last executing test programs: 12m26.233508644s ago: executing program 1 (id=676): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) iopl(0x3) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (fail_nth: 6) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x7a, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) socketpair$unix(0x1, 0x2, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) 12m24.158512633s ago: executing program 1 (id=681): r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) splice(r0, &(0x7f0000000000)=0xfffffffffffffff6, r1, &(0x7f0000000080)=0xb9f9, 0x3ff, 0x4) shutdown(r0, 0x1) r2 = socket$isdn(0x22, 0x3, 0x22) ioctl$IMCLEAR_L2(r2, 0x80044946, &(0x7f00000000c0)=0xd708) ioctl$sock_proto_private(r0, 0x89ef, &(0x7f0000000100)="ab8470c45cb4aceb0ed9611c75d96b0335f0635792f447a2196df00e9aa28da13dc1c26d7ecf4453bdf2244a171832f9653ebc3d7a606d29bd423a5ceec8c6b114dfd74fa0c160cd1991a8a77668c63a36410787f2e855afe27f9f6d7db67b6ff3f912cdbb98f9f01327d6be55ef8e966bccdc378ab30b6f32751c793bf4c6d20e0ee8117b673d7cec5802878d9347e8cf95ae") bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0x1}, 0x6) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000200)={0x0, @sco={0x1f, @none}, @ethernet={0x0, @local}, @isdn={0x22, 0x5, 0xfa, 0x0, 0x56}, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0xbb7a}) sendfile(r3, r2, &(0x7f0000000280)=0x7, 0x7) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f00000002c0)={0x1, 0x0, 0x9, 0x7, 0x8}) getsockopt$inet_int(r0, 0x0, 0x15, &(0x7f0000000300), &(0x7f0000000340)=0x4) mkdirat$cgroup(r0, &(0x7f0000000380)='syz1\x00', 0x1ff) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r6 = socket(0x2, 0x4, 0x4) getsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000400), &(0x7f0000000440)=0x8) r7 = fsmount(r5, 0x1, 0xf8) clock_getres(0x2, &(0x7f0000000480)) r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r8, 0x3b88, &(0x7f0000000500)={0xc}) recvmmsg(r7, &(0x7f0000003240)=[{{&(0x7f0000000540)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000001840)=[{&(0x7f00000005c0)=""/249, 0xf9}, {&(0x7f00000006c0)=""/171, 0xab}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/26, 0x1a}, {&(0x7f00000017c0)=""/115, 0x73}], 0x5, &(0x7f00000018c0)=""/241, 0xf1}, 0xfffffffc}, {{&(0x7f00000019c0)=@isdn, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001a40)=""/241, 0xf1}, {&(0x7f0000001b40)=""/10, 0xa}, {&(0x7f0000001b80)=""/230, 0xe6}, {&(0x7f0000001c80)=""/81, 0x51}, {&(0x7f0000001d00)=""/107, 0x6b}, {&(0x7f0000001d80)=""/83, 0x53}], 0x6, &(0x7f0000001e80)=""/36, 0x24}, 0x9}, {{&(0x7f0000001ec0)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f0000002000)=[{&(0x7f0000001f40)=""/149, 0x95}], 0x1}, 0x14ac}, {{&(0x7f0000002040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000002100)=[{&(0x7f00000020c0)=""/14, 0xe}], 0x1, &(0x7f0000002140)=""/42, 0x2a}, 0x8}, {{&(0x7f0000002180)=@tipc, 0x80, &(0x7f0000002700)=[{&(0x7f0000002200)=""/161, 0xa1}, {&(0x7f00000022c0)=""/21, 0x15}, {&(0x7f0000002300)=""/232, 0xe8}, {&(0x7f0000002400)=""/50, 0x32}, {&(0x7f0000002440)=""/214, 0xd6}, {&(0x7f0000002540)=""/224, 0xe0}, {&(0x7f0000002640)=""/137, 0x89}], 0x7, &(0x7f0000002780)=""/123, 0x7b}, 0x1ff}, {{&(0x7f0000002800)=@ax25={{0x3, @default}, [@bcast, @netrom, @netrom, @netrom, @netrom, @netrom, @default, @netrom]}, 0x80, &(0x7f0000002a00)=[{&(0x7f0000002880)=""/31, 0x1f}, {&(0x7f00000028c0)=""/116, 0x74}, {&(0x7f0000002940)=""/180, 0xb4}], 0x3, &(0x7f0000002a40)=""/194, 0xc2}, 0x9b}, {{&(0x7f0000002b40)=@x25, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002bc0)=""/243, 0xf3}, {&(0x7f0000002cc0)=""/198, 0xc6}], 0x2, &(0x7f0000002e00)=""/219, 0xdb}, 0x401}, {{&(0x7f0000002f00)=@ax25={{0x3, @default}, [@remote, @bcast, @remote, @remote, @default, @null, @netrom, @default]}, 0x80, &(0x7f0000003100)=[{&(0x7f0000002f80)=""/212, 0xd4}, {&(0x7f0000003080)=""/123, 0x7b}], 0x2, &(0x7f0000003140)=""/200, 0xc8}, 0x6a66}], 0x8, 0x0, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000003440)={0x1b, 0x0, 0x0, 0xa84, 0x0, r4, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x5}, 0x50) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r8, 0xc01864c6, &(0x7f0000003600)={&(0x7f00000035c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000, 0x0, 0xffffffffffffffff}) r11 = syz_open_dev$vcsa(&(0x7f0000003640), 0x9, 0x4800) bpf$PROG_LOAD(0x5, &(0x7f00000036c0)={0x6, 0x11, &(0x7f00000034c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000003580)='GPL\x00', 0xa190, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback=0x35, r10, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r11, 0x0, &(0x7f0000003680)=[r7, r0], 0x0, 0x10, 0x4}, 0x94) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000003780), 0x0, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r10, 0x84, 0x2, &(0x7f00000037c0), &(0x7f0000003800)=0x8) shutdown(r3, 0x1) 12m22.520058791s ago: executing program 1 (id=685): r0 = creat(&(0x7f0000000240)='./bus\x00', 0xc2) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x42, 0x184) mkdirat(r1, 0x0, 0x47) (async) mkdirat(r1, 0x0, 0x47) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x2102, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(r4, r4, r4) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r5, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e22, 0x951, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000029000000040000002f000000000000004c2dc636573a4fcc1e3d8be1aa7427615ea4b217c47f94000410604563f5597e66817f3fbdbaf5724eaf8ef2b95a024fa0362a12ed5a"], 0x18}, 0x0) (async) sendmsg$inet6(r5, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e22, 0x951, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000029000000040000002f000000000000004c2dc636573a4fcc1e3d8be1aa7427615ea4b217c47f94000410604563f5597e66817f3fbdbaf5724eaf8ef2b95a024fa0362a12ed5a"], 0x18}, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000051000/0x4000)=nil, 0x4000, 0x3, 0x0, 0x95, 0x102) (async) mbind(&(0x7f0000051000/0x4000)=nil, 0x4000, 0x3, 0x0, 0x95, 0x102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto(r6, &(0x7f0000000100)="51bf7336f6cdf0ca6c13c866d6bc7b55f2d501845841bb2c078a988b7eb38f11a326083cf884920013fbae4a3a5d9c8ea7ea86669fb6212da0b5c82136d9519daeb17c9f96ad78cccef50ab4eabcafbc1a18735359cd7329816984d180735476f901401079349dfbe2e614f51a07c00544d90a594972ba60e1b497f88dcdc1e45dd28c0678d803638e7bd70a8638136e52c5e932c4111d3c917fb22583198b00707e3a2e", 0xa4, 0x20000000, &(0x7f0000000280)=@l2tp={0x2, 0x0, @broadcast, 0x2}, 0x80) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) accept4$inet(r0, 0x0, &(0x7f0000000200), 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x780, &(0x7f0000000380)={0x0, 0x7a71, 0x1c881, 0x0, 0xd1}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ad00000066"], 0x0, 0x8}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) eventfd2(0x4001, 0x800) 12m20.594529694s ago: executing program 1 (id=687): renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setregid(0xffffffffffffffff, 0xffffffffffffffff) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000640)={0x80, 0x8, 0x1, 0x3ffffffd, 0x40020, 0x7}) 12m18.05525177s ago: executing program 1 (id=693): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x40030000000000) 12m13.004662783s ago: executing program 1 (id=711): io_setup(0x8, &(0x7f0000000600)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r6, &(0x7f00001ed000/0x4000)=nil, 0x0) shmdt(0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x4000000) listen(r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5}, 0x20) sendmmsg$inet6(r5, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x99f, @local, 0xfffffffc}, 0x1c, &(0x7f00000000c0)=[{0x0}], 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="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"/859], 0x360}}], 0x3, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) fsopen(&(0x7f0000000300)='iso9660\x00', 0x0) 12m12.253009096s ago: executing program 32 (id=711): io_setup(0x8, &(0x7f0000000600)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r6, &(0x7f00001ed000/0x4000)=nil, 0x0) shmdt(0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x4000000) listen(r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5}, 0x20) sendmmsg$inet6(r5, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x99f, @local, 0xfffffffc}, 0x1c, &(0x7f00000000c0)=[{0x0}], 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="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"/859], 0x360}}], 0x3, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) fsopen(&(0x7f0000000300)='iso9660\x00', 0x0) 9m57.814941902s ago: executing program 3 (id=1173): prlimit64(0x0, 0xe, 0x0, 0x0) (async) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000240), 0x4) close(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f00000006c0), 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100000000000c00044000000000000000071400000011000100"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000815}, 0x8000) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, 0x0, 0x0) r6 = syz_open_procfs(0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000540)=""/155, 0x9b, 0x8) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00004e7000/0x2000)=nil, 0x2000, 0x19) socket$igmp(0x2, 0x3, 0x2) (async) r7 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r7, 0x0, 0x0, 0xc884) (async) sendmmsg$inet(r7, 0x0, 0x0, 0xc884) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, 0x0, 0x0) mremap(&(0x7f0000466000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 9m57.686148295s ago: executing program 3 (id=1175): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000240)) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock2(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000040)=ANY=[], 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0xcd, 0x0, 0x12, "100056f200"}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x104, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x8, 0x0, 0x0}}, 0x10) ioctl$TIOCMSET(r4, 0x5418, 0x0) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$netlink(0x10, 0x3, 0x6) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = syz_open_dev$media(&(0x7f0000000380), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000140)={0x80000000, 0x0, &(0x7f00000002c0)}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$KVM_RUN(r5, 0xae80, 0x0) 9m56.274676285s ago: executing program 3 (id=1177): r0 = socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_open_dev$sndctrl(&(0x7f0000000080), 0x802, 0x6b929545a606890f) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {0x0}], 0x0}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80), 0x0}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) r1 = syz_clone(0x8000, 0x0, 0xffffffffffffff98, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000600)={@sco, {0x0}, 0x0}, 0xa0) sendmsg$inet(r3, &(0x7f0000000d00)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000000480)=ANY=[@ANYBLOB="2800000014001102000000000000000028001100fa004ac2411e47060aefadfa457ab9000000000083f5d5e3d0d17b42fda45cde46870a73b51bf85d7cb4021e6d6bbccb0e2110416b4a7ff95fda3d6b51097286b428800e23411890a06e2b847be842fffba1c335f6ab069b397d82f604d121892f6a6efa935d0ec395fb850d869630d0283dacb6bd5cc41065a09728e8c2ca60b7cb17fd96495071ce10603742cac8cab81f9a9316dc7ebb8681aa9d9db0d1e2e46a81b1d3289fb35059e42dcd22a18230941263203f83a15852249979df76b480af63012741a685db2de7206367d04253232bcf0ba1a888fe6a7a9ff849fc1fb2fcd816"], 0x28}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x541b, &(0x7f0000000340)={'veth0_virt_wifi\x00', @remote}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_setup(0x33f9, &(0x7f0000002680)={0x0, 0x3ffffff8, 0x80, 0x0, 0x38}) eventfd2(0x0, 0x0) r7 = socket$inet(0x2, 0x1, 0x100) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setgroups(0x41b7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='wlan1\x00', 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="44000000100037042dbd70000000000000000000", @ANYRESDEC=r2, @ANYBLOB="8304050001400200240012800b000100697036746e6c000014000280080001002bc0bbf395bdffd611980dc2aef49e44f1d3025b99f6515b4793f8cbe9668824b8d9d3a286058217232d005ee6c6e27b2ebacf8e5b06c94bc72d16f08648de129b529cf0a74169795c351dd84358f72e", @ANYRES32, @ANYBLOB='\b\x00\b\x002\x00\x00\x00'], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4c050) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 9m54.983590828s ago: executing program 3 (id=1184): r0 = io_uring_setup(0x7b0c, &(0x7f0000000900)={0x0, 0x887b, 0x100, 0x0, 0x81060}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x20083, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x9, &(0x7f00000002c0)={0x0, 0x20c8a1, 0x833, 0x8, 0xd0, 0x0, r0}) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, 0xd400a376c795e996, 0x0, 0x0, 0x20000000}}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x482, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) syz_open_dev$sndctrl(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x3, 0x0, 0xb, 0x0, 0x0, 0x60}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) r5 = eventfd2(0xe5c, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000780)={r5, 0x5, 0x2, r5}) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9m53.38576771s ago: executing program 3 (id=1188): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_print_times', 0x0, 0x40) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000200)={0xfb2292da899e432c}) r4 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12}) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r6, 0x1, 0x11, r5, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) recvmmsg(r2, 0x0, 0x0, 0x12162, 0x0) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000180)={0x0, 0x40c989, 0x0, 0xffffffdf, 0x175}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0x212, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r7, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000240)={0x3, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) socket$inet(0x2, 0x4000000000000001, 0x3) r11 = landlock_create_ruleset(&(0x7f0000000140)={0x4000, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r11, 0x9) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[]) read$FUSE(r12, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl$Q_QUOTAOFF(0x22737fb13fcc605a, 0x0, r13, 0x0) syz_fuse_handle_req(r12, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x4, 0xfffffffd, 0x0, {0x0, 0x8, 0x0, 0x10, 0x0, 0x8000000, 0x0, 0x100, 0x81, 0x2000, 0x2000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) 9m51.719855513s ago: executing program 3 (id=1195): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010828bd7000fcdbdf2501000000000000000b"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x800) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) r3 = fanotify_init(0x2, 0x101000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) fanotify_mark(r3, 0x101, 0x8000011, r4, 0x0) ftruncate(r2, 0x6000000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x4000) r5 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0], 0x0) r6 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r5) writev(r6, &(0x7f00000039c0)=[{&(0x7f0000003500)='T', 0x1}], 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 9m36.42371777s ago: executing program 33 (id=1195): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010828bd7000fcdbdf2501000000000000000b"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x800) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) r3 = fanotify_init(0x2, 0x101000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) fanotify_mark(r3, 0x101, 0x8000011, r4, 0x0) ftruncate(r2, 0x6000000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x4000) r5 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0], 0x0) r6 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r5) writev(r6, &(0x7f00000039c0)=[{&(0x7f0000003500)='T', 0x1}], 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 7.959052855s ago: executing program 5 (id=2894): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r1, &(0x7f0000000280)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @null]}, 0x48) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xf32f, 0xfe000000}, &(0x7f00000000c0)=0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1e0000000000000022000000", @ANYRES16=r1, @ANYRESHEX=r1], 0x33) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004010) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'tunl0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x8010) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4008080) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r4, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) connect$rose(r4, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) timerfd_create(0x0, 0x80800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) 7.022538943s ago: executing program 5 (id=2897): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000a067afcc73973ccf42452b2de4663747000000000000000000000a14000000060a0b04000000000000000002000008140000001100010000000000000000000100000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0x10040004) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) futex_waitv(&(0x7f0000001b00)=[{0xfff, &(0x7f0000000940)=0x6, 0x6}], 0x1, 0x0, 0x0, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$nci(r1, 0x0, 0x7) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) futex(&(0x7f00000004c0)=0x1, 0x3, 0x2, &(0x7f0000000500), &(0x7f0000000540), 0x2) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000240)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x4, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x66, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r13, {0xffff, 0xc}, {}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004004) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES16], 0x38}, 0x1, 0x0, 0x0, 0x20040890}, 0x44850) syz_io_uring_complete(0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="f70040006973b05b849f090dd5231c1865640bcf62fa7983d86daaa43e7faffe7f39fe906f8f2dff632ecf2b3c46f1cd34b8acc20521aef07e4814afe3c155495927b649e4ec638d1adb0b1ec5efc17fc67c806765d1a8a326f4bb39867a1dd3fd00022fa91ce6cccce84fcdecddfa90bbd31b476728babec7ae4d6db35f9260626fa22ec8c100ccad8c7f54a849500efa8fba31b7c0c2253a64e2a666a2c536aff8b2be29a0147d8c1cc30f139b84db724bc3e34ed72f36b353975fa01c10ca4f665a7e9eaf1c8708e570eb77845080083d2263a465b5a963dde140506bd0305172481e902340", @ANYRES16=r15, @ANYBLOB="1709a70000000000000101000000060003000080000008000a0004000000"], 0x24}}, 0x0) 6.394372235s ago: executing program 6 (id=2898): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x202040, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000200)={'sit0\x00', r1, 0x46b3bb0d1a56d456, 0x8000, 0xffffeb11, 0x10001, {{0xf, 0x4, 0x2, 0x6, 0x3c, 0x67, 0x0, 0x6, 0x2f, 0x0, @local, @loopback, {[@noop, @timestamp={0x44, 0x18, 0x66, 0x0, 0xf, [0x0, 0x87af, 0x8, 0x3, 0x101]}, @ra={0x94, 0x4}, @generic={0x88, 0xa, "95c00de1dd7538f8"}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x40, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.324528014s ago: executing program 2 (id=2899): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) fanotify_init(0x200, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6d706f6f112f84064af8066c3d696e7465726c656176653d"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x45e}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = shmget(0x0, 0x2000, 0x800, &(0x7f0000168000/0x2000)=nil) shmctl$SHM_UNLOCK(r4, 0xc) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x7f}, 'port1\x00', 0x80, 0x14, 0x4, 0xfffffeff, 0x0, 0xc, 0x200000, 0x0, 0x4875c99660ff2b2d}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002040)='oom_score_adj\x00') write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000010c0)={0x30, 0x5, 0x0, {0x0, 0x2, 0x5, 0x6}}, 0x30) write$cgroup_int(r5, &(0x7f0000000100), 0x12) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe9b, 0xc, 0xd, 0x7f, 0x44233, 0x7, 0x81, 0x941, 0x8001, 0x1005, 0xc, 0x5, 0x0, 0xfffffdfffffffffd], 0x2, 0x80300}) 6.319232633s ago: executing program 5 (id=2900): r0 = socket$caif_seqpacket(0x25, 0x5, 0x4) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000000)=0x1, 0x4) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) (async) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x8080, 0x2, 0x2}, 0x18, 0x3) (async) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000080)) (async) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x1}) open_by_handle_at(r2, &(0x7f0000000100)=@reiserfs_4={0x10, 0x4, {0x4, 0x4, 0x4, 0x8}}, 0x181ec2) r3 = syz_open_dev$evdev(&(0x7f0000000140), 0x5, 0xe200) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000000180)={0x5, 0x7, 0x7, 0x4ea, 0x1, 0x10001}) (async) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x200002, 0x0) ioctl$SOUND_PCM_READ_BITS(r4, 0x80045005, &(0x7f0000000200)) r5 = accept$phonet_pipe(r4, &(0x7f0000000240), &(0x7f0000000280)=0x10) ioctl$XFS_IOC_SWAPEXT(r2, 0xc0c0586d, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, r5, 0x8, 0x8, '\x00', {0xd, 0x8, 0x9, 0x352, 0xfffffff8, 0xfffffffd, 0xfffff001, 0x6121, {0x5, 0xb52c}, {0xfffffffffffffffd, 0x4}, {0x39, 0xd}, 0xffffffffffffffc9, 0x9, 0x5, 0x200, 0x9, 0xa, 0x3, 0x4, 0x400, 0x1ff, '\x00', 0x3, 0x0, 0x7fff, 0x7}}) (async) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000380), 0x3) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f00000003c0)={0x5, [[0x2, 0xd, 0x7, 0x8, 0x3, 0x8, 0x1, 0xbd4], [0x5, 0x81, 0x6, 0xffffffff, 0x2, 0x1000, 0x7, 0x7ff], [0x8, 0x24bccafe, 0xfff, 0x5, 0xfffffffb, 0x7, 0x6, 0x1]], '\x00', [{0x7ff, 0x5, 0x0, 0x1}, {0x8, 0x2, 0x1, 0x0, 0x1}, {0x56, 0xfffffffc, 0x0, 0x0, 0x1}, {0x8000, 0x80000001, 0x0, 0x0, 0x1}, {0xd, 0x100, 0x0, 0x0, 0x0, 0x1}, {0x10, 0x2, 0x0, 0x1, 0x0, 0x1}, {0x9, 0x1, 0x1, 0x1, 0x0, 0x1}, {0xe, 0x9, 0x0, 0x1, 0x0, 0x1}, {0x4, 0x5, 0x0, 0x0, 0x1}, {0x7, 0x7, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x889, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x0, 0x0, 0x1}], '\x00', 0x7ff}) (async) ioctl$KVM_GET_PIT2(r4, 0x8070ae9f, &(0x7f0000000640)) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000006c0), 0xc0080, 0x0) ioctl$TIOCGWINSZ(r6, 0x5413, &(0x7f0000000700)) (async) ioctl$TIOCGSERIAL(r4, 0x541e, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=""/106}) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000840)={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, 0x1, 0x6, [@broadcast, @dev={0xac, 0x14, 0x14, 0x1a}, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast1]}, 0x28) ioctl$OCFS2_IOC_GROUP_ADD(r1, 0x40186f02, &(0x7f0000000880)={0x3, 0x8, 0x4}) r7 = getpgid(0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f00000008c0)={0x2, 0x2, 0x10001, 0xffff, r7}) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000900)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_rose_SIOCDELRT(r8, 0x890c, &(0x7f0000000940)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={'rose', 0x0}, 0x0, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f00000009c0), 0x10) (async) removexattr(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)=@known='system.posix_acl_access\x00') (async) pread64(r3, &(0x7f0000000a80)=""/61, 0x3d, 0x100000001) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000ac0)={0x0, @in={{0x2, 0x4e23, @loopback}}, 0x3, 0x4, 0x9, 0x80000001, 0x80, 0x8}, &(0x7f0000000b80)=0x9c) 5.990675369s ago: executing program 5 (id=2902): r0 = fsopen(&(0x7f00000001c0)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8040, 0x0) r5 = fanotify_init(0xf00, 0x1000) fanotify_mark(r5, 0x80, 0x20, r4, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r5, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000000180)={0x5000, 0x12000, 0x20000000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0xb74, 0x4, 0xc, 0x7fff0000}]}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) 5.978053039s ago: executing program 6 (id=2903): r0 = request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='&\x00', 0xfffffffffffffffb) keyctl$get_security(0x11, r0, &(0x7f0000000340)=""/219, 0xdb) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, 0x0, 0x0, 0x2, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r5, 0x1) unshare(0x2c020400) write$nci(r1, &(0x7f0000000300)=@NCI_GID_PROPRIETARY_NFT={0xf, 0x1, 0x3, 0x0, 0x2, "60b9"}, 0x5) 5.005968178s ago: executing program 5 (id=2907): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r2) 4.956545751s ago: executing program 2 (id=2908): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffd, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000003c0), 0xb, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000100)={0x1, @pix_mp={0x8, 0x7f, 0x50565559, 0x8, 0x7, [{0x6, 0x2}, {0xdf34, 0x9}, {0x6, 0xfffffffb}, {0x31d, 0x2}, {0x5, 0x2}, {0x5, 0xffffffff}, {0x1, 0x3}, {0x18, 0x1}], 0x2, 0x7, 0x2, 0x2, 0x6}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a45352, &(0x7f0000000040)={{0x0, 0xff}, 'port1\x00', 0x1c, 0x6042c, 0x1, 0x1, 0x6, 0x8, 0x9, 0x0, 0x3, 0x4}) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000180)) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$vnet(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) write$vhost_msg_v2(r4, &(0x7f0000000340)={0x2, 0x0, {0x0, 0x0, &(0x7f00000004c0)=""/142, 0x3, 0x4}}, 0x48) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) mknod$loop(0x0, 0xfff, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r6, &(0x7f0000000000)={0x1d, r7}, 0x10) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f00000000c0), 0xf00) sendmsg$nl_route_sched(r5, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x34, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0x9, 0x14, 0x0, 0x1, [@nested={0x4, 0x2}, @generic="13"]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 4.85854492s ago: executing program 6 (id=2909): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000001, 0x11, r6, 0xffffc000) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000004c0)=0x4) preadv2(r5, &(0x7f0000000100)=[{&(0x7f0000000200)=""/195, 0xc3}, {&(0x7f00000000c0)=""/43, 0x2b}, {&(0x7f0000000300)=""/164, 0xa4}], 0x3, 0x7fff, 0x7, 0x8) ioctl$PPPIOCSPASS(r7, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0x5, 0x6}]}) ioctl$PPPIOCSPASS(r7, 0x40107447, &(0x7f00000007c0)={0x0, 0x0}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) lremovexattr(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) clock_getres(0x8, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r8, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, r9) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00'], 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0xac, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {0x1}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x3e, 0x91, "d2d9951dabc3ed057af2f93a0a91d5ea31d51e92efc6e03106b98686792bfb70a15b41da642f7a77945118ef2a14f9191a4f56133a32b89bf061"}, @NL80211_ATTR_IE_ASSOC_RESP={0x9, 0x80, [@measure_req={0x26, 0x3, {0x2, 0x8b, 0x8}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x4}]]}, 0xac}}, 0x0) 4.062581833s ago: executing program 5 (id=2910): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000004f80), r0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r2, 0x1) recvmmsg(r2, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000001d40)=""/4067, 0xfe4}, {&(0x7f00000006c0)=""/149, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1014}, {&(0x7f0000000400)=""/6, 0x6}, {0x0}], 0x5}}], 0xffffffffffffff55, 0x0, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000005100)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f0000005040)={0x2c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x10}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xd}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000011}, 0x48010) 3.755177789s ago: executing program 6 (id=2911): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002500)={{r1}, &(0x7f0000002480), &(0x7f00000024c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000240)="98b41577053a80a6ce80d297a074fe5fc1ab4bc439fa47e3ceff6e0ee8579fab87239f79597ab0526968d52476eb5c0dc7c9bd96c0fb4c6077cc1f130addbb1a2d62d3ee891fc4525fed7bc65a205c4e98dcd84ff50f107898f2939517256b04217f7002dfb9809b1d7691b167260ed0db081d10b068815c0d21cb1a95653c1bef95f1372c050aec907aa54ba236d2a1df5f775a888fdc88d4d3ea9ef2cec63ecccd417a0d5f5a4ff66286242cd2cfc4877ccb2917663fc5af77562f0b4f85847dab60ea356928c4e005fb862dcbca35d91ad7876ec5e315a6b2691bdc142c2eb75eb36754e68a0285cbc48dc9298a57a9a1d2eb1fa617a9315d26", &(0x7f0000000040)=@udp6=r0, 0x1}, 0x20) r2 = fanotify_init(0x1a, 0x800) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) fanotify_mark(r2, 0x441, 0x0, r3, 0x0) fanotify_mark(r2, 0x1, 0x20, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000b40)='.\x00', 0x0, 0x1) 3.710323709s ago: executing program 4 (id=2912): openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440), 0x600002, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdir(&(0x7f0000000440)='./control\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYRES32=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a50000000060a010400000000000000000a0000010900010073797a310000000024000480200001800700010063740000140002800800014000000001080002400000000a0900020073797a3200"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 3.627006502s ago: executing program 6 (id=2913): inotify_init() r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x1af455ea}, 0x8) r1 = open(0x0, 0x167842, 0x19) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4008, r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000002400)={0x2, 0x1, 0xd, 0x5}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r4, 0x0, 0x4040010) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000025300)=""/102392, 0x18ff8) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x19, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@gettaction={0x1c, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x480d1}, 0x10000084) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r8 = io_uring_setup(0xe45, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x2, 0x215}) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_genetlink_get_family_id$l2tp(0x0, r1) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f00000000c0)={0x2, @sliced={0x2, [0x6312, 0x6, 0x5, 0x3, 0x9, 0x6, 0x6, 0x6, 0xa, 0x0, 0x7ff, 0x44d, 0xffff, 0x954, 0x580, 0x5, 0x5, 0x800, 0x3, 0x3d, 0x4, 0xd1cc, 0x0, 0x5, 0xd, 0x2, 0x2c, 0x4, 0x40, 0xff, 0x3, 0x8, 0x4, 0xb, 0x3, 0x5, 0xa, 0x10, 0x9, 0x9, 0x67c, 0x1, 0xf9, 0x0, 0x76c, 0x1, 0x2b51, 0x2], 0x2}}) 3.135723322s ago: executing program 4 (id=2914): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='.\x00', &(0x7f0000000000)='exfat\x00', 0x401, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) pwritev(r2, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f00000002c0)='2', 0x1}], 0x2, 0x0, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xffff, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffdba, 0x1, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000300)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x9, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x82e, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) 2.696205615s ago: executing program 4 (id=2916): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x6, 0x24, &(0x7f0000000e40)={{0x12, 0x1, 0x310, 0x4e, 0xae, 0x72, 0x40, 0x13d3, 0x3402, 0x4d77, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x40, 0x64, 0x40, 0x5, "", [{{0x9, 0x4, 0x58, 0x4, 0x0, 0x52, 0x1c, 0x9c, 0x12}}]}}]}}, 0x0) 2.601775519s ago: executing program 2 (id=2918): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x1, 0x80, &(0x7f0000000440)=""/128, 0x41100, 0x0, '\x00', 0x0, 0x1c, r0, 0x8, &(0x7f00000004c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0x5, 0x9, 0x101}, 0x10, 0x1ad52, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000540), 0x10, 0x80000001}, 0x94) syz_open_dev$dri(&(0x7f00000000c0), 0x80000000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000000), 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c) recvmmsg$unix(r3, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)=""/227, 0xe3}], 0x1, 0x0, 0x700}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/156, 0x9c}], 0x1}}], 0x2, 0x40000000, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 1.688401298s ago: executing program 0 (id=2920): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0x11) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) 1.586605663s ago: executing program 4 (id=2921): r0 = socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_open_dev$sndctrl(&(0x7f0000000080), 0x802, 0x6b929545a606890f) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {0x0}], 0x0}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80), 0x0}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) r1 = syz_clone(0x8000, 0x0, 0xffffffffffffff98, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000600)={@sco, {0x0}, 0x0}, 0xa0) sendmsg$inet(r3, &(0x7f0000000d00)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000000480)=ANY=[@ANYBLOB="2800000014001102000000000000000028001100fa004ac2411e47060aefadfa457ab9000000000083f5d5e3d0d17b42fda45cde46870a73b51bf85d7cb4021e6d6bbccb0e2110416b4a7ff95fda3d6b51097286b428800e23411890a06e2b847be842fffba1c335f6ab069b397d82f604d121892f6a6efa935d0ec395fb850d869630d0283dacb6bd5cc41065a09728e8c2ca60b7cb17fd96495071ce10603742cac8cab81f9a9316dc7ebb8681aa9d9db0d1e2e46a81b1d3289fb35059e42dcd22a18230941263203f83a15852249979df76b480af630127"], 0x28}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x541b, &(0x7f0000000340)={'veth0_virt_wifi\x00', @remote}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_setup(0x33f9, &(0x7f0000002680)={0x0, 0x3ffffff8, 0x80, 0x0, 0x38}) eventfd2(0x0, 0x0) socket$inet(0x2, 0x1, 0x100) setgroups(0x41b7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='wlan1\x00', 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="44000000100037042dbd70000000000000000000", @ANYRESDEC=r2, @ANYBLOB="8304050001400200240012800b000100697036746e6c000014000280080001002bc0bbf395bdffd611980dc2aef49e44f1d3025b99f6515b4793f8cbe9668824b8d9d3a286058217232d005ee6c6e27b2ebacf8e5b06c94bc72d16f08648de129b529cf0a74169795c351dd84358f72e", @ANYRES32, @ANYBLOB='\b\x00\b\x002\x00\x00\x00'], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4c050) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 1.485353272s ago: executing program 2 (id=2922): syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) prlimit64(0x0, 0xc, &(0x7f0000000140)={0xa, 0x400}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) symlink(0x0, &(0x7f0000000100)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x23f) setuid(0xee01) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='ufs\x00', 0x210818, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x18, 0x3, &(0x7f00000013c0)=@framed, &(0x7f0000001400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000000000)='./file0\x00', r2}, 0x18) 1.35622681s ago: executing program 0 (id=2923): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x40b, 0x70bd2b, 0x500, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5}]}}}]}, 0x3c}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000001e00), r0) 1.083089107s ago: executing program 0 (id=2924): r0 = syz_open_dev$loop(&(0x7f0000000200), 0xffffffff7ffffffd, 0x1) ftruncate(r0, 0x63) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000240)={r1, 0x0, {0x0, 0x0, 0x0, 0x1000000000008, 0x1, 0x0, 0x9, 0x10, 0xd, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a4b8aed1e831fa79a", "715237601a8ca5b07dcc141802c4dacf162e43ac61f7ad330000000000a04100", [0xfffffffffffffce9, 0x3]}}) (async, rerun: 64) inotify_init() (async, rerun: 64) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (rerun: 32) io_uring_setup(0xe45, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x2, 0x215}) (async, rerun: 32) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x4000845) (rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) (async) sched_setaffinity(0x0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (rerun: 64) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r3}, &(0x7f0000000000)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) futex(&(0x7f0000000240)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) (async) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 1.012736728s ago: executing program 0 (id=2925): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="30000000400007012bbd700003000000047c0000100042800c00070006002000000000000c0001800600060080"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) 988.240438ms ago: executing program 4 (id=2926): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0x1, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x2, [{0x8e5, 0x8b39, 0x3a, 0x40}, {0x8, 0x7, 0x9, 0x2d}, {0xffffff89, 0x9d2, 0x2, 0x10000}, {0x9, 0x3, 0x8, 0x8}, {0x0, 0x8, 0x3b7, 0x5}, {0x553e3387, 0x3, 0x8000, 0x2}, {0x8001, 0x4, 0x1}, {0xffffffff, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xfffffed3, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x4000000, 0x20000801}, 0x4041080) 874.822637ms ago: executing program 0 (id=2927): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'hsr0\x00', 0xc0008}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x480, &(0x7f00000002c0)={0x2, 'bridge0\x00'}, 0x18) 753.261752ms ago: executing program 0 (id=2928): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffcda) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) (async) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x1e, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x5) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f00000007c0)=""/253, &(0x7f00000000c0)=""/77, &(0x7f00000005c0)=""/78, 0xb000}) (async) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f00000007c0)=""/253, &(0x7f00000000c0)=""/77, &(0x7f00000005c0)=""/78, 0xb000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) (async) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb2, 0x0, 0x0, 0x10, 0x5}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb2, 0x0, 0x0, 0x10, 0x5}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x161400, 0x0) (async) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x161400, 0x0) ioctl$SNDCTL_TMR_STOP(r4, 0x5403) r5 = eventfd(0x81) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000140)=r5) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) 548.599281ms ago: executing program 6 (id=2929): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffd, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000003c0), 0xb, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000100)={0x1, @pix_mp={0x8, 0x7f, 0x50565559, 0x8, 0x7, [{0x6, 0x2}, {0xdf34, 0x9}, {0x6, 0xfffffffb}, {0x31d, 0x2}, {0x5, 0x2}, {0x5, 0xffffffff}, {0x1, 0x3}, {0x18, 0x1}], 0x2, 0x7, 0x2, 0x2, 0x6}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a45352, &(0x7f0000000040)={{0x0, 0xff}, 'port1\x00', 0x1c, 0x6042c, 0x1, 0x1, 0x6, 0x8, 0x9, 0x0, 0x3, 0x4}) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000180)) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$vnet(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) write$vhost_msg_v2(r4, &(0x7f0000000340)={0x2, 0x0, {0x0, 0x0, &(0x7f00000004c0)=""/142, 0x3, 0x4}}, 0x48) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) mknod$loop(0x0, 0xfff, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r6, &(0x7f0000000000)={0x1d, r7}, 0x10) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f00000000c0), 0xf00) sendmsg$nl_route_sched(r5, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x34, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0x9, 0x14, 0x0, 0x1, [@nested={0x4, 0x2}, @generic="13"]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 279.347125ms ago: executing program 2 (id=2930): io_setup(0x4, &(0x7f00000014c0)=0x0) io_destroy(r0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000000000)=0x1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) 181.25521ms ago: executing program 4 (id=2931): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x1, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x3, 0x52, 0xbd, 0x8, 0xb95, 0x2791, 0x9d87, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xc2, 0x92, 0x40, 0x81, "", [{{0x9, 0x4, 0x32, 0xe2, 0x0, 0xff, 0xb4, 0xe8, 0x6}}]}}]}}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000fdffc81fea83666da1690008000300", @ANYRES32=r2], 0x24}}, 0x0) 0s ago: executing program 2 (id=2932): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f00001fd000/0x4000)=nil, 0x4000, 0xa) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x42) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000010001000a00000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000280)) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000240)={{&(0x7f0000666000/0x2000)=nil, 0x2000}}) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0b080510"], 0xe) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'veth1_virt_wifi\x00', 0x0}) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r6, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x2000) getsockopt$XDP_MMAP_OFFSETS(r5, 0x11b, 0x1, 0x0, &(0x7f0000000140)) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r7, 0x103, 0x7, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='ipvlan1\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) kernel console output (not intermixed with test programs): no=48371 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 811.619953][ T9] rndis_host 3-1:253.0: skipping garbage [ 811.640621][ T29] audit: type=1400 audit(2000000615.969:1084): avc: denied { bind } for pid=15349 comm="syz.0.2213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 811.671600][ T9] usb 3-1: USB disconnect, device number 55 [ 812.114165][T15387] exFAT-fs (loop2): unable to read boot sector [ 812.120666][T15387] exFAT-fs (loop2): failed to read boot sector [ 812.127098][T15387] exFAT-fs (loop2): failed to recognize exfat type [ 813.726895][T15393] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 814.057909][T15406] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2222'. [ 814.786777][ T5923] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 814.988119][ T5923] usb 6-1: Using ep0 maxpacket: 8 [ 814.996436][ T5923] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 815.005668][ T5923] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 815.026709][ T5923] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 815.047786][ T5923] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 815.069264][ T5923] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 815.099975][ T5923] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 815.116867][ T9] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 815.156713][ T5923] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 815.186524][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.363595][ T9] usb 5-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 815.545450][ T5923] usb 6-1: usb_control_msg returned -32 [ 815.576989][ T9] usb 5-1: config 253 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 5384, setting to 64 [ 815.577603][ T5923] usbtmc 6-1:16.0: can't read capabilities [ 815.947942][ T9] usb 5-1: config 253 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 816.277062][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 816.286198][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 816.430965][ T9] usb 5-1: SerialNumber: syz [ 816.443764][T15422] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 816.528394][T15419] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2225'. [ 816.593138][T15419] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 816.609890][T15419] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 816.791116][T15422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 816.801865][T15422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 816.986129][T15431] netlink: 124 bytes leftover after parsing attributes in process `syz.5.2225'. [ 817.695510][ T10] IPVS: starting estimator thread 0... [ 817.711658][T15437] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2229'. [ 817.787939][T15438] IPVS: using max 44 ests per chain, 105600 per kthread [ 818.603744][ T9] rndis_host 5-1:253.0: skipping garbage [ 818.658707][ T5923] usb 6-1: USB disconnect, device number 35 [ 818.844536][ T9] usb 5-1: USB disconnect, device number 50 [ 819.497201][ T9] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 819.768646][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 819.789644][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 819.810897][T15452] exFAT-fs (loop2): unable to read boot sector [ 819.817176][T15452] exFAT-fs (loop2): failed to read boot sector [ 819.823472][T15452] exFAT-fs (loop2): failed to recognize exfat type [ 819.880719][ T9] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 819.903076][ T9] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 819.940770][ T9] usb 5-1: Manufacturer: syz [ 820.205794][ T9] usb 5-1: config 0 descriptor?? [ 820.338866][T15479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2238'. [ 820.651784][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 820.657977][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 820.675654][ T9] usb 5-1: USB disconnect, device number 51 [ 823.153923][T15515] picdev_read: 77 callbacks suppressed [ 823.153936][T15515] kvm: pic: non byte read [ 823.169426][T15515] kvm: pic: non byte read [ 823.363305][T15517] syzkaller0: entered promiscuous mode [ 823.369269][T15517] syzkaller0: entered allmulticast mode [ 823.422478][T15515] kvm: pic: non byte read [ 823.591552][T15515] kvm: pic: non byte read [ 823.628646][T15515] kvm: pic: non byte read [ 823.646068][T15515] kvm: pic: non byte read [ 823.678545][ T5923] libceph: connect (1)[c::]:6789 error -13 [ 823.683713][T15515] kvm: pic: non byte read [ 823.689749][ T5923] libceph: mon0 (1)[c::]:6789 connect error [ 823.887754][ T793] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 823.960037][T15501] ceph: No mds server is up or the cluster is laggy [ 824.109816][ T793] usb 7-1: Using ep0 maxpacket: 16 [ 824.310506][ T793] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 824.334833][ T5923] libceph: connect (1)[c::]:6789 error -13 [ 824.345208][ T5923] libceph: mon0 (1)[c::]:6789 connect error [ 824.361760][ T793] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 824.377887][ T793] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 824.446517][ T793] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 824.805451][ T793] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.839839][ T793] usb 7-1: config 0 descriptor?? [ 825.015510][T15528] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=40 sclass=netlink_tcpdiag_socket pid=15528 comm=syz.5.2250 [ 825.378990][ T793] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 825.400945][ T793] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 825.661138][ T793] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 825.676734][ T793] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 825.836380][ T793] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 825.851686][ T793] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 825.862744][ T793] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 825.872844][ T793] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 825.881380][ T793] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 825.900354][ T793] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 825.941346][ T793] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0013/input/input32 [ 826.011845][ T793] microsoft 0003:045E:07DA.0013: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 826.328573][T15549] Cannot find add_set index 65532 as target [ 826.750416][ T793] usb 7-1: USB disconnect, device number 18 [ 826.779159][T15552] trusted_key: encrypted_key: master key parameter 'de' is invalid [ 826.849370][T15555] netlink: 'syz.0.2257': attribute type 1 has an invalid length. [ 826.872662][T15546] fido_id[15546]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 826.956286][T15560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2257'. [ 827.732845][T15556] erspan2: entered allmulticast mode [ 827.998368][ T29] audit: type=1326 audit(2000000632.619:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15569 comm="syz.6.2259" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ff0b9c799 code=0xffff0000 [ 828.132148][T15555] bond2: entered promiscuous mode [ 828.144069][T15555] bond2: entered allmulticast mode [ 828.149786][T15555] 8021q: adding VLAN 0 to HW filter on device bond2 [ 828.295005][T15560] bond2 (unregistering): Released all slaves [ 828.440166][T15576] x_tables: duplicate underflow at hook 1 [ 829.310706][ T793] libceph: connect (1)[c::]:6789 error -101 [ 829.316950][ T793] libceph: mon0 (1)[c::]:6789 connect error [ 829.356935][T15581] ceph: No mds server is up or the cluster is laggy [ 830.361033][T15590] IPVS: Unknown mcast interface: hsr0 [ 830.826932][ T29] audit: type=1400 audit(2000000635.419:1086): avc: denied { getopt } for pid=15598 comm="syz.5.2267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 832.660763][ T1040] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 832.676011][T12550] af_packet: tpacket_rcv: packet too big, clamped from 24 to 4294967272. macoff=96 [ 833.929374][T15627] IPVS: Unknown mcast interface: hsr0 [ 834.899466][T15631] 9pnet_fd: Insufficient options for proto=fd [ 835.764428][T15641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2282'. [ 835.808670][T15641] netlink: 'syz.0.2282': attribute type 18 has an invalid length. [ 835.816556][T15641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2282'. [ 836.011518][T15646] trusted_key: encrypted_key: master key parameter 'de' is invalid [ 837.950978][T15665] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2273'. [ 839.863039][T15674] 9pnet_fd: Insufficient options for proto=fd [ 840.439632][ T29] audit: type=1400 audit(2000000645.039:1087): avc: denied { map } for pid=15686 comm="syz.2.2294" path="socket:[48882]" dev="sockfs" ino=48882 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 840.617004][ T24] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 840.658803][T15690] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2295'. [ 840.700366][T15690] openvswitch: netlink: Flow key attr not present in new flow. [ 840.769185][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 840.791917][ T24] usb 5-1: config 0 has an invalid interface number: 246 but max is 0 [ 840.804386][ T24] usb 5-1: config 0 has no interface number 0 [ 840.817275][ T24] usb 5-1: config 0 interface 246 altsetting 255 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 840.840996][ T24] usb 5-1: config 0 interface 246 altsetting 255 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 840.912115][ T24] usb 5-1: config 0 interface 246 has no altsetting 0 [ 840.957922][ T24] usb 5-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=35.27 [ 840.992681][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.001105][ T24] usb 5-1: Product: syz [ 841.009246][ T24] usb 5-1: Manufacturer: syz [ 841.023596][ T24] usb 5-1: SerialNumber: syz [ 841.034630][ T24] usb 5-1: config 0 descriptor?? [ 841.098205][ T793] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 841.296847][ T793] usb 7-1: Using ep0 maxpacket: 16 [ 841.305292][ T793] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 841.314236][ T793] usb 7-1: config 0 has no interface number 0 [ 841.320508][ T793] usb 7-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x6C, changing to 0xC [ 841.333797][ T793] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 841.373720][ T793] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 841.387133][ T793] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 841.522000][ T793] usb 7-1: Product: syz [ 841.538838][ T793] usb 7-1: SerialNumber: syz [ 841.548713][ T793] usb 7-1: config 0 descriptor?? [ 841.562847][ T793] usbhid 7-1:0.8: couldn't find an input interrupt endpoint [ 841.774831][T15366] usb 7-1: USB disconnect, device number 19 [ 844.077724][T15718] 9pnet_fd: Insufficient options for proto=fd [ 844.627031][ T24] usb 5-1: USB disconnect, device number 52 [ 847.282778][ T24] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 847.535222][T15745] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2308'. [ 847.556968][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 847.597811][T15745] openvswitch: netlink: Flow actions attr not present in new flow. [ 847.614534][ T24] usb 6-1: config 1 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 847.654922][T15755] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2309'. [ 847.715393][ T24] usb 6-1: New USB device found, idVendor=0582, idProduct=00eb, bcdDevice= 0.40 [ 847.834937][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.876710][ T24] usb 6-1: Product: syz [ 847.905302][ T24] usb 6-1: Manufacturer: syz [ 848.537504][ T24] usb 6-1: SerialNumber: syz [ 848.745932][ T24] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 848.798260][ T24] cdc_acm 6-1:1.2: skipping garbage [ 848.806712][ T24] cdc_acm 6-1:1.2: probe with driver cdc_acm failed with error -22 [ 848.832710][ T24] usb 6-1: USB disconnect, device number 36 [ 848.876969][T15036] udevd[15036]: setting owner of /dev/bus/usb/006/036 to uid=0, gid=0 failed: No such file or directory [ 849.005031][T15036] udevd[15036]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 849.226816][ T24] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 849.356821][ T24] usb 6-1: device descriptor read/64, error -71 [ 849.640673][ T24] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 849.796787][ T24] usb 6-1: device descriptor read/64, error -71 [ 849.907349][ T24] usb usb6-port1: attempt power cycle [ 850.428845][T15775] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2316'. [ 850.453589][ T29] audit: type=1400 audit(2000000654.539:1088): avc: denied { execute } for pid=15774 comm="syz.6.2316" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=49759 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 850.718663][ T24] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 850.777025][ T24] usb 6-1: device descriptor read/8, error -71 [ 850.845242][T15777] 9pnet_fd: Insufficient options for proto=fd [ 851.176974][ T24] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 851.218904][ T24] usb 6-1: device descriptor read/8, error -71 [ 851.327852][ T24] usb usb6-port1: unable to enumerate USB device [ 853.721030][T15804] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2322'. [ 855.806985][ T5923] libceph: connect (1)[c::]:6789 error -101 [ 855.813084][ T5923] libceph: mon0 (1)[c::]:6789 connect error [ 856.427940][ T24] libceph: connect (1)[c::]:6789 error -101 [ 856.434087][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 856.839653][T15820] ceph: No mds server is up or the cluster is laggy [ 856.947567][ T5922] libceph: connect (1)[c::]:6789 error -101 [ 856.955584][ T5922] libceph: mon0 (1)[c::]:6789 connect error [ 857.568423][T15841] 9pnet_fd: Insufficient options for proto=fd [ 859.009075][T15849] overlayfs: failed to clone upperpath [ 859.596697][T15859] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 859.653430][ T29] audit: type=1400 audit(2000000664.249:1089): avc: denied { ioctl } for pid=15858 comm="syz.5.2335" path="socket:[50386]" dev="sockfs" ino=50386 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 860.707768][T15874] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2339'. [ 862.496490][T15892] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 862.529665][T15892] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 863.016697][T15897] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2345'. [ 863.456834][ T24] usb 6-1: new low-speed USB device number 41 using dummy_hcd [ 863.495566][T15903] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2347'. [ 863.608436][ T24] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 863.622860][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 863.679289][ T24] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 863.710965][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.749993][ T24] usb 6-1: config 0 descriptor?? [ 864.013143][T15906] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2348'. [ 864.217596][ T12] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 865.425240][T15916] 9pnet_fd: Insufficient options for proto=fd [ 865.942060][ T5923] usb 6-1: USB disconnect, device number 41 [ 866.433211][T15924] FAULT_INJECTION: forcing a failure. [ 866.433211][T15924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 866.645272][T15924] CPU: 1 UID: 0 PID: 15924 Comm: syz.5.2354 Tainted: G L syzkaller #0 PREEMPT(full) [ 866.645307][T15924] Tainted: [L]=SOFTLOCKUP [ 866.645323][T15924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 866.645336][T15924] Call Trace: [ 866.645343][T15924] [ 866.645353][T15924] dump_stack_lvl+0x100/0x190 [ 866.645391][T15924] should_fail_ex.cold+0x5/0xa [ 866.645419][T15924] _copy_from_user+0x2e/0xd0 [ 866.645451][T15924] copy_msghdr_from_user+0x9f/0x4f0 [ 866.645482][T15924] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 866.645516][T15924] ? rcu_is_watching+0x12/0xc0 [ 866.645540][T15924] ? ___sys_recvmsg+0x177/0x1a0 [ 866.645567][T15924] ? kfree+0x2ec/0x6b0 [ 866.645591][T15924] ? __pfx___schedule+0x10/0x10 [ 866.645617][T15924] ___sys_recvmsg+0xdd/0x1a0 [ 866.645647][T15924] ? __pfx____sys_recvmsg+0x10/0x10 [ 866.645676][T15924] ? irqentry_exit+0x180/0x670 [ 866.645713][T15924] ? __pfx___might_resched+0x10/0x10 [ 866.645744][T15924] do_recvmmsg+0x301/0x760 [ 866.645778][T15924] ? __pfx_do_recvmmsg+0x10/0x10 [ 866.645805][T15924] ? rcu_is_watching+0x12/0xc0 [ 866.645855][T15924] __x64_sys_recvmmsg+0x22a/0x280 [ 866.645881][T15924] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 866.645914][T15924] do_syscall_64+0x106/0xf80 [ 866.645936][T15924] ? clear_bhb_loop+0x40/0x90 [ 866.645963][T15924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.645984][T15924] RIP: 0033:0x7f7da159c799 [ 866.646002][T15924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 866.646022][T15924] RSP: 002b:00007f7da2401028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 866.646043][T15924] RAX: ffffffffffffffda RBX: 00007f7da1816180 RCX: 00007f7da159c799 [ 866.646058][T15924] RDX: 000000000000045b RSI: 0000200000008880 RDI: 0000000000000003 [ 866.646071][T15924] RBP: 00007f7da2401090 R08: 0000000000000000 R09: 0000000000000000 [ 866.646084][T15924] R10: 0000000044000102 R11: 0000000000000246 R12: 0000000000000002 [ 866.646097][T15924] R13: 00007f7da1816218 R14: 00007f7da1816180 R15: 00007ffe3db9f258 [ 866.646127][T15924] [ 867.507243][T15932] netlink: 'syz.0.2357': attribute type 2 has an invalid length. [ 868.096281][T15944] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2359'. [ 868.337306][ T5922] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 868.370355][ T5923] libceph: connect (1)[c::]:6789 error -13 [ 868.376467][ T5923] libceph: mon0 (1)[c::]:6789 connect error [ 868.390915][T15935] ceph: No mds server is up or the cluster is laggy [ 868.540632][ T5922] usb 7-1: Using ep0 maxpacket: 16 [ 868.552805][ T5922] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 868.574186][ T5922] usb 7-1: config 0 interface 0 has no altsetting 0 [ 868.581496][ T5922] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 868.616354][ T5922] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.666012][ T5923] libceph: connect (1)[c::]:6789 error -13 [ 868.672017][ T5923] libceph: mon0 (1)[c::]:6789 connect error [ 868.714820][ T5922] usb 7-1: config 0 descriptor?? [ 869.693592][ T29] audit: type=1400 audit(2000000674.309:1090): avc: denied { setopt } for pid=15945 comm="syz.6.2353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 869.724543][T15951] delete_channel: no stack [ 869.783210][T15965] netlink: 'syz.2.2361': attribute type 1 has an invalid length. [ 869.842593][T15963] fuse: Unknown parameter '00000000000000000000005*›' [ 869.894040][ T5922] nzxt-smart2 0003:1E71:2009.0014: unknown main item tag 0x0 [ 869.931829][ T5922] nzxt-smart2 0003:1E71:2009.0014: unknown main item tag 0x0 [ 869.970043][ T5922] nzxt-smart2 0003:1E71:2009.0014: unknown main item tag 0x0 [ 869.988842][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.016170][ T5922] nzxt-smart2 0003:1E71:2009.0014: unknown main item tag 0x0 [ 870.037500][ T5922] nzxt-smart2 0003:1E71:2009.0014: unknown main item tag 0x0 [ 870.079269][ T5922] nzxt-smart2 0003:1E71:2009.0014: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.6-1/input0 [ 870.143439][ C1] usb 7-1: input irq status -75 received [ 870.418547][T15970] 9pnet_fd: Insufficient options for proto=fd [ 870.732696][ T9] usb 7-1: USB disconnect, device number 20 [ 870.844231][T15967] fido_id[15967]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 871.212013][T15978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 871.246772][ T793] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 871.352104][T15978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 871.436720][ T5922] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 871.537017][ T793] usb 6-1: Using ep0 maxpacket: 16 [ 871.552842][ T793] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 872.076831][ T793] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 872.117853][ T793] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 872.183440][ T793] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 872.202039][ T793] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 872.242252][ T793] usb 6-1: Manufacturer: syz [ 872.277348][ T793] usb 6-1: config 0 descriptor?? [ 872.282805][ T5922] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 872.296677][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.326688][ T5922] usb 5-1: Product: syz [ 872.330914][ T5922] usb 5-1: Manufacturer: syz [ 872.404072][ T5922] usb 5-1: SerialNumber: syz [ 872.432113][ T5922] usb 5-1: config 0 descriptor?? [ 873.287647][T15978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 873.296332][T15978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 873.430222][T15999] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2372'. [ 874.629138][ T5922] usb 5-1: Firmware version (0.0) predates our first public release. [ 874.724196][ T5923] usb 6-1: USB disconnect, device number 42 [ 874.746705][ T5922] usb 5-1: Please update to version 0.2 or newer [ 874.894942][ T5922] usb 5-1: USB disconnect, device number 53 [ 875.416505][ T793] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 875.459541][T16030] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(13) [ 875.466193][T16030] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 875.474032][T16030] vhci_hcd vhci_hcd.0: Device attached [ 875.606258][ T793] usb 7-1: Using ep0 maxpacket: 32 [ 875.684621][ T793] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 875.696072][ T29] audit: type=1326 audit(2000000680.299:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16027 comm="syz.2.2380" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f634019c799 code=0x0 [ 875.749102][ T793] usb 7-1: config 0 has no interface number 0 [ 875.997049][T16031] vhci_hcd: connection closed [ 876.008846][T11314] vhci_hcd vhci_hcd.5: stop threads [ 876.030135][ T793] usb 7-1: config 0 interface 184 has no altsetting 0 [ 876.049756][T11314] vhci_hcd vhci_hcd.5: release socket [ 876.055422][T11314] vhci_hcd vhci_hcd.5: disconnect device [ 876.074600][ T793] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 876.100487][ T793] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.116949][ T9] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 876.130412][T16021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2377'. [ 876.155187][ T793] usb 7-1: Product: syz [ 876.176735][ T793] usb 7-1: Manufacturer: syz [ 876.181636][ T793] usb 7-1: SerialNumber: syz [ 876.217890][ T793] usb 7-1: config 0 descriptor?? [ 876.223689][T16038] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 876.418283][ T5923] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 876.478627][T16042] /dev/nullb0: Can't lookup blockdev [ 876.719517][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 876.744591][ T5923] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 876.759874][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.784424][ T5923] usb 3-1: config 0 descriptor?? [ 876.936076][ T29] audit: type=1400 audit(2000000681.519:1092): avc: denied { bind } for pid=16022 comm="syz.6.2379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 876.977738][ T793] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 876.993588][ T793] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 877.019553][ T5923] usbhid 3-1:0.0: can't add hid device: -71 [ 877.039088][ T5923] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 877.103045][ T5923] usb 3-1: USB disconnect, device number 56 [ 877.528357][ T5923] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 877.563657][T16061] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 877.687102][ T5923] usb 3-1: Using ep0 maxpacket: 32 [ 877.792524][ T5923] usb 3-1: config index 0 descriptor too short (expected 36, got 27) [ 878.013513][ T5923] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 878.046082][ T5923] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 878.081680][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.104165][ T5923] usb 3-1: config 0 descriptor?? [ 878.121382][ T5923] ldusb 3-1:0.0: Interrupt in endpoint not found [ 878.145916][ T5923] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 878.520494][ T9] usb 3-1: USB disconnect, device number 57 [ 878.620634][ T793] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 878.634668][ T793] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 878.644786][ T793] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 878.666146][ T793] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 878.681174][ T793] usb 7-1: USB disconnect, device number 21 [ 878.722987][T16076] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 879.326776][ T5922] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 879.385333][T16094] siw: device registration error -23 [ 879.523341][T16100] capability: warning: `syz.6.2398' uses 32-bit capabilities (legacy support in use) [ 879.533542][ T5922] usb 5-1: Using ep0 maxpacket: 8 [ 879.539989][T16100] netlink: 'syz.6.2398': attribute type 1 has an invalid length. [ 879.558220][ T5922] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 879.589980][ T5922] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 879.651836][ T5922] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 879.970329][ T5922] usb 5-1: config 250 has no interface number 0 [ 879.990985][ T5922] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 880.002860][ T5922] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 880.031289][T16100] team0: Device gtp0 is of different type [ 880.086693][ T5922] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 880.132925][ T5922] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 880.666678][ T5922] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 880.694837][ T5922] usb 5-1: config 250 interface 228 has no altsetting 0 [ 880.763285][ T5922] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 880.777720][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 880.786014][ T5922] usb 5-1: Product: syz [ 880.810404][ T5922] usb 5-1: SerialNumber: syz [ 880.829499][ T5922] hub 5-1:250.228: bad descriptor, ignoring hub [ 880.926745][ T5922] hub 5-1:250.228: probe with driver hub failed with error -5 [ 880.966930][ T5923] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 881.256820][ T5923] usb 3-1: Using ep0 maxpacket: 16 [ 881.265217][ T5923] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 881.276672][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.329659][ T5922] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 54 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 881.346723][ T5923] usb 3-1: Product: syz [ 881.354364][ T5923] usb 3-1: Manufacturer: syz [ 881.374702][ T5923] usb 3-1: SerialNumber: syz [ 881.428738][T16123] fuse: Unknown parameter 'rooØ'tmode' [ 881.685400][T16129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2407'. [ 881.695204][T16129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2407'. [ 883.539835][T16085] usb 5-1: reset high-speed USB device number 54 using dummy_hcd [ 884.392803][T16149] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 885.098081][ T5923] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 885.119299][ T5923] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 885.147176][ T5923] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 885.155942][ T5923] usb 3-1: media controller created [ 885.172976][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 885.211914][ T5923] zl10353_read_register: readreg error (reg=127, ret==-71) [ 885.431331][ T5923] dvb_usb_gl861 3-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 885.631445][ T5923] usb 3-1: USB disconnect, device number 58 [ 885.870913][T16173] mkiss: ax0: crc mode is auto. [ 885.914973][T16175] overlayfs: missing 'lowerdir' [ 885.926850][T16175] vivid-000: disconnect [ 885.932305][T16175] vivid-000: reconnect [ 887.046719][ T10] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 887.201872][ T10] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 887.212548][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.221496][ T10] usb 3-1: Product: syz [ 887.225840][T16188] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2419'. [ 887.236124][ T10] usb 3-1: Manufacturer: syz [ 887.242349][ T10] usb 3-1: SerialNumber: syz [ 887.251661][ T10] usb 3-1: config 0 descriptor?? [ 887.483800][T16196] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2423'. [ 888.301305][ T10] usb 3-1: Firmware version (0.0) predates our first public release. [ 888.312565][ T10] usb 3-1: Please update to version 0.2 or newer [ 888.564258][T16211] input: syz1 as /devices/virtual/input/input33 [ 888.697775][ T29] audit: type=1400 audit(2000000693.309:1093): avc: denied { lock } for pid=16210 comm="syz.6.2425" path="socket:[52295]" dev="sockfs" ino=52295 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 889.044954][T16217] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 889.077696][T16085] usb 5-1: device descriptor read/64, error -110 [ 889.319463][T16085] usb 5-1: reset high-speed USB device number 54 using dummy_hcd [ 889.646014][T16085] usb 5-1: device descriptor read/64, error -32 [ 889.654241][ T9] usb 3-1: USB disconnect, device number 59 [ 889.894612][T16085] usb 5-1: reset high-speed USB device number 54 using dummy_hcd [ 889.948626][T16085] usb 5-1: device descriptor read/8, error -32 [ 890.338493][T16085] usb 5-1: reset high-speed USB device number 54 using dummy_hcd [ 890.357877][T16245] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 890.368549][T16085] usb 5-1: device descriptor read/8, error -32 [ 890.480576][ T793] usb 5-1: USB disconnect, device number 54 [ 890.516563][ T793] usblp0: removed [ 890.731150][T16252] comedi comedi0: Minor 3 could not be opened [ 892.522897][T16286] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2444'. [ 895.017457][T16300] exFAT-fs (loop4): unable to read boot sector [ 895.023739][T16300] exFAT-fs (loop4): failed to read boot sector [ 895.029988][T16300] exFAT-fs (loop4): failed to recognize exfat type [ 895.166202][T16309] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 895.447742][T16320] input: syz0 as /devices/virtual/input/input34 [ 895.481929][T16320] trusted_key: encrypted_key: keylen parameter is missing [ 895.735040][T16331] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 897.084395][T16226] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 897.947020][T16353] netlink: 'syz.6.2462': attribute type 1 has an invalid length. [ 897.971664][T16353] team0: Device gtp0 is of different type [ 898.350694][T16363] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 898.366223][T16363] exFAT-fs (nullb0): invalid boot record signature [ 898.372855][T16363] exFAT-fs (nullb0): failed to read boot sector [ 898.379420][T16363] exFAT-fs (nullb0): failed to recognize exfat type [ 899.581649][T16370] openvswitch: netlink: Flow key attr not present in new flow. [ 900.886950][ T9] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 901.033458][ T793] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 901.126113][ T9] usb 5-1: device descriptor read/64, error -71 [ 901.170316][T16384] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2467'. [ 901.600011][ T793] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 901.609490][ T793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.646794][ T9] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 901.745531][ T793] usb 3-1: Product: syz [ 901.774984][ T793] usb 3-1: Manufacturer: syz [ 901.807296][ T793] usb 3-1: SerialNumber: syz [ 901.834060][T16396] netlink: 'syz.6.2473': attribute type 1 has an invalid length. [ 901.841934][T16396] netlink: 5020 bytes leftover after parsing attributes in process `syz.6.2473'. [ 901.916968][ T9] usb 5-1: device descriptor read/64, error -71 [ 902.205422][ T793] usb 3-1: config 0 descriptor?? [ 902.388786][ T9] usb usb5-port1: attempt power cycle [ 902.418251][T16403] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 902.757142][ T9] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 902.886925][ T9] usb 5-1: device descriptor read/8, error -71 [ 903.102043][T16418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 903.111248][T16418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 903.589084][ T793] usb 3-1: Firmware version (0.0) predates our first public release. [ 903.601575][ T793] usb 3-1: Please update to version 0.2 or newer [ 903.696753][ T9] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 903.760036][ T9] usb 5-1: device descriptor read/8, error -71 [ 903.897302][ T9] usb usb5-port1: unable to enumerate USB device [ 904.340572][ T9] usb 3-1: USB disconnect, device number 60 [ 904.990560][ T29] audit: type=1400 audit(2000000709.609:1094): avc: denied { setopt } for pid=16442 comm="syz.6.2482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 905.085135][T16444] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2482'. [ 905.406767][ T793] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 905.776799][ T5923] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 905.781188][T16450] openvswitch: netlink: Flow key attr not present in new flow. [ 905.792366][ T793] usb 7-1: Using ep0 maxpacket: 32 [ 905.802066][ T793] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 905.813352][ T793] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 905.824311][ T793] usb 7-1: config 0 interface 0 has no altsetting 0 [ 905.846526][ T793] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 905.856290][ T793] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.864628][ T793] usb 7-1: Product: syz [ 905.958484][ T793] usb 7-1: Manufacturer: syz [ 905.967648][ T793] usb 7-1: SerialNumber: syz [ 905.989608][ T793] usb 7-1: config 0 descriptor?? [ 906.018439][ T5923] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 906.026865][ T5923] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 906.037972][ T5923] usb 6-1: config 0 has no interface number 0 [ 906.044211][ T5923] usb 6-1: config 0 interface 251 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 906.070351][ T5923] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 906.080499][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.089319][ T5923] usb 6-1: Product: syz [ 906.124905][ T5923] usb 6-1: Manufacturer: syz [ 906.129751][ T5923] usb 6-1: SerialNumber: syz [ 906.137601][ T5923] usb 6-1: config 0 descriptor?? [ 906.145730][ T5923] asix 6-1:0.251: probe with driver asix failed with error -22 [ 906.452157][ T793] gs_usb 7-1:0.0: Couldn't get device config: (err=-71) [ 906.467063][ T793] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -71 [ 906.505417][T16446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 906.514094][ T793] usb 7-1: USB disconnect, device number 22 [ 906.522153][T16446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 906.811705][T16457] blktrace: Concurrent blktraces are not allowed on loop10 [ 906.930558][T11875] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 907.380550][T16461] ufs: You didn't specify the type of your ufs filesystem [ 907.380550][T16461] [ 907.380550][T16461] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 907.380550][T16461] [ 907.380550][T16461] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 907.426726][T16461] ufs: ufstype=old is supported read-only [ 907.432897][T16461] ufs: ufs_fill_super(): bad magic number [ 907.473132][T16463] netlink: 'syz.2.2487': attribute type 1 has an invalid length. [ 908.306532][ T5922] usb 6-1: USB disconnect, device number 43 [ 908.697345][ T793] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 908.783515][T16487] team0: Device gtp0 is of different type [ 908.856877][ T793] usb 7-1: device descriptor read/64, error -71 [ 909.135202][ T793] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 909.252014][T16491] random: crng reseeded on system resumption [ 909.392455][ T793] usb 7-1: device descriptor read/64, error -71 [ 909.608011][T16501] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2496'. [ 909.638932][ T793] usb usb7-port1: attempt power cycle [ 909.645734][T16501] veth1_macvtap: left promiscuous mode [ 909.891768][T16504] netlink: 'syz.5.2497': attribute type 2 has an invalid length. [ 909.900854][T16504] netlink: 'syz.5.2497': attribute type 1 has an invalid length. [ 910.206941][ T793] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 910.258012][ T793] usb 7-1: device descriptor read/8, error -71 [ 911.261158][T11875] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 911.270500][T11875] Bluetooth: hci1: Injecting HCI hardware error event [ 911.280877][T11875] Bluetooth: hci1: hardware error 0x00 [ 911.666805][ T793] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 911.697075][ T793] usb 7-1: device descriptor read/8, error -71 [ 911.837110][ T793] usb usb7-port1: unable to enumerate USB device [ 912.990714][T16531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 913.006030][T16531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 913.357137][T11875] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 913.397905][T16527] vlan2: entered promiscuous mode [ 913.402984][T16527] macvlan1: entered promiscuous mode [ 914.360765][T16554] tipc: Enabling of bearer rejected, already enabled [ 914.487040][T16553] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 914.589102][T16557] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 916.014659][T16576] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2518'. [ 916.778837][T16585] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2519'. [ 917.155983][T16587] exFAT-fs (loop2): unable to read boot sector [ 917.162430][T16587] exFAT-fs (loop2): failed to read boot sector [ 917.168812][T16587] exFAT-fs (loop2): failed to recognize exfat type [ 917.468553][ T29] audit: type=1400 audit(2000000722.089:1095): avc: denied { map } for pid=16588 comm="syz.5.2520" path="socket:[53693]" dev="sockfs" ino=53693 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 918.873301][T16612] IPVS: Unknown mcast interface: hsr0 [ 919.270686][ T24] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 919.476847][ T5923] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 919.508726][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 919.529197][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 920.569388][ T5923] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 921.369373][T16618] IPVS: Unknown mcast interface: hsr0 [ 921.390272][ T24] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 921.399950][ T5923] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 921.413686][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.422291][ T5923] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 921.431834][ T24] usb 6-1: Product: syz [ 921.448305][ T24] usb 6-1: Manufacturer: syz [ 921.456711][ T5923] usb 7-1: config 1 has no interface number 1 [ 921.476647][ T24] usb 6-1: SerialNumber: syz [ 921.502418][ T5923] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 921.523544][ T24] usb 6-1: config 0 descriptor?? [ 921.623126][ T5923] usb 7-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 921.637118][ T5923] usb 7-1: string descriptor 0 read error: -71 [ 921.643427][ T5923] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 921.652807][ T5923] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.676306][ T5923] usb 7-1: can't set config #1, error -71 [ 921.692608][ T24] usb 6-1: can't set config #0, error -71 [ 921.731332][ T24] usb 6-1: USB disconnect, device number 44 [ 921.741901][ T5923] usb 7-1: USB disconnect, device number 27 [ 921.874917][T16634] sctp: [Deprecated]: syz.4.2532 (pid 16634) Use of int in max_burst socket option deprecated. [ 921.874917][T16634] Use struct sctp_assoc_value instead [ 921.946327][T16642] FAULT_INJECTION: forcing a failure. [ 921.946327][T16642] name failslab, interval 1, probability 0, space 0, times 0 [ 921.965607][T16642] CPU: 1 UID: 0 PID: 16642 Comm: syz.5.2534 Tainted: G L syzkaller #0 PREEMPT(full) [ 921.965629][T16642] Tainted: [L]=SOFTLOCKUP [ 921.965634][T16642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 921.965641][T16642] Call Trace: [ 921.965645][T16642] [ 921.965650][T16642] dump_stack_lvl+0x100/0x190 [ 921.965674][T16642] should_fail_ex.cold+0x5/0xa [ 921.965689][T16642] ? tomoyo_encode2+0xfb/0x3c0 [ 921.965703][T16642] should_failslab+0xc2/0x120 [ 921.965715][T16642] __kmalloc_noprof+0xe0/0x850 [ 921.965730][T16642] ? d_absolute_path+0x136/0x1b0 [ 921.965749][T16642] tomoyo_encode2+0xfb/0x3c0 [ 921.965765][T16642] tomoyo_encode+0x29/0x50 [ 921.965778][T16642] tomoyo_realpath_from_path+0x18c/0x690 [ 921.965796][T16642] tomoyo_path_number_perm+0x23c/0x580 [ 921.965808][T16642] ? tomoyo_path_number_perm+0x22e/0x580 [ 921.965821][T16642] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 921.965849][T16642] ? find_held_lock+0x2b/0x80 [ 921.965863][T16642] ? __fget_files+0x215/0x3d0 [ 921.965873][T16642] ? hook_file_ioctl_common+0x146/0x410 [ 921.965900][T16642] ? __fget_files+0x21f/0x3d0 [ 921.965915][T16642] security_file_ioctl+0xd3/0x230 [ 921.965929][T16642] __x64_sys_ioctl+0xb7/0x210 [ 921.965947][T16642] do_syscall_64+0x106/0xf80 [ 921.965959][T16642] ? clear_bhb_loop+0x40/0x90 [ 921.965973][T16642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.965985][T16642] RIP: 0033:0x7f7da159c799 [ 921.965996][T16642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 921.966008][T16642] RSP: 002b:00007f7da2422028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 921.966019][T16642] RAX: ffffffffffffffda RBX: 00007f7da1816090 RCX: 00007f7da159c799 [ 921.966027][T16642] RDX: 0000200000000100 RSI: 00000000000089f0 RDI: 0000000000000003 [ 921.966034][T16642] RBP: 00007f7da2422090 R08: 0000000000000000 R09: 0000000000000000 [ 921.966040][T16642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 921.966047][T16642] R13: 00007f7da1816128 R14: 00007f7da1816090 R15: 00007ffe3db9f258 [ 921.966063][T16642] [ 921.966074][T16642] ERROR: Out of memory at tomoyo_realpath_from_path. [ 923.825621][T16673] netlink: 'syz.0.2540': attribute type 1 has an invalid length. [ 923.850055][T16673] team0: Device gtp0 is of different type [ 924.478455][ T5923] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 925.068443][ T5923] usb 7-1: config 0 has no interfaces? [ 925.080610][ T5923] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 925.193310][ T5923] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.253735][ T5923] usb 7-1: config 0 descriptor?? [ 925.999308][T16706] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2547'. [ 926.106715][ T793] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 926.270915][ T793] usb 3-1: config 0 has no interfaces? [ 926.270956][ T793] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 926.270980][ T793] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.272600][ T29] audit: type=1400 audit(2000000730.889:1096): avc: denied { read } for pid=16715 comm="syz.4.2549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 926.273477][ T793] usb 3-1: config 0 descriptor?? [ 926.459667][ T5923] usb 7-1: USB disconnect, device number 28 [ 926.765317][T16731] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2550'. [ 927.361601][T16741] IPVS: Unknown mcast interface: hsr0 [ 929.428419][T11314] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 929.815635][ T5922] usb 3-1: USB disconnect, device number 61 [ 929.859859][T16760] netlink: 'syz.0.2557': attribute type 1 has an invalid length. [ 930.308424][T16760] team0: Device gtp0 is of different type [ 931.204971][T16778] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2563'. [ 931.588387][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.866712][ T5923] usb 3-1: new low-speed USB device number 62 using dummy_hcd [ 932.113660][ T5923] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 933.361607][ T5923] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 933.526700][ T5923] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 933.725471][ T29] audit: type=1400 audit(2000000738.299:1097): avc: denied { getopt } for pid=16794 comm="syz.4.2561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 934.033101][ T5923] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 934.044392][ T5923] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 934.050584][T16803] 9p: Bad value for 'rfdno' [ 934.061303][ T5923] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 934.070538][ T5923] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 934.088332][ T5923] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 934.102387][T16803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2569'. [ 934.126745][ T5923] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 934.142378][ T5923] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 934.158011][ T5923] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 934.165523][ T5923] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 934.204924][ T5923] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 934.359569][ T5923] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 934.432513][T16813] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2572'. [ 934.478475][T16814] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 934.825307][ T5923] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 934.854639][ T5923] usb 3-1: string descriptor 0 read error: -71 [ 934.867037][ T5923] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 934.943241][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.105848][ T5923] usb 3-1: can't set config #168, error -71 [ 935.135543][ T5923] usb 3-1: USB disconnect, device number 62 [ 935.533240][T16835] xt_policy: too many policy elements [ 935.560000][T16835] CIFS: Unable to determine destination address [ 935.802598][ T29] audit: type=1400 audit(2000000740.409:1098): avc: denied { write } for pid=16818 comm="syz.2.2575" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 936.107352][ T5817] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 936.123517][ T5817] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 936.134425][ T5817] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 936.144240][ T5817] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 936.151845][ T5817] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 936.218314][T16844] lo speed is unknown, defaulting to 1000 [ 936.585895][T16844] chnl_net:caif_netlink_parms(): no params data found [ 936.619018][ T793] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 936.780723][ T793] usb 6-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 936.801449][ T793] usb 6-1: config 0 interface 0 has no altsetting 0 [ 936.815567][ T793] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 936.826929][ T793] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 936.835866][ T793] usb 6-1: Product: syz [ 936.840080][ T793] usb 6-1: Manufacturer: syz [ 936.844686][ T793] usb 6-1: SerialNumber: syz [ 936.971507][ T793] usb 6-1: config 0 descriptor?? [ 936.977046][T16851] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 936.988456][ T793] usb 6-1: selecting invalid altsetting 0 [ 938.581666][ T5817] Bluetooth: hci2: command tx timeout [ 940.668147][T11875] Bluetooth: hci2: command tx timeout [ 941.161630][T16872] syz.4.2587 (16872): drop_caches: 2 [ 941.352602][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.392725][ T24] usb 6-1: USB disconnect, device number 45 [ 941.639673][ T29] audit: type=1326 audit(2000000746.259:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16880 comm="syz.6.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff0b9c799 code=0x7ffc0000 [ 941.744886][ T29] audit: type=1326 audit(2000000746.259:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16880 comm="syz.6.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff0b9c799 code=0x7ffc0000 [ 941.812662][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.870912][ T29] audit: type=1326 audit(2000000746.259:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16880 comm="syz.6.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f0ff0b9c799 code=0x7ffc0000 [ 941.939337][ T29] audit: type=1326 audit(2000000746.259:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16880 comm="syz.6.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff0b9c799 code=0x7ffc0000 [ 942.066843][ T29] audit: type=1326 audit(2000000746.259:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16880 comm="syz.6.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff0b9c799 code=0x7ffc0000 [ 942.157805][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.173784][ T29] audit: type=1326 audit(2000000746.289:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16880 comm="syz.6.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f0ff0b9c799 code=0x7ffc0000 [ 942.259852][ T29] audit: type=1326 audit(2000000746.289:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16880 comm="syz.6.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff0b9c799 code=0x7ffc0000 [ 942.339476][ T29] audit: type=1326 audit(2000000746.289:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16880 comm="syz.6.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0ff0b9c799 code=0x7ffc0000 [ 942.403827][ T29] audit: type=1326 audit(2000000746.289:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16880 comm="syz.6.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff0b9c799 code=0x7ffc0000 [ 942.562187][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.736668][T11875] Bluetooth: hci2: command tx timeout [ 942.776320][T16844] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.786885][T16844] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.806918][T16844] bridge_slave_0: entered allmulticast mode [ 942.818255][T16844] bridge_slave_0: entered promiscuous mode [ 942.828408][T16844] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.836934][T16844] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.848078][T16844] bridge_slave_1: entered allmulticast mode [ 942.858328][T16844] bridge_slave_1: entered promiscuous mode [ 943.014372][T16844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 943.125905][T16844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 943.743842][T16844] team0: Port device team_slave_0 added [ 943.920388][T16844] team0: Port device team_slave_1 added [ 943.936893][ T793] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 944.096807][ T793] usb 6-1: Using ep0 maxpacket: 32 [ 944.126021][ T793] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 944.135645][ T793] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 944.189030][T16844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 944.202416][T16844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 944.300552][T16844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 944.301812][ T793] usb 6-1: config 0 has no interface number 0 [ 944.352849][T16844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 944.383201][T16844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 944.496961][ T793] usb 6-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 944.499790][T16844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 944.579006][ T793] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 944.588739][ T793] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.602672][ T12] bridge_slave_1: left allmulticast mode [ 944.611913][ T12] bridge_slave_1: left promiscuous mode [ 944.618738][ T793] usb 6-1: Product: syz [ 944.633097][ T793] usb 6-1: Manufacturer: syz [ 944.635831][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 944.665265][ T793] usb 6-1: SerialNumber: syz [ 944.713595][ T793] usb 6-1: config 0 descriptor?? [ 944.799219][T11875] Bluetooth: hci2: command tx timeout [ 945.067156][ T5923] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 945.087748][ T29] audit: type=1800 audit(2000000749.699:1108): pid=16895 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.5.2590" name="/newroot/354/pids.events" dev="tmpfs" ino=1905 res=0 errno=0 [ 945.123468][ T5922] usb 6-1: USB disconnect, device number 46 [ 945.197000][ T5923] usb 7-1: device descriptor read/64, error -71 [ 945.243651][ T12] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 946.506988][ T5923] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 946.656917][ T5923] usb 7-1: device descriptor read/64, error -71 [ 946.706166][T16928] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2598'. [ 946.719946][ T12] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 946.733843][ T12] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 946.743161][ T12] .` (unregistering): Released all slaves [ 946.751926][ T12] bond0 (unregistering): Released all slaves [ 946.757897][T16929] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2598'. [ 946.768003][ T5923] usb usb7-port1: attempt power cycle [ 946.780859][ T12] bond1 (unregistering): Released all slaves [ 946.945001][ T12] : left promiscuous mode [ 947.089530][T16844] hsr_slave_0: entered promiscuous mode [ 947.096340][T16844] hsr_slave_1: entered promiscuous mode [ 947.140856][ T5923] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 947.154807][ T12] tipc: Disabling bearer [ 947.161279][ T12] tipc: Disabling bearer [ 947.174932][ T12] tipc: Disabling bearer [ 947.192559][ T12] tipc: Left network mode [ 947.198605][ T5923] usb 7-1: device descriptor read/8, error -71 [ 947.259409][ T12] IPVS: stopping backup sync thread 8643 ... [ 947.289388][T16942] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2603'. [ 947.456988][ T5923] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 947.513542][ T5923] usb 7-1: device descriptor read/8, error -71 [ 947.643422][ T5923] usb usb7-port1: unable to enumerate USB device [ 948.239684][ T793] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 948.428706][ T793] usb 7-1: config 0 has no interfaces? [ 948.434389][ T793] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 948.447656][T16976] x_tables: duplicate underflow at hook 2 [ 948.789155][ T793] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.816247][ T793] usb 7-1: config 0 descriptor?? [ 948.865383][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 948.893235][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 948.928187][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 948.998852][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 949.334743][ T12] batadv_slave_1: left promiscuous mode [ 949.347001][ T12] veth0_macvtap: left promiscuous mode [ 949.362722][ T12] veth1_vlan: left promiscuous mode [ 949.368165][ T12] veth0_vlan: left promiscuous mode [ 949.963489][ T793] usb 7-1: USB disconnect, device number 33 [ 950.350661][ T12] team0 (unregistering): Port device team_slave_1 removed [ 950.476253][ T12] team0 (unregistering): Port device team_slave_0 removed [ 951.179434][ T9] lo speed is unknown, defaulting to 1000 [ 951.185230][ T9] syz2: Port: 1 Link DOWN [ 951.357287][T17019] openvswitch: netlink: Key 7 has unexpected len 8 expected 12 [ 951.372634][T17019] netlink: 5268 bytes leftover after parsing attributes in process `syz.4.2617'. [ 951.414314][ T9] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 951.679245][ T24] libceph: connect (1)[c::]:6789 error -101 [ 951.685362][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 951.826785][ T9] usb 6-1: device descriptor read/64, error -71 [ 951.849195][T17025] ceph: No mds server is up or the cluster is laggy [ 952.035475][ T24] libceph: connect (1)[c::]:6789 error -101 [ 952.069832][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 952.587236][ T9] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 952.767238][ T9] usb 6-1: device descriptor read/64, error -71 [ 952.911704][ T9] usb usb6-port1: attempt power cycle [ 953.564017][T16844] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 953.638343][T16844] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 953.684056][T16844] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 953.728960][T16844] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 953.798229][ T12] IPVS: stop unused estimator thread 0... [ 953.847009][ T9] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 953.891866][ T9] usb 6-1: device descriptor read/8, error -71 [ 953.950662][T16844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 953.991889][T16844] 8021q: adding VLAN 0 to HW filter on device team0 [ 954.027546][ T93] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.034715][ T93] bridge0: port 1(bridge_slave_0) entered forwarding state [ 954.101222][ T93] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.108407][ T93] bridge0: port 2(bridge_slave_1) entered forwarding state [ 954.177158][T17066] ufs: You didn't specify the type of your ufs filesystem [ 954.177158][T17066] [ 954.177158][T17066] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 954.177158][T17066] [ 954.177158][T17066] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 954.226955][T17066] ufs: ufstype=old is supported read-only [ 954.233006][T17066] ufs: ufs_fill_super(): bad magic number [ 954.904346][T17079] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2623'. [ 955.041553][T16844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 955.186516][T16844] veth0_vlan: entered promiscuous mode [ 955.252298][T16844] veth1_vlan: entered promiscuous mode [ 955.905032][T17109] netlink: 'syz.4.2625': attribute type 1 has an invalid length. [ 955.927227][T16844] veth0_macvtap: entered promiscuous mode [ 955.967900][T16844] veth1_macvtap: entered promiscuous mode [ 956.120833][T16844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 956.226441][T17099] team0: Device gtp0 is of different type [ 956.442201][T16844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 956.467968][T17116] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17116 comm=syz.6.2628 [ 956.489622][T11314] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.512206][T11314] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.573467][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.588938][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.845155][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 956.854872][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 956.974666][T12539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 957.006747][ T5923] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 957.014589][T12539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 957.170705][ T5923] usb 3-1: config 0 has an invalid interface number: 237 but max is 0 [ 957.207107][ T5923] usb 3-1: config 0 has no interface number 0 [ 957.243829][ T5923] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 957.310961][ T5923] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 957.381841][ T5923] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 957.423214][ T5923] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 957.468972][ T5923] usb 3-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be [ 957.479275][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3 [ 957.504380][ T5923] usb 3-1: Product: syz [ 957.515805][T17141] netlink: 'syz.4.2632': attribute type 3 has an invalid length. [ 957.524890][ T5923] usb 3-1: Manufacturer: syz [ 957.554084][ T5923] usb 3-1: SerialNumber: syz [ 957.578489][ T5923] usb 3-1: config 0 descriptor?? [ 957.605226][ T5923] xpad 3-1:0.237: probe with driver xpad failed with error -5 [ 957.677376][ T793] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 957.816770][ T793] usb 6-1: device descriptor read/64, error -71 [ 957.828746][ T24] usb 3-1: USB disconnect, device number 63 [ 957.846309][T17144] exFAT-fs (loop6): unable to read boot sector [ 957.886276][T17144] exFAT-fs (loop6): failed to read boot sector [ 957.905068][T17144] exFAT-fs (loop6): failed to recognize exfat type [ 957.956710][ T5923] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 958.066784][ T793] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 958.153819][ T5923] usb 5-1: config 0 has an invalid interface number: 113 but max is 0 [ 958.172544][ T5923] usb 5-1: config 0 has no interface number 0 [ 958.183332][ T5923] usb 5-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 958.196672][ T5923] usb 5-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 958.206868][ T793] usb 6-1: device descriptor read/64, error -71 [ 958.217761][ T5923] usb 5-1: config 0 interface 113 has no altsetting 0 [ 958.238140][ T5923] usb 5-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 958.247792][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.257929][ T5923] usb 5-1: Product: syz [ 958.287735][ T5923] usb 5-1: Manufacturer: syz [ 958.308639][ T5923] usb 5-1: SerialNumber: syz [ 958.317138][ T793] usb usb6-port1: attempt power cycle [ 958.333251][ T5923] usb 5-1: config 0 descriptor?? [ 958.349174][ T5923] pn533_usb 5-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 958.527683][T17163] FAULT_INJECTION: forcing a failure. [ 958.527683][T17163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 958.541093][T17163] CPU: 0 UID: 0 PID: 17163 Comm: syz.0.2634 Tainted: G L syzkaller #0 PREEMPT(full) [ 958.541127][T17163] Tainted: [L]=SOFTLOCKUP [ 958.541134][T17163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 958.541145][T17163] Call Trace: [ 958.541151][T17163] [ 958.541157][T17163] dump_stack_lvl+0x100/0x190 [ 958.541181][T17163] should_fail_ex.cold+0x5/0xa [ 958.541196][T17163] _copy_from_iter+0x1f4/0x1690 [ 958.541217][T17163] ? __pfx__copy_from_iter+0x10/0x10 [ 958.541233][T17163] ? __pfx___alloc_skb+0x10/0x10 [ 958.541252][T17163] netlink_sendmsg+0x808/0xda0 [ 958.541269][T17163] ? __pfx_netlink_sendmsg+0x10/0x10 [ 958.541284][T17163] ? __pfx_netlink_sendmsg+0x10/0x10 [ 958.541301][T17163] ____sys_sendmsg+0x9e1/0xb70 [ 958.541315][T17163] ? __pfx_netlink_sendmsg+0x10/0x10 [ 958.541330][T17163] ? __pfx_____sys_sendmsg+0x10/0x10 [ 958.541349][T17163] ? __pfx___schedule+0x10/0x10 [ 958.541362][T17163] ___sys_sendmsg+0x190/0x1e0 [ 958.541379][T17163] ? __pfx____sys_sendmsg+0x10/0x10 [ 958.541393][T17163] ? preempt_schedule_common+0x42/0xc0 [ 958.541408][T17163] ? preempt_schedule_thunk+0x16/0x30 [ 958.541429][T17163] ? __rcu_read_unlock+0x26a/0x5e0 [ 958.541457][T17163] __sys_sendmsg+0x170/0x220 [ 958.541470][T17163] ? __pfx___sys_sendmsg+0x10/0x10 [ 958.541491][T17163] do_syscall_64+0x106/0xf80 [ 958.541504][T17163] ? clear_bhb_loop+0x40/0x90 [ 958.541519][T17163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.541531][T17163] RIP: 0033:0x7f747d19c799 [ 958.541543][T17163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 958.541554][T17163] RSP: 002b:00007f747dfd0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 958.541567][T17163] RAX: ffffffffffffffda RBX: 00007f747d416090 RCX: 00007f747d19c799 [ 958.541575][T17163] RDX: 0000000010000084 RSI: 00002000000002c0 RDI: 0000000000000006 [ 958.541582][T17163] RBP: 00007f747dfd0090 R08: 0000000000000000 R09: 0000000000000000 [ 958.541589][T17163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 958.541595][T17163] R13: 00007f747d416128 R14: 00007f747d416090 R15: 00007ffd484c4598 [ 958.541610][T17163] [ 958.988376][ T5922] usb 5-1: USB disconnect, device number 60 [ 959.017860][ T793] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 959.037430][ T793] usb 6-1: device descriptor read/8, error -71 [ 959.316734][ T793] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 959.402399][ T793] usb 6-1: device descriptor read/8, error -71 [ 959.481416][T17169] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2635'. [ 959.531235][ T793] usb usb6-port1: unable to enumerate USB device [ 960.589776][T17184] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2638'. [ 960.866029][T17006] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 962.082072][T17205] lo speed is unknown, defaulting to 1000 [ 962.087989][T17205] lo speed is unknown, defaulting to 1000 [ 962.096817][T17205] lo speed is unknown, defaulting to 1000 [ 962.345190][T17208] syz.5.2644: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 962.363102][T17208] CPU: 0 UID: 0 PID: 17208 Comm: syz.5.2644 Tainted: G L syzkaller #0 PREEMPT(full) [ 962.363146][T17208] Tainted: [L]=SOFTLOCKUP [ 962.363156][T17208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 962.363170][T17208] Call Trace: [ 962.363179][T17208] [ 962.363190][T17208] dump_stack_lvl+0x100/0x190 [ 962.363235][T17208] warn_alloc.cold+0x95/0x1c1 [ 962.363279][T17208] ? __pfx_warn_alloc+0x10/0x10 [ 962.363310][T17208] ? irqentry_exit+0x180/0x670 [ 962.363337][T17208] ? lockdep_hardirqs_on+0x78/0x100 [ 962.363372][T17208] ? xskq_create+0xfb/0x1d0 [ 962.363415][T17208] ? xskq_create+0xfb/0x1d0 [ 962.363450][T17208] __vmalloc_node_range_noprof+0x1252/0x1530 [ 962.363487][T17208] ? xskq_create+0xfb/0x1d0 [ 962.363538][T17208] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 962.363580][T17208] ? xskq_create+0xfb/0x1d0 [ 962.363616][T17208] vmalloc_user_noprof+0x9e/0xe0 [ 962.363645][T17208] ? xskq_create+0xfb/0x1d0 [ 962.363681][T17208] xskq_create+0xfb/0x1d0 [ 962.363716][T17208] ? write_comp_data+0x40/0x90 [ 962.363749][T17208] xsk_setsockopt+0x743/0xab0 [ 962.363785][T17208] ? __pfx_xsk_setsockopt+0x10/0x10 [ 962.363818][T17208] ? __rcu_read_unlock+0x26a/0x5e0 [ 962.363864][T17208] ? selinux_socket_setsockopt+0x6a/0x80 [ 962.363891][T17208] ? __pfx_xsk_setsockopt+0x10/0x10 [ 962.363927][T17208] do_sock_setsockopt+0xf3/0x1d0 [ 962.363962][T17208] __sys_setsockopt+0x195/0x220 [ 962.363993][T17208] __x64_sys_setsockopt+0xbd/0x160 [ 962.364016][T17208] ? do_syscall_64+0x95/0xf80 [ 962.364041][T17208] ? lockdep_hardirqs_on+0x78/0x100 [ 962.364067][T17208] do_syscall_64+0x106/0xf80 [ 962.364091][T17208] ? clear_bhb_loop+0x40/0x90 [ 962.364120][T17208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.364144][T17208] RIP: 0033:0x7f7da159c799 [ 962.364165][T17208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 962.364188][T17208] RSP: 002b:00007f7da23e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 962.364211][T17208] RAX: ffffffffffffffda RBX: 00007f7da1816270 RCX: 00007f7da159c799 [ 962.364227][T17208] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 962.364242][T17208] RBP: 00007f7da1632c99 R08: 0000000000000004 R09: 0000000000000000 [ 962.364256][T17208] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 962.364271][T17208] R13: 00007f7da1816308 R14: 00007f7da1816270 R15: 00007ffe3db9f258 [ 962.364305][T17208] [ 962.364343][T17208] Mem-Info: [ 962.645429][T17208] active_anon:46056 inactive_anon:0 isolated_anon:0 [ 962.645429][T17208] active_file:15580 inactive_file:51909 isolated_file:0 [ 962.645429][T17208] unevictable:768 dirty:301 writeback:0 [ 962.645429][T17208] slab_reclaimable:13208 slab_unreclaimable:98268 [ 962.645429][T17208] mapped:54196 shmem:37762 pagetables:1759 [ 962.645429][T17208] sec_pagetables:0 bounce:0 [ 962.645429][T17208] kernel_misc_reclaimable:0 [ 962.645429][T17208] free:1241325 free_pcp:11167 free_cma:0 [ 962.691580][T17208] Node 0 active_anon:184224kB inactive_anon:0kB active_file:62320kB inactive_file:207424kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:216784kB dirty:1204kB writeback:0kB shmem:149512kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13068kB pagetables:6836kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 962.724143][T17208] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:200kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 962.754127][T17208] Node 0 DMA free:15344kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 962.784681][T17208] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 962.794007][T17208] Node 0 DMA32 free:996120kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:184224kB inactive_anon:0kB active_file:62320kB inactive_file:207424kB unevictable:1536kB writepending:1204kB zspages:0kB present:3129332kB managed:2537204kB mlocked:0kB bounce:0kB free_pcp:42612kB local_pcp:7212kB free_cma:0kB [ 962.827531][T17208] lowmem_reserve[]: 0 0 1 1 1 [ 962.832479][T17208] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1048kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 962.862289][T17208] lowmem_reserve[]: 0 0 0 0 0 [ 962.867548][T17208] Node 1 Normal free:3953836kB boost:0kB min:55832kB low:69788kB high:83744kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:2048kB local_pcp:0kB free_cma:0kB [ 962.907832][T17208] lowmem_reserve[]: 0 0 0 0 0 [ 962.912733][T17208] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 962.927560][T17208] Node 0 DMA32: 2778*4kB (UM) 3059*8kB (U) 1535*16kB (UE) 537*32kB (UM) 159*64kB (UM) 498*128kB (UM) 300*256kB (UME) 182*512kB (UM) 105*1024kB (UME) 19*2048kB (UM) 129*4096kB (M) = 996048kB [ 962.946753][T17208] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 962.958472][T17208] Node 1 Normal: 1*4kB (M) 3*8kB (UM) 5*16kB (UM) 14*32kB (UM) 6*64kB (UM) 8*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 7*2048kB (UM) 960*4096kB (UM) = 3953836kB [ 962.977332][T17208] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 962.990128][T17208] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 962.999678][T17208] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 963.009546][T17208] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 963.019472][T17208] 105276 total pagecache pages [ 963.024285][T17208] 0 pages in swap cache [ 963.028581][T17208] Free swap = 124996kB [ 963.032856][T17208] Total swap = 124996kB [ 963.037214][T17208] 2097051 pages RAM [ 963.041068][T17208] 0 pages HighMem/MovableOnly [ 963.045871][T17208] 430873 pages reserved [ 963.050135][T17208] 0 pages cma reserved [ 963.168009][T17205] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 964.274700][T17205] lo speed is unknown, defaulting to 1000 [ 964.294010][T17205] lo speed is unknown, defaulting to 1000 [ 964.311346][T17205] lo speed is unknown, defaulting to 1000 [ 964.329879][T17205] lo speed is unknown, defaulting to 1000 [ 964.347404][T17205] lo speed is unknown, defaulting to 1000 [ 965.359743][T17239] vivid-000: disconnect [ 965.375699][T17238] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2650'. [ 965.626747][ T9] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 965.786768][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 965.812518][ T9] usb 3-1: config 51 has an invalid interface number: 208 but max is 0 [ 965.821215][ T9] usb 3-1: config 51 has no interface number 0 [ 965.835966][ T9] usb 3-1: config 51 interface 208 has no altsetting 0 [ 965.901560][T17248] netlink: 'syz.5.2654': attribute type 1 has an invalid length. [ 966.056895][ T9] usb 3-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=8b.70 [ 966.066067][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.084769][ T9] usb 3-1: Product: syz [ 966.095408][T17248] team0: Device gtp0 is of different type [ 966.101402][ T9] usb 3-1: Manufacturer: syz [ 966.106031][ T9] usb 3-1: SerialNumber: syz [ 966.186685][ T5923] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 966.357616][ T5923] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 966.834235][ T5923] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 966.843361][ T5923] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 966.852357][ T5923] usb 1-1: Manufacturer: syz [ 966.901348][ T5923] usb 1-1: config 0 descriptor?? [ 967.580341][ T5923] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 969.027260][T17265] 9p: Bad value for 'rfdno' [ 969.167517][ T5923] usb 1-1: USB disconnect, device number 26 [ 969.368197][T17233] vivid-000: reconnect [ 969.373702][ T9] usb 3-1: USB disconnect, device number 64 [ 969.380695][ T9] f81534a_ctrl 3-1:51.208: failed to enable ports: -19 [ 969.395491][T17274] netlink: 'syz.0.2661': attribute type 1 has an invalid length. [ 969.412307][T17274] team0: Device gtp0 is of different type [ 969.835213][ T793] usb 6-1: new full-speed USB device number 55 using dummy_hcd [ 969.887897][ T9] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 970.007399][ T793] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 27750, setting to 64 [ 970.026723][ T9] usb 3-1: device descriptor read/64, error -71 [ 970.036479][ T793] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 970.046197][ T793] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.054567][ T793] usb 6-1: Product: syz [ 970.117370][T17282] netlink: 'syz.6.2664': attribute type 1 has an invalid length. [ 970.213257][ T793] usb 6-1: Manufacturer: syz [ 970.297016][T17282] team0: Device gtp0 is of different type [ 970.302841][ T9] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 970.490715][ T793] usb 6-1: SerialNumber: syz [ 970.518013][ T793] usb 6-1: config 0 descriptor?? [ 970.656466][ T9] usb 3-1: device descriptor read/64, error -71 [ 970.784791][ T9] usb usb3-port1: attempt power cycle [ 971.126969][ T9] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 971.134973][ T793] usb 6-1: USB disconnect, device number 55 [ 971.176267][T17297] netlink: 'syz.4.2662': attribute type 1 has an invalid length. [ 971.200718][T17297] team0: Device gtp0 is of different type [ 971.236057][ T9] usb 3-1: device descriptor read/8, error -71 [ 971.496757][ T9] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 971.547230][ T9] usb 3-1: device descriptor read/8, error -71 [ 971.742868][ T9] usb usb3-port1: unable to enumerate USB device [ 972.247681][ T29] audit: type=1400 audit(2000000776.859:1109): avc: denied { write } for pid=17309 comm="syz.5.2666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 973.596537][T17333] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2669'. [ 974.588237][ T29] audit: type=1400 audit(2000000779.199:1110): avc: denied { validate_trans } for pid=17355 comm="syz.2.2675" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 974.960837][T17378] CUSE: unknown device info "" [ 974.965781][T17378] CUSE: unknown device info "" [ 974.970798][T17378] CUSE: unknown device info "" [ 974.976779][T17378] CUSE: unknown device info "" [ 974.981739][T17378] CUSE: unknown device info "" [ 974.986433][T17383] ceph: No mds server is up or the cluster is laggy [ 974.986698][T17378] CUSE: unknown device info "" [ 974.993924][ T793] libceph: connect (1)[c::]:6789 error -101 [ 974.998256][T17378] CUSE: zero length info key specified [ 975.014976][ T793] libceph: mon0 (1)[c::]:6789 connect error [ 975.083338][T17387] ceph: No mds server is up or the cluster is laggy [ 976.310802][T17412] kvm: MONITOR instruction emulated as NOP! [ 977.552131][ T29] audit: type=1400 audit(2000000782.169:1111): avc: denied { read write } for pid=17435 comm="syz.0.2694" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 977.581293][ T29] audit: type=1400 audit(2000000782.169:1112): avc: denied { open } for pid=17435 comm="syz.0.2694" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 977.609422][ T5923] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 977.635969][T17441] ceph: No mds server is up or the cluster is laggy [ 977.670018][ T793] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 977.747014][ T5923] usb 3-1: device descriptor read/64, error -71 [ 977.836998][ T5874] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 977.837995][T17447] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2697'. [ 977.857585][ T793] usb 7-1: Using ep0 maxpacket: 32 [ 977.881305][T17447] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2697'. [ 977.987090][ T5923] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 978.100130][ T793] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 978.113735][ T793] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.143493][ T793] usb 7-1: config 0 descriptor?? [ 978.236742][ T5874] usb 1-1: device descriptor read/64, error -71 [ 978.243075][ T5923] usb 3-1: device descriptor read/64, error -71 [ 978.249555][ T24] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 978.360526][ T793] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 978.375602][ T793] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 978.377016][ T5923] usb usb3-port1: attempt power cycle [ 978.391414][ T793] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 978.437885][ T793] usb 7-1: media controller created [ 978.451720][ T793] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 978.476054][ T24] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 978.489860][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.498369][ T5874] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 978.506457][ T24] usb 6-1: Product: syz [ 978.510957][ T24] usb 6-1: Manufacturer: syz [ 978.515609][ T24] usb 6-1: SerialNumber: syz [ 978.531762][ T24] usb 6-1: config 0 descriptor?? [ 978.562581][ T793] az6027: usb out operation failed. (-71) [ 978.570069][ T793] az6027: usb out operation failed. (-71) [ 978.575855][ T793] stb0899_attach: Driver disabled by Kconfig [ 978.582127][ T793] az6027: no front-end attached [ 978.582127][ T793] [ 978.598246][ T793] az6027: usb out operation failed. (-71) [ 978.604124][ T793] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 978.618172][ T793] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input35 [ 978.633275][ T793] dvb-usb: schedule remote query interval to 400 msecs. [ 978.642374][ T793] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 978.661972][ T793] usb 7-1: USB disconnect, device number 34 [ 978.666772][ T5874] usb 1-1: device descriptor read/64, error -71 [ 978.732789][ T793] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 978.797117][ T5874] usb usb1-port1: attempt power cycle [ 978.802641][ T5923] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 978.827235][ T5923] usb 3-1: device descriptor read/8, error -71 [ 979.100030][ T5923] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 979.137452][ T5923] usb 3-1: device descriptor read/8, error -71 [ 979.156719][ T5874] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 979.177457][ T5874] usb 1-1: device descriptor read/8, error -71 [ 979.242821][T17458] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2702'. [ 979.257619][ T5923] usb usb3-port1: unable to enumerate USB device [ 979.300611][T17460] batadv_slave_1: entered promiscuous mode [ 979.309275][T17459] batadv_slave_1: left promiscuous mode [ 979.423003][T17465] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2704'. [ 979.436998][ T5874] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 979.467852][ T5874] usb 1-1: device descriptor read/8, error -71 [ 979.572232][ T24] usb 6-1: Firmware version (0.0) predates our first public release. [ 979.580808][ T5874] usb usb1-port1: unable to enumerate USB device [ 979.696913][ T29] audit: type=1326 audit(2000000784.309:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17466 comm="syz.6.2706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff0b9c799 code=0x7ffc0000 [ 979.769442][ T29] audit: type=1326 audit(2000000784.309:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17466 comm="syz.6.2706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff0b9c799 code=0x7ffc0000 [ 979.795783][ T24] usb 6-1: Please update to version 0.2 or newer [ 979.812649][ T29] audit: type=1326 audit(2000000784.309:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17466 comm="syz.6.2706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f0ff0b9c799 code=0x7ffc0000 [ 979.841995][ T29] audit: type=1326 audit(2000000784.309:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17466 comm="syz.6.2706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff0b9c799 code=0x7ffc0000 [ 979.867219][T17471] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 979.882418][ T29] audit: type=1326 audit(2000000784.309:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17466 comm="syz.6.2706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff0b9c799 code=0x7ffc0000 [ 979.907137][ T29] audit: type=1326 audit(2000000784.309:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17466 comm="syz.6.2706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f0ff0b9c799 code=0x7ffc0000 [ 979.910211][ T24] usb 6-1: USB disconnect, device number 56 [ 979.937216][ T29] audit: type=1326 audit(2000000784.309:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17466 comm="syz.6.2706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff0b9c799 code=0x7ffc0000 [ 979.961047][ T29] audit: type=1326 audit(2000000784.309:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17466 comm="syz.6.2706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff0b9c799 code=0x7ffc0000 [ 980.410592][T17478] ceph: No mds server is up or the cluster is laggy [ 980.417609][ T24] libceph: connect (1)[c::]:6789 error -13 [ 980.423761][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 980.956758][ T24] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 980.961737][T16226] tipc: Subscription rejected, illegal request [ 981.126709][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 981.147109][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 981.183729][ T24] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 981.214709][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.242290][ T24] usb 7-1: config 0 descriptor?? [ 981.256862][ T9] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 981.279130][ T24] hub 7-1:0.0: USB hub found [ 981.346706][ T5923] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 981.397830][ T9] usb 6-1: device descriptor read/64, error -71 [ 981.537329][ T5923] usb 5-1: unable to get BOS descriptor or descriptor too short [ 981.551844][ T5923] usb 5-1: not running at top speed; connect to a high speed hub [ 981.570907][ T5923] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 4 [ 981.605908][ T5923] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 981.654295][ T9] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 981.697434][ T24] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 981.717828][ T24] usbhid 7-1:0.0: can't add hid device: -71 [ 981.738298][ T5923] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 4 [ 981.749651][ T24] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 981.777552][ T5923] usb 5-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 981.787891][ T24] usb 7-1: USB disconnect, device number 35 [ 981.796290][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.813646][ T5923] usb 5-1: Product: syz [ 981.816894][ T9] usb 6-1: device descriptor read/64, error -71 [ 981.825089][ T5923] usb 5-1: Manufacturer: syz [ 981.829893][ T5923] usb 5-1: SerialNumber: syz [ 981.926987][ T9] usb usb6-port1: attempt power cycle [ 982.087705][ T5923] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 982.098366][ T5923] usb 5-1: unable to issue vendor read request (ret = -71) [ 982.107800][ T5923] usb 5-1: unable to issue vendor read request (ret = -71) [ 982.118954][ T5923] usb 5-1: unable to issue vendor read request (ret = -71) [ 982.126843][ T5923] usb 5-1: unable to issue vendor read request (ret = -71) [ 982.169481][ T5923] usb 5-1: USB disconnect, device number 61 [ 982.218653][ T24] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 982.228699][T15036] udevd[15036]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 982.277010][ T9] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 982.311380][ T9] usb 6-1: device descriptor read/8, error -71 [ 982.367358][ T24] usb 1-1: device descriptor read/64, error -71 [ 982.527464][ T5923] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 982.557338][ T9] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 982.590164][ T9] usb 6-1: device descriptor read/8, error -71 [ 982.666838][ T24] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 982.702792][ T9] usb usb6-port1: unable to enumerate USB device [ 982.748791][ T5923] usb 3-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 982.761670][ T5923] usb 3-1: config 253 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 5384, setting to 64 [ 982.772862][ T5923] usb 3-1: config 253 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 982.788322][ T5923] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 982.800531][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 982.808859][ T24] usb 1-1: device descriptor read/64, error -71 [ 982.815539][ T5923] usb 3-1: SerialNumber: syz [ 982.825060][T17512] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 983.238751][ T24] usb usb1-port1: attempt power cycle [ 984.696771][ T793] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 984.776702][ T24] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 985.010886][T11875] Bluetooth: hci2: link tx timeout [ 985.018365][T11875] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 985.191680][ T24] usb 1-1: device descriptor read/8, error -71 [ 985.226718][ T793] usb 6-1: Using ep0 maxpacket: 32 [ 985.233368][ T793] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 985.244609][ T793] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 985.328878][ T5923] rndis_host 3-1:253.0: skipping garbage [ 985.347166][ T5923] usb 3-1: USB disconnect, device number 73 [ 985.401759][ T793] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.529355][ T793] usb 6-1: config 0 descriptor?? [ 985.558088][ T793] hub 6-1:0.0: USB hub found [ 985.743214][ T793] hub 6-1:0.0: 1 port detected [ 985.897040][ T9] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 986.137186][T17559] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 986.380229][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 986.437986][ T9] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 986.448995][ T9] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 986.458451][ T9] usb 7-1: Manufacturer: syz [ 986.483271][ T9] usb 7-1: config 0 descriptor?? [ 986.499848][ T9] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 986.801170][ T793] hub 6-1:0.0: hub_ext_port_status failed (err = 0) [ 987.100945][T11875] Bluetooth: hci2: command 0x0406 tx timeout [ 989.239755][ T9] usb 7-1: USB disconnect, device number 36 [ 989.577906][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 989.577925][ T29] audit: type=1400 audit(2000000794.189:1137): avc: denied { setopt } for pid=17582 comm="syz.0.2737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 989.639552][T15366] usb 6-1: USB disconnect, device number 61 [ 990.081156][T17591] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2738'. [ 990.396518][T17591] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 990.488568][ T29] audit: type=1400 audit(2000000795.099:1138): avc: denied { mounton } for pid=17580 comm="syz.6.2736" path="/299/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 990.548612][T17585] can0 (unregistered): slcan off ttyS3. [ 990.767060][ T793] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 991.253631][T17611] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 991.288983][ T793] usb 5-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 991.309237][ T793] usb 5-1: config 253 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 5384, setting to 64 [ 991.322370][T17581] ./file0: Can't open blockdev [ 991.334958][ T793] usb 5-1: config 253 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 991.346373][T17596] ./file0: Can't open blockdev [ 991.350588][ T793] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 991.362503][ T793] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 991.372389][ T793] usb 5-1: SerialNumber: syz [ 991.390177][T17597] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 992.249088][T17626] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=17626 comm=syz.0.2743 [ 992.686269][T17637] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 992.886625][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.482877][ T793] rndis_host 5-1:253.0: skipping garbage [ 993.502036][ T793] usb 5-1: USB disconnect, device number 62 [ 994.155450][ T29] audit: type=1400 audit(2000000798.759:1139): avc: denied { listen } for pid=17654 comm="syz.4.2750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 995.695356][T16226] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 997.195128][T17697] overlayfs: failed to resolve './file0': -2 [ 997.292666][T17698] netlink: 'syz.4.2757': attribute type 4 has an invalid length. [ 997.300731][T17698] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2757'. [ 997.358622][T17698] .`: renamed from bond0 (while UP) [ 999.043779][T17711] lo speed is unknown, defaulting to 1000 [ 1000.177356][T17724] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2762'. [ 1002.832962][T17755] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1004.200948][ T29] audit: type=1400 audit(2000000808.819:1140): avc: denied { ioctl } for pid=17786 comm="syz.2.2773" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0xf50d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1004.497142][T17795] netlink: 'syz.2.2775': attribute type 1 has an invalid length. [ 1004.621244][T17798] netlink: 'syz.6.2774': attribute type 10 has an invalid length. [ 1007.057159][T17810] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1007.161018][T17810] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1007.167963][T17810] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1008.188549][T17841] netlink: 'syz.5.2783': attribute type 1 has an invalid length. [ 1008.452298][T17841] team0: Device gtp0 is of different type [ 1009.027153][T17858] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1009.105361][T11875] Bluetooth: hci5: command 0x0c1a tx timeout [ 1009.176857][T11875] Bluetooth: hci2: command 0x0406 tx timeout [ 1009.748410][ T5923] libceph: connect (1)[c::]:6789 error -101 [ 1009.754694][ T5923] libceph: mon0 (1)[c::]:6789 connect error [ 1009.795814][T17833] ceph: No mds server is up or the cluster is laggy [ 1010.016780][ T9] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1010.180082][ T9] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1010.208100][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.236894][ T9] usb 3-1: Product: syz [ 1010.246776][ T9] usb 3-1: Manufacturer: syz [ 1010.260585][ T9] usb 3-1: SerialNumber: syz [ 1010.281915][ T9] usb 3-1: config 0 descriptor?? [ 1010.466668][T15366] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1010.683653][T15366] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1010.697723][T15366] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1010.819980][T15366] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.844246][T15366] usb 6-1: config 0 descriptor?? [ 1011.266743][T11875] Bluetooth: hci2: command 0x0406 tx timeout [ 1011.396821][T15366] usbhid 6-1:0.0: can't add hid device: -71 [ 1011.456941][T15366] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1011.518024][T15366] usb 6-1: USB disconnect, device number 62 [ 1011.577705][ T9] usb 3-1: Firmware version (0.0) predates our first public release. [ 1011.589291][ T9] usb 3-1: Please update to version 0.2 or newer [ 1012.399951][T15366] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1012.566713][T15366] usb 6-1: Using ep0 maxpacket: 32 [ 1012.578687][T15366] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1012.606846][T15366] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1012.676388][ T5854] usb 3-1: USB disconnect, device number 74 [ 1013.107655][ T5923] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1013.372538][ T5923] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1013.420542][ T5923] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1013.486865][ T5923] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1013.595131][ T5923] usb 1-1: config 1 has no interface number 1 [ 1013.619738][ T5923] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1013.711799][ T5923] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1013.967911][ T5923] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1014.071712][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.087811][ T29] audit: type=1326 audit(2000000818.549:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17911 comm="syz.4.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e319c799 code=0x7fc00000 [ 1014.161484][T15366] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.188560][ T5923] usb 1-1: Product: syz [ 1014.238145][ T5923] usb 1-1: Manufacturer: syz [ 1014.286760][ T5923] usb 1-1: SerialNumber: syz [ 1015.374283][T15366] usb 6-1: config 0 descriptor?? [ 1015.380370][T15366] usb 6-1: can't set config #0, error -71 [ 1015.392207][T15366] usb 6-1: USB disconnect, device number 63 [ 1015.660606][ T5923] usb 1-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1015.681584][ T5923] usb 1-1: MIDIStreaming interface descriptor not found [ 1015.702113][T17943] netlink: 'syz.5.2799': attribute type 25 has an invalid length. [ 1015.714675][T17943] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2799'. [ 1016.206918][ T5923] usb 1-1: USB disconnect, device number 35 [ 1017.316891][ T5854] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1017.457310][ T5854] usb 6-1: device descriptor read/64, error -71 [ 1017.698086][ T5854] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1017.847621][ T5854] usb 6-1: device descriptor read/64, error -71 [ 1017.983781][ T5854] usb usb6-port1: attempt power cycle [ 1018.716760][ T5854] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1018.738408][ T5854] usb 6-1: device descriptor read/8, error -71 [ 1018.744471][T17984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2803'. [ 1018.909700][T17996] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2803'. [ 1018.977337][ T5854] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1018.990118][T18001] PKCS7: Unknown OID: [4] (bad) [ 1018.998892][T18001] PKCS7: Only support pkcs7_signedData type [ 1019.008493][ T5854] usb 6-1: device descriptor read/8, error -71 [ 1019.096409][T18001] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2806'. [ 1019.372446][ T5854] usb usb6-port1: unable to enumerate USB device [ 1019.732567][T18014] netlink: 'syz.2.2808': attribute type 29 has an invalid length. [ 1020.597618][T18017] overlayfs: failed to clone upperpath [ 1021.498302][T18042] netlink: 'syz.4.2815': attribute type 1 has an invalid length. [ 1021.533105][T18042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1021.706359][T18042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1021.716072][T18042] bond0: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1021.727129][T18042] bond0: (slave vxcan1): Error -95 calling set_mac_address [ 1021.754064][T18045] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 1021.782561][T18045] bond0: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1021.874540][ T29] audit: type=1326 audit(2000000826.490:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18050 comm="syz.2.2816" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f634019c799 code=0x0 [ 1021.992394][ T29] audit: type=1400 audit(2000000826.610:1143): avc: denied { write } for pid=18050 comm="syz.2.2816" path="socket:[59705]" dev="sockfs" ino=59705 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1022.401599][T11875] Bluetooth: hci2: Malformed Event: 0x02 [ 1022.586879][ T5854] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1023.159591][ T29] audit: type=1400 audit(2000000827.380:1144): avc: denied { search } for pid=18074 comm="syz.5.2811" name="/" dev="configfs" ino=1071 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1023.269472][ T5854] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1023.343312][ T29] audit: type=1400 audit(2000000827.380:1145): avc: denied { search } for pid=18074 comm="syz.5.2811" name="/" dev="configfs" ino=1071 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1023.444391][ T5854] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1023.636930][ T29] audit: type=1400 audit(2000000827.390:1146): avc: denied { search } for pid=18074 comm="syz.5.2811" name="/" dev="configfs" ino=1071 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1023.660214][ T5854] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1023.672347][ T5854] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1023.700995][ T29] audit: type=1400 audit(2000000827.400:1147): avc: denied { add_name } for pid=18074 comm="syz.5.2811" name="io.stat" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1023.758034][ T5854] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.766079][ T5854] usb 7-1: Product: syz [ 1023.770407][ T5854] usb 7-1: Manufacturer: syz [ 1023.781944][ T5854] usb 7-1: SerialNumber: syz [ 1023.816803][ T29] audit: type=1400 audit(2000000827.400:1148): avc: denied { create } for pid=18074 comm="syz.5.2811" name="io.stat" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 1023.872183][ T5854] usb 7-1: config 0 descriptor?? [ 1023.893906][T18067] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1023.926903][T18067] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1023.956518][ T29] audit: type=1400 audit(2000000827.400:1149): avc: denied { search } for pid=18074 comm="syz.5.2811" name="/" dev="configfs" ino=1071 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1024.002334][ T29] audit: type=1400 audit(2000000827.400:1150): avc: denied { search } for pid=18074 comm="syz.5.2811" name="/" dev="configfs" ino=1071 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1024.002798][ T5854] usb 7-1: ucan: probing device on interface #0 [ 1024.025708][ T29] audit: type=1400 audit(2000000827.410:1151): avc: denied { search } for pid=18074 comm="syz.5.2811" name="/" dev="configfs" ino=1071 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1024.139563][T18091] lo speed is unknown, defaulting to 1000 [ 1024.204648][T18067] use of bytesused == 0 is deprecated and will be removed in the future, [ 1024.226826][T18067] use the actual size instead. [ 1024.248149][T18095] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2823'. [ 1024.279928][ T5854] usb 7-1: ucan: could not read protocol version, ret=-71 [ 1024.314108][ T5854] usb 7-1: ucan: probe failed; try to update the device firmware [ 1024.441517][ T5854] usb 7-1: USB disconnect, device number 37 [ 1024.454718][T18111] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1025.081805][T18113] syzkaller0: entered promiscuous mode [ 1025.112067][T18113] syzkaller0: entered allmulticast mode [ 1025.378887][T18125] ceph: No mds server is up or the cluster is laggy [ 1025.385888][T15366] libceph: connect (1)[c::]:6789 error -13 [ 1025.393982][T15366] libceph: mon0 (1)[c::]:6789 connect error [ 1025.958515][T18141] tmpfs: Bad value for 'mpol' [ 1026.553492][T18160] blktrace: Concurrent blktraces are not allowed on sg0 [ 1027.286072][ T29] audit: type=1400 audit(2000000831.900:1152): avc: denied { audit_write } for pid=18171 comm="syz.6.2840" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1027.308303][ T29] audit: type=1400 audit(2000000831.900:1153): avc: denied { append } for pid=18171 comm="syz.6.2840" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1028.056929][T12548] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1028.431964][T18194] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1030.455486][ T29] audit: type=1400 audit(2000000835.050:1154): avc: denied { read } for pid=18198 comm="syz.0.2845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1031.058859][ T29] audit: type=1326 audit(2000000835.670:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18198 comm="syz.0.2845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747d19c799 code=0x7ffc0000 [ 1031.114323][ T29] audit: type=1326 audit(2000000835.700:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18198 comm="syz.0.2845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f747d19c799 code=0x7ffc0000 [ 1031.173141][T18212] netlink: 'syz.5.2847': attribute type 1 has an invalid length. [ 1031.426809][ T29] audit: type=1326 audit(2000000835.700:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18198 comm="syz.0.2845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747d19c799 code=0x7ffc0000 [ 1031.490629][ T29] audit: type=1326 audit(2000000835.700:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18198 comm="syz.0.2845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747d19c799 code=0x7ffc0000 [ 1032.636339][T18217] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2848'. [ 1034.447733][T18212] team0: Device gtp0 is of different type [ 1034.566215][T18221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1034.606563][T18221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1034.816708][T15366] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 1035.023863][T11875] Bluetooth: hci2: unexpected event for opcode 0x2028 [ 1035.202694][T15366] usb 3-1: device not accepting address 75, error -71 [ 1035.232134][T18244] vlan0: entered allmulticast mode [ 1035.240966][T18244] dummy0: entered allmulticast mode [ 1035.257270][T18244] bridge0: port 3(vlan0) entered blocking state [ 1035.274528][T18244] bridge0: port 3(vlan0) entered disabled state [ 1035.289677][T18244] vlan0: entered promiscuous mode [ 1035.295448][ T29] audit: type=1400 audit(2000000839.910:1159): avc: denied { accept } for pid=18243 comm="syz.4.2856" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1035.315648][T18244] dummy0: entered promiscuous mode [ 1036.568134][T18267] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1037.420750][T18275] netlink: 'syz.5.2863': attribute type 1 has an invalid length. [ 1037.462217][T18275] team0: Device gtp0 is of different type [ 1038.781573][T18284] netlink: 'syz.2.2865': attribute type 1 has an invalid length. [ 1039.238376][T18285] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2862'. [ 1039.298346][T18290] fuse: Unknown parameter 'grou00000000000000000000' [ 1039.367565][T18290] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2866'. [ 1040.565204][T18311] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2869'. [ 1040.742647][T18313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2873'. [ 1040.761401][T18313] 8021q: adding VLAN 0 to HW filter on device team1 [ 1041.323899][T18326] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1041.484573][ T29] audit: type=1400 audit(2000000846.100:1160): avc: denied { append } for pid=18329 comm="syz.6.2878" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1042.584050][T18343] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2880'. [ 1042.621054][T18344] netlink: 'syz.5.2880': attribute type 2 has an invalid length. [ 1042.645766][T18344] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2880'. [ 1042.908551][T18353] FAULT_INJECTION: forcing a failure. [ 1042.908551][T18353] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1042.967712][T18353] CPU: 1 UID: 0 PID: 18353 Comm: syz.6.2882 Tainted: G L syzkaller #0 PREEMPT(full) [ 1042.967747][T18353] Tainted: [L]=SOFTLOCKUP [ 1042.967754][T18353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1042.967766][T18353] Call Trace: [ 1042.967773][T18353] [ 1042.967781][T18353] dump_stack_lvl+0x100/0x190 [ 1042.967828][T18353] should_fail_ex.cold+0x5/0xa [ 1042.967856][T18353] strncpy_from_user+0x3b/0x2d0 [ 1042.967892][T18353] __do_sys_add_key+0xd4/0x460 [ 1042.967926][T18353] ? __pfx___do_sys_add_key+0x10/0x10 [ 1042.967956][T18353] ? ksys_write+0x1ac/0x250 [ 1042.967999][T18353] do_syscall_64+0x106/0xf80 [ 1042.968022][T18353] ? clear_bhb_loop+0x40/0x90 [ 1042.968048][T18353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1042.968071][T18353] RIP: 0033:0x7f0ff0b9c799 [ 1042.968089][T18353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1042.968109][T18353] RSP: 002b:00007f0ff1b3c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1042.968130][T18353] RAX: ffffffffffffffda RBX: 00007f0ff0e15fa0 RCX: 00007f0ff0b9c799 [ 1042.968145][T18353] RDX: 0000200000000180 RSI: 0000000000000000 RDI: 00002000000018c0 [ 1042.968159][T18353] RBP: 00007f0ff1b3c090 R08: 000000000ce56e66 R09: 0000000000000000 [ 1042.968171][T18353] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 1042.968184][T18353] R13: 00007f0ff0e16038 R14: 00007f0ff0e15fa0 R15: 00007fffee2e6fe8 [ 1042.968214][T18353] [ 1043.304030][T18361] netlink: 'syz.5.2885': attribute type 1 has an invalid length. [ 1043.328907][T18361] team0: Device gtp0 is of different type [ 1043.855440][ T793] Process accounting resumed [ 1044.209822][T18371] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2886'. [ 1046.032090][T18396] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1046.710026][T18398] ocfs2: Bad value for 'barrier' [ 1047.065657][T18410] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1047.594727][T18415] overlayfs: missing 'lowerdir' [ 1047.774688][T18422] netlink: 'syz.6.2898': attribute type 13 has an invalid length. [ 1047.791526][T18422] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2898'. [ 1047.796612][ T29] audit: type=1400 audit(2000000852.410:1161): avc: denied { setopt } for pid=18424 comm="syz.5.2900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1047.814110][T18422] netlink: 'syz.6.2898': attribute type 13 has an invalid length. [ 1047.826536][T17424] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1047.836420][T17424] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1047.837173][T18422] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2898'. [ 1047.869973][T17424] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1047.878362][ T29] audit: type=1400 audit(2000000852.420:1162): avc: denied { ioctl } for pid=18424 comm="syz.5.2900" path="socket:[61514]" dev="sockfs" ino=61514 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1047.919850][T17424] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1048.518036][ T793] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 1048.748282][ T793] usb 1-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1048.759764][ T793] usb 1-1: config 253 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 5384, setting to 64 [ 1048.771119][ T793] usb 1-1: config 253 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 1048.792856][ T793] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1048.802265][ T793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1048.810483][ T793] usb 1-1: SerialNumber: syz [ 1048.824648][T18441] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1049.044848][T18441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1049.077382][T18441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1049.287505][ T29] audit: type=1326 audit(2000000853.910:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18455 comm="syz.6.2909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff0b9c799 code=0x7ffc0000 [ 1049.314140][ T29] audit: type=1326 audit(2000000853.910:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18455 comm="syz.6.2909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f0ff0b9c799 code=0x7ffc0000 [ 1049.827507][ T29] audit: type=1326 audit(2000000853.910:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18455 comm="syz.6.2909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff0b9c799 code=0x7ffc0000 [ 1049.851331][ T29] audit: type=1326 audit(2000000853.910:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18455 comm="syz.6.2909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0ff0b9c799 code=0x7ffc0000 [ 1049.874852][ T29] audit: type=1326 audit(2000000853.910:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18455 comm="syz.6.2909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff0b9c799 code=0x7ffc0000 [ 1049.928905][ T29] audit: type=1326 audit(2000000853.910:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18455 comm="syz.6.2909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0ff0b9c799 code=0x7ffc0000 [ 1049.957110][T18468] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1050.024107][ T29] audit: type=1326 audit(2000000853.910:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18455 comm="syz.6.2909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff0b9c799 code=0x7ffc0000 [ 1050.086758][ T29] audit: type=1326 audit(2000000853.910:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18455 comm="syz.6.2909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f0ff0b9c799 code=0x7ffc0000 [ 1050.496759][T18479] tc_dump_action: action bad kind [ 1051.233906][ T793] rndis_host 1-1:253.0: skipping garbage [ 1051.286801][ T793] usb 1-1: USB disconnect, device number 36 [ 1052.434319][T18507] can0: slcan on ptm0. [ 1052.546903][T18505] can0 (unregistered): slcan off ptm0. [ 1052.776154][T18508] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2921'. [ 1053.126919][T18512] ufs: You didn't specify the type of your ufs filesystem [ 1053.126919][T18512] [ 1053.126919][T18512] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1053.126919][T18512] [ 1053.126919][T18512] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1053.208248][T18512] ufs: ufstype=old is supported read-only [ 1053.214258][T18512] ufs: ufs_fill_super(): bad magic number [ 1053.398208][T18548] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2926'. [ 1053.774613][T18558] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1054.161651][T18569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2931'. [ 1054.317071][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.317178][ C0] ------------[ cut here ]------------ [ 1054.329731][ C0] ODEBUG: free active (active state 0) object: ffff88805ebe8490 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 [ 1054.342703][ C0] WARNING: lib/debugobjects.c:629 at debug_print_object+0x18e/0x2a0, CPU#0: swapper/0/0 [ 1054.352522][ C0] Modules linked in: [ 1054.357323][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1054.367905][ C0] Tainted: [L]=SOFTLOCKUP [ 1054.372283][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1054.382411][ C0] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 1054.388285][ C0] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 62 cb e5 0b 41 56 48 8b 14 dd 60 0d 1b 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 2c 8c db 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 1054.407962][ C0] RSP: 0018:ffffc90000007a38 EFLAGS: 00010246 [ 1054.414051][ C0] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 1054.422101][ C0] RDX: ffffffff8c1b0ca0 RSI: ffffffff8c1b08c0 RDI: ffffffff90e3f630 [ 1054.430135][ C0] RBP: 0000000000000001 R08: ffff88805ebe8490 R09: ffffffff8bb2b900 [ 1054.438167][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1b08c0 [ 1054.446201][ C0] R13: ffffffff8bb2b940 R14: ffffffff8a7b5db0 R15: ffffc90000007b38 [ 1054.454295][ C0] FS: 0000000000000000(0000) GS:ffff888124345000(0000) knlGS:0000000000000000 [ 1054.463342][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1054.469985][ C0] CR2: 00007f63401e9e80 CR3: 00000000628de000 CR4: 00000000003526f0 [ 1054.478046][ C0] Call Trace: [ 1054.481364][ C0] [ 1054.484252][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1054.489980][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1054.495831][ C0] debug_check_no_obj_freed+0x4da/0x630 [ 1054.501457][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1054.507596][ C0] ? mark_held_locks+0x40/0x70 [ 1054.512428][ C0] ? kasan_quarantine_put+0x104/0x240 [ 1054.517887][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1054.523133][ C0] ? rose_timer_expiry+0x53f/0x630 [ 1054.528356][ C0] kfree+0x38f/0x6b0 [ 1054.532306][ C0] rose_timer_expiry+0x53f/0x630 [ 1054.537323][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1054.542818][ C0] call_timer_fn+0x19a/0x670 [ 1054.547477][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1054.552628][ C0] ? __run_timers+0x747/0xb30 [ 1054.557368][ C0] ? rcu_is_watching+0x12/0xc0 [ 1054.562164][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1054.567700][ C0] __run_timers+0x757/0xb30 [ 1054.572260][ C0] ? __pfx___run_timers+0x10/0x10 [ 1054.577463][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 1054.582570][ C0] run_timer_base+0x114/0x190 [ 1054.588191][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 1054.593439][ C0] run_timer_softirq+0x1a/0x50 [ 1054.598274][ C0] handle_softirqs+0x1eb/0x9e0 [ 1054.603093][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1054.608448][ C0] __irq_exit_rcu+0xef/0x150 [ 1054.613088][ C0] irq_exit_rcu+0x9/0x30 [ 1054.617408][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1054.623117][ C0] [ 1054.626096][ C0] [ 1054.629069][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1054.635101][ C0] RIP: 0010:sched_core_balance+0x9f/0xe20 [ 1054.640907][ C0] Code: 76 7e 8e e8 03 09 0e 00 e8 6e b4 b8 09 41 5a 85 c0 0f 85 28 0a 00 00 4c 89 ef e8 fc 35 ff ff e8 37 df 39 00 fb 48 63 44 24 50 <48> c7 c3 40 61 0f 94 48 89 dd 48 89 44 24 08 48 83 f8 08 0f 83 4c [ 1054.660621][ C0] RSP: 0018:ffffffff8e407b80 EFLAGS: 00000206 [ 1054.666772][ C0] RAX: 0000000000000000 RBX: ffff8880b84244b0 RCX: 0000000000000000 [ 1054.674776][ C0] RDX: 0000000000000000 RSI: ffffffff8de74d20 RDI: ffffffff8c1afba0 [ 1054.682831][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1054.690882][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880b843b140 [ 1054.698916][ C0] R13: ffff8880b843b140 R14: 0000000000000000 R15: ffffffff81d6da80 [ 1054.706972][ C0] ? __pfx_sched_core_balance+0x10/0x10 [ 1054.712580][ C0] ? sched_clock_cpu+0x6c/0x570 [ 1054.717485][ C0] ? lock_acquire+0x1cf/0x380 [ 1054.722229][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1054.727587][ C0] ? update_irq_load_avg+0xae/0xe40 [ 1054.732831][ C0] ? __pfx_sched_core_balance+0x10/0x10 [ 1054.738456][ C0] __balance_callbacks+0x21d/0x6e0 [ 1054.743621][ C0] __schedule+0x2fcb/0x6120 [ 1054.748207][ C0] ? tick_nohz_next_event+0x228/0x400 [ 1054.753654][ C0] ? __pfx___schedule+0x10/0x10 [ 1054.758592][ C0] ? rcu_is_watching+0x12/0xc0 [ 1054.763415][ C0] schedule_idle+0x54/0x80 [ 1054.767892][ C0] do_idle+0x289/0x4b0 [ 1054.772016][ C0] ? __pfx_do_idle+0x10/0x10 [ 1054.776658][ C0] cpu_startup_entry+0x4f/0x60 [ 1054.781449][ C0] rest_init+0x251/0x260 [ 1054.785728][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1054.791359][ C0] start_kernel+0x47f/0x480 [ 1054.795902][ C0] x86_64_start_reservations+0x24/0x30 [ 1054.801464][ C0] x86_64_start_kernel+0x12b/0x130 [ 1054.806663][ C0] common_startup_64+0x13e/0x148 [ 1054.811662][ C0] [ 1054.814703][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1054.821980][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1054.832464][ C0] Tainted: [L]=SOFTLOCKUP [ 1054.836789][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1054.846840][ C0] Call Trace: [ 1054.850116][ C0] [ 1054.852948][ C0] dump_stack_lvl+0x100/0x190 [ 1054.857809][ C0] vpanic+0x552/0x970 [ 1054.861787][ C0] ? __pfx_vpanic+0x10/0x10 [ 1054.866273][ C0] panic+0xd1/0xe0 [ 1054.869987][ C0] ? __pfx_panic+0x10/0x10 [ 1054.874389][ C0] ? check_panic_on_warn+0x1f/0x90 [ 1054.879494][ C0] check_panic_on_warn.cold+0x19/0x34 [ 1054.884859][ C0] ? debug_print_object+0x18e/0x2a0 [ 1054.890056][ C0] __warn.cold+0x191/0x348 [ 1054.894468][ C0] __report_bug+0x296/0x3d0 [ 1054.898956][ C0] ? debug_print_object+0x18e/0x2a0 [ 1054.904151][ C0] ? __pfx___report_bug+0x10/0x10 [ 1054.909182][ C0] ? lock_acquire+0x1cf/0x380 [ 1054.913856][ C0] ? mark_held_locks+0x40/0x70 [ 1054.918626][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1054.924419][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1054.929602][ C0] report_bug_entry+0xe1/0x290 [ 1054.934345][ C0] ? debug_print_object+0x19b/0x2a0 [ 1054.939534][ C0] handle_bug+0x1cd/0x2a0 [ 1054.943850][ C0] exc_invalid_op+0x17/0x50 [ 1054.948336][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1054.953169][ C0] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 1054.958964][ C0] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 62 cb e5 0b 41 56 48 8b 14 dd 60 0d 1b 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 2c 8c db 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 1054.978563][ C0] RSP: 0018:ffffc90000007a38 EFLAGS: 00010246 [ 1054.984619][ C0] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 1054.992589][ C0] RDX: ffffffff8c1b0ca0 RSI: ffffffff8c1b08c0 RDI: ffffffff90e3f630 [ 1055.000549][ C0] RBP: 0000000000000001 R08: ffff88805ebe8490 R09: ffffffff8bb2b900 [ 1055.008519][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1b08c0 [ 1055.016483][ C0] R13: ffffffff8bb2b940 R14: ffffffff8a7b5db0 R15: ffffc90000007b38 [ 1055.024440][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1055.030069][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1055.035684][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1055.041473][ C0] debug_check_no_obj_freed+0x4da/0x630 [ 1055.047010][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1055.053078][ C0] ? mark_held_locks+0x40/0x70 [ 1055.057828][ C0] ? kasan_quarantine_put+0x104/0x240 [ 1055.063186][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1055.068370][ C0] ? rose_timer_expiry+0x53f/0x630 [ 1055.073466][ C0] kfree+0x38f/0x6b0 [ 1055.077347][ C0] rose_timer_expiry+0x53f/0x630 [ 1055.082266][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1055.087704][ C0] call_timer_fn+0x19a/0x670 [ 1055.092425][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1055.097579][ C0] ? __run_timers+0x747/0xb30 [ 1055.102270][ C0] ? rcu_is_watching+0x12/0xc0 [ 1055.107016][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1055.112467][ C0] __run_timers+0x757/0xb30 [ 1055.116965][ C0] ? __pfx___run_timers+0x10/0x10 [ 1055.121979][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 1055.126995][ C0] run_timer_base+0x114/0x190 [ 1055.131666][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 1055.136875][ C0] run_timer_softirq+0x1a/0x50 [ 1055.141628][ C0] handle_softirqs+0x1eb/0x9e0 [ 1055.146375][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1055.151657][ C0] __irq_exit_rcu+0xef/0x150 [ 1055.156252][ C0] irq_exit_rcu+0x9/0x30 [ 1055.160531][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1055.166157][ C0] [ 1055.169069][ C0] [ 1055.171986][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1055.177947][ C0] RIP: 0010:sched_core_balance+0x9f/0xe20 [ 1055.183665][ C0] Code: 76 7e 8e e8 03 09 0e 00 e8 6e b4 b8 09 41 5a 85 c0 0f 85 28 0a 00 00 4c 89 ef e8 fc 35 ff ff e8 37 df 39 00 fb 48 63 44 24 50 <48> c7 c3 40 61 0f 94 48 89 dd 48 89 44 24 08 48 83 f8 08 0f 83 4c [ 1055.203252][ C0] RSP: 0018:ffffffff8e407b80 EFLAGS: 00000206 [ 1055.209301][ C0] RAX: 0000000000000000 RBX: ffff8880b84244b0 RCX: 0000000000000000 [ 1055.217249][ C0] RDX: 0000000000000000 RSI: ffffffff8de74d20 RDI: ffffffff8c1afba0 [ 1055.225208][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1055.233171][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880b843b140 [ 1055.241127][ C0] R13: ffff8880b843b140 R14: 0000000000000000 R15: ffffffff81d6da80 [ 1055.249078][ C0] ? __pfx_sched_core_balance+0x10/0x10 [ 1055.254640][ C0] ? sched_clock_cpu+0x6c/0x570 [ 1055.259579][ C0] ? lock_acquire+0x1cf/0x380 [ 1055.264243][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1055.269513][ C0] ? update_irq_load_avg+0xae/0xe40 [ 1055.274714][ C0] ? __pfx_sched_core_balance+0x10/0x10 [ 1055.280259][ C0] __balance_callbacks+0x21d/0x6e0 [ 1055.285379][ C0] __schedule+0x2fcb/0x6120 [ 1055.289877][ C0] ? tick_nohz_next_event+0x228/0x400 [ 1055.295251][ C0] ? __pfx___schedule+0x10/0x10 [ 1055.300086][ C0] ? rcu_is_watching+0x12/0xc0 [ 1055.304836][ C0] schedule_idle+0x54/0x80 [ 1055.309232][ C0] do_idle+0x289/0x4b0 [ 1055.313316][ C0] ? __pfx_do_idle+0x10/0x10 [ 1055.317897][ C0] cpu_startup_entry+0x4f/0x60 [ 1055.322656][ C0] rest_init+0x251/0x260 [ 1055.326881][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1055.332449][ C0] start_kernel+0x47f/0x480 [ 1055.336942][ C0] x86_64_start_reservations+0x24/0x30 [ 1055.342395][ C0] x86_64_start_kernel+0x12b/0x130 [ 1055.347511][ C0] common_startup_64+0x13e/0x148 [ 1055.352454][ C0] [ 1055.355697][ C0] Kernel Offset: disabled [ 1055.360001][ C0] Rebooting in 86400 seconds..