 1084.647291][ T5737] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1084.660521][T23229] IPVS: using max 75 ests per chain, 180000 per kthread [ 1084.826997][T14544] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1084.838045][ T5719] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1084.881007][ T5737] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1084.881141][ T5737] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 1084.914410][ T5737] usb 2-1: USB disconnect, device number 59 [ 1085.122181][ T5719] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1085.139937][ T5719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.139953][ T5719] usb 3-1: Product: syz [ 1085.139962][ T5719] usb 3-1: Manufacturer: syz [ 1085.139979][ T5719] usb 3-1: SerialNumber: syz [ 1085.198452][ T10] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1085.352328][T14544] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1085.352350][T14544] em28xx 6-1:0.0: board has no eeprom [ 1085.393743][T23236] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 1085.393743][T23236] [ 1085.393930][T23236] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 1085.393966][T23236] CIFS: Attempting to mount //127.0.0.1/share [ 1085.675822][T14544] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1085.675841][T14544] em28xx 6-1:0.0: dvb set to bulk mode. [ 1086.259182][ T10] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1113.838300][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1113.847374][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1133.995822][ C0] sched: DL replenish lagged too much [ 1190.917889][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1190.924851][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P23227/1:b..l [ 1190.932811][ C0] rcu: (detected by 0, t=10502 jiffies, g=157089, q=570 ncpus=1) [ 1190.940580][ C0] task:syz.2.5899 state:R running task stack:27128 pid:23227 tgid:23227 ppid:14435 task_flags:0x400040 flags:0x00080000 [ 1190.954017][ C0] Call Trace: [ 1190.957278][ C0] [ 1190.960184][ C0] __schedule+0x1259/0x6920 [ 1190.964668][ C0] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 1190.970541][ C0] ? rcu_is_watching+0x13/0xc0 [ 1190.975287][ C0] ? trace_sched_exit_tp+0x120/0x160 [ 1190.980546][ C0] ? __schedule+0x126b/0x6920 [ 1190.985197][ C0] ? try_to_wake_up+0xd8d/0x1c90 [ 1190.990107][ C0] ? __pfx___schedule+0x10/0x10 [ 1190.994932][ C0] ? mark_held_locks+0x40/0x70 [ 1190.999668][ C0] preempt_schedule_irq+0x4e/0x90 [ 1191.004677][ C0] irqentry_exit+0x205/0xa10 [ 1191.009239][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1191.015197][ C0] RIP: 0010:lock_acquire+0x5e/0x380 [ 1191.020366][ C0] Code: 05 cf 9b a5 12 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 de e5 5d 0f 0f 82 c9 02 00 00 8b 35 7e 17 5e 0f 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 6d 9b a5 12 0f 85 09 03 00 00 48 83 c4 [ 1191.039958][ C0] RSP: 0018:ffffc900025676a8 EFLAGS: 00000206 [ 1191.046020][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000200 [ 1191.053971][ C0] RDX: 0000000000000000 RSI: ffffffff8e3684a0 RDI: ffffffff8c623980 [ 1191.061929][ C0] RBP: ffffffff8edec5a0 R08: 00000000ff4cdab7 R09: 0000000000000007 [ 1191.069871][ C0] R10: 0000000000000200 R11: 0000000000000001 R12: 0000000000000002 [ 1191.077810][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1191.085762][ C0] ? unwind_next_frame+0x3be/0x2090 [ 1191.090938][ C0] ? unwind_next_frame+0x3be/0x2090 [ 1191.096109][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1191.102235][ C0] unwind_next_frame+0xd1/0x2090 [ 1191.107155][ C0] ? unwind_next_frame+0xbd/0x2090 [ 1191.112250][ C0] ? __reset_page_owner+0x84/0x190 [ 1191.117338][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1191.123461][ C0] arch_stack_walk+0x94/0xf0 [ 1191.128033][ C0] ? __reset_page_owner+0x84/0x190 [ 1191.133120][ C0] stack_trace_save+0x8e/0xc0 [ 1191.137777][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1191.143120][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 1191.148040][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 1191.152947][ C0] save_stack+0x162/0x1e0 [ 1191.157251][ C0] ? __pfx_save_stack+0x10/0x10 [ 1191.162078][ C0] ? page_ext_put+0x3e/0xd0 [ 1191.166589][ C0] __reset_page_owner+0x84/0x190 [ 1191.171536][ C0] __free_frozen_pages+0x79f/0x10f0 [ 1191.176725][ C0] ? __free_slab+0x80/0x220 [ 1191.181223][ C0] qlist_free_all+0x47/0xf0 [ 1191.185703][ C0] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1191.191138][ C0] __kasan_slab_alloc+0x69/0x90 [ 1191.195963][ C0] __kmalloc_noprof+0x2cc/0x840 [ 1191.200786][ C0] ? kobject_get_path+0xcf/0x2c0 [ 1191.205718][ C0] kobject_get_path+0xcf/0x2c0 [ 1191.210467][ C0] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 1191.216173][ C0] kobject_uevent_env+0x287/0x18b0 [ 1191.221271][ C0] ? gadget_unbind_driver+0x371/0x4f0 [ 1191.226632][ C0] ? __pfx_dummy_udc_async_callbacks+0x10/0x10 [ 1191.232770][ C0] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 1191.238468][ C0] device_remove+0xcb/0x180 [ 1191.242966][ C0] device_release_driver_internal+0x44e/0x620 [ 1191.249011][ C0] driver_detach+0xd8/0x1b0 [ 1191.253496][ C0] bus_remove_driver+0x13b/0x2e0 [ 1191.258417][ C0] driver_unregister+0x76/0xb0 [ 1191.263165][ C0] usb_gadget_unregister_driver+0x49/0x70 [ 1191.268857][ C0] raw_release+0x19b/0x260 [ 1191.273255][ C0] ? __pfx_raw_release+0x10/0x10 [ 1191.278161][ C0] __fput+0x3ff/0xb50 [ 1191.282122][ C0] task_work_run+0x150/0x240 [ 1191.286689][ C0] ? __pfx_task_work_run+0x10/0x10 [ 1191.291777][ C0] exit_to_user_mode_loop+0x1d8/0x700 [ 1191.297121][ C0] ? rcu_is_watching+0x13/0xc0 [ 1191.301859][ C0] do_syscall_64+0x661/0x790 [ 1191.306421][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1191.312285][ C0] RIP: 0033:0x7f0e0179e159 [ 1191.316671][ C0] RSP: 002b:00007ffec4723158 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1191.325050][ C0] RAX: 0000000000000000 RBX: 00007ffec4723240 RCX: 00007f0e0179e159 [ 1191.332989][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1191.340931][ C0] RBP: 0000000000108c5a R08: 0000000000000001 R09: 0000000000000000 [ 1191.348880][ C0] R10: 0000001b31b20000 R11: 0000000000000246 R12: 00007ffec4723280 [ 1191.356850][ C0] R13: 00007f0e01a25fac R14: 000000000010900e R15: 00007f0e01a25fa0 [ 1191.364829][ C0] [ 1191.367823][ C0] rcu: rcu_preempt kthread starved for 2493 jiffies! g157089 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 1191.378816][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1191.388751][ C0] rcu: RCU grace-period kthread stack dump: [ 1191.394605][ C0] task:rcu_preempt state:R running task stack:28904 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1191.408053][ C0] Call Trace: [ 1191.411317][ C0] [ 1191.414234][ C0] __schedule+0x1259/0x6920 [ 1191.418736][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 1191.423654][ C0] ? lock_acquire+0x1d1/0x380 [ 1191.428303][ C0] ? __pfx___schedule+0x10/0x10 [ 1191.433130][ C0] ? find_held_lock+0x2b/0x80 [ 1191.437782][ C0] ? schedule+0x225/0x2c0 [ 1191.442089][ C0] schedule+0xdd/0x2c0 [ 1191.446132][ C0] schedule_timeout+0x127/0x280 [ 1191.450958][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1191.456306][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1191.461573][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1191.467356][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 1191.472798][ C0] rcu_gp_fqs_loop+0x1a9/0x8f0 [ 1191.477533][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1191.482790][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1191.487699][ C0] ? rcu_is_watching+0x13/0xc0 [ 1191.492436][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1191.498228][ C0] rcu_gp_kthread+0x17a/0x220 [ 1191.502885][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1191.508054][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1191.513837][ C0] ? __kthread_parkme+0x18f/0x230 [ 1191.518845][ C0] ? kthread+0x13a/0x450 [ 1191.523059][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1191.528228][ C0] kthread+0x373/0x450 [ 1191.532271][ C0] ? __pfx_kthread+0x10/0x10 [ 1191.536837][ C0] ret_from_fork+0x730/0xd60 [ 1191.541400][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1191.546482][ C0] ? __switch_to+0x800/0x10f0 [ 1191.551143][ C0] ? __pfx_kthread+0x10/0x10 [ 1191.555707][ C0] ret_from_fork_asm+0x1a/0x30 [ 1191.560458][ C0] [ 1191.563457][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1191.569749][ C0] CPU: 0 UID: 0 PID: 3222 Comm: kworker/R-bat_e Tainted: G L syzkaller #0 PREEMPT(full) [ 1191.580996][ C0] Tainted: [L]=SOFTLOCKUP [ 1191.585288][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1191.595314][ C0] Workqueue: bat_events batadv_tt_purge [ 1191.600838][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 1191.607228][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 96 1d 12 f6 48 89 df e8 1e 74 12 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 45 57 01 f6 65 48 83 3d d4 b3 b7 08 00 74 16 5b [ 1191.626811][ C0] RSP: 0018:ffffc90000007c60 EFLAGS: 00000246 [ 1191.632855][ C0] RAX: 0000000000000002 RBX: ffff88802b2f8000 RCX: 0000000000000004 [ 1191.640798][ C0] RDX: 0000000000000102 RSI: ffffffff8e38e957 RDI: ffffffff8c623980 [ 1191.648737][ C0] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000 [ 1191.656678][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: ffff8881a99f4310 [ 1191.664617][ C0] R13: ffff8881a99f4308 R14: ffff8880280e34a3 R15: ffff8880280e3410 [ 1191.672569][ C0] FS: 0000000000000000(0000) GS:ffff888123b4f000(0000) knlGS:0000000000000000 [ 1191.681481][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1191.688034][ C0] CR2: 00007f6bcce576dd CR3: 0000000075509000 CR4: 00000000003526f0 [ 1191.695987][ C0] Call Trace: [ 1191.699240][ C0] [ 1191.702056][ C0] dummy_timer+0x1d89/0x3700 [ 1191.706626][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1191.712417][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 1191.718026][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1191.722933][ C0] ? mark_held_locks+0x40/0x70 [ 1191.727668][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1191.733460][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1191.738368][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 1191.743545][ C0] hrtimer_run_softirq+0x1ca/0x360 [ 1191.748633][ C0] handle_softirqs+0x1e6/0x9d0 [ 1191.753369][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1191.758626][ C0] ? batadv_tt_purge+0x25d/0xbd0 [ 1191.763538][ C0] do_softirq+0xaf/0xf0 [ 1191.767665][ C0] [ 1191.770567][ C0] [ 1191.773481][ C0] __local_bh_enable_ip+0xff/0x120 [ 1191.778565][ C0] batadv_tt_purge+0x25d/0xbd0 [ 1191.783309][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 1191.788567][ C0] ? lock_acquire+0x1d1/0x380 [ 1191.793227][ C0] ? process_one_work+0xa2c/0x1b10 [ 1191.798312][ C0] ? process_one_work+0x906/0x1b10 [ 1191.803396][ C0] ? process_one_work+0x906/0x1b10 [ 1191.808486][ C0] process_one_work+0xac7/0x1b10 [ 1191.813403][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1191.818761][ C0] ? lock_acquire+0x1d1/0x380 [ 1191.823423][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 1191.828681][ C0] rescuer_thread+0x918/0x14e0 [ 1191.833435][ C0] ? rescuer_thread+0x256/0x14e0 [ 1191.838348][ C0] ? rescuer_thread+0x118/0x14e0 [ 1191.843259][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 1191.848442][ C0] ? __kthread_parkme+0x18f/0x230 [ 1191.854133][ C0] ? kthread+0x13a/0x450 [ 1191.858347][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 1191.863526][ C0] kthread+0x373/0x450 [ 1191.867568][ C0] ? __pfx_kthread+0x10/0x10 [ 1191.872136][ C0] ret_from_fork+0x730/0xd60 [ 1191.876698][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1191.881781][ C0] ? __switch_to+0x800/0x10f0 [ 1191.886431][ C0] ? __pfx_kthread+0x10/0x10 [ 1191.890996][ C0] ret_from_fork_asm+0x1a/0x30 [ 1191.895738][ C0]