last executing test programs: 2m41.045885923s ago: executing program 0 (id=636): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4890) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 2m38.051296517s ago: executing program 0 (id=642): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x80002, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[], 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r5, 0x8b2a, &(0x7f0000000040)) 2m36.838246143s ago: executing program 0 (id=646): openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) fsopen(0x0, 0x1) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40081, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x7) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0)=0xf9) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010027bd70010000000000000000", @ANYRES32=0x0], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000480)='./cgroup\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) unshare(0x6a040000) 2m30.187883496s ago: executing program 0 (id=654): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) 2m30.080931614s ago: executing program 0 (id=655): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@private=0xa010100, 0x0, 0x0, 0x4e21, 0x0, 0x2}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3}, {0xffffbffffffffffc, 0x0, 0x0, 0x1000000000}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x4d3, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000280)=""/106, 0x6a, 0xb1ae4679038a8135, &(0x7f0000000300)={0xa, 0x4e21, 0xfffffffa, @loopback, 0xcecb}, 0x1c) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x862b01) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000b40)={0x52, 0x1, 0x6, {0x1017, 0x1}, {0x61, 0x2}, @cond=[{0x5, 0x6, 0x8, 0xffff, 0x3ecb, 0x4}, {0x604, 0x8000, 0x4, 0x4, 0x1ab1, 0xe00}]}) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x41, [0x9, 0xffffffff, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0x7fff, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x20000003, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x6, 0x4, 0x2, 0x3, 0x8, 0x811, 0x5, 0xb343, 0x8, 0x2, 0x1, 0x1, 0x4, 0x6, 0x9, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0x4b, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x402, 0x8001, 0x3, 0x2, 0x297, 0x5, 0x0, 0x981, 0x4, 0x500, 0x3ff, 0x0, 0x7, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0xffffffff, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0xa, 0x401, 0x800000c, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x5, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0x20cd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x1, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x1, 0x80000004, 0x4, 0x4, 0x5, 0x9, 0x2, 0x20000009, 0x80, 0x9, 0x9, 0x4046, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x353, 0x8, 0x3, 0xfffffffc, 0x4, 0x3, 0x2, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x6, 0x5], [0x108e, 0x7fff, 0x403, 0x3, 0x88, 0x2, 0x6, 0x6b9, 0x50, 0x2, 0x763, 0x6, 0x402, 0x7ff, 0xffffffff, 0x1000, 0x7f, 0x696, 0x3fa6, 0x4, 0x8e8, 0x5, 0x1e0, 0x7, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa806, 0x31ff, 0x4, 0x8, 0x8a8, 0x2, 0x1040, 0x7, 0x2, 0x4, 0x0, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x300, 0x3, 0x4edf, 0xffff7ffd, 0x10000007, 0xe, 0x2, 0xe, 0xf, 0x132, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) readv(r3, &(0x7f0000000100)=[{0x0}, {&(0x7f0000001940)=""/4096, 0x1000}], 0x2) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r4, 0x10c, 0x9, &(0x7f0000000540), 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbff, {{@in=@multicast2, @in, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x20, 0x87}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0xfffffffffffffffb}, {0x0, 0x1000, 0x200000000000000}, 0x800, 0x6e6bb0}}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x8008010) syz_usb_connect(0x5, 0x27, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203110902120001000000000904", @ANYRES16=r3], 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x6, 0x11, 0x1, &(0x7f0000000080)="d7"}, {0x5, 0x4e01, 0x36, &(0x7f00000017c0)="166e2a32055dbea94d2028f1d68b71716589b27cd2b4eb72634a3e2356e600ea1eb98c2b876db8d684337b0caa6625e6bd6712cec64f"}, {0xf, 0x810, 0x0, 0x0}], 0x3}) 2m28.045270941s ago: executing program 0 (id=662): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) 2m12.963524646s ago: executing program 32 (id=662): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) 15.853314023s ago: executing program 5 (id=1048): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003f00)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x8, 0x4, 0x3, 0x3a}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3f}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee74f16005692bfd719659c3ddb06775163cddcb", 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x8}], 0x2}, 0x40005) 14.723362226s ago: executing program 3 (id=1053): socket$inet_tcp(0x2, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) fsopen(&(0x7f0000000140)='ext3\x00', 0x0) socket(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000080)) pipe2$9p(&(0x7f0000000140), 0x800) creat(0x0, 0xd931d3864d39dcdb) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r1, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 13.229586529s ago: executing program 1 (id=1055): socket$nl_route(0x10, 0x3, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6}) ioctl(r1, 0x8b22, &(0x7f0000000040)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r2, &(0x7f00000002c0)=""/75, 0x4b, 0x0) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000140)={0xf, 0x0, 0x2, 0x80}) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, 0x0, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000004900010928bd700018dcdf250a001c00", @ANYRES32, @ANYBLOB="0000000014000100fe80000000000000000000000000001f14000100fe8000000000000000000000000000bb080002"], 0x54}}, 0x0) 13.190834964s ago: executing program 3 (id=1056): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ptrace$poke(0x4, r1, &(0x7f0000000380), 0x917) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x2004000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/14, @ANYRES32=0x0, @ANYBLOB="00003b2b92af3fa0a8aadf8eba6493f75266", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) ioctl$COMEDI_CMD(r4, 0x80506409, &(0x7f0000000180)={0x0, 0x1, 0x2, 0x6dd, 0x10, 0x200, 0x10, 0x3, 0x20, 0xffffffff, 0x20, 0x7, &(0x7f00000000c0)=[0x4], 0x1, 0x0}) 12.128368685s ago: executing program 3 (id=1057): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 10.766035571s ago: executing program 1 (id=1059): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000002080)={0x200f, {"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", 0x1000}}, 0x1006) 10.653306394s ago: executing program 5 (id=1061): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) eventfd(0xc) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r4 = open$dir(0x0, 0x80000, 0x8d) write$qrtrtun(r3, &(0x7f0000000600)="58af1d", 0x3) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r3, 0x0, 0x25, 0x0, @void}, 0x10) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x5], 0x0, 0x0, 0x1}}, 0x40) 10.502292745s ago: executing program 3 (id=1062): syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r0, 0x1d) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb"], 0x0) syz_open_dev$I2C(0x0, 0x1, 0x2603) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_emit_ethernet(0x5e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0xe9, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x15, 0x0, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014000300697036746e6c300000000000000000001c0012800b000100697036746e6c00000c00028006000f0000000002486f2b02045d975e5e27bf49e5d34c62dd6149220bd56fcb53119cc34d81c388c4c1abc3ce09d4ac8bdd0376f98fe2b6e3ed5b63ee15ae524d96bd2a303f9f09a10bb8418deb360b761b8bb749daa4cfc7c453f035ea6f9a320b80a1243395fdecd2a8a3ce455005ef2c2563eb7ba1d09d46045b0489a1cb4235ed6116e0d603e647b62c59c482f87460fa53e63e6742e5b0f0da3d486064acd48d4a8d"], 0x50}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 9.802517859s ago: executing program 1 (id=1063): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4094}, 0x4000) 9.295361936s ago: executing program 1 (id=1065): syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r0, 0x1d) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb"], 0x0) syz_open_dev$I2C(0x0, 0x1, 0x2603) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_emit_ethernet(0x5e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0xe9, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x15, 0x0, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) getpid() socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 8.499225144s ago: executing program 5 (id=1069): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a01040000000000000000020000000900020073797a32007d131c91deef0d0000000900010073797a30000000000c00034000000000000000021400000011000100000000000096e546469455ce91b0a2fbb8bb6155fab8eb1288be3725244962e2cc99d22225d0c6a32656d35aa9e63cb8cd5164ac3e909656ac6b817950ad2c3264b89bd1da087ce8d1cbf503e9633a403ad7bdbaae23ae0f87f8a25f698f9b1dc4a84e56860183b99010bcf84b159690ab1c"], 0x60}}, 0x0) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) r1 = openat$yama_ptrace_scope(0xffffffffffffff9c, 0x0, 0x2, 0x0) lseek(r1, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$sequencer2(0xffffff9c, &(0x7f00000011c0), 0x143240, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r2, 0xc0045103, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) clock_nanosleep(0xb, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_create1(0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) unshare(0x20000400) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023892) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r5, 0x541c, &(0x7f00000003c0)) r6 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) 8.347630995s ago: executing program 4 (id=1070): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a001000010000090588"], 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x4a, 0x0, &(0x7f00000002c0)) r2 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000480), 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000180)='rdma.current\x00', 0x275a, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) eventfd(0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0xd3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$caif_stream(0x25, 0x1, 0x844) ioctl$KVM_GET_TSC_KHZ_vm(r4, 0xaea3) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002100090002000000ffdbdf25020000000800080046"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x844) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)=""/174, 0xae}, {0x0}], 0x2, &(0x7f0000000240)=""/66, 0x42}, 0x1}], 0x1, 0x2121, 0x0) sendmsg$tipc(r2, &(0x7f0000000000)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000001900)=[{&(0x7f0000000200)}], 0x1, 0x0, 0x0, 0x8008001}, 0x4800) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="000c0100000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYRES32=r1, @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000640)={0x0, 0xe7}, &(0x7f0000000680)=0x8) 7.875254654s ago: executing program 5 (id=1071): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(r1, 0x24, &(0x7f0000000000)={0x1, 0x0, 0x7, 0x9}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0xc010) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.658914476s ago: executing program 5 (id=1073): r0 = getpgrp(0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000006442, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r2, 0x3f, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x20, 0x1, 0x0, r1, 0x0, 0xfe00}]) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) pipe2$9p(&(0x7f0000000080), 0x80) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) recvmmsg(r6, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) 5.189590782s ago: executing program 4 (id=1075): setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r3, 0x0, 0xffffffff004) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r4, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001bc0)={'sit0\x00', &(0x7f0000001b80)={'gre0\x00', 0x0, 0x8, 0x80, 0x400, 0xfffffff7, {{0x6, 0x4, 0x0, 0xb, 0x18, 0x67, 0x0, 0x3, 0x2f, 0x0, @broadcast, @multicast1, {[@ra={0x94, 0x4}]}}}}}) sendmmsg$inet6(r4, &(0x7f0000004400)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0xa7}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000000c0)="ee0d5ac1d34b6ca3f7f8537c6a0c2791aa3b223c3be21dd38c4a3f", 0x1b}, {&(0x7f0000000300)="20e45c96f8e950ab5b3dff90d12a650211f02dfa579d2596999d793be9b490f054f35255b04f6c03d17be22e1c0a8d6bd1a14cd3e67ed95262c2f130af65f876bb7ff9f09c092c3e7026caee356103c914a501aac66e02deda67b745a525516870eb5d3cc82c25a6fdbe151185565234dbffae244efb9677a91338dd6b3c6bd23dfa897203f7aa36a9f7119a9b1615116ed5a92b1edcb256a0e6da63b1b2e91b0d559a465d51d73c968f000873870f0162860eefa0cd004be6a69b8b9478e46c5cc4e88bab3fcc115d29b2c04f8cad531ff716c853dcfc33", 0xd8}, {&(0x7f0000000400)="71b8d2c0d96df19f73e59f06cb117e691e03cfd67a9a01b43682a492f8c696062ac5775f51d2692e820a4960d5e1061be4af18841f5dfccf506f9f8a9fa9c6afee3d95a106e6e692af4f469baae6c94a410fa05def7c9962d554fffb20f2ed8522a9d40991971f1ec54a5a151f5df9bebe0669d565acdf1054ca1d66dba01c536e7306d64cdb93b1bcd14d60e8bc0217380ca413ac600018a418be244fa2a7159fc5481edc895fa3df26ec57be184ed9d22a1b7264ab277e91ce171eb2dad504a6cff13be010b55ba486a868a6f307b586cc5537203fbc80", 0xd8}, {&(0x7f0000000200)="d6418331994c62179f8c3849807f45214f4fad57ca147604a11e211ee1cba9c549fca7aabdb00bbe9ec8b8a09db77d52102776b30b898ed9c5624ad086d5f2fb7dee2722a0e8e81efa8049ffa00149df29ebe0a1e301edcd319974237385342f64c10bf653033510e9e67f1e5259304004db4ea375e7eb8c029016626fbdf80830bb22887152d4fc13230b6ba6bd97274b67c3e9e6d99f14e03123425b4001853d33f2", 0xa3}, {&(0x7f0000000580)="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", 0xfd}], 0x5}}, {{&(0x7f0000000100)={0xa, 0x4e20, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0x1c, &(0x7f0000000e40)=[{&(0x7f0000000740)="8debba3adfeecfd0b7de4ff5a1cbc3d1774ca1498d12000288aac9efa5b3e351a77f06b3e44b0f9c9a7de4741f9cb43fc885f30d883f0df5f9e23801d7f5ac2d123740de2096e337ce316f7371434525e259ffbfcb1da82440120792ebec7b16380967c091d5da2fc694bbd299b0463db85f52c2458206973c5ffbe106d5c9f85f144a0200e0c1f9055363fcd69bb8c3d6e3117498348e39258d86fd0cbb4517738d2b0f8357a588d633631e9ad8675c90a37c1bf15bab3f2858e40efde96ca76ec2612dab1ba97b", 0xc8}, {&(0x7f0000000840)="4654ea2332b1a3077f0db040088bc850daeefa64da748e931c2bbfadc6c0ec078b1501b2e2cb01798197d9d60dd7fa95ee2365158d120304002280bd44738b26aca30915fdb07877bdcbf6513e8eb0e680b0c35335234b48b56d987da7c020d21456699dc92a4793e7e4078e6add9c0322a71186f93c7f673502d24984fe37fd01c4f1955a52ab1048c65e9f72402828536df87a8226cef694266bd1feed3497c988b6715148e25b1bb00fab0db92594fa8d1abac5c7f082e5ef2a281fb2d75b5171e07a8c3267e8055386f2221c17dbea40e346041e8201cf1ca3d188829329d0d10c5388361541778a103f1356510ffc16fdbe9c93e0", 0xf7}, {&(0x7f0000000940)="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", 0xfa}, {&(0x7f0000000a40)="d6d34d653f06a81223a9ac5d3b77fbe5a3cbd500a1429b1fccb3b5cbea02c64c38e310fb4382c99add6a3bb025111d0162b331e0ffbae573aea0433484961c1af50a0b1fbaedd06badd00b01040d84d761c40ebb355edc10abf9bf1cb5928e91cf9183b37c6208e1ef0c863ffde2cc32e9318e6e5638f0e5c69db427c5c4883e61227e1259180bd8ad60f4d736ffb3eefcded3708c304e655522c3566e32", 0x9e}, {&(0x7f0000000b00)="dce892395e2e9153a2c2884a6a9abdcab1e788d4bc073610cd8d7266ed3d187d851c24ce2e7a7cca7aa61a35326064367b47f62b89e28fc041c51d3a9701b2f000dc6d801d59ffec9d23dc785f39d5bb0d673b", 0x53}, {&(0x7f0000000b80)="7ddff846a8082ef755b36838bec4b5473152aecc2f9e6b6fedba87e3f973f92b3c0cb0c4672202677dca92f5fd205419f6713e932f581d6aaf518b6a031e5f9aa5851d4e81b443941ed07e570368824e0e4380ac97bcbaac5e92801a4a32113edf67c4ceca9e97ee092b5bcf14f7584989efadeb62ceb7c771c209db0029b2429d81e76ec178edcfe82f3bf823c642e9846db409d7b6b4a90ff1da5495ae61a8420b480772b8914487a10bd309f4b8cc493c0530e7229ed43e595cddfe372307e62c6f6cf3b176d4be9bf7fe94b069a8b6f0d3b8dd6c103234d8e11774449e50c46fefcfd9ccabada6", 0xe9}, {&(0x7f0000000c80)="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", 0xfa}, {&(0x7f0000000d80)="5657f4708c5076fe2564c706d88099a984304087d098604604b1589018ca193d9903582f273f7c17fa7ae73548997a36d0ad7b7752992f9ed4d57090fdd8f17494f57e5ed592e936e514ea5006a9d3f18175187318228d5806b6c12cb5eb20ad64645c103279212b914d95d400f6f24bbd20296b26adefca1d395cab85a168143f247c08d45c345f24f0306a3a933c130b15d958", 0x94}], 0x8, &(0x7f0000000ec0)=[@flowinfo={{0x14, 0x29, 0xb, 0x3}}, @hoplimit={{0x14, 0x29, 0x34, 0xffff13a3}}, @tclass={{0x14, 0x29, 0x43, 0x5}}], 0x48}}, {{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000f40)="247e1c98d23d563e4cd767b5bfb1f364847a2cbaf919d048a5481932611f33462c21c15e331ae1e1e8a36d4694011bc3be61b25bb9262d5ef19e4122f2aeacdd390ca3dd86de62742757a566d8f9e84c2b97b624bc235d7cb1314b04406fabeca2d2359282462dd67f981d083bb5583a353f9de19c4c35987b2eec09739976028f532e26a986676d99ab1d58152dce412be1fb4f1f728db2dca02f0cc955ac69c2fc26565925b5eeb7fbb34f31c17b15626e08047a5a299c33549fa73b735a2c6dfbf7d1da8a7b2b94916c15b83d60b6bb64b4b437c8", 0xd6}, {&(0x7f0000001040)="847cb0416ececb94763fc7a32e3ec478daf5996a3553a41957ea4107d4046a65b3c90c9f36b3df1e9e0363b2a2b07192ef837ffc434de79a9669418b86e0aee85f393ea17df5127a8787a1defae5a06bf4a19d6441058d97074523e7483ceb228120ff1b955e8c1950dac8975e9f03c286a14177c5b3cb602c59c3e64375f647bd46d7023a15e02ad74d4f486c0beae98400ea1d3d69bb6f219e8ba598903956bc01c355ea7c61a307081524986e1b122d5e91da51a8d062cf58251a5c34d1431854db483f93240ecb2f69a3c46c0b53d1f0c46220491cf61273247cbeedbbc638955dd4620202e6fbcf4f082bb3b9b5fe6edc413fcb89", 0xf7}, {&(0x7f0000001140)="0ecc5472b1732e0ba3e565b9d808559453890c38d746cf75f04437ed2ca0265f75adb8198fca21ade71adf4ec6bc3be54248be95312051d377710493c31298c02ff4ff37847188e1cf3c1d6cb90d4886345fc5e38b3389c84d7dc5f9fde6d6bce6c5ce2b50dbfe31b5a8791b5ee0131f753533c381f7ca", 0x77}, {&(0x7f0000000500)="e593db5189dac31d683371f791caf6cc379cd7497dc42c003d81c1cdaf720588f59f9a", 0x23}, {&(0x7f00000011c0)="476819b4b13303b6610a508496dc3080d2a6867a78dcc40295c570ae3ac35562c13b52f65fb95450513f862fe1dc06adde047cd05b29e87e2dd5318bbfbcc4f0eb8c00401d3c9ed530340e0decee2ca5f56ba9946d53e440d0122d9d374283dd6b9b3ec42fe8a207e275b8425adc82d3209433c20b5c918721d0b4a7e4b904a5b4c516be147876db3f46f0a1b029c67db9", 0x91}], 0x5, &(0x7f0000001300)=[@dstopts_2292={{0x50, 0x29, 0x4, {0x11, 0x6, '\x00', [@calipso={0x7, 0x30, {0x3, 0xa, 0xe, 0x7ff, [0x1, 0x7, 0x7fff, 0x951, 0x9]}}, @enc_lim={0x4, 0x1, 0x10}]}}}, @dstopts={{0x68, 0x29, 0x37, {0x0, 0x9, '\x00', [@ra={0x5, 0x2, 0x4}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x1, 0x4, 0x0, 0x100, [0x2, 0x100000001]}}, @generic={0x2, 0x1e, "376eb3bf50b3e0eb692106ee13827d081922e2f86f424db920a6d5a01aa3"}, @enc_lim={0x4, 0x1, 0x2}, @ra={0x5, 0x2, 0x7}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x7}}, @dstopts={{0x20, 0x29, 0x37, {0x3a, 0x0, '\x00', [@padn]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x10001}}], 0x108}}, {{&(0x7f0000001440)={0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c, &(0x7f0000001940)=[{&(0x7f0000001480)="98eb2aa23d89f26e9dc97d0e8db74a8efbe2ea2a55a895bb8e8f403f4b9901040a59d75c4633e1331e88a42934a8ed7cc9050523b16cd06064d8b5afe96d4879322212e5683a3e608f0d98c39deaf977891d6d0820db4642", 0x58}, {&(0x7f0000001500)="ac0414488c502b0fc6f59c3a4fb55485ae361836ef2b219efb228083ffc675dc7eb21586ca357f54a9859f7e41a97931b5d39b4b172e945dc5d8b8b27b38c2d9709b0d9de5df6cbf7a0838483c319bd84a3a84e18b9d524a4e424a4de4a6d32b80f5e81f16966c1ef3e9546cd97c7beeefdec8be3d6d9e951fd78a4993be6ebe2fbd97899bde6468669363e703befe4e5165613b62534d4d4ab05262ffb3ca9b0dd362cad0a23a3fc88b74477707856d0d27507c520d491e2e589f9343f234a5ae8e5f5dd00874beaf2ceb6d066ac95396a10dd553fb6a132bac9872", 0xdc}, {&(0x7f0000001600)}, {&(0x7f0000001640)="13ac6a4d252eeea2de4201ec23947aa0d4f948ba4f5eb0bb996f4c6e7cfcc4689355a20cf7715149f1ee74e0e3dc5f8970af86507f13b1ced812f2911031088256ad69b2377d2f82435137a6aa2fe02367da9d894af7cb85c5e56ee35aa2f7338d37adbefe1fdc37b8614871e9f89eaffbab0f40a8f27e731822136d325ae2b4d43e51b6696828ebdb57eab7cff1ed7db3e5c624717cce2cf310b86a0bef148d3dddc3d011c866b6737544b1f3248984e4e1c33a0898293ecc01bfc97178a33ef1c6083b19aec85b778c7d1deb394fcc2415aabb0c5c", 0xd6}, {&(0x7f0000001740)="f7c57f20a74f059792ca0c2df0f3cf7342a3210dd2c702f67a4041a56eba724a1591033254f0b49c2eb0aab4506fc174af65b9f20e9a756a3526dc653e9dad23462d13a2ba9e8ed92d9233e4f19c3aad070d16eb8a897cb2225185f721c7f9dead7c03212227f98a75b9e027db5ae5af0c317a363966b06fd2766eb75b2f9b52a4b60f5c5a184d6be00cbf9b306006c325757c7b1d40e22d05c1cb2b0740b7", 0x9f}, {&(0x7f0000001800)="e24d95fdb3f887fb3a506fe81b", 0xd}, {&(0x7f0000001840)="68f3e090faebc46a7254648aa96fdb1d60934da302037e1a45791a016eab35ba319bc1c2b0d9550c572ed7a11e69efae078b63bf9721c9c130f982a0618609335aa1bcb228207d635a8667f012a85c3250496b2f37ec3aac16daff459a237874406d108518c4d40068a24dc77e18070111df3c8f5e8c9159a4aa0b021e5a4dd4905184b951effe81fef7ff00c1237362305400e2fd3f3ad8611b2eca12f49a4eb280afe2ee0a2c3adc52124a3bcdf0fa41bb9a19e9da832bc543a64eb267e4174656b7c435cede7024f45388f257176f31dfe110795dd920", 0xd8}], 0x7, &(0x7f00000019c0)=[@dstopts_2292={{0x20, 0x29, 0x4, {0x32, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x80}]}}}, @tclass={{0x14, 0x29, 0x43, 0xff}}], 0x38}}, {{&(0x7f0000001a00)={0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c, &(0x7f0000001b40)=[{&(0x7f0000001a40)="fb63e6a85476a1f083e6cdfba681c78f74700bdca108653d44a0c7541a1914d492f450e786130b770a0e5980b26198ff2a13ba42300a692378f6b9849a7665b4847187667134cdc2ae53cc699214024236e8e21cb25e1d93a82c39abdbe2802f829ec3f687a5113108043bf45db8f53568c174404fcb613dd44ace2019164608f5c3ab18f73a9bacc05a784da1914d69a3cd0612e9f5e4bd62", 0x99}, {&(0x7f0000001b00)="b91a6e5ad0b57981d539", 0xa}], 0x2, &(0x7f0000001c00)=[@flowinfo={{0x14, 0x29, 0xb, 0x5}}, @pktinfo={{0x24, 0x29, 0x32, {@remote, r5}}}, @hopopts={{0x48, 0x29, 0x36, {0x3a, 0x5, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @ra={0x5, 0x2, 0x26}, @enc_lim={0x4, 0x1, 0x6}, @hao={0xc9, 0x10, @local}, @pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0x7}}, @hopopts={{0x258, 0x29, 0x36, {0x44, 0x47, '\x00', [@generic={0x4, 0xf6, "5489fbc3e21996eb96bb204f98b027b6de14f6694cb4d81b748854415352df9a3e053c90fa12337909acd9ba61d4fa2dfd8c028a5ab51c95099085467ff08197bf747fbc0fd4b8e9adf267618fbc63e9687f307e525c4d6a408a19b9b95c17ccc1441b459c65a92c26b1c171d40c181b5269294e821bbff1168d699c351cd85c6bf2887ae21036421afd2d0d56ddf72ca71f8c3b636d6caf4213486ba33eda97ba6b4eb9293c744284545d49156e56693c94e9823411a17bf76b9edb9379113ca7e4c300290a1ca3df01f3926fe3b9cfb8587d75b85a051821786c1efc4426053e8dfde3912f9000b152998029407eed71d9025256c9"}, @enc_lim={0x4, 0x1, 0x9}, @ra={0x5, 0x2, 0x2}, @generic={0x9, 0x97, "efb24539bd827f745775c59b03d765b5a64fb081f18397c9c07ed7fc3f03941f387ff31179b5b667dc3cfad59fd17369ae298d6360959c271b8208f3341e9d1befb0e37804943a771a99419bfe391190f0de3748713b933392c88b752d913803f64e5dea1911614304991f5f4b679c117ce54575ef6ef32c518c031f076f2add9bdcffed0d31d3673b4835881cadf7855998c3506c200e"}, @enc_lim={0x4, 0x1, 0x3}, @generic={0x8, 0xa2, "44aed17eb8176db8006ebbd18e5438e67b62c61810c28791d11a4a8ddc2e6477132890e9ab0df241421c3c94bde1e0c67b420b27fa5abcc1cead5ae85623f83202d97af6dc9201b5e64d4d732a2da45983c61380c2f1cbdd0befa4e96948807b50a430a2efd8fc5e90f8a2113d3484147317436f1cf5488c487b46de470d6ff1cdbab43da61b60350d582d7a976470919d2adb9f4d40e7fb01f4eaff63b072351439"}]}}}], 0x2f8}}, {{&(0x7f0000001fc0)={0xa, 0x4e22, 0x200, @remote, 0x5}, 0x1c, &(0x7f00000031c0)=[{&(0x7f0000002000)="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", 0x1000}, {&(0x7f0000003000)="4f2cf412ca70851eaf5d91ab07375bf5a0d82d46d40428d58fa28e4e19289e47a7cd33ae59126018c51940539801e5a1c814400042d169d5778adf00db9c9806627736e4bf6883a37aef27646397f61da9c1891ebeb559160e5fb9e3e29e9c1aba832580936f1ec68b1739244daf34c3f31fb78b3cdd636f62a32135b56cbcb0ec2a590e2b341b8d0bc16f82c72d7dbd6d8cead55d504bda6e0d2cb3a574e21d46ddbeade1b1a6fa4aab681f7d7138d5e670922a81bfd2d4738549402fb05e93d77c0baec4a45ae1d35f03deb22c24fe42ee6acd99158d2203", 0xd9}, {&(0x7f0000003100)}, {&(0x7f0000003140)="ba18892bef58d2f149426d4aa2efcae6f7ee2f852ee03b85ac368b4fee381268dd1d20dc880febc1e83120ddde6b05d417c4451f0432a2a1119aa475f779453555ca1196d9bba10d24265dc60524348328917aca0cbd2fe29090f5827ca0d4", 0x5f}], 0x4, &(0x7f0000003200)=[@dstopts_2292={{0x20, 0x29, 0x4, {0x67, 0x0, '\x00', [@ra={0x5, 0x2, 0x98}]}}}], 0x20}}, {{&(0x7f0000003240)={0xa, 0x4e24, 0x4, @private1, 0x41}, 0x1c, &(0x7f0000004380)=[{&(0x7f0000003280)="0b022f19762f8b7626e4d4ffe108c2558400841b89853e7799741aa5dc955493df92a9755eddd2d58e914f76cd9fd84d6e5a2e86f934f38d90774f0b33aac4faa02a30e737de8e71078871a977df07c639dd7da5ae2241a9c1100300153030c7cc5469603cc5e328060802994d67941e3a2ff3b9e729f4eda1750a46c8c3e9b7e2bc76a64bb71c9793b1cdea92128f71049520b98030af699611e0990a6339eaaabda233db2c2ae446ef7598cf7ba44985427b90265681f66d2c8fab3a1b30c33c398cda32764dfd59d36d46885b84501fe0a7be1e88a068ae40531327a70b08ea4840ed332852e574fa8371178c4f7a85529bafe1", 0xf5}, {&(0x7f0000003380)="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", 0x1000}], 0x2, &(0x7f00000043c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x7}}], 0x18}}], 0x7, 0x400c404) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x40305828, &(0x7f0000000180)={0x68, 0xe, 0xffff1000, 0x2000, &(0x7f0000908000/0x2000)=nil}) exit(0x0) sendmmsg$inet6(r4, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x800) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) 4.45702349s ago: executing program 2 (id=1076): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a01040000000000000000020000000900020073797a32007d131c91deef0d0000000900010073797a30000000000c00034000000000000000021400000011000100000000000096e546469455ce91b0a2fbb8bb6155fab8eb1288be3725244962e2cc99d22225d0c6a32656d35aa9e63cb8cd5164ac3e909656ac6b817950ad2c3264b89bd1da087ce8d1cbf503e9633a403ad7bdbaae23ae0f87f8a25f698f9b1dc4a84e56860183b99010bcf84b159690ab1c"], 0x60}}, 0x0) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) lseek(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffff9c, &(0x7f00000011c0), 0x143240, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r1, 0xc0045103, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) clock_nanosleep(0xb, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_create1(0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023892) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x541c, &(0x7f00000003c0)) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) 3.816339845s ago: executing program 2 (id=1077): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000000f14010027bd7000fcdbdf250b00450075766572627376"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x30, r3, 0x239, 0x70bd27, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x101}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffffff}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000802}, 0x20008810) r4 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r4, 0x0, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r5, &(0x7f0000001580)={&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000000300)=""/66, 0x42}, {0x0}, {&(0x7f0000000140)=""/82, 0x52}, {&(0x7f00000013c0)=""/168, 0xa8}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000001700)=""/197, 0xc5}, {&(0x7f00000000c0)=""/24, 0x18}, {&(0x7f00000015c0)=""/165, 0xa5}], 0x8, &(0x7f0000001500)=""/123, 0x7b}, 0x2106) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x40000002}]}) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r9, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r9, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) 2.651681902s ago: executing program 2 (id=1078): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4890) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, 0x0, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 2.644697166s ago: executing program 4 (id=1079): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000640)="ad3292ea54881ba60842bd62653cb5c7beef915d564c90c2", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000380)="41aa28582b394161813fb891a55632fe35000acc7905af0e2c99673411fbdd7b7e5cfc50be4165263aeb91bb3cbb9a06b1c9c8b9bf72d99be61e9fcf00c557612eff61f6c11e1abd823d1a1dc6e749764ccf6b55c076c2db746e79961bea77266be1375c0aa25f6f967336439c3e15df7e4ac1e1067f9eaeb4c3e13fcdc3e3325d220c31b432410e5d66b1b7f76861", 0x8f}, {&(0x7f0000000880)="2562c5e99b9f6b5b44a9134b31756fba3253e5c295e19e3eef3f95b43a5a85c30cdecee06a0c88cf592081cdc5d091a4b2142a75c7ee2565b93a9eb072cbc3f48a8b04e0f610a5480d74551f6db105ae6a2bba2dacf91e5dcc384111fb5014d432e6f82951d0ce5991609d6654502ef9ee34b57e8d971466c54176dd13de4afac8520d51ac7c14", 0x87}, {&(0x7f0000000300)="184866553f80fc7b57782f2a8f", 0xd}, {&(0x7f0000000a40)="134f04935c0bb6b3125fcaeaad07413b34f26e8ae834f29fe91f659871d6776b328f1dd8990a4745c426517669e1725e1eb7979a854ada6da00301244e48a6a3fc3c5edba971aba6ef9d7c4dde9f70d12be5df6f8c4690a4da77e5b463eecfac7b36237819a736fed32c729874a1ca658e08916b4f87992d0fad90d49dbe8314bd52ca2bf820223bfb825cd277330f7a8255b7471aceb6f5a169de47924477374ed3d246", 0xa4}, {&(0x7f0000000940)="fe0cefd07d48c4295cec8de23ea8bfc17f7f2f838be40584f6c96e957f2a218c112afd27d43a83b9b1bc7eb63f0e230cc43fb9f7", 0x34}, {&(0x7f0000000980)="111ae32dcdfaf5ae5c1d184b59ee2f69dbefab8e555b64278556686604420b6460efcb9cc44eb4af2f31f0a33c952acf", 0x30}, {&(0x7f0000000c40)="b8a2e6a91c2c4fffd4b2e86301adc30d6ad6ef812294b03c2ac12c280dadc09fc9836117e9cc8d66f829bc0e7ef004fe435c0dd8aaaea8b6d5cd41b7f39c26d26424a76d056605230e09184a16214ca5164f07cd69b65b2b1449b67f09ae68bb73f966c9ccd69d88a32c488763cc5404980d4dd22b98bc5e2a00f3020eb5936cc35a2f11003407d6e8515e79e71ab77736ac3bc8a50a0c15e6482efa944478536b270ad38a3e9e39ebd72ef6b7", 0xad}], 0x7, &(0x7f0000000dc0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x51}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.474224252s ago: executing program 2 (id=1080): socket$nl_route(0x10, 0x3, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6}) ioctl(0xffffffffffffffff, 0x8b22, &(0x7f0000000040)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000002c0)=""/75, 0x4b, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000140)={0xf, 0x0, 0x2, 0x80}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000004900010928bd700018dcdf250a001c00", @ANYRES32, @ANYBLOB="0000000014000100fe80000000000000000000000000001f14000100fe8000000000000000000000000000bb080002"], 0x54}}, 0x0) 1.748758078s ago: executing program 4 (id=1081): socket$unix(0x1, 0x1, 0x0) socket(0x0, 0xa, 0x1) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6074287bd4102c00fe80000000"], 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c7766e46e6fbd31bf757d5bb6d5a07065d6d9161bed6f", @ANYRESHEX=r2, @ANYBLOB=',\x00']) accept4(r2, 0x0, 0x0, 0x800) socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) modify_ldt$write2(0x11, &(0x7f0000000000)={0x3, 0x20000800, 0x2000, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000080)={0x101, 0x100000, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x158, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@TCA_STAB={0x134, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x98, 0xff, 0x1, 0x1, 0x1, 0x8, 0x3, 0x9}}, {0x16, 0x2, [0x200, 0x1ff, 0x9, 0x5, 0x4, 0x40, 0x6, 0xf800, 0x8]}}, {{0x1c, 0x1, {0x11, 0x6, 0x7, 0x6, 0x0, 0x7, 0x8001, 0x4}}, {0xc, 0x2, [0x1800, 0x8, 0x941d, 0x8]}}, {{0x1c, 0x1, {0x34, 0x4, 0xe0, 0x7fffffff, 0x1, 0x400, 0x200, 0x2}}, {0x8, 0x2, [0x1, 0x1]}}, {{0x1c, 0x1, {0x7, 0xad, 0x7db8, 0x80000001, 0x2, 0xb2000000, 0xb, 0x8}}, {0x14, 0x2, [0x7fff, 0x1, 0x5, 0xd5, 0x7, 0x80, 0x1, 0x8]}}, {{0x1c, 0x1, {0x7f, 0x9, 0x1000, 0x0, 0x0, 0xa1d, 0x337, 0x1}}, {0x6, 0x2, [0x30]}}, {{0x1c, 0x1, {0x4, 0x71, 0x40, 0xffffffff, 0x1, 0x3, 0x1, 0x9}}, {0x16, 0x2, [0x7fff, 0x3, 0xfb8d, 0x1, 0x5, 0x3, 0x8, 0x9, 0x1]}}, {{0x1c, 0x1, {0x60, 0x8, 0x1, 0x3, 0x0, 0x7, 0x7, 0x3}}, {0xa, 0x2, [0x7, 0x7, 0x9]}}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x2, 0x7fff0000}]}) 1.701895377s ago: executing program 1 (id=1082): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x6, 0x8000, 0x64d, 0x80000001, 0x0, r0, 0x5, '\x00', r7, r0, 0x2, 0x0, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={&(0x7f0000000380)="8a977eae7aab430b80f3ce09137f2b0a57fb6b8a9a8b9f36d3d2845a265316c87ba548dcfaf86f352452b0b936c60108579f9b4c047715fbb2c9", &(0x7f0000000400)=""/164, &(0x7f00000000c0)="9d3b37e17d0baa728a2e3452904fde43bfdd27608d66", &(0x7f0000000540)="406d3b284b647226f4142f7437651c841811d9d743908e1f9299b7b1f20a937e7c268861a7661e6047b721739d337d2609b7ee83f74ca3ae191bac7c97d53db74b6d2f81b891b9966fd2062f6fcdba17c3099e7304addfab5c71cabef946e09bf1655bf54eb6bb9f7845e7575ff61d5ac046cbfe60d827ce27c030ee1bb27010da9bb633109661c8bf1586f673202efdfdf8a36d4450a8f07d5e05b3a05135679ffbd75ace3083e850fbc7a7c5fd22399dc34d2143d900d0f2a037e1fa043ec1a86be4840c9ed2ba9c8a13a9634781f0f0468b62b58b9abb3c98435621c1e597", 0x57, r8}, 0x38) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468", @ANYRES8=r2, @ANYRESDEC=r7, @ANYRES32=r0], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@delchain={0x2c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0x101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 1.541802869s ago: executing program 2 (id=1083): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f000000be00), 0x0, 0x40000000, 0x0) 1.415943092s ago: executing program 3 (id=1084): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 1.092186989s ago: executing program 4 (id=1085): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000006b40)={0x2020}, 0x206e) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x5a3a, 0x5, 0x7, 0x12, r0, 0x0, '\x00', 0x0, r2, 0x0, 0x0, 0x2}, 0x50) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e40)={0x18, 0x10, &(0x7f0000000cc0)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000300)={0x5, @vbi={0x9, 0x3, 0x4, 0x31384142, [0x0, 0x5], [0xfffffffb, 0x1c1], 0x1}}) 555.547648ms ago: executing program 5 (id=1086): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ptrace$poke(0x4, r1, &(0x7f0000000380), 0x917) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x2004000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/14, @ANYRES32=0x0, @ANYBLOB="00003b2b92af3fa0a8aadf8eba6493f75266", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) ioctl$COMEDI_CMD(r4, 0x80506409, 0x0) 399.774581ms ago: executing program 3 (id=1087): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000180)={0x2c, 0xa}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x60) 9.364805ms ago: executing program 2 (id=1088): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xffffff9e, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$6lowpan_control(0xffffff9c, 0x0, 0x2, 0x0) write$6lowpan_control(r5, &(0x7f0000000380)='disconnect aa:aa:aa:aa:aa:11 1', 0x1e) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) io_uring_setup(0xf08, &(0x7f00000003c0)={0x0, 0xbb0c, 0x2, 0x0, 0xf0}) socket$nl_netfilter(0x10, 0x3, 0xc) getresgid(0x0, &(0x7f0000000180), &(0x7f0000000240)) socket$netlink(0x10, 0x3, 0x8000000004) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001780)={{{@in=@local, @in=@remote}}, {{@in6=@empty}, 0x0, @in=@local}}, &(0x7f0000001880)=0xe8) statx(0xffffffffffffff9c, &(0x7f0000001a00)='./file0\x00', 0x6000, 0x7ff, &(0x7f0000001a40)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x80}, @IFLA_BR_MAX_AGE={0x8, 0x3, 0xa}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 7.784173ms ago: executing program 4 (id=1089): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000000f14010027bd7000fcdbdf250b00450075766572627376"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x30, r3, 0x239, 0x70bd27, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x101}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffffff}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000802}, 0x20008810) r4 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r4, 0x0, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r5, &(0x7f0000001580)={&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000000300)=""/66, 0x42}, {0x0}, {&(0x7f0000000140)=""/82, 0x52}, {&(0x7f00000013c0)=""/168, 0xa8}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000001700)=""/197, 0xc5}, {&(0x7f00000000c0)=""/24, 0x18}, {&(0x7f00000015c0)=""/165, 0xa5}], 0x8, &(0x7f0000001500)=""/123, 0x7b}, 0x2106) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x40000002}]}) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r9, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r9, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) 0s ago: executing program 1 (id=1090): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a01040000000000000000020000000900020073797a32007d131c91deef0d0000000900010073797a30000000000c00034000000000000000021400000011000100000000000096e546469455ce91b0a2fbb8bb6155fab8eb1288be3725244962e2cc99d22225d0c6a32656d35aa9e63cb8cd5164ac3e909656ac6b817950ad2c3264b89bd1da087ce8d1cbf503e9633a403ad7bdbaae23ae0f87f8a25f698f9b1dc4a84e56860183b99010bcf84b159690ab1c"], 0x60}}, 0x0) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) r1 = openat$yama_ptrace_scope(0xffffffffffffff9c, 0x0, 0x2, 0x0) lseek(r1, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$sequencer2(0xffffff9c, &(0x7f00000011c0), 0x143240, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r2, 0xc0045103, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) clock_nanosleep(0xb, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) epoll_create1(0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023892) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x541c, &(0x7f00000003c0)) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) kernel console output (not intermixed with test programs): it's busy [ 463.275167][ T6569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.284217][ T5929] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 463.322921][ T5929] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 463.452109][ T5862] usb 5-1: USB disconnect, device number 2 [ 463.521484][ T5929] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 463.543187][ T5929] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 463.573870][ T5929] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 463.612140][ T5929] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 463.642207][ T5929] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 463.664983][ T5929] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 463.684284][ T5929] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 463.720111][ T5929] usb 2-1: USB disconnect, device number 3 [ 463.953448][ T6590] netlink: 12 bytes leftover after parsing attributes in process `syz.3.168'. [ 464.032102][ T5828] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 464.102838][ T6594] lo speed is unknown, defaulting to 1000 [ 464.126400][ T6594] lo speed is unknown, defaulting to 1000 [ 464.167464][ T6594] lo speed is unknown, defaulting to 1000 [ 464.193441][ T6594] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 464.238336][ T5828] usb 3-1: Using ep0 maxpacket: 32 [ 464.241338][ T6594] lo speed is unknown, defaulting to 1000 [ 464.250829][ T6594] lo speed is unknown, defaulting to 1000 [ 464.297744][ T5828] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 464.453148][ T6594] lo speed is unknown, defaulting to 1000 [ 464.516398][ T5828] usb 3-1: config 0 has no interface number 0 [ 464.601594][ T5828] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 464.663653][ T6594] lo speed is unknown, defaulting to 1000 [ 464.674548][ T6594] lo speed is unknown, defaulting to 1000 [ 464.690527][ T5828] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 464.707736][ T5828] usb 3-1: config 0 interface 126 has no altsetting 0 [ 464.730826][ T5828] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 464.749779][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.774058][ T5828] usb 3-1: Product: syz [ 464.781486][ T5828] usb 3-1: Manufacturer: syz [ 464.789532][ T5828] usb 3-1: SerialNumber: syz [ 464.817978][ T5828] usb 3-1: config 0 descriptor?? [ 464.829293][ T6588] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 464.841929][ T6588] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 465.579575][ T11] block nbd0: Possible stuck request ffff888026c08000: control (read@0,1024B). Runtime 30 seconds [ 465.591421][ T11] block nbd0: Possible stuck request ffff888026c08200: control (read@1024,1024B). Runtime 30 seconds [ 465.605869][ T11] block nbd0: Possible stuck request ffff888026c08400: control (read@2048,1024B). Runtime 30 seconds [ 465.616974][ T11] block nbd0: Possible stuck request ffff888026c08600: control (read@3072,1024B). Runtime 30 seconds [ 465.682299][ T89] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 465.852199][ T89] usb 2-1: Using ep0 maxpacket: 16 [ 465.872706][ T89] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.892138][ T89] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 465.905482][ T5828] ir_usb 3-1:0.126: IR Dongle converter detected [ 465.925394][ T89] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 465.952117][ T89] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 466.097372][ T89] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 466.111154][ T5828] usb 3-1: IRDA class descriptor not found, device not bound [ 466.119896][ T89] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 466.151413][ T89] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 466.159863][ T89] usb 2-1: Manufacturer: syz [ 466.171279][ T89] usb 2-1: config 0 descriptor?? [ 466.249355][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 466.249373][ T30] audit: type=1400 audit(1769442448.955:267): avc: denied { ioctl } for pid=6633 comm="syz.0.184" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 466.334577][ T30] audit: type=1400 audit(1769442448.955:268): avc: denied { set_context_mgr } for pid=6633 comm="syz.0.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 466.375321][ T5828] usb 3-1: USB disconnect, device number 3 [ 466.421169][ T30] audit: type=1400 audit(1769442448.955:269): avc: denied { map } for pid=6633 comm="syz.0.184" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 466.502699][ T30] audit: type=1400 audit(1769442448.975:270): avc: denied { call } for pid=6633 comm="syz.0.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 466.538505][ T30] audit: type=1400 audit(1769442448.975:271): avc: denied { transfer } for pid=6633 comm="syz.0.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 466.540617][ T89] rc_core: IR keymap rc-hauppauge not found [ 466.602960][ T89] Registered IR keymap rc-empty [ 466.614212][ T89] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 466.652152][ T89] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 466.696888][ T89] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 466.718463][ T89] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input9 [ 467.442678][ T89] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 467.472461][ T89] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 467.502166][ T89] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 467.542190][ T89] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 467.580414][ T89] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 467.610642][ T89] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 467.652750][ T89] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 467.672372][ T89] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 467.714389][ T89] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 467.762202][ T89] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 467.783996][ T89] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 467.802206][ T89] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 467.840708][ T89] usb 2-1: USB disconnect, device number 4 [ 468.128692][ T30] audit: type=1400 audit(1769442450.835:272): avc: denied { setopt } for pid=6663 comm="syz.3.196" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 468.316685][ T6668] pimreg: entered allmulticast mode [ 469.188555][ T30] audit: type=1400 audit(1769442451.895:273): avc: denied { connect } for pid=6686 comm="syz.2.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 469.212994][ T6688] Illegal XDP return value 4294967294 on prog (id 14) dev syz_tun, expect packet loss! [ 469.392453][ T5862] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 469.479234][ T6694] netlink: 'syz.0.202': attribute type 40 has an invalid length. [ 470.963709][ T5862] usb 5-1: no configurations [ 470.968318][ T5862] usb 5-1: can't read configurations, error -22 [ 472.117808][ T5862] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 472.960435][ T30] audit: type=1400 audit(1769442455.665:274): avc: denied { read } for pid=6712 comm="syz.4.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 474.107733][ T6730] netlink: 292 bytes leftover after parsing attributes in process `syz.2.218'. [ 474.601291][ T6746] netlink: 'syz.2.220': attribute type 40 has an invalid length. [ 475.735039][ T89] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 476.036283][ T89] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 476.072264][ T89] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.102120][ T89] usb 4-1: config 0 has no interfaces? [ 476.122312][ T89] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.152752][ T89] usb 4-1: config 0 has no interfaces? [ 476.159551][ T89] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.175932][ T89] usb 4-1: config 0 has no interfaces? [ 476.187525][ T89] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.198201][ T89] usb 4-1: config 0 has no interfaces? [ 476.215628][ T89] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.230011][ T89] usb 4-1: config 0 has no interfaces? [ 476.254858][ T89] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.299953][ T89] usb 4-1: config 0 has no interfaces? [ 476.372453][ T89] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.428528][ T89] usb 4-1: config 0 has no interfaces? [ 476.573261][ T89] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.590551][ T89] usb 4-1: config 0 has no interfaces? [ 476.607053][ T89] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 476.619183][ T89] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.634561][ T89] usb 4-1: Product: syz [ 476.641622][ T89] usb 4-1: Manufacturer: syz [ 476.649395][ T89] usb 4-1: SerialNumber: syz [ 476.668841][ T89] usb 4-1: config 0 descriptor?? [ 476.765045][ T6765] sp0: Synchronizing with TNC [ 476.863082][ T6770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.231'. [ 476.885170][ T6771] netlink: 3 bytes leftover after parsing attributes in process `syz.2.227'. [ 476.916604][ T6771] netlink: 3 bytes leftover after parsing attributes in process `syz.2.227'. [ 476.926073][ T6771] netlink: 3 bytes leftover after parsing attributes in process `syz.2.227'. [ 476.970595][ T980] usb 4-1: USB disconnect, device number 3 [ 476.989413][ T6771] netlink: 3 bytes leftover after parsing attributes in process `syz.2.227'. [ 477.006385][ T6771] netlink: 3 bytes leftover after parsing attributes in process `syz.2.227'. [ 477.075106][ T6771] netlink: 3 bytes leftover after parsing attributes in process `syz.2.227'. [ 477.132574][ T6771] netlink: 3 bytes leftover after parsing attributes in process `syz.2.227'. [ 477.551119][ T6771] netlink: 3 bytes leftover after parsing attributes in process `syz.2.227'. [ 478.621761][ T6778] lo speed is unknown, defaulting to 1000 [ 478.861691][ T6800] netlink: 'syz.4.238': attribute type 40 has an invalid length. [ 479.669464][ T30] audit: type=1400 audit(1769442462.375:275): avc: denied { create } for pid=6808 comm="syz.3.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 480.053573][ T5929] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 480.352087][ T5929] usb 4-1: Using ep0 maxpacket: 16 [ 480.389973][ T5929] usb 4-1: config 157 has an invalid descriptor of length 0, skipping remainder of the config [ 480.442279][ T5929] usb 4-1: config 157 has 0 interfaces, different from the descriptor's value: 1 [ 480.475139][ T5929] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 480.484625][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.516905][ T5929] usb 4-1: Product: syz [ 480.521351][ T5929] usb 4-1: Manufacturer: syz [ 480.560504][ T5929] usb 4-1: SerialNumber: syz [ 480.712225][ T89] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 480.932934][ T89] usb 1-1: too many configurations: 17, using maximum allowed: 8 [ 480.977431][ T89] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.549653][ T89] usb 1-1: config 0 has no interfaces? [ 481.557273][ T89] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.567938][ T89] usb 1-1: config 0 has no interfaces? [ 481.613324][ T89] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.624885][ T89] usb 1-1: config 0 has no interfaces? [ 481.739540][ T89] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.763166][ T89] usb 1-1: config 0 has no interfaces? [ 481.810536][ T89] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.849198][ T89] usb 1-1: config 0 has no interfaces? [ 481.855953][ T6834] __nla_validate_parse: 136 callbacks suppressed [ 481.855966][ T6834] netlink: 24 bytes leftover after parsing attributes in process `syz.4.248'. [ 481.876657][ T89] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.883725][ T6833] netlink: 292 bytes leftover after parsing attributes in process `syz.1.249'. [ 481.938102][ T89] usb 1-1: config 0 has no interfaces? [ 481.973060][ T89] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.986060][ T89] usb 1-1: config 0 has no interfaces? [ 482.004276][ T89] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 482.351586][ T89] usb 1-1: config 0 has no interfaces? [ 482.360543][ T89] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 482.370442][ T89] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.379749][ T89] usb 1-1: Product: syz [ 482.410153][ T89] usb 1-1: Manufacturer: syz [ 482.427087][ T89] usb 1-1: SerialNumber: syz [ 482.451049][ T89] usb 1-1: config 0 descriptor?? [ 482.586881][ T30] audit: type=1400 audit(1769442465.295:276): avc: denied { write } for pid=6839 comm="syz.4.251" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 482.682214][ T5828] usb 1-1: USB disconnect, device number 2 [ 482.772159][ T89] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 482.902284][ T5929] usb 4-1: USB disconnect, device number 4 [ 482.932455][ T89] usb 2-1: Using ep0 maxpacket: 16 [ 482.942281][ T89] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 482.959458][ T89] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 482.988371][ T89] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 483.006615][ T89] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 483.032249][ T89] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 483.063122][ T89] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 483.072249][ T89] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 483.082237][ T89] usb 2-1: Manufacturer: syz [ 483.089756][ T89] usb 2-1: config 0 descriptor?? [ 483.266299][ T5929] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 483.613284][ T89] rc_core: IR keymap rc-hauppauge not found [ 483.619604][ T89] Registered IR keymap rc-empty [ 483.629471][ T89] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 483.653082][ T89] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 483.674357][ T5929] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 483.684304][ T89] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 483.696070][ T5929] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 483.709544][ T89] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input10 [ 483.732494][ T5929] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 483.741596][ T5929] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 483.757679][ T5929] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 483.769793][ T89] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 483.778464][ T5929] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 483.796723][ T89] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 483.808204][ T5929] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 483.928446][ T89] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 483.936234][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 483.944694][ T5929] usb 5-1: Product: syz [ 483.948915][ T5929] usb 5-1: Manufacturer: syz [ 483.953979][ T89] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 483.966459][ T6846] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 483.985075][ T89] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 484.001143][ T5929] cdc_wdm 5-1:1.0: skipping garbage [ 484.006800][ T5929] cdc_wdm 5-1:1.0: skipping garbage [ 484.012506][ T89] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 484.077286][ T30] audit: type=1400 audit(1769442466.775:277): avc: denied { read } for pid=6859 comm="syz.3.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 484.542981][ T5929] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 484.548973][ T5929] cdc_wdm 5-1:1.0: Unknown control protocol [ 484.555309][ T89] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 484.586861][ T6864] netlink: 292 bytes leftover after parsing attributes in process `syz.0.260'. [ 484.600068][ T89] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 484.630314][ T5971] usb 5-1: USB disconnect, device number 5 [ 484.632191][ T89] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 484.719625][ T6867] netlink: 24 bytes leftover after parsing attributes in process `syz.0.262'. [ 484.753393][ T89] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 484.774427][ T89] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 484.801532][ T89] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 484.836991][ T89] usb 2-1: USB disconnect, device number 5 [ 488.114018][ T6902] netlink: 284 bytes leftover after parsing attributes in process `syz.1.272'. [ 488.522155][ T5929] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 489.194176][ T5929] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 489.221124][ T5929] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 489.253842][ T5929] usb 2-1: config 0 has no interface number 0 [ 489.261369][ T5929] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 489.274466][ T5929] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 489.291478][ T5929] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 489.301114][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.310049][ T5929] usb 2-1: Product: syz [ 489.314784][ T5929] usb 2-1: Manufacturer: syz [ 489.678631][ T5862] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 490.279514][ T5929] usb 2-1: SerialNumber: syz [ 490.288793][ T5929] usb 2-1: config 0 descriptor?? [ 491.010734][ T30] audit: type=1400 audit(1769442473.715:278): avc: denied { read append } for pid=6928 comm="syz.4.279" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 492.005884][ T30] audit: type=1400 audit(1769442473.715:279): avc: denied { open } for pid=6928 comm="syz.4.279" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 492.242351][ T5862] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 492.432114][ T9] usb 2-1: USB disconnect, device number 6 [ 492.512549][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.575336][ T5862] usb 4-1: config 0 descriptor?? [ 492.595954][ T5862] usb 4-1: can't set config #0, error -71 [ 492.626972][ T5862] usb 4-1: USB disconnect, device number 5 [ 492.692917][ T6941] tipc: Started in network mode [ 492.718330][ T6941] tipc: Node identity 2ad124fe1dfc, cluster identity 4711 [ 492.740972][ T6941] tipc: Enabled bearer , priority 0 [ 492.755119][ T6944] syzkaller0: entered promiscuous mode [ 492.778736][ T6944] syzkaller0: entered allmulticast mode [ 492.824864][ T6941] tipc: Resetting bearer [ 492.832826][ T6940] tipc: Resetting bearer [ 492.861410][ T6940] tipc: Disabling bearer [ 493.505153][ T6966] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.289'. [ 493.660133][ T6969] netlink: 16 bytes leftover after parsing attributes in process `syz.4.281'. [ 493.736041][ T6969] tipc: Started in network mode [ 493.741274][ T6969] tipc: Node identity ac1414aa, cluster identity 4711 [ 493.752403][ T30] audit: type=1400 audit(1769442476.445:280): avc: denied { getopt } for pid=6965 comm="syz.4.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 493.921455][ T6969] tipc: Enabled bearer , priority 10 [ 494.031988][ T6976] netlink: 'syz.2.291': attribute type 40 has an invalid length. [ 494.581307][ T30] audit: type=1400 audit(1769442477.285:281): avc: denied { connect } for pid=6981 comm="syz.0.292" laddr=::ffff:0.0.0.0 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 495.181609][ T5862] tipc: Node number set to 2886997162 [ 495.672216][ T11] block nbd0: Possible stuck request ffff888026c08000: control (read@0,1024B). Runtime 60 seconds [ 495.683266][ T11] block nbd0: Possible stuck request ffff888026c08200: control (read@1024,1024B). Runtime 60 seconds [ 495.702211][ T11] block nbd0: Possible stuck request ffff888026c08400: control (read@2048,1024B). Runtime 60 seconds [ 495.713679][ T11] block nbd0: Possible stuck request ffff888026c08600: control (read@3072,1024B). Runtime 60 seconds [ 495.772841][ T5972] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 495.837855][ T30] audit: type=1400 audit(1769442477.285:282): avc: denied { write } for pid=6981 comm="syz.0.292" path="socket:[13544]" dev="sockfs" ino=13544 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 496.025355][ T5972] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 496.047745][ T30] audit: type=1400 audit(1769442477.325:283): avc: denied { read } for pid=6981 comm="syz.0.292" path="socket:[13544]" dev="sockfs" ino=13544 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 496.092154][ T5972] usb 2-1: config 0 has no interface number 0 [ 496.118823][ T5972] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 496.162690][ T5972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.241900][ T5972] usb 2-1: config 0 descriptor?? [ 496.263211][ T5972] usb 2-1: selecting invalid altsetting 1 [ 496.332336][ T5972] dvb_ttusb_budget: ttusb_init_controller: error [ 496.351708][ T5972] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 496.561836][ T5972] DVB: Unable to find symbol cx22700_attach() [ 496.632708][ T5862] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 496.650576][ T5972] DVB: Unable to find symbol tda10046_attach() [ 496.664328][ T5972] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 496.691112][ T5972] usb 2-1: USB disconnect, device number 7 [ 496.823894][ T5862] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 496.847932][ T5862] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 496.864739][ T5862] usb 4-1: config 0 has no interface number 0 [ 496.871023][ T5862] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 496.895852][ T5862] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 496.925269][ T5862] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 496.937539][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.945961][ T5862] usb 4-1: Product: syz [ 496.951127][ T5862] usb 4-1: Manufacturer: syz [ 496.956322][ T5862] usb 4-1: SerialNumber: syz [ 496.966337][ T5862] usb 4-1: config 0 descriptor?? [ 499.088313][ T5972] usb 4-1: USB disconnect, device number 6 [ 500.269351][ T30] audit: type=1400 audit(1769442482.975:284): avc: denied { read write } for pid=7058 comm="syz.0.313" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 500.361251][ T30] audit: type=1400 audit(1769442483.025:285): avc: denied { open } for pid=7058 comm="syz.0.313" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 500.492759][ T5929] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 500.709575][ T5929] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 500.739366][ T5929] usb 5-1: config 0 has no interface number 0 [ 500.768030][ T5929] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 500.835276][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.893745][ T5929] usb 5-1: config 0 descriptor?? [ 500.915518][ T5929] usb 5-1: selecting invalid altsetting 1 [ 500.921396][ T5929] dvb_ttusb_budget: ttusb_init_controller: error [ 501.044057][ T5929] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 501.415504][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.510052][ T5929] DVB: Unable to find symbol cx22700_attach() [ 502.207158][ T5929] DVB: Unable to find symbol tda10046_attach() [ 502.218777][ T5929] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 502.255528][ T5929] usb 5-1: USB disconnect, device number 6 [ 503.595441][ T30] audit: type=1400 audit(1769442486.305:286): avc: denied { read } for pid=7111 comm="syz.2.328" name="video7" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 503.712142][ T30] audit: type=1400 audit(1769442486.335:287): avc: denied { open } for pid=7111 comm="syz.2.328" path="/dev/video7" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 503.967875][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.326'. [ 504.481332][ T30] audit: type=1400 audit(1769442487.165:288): avc: denied { create } for pid=7118 comm="syz.4.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 504.799667][ T30] audit: type=1400 audit(1769442487.175:289): avc: denied { create } for pid=7118 comm="syz.4.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 505.935731][ T7149] fuse: Bad value for 'fd' [ 507.452194][ T89] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 507.612144][ T89] usb 2-1: Using ep0 maxpacket: 16 [ 507.622125][ T5921] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 507.631628][ T89] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 507.716475][ T5971] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 508.100189][ T89] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 508.121589][ T89] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 508.143747][ T89] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 508.153467][ T89] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 508.161483][ T89] usb 2-1: Manufacturer: syz [ 508.180096][ T89] usb 2-1: config 0 descriptor?? [ 508.233241][ T5921] usb 1-1: too many configurations: 17, using maximum allowed: 8 [ 508.245420][ T5921] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 508.256564][ T5921] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 508.266931][ T5921] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 508.278067][ T5921] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 508.288409][ T5921] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 508.298947][ T5921] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 508.311352][ T5921] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 508.324235][ T5921] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 508.336541][ T5921] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 508.346795][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.364390][ T5971] usb 5-1: Using ep0 maxpacket: 8 [ 508.372817][ T5971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 508.383793][ T5921] usb 1-1: Product: syz [ 508.383817][ T5921] usb 1-1: Manufacturer: syz [ 508.383831][ T5921] usb 1-1: SerialNumber: syz [ 508.398432][ T5971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 508.409072][ T5921] usb 1-1: config 0 descriptor?? [ 508.409526][ T5971] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 508.428191][ T5971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 508.449534][ T5971] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 508.473674][ T5971] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 508.487565][ T5971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.507824][ T5971] usb 5-1: config 0 descriptor?? [ 508.524786][ T7166] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 508.543902][ T30] audit: type=1400 audit(1769442491.255:290): avc: denied { write } for pid=7176 comm="syz.2.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 508.680171][ T980] usb 1-1: USB disconnect, device number 3 [ 508.749317][ T30] audit: type=1400 audit(1769442491.455:291): avc: denied { write } for pid=7165 comm="syz.4.346" name="video2" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 508.776050][ T7166] netlink: 'syz.4.346': attribute type 1 has an invalid length. [ 508.787466][ T7166] netlink: 224 bytes leftover after parsing attributes in process `syz.4.346'. [ 509.012306][ T7186] fuse: Bad value for 'fd' [ 509.135134][ T7188] netlink: 'syz.2.353': attribute type 2 has an invalid length. [ 509.144088][ T7188] netlink: 'syz.2.353': attribute type 1 has an invalid length. [ 509.614151][ T7196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.356'. [ 510.071875][ T89] usb 2-1: USB disconnect, device number 8 [ 510.548521][ T7209] netlink: 'syz.3.358': attribute type 40 has an invalid length. [ 510.802154][ T5133] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 511.643030][ T7223] fuse: Bad value for 'fd' [ 511.880489][ T7227] netlink: 24 bytes leftover after parsing attributes in process `syz.2.367'. [ 513.404731][ T7244] virtio-fs: tag not found [ 514.167562][ T7253] fuse: Bad value for 'fd' [ 514.271448][ T7254] netlink: 'syz.2.373': attribute type 40 has an invalid length. [ 515.118192][ T7266] netlink: 16 bytes leftover after parsing attributes in process `syz.3.379'. [ 516.048017][ T7266] tipc: Started in network mode [ 516.057511][ T7266] tipc: Node identity ac1414aa, cluster identity 4711 [ 516.428581][ T7266] tipc: Enabled bearer , priority 10 [ 516.509441][ T7276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.382'. [ 516.526158][ T7278] netlink: 24 bytes leftover after parsing attributes in process `syz.2.383'. [ 516.559754][ T7276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.382'. [ 517.465059][ T7294] fuse: Bad value for 'fd' [ 517.526601][ T7298] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 517.533298][ T7298] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 517.603173][ T89] tipc: Node number set to 2886997162 [ 517.670836][ T7298] vhci_hcd vhci_hcd.0: Device attached [ 517.922195][ T980] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 517.932222][ T5972] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 519.096986][ T5972] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 519.109433][ T5972] usb 1-1: can't read configurations, error -61 [ 519.192448][ T7319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.394'. [ 519.388887][ T5972] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 520.482293][ T5972] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 520.502440][ T5972] usb 1-1: can't read configurations, error -61 [ 520.506396][ T7330] netlink: 16 bytes leftover after parsing attributes in process `syz.1.396'. [ 520.515097][ T5972] usb usb1-port1: attempt power cycle [ 520.554687][ T7325] tipc: Enabled bearer , priority 10 [ 520.632118][ T7299] vhci_hcd: connection reset by peer [ 520.685448][ T5973] vhci_hcd vhci_hcd.0: stop threads [ 520.715400][ T7338] syzkaller1: entered promiscuous mode [ 520.724743][ T5973] vhci_hcd vhci_hcd.0: release socket [ 520.744828][ T7338] syzkaller1: entered allmulticast mode [ 520.753568][ T5973] vhci_hcd vhci_hcd.0: disconnect device [ 520.799787][ T7343] fuse: Bad value for 'fd' [ 521.099164][ T43] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 521.296709][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 521.351433][ T43] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 521.360758][ T30] audit: type=1400 audit(1769442504.055:292): avc: denied { create } for pid=7346 comm="syz.3.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 521.361001][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.388345][ T43] usb 2-1: Product: syz [ 521.409222][ T43] usb 2-1: Manufacturer: syz [ 521.424563][ T43] usb 2-1: SerialNumber: syz [ 521.467691][ T43] usb 2-1: config 0 descriptor?? [ 521.612593][ T30] audit: type=1400 audit(1769442504.325:293): avc: denied { create } for pid=7360 comm="syz.0.409" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 522.012900][ T43] snd-usb-6fire 2-1:0.0: unable to receive device firmware state. [ 522.034566][ T30] audit: type=1400 audit(1769442504.715:294): avc: denied { mounton } for pid=7360 comm="syz.0.409" path="/87/file0" dev="tmpfs" ino=457 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 522.061440][ T43] snd-usb-6fire 2-1:0.0: probe with driver snd-usb-6fire failed with error -71 [ 522.100441][ T30] audit: type=1400 audit(1769442504.725:295): avc: denied { mount } for pid=7360 comm="syz.0.409" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 522.123272][ T43] usb 2-1: USB disconnect, device number 9 [ 522.383528][ T7370] netlink: 16 bytes leftover after parsing attributes in process `syz.4.411'. [ 522.946343][ T7364] tipc: Enabling of bearer rejected, already enabled [ 523.011828][ T7382] fuse: Invalid rootmode [ 523.046024][ T7384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.082561][ T7384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.097030][ T980] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 524.387366][ T30] audit: type=1400 audit(1769442507.095:296): avc: denied { setopt } for pid=7392 comm="syz.3.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 524.411926][ T7403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.437678][ T7393] syzkaller0: entered promiscuous mode [ 524.448812][ T7403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.456944][ T7393] syzkaller0: entered allmulticast mode [ 524.528972][ T7409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.425'. [ 524.744753][ T7412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.424'. [ 524.849190][ T30] audit: type=1400 audit(1769442507.555:297): avc: denied { unmount } for pid=5854 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 524.885126][ T30] audit: type=1400 audit(1769442507.595:298): avc: denied { unlink } for pid=5854 comm="syz-executor" name="file0" dev="tmpfs" ino=457 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 525.837839][ T11] block nbd0: Possible stuck request ffff888026c08000: control (read@0,1024B). Runtime 90 seconds [ 525.849798][ T11] block nbd0: Possible stuck request ffff888026c08200: control (read@1024,1024B). Runtime 90 seconds [ 525.860774][ T11] block nbd0: Possible stuck request ffff888026c08400: control (read@2048,1024B). Runtime 90 seconds [ 525.871775][ T11] block nbd0: Possible stuck request ffff888026c08600: control (read@3072,1024B). Runtime 90 seconds [ 525.943097][ T7422] fuse: Invalid rootmode [ 526.327498][ T7425] virtio-fs: tag not found [ 526.910734][ T7430] netlink: 16 bytes leftover after parsing attributes in process `syz.2.430'. [ 528.443137][ T7403] netlink: 'syz.4.423': attribute type 1 has an invalid length. [ 528.461125][ T7403] netlink: 224 bytes leftover after parsing attributes in process `syz.4.423'. [ 528.647455][ T5929] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 528.657411][ T7450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.673919][ T5929] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 528.702681][ T7450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.470683][ T7461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.438'. [ 530.601495][ T7465] virtio-fs: tag not found [ 533.485399][ T30] audit: type=1400 audit(1769442516.185:299): avc: denied { watch_mount } for pid=7486 comm="syz.0.447" path="/97" dev="tmpfs" ino=505 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 533.511889][ T30] audit: type=1400 audit(1769442516.185:300): avc: denied { watch_reads } for pid=7486 comm="syz.0.447" path="/97" dev="tmpfs" ino=505 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 534.542985][ T7496] syzkaller0: entered promiscuous mode [ 534.548635][ T7496] syzkaller0: entered allmulticast mode [ 535.089853][ T43] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 535.112402][ T43] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 535.222214][ T7511] netlink: 3 bytes leftover after parsing attributes in process `syz.4.453'. [ 535.231123][ T7511] netlink: 3 bytes leftover after parsing attributes in process `syz.4.453'. [ 535.242068][ T7511] netlink: 3 bytes leftover after parsing attributes in process `syz.4.453'. [ 535.250935][ T7511] netlink: 3 bytes leftover after parsing attributes in process `syz.4.453'. [ 535.262067][ T7511] netlink: 3 bytes leftover after parsing attributes in process `syz.4.453'. [ 535.270959][ T7511] netlink: 3 bytes leftover after parsing attributes in process `syz.4.453'. [ 535.281969][ T7511] netlink: 3 bytes leftover after parsing attributes in process `syz.4.453'. [ 535.290912][ T7511] netlink: 3 bytes leftover after parsing attributes in process `syz.4.453'. [ 535.301664][ T7511] netlink: 3 bytes leftover after parsing attributes in process `syz.4.453'. [ 535.310570][ T7511] netlink: 3 bytes leftover after parsing attributes in process `syz.4.453'. [ 535.819456][ T7513] lo speed is unknown, defaulting to 1000 [ 536.672183][ T5929] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 536.906734][ T5929] usb 3-1: config 0 has no interfaces? [ 536.938239][ T5929] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 537.380967][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 537.390250][ T5929] usb 3-1: SerialNumber: syz [ 537.401677][ T5929] usb 3-1: config 0 descriptor?? [ 537.430605][ T7523] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 538.005081][ T7524] virtio-fs: tag not found [ 538.071654][ T5921] usb 3-1: USB disconnect, device number 4 [ 538.482419][ T7536] 9p: Bad value for 'rfdno' [ 538.522235][ T30] audit: type=1400 audit(1769442521.215:301): avc: denied { accept } for pid=7528 comm="syz.1.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 540.585046][ T5921] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 540.614394][ T30] audit: type=1400 audit(1769442523.325:302): avc: denied { accept } for pid=7567 comm="syz.4.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 540.643144][ T5921] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 540.851584][ T7574] __nla_validate_parse: 134 callbacks suppressed [ 540.851604][ T7574] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.472'. [ 541.368878][ T5857] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 541.769579][ T5857] usb 1-1: config 0 has no interfaces? [ 542.625531][ T7578] virtio-fs: tag not found [ 542.721880][ T5857] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 542.739817][ T5857] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 542.748258][ T5857] usb 1-1: SerialNumber: syz [ 542.762724][ T5857] usb 1-1: config 0 descriptor?? [ 543.492138][ T5857] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 543.652135][ T5857] usb 2-1: Using ep0 maxpacket: 8 [ 543.658833][ T5857] usb 2-1: config 0 interface 0 has no altsetting 0 [ 543.665823][ T5857] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 543.675231][ T5857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.691173][ T5857] usb 2-1: config 0 descriptor?? [ 544.106005][ T5857] mcp2221 0003:04D8:00DD.0006: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 544.308914][ T89] usb 1-1: USB disconnect, device number 7 [ 544.327511][ T5857] usb 2-1: USB disconnect, device number 10 [ 546.556537][ T7625] virtio-fs: tag not found [ 546.715267][ T30] audit: type=1400 audit(1769442529.425:303): avc: denied { mount } for pid=7627 comm="syz.2.488" name="/" dev="rpc_pipefs" ino=15880 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 547.561218][ T7644] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 547.570484][ T7644] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 547.593939][ T7644] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 547.686211][ T7644] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 549.580809][ T5861] Bluetooth: hci2: command 0x0406 tx timeout [ 549.589903][ T5872] Bluetooth: hci3: command 0x0406 tx timeout [ 549.596099][ T5861] Bluetooth: hci1: command 0x0406 tx timeout [ 550.544167][ T7675] virtio-fs: tag not found [ 551.562593][ T5921] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 551.732455][ T5921] usb 4-1: Using ep0 maxpacket: 32 [ 551.743794][ T5921] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 551.752243][ T5921] usb 4-1: config 0 has no interface number 0 [ 551.759150][ T5921] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 551.769858][ T5921] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 551.789501][ T5921] usb 4-1: config 0 interface 126 has no altsetting 0 [ 551.807707][ T5921] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 551.823908][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.873448][ T30] audit: type=1400 audit(1769442534.565:304): avc: denied { write } for pid=7692 comm="syz.0.506" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 551.902239][ T5921] usb 4-1: Product: syz [ 551.906443][ T5921] usb 4-1: Manufacturer: syz [ 551.911043][ T5921] usb 4-1: SerialNumber: syz [ 551.955036][ T30] audit: type=1400 audit(1769442534.575:305): avc: denied { ioctl } for pid=7692 comm="syz.0.506" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 551.955096][ T5921] usb 4-1: config 0 descriptor?? [ 552.011236][ T7689] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 552.045348][ T7689] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 552.149180][ T7706] 9p: Bad value for 'rfdno' [ 553.020167][ T5921] ir_usb 4-1:0.126: IR Dongle converter detected [ 553.043910][ T5921] usb 4-1: IRDA class descriptor not found, device not bound [ 553.287687][ T5929] usb 4-1: USB disconnect, device number 7 [ 553.482168][ T5921] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 554.211491][ T5921] usb 3-1: Using ep0 maxpacket: 8 [ 554.218537][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 554.232352][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 554.246227][ T7724] virtio-fs: tag not found [ 554.261394][ T5921] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 554.366584][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 554.395199][ T5921] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 554.425323][ T5921] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 554.450125][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.492668][ T5921] usb 3-1: config 0 descriptor?? [ 554.622905][ T7718] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 555.611056][ T7718] netlink: 'syz.2.512': attribute type 1 has an invalid length. [ 556.473084][ T11] block nbd0: Possible stuck request ffff888026c08000: control (read@0,1024B). Runtime 120 seconds [ 556.483990][ T11] block nbd0: Possible stuck request ffff888026c08200: control (read@1024,1024B). Runtime 120 seconds [ 556.495430][ T11] block nbd0: Possible stuck request ffff888026c08400: control (read@2048,1024B). Runtime 120 seconds [ 556.506834][ T11] block nbd0: Possible stuck request ffff888026c08600: control (read@3072,1024B). Runtime 120 seconds [ 556.533613][ T7718] netlink: 224 bytes leftover after parsing attributes in process `syz.2.512'. [ 556.709051][ T5133] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 556.947583][ T7749] 9p: Bad value for 'rfdno' [ 556.981829][ T89] usb 3-1: USB disconnect, device number 5 [ 557.342110][ T5929] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 558.116956][ T5929] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 558.116987][ T5929] usb 1-1: config 0 has no interface number 0 [ 558.121924][ T5929] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 558.121957][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.121980][ T5929] usb 1-1: Product: syz [ 558.122036][ T5929] usb 1-1: Manufacturer: syz [ 558.122051][ T5929] usb 1-1: SerialNumber: syz [ 558.127531][ T5929] usb 1-1: config 0 descriptor?? [ 558.363175][ T5929] dvb_usb_ec168 1-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 558.373643][ T5929] usb 1-1: USB disconnect, device number 8 [ 558.417621][ T7766] overlay: Unknown parameter 'smackfshat' [ 558.418701][ T30] audit: type=1400 audit(1769442541.125:306): avc: denied { mounton } for pid=7765 comm="syz.1.524" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 558.538505][ T7769] capability: warning: `syz.1.524' uses deprecated v2 capabilities in a way that may be insecure [ 558.539923][ T5133] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 559.172553][ T7774] virtio-fs: tag not found [ 559.650990][ T30] audit: type=1400 audit(1769442542.355:307): avc: denied { name_bind } for pid=7779 comm="syz.2.529" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 560.835537][ T7794] 9p: Bad value for 'rfdno' [ 561.140324][ T7800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.532'. [ 561.694817][ T7803] netlink: 12 bytes leftover after parsing attributes in process `syz.0.535'. [ 562.842485][ T7815] virtio-fs: tag not found [ 562.862088][ T7812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 562.870075][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.882113][ T30] audit: type=1400 audit(1769442545.145:308): avc: denied { setopt } for pid=7810 comm="syz.0.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 563.192434][ T7812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 563.206217][ T7812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 563.289966][ T7812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.031302][ T7838] syzkaller0: entered promiscuous mode [ 566.037088][ T7838] syzkaller0: entered allmulticast mode [ 566.434287][ T5133] Bluetooth: hci2: unexpected event for opcode 0x0025 [ 567.882374][ T7862] virtio-fs: tag not found [ 571.128731][ T7873] netlink: 3 bytes leftover after parsing attributes in process `syz.3.548'. [ 571.137752][ T7873] netlink: 3 bytes leftover after parsing attributes in process `syz.3.548'. [ 571.146636][ T7873] netlink: 3 bytes leftover after parsing attributes in process `syz.3.548'. [ 571.155484][ T7873] netlink: 3 bytes leftover after parsing attributes in process `syz.3.548'. [ 571.164415][ T7873] netlink: 3 bytes leftover after parsing attributes in process `syz.3.548'. [ 571.173255][ T7873] netlink: 3 bytes leftover after parsing attributes in process `syz.3.548'. [ 571.182106][ T7873] netlink: 3 bytes leftover after parsing attributes in process `syz.3.548'. [ 571.190887][ T7873] netlink: 3 bytes leftover after parsing attributes in process `syz.3.548'. [ 571.199757][ T7873] netlink: 3 bytes leftover after parsing attributes in process `syz.3.548'. [ 571.208632][ T7873] netlink: 3 bytes leftover after parsing attributes in process `syz.3.548'. [ 571.506053][ T7886] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 571.912417][ T89] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 572.082308][ T89] usb 1-1: Using ep0 maxpacket: 8 [ 572.103579][ T89] usb 1-1: unable to get BOS descriptor or descriptor too short [ 572.117274][ T89] usb 1-1: config 4 interface 0 has no altsetting 0 [ 572.141499][ T89] usb 1-1: string descriptor 0 read error: -22 [ 572.153293][ T89] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 572.251943][ T89] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 572.295449][ T89] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 572.573973][ T89] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 572.699852][ T89] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 572.737827][ T89] usb 1-1: media controller created [ 572.807870][ T89] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 572.907953][ T89] zl10353_read_register: readreg error (reg=127, ret==0) [ 573.032426][ T5929] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 573.068131][ T89] usb 1-1: USB disconnect, device number 9 [ 573.212145][ T5929] usb 2-1: Using ep0 maxpacket: 32 [ 573.428207][ T7930] sp0: Synchronizing with TNC [ 573.695527][ T7930] lo speed is unknown, defaulting to 1000 [ 574.355660][ T5929] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 575.372090][ T5929] usb 2-1: config 0 interface 0 has no altsetting 0 [ 575.378800][ T5929] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 576.241026][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.763643][ T5929] usb 2-1: config 0 descriptor?? [ 576.970761][ T5929] usb 2-1: can't set config #0, error -71 [ 576.987719][ T5929] usb 2-1: USB disconnect, device number 11 [ 577.512291][ T5133] Bluetooth: hci3: unexpected event for opcode 0x0025 [ 579.130912][ T5133] Bluetooth: hci2: unexpected event for opcode 0x0025 [ 579.648650][ T7975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.687184][ T7975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.161942][ T7978] __nla_validate_parse: 278 callbacks suppressed [ 580.161965][ T7978] netlink: 3 bytes leftover after parsing attributes in process `syz.3.576'. [ 580.178250][ T7978] netlink: 3 bytes leftover after parsing attributes in process `syz.3.576'. [ 580.187081][ T7978] netlink: 3 bytes leftover after parsing attributes in process `syz.3.576'. [ 580.195925][ T7978] netlink: 3 bytes leftover after parsing attributes in process `syz.3.576'. [ 580.204735][ T7978] netlink: 3 bytes leftover after parsing attributes in process `syz.3.576'. [ 580.213741][ T7978] netlink: 3 bytes leftover after parsing attributes in process `syz.3.576'. [ 580.222580][ T7978] netlink: 3 bytes leftover after parsing attributes in process `syz.3.576'. [ 580.231356][ T7978] netlink: 3 bytes leftover after parsing attributes in process `syz.3.576'. [ 580.240165][ T7978] netlink: 3 bytes leftover after parsing attributes in process `syz.3.576'. [ 580.249113][ T7978] netlink: 3 bytes leftover after parsing attributes in process `syz.3.576'. [ 581.770835][ T7991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.895545][ T7991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.532678][ T11] block nbd0: Possible stuck request ffff888026c08000: control (read@0,1024B). Runtime 150 seconds [ 586.543478][ T11] block nbd0: Possible stuck request ffff888026c08200: control (read@1024,1024B). Runtime 150 seconds [ 586.554780][ T11] block nbd0: Possible stuck request ffff888026c08400: control (read@2048,1024B). Runtime 150 seconds [ 586.565939][ T11] block nbd0: Possible stuck request ffff888026c08600: control (read@3072,1024B). Runtime 150 seconds [ 586.927799][ T980] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 587.082488][ T980] usb 3-1: Using ep0 maxpacket: 8 [ 587.100321][ T980] usb 3-1: config 0 interface 0 has no altsetting 0 [ 587.107277][ T980] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 587.116964][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.135273][ T980] usb 3-1: config 0 descriptor?? [ 587.560901][ T980] usbhid 3-1:0.0: can't add hid device: -71 [ 587.567323][ T980] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 587.591495][ T980] usb 3-1: USB disconnect, device number 6 [ 587.958584][ T8032] lo speed is unknown, defaulting to 1000 [ 588.652175][ T89] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 588.872113][ T89] usb 2-1: Using ep0 maxpacket: 8 [ 588.898903][ T89] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 588.908692][ T89] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.972724][ T89] pvrusb2: Hardware description: Terratec Grabster AV400 [ 588.985086][ T89] pvrusb2: ********** [ 588.994092][ T89] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 589.012459][ T89] pvrusb2: Important functionality might not be entirely working. [ 589.027684][ T89] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 589.054295][ T89] pvrusb2: ********** [ 589.232711][ T2341] pvrusb2: Invalid write control endpoint [ 589.331878][ T2341] pvrusb2: Invalid write control endpoint [ 589.353059][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 589.376577][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 589.395307][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 589.408812][ T2341] pvrusb2: Device being rendered inoperable [ 589.450406][ T5921] usb 2-1: USB disconnect, device number 12 [ 589.465528][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 589.484477][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 589.510653][ T2341] pvrusb2: Attached sub-driver cx25840 [ 589.523046][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 589.540981][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 590.162146][ T5921] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 590.512114][ T5921] usb 4-1: Using ep0 maxpacket: 8 [ 590.519767][ T5921] usb 4-1: config 0 interface 0 has no altsetting 0 [ 590.526944][ T5921] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 590.536491][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.561072][ T5921] usb 4-1: config 0 descriptor?? [ 591.005734][ T8074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.024227][ T8074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.058739][ T5921] usbhid 4-1:0.0: can't add hid device: -71 [ 591.065093][ T5921] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 591.076141][ T5921] usb 4-1: USB disconnect, device number 8 [ 594.808959][ T8094] lo speed is unknown, defaulting to 1000 [ 595.079921][ T8105] pimreg: entered allmulticast mode [ 596.020553][ T8122] __nla_validate_parse: 136 callbacks suppressed [ 596.020592][ T8122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.613'. [ 596.702206][ T5929] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 596.852249][ T5929] usb 2-1: Using ep0 maxpacket: 8 [ 596.860037][ T5929] usb 2-1: config 0 interface 0 has no altsetting 0 [ 596.874925][ T5929] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 597.010339][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.039720][ T5929] usb 2-1: config 0 descriptor?? [ 597.941272][ T8139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.950230][ T8139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.980263][ T5929] usbhid 2-1:0.0: can't add hid device: -71 [ 597.995258][ T5929] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 598.029304][ T5929] usb 2-1: USB disconnect, device number 13 [ 599.748833][ T8163] sp0: Synchronizing with TNC [ 600.193966][ T8165] lo speed is unknown, defaulting to 1000 [ 600.794719][ T8169] tipc: Enabling of bearer rejected, failed to enable media [ 601.975031][ T5929] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 602.162092][ T5929] usb 4-1: Using ep0 maxpacket: 32 [ 602.653892][ T5929] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 602.665183][ T5929] usb 4-1: config 0 has no interface number 0 [ 602.671333][ T5929] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 602.681911][ T5929] usb 4-1: config 0 interface 126 has no altsetting 0 [ 602.692855][ T5929] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 602.705438][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.714711][ T5929] usb 4-1: Product: syz [ 602.718949][ T5929] usb 4-1: Manufacturer: syz [ 602.724686][ T5929] usb 4-1: SerialNumber: syz [ 602.748148][ T5929] usb 4-1: config 0 descriptor?? [ 602.759337][ T8168] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 603.324213][ T30] audit: type=1400 audit(1769442586.025:309): avc: denied { read } for pid=8184 comm="syz.1.633" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 603.524424][ T30] audit: type=1400 audit(1769442586.025:310): avc: denied { open } for pid=8184 comm="syz.1.633" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 604.072273][ T8192] sp0: Synchronizing with TNC [ 604.087418][ T8192] netlink: 36 bytes leftover after parsing attributes in process `syz.0.632'. [ 604.485000][ T8194] lo speed is unknown, defaulting to 1000 [ 606.181888][ T5929] ir_usb 4-1:0.126: required endpoints missing [ 606.220915][ T5929] usb 4-1: USB disconnect, device number 9 [ 609.292160][ T8205] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 609.302847][ T8205] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 612.675336][ T8235] netlink: 'syz.3.648': attribute type 40 has an invalid length. [ 614.312141][ T5857] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 614.587034][ T5857] usb 4-1: Using ep0 maxpacket: 8 [ 614.611840][ T5857] usb 4-1: unable to get BOS descriptor or descriptor too short [ 614.623234][ T5857] usb 4-1: config 4 interface 0 has no altsetting 0 [ 614.653335][ T5857] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 614.736616][ T8253] sp0: Synchronizing with TNC [ 614.755747][ T8253] netlink: 36 bytes leftover after parsing attributes in process `syz.0.646'. [ 615.106903][ T8255] lo speed is unknown, defaulting to 1000 [ 615.608877][ T5857] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 616.613023][ T5857] usb 4-1: Manufacturer: syz [ 616.613564][ T11] block nbd0: Possible stuck request ffff888026c08000: control (read@0,1024B). Runtime 180 seconds [ 616.671092][ T11] block nbd0: Possible stuck request ffff888026c08200: control (read@1024,1024B). Runtime 180 seconds [ 616.682128][ T11] block nbd0: Possible stuck request ffff888026c08400: control (read@2048,1024B). Runtime 180 seconds [ 616.762114][ T11] block nbd0: Possible stuck request ffff888026c08600: control (read@3072,1024B). Runtime 180 seconds [ 617.075786][ T5857] usb 4-1: SerialNumber: syz [ 617.102283][ T5857] usb 4-1: can't set config #4, error -71 [ 617.120941][ T5857] usb 4-1: USB disconnect, device number 10 [ 617.474550][ T8266] input: syz1 as /devices/virtual/input/input14 [ 617.490583][ T30] audit: type=1400 audit(1769442600.165:311): avc: denied { ioctl } for pid=8265 comm="syz.0.655" path="/dev/input/event2" dev="devtmpfs" ino=922 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 617.608509][ T8269] netlink: 44 bytes leftover after parsing attributes in process `syz.2.657'. [ 617.659954][ T30] audit: type=1400 audit(1769442600.365:312): avc: denied { setopt } for pid=8265 comm="syz.0.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 617.671801][ T8269] netlink: 44 bytes leftover after parsing attributes in process `syz.2.657'. [ 617.781853][ T8278] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 617.788413][ T8278] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 617.800421][ T8278] vhci_hcd vhci_hcd.0: Device attached [ 617.931184][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 617.992172][ T5921] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 618.086731][ T89] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 618.122518][ T5929] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 618.132160][ T9] usb 1-1: too many configurations: 17, using maximum allowed: 8 [ 618.141467][ T9] usb 1-1: config 0 has an invalid interface number: 6 but max is 0 [ 618.150551][ T5921] usb 4-1: Using ep0 maxpacket: 16 [ 618.155870][ T9] usb 1-1: config 0 has no interface number 0 [ 618.164980][ T5921] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 618.175454][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 618.186714][ T5921] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 618.186933][ T9] usb 1-1: config 0 has an invalid interface number: 6 but max is 0 [ 618.205971][ T5921] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 618.219500][ T9] usb 1-1: config 0 has no interface number 0 [ 618.226985][ T9] usb 1-1: config 0 has an invalid interface number: 6 but max is 0 [ 618.235200][ T9] usb 1-1: config 0 has no interface number 0 [ 618.242438][ T9] usb 1-1: config 0 has an invalid interface number: 6 but max is 0 [ 618.250652][ T5921] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 618.259875][ T9] usb 1-1: config 0 has no interface number 0 [ 618.266061][ T5921] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 618.274341][ T5921] usb 4-1: Manufacturer: syz [ 618.286919][ T9] usb 1-1: config 0 has an invalid interface number: 6 but max is 0 [ 618.295186][ T9] usb 1-1: config 0 has no interface number 0 [ 618.310103][ T5921] usb 4-1: config 0 descriptor?? [ 618.316972][ T9] usb 1-1: config 0 has an invalid interface number: 6 but max is 0 [ 618.325425][ T9] usb 1-1: config 0 has no interface number 0 [ 618.332512][ T5929] usb 3-1: config 0 has no interfaces? [ 618.339668][ T9] usb 1-1: config 0 has an invalid interface number: 6 but max is 0 [ 618.355706][ T5929] usb 3-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 618.366827][ T9] usb 1-1: config 0 has no interface number 0 [ 618.373254][ T5929] usb 3-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 618.381571][ T5929] usb 3-1: Manufacturer: syz [ 618.387390][ T9] usb 1-1: config 0 has an invalid interface number: 6 but max is 0 [ 618.397024][ T9] usb 1-1: config 0 has no interface number 0 [ 618.404660][ T5929] usb 3-1: config 0 descriptor?? [ 618.413392][ T9] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 618.422729][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.430766][ T9] usb 1-1: Product: syz [ 618.435359][ T9] usb 1-1: Manufacturer: syz [ 618.440016][ T9] usb 1-1: SerialNumber: syz [ 618.449403][ T9] usb 1-1: config 0 descriptor?? [ 618.458981][ T9] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 618.478722][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 618.488940][ T9] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 618.499002][ T9] usb 1-1: media controller created [ 618.518322][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 618.586762][ T9] DVB: Unable to find symbol mt352_attach() [ 618.625706][ T8279] vhci_hcd: cannot find a urb of seqnum 42560 max seqnum 1 [ 618.629981][ T5929] usb 3-1: USB disconnect, device number 7 [ 618.643403][ T33] vhci_hcd vhci_hcd.2: stop threads [ 618.652994][ T33] vhci_hcd vhci_hcd.2: release socket [ 618.663405][ T33] vhci_hcd vhci_hcd.2: disconnect device [ 618.669419][ T9] DVB: Unable to find symbol nxt6000_attach() [ 618.676319][ T9] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 618.705431][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input15 [ 618.741804][ T9] dvb-usb: schedule remote query interval to 1000 msecs. [ 618.749000][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 618.765321][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 618.774064][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 618.783847][ T9] usb 1-1: USB disconnect, device number 10 [ 618.842766][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 619.427754][ T8288] netlink: 'syz.2.661': attribute type 40 has an invalid length. [ 620.067975][ T30] audit: type=1400 audit(1769442602.775:313): avc: denied { read write } for pid=8297 comm="syz.4.665" name="sg0" dev="devtmpfs" ino=795 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 621.160767][ T30] audit: type=1400 audit(1769442602.805:314): avc: denied { open } for pid=8297 comm="syz.4.665" path="/dev/sg0" dev="devtmpfs" ino=795 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 621.297012][ T8303] netlink: 36 bytes leftover after parsing attributes in process `syz.1.664'. [ 621.339008][ T8300] sp0: Synchronizing with TNC [ 621.411557][ T5972] usb 4-1: USB disconnect, device number 11 [ 621.892250][ T8303] lo speed is unknown, defaulting to 1000 [ 622.318049][ T30] audit: type=1400 audit(1769442604.995:315): avc: denied { read } for pid=8305 comm="syz.4.666" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 622.528920][ T30] audit: type=1400 audit(1769442604.995:316): avc: denied { open } for pid=8305 comm="syz.4.666" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 622.674822][ T30] audit: type=1400 audit(1769442605.145:317): avc: denied { ioctl } for pid=8308 comm="syz.2.667" path="socket:[18404]" dev="sockfs" ino=18404 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 622.784721][ T30] audit: type=1400 audit(1769442605.145:318): avc: denied { nlmsg_read } for pid=8308 comm="syz.2.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 622.849729][ T30] audit: type=1400 audit(1769442605.155:319): avc: denied { unmount } for pid=8308 comm="syz.2.667" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 623.522462][ T89] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 623.903952][ T8337] netlink: 24 bytes leftover after parsing attributes in process `syz.2.674'. [ 623.955921][ T8339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.674'. [ 624.018458][ T8339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.674'. [ 624.322670][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.178981][ T8360] netlink: 'syz.4.678': attribute type 40 has an invalid length. [ 625.262150][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 625.414119][ T9] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 625.931687][ T8356] sp0: Synchronizing with TNC [ 625.937784][ T8356] netlink: 36 bytes leftover after parsing attributes in process `syz.2.680'. [ 626.020383][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.121340][ T8356] lo speed is unknown, defaulting to 1000 [ 626.223341][ T9] usb 2-1: config 0 descriptor?? [ 626.244143][ T9] cp210x 2-1:0.0: cp210x converter detected [ 626.655272][ T9] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 626.669099][ T9] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -121 [ 626.685717][ T9] cp210x 2-1:0.0: GPIO initialisation failed: -121 [ 626.712168][ T9] usb 2-1: cp210x converter now attached to ttyUSB0 [ 626.880877][ T89] usb 2-1: USB disconnect, device number 14 [ 626.889355][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 626.907699][ T89] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 626.922798][ T89] cp210x 2-1:0.0: device disconnected [ 627.031639][ T8385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.053264][ T8385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.073994][ T9] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 627.088176][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.100944][ T9] usb 3-1: config 0 descriptor?? [ 627.114862][ T9] cp210x 3-1:0.0: cp210x converter detected [ 627.517927][ T9] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 627.528042][ T9] cp210x 3-1:0.0: GPIO initialisation failed: -524 [ 627.539125][ T9] usb 3-1: cp210x converter now attached to ttyUSB0 [ 627.745510][ T5857] usb 3-1: USB disconnect, device number 8 [ 627.757124][ T5857] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 627.768754][ T5857] cp210x 3-1:0.0: device disconnected [ 628.420849][ T8398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.690'. [ 628.759924][ T8405] netlink: 'syz.4.692': attribute type 40 has an invalid length. [ 629.863332][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 630.033012][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 630.039944][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 630.062134][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 630.071793][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 630.102122][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 630.118542][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 630.129121][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 630.138306][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.148219][ T9] usb 3-1: config 0 descriptor?? [ 630.154220][ T8427] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 630.243984][ T8443] netlink: 'syz.4.702': attribute type 40 has an invalid length. [ 630.617453][ T5863] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 630.627897][ T5857] usb 3-1: USB disconnect, device number 9 [ 631.565284][ T5863] Bluetooth: hci4: command 0x0406 tx timeout [ 631.662992][ T30] audit: type=1400 audit(1769442614.375:320): avc: denied { lock } for pid=8456 comm="syz.4.709" path="/dev/video1" dev="devtmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 634.888711][ T5863] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 634.900244][ T5863] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 634.913691][ T5863] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 634.923704][ T5863] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 634.941904][ T5863] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 635.157400][ T8501] lo speed is unknown, defaulting to 1000 [ 635.705404][ T8501] chnl_net:caif_netlink_parms(): no params data found [ 636.863991][ T8501] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.878352][ T8501] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.886131][ T8501] bridge_slave_0: entered allmulticast mode [ 636.896883][ T8501] bridge_slave_0: entered promiscuous mode [ 636.918988][ T8501] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.933299][ T8501] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.943868][ T8501] bridge_slave_1: entered allmulticast mode [ 636.974590][ T8501] bridge_slave_1: entered promiscuous mode [ 637.012276][ T5863] Bluetooth: hci6: command tx timeout [ 637.890132][ T8501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 637.926721][ T8501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 638.104398][ T8501] team0: Port device team_slave_0 added [ 638.144427][ T8501] team0: Port device team_slave_1 added [ 638.257677][ T8501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 638.286334][ T8501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 638.742755][ T30] audit: type=1400 audit(1769442621.165:321): avc: denied { write } for pid=8525 comm="syz.1.731" path="socket:[19185]" dev="sockfs" ino=19185 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 638.801639][ T8501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 638.849591][ T8501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 638.874333][ T8501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 638.950932][ T8501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 639.142076][ T5863] Bluetooth: hci6: command tx timeout [ 639.237162][ T8501] hsr_slave_0: entered promiscuous mode [ 639.812627][ T8501] hsr_slave_1: entered promiscuous mode [ 639.838987][ T8501] debugfs: 'hsr0' already exists in 'hsr' [ 639.852198][ T8501] Cannot create hsr debugfs directory [ 640.901073][ T5929] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 640.918033][ T8565] netlink: 'syz.2.744': attribute type 40 has an invalid length. [ 640.987495][ T8501] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 641.018589][ T8501] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 641.044076][ T8501] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 641.058221][ T8501] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 641.083760][ T5929] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 641.112748][ T5929] usb 4-1: config 0 has no interface number 0 [ 641.128030][ T5929] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 641.150973][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.169615][ T5929] usb 4-1: Product: syz [ 641.175142][ T5863] Bluetooth: hci6: command tx timeout [ 641.191738][ T5929] usb 4-1: Manufacturer: syz [ 641.197526][ T5929] usb 4-1: SerialNumber: syz [ 641.215559][ T5929] usb 4-1: config 0 descriptor?? [ 641.374489][ T8501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 641.442419][ T5929] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 641.777428][ T8501] 8021q: adding VLAN 0 to HW filter on device team0 [ 641.807185][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.814335][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 641.822552][ T5929] usb 4-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2 [ 641.842616][ T30] audit: type=1400 audit(1769442624.535:322): avc: denied { firmware_load } for pid=5929 comm="kworker/0:5" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 641.876320][ T5929] usb 4-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw [ 641.898849][ T5973] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.906036][ T5973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 642.158255][ T8587] block nbd2: shutting down sockets [ 642.569156][ T8501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 643.493229][ T5863] Bluetooth: hci6: command tx timeout [ 644.100623][ T8501] veth0_vlan: entered promiscuous mode [ 644.177318][ T8501] veth1_vlan: entered promiscuous mode [ 644.305788][ T8501] veth0_macvtap: entered promiscuous mode [ 644.329234][ T8618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.349505][ T8501] veth1_macvtap: entered promiscuous mode [ 644.385452][ T8618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.251534][ T8501] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 645.275758][ T8501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 645.337851][ T5973] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.365019][ T5973] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.424546][ T5973] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.521962][ T30] audit: type=1400 audit(1769442628.225:323): avc: denied { read write } for pid=8623 comm="syz.2.758" name="mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 645.577734][ T5973] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.587908][ T8624] 9p: Bad value for 'rfdno' [ 645.618385][ T30] audit: type=1400 audit(1769442628.235:324): avc: denied { open } for pid=8623 comm="syz.2.758" path="/dev/input/mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 646.002580][ T6079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.010444][ T6079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.362142][ T6079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.370027][ T6079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.596069][ T30] audit: type=1400 audit(1769442629.305:325): avc: denied { mounton } for pid=8501 comm="syz-executor" path="/root/syzkaller.TiwkUc/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=20943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 646.807115][ T11] block nbd0: Possible stuck request ffff888026c08000: control (read@0,1024B). Runtime 210 seconds [ 646.818059][ T11] block nbd0: Possible stuck request ffff888026c08200: control (read@1024,1024B). Runtime 210 seconds [ 646.852485][ T11] block nbd0: Possible stuck request ffff888026c08400: control (read@2048,1024B). Runtime 210 seconds [ 646.863519][ T11] block nbd0: Possible stuck request ffff888026c08600: control (read@3072,1024B). Runtime 210 seconds [ 646.902804][ T30] audit: type=1400 audit(1769442629.305:326): avc: denied { unmount } for pid=8501 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 646.974109][ T8640] binder: 8637:8640 ioctl 4018620d 0 returned -22 [ 647.092132][ T5857] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 647.285565][ T5857] usb 3-1: Using ep0 maxpacket: 8 [ 647.310101][ T5857] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 647.334975][ T5857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.388871][ T5857] pvrusb2: Hardware description: Terratec Grabster AV400 [ 647.433142][ T5857] pvrusb2: ********** [ 647.454498][ T5857] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 647.494379][ T8654] netlink: 24 bytes leftover after parsing attributes in process `syz.1.769'. [ 647.552073][ T5857] pvrusb2: Important functionality might not be entirely working. [ 647.600723][ T8658] 9p: Bad value for 'rfdno' [ 647.641908][ T5857] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 647.698649][ T5857] pvrusb2: ********** [ 647.789708][ T2341] pvrusb2: Invalid write control endpoint [ 648.505598][ T5972] usb 3-1: USB disconnect, device number 10 [ 648.633214][ T2341] pvrusb2: Invalid write control endpoint [ 648.638975][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 648.704008][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 648.744451][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 648.767014][ T2341] pvrusb2: Device being rendered inoperable [ 648.794260][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 648.801358][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 648.849438][ T2341] pvrusb2: Attached sub-driver cx25840 [ 648.867414][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 648.878780][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 650.237985][ T8685] netlink: 36 bytes leftover after parsing attributes in process `syz.5.776'. [ 650.359962][ T8689] input: syz1 as /devices/virtual/input/input16 [ 651.752104][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 652.107202][ T8704] 9p: Bad value for 'rfdno' [ 652.142820][ T9] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 652.162466][ T9] usb 2-1: config 0 has an invalid interface number: 6 but max is 0 [ 652.170525][ T9] usb 2-1: config 0 has no interface number 0 [ 652.198170][ T9] usb 2-1: config 0 has an invalid interface number: 6 but max is 0 [ 652.209120][ T9] usb 2-1: config 0 has no interface number 0 [ 652.225229][ T9] usb 2-1: config 0 has an invalid interface number: 6 but max is 0 [ 652.335960][ T9] usb 2-1: config 0 has no interface number 0 [ 652.372918][ T9] usb 2-1: config 0 has an invalid interface number: 6 but max is 0 [ 652.389256][ T9] usb 2-1: config 0 has no interface number 0 [ 652.412752][ T9] usb 2-1: config 0 has an invalid interface number: 6 but max is 0 [ 652.432175][ T9] usb 2-1: config 0 has no interface number 0 [ 652.482094][ T9] usb 2-1: config 0 has an invalid interface number: 6 but max is 0 [ 652.511104][ T9] usb 2-1: config 0 has no interface number 0 [ 652.533247][ T9] usb 2-1: config 0 has an invalid interface number: 6 but max is 0 [ 652.572095][ T9] usb 2-1: config 0 has no interface number 0 [ 652.601363][ T9] usb 2-1: config 0 has an invalid interface number: 6 but max is 0 [ 652.632087][ T9] usb 2-1: config 0 has no interface number 0 [ 652.705418][ T9] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 652.714705][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.723042][ T9] usb 2-1: Product: syz [ 652.732349][ T9] usb 2-1: Manufacturer: syz [ 652.736971][ T9] usb 2-1: SerialNumber: syz [ 652.753510][ T9] usb 2-1: config 0 descriptor?? [ 652.773987][ T9] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 652.808736][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 652.865040][ T9] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 652.892171][ T9] usb 2-1: media controller created [ 652.935200][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 653.003590][ T8689] digitv: more than 2 i2c messages at a time is not handled yet. TODO. [ 653.301048][ T9] DVB: Unable to find symbol mt352_attach() [ 653.628083][ T9] DVB: Unable to find symbol nxt6000_attach() [ 653.644678][ T9] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 654.264088][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input17 [ 654.313153][ T9] dvb-usb: schedule remote query interval to 1000 msecs. [ 654.332133][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 654.413323][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 654.422260][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 654.752477][ T9] usb 2-1: USB disconnect, device number 15 [ 655.833329][ T30] audit: type=1400 audit(1769442638.035:327): avc: denied { mount } for pid=8731 comm="syz.3.789" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 655.858261][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 656.292581][ T8739] tipc: Enabling of bearer rejected, already enabled [ 658.191209][ T8750] 9p: Bad value for 'rfdno' [ 658.482105][ T5972] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 658.685367][ T5972] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 658.697527][ T5972] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 658.734468][ T5972] usb 6-1: config 0 has no interface number 0 [ 658.808491][ T5972] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 658.902141][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 659.068124][ T5972] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 659.102837][ T5972] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 659.114095][ T5972] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.232724][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 659.242581][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 659.251766][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.279774][ T5972] usb 6-1: Product: syz [ 659.288552][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 659.295715][ T5972] usb 6-1: Manufacturer: syz [ 659.300734][ T9] pvrusb2: ********** [ 659.319908][ T8767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.799'. [ 659.322308][ T5972] usb 6-1: SerialNumber: syz [ 659.367373][ T5972] usb 6-1: config 0 descriptor?? [ 659.403156][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 659.418921][ T9] pvrusb2: Important functionality might not be entirely working. [ 659.436310][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 659.459851][ T9] pvrusb2: ********** [ 659.491431][ T2341] pvrusb2: Invalid write control endpoint [ 660.905049][ T2341] pvrusb2: Invalid write control endpoint [ 660.910812][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 660.920489][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 660.929423][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 660.940477][ T2341] pvrusb2: Device being rendered inoperable [ 661.111951][ T8760] pvrusb2: Attempted to execute control transfer when device not ok [ 661.173174][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 661.186776][ T5971] usb 3-1: USB disconnect, device number 11 [ 661.211793][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 661.332941][ T2341] pvrusb2: Attached sub-driver cx25840 [ 661.338429][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 661.421932][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 662.375060][ T89] usb 6-1: USB disconnect, device number 2 [ 663.023483][ T8784] Trying to write to read-only block-device nullb0 [ 663.369306][ T30] audit: type=1400 audit(1769442645.455:328): avc: denied { map } for pid=8779 comm="syz.2.802" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 663.429701][ T8783] pimreg3: entered allmulticast mode [ 663.462333][ T30] audit: type=1400 audit(1769442645.455:329): avc: denied { execute } for pid=8779 comm="syz.2.802" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 666.478881][ T8811] tipc: Enabled bearer , priority 0 [ 666.499233][ T8811] syzkaller0: entered promiscuous mode [ 666.521948][ T8811] syzkaller0: entered allmulticast mode [ 666.555960][ T8811] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 666.596526][ T8811] tipc: Resetting bearer [ 666.607177][ T8810] tipc: Resetting bearer [ 666.628672][ T8810] tipc: Disabling bearer [ 666.852822][ T89] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 667.014256][ T89] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 667.022833][ T89] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 667.038560][ T89] usb 3-1: config 0 has no interface number 0 [ 667.051509][ T89] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 667.153012][ T89] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 667.192998][ T89] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 667.202800][ T89] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.213160][ T89] usb 3-1: Product: syz [ 667.220453][ T89] usb 3-1: Manufacturer: syz [ 667.236468][ T89] usb 3-1: SerialNumber: syz [ 667.251699][ T89] usb 3-1: config 0 descriptor?? [ 667.621023][ T8829] pimreg3: entered allmulticast mode [ 668.904435][ T5863] Bluetooth: hci6: command tx timeout [ 669.244172][ T43] usb 3-1: USB disconnect, device number 12 [ 669.986395][ T8857] siw: device registration error -23 [ 670.344909][ T43] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 670.522106][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 670.636790][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 670.694809][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 670.751163][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 670.795284][ T43] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 670.819788][ T43] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 670.887559][ T43] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 671.042137][ T43] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 671.062283][ T43] usb 3-1: Manufacturer: syz [ 672.603065][ T43] usb 3-1: config 0 descriptor?? [ 672.649753][ T8879] tipc: Enabled bearer , priority 0 [ 672.658917][ T8879] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 673.991623][ T8886] tipc: Resetting bearer [ 674.217095][ T8878] tipc: Disabling bearer [ 674.326001][ T43] rc_core: IR keymap rc-hauppauge not found [ 674.331936][ T43] Registered IR keymap rc-empty [ 674.351646][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 674.403491][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 674.715809][ T8897] pimreg3: entered allmulticast mode [ 674.723121][ T43] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 674.791354][ T43] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input20 [ 674.832119][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 674.862153][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 675.908049][ T8899] xt_CT: No such helper "snmp_trap" [ 675.933044][ T30] audit: type=1400 audit(1769442658.645:330): avc: denied { create } for pid=8898 comm="syz.1.838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 675.977241][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 676.004550][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 676.022382][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 676.061965][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 676.092199][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 676.115994][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 676.180580][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 676.223294][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 676.275532][ T43] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 676.308802][ T43] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 676.368485][ T43] usb 3-1: USB disconnect, device number 13 [ 677.533811][ T11] block nbd0: Possible stuck request ffff888026c08000: control (read@0,1024B). Runtime 240 seconds [ 677.544665][ T11] block nbd0: Possible stuck request ffff888026c08200: control (read@1024,1024B). Runtime 240 seconds [ 677.558494][ T11] block nbd0: Possible stuck request ffff888026c08400: control (read@2048,1024B). Runtime 240 seconds [ 677.569573][ T11] block nbd0: Possible stuck request ffff888026c08600: control (read@3072,1024B). Runtime 240 seconds [ 678.082253][ T43] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 678.262460][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 678.358491][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 678.389801][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 678.422121][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 678.431876][ T43] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 678.455592][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 678.552181][ T43] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 678.567698][ T43] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 678.592259][ T43] usb 2-1: Manufacturer: syz [ 678.713176][ T43] usb 2-1: config 0 descriptor?? [ 678.957214][ T5971] IPVS: starting estimator thread 0... [ 678.977171][ T8933] syzkaller0: entered promiscuous mode [ 678.983264][ T8933] syzkaller0: entered allmulticast mode [ 678.992822][ T43] rc_core: IR keymap rc-hauppauge not found [ 678.996607][ T8933] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 678.998745][ T43] Registered IR keymap rc-empty [ 679.043120][ T43] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 679.072158][ T8936] IPVS: using max 65 ests per chain, 156000 per kthread [ 679.084597][ T43] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 679.132951][ T43] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 679.188971][ T43] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input21 [ 679.208074][ T30] audit: type=1400 audit(1769442661.915:331): avc: denied { write } for pid=8939 comm="syz.5.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 679.280736][ T43] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 679.462156][ T43] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 679.492161][ T43] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 679.513251][ T43] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 679.566250][ T8954] netlink: 3 bytes leftover after parsing attributes in process `syz.4.851'. [ 679.575261][ T8954] netlink: 3 bytes leftover after parsing attributes in process `syz.4.851'. [ 679.586513][ T8954] netlink: 3 bytes leftover after parsing attributes in process `syz.4.851'. [ 679.595546][ T8954] netlink: 3 bytes leftover after parsing attributes in process `syz.4.851'. [ 679.606693][ T8954] netlink: 3 bytes leftover after parsing attributes in process `syz.4.851'. [ 679.615630][ T8954] netlink: 3 bytes leftover after parsing attributes in process `syz.4.851'. [ 679.626565][ T8954] netlink: 3 bytes leftover after parsing attributes in process `syz.4.851'. [ 679.635476][ T8954] netlink: 3 bytes leftover after parsing attributes in process `syz.4.851'. [ 679.646284][ T8954] netlink: 3 bytes leftover after parsing attributes in process `syz.4.851'. [ 679.655689][ T8954] netlink: 3 bytes leftover after parsing attributes in process `syz.4.851'. [ 680.142163][ T8956] lo speed is unknown, defaulting to 1000 [ 680.447308][ T5922] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 680.504848][ T43] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 680.542115][ T43] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 680.829137][ T43] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 680.892183][ T5922] usb 6-1: Using ep0 maxpacket: 16 [ 680.899079][ T5922] usb 6-1: config 157 has an invalid descriptor of length 0, skipping remainder of the config [ 680.912492][ T7353] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 680.922202][ T43] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 680.941360][ T5922] usb 6-1: config 157 has 0 interfaces, different from the descriptor's value: 1 [ 680.952613][ T43] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 680.975189][ T5922] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 680.982547][ T43] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 681.005142][ T5922] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.024040][ T43] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 681.040307][ T5922] usb 6-1: Product: syz [ 681.041890][ T43] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 681.052112][ T5922] usb 6-1: Manufacturer: syz [ 681.071768][ T5922] usb 6-1: SerialNumber: syz [ 681.078331][ T43] usb 2-1: USB disconnect, device number 16 [ 681.084441][ T7353] usb 3-1: Using ep0 maxpacket: 8 [ 681.098477][ T7353] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 681.180329][ T7353] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.241662][ T7353] pvrusb2: Hardware description: Terratec Grabster AV400 [ 681.264534][ T7353] pvrusb2: ********** [ 681.268571][ T7353] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 681.301031][ T7353] pvrusb2: Important functionality might not be entirely working. [ 681.326883][ T7353] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 681.342119][ T7353] pvrusb2: ********** [ 681.542533][ T2341] pvrusb2: Invalid write control endpoint [ 681.695270][ T7353] usb 3-1: USB disconnect, device number 14 [ 681.777661][ T2341] pvrusb2: Invalid write control endpoint [ 681.804298][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 681.848865][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 681.869160][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 681.910264][ T2341] pvrusb2: Device being rendered inoperable [ 681.938801][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 681.971774][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 682.005938][ T2341] pvrusb2: Attached sub-driver cx25840 [ 682.021298][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 682.066645][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 683.392546][ T8991] sp0: Synchronizing with TNC [ 683.591922][ T8991] lo speed is unknown, defaulting to 1000 [ 684.006590][ T5922] usb 6-1: USB disconnect, device number 3 [ 685.212205][ T9008] __nla_validate_parse: 274 callbacks suppressed [ 685.212225][ T9008] netlink: 24 bytes leftover after parsing attributes in process `syz.3.867'. [ 685.740835][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.367829][ T9008] netlink: 12 bytes leftover after parsing attributes in process `syz.3.867'. [ 686.802851][ T89] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 686.982752][ T89] usb 2-1: Using ep0 maxpacket: 8 [ 686.989770][ T89] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 687.004547][ T89] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.031904][ T89] pvrusb2: Hardware description: Terratec Grabster AV400 [ 687.050604][ T89] pvrusb2: ********** [ 687.118257][ T89] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 687.157261][ T89] pvrusb2: Important functionality might not be entirely working. [ 687.190452][ T89] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 687.209600][ T89] pvrusb2: ********** [ 687.231535][ T2341] pvrusb2: Invalid write control endpoint [ 687.384487][ T2341] pvrusb2: Invalid write control endpoint [ 687.426618][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 687.454501][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 687.466642][ T89] usb 2-1: USB disconnect, device number 17 [ 687.478005][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 687.511210][ T2341] pvrusb2: Device being rendered inoperable [ 687.521598][ T9055] syzkaller0: entered promiscuous mode [ 687.537358][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 687.547039][ T9055] syzkaller0: entered allmulticast mode [ 687.558316][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 687.574821][ T9055] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 687.585431][ T2341] pvrusb2: Attached sub-driver cx25840 [ 687.591706][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 687.611712][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 689.460257][ T9079] binder: 9078:9079 ioctl c0306201 0 returned -14 [ 691.020269][ T9101] netlink: 'syz.4.894': attribute type 40 has an invalid length. [ 692.581686][ T9104] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 692.747763][ T9115] fuse: Bad value for 'group_id' [ 692.763690][ T9115] fuse: Bad value for 'group_id' [ 694.455288][ T9134] netlink: 24 bytes leftover after parsing attributes in process `syz.1.908'. [ 694.726245][ T9138] netlink: 12 bytes leftover after parsing attributes in process `syz.1.908'. [ 695.298215][ T9144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.909'. [ 695.472279][ T5921] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 695.660543][ T5921] usb 6-1: Using ep0 maxpacket: 8 [ 695.668141][ T5921] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 695.703187][ T5921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.756490][ T5921] pvrusb2: Hardware description: Terratec Grabster AV400 [ 695.780242][ T5921] pvrusb2: ********** [ 695.785536][ T5921] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 695.797596][ T5921] pvrusb2: Important functionality might not be entirely working. [ 695.808232][ T5921] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 695.822542][ T5921] pvrusb2: ********** [ 695.951767][ T2341] pvrusb2: Invalid write control endpoint [ 695.960534][ T5921] usb 6-1: USB disconnect, device number 4 [ 696.167797][ T2341] pvrusb2: Invalid write control endpoint [ 696.183301][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 696.222656][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 696.225291][ T9154] fuse: Bad value for 'group_id' [ 696.260774][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 696.267492][ T9154] fuse: Bad value for 'group_id' [ 696.297042][ T2341] pvrusb2: Device being rendered inoperable [ 696.313817][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 696.338742][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 696.381699][ T2341] pvrusb2: Attached sub-driver cx25840 [ 696.393804][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 696.507443][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 696.931504][ T9164] 9p: Bad value for 'rfdno' [ 697.209185][ T9168] netlink: 3 bytes leftover after parsing attributes in process `syz.1.917'. [ 697.218180][ T9168] netlink: 3 bytes leftover after parsing attributes in process `syz.1.917'. [ 697.229520][ T9168] netlink: 3 bytes leftover after parsing attributes in process `syz.1.917'. [ 697.238476][ T9168] netlink: 3 bytes leftover after parsing attributes in process `syz.1.917'. [ 697.249574][ T9168] netlink: 3 bytes leftover after parsing attributes in process `syz.1.917'. [ 697.258493][ T9168] netlink: 3 bytes leftover after parsing attributes in process `syz.1.917'. [ 697.269359][ T9168] netlink: 3 bytes leftover after parsing attributes in process `syz.1.917'. [ 697.611695][ T43] lo speed is unknown, defaulting to 1000 [ 697.884192][ T9170] lo speed is unknown, defaulting to 1000 [ 702.496126][ T9189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.503179][ T9179] block nbd2: shutting down sockets [ 702.517692][ T9189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.423241][ T9200] fuse: Bad value for 'group_id' [ 703.442226][ T9200] fuse: Bad value for 'group_id' [ 704.312320][ T9206] __nla_validate_parse: 141 callbacks suppressed [ 704.313477][ T9206] netlink: 24 bytes leftover after parsing attributes in process `syz.2.928'. [ 704.621887][ T9213] 9p: Bad value for 'rfdno' [ 705.031713][ T9208] orangefs_mount: mount request failed with -4 [ 705.359962][ T9223] netlink: 24 bytes leftover after parsing attributes in process `syz.2.932'. [ 706.072104][ T9231] netlink: 'syz.1.934': attribute type 40 has an invalid length. [ 706.346068][ T5929] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 706.393795][ T5929] dvb_usb_ec168 4-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 706.440380][ T5929] usb 4-1: USB disconnect, device number 12 [ 708.133028][ T11] block nbd0: Possible stuck request ffff888026c08000: control (read@0,1024B). Runtime 270 seconds [ 708.144672][ T11] block nbd0: Possible stuck request ffff888026c08200: control (read@1024,1024B). Runtime 270 seconds [ 708.156458][ T11] block nbd0: Possible stuck request ffff888026c08400: control (read@2048,1024B). Runtime 270 seconds [ 708.167795][ T11] block nbd0: Possible stuck request ffff888026c08600: control (read@3072,1024B). Runtime 270 seconds [ 708.687357][ T9255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.940'. [ 709.040858][ T9258] netlink: 16 bytes leftover after parsing attributes in process `syz.3.941'. [ 709.234974][ T9257] tipc: Enabling of bearer rejected, already enabled [ 709.338987][ T9261] netlink: 24 bytes leftover after parsing attributes in process `syz.2.942'. [ 709.366688][ T9264] sg_read: process 616 (syz.4.933) changed security contexts after opening file descriptor, this is not allowed. [ 710.366755][ T9275] netlink: 'syz.5.944': attribute type 40 has an invalid length. [ 713.366735][ T9288] siw: device registration error -23 [ 713.738546][ T9293] netlink: 24 bytes leftover after parsing attributes in process `syz.2.953'. [ 715.772182][ T5929] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 715.971858][ T9317] netlink: 'syz.2.958': attribute type 40 has an invalid length. [ 716.402082][ T5929] usb 2-1: Using ep0 maxpacket: 16 [ 716.432584][ T5929] usb 2-1: config 157 has an invalid descriptor of length 0, skipping remainder of the config [ 716.453030][ T5929] usb 2-1: config 157 has 0 interfaces, different from the descriptor's value: 1 [ 716.466847][ T5929] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 717.644080][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.161625][ T5929] usb 2-1: Product: syz [ 719.165930][ T5929] usb 2-1: Manufacturer: syz [ 719.170584][ T5929] usb 2-1: SerialNumber: syz [ 720.122987][ T9335] sp0: Synchronizing with TNC [ 720.418650][ T9337] lo speed is unknown, defaulting to 1000 [ 724.703696][ T9361] siw: device registration error -23 [ 724.772265][ T5922] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 724.854616][ T5862] usb 2-1: USB disconnect, device number 18 [ 724.942272][ T5922] usb 6-1: Using ep0 maxpacket: 8 [ 724.952564][ T5929] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 724.963590][ T5922] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 724.985156][ T5922] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 725.005160][ T5922] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 725.025469][ T5922] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 725.054565][ T5922] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 725.077581][ T5922] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 725.118777][ T5922] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.129654][ T5922] usb 6-1: config 0 descriptor?? [ 725.146230][ T5929] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 725.158716][ T5863] Bluetooth: hci7: urb ffff88814471d700 submission failed (90) [ 725.160645][ T5929] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 725.662537][ T9374] netlink: 'syz.4.972': attribute type 40 has an invalid length. [ 725.677921][ T5929] usb 3-1: config 0 has no interface number 0 [ 725.684733][ T5929] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 725.694756][ T5929] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 725.751731][ T5929] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 725.900857][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.912823][ T5929] usb 3-1: Product: syz [ 725.922731][ T5929] usb 3-1: Manufacturer: syz [ 725.927483][ T5929] usb 3-1: SerialNumber: syz [ 725.936826][ T5929] usb 3-1: config 0 descriptor?? [ 726.514000][ T9392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.977'. [ 726.768251][ T5862] usb 3-1: USB disconnect, device number 15 [ 726.949024][ T9401] 9p: Bad value for 'rfdno' [ 729.548849][ T5922] usb 6-1: USB disconnect, device number 5 [ 730.160488][ T9435] bridge1: entered promiscuous mode [ 730.682076][ T43] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 731.296961][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 731.376004][ T43] usb 3-1: config 157 has an invalid descriptor of length 0, skipping remainder of the config [ 731.668329][ T43] usb 3-1: config 157 has 0 interfaces, different from the descriptor's value: 1 [ 731.703080][ T43] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 731.715033][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.724077][ T43] usb 3-1: Product: syz [ 731.728356][ T43] usb 3-1: Manufacturer: syz [ 731.733352][ T43] usb 3-1: SerialNumber: syz [ 731.878036][ T9452] netlink: 'syz.3.991': attribute type 40 has an invalid length. [ 731.898640][ T9455] 9p: Bad value for 'rfdno' [ 733.702159][ T5862] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 734.233660][ T43] usb 3-1: USB disconnect, device number 16 [ 734.382095][ T5862] usb 6-1: device descriptor read/64, error -71 [ 734.717452][ T5862] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 734.936710][ T5862] usb 6-1: device descriptor read/64, error -71 [ 735.282959][ T5862] usb usb6-port1: attempt power cycle [ 736.192092][ T5862] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 736.329475][ T5862] usb 6-1: device descriptor read/8, error -71 [ 736.423573][ T9499] pimreg: entered allmulticast mode [ 737.168283][ T9516] fuse: Unknown parameter 'group_i00000000000000000000' [ 737.432409][ T9515] netlink: 276 bytes leftover after parsing attributes in process `syz.5.1012'. [ 737.768396][ T9527] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1015'. [ 738.412643][ T11] block nbd0: Possible stuck request ffff888026c08000: control (read@0,1024B). Runtime 300 seconds [ 738.423558][ T11] block nbd0: Possible stuck request ffff888026c08200: control (read@1024,1024B). Runtime 300 seconds [ 738.436701][ T11] block nbd0: Possible stuck request ffff888026c08400: control (read@2048,1024B). Runtime 300 seconds [ 738.502156][ T11] block nbd0: Possible stuck request ffff888026c08600: control (read@3072,1024B). Runtime 300 seconds [ 739.693037][ T9543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1018'. [ 740.020544][ T9547] pimreg: entered allmulticast mode [ 744.883852][ T9582] syzkaller0: entered promiscuous mode [ 744.906705][ T9582] syzkaller0: entered allmulticast mode [ 744.920392][ T9582] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 744.933564][ T5971] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 744.934487][ T9583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 744.962906][ T9583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 745.010242][ T9588] pimreg: entered allmulticast mode [ 745.057825][ T9580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 745.096816][ T9580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 745.242216][ T5971] usb 2-1: Using ep0 maxpacket: 8 [ 745.570452][ T9593] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1032'. [ 745.621945][ T5971] usb 2-1: config 0 interface 0 has no altsetting 0 [ 745.774731][ T5971] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 745.790732][ T5971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.013063][ T5971] usb 2-1: config 0 descriptor?? [ 747.017381][ T9600] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1034'. [ 747.026469][ T9600] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1034'. [ 747.035451][ T9600] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1034'. [ 747.044451][ T9600] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1034'. [ 747.053379][ T9600] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1034'. [ 747.062300][ T9600] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1034'. [ 747.071171][ T9600] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1034'. [ 747.080064][ T9600] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1034'. [ 747.088939][ T9600] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1034'. [ 747.114491][ T9604] lo speed is unknown, defaulting to 1000 [ 747.522608][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.567064][ T9599] syzkaller0: entered promiscuous mode [ 747.574645][ T9599] syzkaller0: entered allmulticast mode [ 747.672224][ T9609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 747.681569][ T9609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 747.707804][ T9608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 747.716634][ T9608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 747.751736][ T5971] mcp2221 0003:04D8:00DD.0007: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 748.010175][ T5971] usb 2-1: USB disconnect, device number 19 [ 748.868585][ T3442] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 749.042218][ T7353] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 749.808944][ T7353] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 749.938220][ T7353] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 750.058691][ T7353] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 28793, setting to 1024 [ 750.190365][ T7353] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 1024 [ 750.311120][ T7353] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 750.414806][ T7353] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.633528][ T7353] usb 4-1: config 0 descriptor?? [ 750.640389][ T9620] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 751.245631][ T7353] hdpvr 4-1:0.0: unexpected answer of status request, len -71 [ 751.408713][ T7353] hdpvr 4-1:0.0: device init failed [ 751.422109][ T7353] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 751.606363][ T7353] usb 4-1: USB disconnect, device number 13 [ 752.184199][ T9658] syzkaller0: entered promiscuous mode [ 752.200084][ T9658] syzkaller0: entered allmulticast mode [ 752.275208][ T9670] __nla_validate_parse: 139 callbacks suppressed [ 752.275245][ T9670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1049'. [ 752.616429][ T9659] orangefs_mount: mount request failed with -4 [ 752.748460][ T9674] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1052'. [ 753.687756][ T9684] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1054'. [ 755.231408][ T9692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1055'. [ 756.744532][ T9713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1058'. [ 756.774743][ T9717] syzkaller0: entered promiscuous mode [ 756.780588][ T9717] syzkaller0: entered allmulticast mode [ 756.795087][ T9717] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 758.366100][ T9736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1064'. [ 758.774773][ T5921] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 758.782285][ T7353] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 758.942132][ T5921] usb 4-1: Using ep0 maxpacket: 16 [ 758.949001][ T5921] usb 4-1: config 157 has an invalid descriptor of length 0, skipping remainder of the config [ 758.961913][ T5921] usb 4-1: config 157 has 0 interfaces, different from the descriptor's value: 1 [ 758.962495][ T7353] usb 2-1: Using ep0 maxpacket: 16 [ 758.994966][ T5921] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 759.017410][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.032119][ T5921] usb 4-1: Product: syz [ 759.042425][ T5921] usb 4-1: Manufacturer: syz [ 759.066236][ T5921] usb 4-1: SerialNumber: syz [ 759.086067][ T7353] usb 2-1: config 157 has an invalid descriptor of length 0, skipping remainder of the config [ 759.117223][ T7353] usb 2-1: config 157 has 0 interfaces, different from the descriptor's value: 1 [ 759.123964][ T9744] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1068'. [ 759.233580][ T7353] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 759.459267][ T9747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1068'. [ 759.476430][ T9749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 759.484987][ T7353] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.502564][ T9749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 759.520743][ T7353] usb 2-1: Product: syz [ 759.530594][ T7353] usb 2-1: Manufacturer: syz [ 759.537526][ T7353] usb 2-1: SerialNumber: syz [ 759.547749][ T9744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1068'. [ 763.028568][ T9774] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1076'. [ 765.216533][ T9793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1080'. [ 765.704486][ T7353] usb 2-1: USB disconnect, device number 20 [ 765.831342][ T9798] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1082'. [ 765.856096][ T9799] 9p: Bad value for 'rfdno' [ 765.908708][ T9802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1082'. [ 765.990096][ T7353] usb 4-1: USB disconnect, device number 14 [ 766.022674][ T9798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1082'. [ 767.568971][ T9820] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1090'. [ 768.303492][ T31] INFO: task syz.0.662:8291 blocked for more than 143 seconds. [ 768.847171][ T31] Not tainted syzkaller #0 [ 769.445620][ T11] block nbd0: Possible stuck request ffff888026c08000: control (read@0,1024B). Runtime 330 seconds [ 769.456504][ T11] block nbd0: Possible stuck request ffff888026c08200: control (read@1024,1024B). Runtime 330 seconds [ 769.483377][ T11] block nbd0: Possible stuck request ffff888026c08400: control (read@2048,1024B). Runtime 330 seconds [ 769.505934][ T11] block nbd0: Possible stuck request ffff888026c08600: control (read@3072,1024B). Runtime 330 seconds [ 770.072550][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 770.622242][ T5181] udevd[5181]: worker [5876] /devices/virtual/block/nbd0 timeout; kill it [ 771.061049][ T31] task:syz.0.662 state:D stack:28736 pid:8291 tgid:8289 ppid:5854 task_flags:0x400040 flags:0x00080002 [ 771.098397][ T5181] udevd[5181]: seq 10909 '/devices/virtual/block/nbd0' killed [ 771.107924][ T31] Call Trace: [ 771.122051][ T31] [ 771.125037][ T31] ? __schedule+0xf65/0x5e10 [ 771.141527][ T31] __schedule+0xfe4/0x5e10 [ 771.158703][ T31] ? __lock_acquire+0x4a5/0x2630 [ 771.180413][ T31] ? __pfx___schedule+0x10/0x10 [ 771.283500][ T31] ? find_held_lock+0x2b/0x80 [ 771.288330][ T31] ? schedule+0x2bf/0x390 [ 771.293134][ T31] schedule+0xdd/0x390 [ 771.297229][ T31] schedule_preempt_disabled+0x13/0x30 [ 771.302764][ T31] __mutex_lock+0xc9a/0x1b90 [ 771.307484][ T31] ? bdev_open+0x41a/0xe40 [ 771.311914][ T31] ? find_held_lock+0x2b/0x80 [ 771.316818][ T31] ? find_inode_fast+0x5de/0x910 [ 771.321844][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 771.327600][ T31] ? find_inode_fast+0x1fa/0x910 [ 771.816663][ T31] ? bdev_open+0x41a/0xe40 [ 771.821680][ T31] bdev_open+0x41a/0xe40 [ 771.826014][ T31] ? iput+0x3a/0x40 [ 771.829843][ T31] blkdev_open+0x34e/0x4f0 [ 771.834310][ T31] do_dentry_open+0x73e/0x1570 [ 771.839890][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 771.844945][ T31] vfs_open+0x82/0x3f0 [ 771.849049][ T31] path_openat+0x21dc/0x3120 [ 771.853735][ T31] ? __pfx_path_openat+0x10/0x10 [ 771.858671][ T31] do_filp_open+0x1f7/0x420 [ 771.863425][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 771.868508][ T31] ? _raw_spin_unlock+0x28/0x50 [ 771.873402][ T31] ? alloc_fd+0x476/0x790 [ 771.877746][ T31] do_sys_openat2+0x12e/0x220 [ 771.882502][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 771.887739][ T31] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 771.894228][ T31] __x64_sys_openat+0x12d/0x210 [ 771.899181][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 771.904643][ T31] ? do_user_addr_fault+0x8d6/0x12f0 [ 771.909942][ T31] do_syscall_64+0xc9/0xf80 [ 771.914495][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.920393][ T31] RIP: 0033:0x7fd552d5b78e [ 771.925043][ T31] RSP: 002b:00007fd553d10b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 771.934083][ T31] RAX: ffffffffffffffda RBX: 00007fd553d116c0 RCX: 00007fd552d5b78e [ 771.942432][ T31] RDX: 0000000000000002 RSI: 00007fd553d10c00 RDI: ffffffffffffff9c [ 771.950523][ T31] RBP: 00007fd553d10c00 R08: 0000000000000000 R09: 0000000000000000 [ 771.958688][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 771.966961][ T31] R13: 00007fd553016038 R14: 00007fd553015fa0 R15: 00007ffc03fe61c8 [ 771.975263][ T31] [ 771.978637][ T31] [ 771.978637][ T31] Showing all locks held in the system: [ 771.986765][ T31] 1 lock held by rcu_exp_gp_kthr/18: [ 771.992286][ T31] #0: ffff8880b843ac98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 772.008136][ T31] 1 lock held by khungtaskd/31: [ 772.017259][ T31] #0: ffffffff8e5e32e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 772.027416][ T31] 2 locks held by kworker/u8:6/3442: [ 772.032738][ T31] #0: ffff88801dbde948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 772.043539][ T31] #1: ffffc9000c697c98 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 772.055261][ T31] 1 lock held by klogd/5170: [ 772.059932][ T31] #0: ffff8880b843ac98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 772.069909][ T31] 2 locks held by getty/5566: [ 772.074760][ T31] #0: ffff8880377830a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 772.084651][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 772.094869][ T31] 1 lock held by udevd/5876: [ 772.099456][ T31] #0: ffff888141f14358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 772.109638][ T31] 5 locks held by kworker/u8:1/5908: [ 772.114992][ T31] 1 lock held by syz.0.662/8291: [ 772.119927][ T31] #0: ffff888141f14358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 772.129307][ T31] 3 locks held by kworker/u8:9/9697: [ 772.138176][ T31] #0: ffff88813fe69948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 772.149607][ T31] #1: ffffc9001b9cfc98 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 772.160007][ T31] #2: ffffffff903f32e8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 772.169086][ T31] 2 locks held by syz.2.1088/9815: [ 772.174263][ T31] #0: ffffffff903f32e8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 772.183408][ T31] #1: ffffffff8e5efab8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 772.193460][ T31] 2 locks held by syz.2.1088/9824: [ 772.198561][ T31] #0: ffffffff90b940c8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 772.208164][ T31] #1: ffffffff8e5ef980 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 772.218278][ T31] 1 lock held by syz.4.1089/9817: [ 772.223469][ T31] #0: ffffffff8e5ef980 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 772.233430][ T31] 1 lock held by syz.1.1090/9820: [ 772.238498][ T31] #0: ffffffff903f32e8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x371/0xe90 [ 772.247977][ T31] 1 lock held by syz.5.1086/9828: [ 772.253027][ T31] #0: ffffffff8e5ef980 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 772.263007][ T31] [ 772.265332][ T31] ============================================= [ 772.265332][ T31] [ 772.287127][ T31] NMI backtrace for cpu 1 [ 772.287159][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 772.287183][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 772.287194][ T31] Call Trace: [ 772.287201][ T31] [ 772.287208][ T31] dump_stack_lvl+0x100/0x190 [ 772.287238][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 772.287267][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 772.287290][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 772.287321][ T31] sys_info+0x141/0x190 [ 772.287345][ T31] watchdog+0xcc3/0xfe0 [ 772.287381][ T31] ? __pfx_watchdog+0x10/0x10 [ 772.287408][ T31] ? __kthread_parkme+0x18c/0x230 [ 772.287437][ T31] ? __pfx_watchdog+0x10/0x10 [ 772.287465][ T31] ? __pfx_watchdog+0x10/0x10 [ 772.287491][ T31] kthread+0x3b3/0x730 [ 772.287513][ T31] ? __pfx_kthread+0x10/0x10 [ 772.287532][ T31] ? ret_from_fork+0x79/0xaf0 [ 772.287554][ T31] ? ret_from_fork+0x79/0xaf0 [ 772.287576][ T31] ? rcu_is_watching+0x12/0xc0 [ 772.287601][ T31] ? __pfx_kthread+0x10/0x10 [ 772.287623][ T31] ret_from_fork+0x754/0xaf0 [ 772.287645][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 772.287670][ T31] ? __switch_to+0x7b9/0x10c0 [ 772.287696][ T31] ? __pfx_kthread+0x10/0x10 [ 772.287717][ T31] ret_from_fork_asm+0x1a/0x30 [ 772.287749][ T31] [ 772.287757][ T31] Sending NMI from CPU 1 to CPUs 0: [ 772.426476][ C0] NMI backtrace for cpu 0 [ 772.426491][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 772.426512][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 772.426523][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 772.426547][ C0] Code: 76 78 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 cc 14 00 fb f4 fc 31 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 772.426565][ C0] RSP: 0018:ffffffff8e207e00 EFLAGS: 00000246 [ 772.426579][ C0] RAX: 0000000001051e81 RBX: ffffffff8e297ac0 RCX: ffffffff8b76b4b5 [ 772.426591][ C0] RDX: 0000000000000000 RSI: ffffffff8dc45515 RDI: ffffffff8bfa35a0 [ 772.426603][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed101708673d [ 772.426614][ C0] R10: ffff8880b84339eb R11: 0000000000000000 R12: fffffbfff1c52f58 [ 772.426625][ C0] R13: 0000000000000000 R14: ffffffff90b74bd0 R15: 0000000000000000 [ 772.426636][ C0] FS: 0000000000000000(0000) GS:ffff8881245db000(0000) knlGS:0000000000000000 [ 772.426652][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 772.426664][ C0] CR2: 00007f49593e0ad8 CR3: 0000000034bd6000 CR4: 00000000003526f0 [ 772.426676][ C0] Call Trace: [ 772.426683][ C0] [ 772.426688][ C0] default_idle+0x9/0x10 [ 772.426709][ C0] default_idle_call+0x6c/0xb0 [ 772.426729][ C0] do_idle+0x35b/0x4b0 [ 772.426754][ C0] ? __pfx_do_idle+0x10/0x10 [ 772.426780][ C0] cpu_startup_entry+0x4f/0x60 [ 772.426802][ C0] rest_init+0x251/0x260 [ 772.426823][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 772.426845][ C0] start_kernel+0x47a/0x480 [ 772.426862][ C0] x86_64_start_reservations+0x24/0x30 [ 772.426886][ C0] x86_64_start_kernel+0x122/0x130 [ 772.426904][ C0] common_startup_64+0x13e/0x148 [ 772.426935][ C0] [ 772.608675][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 772.615550][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 772.624673][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 772.634734][ T31] Call Trace: [ 772.638015][ T31] [ 772.640947][ T31] dump_stack_lvl+0x100/0x190 [ 772.645629][ T31] vpanic+0x20d/0x630 [ 772.649605][ T31] panic+0xd1/0xd1 [ 772.653309][ T31] ? __pfx_panic+0x10/0x10 [ 772.657712][ T31] ? watchdog+0xcd3/0xfe0 [ 772.662036][ T31] ? watchdog.cold+0x198/0x1ca [ 772.666790][ T31] ? watchdog.cold+0x198/0x1ca [ 772.671541][ T31] ? watchdog+0xcd3/0xfe0 [ 772.675862][ T31] watchdog.cold+0x1a9/0x1ca [ 772.680446][ T31] ? __pfx_watchdog+0x10/0x10 [ 772.685130][ T31] ? __kthread_parkme+0x18c/0x230 [ 772.690144][ T31] ? __pfx_watchdog+0x10/0x10 [ 772.694811][ T31] ? __pfx_watchdog+0x10/0x10 [ 772.699475][ T31] kthread+0x3b3/0x730 [ 772.703538][ T31] ? __pfx_kthread+0x10/0x10 [ 772.708109][ T31] ? ret_from_fork+0x79/0xaf0 [ 772.712773][ T31] ? ret_from_fork+0x79/0xaf0 [ 772.717445][ T31] ? rcu_is_watching+0x12/0xc0 [ 772.722199][ T31] ? __pfx_kthread+0x10/0x10 [ 772.726775][ T31] ret_from_fork+0x754/0xaf0 [ 772.731361][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 772.736462][ T31] ? __switch_to+0x7b9/0x10c0 [ 772.741128][ T31] ? __pfx_kthread+0x10/0x10 [ 772.745706][ T31] ret_from_fork_asm+0x1a/0x30 [ 772.750468][ T31] [ 772.753844][ T31] Kernel Offset: disabled [ 772.758150][ T31] Rebooting in 86400 seconds..