last executing test programs: 58.012687186s ago: executing program 3 (id=3071): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) capset(0x0, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) 45.01499992s ago: executing program 1 (id=3121): r0 = socket(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0x2ce, 0x0, 0x1, r3, 0x11}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x10, 0x0, 0x1, r3, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x1001a}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x0, {0x100000000100000, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x5, 0x1, 0x200, 0xfffffffd, 0x2000000, 0x0, 0xa000, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000002300)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x82, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',context=user_u,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c646566636f6e746578743d756e636f6e66696e65645f752c736d61636b66737472616e736d7574653d2b5c2b2fab2c7365636c6162656c2c646566636f6e746578743d73797374656d5f752c657569643c", @ANYRES8=r5, @ANYBLOB="2c6d6561f37572652c636f6e74743d73797361646d5f752c00", @ANYRESOCT]) sched_setscheduler(r4, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$XFS_IOC_ERROR_CLEARALL(r6, 0x40085875) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) recvmmsg$unix(r0, &(0x7f0000000040), 0x4000000000002ac, 0x0, 0x0) 43.851229714s ago: executing program 1 (id=3124): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xa0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000280)=[{0x2, 0xa6, 0x2, 0x3}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000100), 0x6) 43.659057408s ago: executing program 1 (id=3125): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) getgroups(0x0, 0x0) unshare(0x40060080) setregid(0x0, 0x0) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x98}, 0x1, 0x0, 0x0, 0x2000c091}, 0x800) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r8 = dup2(r5, r7) close_range(r8, 0xffffffffffffffff, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)="8872827a499aebd38f24", 0xa}], 0x1}, 0x20000045) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000140)={{&(0x7f000032c000/0x2000)=nil, 0x2000}, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x2, r2, 0x3, &(0x7f0000000180)) recvmsg$unix(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40000082) sendmsg$inet(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000a80)="18", 0x1}], 0x1}, 0x4000000) 40.600024803s ago: executing program 0 (id=3135): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prlimit64(r0, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000080), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) ioctl$FIGETBSZ(r4, 0x2, &(0x7f00000000c0)) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/diskstats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000500c00000000000000950000000000000018100000", @ANYRES64=r3, @ANYBLOB="0000000029000000000500000000ffff5ac09eb200000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1c, 0x0, 0x0, 0x6}]}}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240008e4) r7 = accept4$phonet_pipe(r5, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r9, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$sock_SIOCDELRT(r7, 0x890c, &(0x7f0000000380)={0x0, @in={0x2, 0x4e22, @private=0xa010101}, @xdp={0x2c, 0x6, r9, 0x30}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x3}}, 0xd3, 0x0, 0x0, 0x0, 0x748, &(0x7f0000000340)='wg2\x00', 0x9f, 0x3, 0x5}) 40.212143298s ago: executing program 3 (id=3074): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) modify_ldt$write2(0x11, &(0x7f0000000000)={0x7, 0x0, 0xffffffffffffffff, 0x1}, 0x10) r1 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x20, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0xe0002005}) syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102882333404f17cf8af4390102030109024500013f06400409044207000e0100010a240107000105ff010302070724050107638c09"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xfffe, 0x0, 0x8000}}}}}}, 0x0) 40.014991959s ago: executing program 1 (id=3138): socket$inet_tcp(0x2, 0x1, 0x0) socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) open(0x0, 0x1298c2, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f0000001380)) getdents(r1, &(0x7f0000001000)=""/4085, 0xff5) 39.218706711s ago: executing program 0 (id=3142): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0xfffffff5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xb, 0x5, 0xcac, 0xc}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 38.992437318s ago: executing program 2 (id=3144): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000310000/0x1000)=nil, 0x1000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0xb2c2a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000580)=@ethtool_perm_addr={0x20, 0x28, "5efee4af768e15151b8a3c3faa690173c9e7a2ef7043ca2a4aff0fa843f94dfa1af94f7fd2dda44e"}}) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) prlimit64(0x0, 0x7, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @pic={0x80, 0x7, 0x1, 0x81, 0x9, 0xf9, 0x8, 0x42, 0xfb, 0x0, 0xe, 0x0, 0xbe, 0x4, 0xfc, 0x38}}) ioctl$KVM_IRQ_LINE(r5, 0x4008ae61, &(0x7f0000000140)={0x8, 0x48}) r6 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b4, 0xc8, 0x2e4, 0x2e4, 0x40c, 0x0, 0x4ec, 0x4ec, 0x4ec, 0x4ec, 0x4ec, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@mcast1, @local, [0x0, 0xffffffff], [], 'macvtap0\x00', 'vlan0\x00', {}, {}, 0x6, 0x0, 0x0, 0x51}, 0x0, 0xc8, 0x104, 0x0, {}, [@common=@inet=@socket3={{0x24}, 0x4}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@local, @loopback, [], [], 'vlan0\x00', 'syzkaller0\x00', {0xff}}, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@connmark={{0x2c}}, @inet=@rpfilter={{0x24}, {0x4}}]}, @HL={0x24, 'HL\x00', 0x0, {0x2, 0x8}}}, {{@uncond, 0x0, 0x104, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d6], 0x4, 0xf, 0x3}}, @common=@frag={{0x30}, {[0x4, 0xb99], 0x5, 0x1, 0x1}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0x81}}}, {{@uncond, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xfc}, 0x3}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x610) unshare(0x6a040000) r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioprio_set$pid(0x0, r0, 0x4007) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r7, 0xc0105500, &(0x7f0000000000)=@usbdevfs_connect={0x6a0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@mcast2, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r8}) 38.829557567s ago: executing program 2 (id=3145): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x40c}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x5}, 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) rmdir(&(0x7f00000001c0)='./file0\x00') r2 = socket$netlink(0x10, 0x3, 0x9) r3 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40088a01, &(0x7f0000000000)=0x10) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4004811}, 0x800) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000340)) syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x123880, 0x0) ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f0000000300)) socket$kcm(0x10, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) ioctl$PIO_SCRNMAP(r5, 0x4b41, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 38.760429107s ago: executing program 3 (id=3146): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "9b1f80001b00"}, 0x38) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x100}, 0x0) 38.686830145s ago: executing program 2 (id=3147): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 32) preadv(0xffffffffffffffff, 0x0, 0x0, 0xfffffffc, 0x0) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x8) (async, rerun: 32) r0 = getpid() (rerun: 32) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000004c0)="17000000020001000003be8c5ee17688a20032000203000a0292000098fc5ad90a00bb6a880000d6c8db0000dba67e06020000e28900000200df018002000000fc0607bd", 0x44) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0b, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket(0x400000000010, 0x3, 0x7) (async) r4 = socket(0x6, 0x3, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r5 = socket$unix(0x1, 0x1, 0x0) write(r3, &(0x7f0000000280)="dc9164c05a57e9cb028185f375d075d15113e2e35fb56153784e7d967516232b9c4b7cd05d2d53ffaf8ee67590db513cc199663f7222e7709df3ea57e649db53b50cdd8083075091cdd73c1b889f410679e5e2491c03cc5dc0b624591fa95f8b10960cf6affce87ddea9d61b272f6260f304dde27d77edb7a0f0f8e7b0b4a24a57bc097785ea8f5633fb579e0d72e8f6213d40d5e928645b6b03429a8af91ade24aa7f9ccc253fe0eb25bd1438aefafe724850fa4c657b14acc5244ee2042ba449e45666209a0b17d6b9f8d67d2799e9d5b74a171d3332394c525c4f27c7c364c3faa2a676fbdea61ec0ee0286452dc1b37f28a451663e731ff7", 0xfa) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) (async, rerun: 32) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (async, rerun: 32) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) (async) r8 = userfaultfd(0x80801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) (async, rerun: 32) r9 = epoll_create1(0x0) (rerun: 32) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)={0x40000008}) 38.583976492s ago: executing program 3 (id=3148): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x1cb842, 0x104) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107d1eed2c000000000001090224000100003005090400000903000300092109000300222c0009058103ff03100700"], 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) openat$kvm(0xffffffffffffff9c, 0x0, 0x8c3, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0xc000) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000040)={0x28, 0x22, 0x6, 0x2, 0x8, 0xa9, 0x0, 0x23, 0xffffffffffffffff}) 38.478912353s ago: executing program 0 (id=3149): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r6, 0x84, 0x80, &(0x7f00000002c0)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r6, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r5, 0x84, 0x5, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x4e21, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0x8}}}, 0x84) socket$inet_mptcp(0x2, 0x1, 0x106) r7 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@delchain={0x34, 0x2c, 0xf31, 0x70bd27, 0x2000, {0x0, 0x0, 0x0, r8, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 37.942036552s ago: executing program 4 (id=3150): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x7, 0x1000, 0x4, 0x1fc}}) (fail_nth: 1) 37.888766182s ago: executing program 1 (id=3151): syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000"], 0x0) r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, 0x0, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000080)) 37.555020947s ago: executing program 4 (id=3152): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f0000000000)='./bus\x00') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r0, &(0x7f0000007c40)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) creat(&(0x7f0000000440)='./bus\x00', 0xf2) 37.5065242s ago: executing program 2 (id=3153): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prlimit64(r0, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000080), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) ioctl$FIGETBSZ(r4, 0x2, &(0x7f00000000c0)) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/diskstats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000500c00000000000000950000000000000018100000", @ANYRES64=r3, @ANYBLOB="0000000029000000000500000000ffff5ac09eb200000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1c, 0x0, 0x0, 0x6}]}}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240008e4) r7 = accept4$phonet_pipe(r5, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r9, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$sock_SIOCDELRT(r7, 0x890c, &(0x7f0000000380)={0x0, @in={0x2, 0x4e22, @private=0xa010101}, @xdp={0x2c, 0x6, r9, 0x30}, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x3}}, 0xd3, 0x0, 0x0, 0x0, 0x748, &(0x7f0000000340)='wg2\x00', 0x9f, 0x3, 0x5}) 37.478265023s ago: executing program 4 (id=3154): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1890000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000b0a000d002cbd7040fcdbdf25030006000000000002004e22ac1414bb0000000000000000030005000000000002004e22ac14140a000000000000000002000100"], 0x50}, 0x1, 0x7}, 0x800) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x4c, 0x30, 0x9, 0x0, 0x0, {}, [{0x38, 0x1, [@m_xt={0x34, 0x19, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x4c}}, 0x84) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="a81400002a00070127bd700000000000017c00000c00028005007c80280000000400"], 0x14a8}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) readv(r1, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210057ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x8, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000000)={0x0, 0x38, 0x20f}) 37.390713617s ago: executing program 0 (id=3155): r0 = creat(&(0x7f0000000140)='./file0\x00', 0x24) close(r0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000280)={r4, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000002c0)={r4, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000000)={r4, 0x1, 0x6}, 0x10) r5 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) chroot(0x0) close(0x4) socket(0x10, 0x1, 0x0) r6 = getpid() r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) copy_file_range(r5, 0x0, r2, &(0x7f0000000080)=0x262, 0xfffffffffffffff7, 0x0) pwritev(r7, &(0x7f0000000600)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0, 0x0) sched_setscheduler(r6, 0x0, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x20) lsetxattr$security_capability(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000380), &(0x7f0000000440)=@v3={0x3000000, [{0x1, 0xe0f4}, {0xc6, 0x10001}], 0xffffffffffffffff}, 0x18, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) 37.347198711s ago: executing program 4 (id=3156): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) setpriority(0x2, 0x0, 0x5) unshare(0x24060400) r1 = semget$private(0x0, 0x7, 0x243) semtimedop(r1, &(0x7f00000000c0)=[{0x0, 0xffff, 0x2000}, {0x4, 0x0, 0x1800}], 0x2, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r3 = memfd_create(&(0x7f00000002c0)='\x00', 0x0) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000340)={r3, 0x0, 0x2000, 0x1001000}) r4 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="04e17a8c7ee6549451675e95c8ae6332a825fa9274792518575196afd270613066d7da6a5a39e7c055e24f0b549b26aa3c3a699895bb46b0e0058ab259ba6bcd4a0b8964f8f5c9b892ad39ace4e8c867b4df82f291aeb29978fafb04b56d6e574fc740b10475533ace763e80d42aad352e2fdc072ddf5089d3ebb75697a72fc850e9ce552c376609af3038cf5359e6985a6d969fb30a096e0127c5ba2de39876668374a74ac7c6c50ce101d8565f28f83c2e1a29a398db57f7f30c6b7e0d15265c0d174a5d96c7f12a4741c22599e08df57996e0ad361ef14463356803d5", @ANYRESHEX=r1, @ANYBLOB="97fad5d3c17f9812ac73bcc51aa3b918721c795c314411e520d68437180c0c16557e0a0075f57685f07f87412857a03b93c22d939c12c200af5b862bbf0ab0973de75c70b7fa995449adb0aaaabc59b7b6430667eb4a80383996f4a7ffab1f2e959348ea09017394dfaa24a0e885cbb80d6f34aead0952fa1200dd272b4d4a988fdb781e851c346f9336380a60b72533d82200fb85bc53ea010a96b02b2c00839f0e79f196d38deda357c0a8095dd785034443748c9b837f59b14c9c9ad05d3f", @ANYRES32], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xa000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x7, "d6"}]}}, 0x0}, 0x0) semop(r1, &(0x7f00000003c0)=[{0x3, 0xe8c7, 0x1000}, {0x1, 0x4}], 0x2) semctl$SETVAL(r1, 0x0, 0x10, 0x0) 36.760764601s ago: executing program 3 (id=3157): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) modify_ldt$write2(0x11, &(0x7f0000000000)={0x7, 0x0, 0xffffffffffffffff, 0x1}, 0x10) r1 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x20, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0xe0002005}) syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102882333404f17cf8af4390102030109024500013f06400409044207000e0100010a240107000105ff010302070724050107638c09"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xfffe, 0x0, 0x8000}}}}}}, 0x0) 36.747199018s ago: executing program 4 (id=3158): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r1, &(0x7f0000000000), 0x10) io_submit(r2, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000004000029ffffff000000", 0x20000238}]) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_open_procfs(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) munlockall() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000001a40)=""/102392, 0x18ff8) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f00000005c0)={0x48, 0x2, r7}) 36.13260673s ago: executing program 2 (id=3159): sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f0000006040)=[{{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000c00)=[{&(0x7f00000005c0)=""/82, 0x52}, {&(0x7f0000000640)=""/29, 0x1d}, {&(0x7f0000000680)=""/226, 0xe2}, {&(0x7f0000000180)=""/13, 0xd}, {&(0x7f00000007c0)=""/119, 0x77}, {&(0x7f0000000840)=""/235, 0xeb}, {&(0x7f0000000940)=""/171, 0xab}, {&(0x7f0000000a80)=""/208, 0xd0}, {&(0x7f0000000b80)=""/105, 0x69}], 0x9}, 0x1}, {{&(0x7f0000000cc0)=@x25, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000000d40)=""/204, 0xcc}, {&(0x7f0000000e40)=""/127, 0x7f}, {&(0x7f0000000ec0)=""/156, 0x9c}, {&(0x7f0000006340)=""/4101, 0x1005}, {&(0x7f0000001f80)=""/30, 0x1e}], 0x5, &(0x7f0000002040)=""/38, 0x26}, 0xc}, {{&(0x7f0000004180)=@ieee802154, 0x80, &(0x7f00000045c0)=[{&(0x7f0000004200)=""/83, 0x53}, {&(0x7f0000004280)=""/252, 0xfc}, {&(0x7f0000004380)=""/174, 0xae}, {&(0x7f0000004440)=""/187, 0xbb}, {&(0x7f0000004540)=""/84, 0x54}], 0x5}, 0xfffffffa}, {{&(0x7f0000004640)=@generic, 0x80, &(0x7f0000004bc0)=[{&(0x7f00000046c0)=""/37, 0x25}, {&(0x7f0000006180)=""/158, 0x9e}, {&(0x7f0000006240)=""/248, 0xf8}, {&(0x7f00000048c0)=""/40, 0x28}, {&(0x7f0000004900)=""/204, 0xcc}, {&(0x7f0000004a00)=""/239, 0xef}, {&(0x7f0000004b00)=""/145, 0x91}], 0x7, &(0x7f0000004c40)=""/136, 0x88}, 0x3ff}, {{&(0x7f0000004d00)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000005000)=[{&(0x7f0000004d80)=""/35, 0x23}, {&(0x7f0000004dc0)=""/98, 0x62}, {&(0x7f0000004e40)=""/242, 0xf2}, {&(0x7f0000004f40)=""/145, 0x91}], 0x4, &(0x7f0000005040)=""/4096, 0x1000}, 0x8}], 0x5, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) getrusage(0xffffffffffffffff, 0x0) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) (async) epoll_create1(0x80000) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f00000000c0)={0xe000001a}) (async) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) (async) setgroups(0x0, 0x0) setregid(0xffffffffffffffff, r4) (async) socket$inet(0x2, 0x2, 0x1) read$char_usb(r2, &(0x7f0000000340)=""/170, 0xaa) (async) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000400)=ANY=[]) read$FUSE(r5, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES64=r6], 0x0, 0xfffffffffffffe46}, 0x28) (async) r7 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000180)=[{&(0x7f00000001c0)="170000001500add427323b472545b4562d117fffffff8100", 0x18}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000080)=0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b}, 0x94) 36.011553414s ago: executing program 2 (id=3160): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) listen(r1, 0x3) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000040)=0x80000005, 0x4) sendmmsg(r2, &(0x7f0000004d40)=[{{&(0x7f0000000080)=@in={0x2, 0xffff, @loopback}, 0x80, 0x0}}], 0x1, 0x24008010) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x674, 0x4080800) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00'}) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000000)={0x9325, 0x1, [{0x9, 0x1}]}) 35.872718179s ago: executing program 4 (id=3161): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000040)=0x5, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x0) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x4, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_MTU={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20008044) prctl$PR_SCHED_CORE(0x4e, 0x1, 0x0, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r6, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) write$cgroup_subtree(r6, 0x0, 0xfe33) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r4, 0x305, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x24044080) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 35.501016988s ago: executing program 0 (id=3162): syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_io_uring_setup(0x7b6, 0x0, 0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(0xffffffffffffffff, 0xc0205866, &(0x7f0000000d40)={0x0, 0xfffffffb, 0x0, 0x0}) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x1501) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f00000001c0)) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x4b5a9da54893e123, 0x3, 0x18, 0x3}, 0x8, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0x200f, {"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", 0x1000}}, 0x1006) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ba20702500000000002003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 35.057198723s ago: executing program 1 (id=3163): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCSETA(0xffffffffffffffff, 0x8910, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r4 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x4, 0x10103) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r4, 0xc10c5541, &(0x7f0000000480)={0x6, 0x4, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000004, 0x40010, r3, 0x1abee000) close(r2) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x380, 0x30, 0x1, 0x0, 0x0, {}, [{0x36c, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x81000000, 0x803}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_police={0x2fc, 0x10, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x10000, 0x1, 0x3, {0x8, 0x0, 0xb, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x10, 0x7}}}]]}, {0x291, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x380}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000040)=0x5, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) socket$inet(0x2, 0x6, 0x6) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r0, &(0x7f0000000540)="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", 0x18d, 0x880, 0x0, 0x0) inotify_init() r6 = socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8382, 0x0) 31.850376727s ago: executing program 0 (id=3164): r0 = socket(0x18, 0x4, 0x0) getsockopt$sock_buf(r0, 0x1, 0x30, 0x0, &(0x7f0000000280)) 23.647580279s ago: executing program 3 (id=3165): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f0000000000)='./bus\x00') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r0, &(0x7f0000007c40)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) creat(&(0x7f0000000440)='./bus\x00', 0xf2) 0s ago: executing program 32 (id=3163): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCSETA(0xffffffffffffffff, 0x8910, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r4 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x4, 0x10103) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r4, 0xc10c5541, &(0x7f0000000480)={0x6, 0x4, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000004, 0x40010, r3, 0x1abee000) close(r2) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x380, 0x30, 0x1, 0x0, 0x0, {}, [{0x36c, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x81000000, 0x803}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_police={0x2fc, 0x10, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x10000, 0x1, 0x3, {0x8, 0x0, 0xb, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x10, 0x7}}}]]}, {0x291, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x380}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000040)=0x5, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) socket$inet(0x2, 0x6, 0x6) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r0, &(0x7f0000000540)="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", 0x18d, 0x880, 0x0, 0x0) inotify_init() r6 = socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8382, 0x0) kernel console output (not intermixed with test programs): /syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f731d59cdd9 code=0x7ffc0000 [ 935.756765][ T803] nzxt-smart2 0003:1E71:2009.0017: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 935.769117][ T29] audit: type=1326 audit(3554519790.942:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18062 comm="syz.1.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f731d59cdd9 code=0x7ffc0000 [ 935.800105][ T29] audit: type=1326 audit(3554519790.942:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18062 comm="syz.1.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f731d59cdd9 code=0x7ffc0000 [ 935.800364][ T5701] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 935.962344][ T29] audit: type=1326 audit(3554519790.942:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18062 comm="syz.1.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f731d59cdd9 code=0x7ffc0000 [ 936.792924][T18039] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.2804'. [ 937.167354][ T29] audit: type=1326 audit(3554519790.942:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18062 comm="syz.1.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f731d59cdd9 code=0x7ffc0000 [ 937.199394][ T29] audit: type=1326 audit(3554519790.942:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18062 comm="syz.1.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f731d59cdd9 code=0x7ffc0000 [ 937.222977][ T5701] usb 3-1: device descriptor read/64, error -71 [ 937.322099][ T29] audit: type=1326 audit(3554519790.942:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18062 comm="syz.1.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f731d59cdd9 code=0x7ffc0000 [ 937.367539][ T5701] usb usb3-port1: attempt power cycle [ 937.451833][ T29] audit: type=1326 audit(3554519790.942:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18062 comm="syz.1.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f731d59cdd9 code=0x7ffc0000 [ 937.720277][ T5701] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 937.754734][ T5701] usb 3-1: device descriptor read/8, error -71 [ 938.020282][ T5701] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 938.071582][ T5701] usb 3-1: device descriptor read/8, error -71 [ 938.103181][ T9] usb 5-1: USB disconnect, device number 75 [ 938.321832][ T5701] usb usb3-port1: unable to enumerate USB device [ 940.302110][T18108] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2822'. [ 940.440719][T18110] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2821'. [ 940.512984][T18111] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2821'. [ 941.445510][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 941.445546][ T29] audit: type=1400 audit(3554519796.462:1617): avc: denied { mounton } for pid=18113 comm="syz.2.2823" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 941.760731][ T29] audit: type=1400 audit(3554519797.122:1618): avc: denied { unmount } for pid=15482 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 942.566723][T18131] comedi: No check for data length of config insn id 29155 is implemented [ 942.584808][T18131] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 942.620141][T18131] comedi: Assuming n=5811 is correct [ 942.691850][T18129] tipc: Started in network mode [ 942.705243][T18129] tipc: Node identity da09f70dd36b, cluster identity 4711 [ 942.757071][T18129] tipc: Enabled bearer , priority 0 [ 942.778453][T18132] validate_nla: 42 callbacks suppressed [ 942.778470][T18132] netlink: 'syz.3.2827': attribute type 33 has an invalid length. [ 942.803772][T18132] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2827'. [ 942.838896][T18129] tipc: Disabling bearer [ 943.091937][ T5701] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 943.258147][T17288] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 943.342522][ T5701] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 943.356249][ T5701] usb 3-1: config 0 has no interface number 0 [ 943.365692][ T5701] usb 3-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 943.379026][ T5701] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 943.400348][T17288] usb 1-1: device descriptor read/64, error -71 [ 943.406777][ T5701] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 943.441524][ T5701] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 943.464191][ T5701] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 943.491888][ T5701] usb 3-1: Product: syz [ 943.499502][ T5701] usb 3-1: SerialNumber: syz [ 943.511694][ T5701] usb 3-1: config 0 descriptor?? [ 943.519718][ T5701] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 943.559617][ T5701] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input98 [ 943.650302][T17288] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 943.800355][T17288] usb 1-1: device descriptor read/64, error -71 [ 943.829516][T18136] trusted_key: encrypted_key: insufficient parameters specified [ 943.890890][T18157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 943.921546][T17288] usb usb1-port1: attempt power cycle [ 943.936839][T18157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 944.004574][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 944.261990][ T5702] usb 3-1: USB disconnect, device number 68 [ 944.284890][ T5702] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 944.301447][T17288] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 944.340676][T17288] usb 1-1: device descriptor read/8, error -71 [ 944.350368][T14214] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 944.501607][T14214] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 944.520110][T14214] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 944.538786][T14214] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 944.558583][T14214] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.582161][T14214] usb 5-1: config 0 descriptor?? [ 944.601859][T17288] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 944.640802][T17288] usb 1-1: device descriptor read/8, error -71 [ 944.763610][T17288] usb usb1-port1: unable to enumerate USB device [ 944.903764][T18161] netlink: 'syz.2.2837': attribute type 4 has an invalid length. [ 944.958560][T18161] netlink: 4168 bytes leftover after parsing attributes in process `syz.2.2837'. [ 945.008559][T14214] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 945.061207][T14214] cp2112 0003:10C4:EA90.0018: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 945.201464][T14214] cp2112 0003:10C4:EA90.0018: error requesting version [ 945.256387][T14214] cp2112 0003:10C4:EA90.0018: probe with driver cp2112 failed with error -5 [ 945.667009][T17288] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 946.411469][T17288] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 946.895493][T17288] usb 3-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 946.909801][T17288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.957969][T17288] usb 3-1: config 0 descriptor?? [ 946.991495][T17288] ttusbir 3-1:0.0: probe with driver ttusbir failed with error -12 [ 947.083178][T18180] fuse: Unknown parameter 'user_iä' [ 947.440286][T14214] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 947.520443][ T5800] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 947.601959][T14214] usb 4-1: unable to get BOS descriptor or descriptor too short [ 947.610850][T14214] usb 4-1: config 63 has an invalid interface number: 66 but max is 0 [ 947.619243][T14214] usb 4-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 947.629756][T14214] usb 4-1: config 63 has no interface number 0 [ 947.636008][T14214] usb 4-1: config 63 interface 66 has no altsetting 0 [ 947.645894][T14214] usb 4-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 947.654993][T14214] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.663133][T14214] usb 4-1: Product: syz [ 947.667360][T14214] usb 4-1: Manufacturer: syz [ 947.672019][T14214] usb 4-1: SerialNumber: syz [ 947.683937][ T5800] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 947.693023][ T5800] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.702597][ T5800] usb 2-1: Product: syz [ 947.706784][ T5800] usb 2-1: Manufacturer: syz [ 947.711436][ T5800] usb 2-1: SerialNumber: syz [ 947.717756][ T5800] usb 2-1: config 0 descriptor?? [ 947.738984][ T5702] usb 3-1: USB disconnect, device number 69 [ 947.785760][T18193] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2846'. [ 947.795640][T18193] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2846'. [ 947.897321][T14214] uvcvideo 4-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 947.913412][T14214] uvcvideo 4-1:63.66: No valid video chain found. [ 947.943405][ T5800] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 947.964297][T14214] usb 4-1: USB disconnect, device number 64 [ 948.005832][ T5702] usb 5-1: USB disconnect, device number 76 [ 948.883210][T18217] FAULT_INJECTION: forcing a failure. [ 948.883210][T18217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 948.914000][T18217] CPU: 0 UID: 0 PID: 18217 Comm: syz.4.2851 Tainted: G L syzkaller #0 PREEMPT(full) [ 948.914029][T18217] Tainted: [L]=SOFTLOCKUP [ 948.914035][T18217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 948.914045][T18217] Call Trace: [ 948.914051][T18217] [ 948.914058][T18217] dump_stack_lvl+0x100/0x190 [ 948.914087][T18217] should_fail_ex.cold+0x5/0xa [ 948.914112][T18217] _copy_from_user+0x2e/0xd0 [ 948.914142][T18217] __sys_bpf+0x243/0x4b90 [ 948.914174][T18217] ? __pfx___sys_bpf+0x10/0x10 [ 948.914198][T18217] ? proc_fail_nth_write+0x9f/0x220 [ 948.914217][T18217] ? find_held_lock+0x2b/0x80 [ 948.914239][T18217] ? find_held_lock+0x2b/0x80 [ 948.914254][T18217] ? ksys_write+0x190/0x250 [ 948.914272][T18217] ? ksys_write+0x190/0x250 [ 948.914294][T18217] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 948.914315][T18217] ? kernel_write+0x663/0x6c0 [ 948.914332][T18217] ? __fget_files+0x215/0x3d0 [ 948.914365][T18217] ? fput+0x79/0x100 [ 948.914388][T18217] ? ksys_write+0x1ac/0x250 [ 948.914406][T18217] ? __pfx_ksys_write+0x10/0x10 [ 948.914429][T18217] __x64_sys_bpf+0x7b/0xc0 [ 948.914446][T18217] ? lockdep_hardirqs_on+0x78/0x100 [ 948.914464][T18217] do_syscall_64+0x10b/0xf80 [ 948.914482][T18217] ? clear_bhb_loop+0x40/0x90 [ 948.914504][T18217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.914522][T18217] RIP: 0033:0x7f3ce799cdd9 [ 948.914537][T18217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 948.914555][T18217] RSP: 002b:00007f3ce87c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 948.914572][T18217] RAX: ffffffffffffffda RBX: 00007f3ce7c16180 RCX: 00007f3ce799cdd9 [ 948.914584][T18217] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012 [ 948.914595][T18217] RBP: 00007f3ce87c6090 R08: 0000000000000000 R09: 0000000000000000 [ 948.914604][T18217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 948.914615][T18217] R13: 00007f3ce7c16218 R14: 00007f3ce7c16180 R15: 00007ffd51306df8 [ 948.914643][T18217] [ 950.313888][T18231] tipc: Enabled bearer , priority 0 [ 950.323616][T18231] syzkaller0: entered promiscuous mode [ 950.329170][T18231] syzkaller0: entered allmulticast mode [ 950.735752][ T5800] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 951.054760][ T5800] usb 2-1: USB disconnect, device number 72 [ 951.152259][T18231] tipc: Resetting bearer [ 951.404407][T18238] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2859'. [ 951.518531][T18229] tipc: Resetting bearer [ 951.577860][T18229] tipc: Disabling bearer [ 951.621373][T18242] FAULT_INJECTION: forcing a failure. [ 951.621373][T18242] name failslab, interval 1, probability 0, space 0, times 0 [ 951.638510][T18242] CPU: 0 UID: 0 PID: 18242 Comm: syz.4.2862 Tainted: G L syzkaller #0 PREEMPT(full) [ 951.638537][T18242] Tainted: [L]=SOFTLOCKUP [ 951.638543][T18242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 951.638554][T18242] Call Trace: [ 951.638560][T18242] [ 951.638567][T18242] dump_stack_lvl+0x100/0x190 [ 951.638594][T18242] should_fail_ex.cold+0x5/0xa [ 951.638618][T18242] should_failslab+0xc2/0x120 [ 951.638637][T18242] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 951.638662][T18242] ? radix_tree_node_alloc.constprop.0+0x66/0x340 [ 951.638687][T18242] ? rcu_is_watching+0x12/0xc0 [ 951.638711][T18242] radix_tree_node_alloc.constprop.0+0x66/0x340 [ 951.638729][T18242] radix_tree_extend+0x1a2/0x4d0 [ 951.638748][T18242] idr_get_free+0x5ec/0xa00 [ 951.638778][T18242] idr_alloc_u32+0x1ac/0x320 [ 951.638797][T18242] ? __pfx_idr_alloc_u32+0x10/0x10 [ 951.638810][T18242] ? __pfx___debug_object_init+0x10/0x10 [ 951.638828][T18242] idr_alloc+0xc0/0x130 [ 951.638839][T18242] ? __pfx_idr_alloc+0x10/0x10 [ 951.638851][T18242] ? lockdep_init_map_type+0x5c/0x250 [ 951.638869][T18242] loop_add+0x1fe/0xb60 [ 951.638883][T18242] ? __pfx_loop_add+0x10/0x10 [ 951.638905][T18242] ? __fget_files+0x215/0x3d0 [ 951.638920][T18242] loop_control_ioctl+0xae/0x620 [ 951.638935][T18242] ? __pfx_loop_control_ioctl+0x10/0x10 [ 951.638948][T18242] ? selinux_file_ioctl+0x13b/0x290 [ 951.638962][T18242] ? selinux_file_ioctl+0xb6/0x290 [ 951.638976][T18242] ? __pfx_loop_control_ioctl+0x10/0x10 [ 951.638991][T18242] __x64_sys_ioctl+0x18e/0x210 [ 951.639003][T18242] do_syscall_64+0x10b/0xf80 [ 951.639014][T18242] ? clear_bhb_loop+0x40/0x90 [ 951.639028][T18242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.639039][T18242] RIP: 0033:0x7f3ce799cdd9 [ 951.639048][T18242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 951.639059][T18242] RSP: 002b:00007f3ce8808028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 951.639069][T18242] RAX: ffffffffffffffda RBX: 00007f3ce7c15fa0 RCX: 00007f3ce799cdd9 [ 951.639076][T18242] RDX: 0000000007003f00 RSI: 0000000000004c80 RDI: 0000000000000003 [ 951.639083][T18242] RBP: 00007f3ce8808090 R08: 0000000000000000 R09: 0000000000000000 [ 951.639089][T18242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 951.639095][T18242] R13: 00007f3ce7c16038 R14: 00007f3ce7c15fa0 R15: 00007ffd51306df8 [ 951.639108][T18242] [ 952.091599][T18252] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2866'. [ 952.108406][T18247] batadv_slave_1: entered promiscuous mode [ 952.118467][ T29] audit: type=1400 audit(3554519807.472:1619): avc: denied { bind } for pid=18244 comm="syz.1.2863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 953.975634][T18281] random: crng reseeded on system resumption [ 954.242033][T18246] batadv_slave_1: left promiscuous mode [ 954.976596][T18289] netlink: 'syz.0.2873': attribute type 3 has an invalid length. [ 955.049100][T18289] netlink: 'syz.0.2873': attribute type 3 has an invalid length. [ 955.116636][T18289] netlink: 'syz.0.2873': attribute type 3 has an invalid length. [ 955.128575][T18289] netlink: 'syz.0.2873': attribute type 3 has an invalid length. [ 955.136480][T18289] netlink: 'syz.0.2873': attribute type 3 has an invalid length. [ 955.206532][T18289] netlink: 'syz.0.2873': attribute type 3 has an invalid length. [ 955.284415][T18289] netlink: 'syz.0.2873': attribute type 3 has an invalid length. [ 955.292889][T18289] netlink: 'syz.0.2873': attribute type 3 has an invalid length. [ 955.317342][T18289] netlink: 'syz.0.2873': attribute type 3 has an invalid length. [ 955.326964][T18289] netlink: 'syz.0.2873': attribute type 3 has an invalid length. [ 955.510430][ T5730] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 956.011695][ T5730] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 956.038091][ T5730] usb 5-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 956.048894][ T5730] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.069835][ T5730] usb 5-1: Product: syz [ 956.074474][ T5730] usb 5-1: Manufacturer: syz [ 956.079171][ T5730] usb 5-1: SerialNumber: syz [ 956.130522][ T5800] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 956.177146][T18304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2880'. [ 956.286962][ T5730] usb 5-1: config 0 descriptor?? [ 956.491324][ T5800] usb 3-1: Using ep0 maxpacket: 32 [ 956.502180][ T5800] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 956.517484][ T5800] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 956.542714][ T5800] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 956.578289][ T5800] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 956.610177][T18306] tipc: Enabled bearer , priority 0 [ 956.620173][ T5800] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 956.646687][ T5800] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 956.659456][T18306] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2881'. [ 956.746884][ T5800] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 956.760045][ T5800] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 956.769306][ T5800] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.795988][T18306] tipc: Disabling bearer [ 956.802859][ T5800] usb 3-1: config 0 descriptor?? [ 956.811657][T18309] FAULT_INJECTION: forcing a failure. [ 956.811657][T18309] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 956.825049][T18309] CPU: 1 UID: 0 PID: 18309 Comm: syz.3.2882 Tainted: G L syzkaller #0 PREEMPT(full) [ 956.825066][T18309] Tainted: [L]=SOFTLOCKUP [ 956.825070][T18309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 956.825076][T18309] Call Trace: [ 956.825080][T18309] [ 956.825084][T18309] dump_stack_lvl+0x100/0x190 [ 956.825101][T18309] should_fail_ex.cold+0x5/0xa [ 956.825115][T18309] ? prepare_alloc_pages+0x16d/0x5f0 [ 956.825129][T18309] should_fail_alloc_page+0xeb/0x140 [ 956.825142][T18309] prepare_alloc_pages+0x1f0/0x5f0 [ 956.825156][T18309] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 956.825179][T18309] ? __lock_acquire+0x4a5/0x2630 [ 956.825194][T18309] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 956.825213][T18309] ? __lock_acquire+0x4a5/0x2630 [ 956.825233][T18309] ? find_held_lock+0x2b/0x80 [ 956.825243][T18309] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 956.825257][T18309] ? policy_nodemask+0xed/0x4f0 [ 956.825270][T18309] alloc_pages_mpol+0x1fb/0x540 [ 956.825282][T18309] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 956.825294][T18309] ? arch_stack_walk+0xa6/0xf0 [ 956.825312][T18309] ? wiphy_new_nm+0x701/0x21a0 [ 956.825327][T18309] ___kmalloc_large_node+0xe5/0x120 [ 956.825340][T18309] ? __pfx_mac80211_hwsim_add_chanctx+0x10/0x10 [ 956.825353][T18309] __kmalloc_large_node_noprof+0x1c/0x70 [ 956.825367][T18309] ? __pfx_mac80211_hwsim_remove_chanctx+0x10/0x10 [ 956.825380][T18309] __kmalloc_noprof+0x5be/0x850 [ 956.825398][T18309] ? __pfx_mac80211_hwsim_remove_chanctx+0x10/0x10 [ 956.825411][T18309] ? __pfx_mac80211_hwsim_add_chanctx+0x10/0x10 [ 956.825423][T18309] ? __pfx_mac80211_hwsim_change_chanctx+0x10/0x10 [ 956.825442][T18309] wiphy_new_nm+0x701/0x21a0 [ 956.825458][T18309] ? __pfx_mac80211_hwsim_remove_chanctx+0x10/0x10 [ 956.825471][T18309] ? __pfx_mac80211_hwsim_add_chanctx+0x10/0x10 [ 956.825483][T18309] ? __pfx_mac80211_hwsim_change_chanctx+0x10/0x10 [ 956.825496][T18309] ieee80211_alloc_hw_nm+0x45d/0x22e0 [ 956.825509][T18309] ? __local_bh_enable_ip+0x9e/0x120 [ 956.825527][T18309] mac80211_hwsim_new_radio+0x1de/0x5ae0 [ 956.825549][T18309] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 956.825562][T18309] ? __nla_validate_parse+0x1e7/0x28b0 [ 956.825576][T18309] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 956.825596][T18309] hwsim_new_radio_nl+0xc5f/0x1370 [ 956.825611][T18309] ? rcu_is_watching+0x12/0xc0 [ 956.825628][T18309] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 956.825647][T18309] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 956.825663][T18309] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 956.825680][T18309] genl_family_rcv_msg_doit+0x214/0x300 [ 956.825696][T18309] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 956.825714][T18309] ? bpf_lsm_capable+0x9/0x10 [ 956.825726][T18309] ? security_capable+0x80/0x260 [ 956.825737][T18309] ? ns_capable+0xd2/0xf0 [ 956.825753][T18309] genl_rcv_msg+0x560/0x800 [ 956.825768][T18309] ? __pfx_genl_rcv_msg+0x10/0x10 [ 956.825783][T18309] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 956.825799][T18309] ? __lock_acquire+0x4a5/0x2630 [ 956.825815][T18309] netlink_rcv_skb+0x159/0x420 [ 956.825827][T18309] ? __pfx_genl_rcv_msg+0x10/0x10 [ 956.825842][T18309] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 956.825860][T18309] ? netlink_deliver_tap+0x1ae/0xcc0 [ 956.825873][T18309] genl_rcv+0x28/0x40 [ 956.825885][T18309] netlink_unicast+0x585/0x850 [ 956.825900][T18309] ? __pfx_netlink_unicast+0x10/0x10 [ 956.825916][T18309] netlink_sendmsg+0x8b0/0xda0 [ 956.825930][T18309] ? __pfx_netlink_sendmsg+0x10/0x10 [ 956.825942][T18309] ? pti_set_user_pgtbl+0x50/0x50 [ 956.825962][T18309] ____sys_sendmsg+0x9e1/0xb70 [ 956.825973][T18309] ? __pfx_netlink_sendmsg+0x10/0x10 [ 956.825986][T18309] ? __pfx_____sys_sendmsg+0x10/0x10 [ 956.826004][T18309] ___sys_sendmsg+0x190/0x1e0 [ 956.826018][T18309] ? __pfx____sys_sendmsg+0x10/0x10 [ 956.826045][T18309] __sys_sendmsg+0x170/0x220 [ 956.826062][T18309] ? __pfx___sys_sendmsg+0x10/0x10 [ 956.826083][T18309] ? rcu_is_watching+0x12/0xc0 [ 956.826101][T18309] do_syscall_64+0x10b/0xf80 [ 956.826112][T18309] ? clear_bhb_loop+0x40/0x90 [ 956.826126][T18309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.826137][T18309] RIP: 0033:0x7fbb4df9cdd9 [ 956.826151][T18309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 956.826167][T18309] RSP: 002b:00007fbb4edae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 956.826184][T18309] RAX: ffffffffffffffda RBX: 00007fbb4e216090 RCX: 00007fbb4df9cdd9 [ 956.826195][T18309] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000008 [ 956.826205][T18309] RBP: 00007fbb4edae090 R08: 0000000000000000 R09: 0000000000000000 [ 956.826213][T18309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 956.826219][T18309] R13: 00007fbb4e216128 R14: 00007fbb4e216090 R15: 00007fff1d577c28 [ 956.826233][T18309] [ 957.649576][ T29] audit: type=1326 audit(3554519812.982:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18291 comm="syz.4.2877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ce799cdd9 code=0x7ffc0000 [ 957.715054][T18320] netlink: 4168 bytes leftover after parsing attributes in process `syz.3.2883'. [ 957.731580][ T5701] usb 5-1: USB disconnect, device number 77 [ 957.770305][ T29] audit: type=1326 audit(3554519812.982:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18291 comm="syz.4.2877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ce799cdd9 code=0x7ffc0000 [ 957.884284][T14214] usb 3-1: USB disconnect, device number 70 [ 958.150593][ T5800] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 958.174988][T18326] random: crng reseeded on system resumption [ 958.465181][ T5800] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 958.505379][ T5800] usb 4-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 958.548217][ T5800] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.592271][T18328] tipc: Enabled bearer , priority 0 [ 958.617526][ T5800] usb 4-1: config 0 descriptor?? [ 958.632138][T18328] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2886'. [ 958.653801][ T5800] ttusbir 4-1:0.0: probe with driver ttusbir failed with error -12 [ 958.707063][T18332] comedi: No check for data length of config insn id 29155 is implemented [ 958.716326][T18328] tipc: Disabling bearer [ 958.723617][T18332] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 958.733561][T18332] comedi: Assuming n=5808 is correct [ 959.398855][T18346] tmpfs: Bad value for 'mpol' [ 959.420929][T18346] ªªªªªª: renamed from vlan0 [ 959.674445][ T5702] usb 4-1: USB disconnect, device number 65 [ 959.900357][ T5701] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 960.103143][ T5701] usb 3-1: unable to get BOS descriptor or descriptor too short [ 960.128823][ T5701] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 960.636211][ T5701] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 960.669835][ T5701] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 960.682446][ T5701] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 960.692643][ T5701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.716715][ T5701] usb 3-1: Product: syz [ 960.738324][ T5701] usb 3-1: Manufacturer: syz [ 960.752333][ T5701] usb 3-1: SerialNumber: syz [ 961.081615][T18344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2892'. [ 961.210429][ T5702] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 961.240506][T14214] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 961.316387][T18344] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 961.412732][ T5702] usb 1-1: unable to get BOS descriptor or descriptor too short [ 961.430278][T14214] usb 2-1: Using ep0 maxpacket: 8 [ 961.437076][ T5702] usb 1-1: config 63 has an invalid interface number: 66 but max is 0 [ 961.443896][T14214] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 961.452067][ T5701] cdc_ncm 3-1:1.0: bind() failure [ 961.461576][ T5702] usb 1-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 961.498469][T14214] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.506273][ T5701] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 961.526510][ T5702] usb 1-1: config 63 has no interface number 0 [ 961.538426][ T5701] cdc_ncm 3-1:1.1: bind() failure [ 961.544736][ T5702] usb 1-1: config 63 interface 66 has no altsetting 0 [ 961.570717][ T5701] usb 3-1: USB disconnect, device number 71 [ 961.577711][T14214] pvrusb2: Hardware description: Terratec Grabster AV400 [ 961.585188][ T5702] usb 1-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 961.610489][T14214] pvrusb2: ********** [ 961.622785][T14214] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 961.627793][ T5702] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.679260][T14214] pvrusb2: Important functionality might not be entirely working. [ 961.684270][ T5702] usb 1-1: Product: syz [ 961.703753][T14214] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 961.708923][ T5702] usb 1-1: Manufacturer: syz [ 961.753063][ T5702] usb 1-1: SerialNumber: syz [ 961.755482][T14214] pvrusb2: ********** [ 961.770638][ T2353] pvrusb2: Invalid write control endpoint [ 961.937830][ T2353] pvrusb2: Invalid write control endpoint [ 961.957702][ T2353] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 962.000652][ T5702] uvcvideo 1-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 962.011444][ T2353] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 962.026995][ T5702] uvcvideo 1-1:63.66: No valid video chain found. [ 962.042127][ T2353] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 962.063260][ T5702] usb 1-1: USB disconnect, device number 64 [ 962.076819][ T2353] pvrusb2: Device being rendered inoperable [ 962.094254][ T2353] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 962.123949][ T2353] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_g) [ 962.157055][ T2353] pvrusb2: Attached sub-driver cx25840 [ 962.170477][ T2353] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 962.190657][ T2353] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 962.341051][T18379] comedi: No check for data length of config insn id 29155 is implemented [ 962.357296][T18379] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 962.378225][T18379] comedi: Assuming n=5807 is correct [ 962.543210][ T29] audit: type=1400 audit(3554519817.892:1622): avc: denied { mount } for pid=18382 comm="syz.3.2903" name="/" dev="configfs" ino=1073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 962.801179][T18396] batadv_slave_1: entered promiscuous mode [ 962.831869][ T5702] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 963.210991][ T5702] usb 4-1: Using ep0 maxpacket: 16 [ 963.217753][ T5702] usb 4-1: unable to get BOS descriptor or descriptor too short [ 963.236017][ T5702] usb 4-1: config 7 has an invalid interface number: 17 but max is 0 [ 963.266031][ T5702] usb 4-1: config 7 has no interface number 0 [ 963.288899][ T5702] usb 4-1: config 7 interface 17 has no altsetting 0 [ 963.316955][ T5702] usb 4-1: New USB device found, idVendor=046d, idProduct=c11f, bcdDevice=57.ca [ 963.344646][ T5702] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.374983][ T5702] usb 4-1: Product: syz [ 963.389828][ T5702] usb 4-1: Manufacturer: syz [ 963.407963][ T5702] usb 4-1: SerialNumber: syz [ 963.526252][T18399] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 963.535797][T18399] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 963.640105][T18383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 963.649302][T18383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 963.745383][T18407] usb usb7: usbfs: process 18407 (syz.3.2903) did not claim interface 0 before use [ 963.761991][ T29] audit: type=1400 audit(3554519819.112:1623): avc: denied { search } for pid=18382 comm="syz.3.2903" name="/" dev="configfs" ino=1073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 964.048424][ T42] usb 2-1: USB disconnect, device number 73 [ 964.066621][ T5702] usb 4-1: unsupported MDLM descriptors [ 964.103855][ T5702] usb 4-1: USB disconnect, device number 66 [ 964.132874][T18395] batadv_slave_1: left promiscuous mode [ 964.966126][T18415] team0: Device gtp0 is up. Set it down before adding it as a team port [ 965.460257][ T5701] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 965.501841][ T5702] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 965.600386][ T5701] usb 5-1: device descriptor read/64, error -71 [ 965.805100][ T5702] usb 3-1: unable to get BOS descriptor or descriptor too short [ 965.966968][ T5701] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 965.992092][ T5702] usb 3-1: config 63 has an invalid interface number: 66 but max is 0 [ 966.020266][ T5702] usb 3-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 966.039984][ T5702] usb 3-1: config 63 has no interface number 0 [ 966.050963][ T5702] usb 3-1: config 63 interface 66 has no altsetting 0 [ 966.067518][ T5702] usb 3-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 966.079422][ T5702] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.090054][ T5702] usb 3-1: Product: syz [ 966.094272][ T5702] usb 3-1: Manufacturer: syz [ 966.098972][ T5702] usb 3-1: SerialNumber: syz [ 966.140452][ T5701] usb 5-1: device descriptor read/64, error -71 [ 966.250830][ T5701] usb usb5-port1: attempt power cycle [ 966.326257][ T5702] uvcvideo 3-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 966.333977][ T5702] uvcvideo 3-1:63.66: No valid video chain found. [ 966.344533][ T5702] usb 3-1: USB disconnect, device number 72 [ 966.450416][T18443] validate_nla: 40 callbacks suppressed [ 966.450431][T18443] netlink: 'syz.1.2918': attribute type 3 has an invalid length. [ 966.470332][T18443] netlink: 'syz.1.2918': attribute type 3 has an invalid length. [ 966.478221][T18443] netlink: 'syz.1.2918': attribute type 3 has an invalid length. [ 966.486312][T18443] netlink: 'syz.1.2918': attribute type 3 has an invalid length. [ 966.494844][T18443] netlink: 'syz.1.2918': attribute type 3 has an invalid length. [ 966.504299][T18443] netlink: 'syz.1.2918': attribute type 3 has an invalid length. [ 966.597070][ T5701] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 966.624961][T18443] netlink: 'syz.1.2918': attribute type 3 has an invalid length. [ 966.634654][ T5701] usb 5-1: device descriptor read/8, error -71 [ 967.114349][T18443] netlink: 'syz.1.2918': attribute type 3 has an invalid length. [ 967.132767][T18443] netlink: 'syz.1.2918': attribute type 3 has an invalid length. [ 967.151244][T18443] netlink: 'syz.1.2918': attribute type 3 has an invalid length. [ 967.199972][ T5701] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 967.209343][T18451] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2920'. [ 967.232789][ T5701] usb 5-1: device descriptor read/8, error -71 [ 967.310928][ T5800] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 967.319264][T18453] tipc: Enabled bearer , priority 0 [ 967.329615][T18453] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2921'. [ 967.344144][T18453] tipc: Disabling bearer [ 967.350444][ T5701] usb usb5-port1: unable to enumerate USB device [ 967.470797][ T5800] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 967.482875][ T5800] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 967.495280][ T5800] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 967.518000][ T5800] usb 1-1: config 0 interface 0 has no altsetting 0 [ 967.614879][ T5800] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 967.624108][ T5800] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 967.635224][ T5800] usb 1-1: config 0 interface 0 has no altsetting 0 [ 967.652422][ T5800] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 967.661572][ T5800] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 967.672522][ T5800] usb 1-1: config 0 interface 0 has no altsetting 0 [ 967.680033][ T5800] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 967.688985][ T5800] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 967.704342][ T5800] usb 1-1: config 0 interface 0 has no altsetting 0 [ 967.723528][ T5800] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 967.732635][ T5800] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 967.743661][ T5800] usb 1-1: config 0 interface 0 has no altsetting 0 [ 967.751363][ T5800] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 967.760552][ T5800] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 967.773357][ T5800] usb 1-1: config 0 interface 0 has no altsetting 0 [ 967.781539][ T5800] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 967.790536][ T5800] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 967.807461][ T5800] usb 1-1: config 0 interface 0 has no altsetting 0 [ 967.815046][ T5800] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 967.824070][ T5800] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 967.835008][ T5800] usb 1-1: config 0 interface 0 has no altsetting 0 [ 967.843741][ T5800] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 967.852966][ T5800] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 967.862057][ T5800] usb 1-1: Product: syz [ 967.866686][ T5800] usb 1-1: Manufacturer: syz [ 967.871986][ T5800] usb 1-1: SerialNumber: syz [ 967.881301][ T5800] usb 1-1: config 0 descriptor?? [ 967.893395][ T5800] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 968.101831][ T5701] usb 1-1: USB disconnect, device number 65 [ 968.117014][ T5701] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 969.620294][ T9] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 969.705110][T18486] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2931'. [ 969.793674][ T9] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 969.809284][ T9] usb 3-1: config 16 interface 0 altsetting 75 endpoint 0x4 has invalid wMaxPacketSize 0 [ 969.867239][ T9] usb 3-1: config 16 interface 0 altsetting 75 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 969.920422][ T5800] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 970.087188][ T9] usb 3-1: config 16 interface 0 has no altsetting 0 [ 970.214520][ T9] usb 3-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a [ 970.343235][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.787115][ T9] usb 3-1: string descriptor 0 read error: -71 [ 970.794779][ T9] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 970.817377][ T9] imon 3-1:16.0: unable to initialize intf0, err -19 [ 970.931987][ T9] imon:imon_probe: failed to initialize context! [ 970.935128][ T5800] usb 1-1: unable to get BOS descriptor or descriptor too short [ 970.947125][ T5800] usb 1-1: config 63 has an invalid interface number: 66 but max is 0 [ 970.955360][ T5800] usb 1-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 970.965615][ T5800] usb 1-1: config 63 has no interface number 0 [ 970.967104][ T9] imon 3-1:16.0: unable to register, err -19 [ 970.971848][ T5800] usb 1-1: config 63 interface 66 has no altsetting 0 [ 971.109269][T18497] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2934'. [ 971.180761][T18499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2934'. [ 971.513760][ T9] usb 3-1: USB disconnect, device number 73 [ 971.566231][ T5800] usb 1-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 971.597216][ T5800] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.628193][ T5800] usb 1-1: Product: syz [ 971.652170][ T5800] usb 1-1: Manufacturer: syz [ 971.669306][ T5800] usb 1-1: SerialNumber: syz [ 971.873661][T18511] fuse: Unknown parameter '' [ 971.949704][ T5800] uvcvideo 1-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 971.958055][ T5800] uvcvideo 1-1:63.66: No valid video chain found. [ 971.982851][ T5800] usb 1-1: USB disconnect, device number 66 [ 972.041102][T18518] FAULT_INJECTION: forcing a failure. [ 972.041102][T18518] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 972.147686][T18518] CPU: 1 UID: 0 PID: 18518 Comm: syz.2.2941 Tainted: G L syzkaller #0 PREEMPT(full) [ 972.147708][T18518] Tainted: [L]=SOFTLOCKUP [ 972.147712][T18518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 972.147719][T18518] Call Trace: [ 972.147723][T18518] [ 972.147728][T18518] dump_stack_lvl+0x100/0x190 [ 972.147744][T18518] should_fail_ex.cold+0x5/0xa [ 972.147760][T18518] _copy_from_user+0x2e/0xd0 [ 972.147776][T18518] copy_msghdr_from_user+0x9f/0x4f0 [ 972.147790][T18518] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 972.147809][T18518] ___sys_sendmsg+0x106/0x1e0 [ 972.147823][T18518] ? __pfx____sys_sendmsg+0x10/0x10 [ 972.147852][T18518] __sys_sendmsg+0x170/0x220 [ 972.147868][T18518] ? __pfx___sys_sendmsg+0x10/0x10 [ 972.147890][T18518] ? rcu_is_watching+0x12/0xc0 [ 972.147908][T18518] do_syscall_64+0x10b/0xf80 [ 972.147920][T18518] ? clear_bhb_loop+0x40/0x90 [ 972.147934][T18518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.147945][T18518] RIP: 0033:0x7f68a5d9cdd9 [ 972.147955][T18518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 972.147965][T18518] RSP: 002b:00007f68a6c86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 972.147976][T18518] RAX: ffffffffffffffda RBX: 00007f68a6015fa0 RCX: 00007f68a5d9cdd9 [ 972.147983][T18518] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 972.147989][T18518] RBP: 00007f68a6c86090 R08: 0000000000000000 R09: 0000000000000000 [ 972.147995][T18518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 972.148001][T18518] R13: 00007f68a6016038 R14: 00007f68a6015fa0 R15: 00007ffc912e83d8 [ 972.148015][T18518] [ 972.159550][T18520] random: crng reseeded on system resumption [ 972.190392][T14214] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 972.643140][T14214] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 972.653636][T14214] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 972.664788][T14214] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 972.685080][T14214] usb 4-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 972.694191][T14214] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.813094][T14214] usb 4-1: config 0 descriptor?? [ 973.426109][T14214] usbhid 4-1:0.0: can't add hid device: -71 [ 973.449033][T18537] validate_nla: 85 callbacks suppressed [ 973.449048][T18537] netlink: 'syz.4.2944': attribute type 33 has an invalid length. [ 973.465543][T14214] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 973.490462][T14214] usb 4-1: USB disconnect, device number 67 [ 973.511528][T18537] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2944'. [ 974.279385][T18551] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2948'. [ 974.354480][T18552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2948'. [ 974.767345][ T29] audit: type=1400 audit(3554519830.122:1624): avc: denied { nlmsg_read } for pid=18554 comm="syz.3.2950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 975.546641][ T29] audit: type=1400 audit(3554519830.902:1625): avc: denied { unmount } for pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 975.910273][T14214] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 976.082081][T14214] usb 4-1: unable to get BOS descriptor or descriptor too short [ 976.130442][ T5800] usb 3-1: new low-speed USB device number 74 using dummy_hcd [ 976.145759][T14214] usb 4-1: config 63 has an invalid interface number: 66 but max is 0 [ 976.177983][T14214] usb 4-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 976.216098][T14214] usb 4-1: config 63 has no interface number 0 [ 976.239138][T14214] usb 4-1: config 63 interface 66 has no altsetting 0 [ 976.264186][T14214] usb 4-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 976.278909][T14214] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.288487][T14214] usb 4-1: Product: syz [ 976.304229][T14214] usb 4-1: Manufacturer: syz [ 976.308924][T14214] usb 4-1: SerialNumber: syz [ 976.337059][ T5800] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 976.360711][ T9] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 976.363277][ T5800] usb 3-1: config 0 has no interface number 0 [ 976.403216][ T5800] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 976.418955][ T5800] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 976.447225][ T5800] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 976.462359][T18585] netlink: 'syz.0.2958': attribute type 33 has an invalid length. [ 976.470602][ T5800] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 976.482122][T18585] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2958'. [ 976.493651][ T5800] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 976.524680][ T5800] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 976.538202][ T5800] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 976.547526][ T5800] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.565578][ T9] usb 5-1: config 0 has an invalid interface number: 74 but max is 1 [ 976.578803][ T5800] usb 3-1: config 0 descriptor?? [ 976.587167][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 976.608169][T14214] uvcvideo 4-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 976.618439][T14214] uvcvideo 4-1:63.66: No valid video chain found. [ 976.625382][T18580] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 976.629324][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 976.633106][T18580] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 976.652715][T14214] usb 4-1: USB disconnect, device number 68 [ 976.678228][ T9] usb 5-1: config 0 has no interface number 0 [ 976.700482][ T5800] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 976.710227][ T9] usb 5-1: config 0 interface 74 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 976.771644][ T9] usb 5-1: config 0 interface 74 altsetting 0 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 976.804113][ T9] usb 5-1: config 0 interface 74 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 976.849272][ T9] usb 5-1: config 0 interface 74 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 976.880468][ T9] usb 5-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=de.66 [ 976.894106][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.903055][ T9] usb 5-1: Product: syz [ 976.907235][ T9] usb 5-1: Manufacturer: syz [ 976.926833][ T9] usb 5-1: SerialNumber: syz [ 976.934348][ T9] usb 5-1: config 0 descriptor?? [ 977.121128][ T5800] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 977.442316][ T5800] usb 2-1: Using ep0 maxpacket: 16 [ 977.454282][ T9] cypress_m8 5-1:0.74: HID->COM RS232 Adapter converter detected [ 977.458366][ T5800] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 977.467031][ T9] usb 5-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 977.471581][ T5800] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.481730][ T1223] usb 3-1: USB disconnect, device number 74 [ 977.487696][ T5800] usb 2-1: Product: syz [ 977.502615][ T5800] usb 2-1: Manufacturer: syz [ 977.508648][ T5800] usb 2-1: SerialNumber: syz [ 977.559370][ T9] usb 5-1: USB disconnect, device number 82 [ 977.589833][T18598] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2961'. [ 977.901738][ T1223] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 978.288636][T18589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 978.383494][ T9] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 978.513641][T18589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 978.528945][ T9] cypress_m8 5-1:0.74: device disconnected [ 978.721018][T18607] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2962'. [ 978.755560][T18606] netlink: 'syz.0.2964': attribute type 1 has an invalid length. [ 978.799001][T18609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2962'. [ 979.091064][T18606] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.2964'. [ 979.210746][T18608] random: crng reseeded on system resumption [ 979.738094][T18589] wg1 speed is unknown, defaulting to 1000 [ 979.930284][ T42] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 980.000359][ T9] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 980.090287][ T42] usb 1-1: Using ep0 maxpacket: 16 [ 980.100942][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 980.112382][ T42] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 980.125771][ T42] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 980.135126][T14214] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 980.143777][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.155843][ T42] usb 1-1: config 0 descriptor?? [ 980.190254][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 980.203425][ T9] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 980.220294][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.240220][ T9] usb 3-1: Product: syz [ 980.244404][ T9] usb 3-1: Manufacturer: syz [ 980.248988][ T9] usb 3-1: SerialNumber: syz [ 980.262219][ T9] usb 3-1: config 0 descriptor?? [ 980.271131][ T9] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 980.290392][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 980.300045][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 980.300329][T14214] usb 5-1: Using ep0 maxpacket: 32 [ 980.319617][ T9] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 980.327779][ T9] usb 3-1: media controller created [ 980.330008][T14214] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 980.346926][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 980.350254][T14214] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.370269][T14214] usb 5-1: Product: syz [ 980.379927][T14214] usb 5-1: Manufacturer: syz [ 980.390274][T14214] usb 5-1: SerialNumber: syz [ 980.398284][ T9] usb 3-1: selecting invalid altsetting 7 [ 980.406806][T14214] usb 5-1: config 0 descriptor?? [ 980.407667][ T9] cxusb: set interface failed [ 980.423964][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 980.430536][T14214] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 980.468316][T14214] dvb-usb: bulk message failed: -22 (2/0) [ 980.469511][T18622] cxusb: i2c wr: len=79 is too big! [ 980.469511][T18622] [ 980.485890][T14214] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 980.494799][ T9] DVB: Unable to find symbol lgdt330x_attach() [ 980.500753][T14214] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 980.507399][ T9] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 980.518181][T14214] usb 5-1: media controller created [ 980.545680][T14214] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 980.595665][ T42] HID 045e:07da: Invalid code 65791 type 1 [ 980.605309][T14214] usb 5-1: selecting invalid altsetting 7 [ 980.620449][ T9] rc_core: IR keymap rc-dvico-portable not found [ 980.627985][T14214] cxusb: set interface failed [ 980.633040][ T42] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0019/input/input108 [ 980.636172][T18627] cxusb: i2c wr: len=79 is too big! [ 980.636172][T18627] [ 980.644766][T14214] dvb-usb: bulk message failed: -22 (1/0) [ 980.663890][ T9] Registered IR keymap rc-empty [ 980.679687][ T9] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 980.736815][ T42] microsoft 0003:045E:07DA.0019: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 980.746391][ T9] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input107 [ 980.810386][T14214] DVB: Unable to find symbol lgdt330x_attach() [ 980.812625][ T9] dvb-usb: schedule remote query interval to 100 msecs. [ 980.830342][T14214] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 980.847699][ T9] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 980.888858][ T9] usb 3-1: USB disconnect, device number 75 [ 981.030283][T14214] rc_core: IR keymap rc-dvico-portable not found [ 981.040842][T14214] Registered IR keymap rc-empty [ 981.072326][T14214] rc rc1: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc1 [ 981.260155][T14214] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc1/input109 [ 981.466343][T14214] dvb-usb: schedule remote query interval to 100 msecs. [ 981.493296][T14214] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 981.558179][ T5701] usb 1-1: USB disconnect, device number 67 [ 981.576373][ T9] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 981.586978][ T1223] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 981.601767][ T42] dvb-usb: bulk message failed: -22 (1/0) [ 981.620963][T14214] usb 5-1: USB disconnect, device number 83 [ 981.715869][ T5800] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 982.061714][ T5800] usb 2-1: USB disconnect, device number 74 [ 982.342303][T18653] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2974'. [ 982.728150][T18657] FAULT_INJECTION: forcing a failure. [ 982.728150][T18657] name failslab, interval 1, probability 0, space 0, times 0 [ 983.062928][T18657] CPU: 0 UID: 0 PID: 18657 Comm: syz.2.2977 Tainted: G L syzkaller #0 PREEMPT(full) [ 983.062959][T18657] Tainted: [L]=SOFTLOCKUP [ 983.062965][T18657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 983.062976][T18657] Call Trace: [ 983.062982][T18657] [ 983.062989][T18657] dump_stack_lvl+0x100/0x190 [ 983.063016][T18657] should_fail_ex.cold+0x5/0xa [ 983.063042][T18657] should_failslab+0xc2/0x120 [ 983.063062][T18657] __kvmalloc_node_noprof+0xfa/0xa00 [ 983.063090][T18657] ? video_usercopy+0x8aa/0x1700 [ 983.063120][T18657] video_usercopy+0x8aa/0x1700 [ 983.063145][T18657] ? __pfx___video_do_ioctl+0x10/0x10 [ 983.063171][T18657] ? __pfx_video_usercopy+0x10/0x10 [ 983.063210][T18657] v4l2_ioctl+0x1bd/0x250 [ 983.063234][T18657] ? __x64_sys_ioctl+0xc1/0x210 [ 983.063251][T18657] ? __pfx_v4l2_ioctl+0x10/0x10 [ 983.063276][T18657] __x64_sys_ioctl+0x18e/0x210 [ 983.063295][T18657] do_syscall_64+0x10b/0xf80 [ 983.063314][T18657] ? clear_bhb_loop+0x40/0x90 [ 983.063335][T18657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.063354][T18657] RIP: 0033:0x7f68a5d9cdd9 [ 983.063370][T18657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 983.063387][T18657] RSP: 002b:00007f68a6c86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 983.063404][T18657] RAX: ffffffffffffffda RBX: 00007f68a6015fa0 RCX: 00007f68a5d9cdd9 [ 983.063415][T18657] RDX: 0000200000000100 RSI: 00000000c0205648 RDI: 0000000000000003 [ 983.063426][T18657] RBP: 00007f68a6c86090 R08: 0000000000000000 R09: 0000000000000000 [ 983.063437][T18657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 983.063447][T18657] R13: 00007f68a6016038 R14: 00007f68a6015fa0 R15: 00007ffc912e83d8 [ 983.063472][T18657] [ 983.375901][T17288] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 983.442201][T14214] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 983.665810][ T5701] hid-generic 0006:0004:0009.001A: unknown main item tag 0x0 [ 983.673306][ T5701] hid-generic 0006:0004:0009.001A: unknown main item tag 0x0 [ 983.681315][ T5701] hid-generic 0006:0004:0009.001A: unknown main item tag 0x0 [ 983.690100][ T5701] hid-generic 0006:0004:0009.001A: unknown main item tag 0x0 [ 983.697883][ T5701] hid-generic 0006:0004:0009.001A: unknown main item tag 0x0 [ 983.705331][T17288] usb 2-1: Using ep0 maxpacket: 32 [ 983.766011][T18677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2981'. [ 983.777344][T18677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2981'. [ 983.860850][T14214] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 983.868688][ T5608] Bluetooth: hci2: unexpected event for opcode 0x58a0 [ 984.030304][T14214] usb 5-1: Using ep0 maxpacket: 32 [ 984.134504][ T5701] hid-generic 0006:0004:0009.001A: unknown main item tag 0x0 [ 984.142451][ T5701] hid-generic 0006:0004:0009.001A: unknown main item tag 0x0 [ 984.150210][ T5701] hid-generic 0006:0004:0009.001A: unknown main item tag 0x0 [ 984.157986][ T5701] hid-generic 0006:0004:0009.001A: unknown main item tag 0x0 [ 984.165769][T17288] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 984.178702][T17288] usb 2-1: config 0 interface 0 has no altsetting 0 [ 984.185342][T17288] usb 2-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 984.198312][T14214] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 984.207921][ T5701] hid-generic 0006:0004:0009.001A: unknown main item tag 0x0 [ 984.215941][T17288] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.224743][T14214] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 984.239746][T14214] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 984.240872][ T5701] hid-generic 0006:0004:0009.001A: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 984.260222][T17288] usb 2-1: config 0 descriptor?? [ 984.271141][T14214] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 984.291542][T14214] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 984.324964][T18679] fido_id[18679]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 984.430443][T14214] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 984.450242][T14214] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 984.479814][T14214] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 984.553191][T14214] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.811206][T14214] usb 5-1: config 0 descriptor?? [ 984.819363][T17288] hid (null): unknown global tag 0xe [ 984.827078][T17288] hid (null): unknown global tag 0xc [ 984.846954][T17288] uclogic 0003:5543:0042.001B: unknown global tag 0xe [ 984.855871][T17288] uclogic 0003:5543:0042.001B: item 0 4 1 14 parsing failed [ 984.868335][T17288] uclogic 0003:5543:0042.001B: parse failed [ 984.889611][T17288] uclogic 0003:5543:0042.001B: probe with driver uclogic failed with error -22 [ 985.559477][T18695] ieee802154 phy1 wpan1: encryption failed: -22 [ 985.572655][ T29] audit: type=1400 audit(3554519840.912:1626): avc: denied { write } for pid=18691 comm="syz.3.2987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 985.626625][T14214] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 985.820325][T14214] usb 3-1: Using ep0 maxpacket: 8 [ 985.846810][T14214] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 985.878710][T14214] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.941047][T14214] pvrusb2: Hardware description: Terratec Grabster AV400 [ 985.963551][T14214] pvrusb2: ********** [ 985.980526][T14214] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 986.017953][T14214] pvrusb2: Important functionality might not be entirely working. [ 986.055363][T14214] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 986.102490][T14214] pvrusb2: ********** [ 986.141236][ T2353] pvrusb2: Invalid write control endpoint [ 986.292059][ T2353] pvrusb2: Invalid write control endpoint [ 986.310993][ T2353] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 986.362198][ T2353] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 986.415203][ T2353] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 986.464809][ T2353] pvrusb2: Device being rendered inoperable [ 986.490397][ T2353] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 986.525861][ T2353] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_g) [ 986.551788][ T2353] pvrusb2: Attached sub-driver cx25840 [ 986.575079][ T2353] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 986.630228][ T2353] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 987.279444][T18711] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2991'. [ 987.331659][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 988.233748][ T5800] usb 3-1: USB disconnect, device number 76 [ 988.240360][T18713] FAULT_INJECTION: forcing a failure. [ 988.240360][T18713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 988.265377][T18713] CPU: 0 UID: 0 PID: 18713 Comm: syz.0.2992 Tainted: G L syzkaller #0 PREEMPT(full) [ 988.265411][T18713] Tainted: [L]=SOFTLOCKUP [ 988.265418][T18713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 988.265427][T18713] Call Trace: [ 988.265434][T18713] [ 988.265442][T18713] dump_stack_lvl+0x100/0x190 [ 988.265467][T18713] should_fail_ex.cold+0x5/0xa [ 988.265492][T18713] _copy_to_user+0x32/0xd0 [ 988.265520][T18713] simple_read_from_buffer+0xcb/0x170 [ 988.265544][T18713] proc_fail_nth_read+0x1af/0x230 [ 988.265564][T18713] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 988.265585][T18713] ? rw_verify_area+0xce/0x6d0 [ 988.265613][T18713] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 988.265632][T18713] vfs_read+0x1e4/0xb30 [ 988.265653][T18713] ? __pfx_vfs_read+0x10/0x10 [ 988.265671][T18713] ? __fget_files+0x215/0x3d0 [ 988.265700][T18713] ? __fget_files+0x21f/0x3d0 [ 988.265729][T18713] ksys_read+0x12a/0x250 [ 988.265747][T18713] ? __pfx_ksys_read+0x10/0x10 [ 988.265768][T18713] ? rcu_is_watching+0x12/0xc0 [ 988.265798][T18713] do_syscall_64+0x10b/0xf80 [ 988.265818][T18713] ? clear_bhb_loop+0x40/0x90 [ 988.265840][T18713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.265858][T18713] RIP: 0033:0x7fee8eb5d60e [ 988.265874][T18713] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 988.265890][T18713] RSP: 002b:00007fee8faeffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 988.265907][T18713] RAX: ffffffffffffffda RBX: 00007fee8faf06c0 RCX: 00007fee8eb5d60e [ 988.265919][T18713] RDX: 000000000000000f RSI: 00007fee8faf00a0 RDI: 0000000000000003 [ 988.265929][T18713] RBP: 00007fee8faf0090 R08: 0000000000000000 R09: 0000000000000000 [ 988.265940][T18713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 988.265950][T18713] R13: 00007fee8ee16038 R14: 00007fee8ee15fa0 R15: 00007ffd758186b8 [ 988.265976][T18713] [ 988.839147][T16894] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 988.853434][T16894] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 988.865734][T16894] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 988.880859][T16894] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 988.889334][ T5701] usb 5-1: USB disconnect, device number 84 [ 988.897913][T16894] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 988.941013][ T29] audit: type=1400 audit(3554519844.282:1627): avc: denied { setattr } for pid=18722 comm="syz.3.2996" name="frontend0" dev="devtmpfs" ino=926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 989.195374][ T29] audit: type=1400 audit(3554519844.552:1628): avc: denied { name_bind } for pid=18728 comm="syz.1.2997" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 989.343718][T18738] openvswitch: netlink: Flow actions attr not present in new flow. [ 989.372277][T18737] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2998'. [ 989.663153][T18719] wg1 speed is unknown, defaulting to 1000 [ 989.849338][ T6273] syz_tun (unregistering): left allmulticast mode [ 990.086632][T18754] FAULT_INJECTION: forcing a failure. [ 990.086632][T18754] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 990.126085][T18754] CPU: 1 UID: 0 PID: 18754 Comm: syz.4.3001 Tainted: G L syzkaller #0 PREEMPT(full) [ 990.126112][T18754] Tainted: [L]=SOFTLOCKUP [ 990.126118][T18754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 990.126128][T18754] Call Trace: [ 990.126135][T18754] [ 990.126142][T18754] dump_stack_lvl+0x100/0x190 [ 990.126168][T18754] should_fail_ex.cold+0x5/0xa [ 990.126193][T18754] _copy_from_iter+0x1f4/0x1690 [ 990.126220][T18754] ? __asan_memset+0x23/0x50 [ 990.126246][T18754] ? __pfx__copy_from_iter+0x10/0x10 [ 990.126271][T18754] ? __pfx___alloc_skb+0x10/0x10 [ 990.126295][T18754] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 990.126325][T18754] netlink_sendmsg+0x808/0xda0 [ 990.126350][T18754] ? __pfx_netlink_sendmsg+0x10/0x10 [ 990.126368][T18754] ? pti_set_user_pgtbl+0x50/0x50 [ 990.126401][T18754] ____sys_sendmsg+0x9e1/0xb70 [ 990.126419][T18754] ? __pfx_netlink_sendmsg+0x10/0x10 [ 990.126441][T18754] ? __pfx_____sys_sendmsg+0x10/0x10 [ 990.126470][T18754] ___sys_sendmsg+0x190/0x1e0 [ 990.126493][T18754] ? __pfx____sys_sendmsg+0x10/0x10 [ 990.126542][T18754] __sys_sendmsg+0x170/0x220 [ 990.126568][T18754] ? __pfx___sys_sendmsg+0x10/0x10 [ 990.126604][T18754] ? rcu_is_watching+0x12/0xc0 [ 990.126635][T18754] do_syscall_64+0x10b/0xf80 [ 990.126661][T18754] ? clear_bhb_loop+0x40/0x90 [ 990.126683][T18754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.126700][T18754] RIP: 0033:0x7f3ce799cdd9 [ 990.126716][T18754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 990.126736][T18754] RSP: 002b:00007f3ce8808028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 990.126754][T18754] RAX: ffffffffffffffda RBX: 00007f3ce7c15fa0 RCX: 00007f3ce799cdd9 [ 990.126764][T18754] RDX: 0000000000048000 RSI: 0000200000000240 RDI: 0000000000000003 [ 990.126775][T18754] RBP: 00007f3ce8808090 R08: 0000000000000000 R09: 0000000000000000 [ 990.126785][T18754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 990.126796][T18754] R13: 00007f3ce7c16038 R14: 00007f3ce7c15fa0 R15: 00007ffd51306df8 [ 990.126820][T18754] [ 990.799475][T18719] bridge0: port 1(bridge_slave_0) entered blocking state [ 990.818045][T18719] bridge0: port 1(bridge_slave_0) entered disabled state [ 990.826403][T18719] bridge_slave_0: entered allmulticast mode [ 991.005790][ T5608] Bluetooth: hci5: command tx timeout [ 991.139853][T18719] bridge_slave_0: entered promiscuous mode [ 991.151730][T18719] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.159199][T18719] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.167113][T18719] bridge_slave_1: entered allmulticast mode [ 991.174925][T18719] bridge_slave_1: entered promiscuous mode [ 991.203814][T18719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 991.218617][T18719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 991.249740][T18719] team0: Port device team_slave_0 added [ 991.258453][T18719] team0: Port device team_slave_1 added [ 991.290052][T18719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 991.297362][T18719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 991.323599][T18719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 991.338208][T18719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 991.345484][ T9] usb 3-1: new low-speed USB device number 77 using dummy_hcd [ 991.353389][T18719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 991.379785][T18719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 991.419523][T18719] hsr_slave_0: entered promiscuous mode [ 991.425697][T18719] hsr_slave_1: entered promiscuous mode [ 991.432169][T18719] debugfs: 'hsr0' already exists in 'hsr' [ 991.437993][T18719] Cannot create hsr debugfs directory [ 991.541828][ T9] usb 3-1: config 0 has no interfaces? [ 991.547599][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 991.576114][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.612768][ T9] usb 3-1: config 0 descriptor?? [ 991.643476][T18719] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.753140][T18719] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.755902][T14214] usb 2-1: USB disconnect, device number 75 [ 991.808718][T18719] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.833640][ T29] audit: type=1400 audit(3554519847.192:1629): avc: denied { map } for pid=18772 comm="syz.4.3006" path="/dev/radio8" dev="devtmpfs" ino=1009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 991.861402][ T29] audit: type=1400 audit(3554519847.192:1630): avc: denied { execute } for pid=18772 comm="syz.4.3006" path="/dev/radio8" dev="devtmpfs" ino=1009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 992.088258][T18719] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.114642][T14214] usb 3-1: USB disconnect, device number 77 [ 992.198503][T18782] tipc: Enabled bearer , priority 0 [ 992.226347][T18782] syzkaller0: entered promiscuous mode [ 992.237362][T18782] syzkaller0: entered allmulticast mode [ 992.276680][T18782] tipc: Resetting bearer [ 992.302696][T18781] tipc: Resetting bearer [ 992.390422][T18781] tipc: Disabling bearer [ 992.629411][T18719] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 992.642641][T18790] netlink: 'syz.3.3011': attribute type 33 has an invalid length. [ 992.660694][T18790] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3011'. [ 992.673783][T18719] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 992.690968][T14214] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 992.728943][T18719] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 992.753533][T18719] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 992.860331][T14214] usb 5-1: Using ep0 maxpacket: 16 [ 992.936313][T14214] usb 5-1: unable to get BOS descriptor or descriptor too short [ 993.058280][T14214] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 993.081448][ T5608] Bluetooth: hci5: command tx timeout [ 993.110495][T18797] comedi: No check for data length of config insn id 29155 is implemented [ 993.192543][T18719] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 993.203834][T18719] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 993.217545][T14214] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 993.220939][T18797] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 993.231430][T14214] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.245861][T18797] comedi: Assuming n=5801 is correct [ 993.253006][T18719] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 993.267354][T14214] usb 5-1: Product: syz [ 993.271867][T14214] usb 5-1: Manufacturer: syz [ 993.275074][T18719] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 993.276504][T14214] usb 5-1: SerialNumber: syz [ 993.516623][T18719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 993.550225][T14214] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 993.555799][T18719] 8021q: adding VLAN 0 to HW filter on device team0 [ 993.574083][T14214] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 993.598969][ T3274] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.606115][ T3274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 993.649104][ T3274] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.656185][ T3274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 994.282139][ T5800] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 994.380676][T14214] usb 5-1: USB disconnect, device number 85 [ 994.441025][ T5800] usb 3-1: Using ep0 maxpacket: 8 [ 994.457937][ T7116] udevd[7116]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 994.478651][ T5800] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 994.498695][ T5800] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.531857][T18719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 994.573382][ T5800] pvrusb2: Hardware description: Terratec Grabster AV400 [ 994.594449][ T5800] pvrusb2: ********** [ 994.598491][ T5800] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 994.609071][ T5800] pvrusb2: Important functionality might not be entirely working. [ 994.617442][ T5800] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 994.633720][ T5800] pvrusb2: ********** [ 994.702730][T18719] veth0_vlan: entered promiscuous mode [ 994.722180][T18719] veth1_vlan: entered promiscuous mode [ 994.800501][T18719] veth0_macvtap: entered promiscuous mode [ 994.809661][T18719] veth1_macvtap: entered promiscuous mode [ 994.825855][T18719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 994.833378][ T2353] pvrusb2: Invalid write control endpoint [ 994.858912][T18719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 995.161233][ T5608] Bluetooth: hci5: command tx timeout [ 995.446252][T10915] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.460854][ T2353] pvrusb2: Invalid write control endpoint [ 995.466605][ T2353] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 995.479870][T10915] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.492549][ T2353] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 995.502403][ T2353] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 995.512764][ T2353] pvrusb2: Device being rendered inoperable [ 995.519807][ T2353] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 995.529295][ T2353] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_g) [ 995.530510][T10915] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.596598][T18838] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 995.602798][T18838] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 995.611641][ T2353] pvrusb2: Attached sub-driver cx25840 [ 995.611844][T18838] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 995.617285][ T2353] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 995.623031][T18838] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 995.624116][T18838] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 995.633364][ T2353] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 995.640911][T18838] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 995.731622][T18838] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 995.738125][T18838] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 995.831680][T10915] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.862242][T18838] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 995.868189][T18838] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 996.218977][T18849] netlink: 'syz.3.3022': attribute type 33 has an invalid length. [ 996.232011][T18849] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3022'. [ 996.256359][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.265420][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.399862][ T5800] usb 3-1: USB disconnect, device number 78 [ 996.519898][T18854] can0: slcan on ttyS3. [ 996.914600][T18613] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.955346][T18613] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 997.132774][T18850] can0 (unregistered): slcan off ttyS3. [ 997.268689][T18860] netlink: 868 bytes leftover after parsing attributes in process `syz.3.3024'. [ 998.451913][T16894] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 998.465424][T16894] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 998.473811][T16894] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 998.487160][T16894] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 998.498070][T16894] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 998.957266][ T5343] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 999.060494][ T5800] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 999.297943][T18911] comedi: No check for data length of config insn id 29155 is implemented [ 999.309728][T18911] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 999.323458][T18911] comedi: Assuming n=5800 is correct [ 999.340318][ T5800] usb 1-1: Using ep0 maxpacket: 32 [ 999.354400][ T5800] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 999.371257][ T5800] usb 1-1: config 0 has no interface number 0 [ 999.383310][ T5800] usb 1-1: config 0 interface 184 has no altsetting 0 [ 999.406480][ T5800] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 999.424570][ T5800] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.450958][ T5800] usb 1-1: Product: syz [ 999.456458][ T5800] usb 1-1: Manufacturer: syz [ 999.461352][ T5800] usb 1-1: SerialNumber: syz [ 999.470456][ T5800] usb 1-1: config 0 descriptor?? [ 999.470566][ T9] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 999.648464][T18889] wg1 speed is unknown, defaulting to 1000 [ 999.671823][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 999.692789][ T9] usb 3-1: config 6 has an invalid interface number: 220 but max is 0 [ 999.718795][ T9] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 999.750835][ T9] usb 3-1: config 6 has no interface number 0 [ 999.768043][ T9] usb 3-1: config 6 interface 220 has no altsetting 0 [ 999.788847][ T9] usb 3-1: New USB device found, idVendor=174f, idProduct=5212, bcdDevice=40.10 [ 999.799502][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.824129][ T9] usb 3-1: Product: syz [ 999.842775][ T9] usb 3-1: Manufacturer: syz [ 999.857010][ T9] usb 3-1: SerialNumber: syz [ 999.890275][T14214] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1000.053736][T14214] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1000.067469][T14214] usb 4-1: config 63 has an invalid interface number: 66 but max is 0 [ 1000.084495][T14214] usb 4-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.096419][T14214] usb 4-1: config 63 has no interface number 0 [ 1000.102989][T14214] usb 4-1: config 63 interface 66 has no altsetting 0 [ 1000.121683][T14214] usb 4-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1000.137479][T14214] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.146003][T14214] usb 4-1: Product: syz [ 1000.150778][T14214] usb 4-1: Manufacturer: syz [ 1000.155404][T14214] usb 4-1: SerialNumber: syz [ 1000.163095][ T9] uvcvideo 3-1:6.220: Found UVC 0.00 device syz (174f:5212) [ 1000.170701][ T9] uvcvideo 3-1:6.220: No valid video chain found. [ 1000.178815][T18889] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.182701][ T9] usb 3-1: USB disconnect, device number 79 [ 1000.193595][T18889] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.210438][T18889] bridge_slave_0: entered allmulticast mode [ 1000.217722][T18889] bridge_slave_0: entered promiscuous mode [ 1000.226176][T18889] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.233465][T18889] bridge0: port 2(bridge_slave_1) entered disabled state [ 1000.240717][T18889] bridge_slave_1: entered allmulticast mode [ 1000.247486][T18889] bridge_slave_1: entered promiscuous mode [ 1000.286295][T18889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1000.298682][T18889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1000.320483][ T5343] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1000.328992][T18889] team0: Port device team_slave_0 added [ 1000.336174][T18889] team0: Port device team_slave_1 added [ 1000.359777][T18889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1000.366881][T18889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1000.383214][T14214] uvcvideo 4-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 1000.402070][T18889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1000.402111][T14214] uvcvideo 4-1:63.66: No valid video chain found. [ 1000.414625][T18889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1000.422765][T14214] usb 4-1: USB disconnect, device number 70 [ 1000.432967][T18889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1000.459343][T18889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1000.491771][ T5343] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1000.498965][T18889] hsr_slave_0: entered promiscuous mode [ 1000.508676][ T5343] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1000.512761][T18889] hsr_slave_1: entered promiscuous mode [ 1000.525644][ T5343] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1000.534850][ T5343] usb 5-1: Product: syz [ 1000.537227][T18889] debugfs: 'hsr0' already exists in 'hsr' [ 1000.539155][ T5343] usb 5-1: Manufacturer: syz [ 1000.549743][ T5343] usb 5-1: SerialNumber: syz [ 1000.553465][T18889] Cannot create hsr debugfs directory [ 1000.603226][ T5608] Bluetooth: hci3: command tx timeout [ 1000.671670][T18889] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.757899][T18889] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.763596][T18946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1000.783720][T18946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1000.794617][T18946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1000.811126][T18946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1000.830986][T18946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1000.842376][T18889] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.845491][T18946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1000.866985][T18946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1000.879586][T18946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1000.888451][T18946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1000.892672][ T5800] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 1000.898212][T18946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1000.911956][ T5800] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 1000.935096][ T5800] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1000.950835][T18889] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.953962][ T5343] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 87 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1000.971433][ T5800] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1000.971457][ T5800] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1000.971476][ T5800] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1000.971821][ T5800] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 1001.059044][ T5800] usb 1-1: USB disconnect, device number 68 [ 1001.070152][ T5730] usb 5-1: USB disconnect, device number 87 [ 1001.081459][T14214] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1001.095563][ T5730] usblp0: removed [ 1001.250257][T14214] usb 3-1: Using ep0 maxpacket: 16 [ 1001.267577][T14214] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1001.295830][T14214] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 1001.317591][T14214] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.402631][T18979] random: crng reseeded on system resumption [ 1001.534811][T14214] usb 3-1: config 0 descriptor?? [ 1001.576889][T14214] usbhid 3-1:0.0: fixing wrong optional hid class descriptors count [ 1002.202552][T14214] usbhid 3-1:0.0: can't add hid device: -71 [ 1002.221493][T14214] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1002.254038][T14214] usb 3-1: USB disconnect, device number 80 [ 1002.262674][T18889] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1002.316170][T18889] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1002.329578][T18889] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1002.406415][T18889] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1002.680370][ T5608] Bluetooth: hci3: command tx timeout [ 1002.711067][T18889] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1002.754224][T18889] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1002.763001][T18994] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3050'. [ 1002.776723][T18889] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1002.825783][T18889] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1003.552553][T18889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1003.618019][T18889] 8021q: adding VLAN 0 to HW filter on device team0 [ 1003.632383][T18959] bridge0: port 1(bridge_slave_0) entered blocking state [ 1003.639535][T18959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1003.828680][T18957] bridge0: port 2(bridge_slave_1) entered blocking state [ 1003.835836][T18957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1004.222529][T18889] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1004.317045][ T42] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1004.404391][T19025] fuse: Bad value for 'fd' [ 1004.496417][ T42] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1004.584199][ T42] usb 1-1: config 63 has an invalid interface number: 66 but max is 0 [ 1004.592739][ T42] usb 1-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1004.603542][ T42] usb 1-1: config 63 has no interface number 0 [ 1004.609845][ T42] usb 1-1: config 63 interface 66 has no altsetting 0 [ 1004.620136][ T42] usb 1-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1004.649888][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.657169][T19035] random: crng reseeded on system resumption [ 1004.700366][ T42] usb 1-1: Product: syz [ 1004.760747][ T5608] Bluetooth: hci3: command tx timeout [ 1004.791985][ T42] usb 1-1: Manufacturer: syz [ 1004.810415][ T42] usb 1-1: SerialNumber: syz [ 1005.113206][ T42] uvcvideo 1-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 1005.141481][ T42] uvcvideo 1-1:63.66: No valid video chain found. [ 1005.269662][ T42] usb 1-1: USB disconnect, device number 69 [ 1005.856296][T18889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1005.874906][T19049] FAULT_INJECTION: forcing a failure. [ 1005.874906][T19049] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1005.904685][T19049] CPU: 1 UID: 0 PID: 19049 Comm: syz.4.3060 Tainted: G L syzkaller #0 PREEMPT(full) [ 1005.904702][T19049] Tainted: [L]=SOFTLOCKUP [ 1005.904706][T19049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1005.904712][T19049] Call Trace: [ 1005.904716][T19049] [ 1005.904721][T19049] dump_stack_lvl+0x100/0x190 [ 1005.904737][T19049] should_fail_ex.cold+0x5/0xa [ 1005.904753][T19049] _copy_from_iter+0x1f4/0x1690 [ 1005.904772][T19049] ? __pfx__copy_from_iter+0x10/0x10 [ 1005.904787][T19049] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1005.904801][T19049] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1005.904818][T19049] skb_copy_datagram_from_iter+0x11f/0x720 [ 1005.904836][T19049] packet_sendmsg+0x227e/0x5100 [ 1005.904856][T19049] ? sock_has_perm+0x258/0x2f0 [ 1005.904868][T19049] ? __pfx_sock_has_perm+0x10/0x10 [ 1005.904881][T19049] ? __pfx_packet_sendmsg+0x10/0x10 [ 1005.904902][T19049] __sys_sendto+0x468/0x4b0 [ 1005.904923][T19049] ? __pfx_packet_sendmsg+0x10/0x10 [ 1005.904936][T19049] ? __pfx___sys_sendto+0x10/0x10 [ 1005.904960][T19049] ? ksys_write+0x1ac/0x250 [ 1005.904972][T19049] ? __pfx_ksys_write+0x10/0x10 [ 1005.904985][T19049] __x64_sys_sendto+0xe0/0x1c0 [ 1005.904999][T19049] ? do_syscall_64+0x90/0xf80 [ 1005.905011][T19049] ? lockdep_hardirqs_on+0x78/0x100 [ 1005.905023][T19049] do_syscall_64+0x10b/0xf80 [ 1005.905033][T19049] ? clear_bhb_loop+0x40/0x90 [ 1005.905046][T19049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.905057][T19049] RIP: 0033:0x7f3ce799cdd9 [ 1005.905067][T19049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1005.905077][T19049] RSP: 002b:00007f3ce8808028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1005.905087][T19049] RAX: ffffffffffffffda RBX: 00007f3ce7c15fa0 RCX: 00007f3ce799cdd9 [ 1005.905094][T19049] RDX: 0000000000000003 RSI: 00002000000002c0 RDI: 0000000000000004 [ 1005.905100][T19049] RBP: 00007f3ce8808090 R08: 0000200000000140 R09: 0000000000000014 [ 1005.905107][T19049] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 1005.905113][T19049] R13: 00007f3ce7c16038 R14: 00007f3ce7c15fa0 R15: 00007ffd51306df8 [ 1005.905126][T19049] [ 1006.135722][T18889] veth0_vlan: entered promiscuous mode [ 1006.146194][T18889] veth1_vlan: entered promiscuous mode [ 1006.167708][T18889] veth0_macvtap: entered promiscuous mode [ 1006.176657][T18889] veth1_macvtap: entered promiscuous mode [ 1006.192804][T18889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1006.203949][T18889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1006.616928][T18613] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.645046][T18613] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.683075][T18613] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.706320][T18613] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.761046][ T29] audit: type=1400 audit(3554519862.112:1631): avc: denied { write } for pid=19057 comm="syz.4.3063" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1006.840461][ T5608] Bluetooth: hci3: command tx timeout [ 1007.103721][ T29] audit: type=1400 audit(3554519862.112:1632): avc: denied { open } for pid=19057 comm="syz.4.3063" path="/577/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1007.219528][ T29] audit: type=1400 audit(3554519862.112:1633): avc: denied { ioctl } for pid=19057 comm="syz.4.3063" path="/577/file0/file0" dev="fuse" ino=64 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1007.610045][T19067] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1007.795208][T18953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1008.263597][T18953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1008.396631][T19079] FAULT_INJECTION: forcing a failure. [ 1008.396631][T19079] name failslab, interval 1, probability 0, space 0, times 0 [ 1008.425091][T18960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1008.426431][T19077] tipc: Enabled bearer , priority 0 [ 1008.434952][T18960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1008.485029][T19079] CPU: 0 UID: 0 PID: 19079 Comm: syz.0.3070 Tainted: G L syzkaller #0 PREEMPT(full) [ 1008.485056][T19079] Tainted: [L]=SOFTLOCKUP [ 1008.485063][T19079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1008.485074][T19079] Call Trace: [ 1008.485080][T19079] [ 1008.485087][T19079] dump_stack_lvl+0x100/0x190 [ 1008.485113][T19079] should_fail_ex.cold+0x5/0xa [ 1008.485138][T19079] ? video_usercopy+0x1a6/0x1700 [ 1008.485161][T19079] should_failslab+0xc2/0x120 [ 1008.485180][T19079] __kmalloc_noprof+0xe0/0x850 [ 1008.485212][T19079] video_usercopy+0x1a6/0x1700 [ 1008.485234][T19079] ? do_vfs_ioctl+0x226/0x13e0 [ 1008.485254][T19079] ? __pfx___video_do_ioctl+0x10/0x10 [ 1008.485275][T19079] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1008.485293][T19079] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1008.485319][T19079] ? __pfx_video_usercopy+0x10/0x10 [ 1008.485358][T19079] v4l2_ioctl+0x1bd/0x250 [ 1008.485392][T19079] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1008.485417][T19079] __x64_sys_ioctl+0x18e/0x210 [ 1008.485438][T19079] do_syscall_64+0x10b/0xf80 [ 1008.485457][T19079] ? clear_bhb_loop+0x40/0x90 [ 1008.485479][T19079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.485497][T19079] RIP: 0033:0x7f15ddd9cdd9 [ 1008.485512][T19079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1008.485529][T19079] RSP: 002b:00007f15dec41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1008.485546][T19079] RAX: ffffffffffffffda RBX: 00007f15de015fa0 RCX: 00007f15ddd9cdd9 [ 1008.485558][T19079] RDX: 0000200000000180 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 1008.485569][T19079] RBP: 00007f15dec41090 R08: 0000000000000000 R09: 0000000000000000 [ 1008.485580][T19079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1008.485590][T19079] R13: 00007f15de016038 R14: 00007f15de015fa0 R15: 00007fffa1b11dc8 [ 1008.485615][T19079] [ 1008.789928][T19081] syzkaller0: entered promiscuous mode [ 1008.799807][T19081] syzkaller0: entered allmulticast mode [ 1008.841426][T19077] tipc: Resetting bearer [ 1008.898312][T19076] tipc: Resetting bearer [ 1009.993109][T19092] FAULT_INJECTION: forcing a failure. [ 1009.993109][T19092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1010.016562][T19092] CPU: 1 UID: 0 PID: 19092 Comm: syz.1.3027 Tainted: G L syzkaller #0 PREEMPT(full) [ 1010.016589][T19092] Tainted: [L]=SOFTLOCKUP [ 1010.016595][T19092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1010.016606][T19092] Call Trace: [ 1010.016613][T19092] [ 1010.016620][T19092] dump_stack_lvl+0x100/0x190 [ 1010.016653][T19092] should_fail_ex.cold+0x5/0xa [ 1010.016678][T19092] _copy_from_user+0x2e/0xd0 [ 1010.016704][T19092] wext_handle_ioctl+0xc9/0x1b0 [ 1010.016726][T19092] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 1010.016750][T19092] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1010.016769][T19092] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1010.016798][T19092] sock_ioctl+0x2d4/0x6b0 [ 1010.016821][T19092] ? __pfx_sock_ioctl+0x10/0x10 [ 1010.016840][T19092] ? hook_file_ioctl_common+0x149/0x410 [ 1010.016873][T19092] ? selinux_file_ioctl+0x13b/0x290 [ 1010.016895][T19092] ? selinux_file_ioctl+0xb6/0x290 [ 1010.016919][T19092] ? __pfx_sock_ioctl+0x10/0x10 [ 1010.016940][T19092] __x64_sys_ioctl+0x18e/0x210 [ 1010.016961][T19092] do_syscall_64+0x10b/0xf80 [ 1010.016979][T19092] ? clear_bhb_loop+0x40/0x90 [ 1010.017001][T19092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.017021][T19092] RIP: 0033:0x7f289719cdd9 [ 1010.017036][T19092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1010.017053][T19092] RSP: 002b:00007f28980fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1010.017070][T19092] RAX: ffffffffffffffda RBX: 00007f2897415fa0 RCX: 00007f289719cdd9 [ 1010.017082][T19092] RDX: 0000200000000040 RSI: 0000000000008b04 RDI: 0000000000000004 [ 1010.017093][T19092] RBP: 00007f28980fc090 R08: 0000000000000000 R09: 0000000000000000 [ 1010.017103][T19092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1010.017113][T19092] R13: 00007f2897416038 R14: 00007f2897415fa0 R15: 00007ffc893c14e8 [ 1010.017138][T19092] [ 1010.233263][T19076] tipc: Disabling bearer [ 1010.427709][ T803] tipc: Node number set to 808610878 [ 1010.993415][T19106] faux_driver vgem: [drm] Unknown color mode 265; guessing buffer size. [ 1011.087702][ T29] audit: type=1400 audit(3554519866.432:1634): avc: denied { map } for pid=19103 comm="syz.1.3077" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1011.143139][T16894] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1011.180002][ T29] audit: type=1400 audit(3554519866.432:1635): avc: denied { execute } for pid=19103 comm="syz.1.3077" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1011.181646][T16894] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1011.222277][T16894] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1011.251393][T16894] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1011.259004][T16894] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1011.987554][T19110] wg1 speed is unknown, defaulting to 1000 [ 1012.055085][T19140] binder: 19139:19140 unknown command 0 [ 1012.073066][T19140] binder: 19139:19140 ioctl c0306201 2000000003c0 returned -22 [ 1013.092865][T19156] FAULT_INJECTION: forcing a failure. [ 1013.092865][T19156] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1013.106746][T19156] CPU: 0 UID: 0 PID: 19156 Comm: syz.0.3089 Tainted: G L syzkaller #0 PREEMPT(full) [ 1013.106773][T19156] Tainted: [L]=SOFTLOCKUP [ 1013.106780][T19156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1013.106790][T19156] Call Trace: [ 1013.106796][T19156] [ 1013.106803][T19156] dump_stack_lvl+0x100/0x190 [ 1013.106829][T19156] should_fail_ex.cold+0x5/0xa [ 1013.106854][T19156] _copy_to_user+0x32/0xd0 [ 1013.106881][T19156] simple_read_from_buffer+0xcb/0x170 [ 1013.106905][T19156] proc_fail_nth_read+0x1af/0x230 [ 1013.106924][T19156] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1013.106944][T19156] ? rw_verify_area+0xce/0x6d0 [ 1013.106971][T19156] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1013.106990][T19156] vfs_read+0x1e4/0xb30 [ 1013.107012][T19156] ? __pfx_vfs_read+0x10/0x10 [ 1013.107030][T19156] ? __fget_files+0x215/0x3d0 [ 1013.107057][T19156] ? __fget_files+0x21f/0x3d0 [ 1013.107087][T19156] ksys_read+0x12a/0x250 [ 1013.107105][T19156] ? __pfx_ksys_read+0x10/0x10 [ 1013.107122][T19156] ? v4l2_ioctl+0x1c5/0x250 [ 1013.107147][T19156] ? rcu_is_watching+0x12/0xc0 [ 1013.107178][T19156] do_syscall_64+0x10b/0xf80 [ 1013.107198][T19156] ? clear_bhb_loop+0x40/0x90 [ 1013.107221][T19156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.107239][T19156] RIP: 0033:0x7f15ddd5d60e [ 1013.107253][T19156] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1013.107269][T19156] RSP: 002b:00007f15dec40fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1013.107287][T19156] RAX: ffffffffffffffda RBX: 00007f15dec416c0 RCX: 00007f15ddd5d60e [ 1013.107299][T19156] RDX: 000000000000000f RSI: 00007f15dec410a0 RDI: 0000000000000004 [ 1013.107310][T19156] RBP: 00007f15dec41090 R08: 0000000000000000 R09: 0000000000000000 [ 1013.107320][T19156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1013.107330][T19156] R13: 00007f15de016038 R14: 00007f15de015fa0 R15: 00007fffa1b11dc8 [ 1013.107355][T19156] [ 1013.330321][T16894] Bluetooth: hci0: command tx timeout [ 1013.542265][T19163] tipc: Enabled bearer , priority 0 [ 1013.551243][ T29] audit: type=1400 audit(3554519868.912:1636): avc: denied { module_load } for pid=19165 comm="syz.1.3091" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1 [ 1013.578696][T19166] kernel read not supported for file /policy (pid: 19166 comm: syz.1.3091) [ 1013.609418][T19154] syzkaller0: entered promiscuous mode [ 1013.619157][T19166] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1013.676396][T19154] syzkaller0: entered allmulticast mode [ 1013.975997][T19154] tipc: Resetting bearer [ 1013.991086][T19110] bridge0: port 1(bridge_slave_0) entered blocking state [ 1014.008366][T19110] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.031225][T19110] bridge_slave_0: entered allmulticast mode [ 1014.049203][T19110] bridge_slave_0: entered promiscuous mode [ 1014.082611][T19153] tipc: Resetting bearer [ 1014.131571][T19177] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3093'. [ 1014.154340][T19153] tipc: Disabling bearer [ 1014.164617][T19110] bridge0: port 2(bridge_slave_1) entered blocking state [ 1014.175409][T19110] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.188256][T19110] bridge_slave_1: entered allmulticast mode [ 1014.203820][T19110] bridge_slave_1: entered promiscuous mode [ 1014.347403][T19110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1014.438805][T19110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1014.790792][T19189] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1014.808247][T19110] team0: Port device team_slave_0 added [ 1014.858958][T19110] team0: Port device team_slave_1 added [ 1014.901543][T19110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1014.908521][T19110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1014.991497][T19110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1015.035571][T19110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1015.062784][T19110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1015.119425][T19110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1015.234819][T19110] hsr_slave_0: entered promiscuous mode [ 1015.252130][T19110] hsr_slave_1: entered promiscuous mode [ 1015.258310][T19110] debugfs: 'hsr0' already exists in 'hsr' [ 1015.295757][T19110] Cannot create hsr debugfs directory [ 1015.400465][T16894] Bluetooth: hci0: command tx timeout [ 1015.564930][T19204] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3099'. [ 1015.637855][T19205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3099'. [ 1015.911068][ T5343] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1016.057046][T19110] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1016.067552][ T5343] usb 5-1: device descriptor read/64, error -71 [ 1016.148026][T19209] batadv_slave_1: entered promiscuous mode [ 1016.489977][ T5343] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1016.544715][T19110] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1016.640267][ T5343] usb 5-1: device descriptor read/64, error -71 [ 1016.657581][T19110] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1016.756020][ T5343] usb usb5-port1: attempt power cycle [ 1016.792825][T19110] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1016.951956][T19208] batadv_slave_1: left promiscuous mode [ 1017.482234][T16894] Bluetooth: hci0: command tx timeout [ 1017.490286][ T5343] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1017.530892][ T5343] usb 5-1: device descriptor read/8, error -71 [ 1017.704844][T19110] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1017.715548][T19110] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1017.728961][T19110] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1017.790264][ T5343] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1017.807320][T19110] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1017.840771][ T5343] usb 5-1: device descriptor read/8, error -71 [ 1017.850036][T19110] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1017.870573][T19110] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1017.883010][T19110] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1017.897639][T19110] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1017.971126][ T5343] usb usb5-port1: unable to enumerate USB device [ 1018.114997][T19110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1018.181152][T19110] 8021q: adding VLAN 0 to HW filter on device team0 [ 1018.413516][T18961] bridge0: port 1(bridge_slave_0) entered blocking state [ 1018.420625][T18961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1018.482841][T18961] bridge0: port 2(bridge_slave_1) entered blocking state [ 1018.489918][T18961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1018.570563][T14214] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1018.611755][T19243] bond4: option xmit_hash_policy: invalid value (6) [ 1018.641888][T19247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3112'. [ 1018.676007][T19247] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3112'. [ 1018.721031][T19243] bond4 (unregistering): Released all slaves [ 1018.730325][T14214] usb 1-1: Using ep0 maxpacket: 8 [ 1018.737908][T14214] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1018.747464][T14214] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.776198][ T29] audit: type=1400 audit(3554519874.132:1637): avc: denied { remount } for pid=19241 comm="syz.4.3112" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1018.796435][T14214] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1018.803756][T14214] pvrusb2: ********** [ 1018.810626][T14214] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1019.103749][T14214] pvrusb2: Important functionality might not be entirely working. [ 1019.154957][T14214] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1019.180909][T14214] pvrusb2: ********** [ 1019.236989][ T2353] pvrusb2: Invalid write control endpoint [ 1019.426067][ T2353] pvrusb2: Invalid write control endpoint [ 1019.438143][T14214] usb 1-1: USB disconnect, device number 70 [ 1019.465319][ T2353] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1019.494149][ T2353] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1019.505528][ T2353] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1019.543173][ T2353] pvrusb2: Device being rendered inoperable [ 1019.552424][ T2353] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1019.560860][T16894] Bluetooth: hci0: command tx timeout [ 1019.568448][ T2353] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_g) [ 1019.583105][ T2353] pvrusb2: Attached sub-driver cx25840 [ 1019.588666][ T2353] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1019.599357][ T2353] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1019.917228][ T5701] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1021.361638][ T5701] usb 5-1: Using ep0 maxpacket: 32 [ 1021.379487][ T5701] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1021.410768][ T5701] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1021.432178][ T5701] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1021.448053][T19110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1021.468273][ T5701] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1021.490321][ T5701] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1021.511999][ T5701] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1021.528191][T19110] veth0_vlan: entered promiscuous mode [ 1021.533710][ T5701] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1021.567204][T19110] veth1_vlan: entered promiscuous mode [ 1021.575531][ T5701] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1021.595203][T19289] tipc: Enabling of bearer rejected, failed to enable media [ 1021.608355][ T5701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.672884][ T5701] usb 5-1: config 0 descriptor?? [ 1022.531588][T19110] veth0_macvtap: entered promiscuous mode [ 1022.622460][T19110] veth1_macvtap: entered promiscuous mode [ 1022.637872][ T5701] usb 5-1: USB disconnect, device number 92 [ 1022.666506][T19302] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3124'. [ 1022.668312][T19110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1022.704823][T19110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1022.719317][T18962] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.744742][T18962] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.769778][T18962] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.784572][T18962] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.906363][T19304] wg1 speed is unknown, defaulting to 1000 [ 1023.027819][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1023.058606][T19310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3126'. [ 1023.108228][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1023.151162][T19312] netlink: 'syz.2.3127': attribute type 3 has an invalid length. [ 1023.158979][T19312] netlink: 'syz.2.3127': attribute type 3 has an invalid length. [ 1023.169614][T19312] netlink: 'syz.2.3127': attribute type 3 has an invalid length. [ 1023.206233][T19312] netlink: 'syz.2.3127': attribute type 3 has an invalid length. [ 1023.214090][T19312] netlink: 'syz.2.3127': attribute type 3 has an invalid length. [ 1023.223415][T19312] netlink: 'syz.2.3127': attribute type 3 has an invalid length. [ 1023.232688][T19312] netlink: 'syz.2.3127': attribute type 3 has an invalid length. [ 1023.257422][T19312] netlink: 'syz.2.3127': attribute type 3 has an invalid length. [ 1023.267828][T19312] netlink: 'syz.2.3127': attribute type 3 has an invalid length. [ 1023.379506][T19312] netlink: 'syz.2.3127': attribute type 3 has an invalid length. [ 1023.954902][T19322] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3129'. [ 1024.543434][T19330] FAULT_INJECTION: forcing a failure. [ 1024.543434][T19330] name failslab, interval 1, probability 0, space 0, times 0 [ 1024.569603][T19330] CPU: 0 UID: 0 PID: 19330 Comm: syz.4.3131 Tainted: G L syzkaller #0 PREEMPT(full) [ 1024.569630][T19330] Tainted: [L]=SOFTLOCKUP [ 1024.569636][T19330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1024.569647][T19330] Call Trace: [ 1024.569653][T19330] [ 1024.569661][T19330] dump_stack_lvl+0x100/0x190 [ 1024.569688][T19330] should_fail_ex.cold+0x5/0xa [ 1024.569714][T19330] should_failslab+0xc2/0x120 [ 1024.569734][T19330] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1024.569762][T19330] ? __alloc_skb+0x140/0x710 [ 1024.569792][T19330] __alloc_skb+0x140/0x710 [ 1024.569815][T19330] ? __alloc_skb+0x5b7/0x710 [ 1024.569839][T19330] ? __pfx___alloc_skb+0x10/0x10 [ 1024.569871][T19330] hci_sock_sendmsg+0x1b01/0x2620 [ 1024.569897][T19330] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1024.569924][T19330] sock_write_iter+0x524/0x5a0 [ 1024.569945][T19330] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1024.569964][T19330] ? __pfx_sock_write_iter+0x10/0x10 [ 1024.569993][T19330] ? bpf_lsm_file_permission+0x9/0x10 [ 1024.570021][T19330] ? security_file_permission+0x76/0x210 [ 1024.570046][T19330] ? rw_verify_area+0xce/0x6d0 [ 1024.570076][T19330] vfs_write+0x6ac/0x1070 [ 1024.570096][T19330] ? __pfx_sock_write_iter+0x10/0x10 [ 1024.570118][T19330] ? __pfx_vfs_write+0x10/0x10 [ 1024.570136][T19330] ? find_held_lock+0x2b/0x80 [ 1024.570173][T19330] ksys_write+0x1f8/0x250 [ 1024.570192][T19330] ? __pfx_ksys_write+0x10/0x10 [ 1024.570213][T19330] ? rcu_is_watching+0x12/0xc0 [ 1024.570244][T19330] do_syscall_64+0x10b/0xf80 [ 1024.570263][T19330] ? clear_bhb_loop+0x40/0x90 [ 1024.570286][T19330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.570304][T19330] RIP: 0033:0x7f3ce799cdd9 [ 1024.570320][T19330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1024.570337][T19330] RSP: 002b:00007f3ce8808028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1024.570355][T19330] RAX: ffffffffffffffda RBX: 00007f3ce7c15fa0 RCX: 00007f3ce799cdd9 [ 1024.570366][T19330] RDX: 0000000000000006 RSI: 0000200000000100 RDI: 0000000000000004 [ 1024.570382][T19330] RBP: 00007f3ce8808090 R08: 0000000000000000 R09: 0000000000000000 [ 1024.570393][T19330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1024.570403][T19330] R13: 00007f3ce7c16038 R14: 00007f3ce7c15fa0 R15: 00007ffd51306df8 [ 1024.570428][T19330] [ 1025.669497][T18954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1025.705952][T18954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1025.928620][T19338] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1026.428591][T19354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3136'. [ 1026.455555][T19354] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3136'. [ 1026.500927][T17288] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1026.718173][T17288] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1026.742837][T17288] usb 4-1: config 63 has an invalid interface number: 66 but max is 0 [ 1026.752234][T17288] usb 4-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1026.765489][T17288] usb 4-1: config 63 has no interface number 0 [ 1026.774664][T17288] usb 4-1: config 63 interface 66 has no altsetting 0 [ 1026.783473][T17288] usb 4-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1026.808273][T17288] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.834081][T17288] usb 4-1: Product: syz [ 1026.849621][T17288] usb 4-1: Manufacturer: syz [ 1026.861804][T17288] usb 4-1: SerialNumber: syz [ 1027.110861][T17288] uvcvideo 4-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 1027.120039][T17288] uvcvideo 4-1:63.66: No valid video chain found. [ 1027.135042][T17288] usb 4-1: USB disconnect, device number 71 [ 1027.223179][T19367] overlayfs: failed to clone upperpath [ 1027.363505][T19369] tipc: Started in network mode [ 1027.368462][T19371] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3143'. [ 1027.385160][T19369] tipc: Node identity 7681607a6701, cluster identity 4711 [ 1027.428616][T19369] tipc: Enabled bearer , priority 0 [ 1027.469453][T19372] syzkaller0: entered promiscuous mode [ 1027.503960][T19372] syzkaller0: entered allmulticast mode [ 1027.529073][T19369] tipc: Resetting bearer [ 1027.559140][T19374] wg1 speed is unknown, defaulting to 1000 [ 1027.686165][T19368] tipc: Resetting bearer [ 1027.820655][T19368] tipc: Disabling bearer [ 1028.055238][T19388] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3149'. [ 1028.321201][ T5800] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1028.587473][T19392] FAULT_INJECTION: forcing a failure. [ 1028.587473][T19392] name failslab, interval 1, probability 0, space 0, times 0 [ 1028.617133][T19392] CPU: 1 UID: 0 PID: 19392 Comm: syz.4.3150 Tainted: G L syzkaller #0 PREEMPT(full) [ 1028.617160][T19392] Tainted: [L]=SOFTLOCKUP [ 1028.617166][T19392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1028.617177][T19392] Call Trace: [ 1028.617183][T19392] [ 1028.617190][T19392] dump_stack_lvl+0x100/0x190 [ 1028.617230][T19392] should_fail_ex.cold+0x5/0xa [ 1028.617255][T19392] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1028.617279][T19392] should_failslab+0xc2/0x120 [ 1028.617298][T19392] __kmalloc_noprof+0xe0/0x850 [ 1028.617327][T19392] ? kfree+0x1dd/0x6c0 [ 1028.617354][T19392] tomoyo_realpath_from_path+0xb6/0x690 [ 1028.617393][T19392] tomoyo_path_number_perm+0x23c/0x580 [ 1028.617411][T19392] ? tomoyo_path_number_perm+0x22e/0x580 [ 1028.617432][T19392] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1028.617475][T19392] ? find_held_lock+0x2b/0x80 [ 1028.617492][T19392] ? __fget_files+0x215/0x3d0 [ 1028.617513][T19392] ? hook_file_ioctl_common+0x149/0x410 [ 1028.617537][T19392] ? __fget_files+0x215/0x3d0 [ 1028.617564][T19392] ? __fget_files+0x21f/0x3d0 [ 1028.617590][T19392] security_file_ioctl+0xd3/0x230 [ 1028.617619][T19392] __x64_sys_ioctl+0xb7/0x210 [ 1028.617639][T19392] do_syscall_64+0x10b/0xf80 [ 1028.617658][T19392] ? clear_bhb_loop+0x40/0x90 [ 1028.617680][T19392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.617698][T19392] RIP: 0033:0x7f3ce799cdd9 [ 1028.617713][T19392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1028.617729][T19392] RSP: 002b:00007f3ce8808028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1028.617746][T19392] RAX: ffffffffffffffda RBX: 00007f3ce7c15fa0 RCX: 00007f3ce799cdd9 [ 1028.617757][T19392] RDX: 0000200000000940 RSI: 00000000c040565f RDI: 0000000000000003 [ 1028.617769][T19392] RBP: 00007f3ce8808090 R08: 0000000000000000 R09: 0000000000000000 [ 1028.617780][T19392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1028.617791][T19392] R13: 00007f3ce7c16038 R14: 00007f3ce7c15fa0 R15: 00007ffd51306df8 [ 1028.617816][T19392] [ 1028.619169][T19392] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1028.675008][T19394] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19394 comm=syz.0.3149 [ 1029.088340][ T5701] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1029.273983][T19406] batadv_slave_1: entered promiscuous mode [ 1029.411015][ T5701] usb 2-1: Using ep0 maxpacket: 32 [ 1029.454857][ T5701] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1029.463669][ T5701] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1029.473770][ T5701] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1029.485249][ T5701] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1029.675629][ T5701] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1029.705780][ T5701] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1029.735372][ T5701] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1029.771045][ T5701] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1030.121897][ T5701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.233180][T17288] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1030.258875][T19418] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1030.271254][ T5701] usb 2-1: config 0 descriptor?? [ 1030.506373][T19404] batadv_slave_1: left promiscuous mode [ 1030.514269][T17288] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1030.527142][T17288] usb 4-1: config 63 has an invalid interface number: 66 but max is 0 [ 1030.541751][T17288] usb 4-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1030.588414][T17288] usb 4-1: config 63 has no interface number 0 [ 1030.615301][T17288] usb 4-1: config 63 interface 66 has no altsetting 0 [ 1030.647606][T17288] usb 4-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1030.664851][T19306] usb 2-1: USB disconnect, device number 76 [ 1030.675326][T17288] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.699017][T17288] usb 4-1: Product: syz [ 1030.720274][T17288] usb 4-1: Manufacturer: syz [ 1030.733503][T17288] usb 4-1: SerialNumber: syz [ 1030.982706][T17288] uvcvideo 4-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 1031.000845][T17288] uvcvideo 4-1:63.66: No valid video chain found. [ 1031.330301][T17288] usb 4-1: USB disconnect, device number 73 [ 1035.536647][ C1] sched: DL replenish lagged too much [ 1058.360281][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1110.953309][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1126.496833][ T5608] Bluetooth: hci3: command 0x0406 tx timeout [ 1171.814563][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1237.138328][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1237.270099][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1237.277068][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P18889/1:b..l [ 1237.285636][ C0] rcu: (detected by 0, t=10503 jiffies, g=112449, q=1916880 ncpus=2) [ 1237.293783][ C0] task:syz-executor state:R running task stack:24040 pid:18889 tgid:18889 ppid:1 task_flags:0x40054c flags:0x00080002 [ 1237.308326][ C0] Call Trace: [ 1237.311605][ C0] [ 1237.314537][ C0] __schedule+0x10e9/0x6820 [ 1237.319054][ C0] ? __pfx___schedule+0x10/0x10 [ 1237.323906][ C0] ? mark_held_locks+0x40/0x70 [ 1237.328672][ C0] preempt_schedule_irq+0x50/0x90 [ 1237.333697][ C0] irqentry_exit+0x1fe/0x790 [ 1237.338291][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1237.344268][ C0] RIP: 0010:lock_acquire+0x5e/0x370 [ 1237.349468][ C0] Code: 05 fb fd 25 12 83 f8 07 0f 87 d9 02 00 00 48 0f a3 05 06 14 f3 0e 0f 82 a4 02 00 00 8b 35 8e 47 f3 0e 85 f6 0f 85 bf 00 00 00 <48> 8b 44 24 30 65 48 2b 05 9d fd 25 12 0f 85 ed 02 00 00 48 83 c4 [ 1237.369074][ C0] RSP: 0018:ffffc90004f47138 EFLAGS: 00000206 [ 1237.375144][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000002 [ 1237.383111][ C0] RDX: 0000000000000000 RSI: ffffffff8def8e2e RDI: ffffffff8c1c3200 [ 1237.391081][ C0] RBP: ffffffff8e7e54e0 R08: 0000000014ec9f3c R09: 0000000000000007 [ 1237.399048][ C0] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 1237.407013][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1237.414996][ C0] ? unwind_next_frame+0x3be/0x2090 [ 1237.420201][ C0] ? unwind_next_frame+0x3be/0x2090 [ 1237.425402][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1237.431549][ C0] unwind_next_frame+0xd1/0x2090 [ 1237.436462][ C0] ? unwind_next_frame+0xbd/0x2090 [ 1237.441549][ C0] ? __mmput+0x12a/0x410 [ 1237.445769][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1237.451893][ C0] arch_stack_walk+0x94/0xf0 [ 1237.456458][ C0] ? __mmput+0x12a/0x410 [ 1237.460686][ C0] stack_trace_save+0x8e/0xc0 [ 1237.465344][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1237.470688][ C0] ? __pv_queued_spin_lock_slowpath+0x284/0xc00 [ 1237.476901][ C0] kasan_save_stack+0x30/0x50 [ 1237.481551][ C0] ? kasan_save_stack+0x30/0x50 [ 1237.486376][ C0] ? kasan_save_track+0x14/0x30 [ 1237.491211][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 1237.496205][ C0] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1237.501810][ C0] ? kmem_alloc_batch+0x49/0x170 [ 1237.506730][ C0] ? debug_objects_fill_pool+0x24d/0x5a0 [ 1237.512334][ C0] ? debug_object_activate+0x103/0x490 [ 1237.517762][ C0] ? __call_rcu_common.constprop.0+0x35/0x9b0 [ 1237.523803][ C0] ? kmem_cache_free+0x44a/0x6c0 [ 1237.528727][ C0] ? tear_down_vmas+0x2a5/0x600 [ 1237.533553][ C0] ? exit_mmap+0x469/0xa10 [ 1237.537944][ C0] ? __mmput+0x12a/0x410 [ 1237.542184][ C0] kasan_save_track+0x14/0x30 [ 1237.546846][ C0] __kasan_slab_alloc+0x89/0x90 [ 1237.551669][ C0] kmem_cache_alloc_noprof+0x241/0x6e0 [ 1237.557111][ C0] ? kmem_alloc_batch+0x49/0x170 [ 1237.562022][ C0] ? find_held_lock+0x2b/0x80 [ 1237.566669][ C0] kmem_alloc_batch+0x49/0x170 [ 1237.571408][ C0] debug_objects_fill_pool+0x24d/0x5a0 [ 1237.576838][ C0] ? get_signal+0x1ec7/0x21e0 [ 1237.581487][ C0] ? arch_do_signal_or_restart+0x91/0x7a0 [ 1237.587182][ C0] ? __pfx_debug_objects_fill_pool+0x10/0x10 [ 1237.593145][ C0] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 1237.599274][ C0] ? tear_down_vmas+0x2a5/0x600 [ 1237.604092][ C0] debug_object_activate+0x103/0x490 [ 1237.609352][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 1237.615137][ C0] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 1237.621264][ C0] ? tear_down_vmas+0x2a5/0x600 [ 1237.626096][ C0] __call_rcu_common.constprop.0+0x35/0x9b0 [ 1237.631975][ C0] ? tear_down_vmas+0x2a5/0x600 [ 1237.636796][ C0] kmem_cache_free+0x44a/0x6c0 [ 1237.641534][ C0] tear_down_vmas+0x2a5/0x600 [ 1237.646183][ C0] exit_mmap+0x469/0xa10 [ 1237.650396][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 1237.655140][ C0] ? rcu_is_watching+0x12/0xc0 [ 1237.659880][ C0] ? uprobe_clear_state+0x5f/0x260 [ 1237.664969][ C0] ? uprobe_clear_state+0x5f/0x260 [ 1237.670056][ C0] ? __lock_acquire+0x4a5/0x2630 [ 1237.674970][ C0] ? arch_uprobe_clear_state+0x107/0x150 [ 1237.680576][ C0] __mmput+0x12a/0x410 [ 1237.684618][ C0] mmput+0x67/0x80 [ 1237.688312][ C0] do_exit+0x833/0x2a60 [ 1237.692449][ C0] ? rcu_is_watching+0x12/0xc0 [ 1237.697186][ C0] ? __pfx_do_exit+0x10/0x10 [ 1237.701745][ C0] ? do_raw_spin_lock+0x128/0x260 [ 1237.706752][ C0] ? find_held_lock+0x2b/0x80 [ 1237.711397][ C0] ? get_signal+0x7e0/0x21e0 [ 1237.715959][ C0] do_group_exit+0xd5/0x2a0 [ 1237.720436][ C0] get_signal+0x1ec7/0x21e0 [ 1237.724913][ C0] ? __asan_memset+0x23/0x50 [ 1237.729478][ C0] ? __pfx_get_signal+0x10/0x10 [ 1237.734315][ C0] arch_do_signal_or_restart+0x91/0x7a0 [ 1237.739833][ C0] ? __pfx_get_timespec64+0x10/0x10 [ 1237.745013][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1237.751160][ C0] ? __x64_sys_clock_nanosleep+0x347/0x480 [ 1237.756935][ C0] ? rcu_is_watching+0x12/0xc0 [ 1237.761682][ C0] exit_to_user_mode_loop+0x86/0x4a0 [ 1237.766948][ C0] ? do_syscall_64+0x52d/0xf80 [ 1237.771682][ C0] do_syscall_64+0x706/0xf80 [ 1237.776252][ C0] ? clear_bhb_loop+0x40/0x90 [ 1237.780899][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1237.786771][ C0] RIP: 0033:0x7f289715d60e [ 1237.791155][ C0] RSP: 002b:00007ffc893c17c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 1237.799535][ C0] RAX: 0000000000000000 RBX: 00005555761e4500 RCX: 00007f289715d60e [ 1237.807486][ C0] RDX: 00007ffc893c1820 RSI: 0000000000000000 RDI: 0000000000000000 [ 1237.815427][ C0] RBP: 00007ffc893c188c R08: 0000000000000000 R09: 0000000000000000 [ 1237.823372][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 1237.831314][ C0] R13: 0000000000000025 R14: 00000000000fe67d R15: 00007ffc893c18e0 [ 1237.839263][ C0]