last executing test programs: 34m9.212694896s ago: executing program 3 (id=670): syz_open_dev$sndpcmp(&(0x7f0000000180), 0x1, 0x1) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x8, 0x8200) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) syz_open_dev$sndmidi(0x0, 0xfffffffdfffffffb, 0x141581) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x4a51, @rand_addr=' \x01\x00', 0x80000001}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001440), 0x101000, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(r4, 0x3b66, 0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x20000000, 0xfffffffc, 0x7ff}}]}, {0x4}, {0x2, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) getpid() sendmsg$nl_route_sched(r5, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x32, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 34m4.649375426s ago: executing program 3 (id=681): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@int=0x7, 0x4) ioctl$VHOST_SET_VRING_KICK(r1, 0x541b, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x14, 0xa, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x24048014}, 0x4040000) socket$nl_route(0x10, 0x3, 0x0) writev(r1, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x107842, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$cgroup_int(r6, &(0x7f0000000040)=0x1f00, 0x12) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) 34m2.662641067s ago: executing program 3 (id=684): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x3, 0x84) sendmsg$inet_sctp(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x48000}, 0x10) syz_io_uring_setup(0x1b31, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) socket$rds(0x15, 0x5, 0x0) futex(0x0, 0x83, 0x0, 0x0, 0x0, 0xffffff01) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2000) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000440)={0x1, 0x0, [{0x9000, 0x0, 0x0}]}) 34m2.261437764s ago: executing program 3 (id=685): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010028bd7000010000000f00000005002d0000000000080034000000000008000300", @ANYRES32=r2], 0x4c}}, 0x80) 34m2.145671611s ago: executing program 3 (id=686): accept4$nfc_llcp(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x60, 0x80800) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f00003bc000/0x3000)=nil, &(0x7f000076a000/0x3000)=nil, 0x3000, 0x2}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() setrlimit(0xd, &(0x7f00000002c0)={0x2, 0x8}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000340)={0x0, r4}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r6 = fcntl$dupfd(r5, 0x406, r5) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x14, 0x0, 0x0, 0x7995}, 0x8, 0x2, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mmap(&(0x7f00008a9000/0x2000)=nil, 0x2000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) shmat(0xffffffffffffffff, &(0x7f0000af6000/0x2000)=nil, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 34m0.629014144s ago: executing program 3 (id=692): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'pim6reg\x00', 0x0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x13, &(0x7f0000000b80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa72}, [@map_idx_val={0x18, 0x7, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0xa869}, @exit, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x18000000}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5ee42a13}}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xd}, @generic={0x1, 0xc, 0x6, 0x0, 0x6}]}, &(0x7f0000000380)='syzkaller\x00', 0x38, 0xfffffffffffffd8c, &(0x7f0000000480)=""/128, 0xa2f68b0b0227cac0, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0x0, 0x7, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000005c0), 0x10, 0xba61}, 0x94) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r2, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000680)={"e2859501099928bfcfb4fde644bcab2c", 0x0, 0x0, {0xc, 0x3ff}, {0xfff, 0x5}, 0x8000000000, [0xffffffff, 0x1, 0x1, 0x7, 0x6, 0x0, 0x5, 0xe99, 0x0, 0x8e, 0x6, 0x9, 0x0, 0xfffffffffffffffa, 0x5, 0x9]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_ext={0x1c, 0x10, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='GPL\x00', 0x1ff, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x4, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x4, 0x0, 0x4a}, 0x10, 0xaca0, r1, 0x7, &(0x7f0000000740)=[r2], &(0x7f0000000780)=[{0x0, 0x2, 0x5, 0x8}, {0x1, 0x4, 0x4, 0x5}, {0x4, 0x3, 0xc}, {0x2, 0x3, 0x6, 0xb}, {0x1, 0x4, 0x7}, {0x3, 0x4, 0x7, 0xa}, {0x4, 0x1, 0x3, 0xa}], 0x10, 0x100}, 0x94) r3 = socket$kcm(0x11, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newrule={0x1c, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x4000) sendmsg$kcm(r3, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V1(r6, 0x80705864, &(0x7f00000008c0)) ioctl$BTRFS_IOC_TREE_SEARCH(r6, 0x7005, 0x0) readv(r6, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/191, 0xbf}], 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r8 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000052000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000001ac0)={r10, 0x0, 0x0}, 0x10) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r11}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_STORE(r11, &(0x7f0000000000)=ANY=[@ANYBLOB="2800000004000000000000000000000000000004000000000000000000000000000000d3"], 0x28) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r8, 0xc0845657, &(0x7f0000000a00)={0x0, @reserved}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @remote}, 0x10) 33m44.647137104s ago: executing program 32 (id=692): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'pim6reg\x00', 0x0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x13, &(0x7f0000000b80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa72}, [@map_idx_val={0x18, 0x7, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0xa869}, @exit, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x18000000}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5ee42a13}}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xd}, @generic={0x1, 0xc, 0x6, 0x0, 0x6}]}, &(0x7f0000000380)='syzkaller\x00', 0x38, 0xfffffffffffffd8c, &(0x7f0000000480)=""/128, 0xa2f68b0b0227cac0, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0x0, 0x7, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000005c0), 0x10, 0xba61}, 0x94) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r2, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000680)={"e2859501099928bfcfb4fde644bcab2c", 0x0, 0x0, {0xc, 0x3ff}, {0xfff, 0x5}, 0x8000000000, [0xffffffff, 0x1, 0x1, 0x7, 0x6, 0x0, 0x5, 0xe99, 0x0, 0x8e, 0x6, 0x9, 0x0, 0xfffffffffffffffa, 0x5, 0x9]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_ext={0x1c, 0x10, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='GPL\x00', 0x1ff, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x4, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x4, 0x0, 0x4a}, 0x10, 0xaca0, r1, 0x7, &(0x7f0000000740)=[r2], &(0x7f0000000780)=[{0x0, 0x2, 0x5, 0x8}, {0x1, 0x4, 0x4, 0x5}, {0x4, 0x3, 0xc}, {0x2, 0x3, 0x6, 0xb}, {0x1, 0x4, 0x7}, {0x3, 0x4, 0x7, 0xa}, {0x4, 0x1, 0x3, 0xa}], 0x10, 0x100}, 0x94) r3 = socket$kcm(0x11, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newrule={0x1c, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x4000) sendmsg$kcm(r3, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V1(r6, 0x80705864, &(0x7f00000008c0)) ioctl$BTRFS_IOC_TREE_SEARCH(r6, 0x7005, 0x0) readv(r6, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/191, 0xbf}], 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r8 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000052000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000001ac0)={r10, 0x0, 0x0}, 0x10) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r11}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_STORE(r11, &(0x7f0000000000)=ANY=[@ANYBLOB="2800000004000000000000000000000000000004000000000000000000000000000000d3"], 0x28) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r8, 0xc0845657, &(0x7f0000000a00)={0x0, @reserved}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @remote}, 0x10) 19m37.106083627s ago: executing program 0 (id=7725): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000002240)="2d12", 0x2, 0x4004085, 0x0, 0x0) ioctl$sock_TIOCINQ(r0, 0x8905, 0x0) 19m37.049731537s ago: executing program 0 (id=7729): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000000000014000000000000002900000034000000fdffffff00000000180000000000000029000000040000000400000000000000d80000000000000029000000360000005e17000000000000000100000100010800000000000000000728000000030800ff0f66090000000000000700000000000000010000000000000001000000000000000864c8a110995d439f"], 0x188}}], 0x1, 0x810) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a", 0x88}, {0x0}, {0x0}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8ac67e4f5f7a2", 0x22}, {&(0x7f0000000d00)="7cedc13b1cbf2308b2000d3d62b333c7c3b9f321ef7bd8e0e1e323da70d8d5", 0x1f}], 0x5, 0x4d9e, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd4}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 19m36.948317775s ago: executing program 0 (id=7730): mkdir(&(0x7f0000000600)='./file0\x00', 0x46) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000800), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000400)={0x50, 0x0, r1, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0xc0000000, 0x1, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r2, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r2, r3, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x9802, 0x40) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) kexec_load(0x4, 0xfffffe1a, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 19m36.880369109s ago: executing program 0 (id=7734): socket$nl_generic(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket(0x840000000002, 0x3, 0xff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x8c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x110}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000600), 0x141000, 0x0) 19m36.779293289s ago: executing program 0 (id=7736): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000060000000000000000000000000000000000003a3f"], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x8090}, 0x48006) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) 19m36.285022242s ago: executing program 0 (id=7742): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chmod(&(0x7f0000000300)='./file0\x00', 0x104) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0x0, 0xfffffffffffffffc, {0x88, 0x0, 0x0, {0x4, 0x0, 0x0, 0xfffffffffffffffe, 0x8, 0xffffffffffe, 0x0, 0x9, 0x0, 0x4000, 0x4, 0xffffffffffffffff, r2, 0xffffffff, 0x20000000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x21, 0xff7fffff, 0x58339298, 0x1002, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10, 0x11}}, 0x50) removexattr(&(0x7f0000000400)='./file0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="73797374656d2e0000000000040000567cb8fea88780901aae14"]) 19m36.037951689s ago: executing program 33 (id=7742): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chmod(&(0x7f0000000300)='./file0\x00', 0x104) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0x0, 0xfffffffffffffffc, {0x88, 0x0, 0x0, {0x4, 0x0, 0x0, 0xfffffffffffffffe, 0x8, 0xffffffffffe, 0x0, 0x9, 0x0, 0x4000, 0x4, 0xffffffffffffffff, r2, 0xffffffff, 0x20000000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x21, 0xff7fffff, 0x58339298, 0x1002, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10, 0x11}}, 0x50) removexattr(&(0x7f0000000400)='./file0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="73797374656d2e0000000000040000567cb8fea88780901aae14"]) 7.624844222s ago: executing program 4 (id=13079): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet(0x2b, 0x801, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x240400c4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x4f2f, 0x0, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 5.850465655s ago: executing program 6 (id=13089): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x701400, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd=r0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000740)=""/175, 0xaf}], 0x1}) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0xfffffffe, 0xd3}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) socket$inet6(0xa, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2b, 0x0, 0x0, 0x200}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 5.471000019s ago: executing program 6 (id=13090): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d5502301020301090212"], 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 4.740946797s ago: executing program 4 (id=13091): open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x9) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f00000003c0)='./file1\x00', 0x0) 4.739921803s ago: executing program 2 (id=13092): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') fcntl$setstatus(r2, 0x4, 0x40800) r3 = syz_io_uring_setup(0xbd9, &(0x7f00000002c0)={0x0, 0x9009, 0x1000, 0x0, 0x3c3}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0xa1f, &(0x7f00000001c0)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 4.225823551s ago: executing program 1 (id=13094): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000080)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x30, 0x11, 0x0, @empty, @mcast2, {[], {0x4000, 0xe22, 0x30, 0x0, @opaque="03e6c6c583de1ef674b8de5bbd577f4ec0da1d9c807e7b38047930020000000001000000329913f3"}}}}}}, 0x0) 4.18024755s ago: executing program 1 (id=13095): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000000c0)="01", 0x24}]) 4.15269223s ago: executing program 1 (id=13096): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000380)={0x1, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000002c0)={0x1, r2}) r3 = semget$private(0x0, 0x6, 0x0) semtimedop(r3, &(0x7f0000000380)=[{0x2, 0xf, 0x1000}, {0x2, 0x3, 0x3000}], 0x2, 0x0) semtimedop(r3, &(0x7f00000003c0), 0x0, 0x0) semop(0x0, &(0x7f0000000340)=[{0x2, 0x8001, 0x1000}], 0x1) semop(0x0, &(0x7f0000000300)=[{0x2, 0x0, 0x2000}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000000)={0x3800, {"e6a3785ef3ea62186288f8d2b35df471", "d35c65ff7462d83df18224e8fe7e024f", "82e70a363e66af9d666e017c542a839d"}, 0x7ad, 0x7}) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000200)={&(0x7f0000000080)=[{0x50, 0x8001, 0x0, 0x0}, {0xd, 0x0, 0x0, &(0x7f0000000040)}], 0x2}) 4.028597268s ago: executing program 6 (id=13097): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000004c0)="f3", 0x1}], 0x1}}], 0x1, 0x4000841) 3.978326847s ago: executing program 6 (id=13100): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_io_uring_setup(0x5ce, &(0x7f0000000480)={0x0, 0x9cd6, 0x1000, 0x2, 0x34f}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x82e, 0x0, 0x0, 0x4}]}, 0x10) unshare(0x24020400) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r1, 0x47bc, 0x3000000, 0x0, 0x0, 0x0) listen(r0, 0x0) 3.795066982s ago: executing program 4 (id=13102): r0 = socket$netlink(0x10, 0x3, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000200)=@sr0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000040)='ecryptfs\x00', 0x0, 0x0) cachestat(r3, &(0x7f0000000040), &(0x7f000009de80), 0x0) write$fb(r3, &(0x7f0000000100), 0x0) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x1, 0x10}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r5, 0x60b, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) add_key$user(&(0x7f00000001c0), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000240)="b1", 0x1, 0xffffffffffffffff) add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) 3.674212211s ago: executing program 2 (id=13103): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x80402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000009c0)={&(0x7f00000000c0)=[{0x9, 0x800, 0x0, 0x0}, {0xb392, 0xa801, 0x0, 0x0}], 0x2}) 3.01376112s ago: executing program 5 (id=13104): syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) 2.827847365s ago: executing program 2 (id=13105): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000080)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x30, 0x11, 0x0, @empty, @mcast2, {[], {0x4000, 0xe22, 0x30, 0x0, @opaque="03e6c6c583de1ef674b8de5bbd577f4ec0da1d9c807e7b38047930020000000001000000329913f3"}}}}}}, 0x0) 2.803329688s ago: executing program 2 (id=13106): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file0\x00'}) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x24}]) 2.737385715s ago: executing program 2 (id=13107): socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) openat$yama_ptrace_scope(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$uinput_user_dev(r4, &(0x7f00000004c0)={'syz0\x00', {0x87, 0x3, 0x1, 0x9}, 0xb, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5b, 0x3, 0x4, 0x5, 0x10004, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x0, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x4, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0xa, 0x7, 0x8, 0x5, 0x3, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x3, 0x7, 0x9, 0x6, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0xb, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x8, 0x10d, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x4, 0x6f, 0x80b, 0x1, 0x1, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0xfffffffd, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x200, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xa9, 0x7, 0x49, 0x6, 0x4, 0x5, 0xa3, 0x40003, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x4, 0xd21e, 0x9, 0x12, 0x0, 0x2, 0xfff, 0x926, 0x800100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x81, 0x47, 0x7, 0x0, 0x11, 0x2, 0xffd, 0x7, 0x7, 0x7ffd, 0x7ff, 0x10, 0x9, 0x10001, 0x8000001, 0x10001, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x7, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x4, 0x9, 0x6, 0xc41f, 0x5, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0x9, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0xa, 0x7, 0x4, 0x0, 0xb, 0x400400, 0x8, 0x5141, 0x8, 0x7, 0x9, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) pipe(&(0x7f0000000080)) 2.684310555s ago: executing program 4 (id=13108): r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r1, 0x10001}, 0xc) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000140)={0x1, 0x0, 0x3, r1, 0x72fb2cc9}, 0xc) 2.623499298s ago: executing program 4 (id=13109): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010200000000000000000100fffe0900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000001400038008000140000000000800024000000000a4010000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000"], 0x22c}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) 2.575473988s ago: executing program 4 (id=13110): socket$pptp(0x18, 0x1, 0x2) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x4000000, 0x1, 0x0, 'queue0\x00', 0x1c52}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000280)={0x0, 0x3, 0x0, 'queue0\x00', 0x9}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, 0x0, &(0x7f0000000340)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f00000000c0)={0xc, 0x6, 0x5}) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000240)={0x0, 0x2}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e21, 0x3ff, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x80000000}}, 0x6, 0x2}, &(0x7f0000000000)=0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000005800010028bd", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x4000004) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r6, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f00000027c0)={0x14, r7, 0xf1f, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x4080) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000200)={&(0x7f00000000c0)=[{0xa, 0x1000, 0x0, 0x0}], 0x1}) 2.422081349s ago: executing program 1 (id=13111): socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) socket(0x400000000010, 0x3, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$kcm(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r1}, &(0x7f0000000280), &(0x7f0000000000)=r2}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x11, &(0x7f00000005c0)={@remote, @random="001a00e100", @void, {@mpls_uc={0x8847, {[], @llc={@llc={0x42, 0xaa, "d4"}}}}}}, 0x0) 2.421886538s ago: executing program 5 (id=13112): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, 0x0, 0x410) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x10, 0x1, {0x0, 0xea60}, {0x0, 0x2710}, {0x2, 0x1, 0x1}, 0x1, @can={{0x4, 0x1, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "6084d60f5b369079"}}, 0x48}, 0x1, 0x0, 0x0, 0x880}, 0x84844) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2.35531557s ago: executing program 6 (id=13113): syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x20000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/185) 2.246268127s ago: executing program 1 (id=13114): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet(0x2b, 0x801, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x240400c4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x4f2f, 0x0, &(0x7f0000000040), 0x0) r4 = syz_io_uring_setup(0x8d2, &(0x7f00000001c0)={0x0, 0xb0a8, 0x1000, 0x1, 0x37a, 0x0, r3}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 2.11284946s ago: executing program 5 (id=13115): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x80402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000009c0)={&(0x7f00000000c0)=[{0x9, 0x800, 0x0, 0x0}, {0xb392, 0xa801, 0x0, 0x0}], 0x2}) 1.345687277s ago: executing program 5 (id=13116): r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec21, 0x1000, 0x400001, 0x40000333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000140)=[{&(0x7f0000001800)=""/210, 0xd2}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.141031172s ago: executing program 5 (id=13117): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file0\x00'}) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x24}]) 901.087382ms ago: executing program 5 (id=13118): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/185) 811.572757ms ago: executing program 1 (id=13119): r0 = socket$packet(0x11, 0x2, 0x300) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000200)=[@acquire={0x40046305, 0xfffffffc}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x100e099, 0x0, 0x3, 0xb4}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xffffff73, 0x0, 0x4) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0445624, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000440)=@IORING_OP_SPLICE={0x1e, 0x1b, 0x0, @fd_index=0x5, 0x5, {}, 0xffff, 0xc, 0x1}) io_uring_enter(r5, 0x47f6, 0x0, 0x2, 0x0, 0x0) syz_io_uring_submit(r6, r7, 0x0) 666.783519ms ago: executing program 2 (id=13120): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newqdisc={0x68, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x31, 0x3, 0x5, 0x7}}]}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x2a39, 0x3fb0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x3, 0x48, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x3, 0x3, 0x6, {0x7, 0x25, 0x1, 0xc, 0x0, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x9, 0x6, 0x3, {0x7, 0x25, 0x1, 0x4, 0x3, 0xa4b8}}}}}}}}]}}, 0x0) sendto$packet(r0, &(0x7f0000000080)="44c33b69ebc9e05e9bdec0c288a8", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @local}, 0x14) 0s ago: executing program 6 (id=13121): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000380)={0x1, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000002c0)={0x1, r2}) r3 = semget$private(0x0, 0x6, 0x0) semtimedop(r3, &(0x7f0000000380)=[{0x2, 0xf, 0x1000}, {0x2, 0x3, 0x3000}], 0x2, 0x0) semtimedop(r3, &(0x7f00000003c0), 0x0, 0x0) semop(0x0, &(0x7f0000000340)=[{0x2, 0x8001, 0x1000}], 0x1) semop(0x0, &(0x7f0000000300)=[{0x2, 0x0, 0x2000}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000000)={0x3800, {"e6a3785ef3ea62186288f8d2b35df471", "d35c65ff7462d83df18224e8fe7e024f", "82e70a363e66af9d666e017c542a839d"}, 0x7ad, 0x7}) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000200)={&(0x7f0000000080)=[{0x50, 0x8001, 0x0, 0x0}, {0xd, 0x0, 0x0, &(0x7f0000000040)}], 0x2}) kernel console output (not intermixed with test programs): e: data in/out 418780/98 bytes for SCSI command 0x0-- guessing data in; [ 2223.120135][T12358] program syz.2.12489 not setting count and/or reply_len properly [ 2223.463996][T10176] usb 7-1: USB disconnect, device number 46 [ 2223.548619][T12361] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.12490'. [ 2224.133651][T12368] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.12493'. [ 2224.160229][T10176] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 2224.320173][T10176] usb 3-1: Using ep0 maxpacket: 32 [ 2224.334370][T10176] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2224.376744][T10176] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 2224.390048][T10176] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2224.468711][T10176] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 2224.480089][T10176] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2224.496626][T10176] usb 3-1: Product: syz [ 2224.506411][T10176] usb 3-1: Manufacturer: syz [ 2224.513031][T10176] usb 3-1: SerialNumber: syz [ 2224.582228][T10176] usb 3-1: config 0 descriptor?? [ 2224.679996][ T29] audit: type=1800 audit(1773318099.272:1011): pid=12350 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.12484" name="bus" dev="overlay" ino=2307 res=0 errno=0 [ 2224.806774][T12365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2224.837876][T12365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2224.906459][T10176] gs_usb 3-1:0.0: Couldn't send data format (err=-71) [ 2224.924539][T10176] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 2224.969312][T10176] usb 3-1: USB disconnect, device number 33 [ 2225.409156][T12390] sg_write: data in/out 418780/98 bytes for SCSI command 0x0-- guessing data in; [ 2225.409156][T12390] program syz.2.12499 not setting count and/or reply_len properly [ 2226.381896][T12396] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.12501'. [ 2226.885947][ T29] audit: type=1326 audit(1773318101.482:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12394 comm="syz.4.12498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9299c799 code=0x7ffc0000 [ 2226.926774][T12401] FAULT_INJECTION: forcing a failure. [ 2226.926774][T12401] name failslab, interval 1, probability 0, space 0, times 0 [ 2226.952703][T12401] CPU: 0 UID: 0 PID: 12401 Comm: syz.4.12498 Not tainted syzkaller #0 PREEMPT(full) [ 2226.952729][T12401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 2226.952739][T12401] Call Trace: [ 2226.952746][T12401] [ 2226.952754][T12401] dump_stack_lvl+0x100/0x190 [ 2226.952790][T12401] should_fail_ex.cold+0x5/0xa [ 2226.952815][T12401] should_failslab+0xc2/0x120 [ 2226.952835][T12401] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 2226.952861][T12401] ? audit_log_start+0x29d/0x930 [ 2226.952888][T12401] audit_log_start+0x29d/0x930 [ 2226.952912][T12401] ? __pfx_audit_log_start+0x10/0x10 [ 2226.952937][T12401] ? find_held_lock+0x2b/0x80 [ 2226.952961][T12401] ? ksys_write+0x190/0x250 [ 2226.952987][T12401] ? ksys_write+0x190/0x250 [ 2226.953019][T12401] audit_seccomp+0x61/0x1f0 [ 2226.953041][T12401] __seccomp_filter+0x896/0x1140 [ 2226.953072][T12401] ? __pfx___seccomp_filter+0x10/0x10 [ 2226.953097][T12401] ? ksys_write+0x1ac/0x250 [ 2226.953124][T12401] ? __pfx_ksys_write+0x10/0x10 [ 2226.953154][T12401] __secure_computing+0x221/0x2e0 [ 2226.953177][T12401] do_syscall_64+0x568/0xf80 [ 2226.953198][T12401] ? clear_bhb_loop+0x40/0x90 [ 2226.953222][T12401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2226.953241][T12401] RIP: 0033:0x7f3e9299c799 [ 2226.953259][T12401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2226.953276][T12401] RSP: 002b:00007f3e938bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2226.953295][T12401] RAX: ffffffffffffffda RBX: 00007f3e92c16180 RCX: 00007f3e9299c799 [ 2226.953308][T12401] RDX: 000000000000275a RSI: 0000200000000200 RDI: ffffffffffffff9c [ 2226.953320][T12401] RBP: 00007f3e938bf090 R08: 0000000000000000 R09: 0000000000000000 [ 2226.953331][T12401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2226.953343][T12401] R13: 00007f3e92c16218 R14: 00007f3e92c16180 R15: 00007ffd1f0621c8 [ 2226.953368][T12401] [ 2226.953393][T12401] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 2227.160170][T12401] audit: out of memory in audit_log_start [ 2227.311036][ T29] audit: type=1326 audit(1773318101.482:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12394 comm="syz.4.12498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9299c799 code=0x7ffc0000 [ 2227.382306][ T29] audit: type=1326 audit(1773318101.512:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12394 comm="syz.4.12498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f3e9299c799 code=0x7ffc0000 [ 2227.420197][T12406] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12505'. [ 2227.455877][ T29] audit: type=1326 audit(1773318101.512:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12394 comm="syz.4.12498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9299c799 code=0x7ffc0000 [ 2227.545141][T12408] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.12504'. [ 2227.565250][ T29] audit: type=1326 audit(1773318101.512:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12394 comm="syz.4.12498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3e9299c799 code=0x7ffc0000 [ 2227.594507][T12412] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 2227.683319][T12412] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 2227.746620][ T29] audit: type=1326 audit(1773318101.512:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12394 comm="syz.4.12498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9299c799 code=0x7ffc0000 [ 2227.930125][ T29] audit: type=1326 audit(1773318101.512:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12394 comm="syz.4.12498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f3e9299c799 code=0x7ffc0000 [ 2227.968395][T12406] macvlan2: entered promiscuous mode [ 2227.976069][T12406] macvlan2: entered allmulticast mode [ 2227.981876][T12406] bond1: (slave macvlan2): Error -98 calling set_mac_address [ 2228.560004][T12419] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2229.620142][ T5872] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 2229.769940][ T5872] usb 5-1: Using ep0 maxpacket: 32 [ 2229.843807][ T5872] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 2229.879402][ T5872] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2229.928148][ T5872] usb 5-1: config 0 has no interface number 0 [ 2230.026487][ T5872] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2230.051635][ T5872] usb 5-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2230.559592][ T5872] usb 5-1: config 0 interface 196 has no altsetting 0 [ 2230.630008][ T5872] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 2230.651858][T11454] IPVS: starting estimator thread 0... [ 2230.657577][T12452] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 2230.671108][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2230.708526][ T5872] usb 5-1: Product: syz [ 2230.759996][T12454] IPVS: using max 76 ests per chain, 182400 per kthread [ 2230.846071][ T5872] usb 5-1: Manufacturer: syz [ 2230.870216][ T5872] usb 5-1: SerialNumber: syz [ 2230.899267][T12464] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.12516'. [ 2230.899586][ T5872] usb 5-1: config 0 descriptor?? [ 2230.950319][T12463] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12518'. [ 2233.269105][ T5872] ipheth 5-1:0.196: Unable to find endpoints [ 2233.281048][T12492] ieee802154 phy0 wpan0: encryption failed: -22 [ 2233.300042][ T5872] usb 5-1: USB disconnect, device number 44 [ 2233.440911][T12502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12529'. [ 2234.683241][T12508] bridge0: port 2(bridge_slave_1) entered disabled state [ 2234.690594][T12508] bridge0: port 1(bridge_slave_0) entered disabled state [ 2234.744579][T12508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2234.745006][T12512] netlink: 14 bytes leftover after parsing attributes in process `syz.2.12531'. [ 2234.754904][T12508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2235.063639][T12512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2235.096974][T12512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2235.121504][T12512] bond0 (unregistering): Released all slaves [ 2235.144326][ T7128] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2235.198803][ T7128] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2235.255266][ T7128] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2235.279433][ T7128] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2235.985048][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 2235.985090][ T29] audit: type=1800 audit(1773318110.582:1039): pid=12543 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.12540" name="file1" dev="overlay" ino=225 res=0 errno=0 [ 2236.372813][T12541] evm: overlay not supported [ 2236.388560][T12541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12540'. [ 2236.438320][T12547] syzkaller0: entered promiscuous mode [ 2236.445623][T12547] syzkaller0: entered allmulticast mode [ 2238.492201][T12577] gfs2: error -5 reading superblock [ 2239.387890][T12577] team_slave_0: entered promiscuous mode [ 2239.394085][T12577] team_slave_1: entered promiscuous mode [ 2239.401667][T12577] macvtap1: entered promiscuous mode [ 2239.530169][T12577] team0: entered promiscuous mode [ 2239.570890][T12577] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 2239.599099][T12577] team0: Device macvtap1 is already an upper device of the team interface [ 2239.678683][T12577] team0: left promiscuous mode [ 2239.716145][T12577] team_slave_0: left promiscuous mode [ 2239.721627][T12577] team_slave_1: left promiscuous mode [ 2241.593511][ T29] audit: type=1400 audit(1773318116.192:1040): avc: denied { mount } for pid=12612 comm="syz.1.12561" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 2241.619990][T12613] sctp: [Deprecated]: syz.1.12561 (pid 12613) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2241.619990][T12613] Use struct sctp_sack_info instead [ 2241.637914][T15587] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 2241.666575][ T29] audit: type=1400 audit(1773318116.262:1041): avc: denied { mounton } for pid=12612 comm="syz.1.12561" path="/63/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 2241.691036][T12613] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2241.710827][ T29] audit: type=1400 audit(1773318116.292:1042): avc: denied { write } for pid=12610 comm="syz.4.12560" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 2241.889506][T15587] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2241.902684][T15587] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2241.930872][ T29] audit: type=1400 audit(1773318116.532:1043): avc: denied { unmount } for pid=11006 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 2241.962963][T15587] usb 7-1: Product: syz [ 2242.032950][T15587] usb 7-1: Manufacturer: syz [ 2242.041143][T15587] usb 7-1: SerialNumber: syz [ 2242.144306][T15587] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2242.183751][T10176] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2242.261091][ T5872] IPVS: starting estimator thread 0... [ 2242.268437][T12621] FAULT_INJECTION: forcing a failure. [ 2242.268437][T12621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2242.318436][T12621] CPU: 0 UID: 0 PID: 12621 Comm: syz.4.12563 Not tainted syzkaller #0 PREEMPT(full) [ 2242.318461][T12621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 2242.318471][T12621] Call Trace: [ 2242.318478][T12621] [ 2242.318485][T12621] dump_stack_lvl+0x100/0x190 [ 2242.318520][T12621] should_fail_ex.cold+0x5/0xa [ 2242.318544][T12621] _copy_from_user+0x2e/0xd0 [ 2242.318569][T12621] do_sock_getsockopt+0x30b/0x3d0 [ 2242.318594][T12621] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 2242.318629][T12621] __sys_getsockopt+0x148/0x260 [ 2242.318654][T12621] ? __x64_sys_getsockopt+0xbd/0x160 [ 2242.318671][T12621] __x64_sys_getsockopt+0xbd/0x160 [ 2242.318688][T12621] ? do_syscall_64+0x95/0xf80 [ 2242.318706][T12621] ? lockdep_hardirqs_on+0x78/0x100 [ 2242.318725][T12621] do_syscall_64+0x106/0xf80 [ 2242.318744][T12621] ? clear_bhb_loop+0x40/0x90 [ 2242.318764][T12621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2242.318783][T12621] RIP: 0033:0x7f3e9299c799 [ 2242.318798][T12621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2242.318815][T12621] RSP: 002b:00007f3e93901028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 2242.318833][T12621] RAX: ffffffffffffffda RBX: 00007f3e92c15fa0 RCX: 00007f3e9299c799 [ 2242.318845][T12621] RDX: 0000000000000483 RSI: 0000000000000000 RDI: 0000000000000003 [ 2242.318856][T12621] RBP: 00007f3e93901090 R08: 0000200000000180 R09: 0000000000000000 [ 2242.318867][T12621] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2242.318877][T12621] R13: 00007f3e92c16038 R14: 00007f3e92c15fa0 R15: 00007ffd1f0621c8 [ 2242.318901][T12621] [ 2242.527583][T12627] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12565'. [ 2242.550026][T12622] IPVS: using max 43 ests per chain, 103200 per kthread [ 2242.587914][T12627] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 2242.599446][T12627] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 2242.634985][T12632] macvlan0: entered promiscuous mode [ 2242.640704][T12632] macvlan0: entered allmulticast mode [ 2242.646706][T12632] bond3: (slave macvlan0): Error -98 calling set_mac_address [ 2242.717519][T12609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2242.742942][T12609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2242.877892][ T5914] usb 7-1: USB disconnect, device number 47 [ 2243.200296][T10176] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 2243.207699][T10176] ath9k_htc: Failed to initialize the device [ 2243.218586][ T5914] usb 7-1: ath9k_htc: USB layer deinitialized [ 2244.340677][T12645] input: syz1 as /devices/virtual/input/input139 [ 2244.668220][T12654] sch_tbf: peakrate 6762417878432097402 is lower than or equals to rate 8022975959529529383 ! [ 2244.668727][T12657] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.12575'. [ 2245.889935][T10176] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 2246.081051][T12670] input: syz1 as /devices/virtual/input/input140 [ 2246.399751][T10176] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2246.421619][T10176] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2246.434816][T10176] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2246.445161][T10176] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 2246.468653][T10176] usb 7-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 2246.488282][T10176] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2246.503773][T10176] usb 7-1: Product: syz [ 2246.521986][T10176] usb 7-1: Manufacturer: syz [ 2246.549177][T10176] usb 7-1: SerialNumber: syz [ 2246.592206][ T29] audit: type=1400 audit(1773318121.192:1044): avc: denied { accept } for pid=12662 comm="syz.5.12576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2246.854477][ T5814] Bluetooth: hci6: unexpected Set CIG Parameters response data [ 2246.865331][ T5814] Bluetooth: hci6: unexpected event for opcode 0x2062 [ 2247.069810][T10176] usb 7-1: Can't get UAC3 power state for id 10 [ 2247.078577][T10176] usb 7-1: 2:0: failed to get current value for ch 0 (-71) [ 2247.116098][T10176] usb 7-1: 2:0: cannot get min/max values for control 2 (id 2) [ 2247.241105][T12696] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 2247.243660][T10176] usb 7-1: USB disconnect, device number 48 [ 2247.450513][T12703] udevd[12703]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2247.532483][ T1153] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 2247.699950][ T1153] usb 3-1: Using ep0 maxpacket: 8 [ 2247.706629][ T1153] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2247.717972][ T1153] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2247.729789][ T1153] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2247.739747][ T1153] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2247.752861][ T1153] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2247.761910][ T1153] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2247.789981][T11199] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 2247.800073][T11454] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 2247.830097][T10176] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 2247.940079][T11199] usb 2-1: Using ep0 maxpacket: 32 [ 2247.947352][T11199] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 2247.956297][ T29] audit: type=1400 audit(1773318122.542:1045): avc: denied { unmount } for pid=2026 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 2247.976248][T11454] usb 5-1: Using ep0 maxpacket: 32 [ 2247.981160][ T1153] usb 3-1: GET_CAPABILITIES returned 0 [ 2247.982795][T11199] usb 2-1: config 0 has no interface number 0 [ 2247.986847][ T1153] usbtmc 3-1:16.0: can't read capabilities [ 2248.005698][T11199] usb 2-1: config 0 interface 184 has no altsetting 0 [ 2248.012922][T11454] usb 5-1: config 2 has too many interfaces: 78, using maximum allowed: 32 [ 2248.025419][T10176] usb 7-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 2248.025964][T11454] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 2248.046333][T11454] usb 5-1: config 2 has 0 interfaces, different from the descriptor's value: 78 [ 2248.069720][T10176] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 2248.080302][T11199] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2248.093223][T11199] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2248.101312][T11199] usb 2-1: Product: syz [ 2248.102244][T10176] usb 7-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 2248.106121][T11199] usb 2-1: Manufacturer: syz [ 2248.115166][T10176] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2248.127473][T11199] usb 2-1: SerialNumber: syz [ 2248.127832][T10176] usb 7-1: Product: syz [ 2248.136676][T10176] usb 7-1: Manufacturer: syz [ 2248.141779][T10176] usb 7-1: SerialNumber: syz [ 2248.146671][T11454] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 2248.149374][T10176] usb 7-1: config 0 descriptor?? [ 2248.166342][T11454] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2248.169245][T10176] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 2248.183953][T11199] usb 2-1: config 0 descriptor?? [ 2248.184130][T12698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2248.212674][T12698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2248.222706][T11454] usb 5-1: Product: syz [ 2248.226886][T11454] usb 5-1: Manufacturer: syz [ 2248.241234][T11454] usb 5-1: SerialNumber: syz [ 2248.252884][T12698] syzkaller0: entered promiscuous mode [ 2248.259603][T12698] syzkaller0: entered allmulticast mode [ 2248.322019][T28760] usb 3-1: USB disconnect, device number 34 [ 2248.478072][T12719] fuse: Unknown parameter '»¬D<Û4¼¼è-©t勪~ÀK€Œq§–ä@^®8à`—@® [ 2248.478072][T12719] »29y®4̵ÿlT‚ÝRK—6¿‚‡ÀQ …d\–šò-è¤óh÷IØ$PÌl¼„Qæ9P¥$è'ÿ‚ÍG’œ<%ÜíLrÀ1iV0x0000000000000007' [ 2248.572122][T12708] syzkaller0: entered promiscuous mode [ 2248.577638][T12708] syzkaller0: entered allmulticast mode [ 2248.687738][T11454] usb 5-1: USB disconnect, device number 45 [ 2248.724015][T10176] gspca_sunplus: reg_r err -110 [ 2248.728954][T10176] sunplus 7-1:0.0: probe with driver sunplus failed with error -110 [ 2248.861102][T11199] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 2248.997040][T11199] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2249.017666][T12714] usb usb9: usbfs: process 12714 (syz.6.12591) did not claim interface 0 before use [ 2249.541261][T28760] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 2249.699937][T28760] usb 3-1: Using ep0 maxpacket: 32 [ 2249.711684][T28760] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2249.732052][T28760] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2249.747536][T28760] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2249.759078][T28760] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2249.781129][T28760] usb 3-1: config 0 descriptor?? [ 2249.800708][T28760] hub 3-1:0.0: USB hub found [ 2249.821675][T11199] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 2249.833136][T11199] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 2249.844076][T11199] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 2249.854497][T11199] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 2250.871743][T10176] usb 2-1: USB disconnect, device number 30 [ 2251.001614][T28760] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 2251.203659][T28760] usbhid 3-1:0.0: can't add hid device: -71 [ 2251.209624][T28760] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2251.249685][T28760] usb 3-1: USB disconnect, device number 35 [ 2251.393254][T11199] usb 7-1: USB disconnect, device number 49 [ 2251.546175][ T7885] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2251.558669][ T7885] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2251.567392][ T7885] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2251.577871][ T7885] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2251.586654][ T7885] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2252.138119][T12753] chnl_net:caif_netlink_parms(): no params data found [ 2252.311020][T12782] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.12610'. [ 2253.230192][T14244] bridge_slave_1: left allmulticast mode [ 2253.250380][T14244] bridge_slave_1: left promiscuous mode [ 2253.279460][T14244] bridge0: port 2(bridge_slave_1) entered disabled state [ 2253.372594][T14244] bridge_slave_0: left allmulticast mode [ 2253.380018][T14244] bridge_slave_0: left promiscuous mode [ 2253.389075][T14244] bridge0: port 1(bridge_slave_0) entered disabled state [ 2253.432597][ T1153] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 2253.441961][T12794] FAULT_INJECTION: forcing a failure. [ 2253.441961][T12794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2253.460287][T12794] CPU: 1 UID: 0 PID: 12794 Comm: syz.1.12612 Not tainted syzkaller #0 PREEMPT(full) [ 2253.460313][T12794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 2253.460323][T12794] Call Trace: [ 2253.460329][T12794] [ 2253.460336][T12794] dump_stack_lvl+0x100/0x190 [ 2253.460366][T12794] should_fail_ex.cold+0x5/0xa [ 2253.460386][T12794] _copy_from_user+0x2e/0xd0 [ 2253.460410][T12794] __sys_bpf+0x243/0x4b90 [ 2253.460429][T12794] ? __pfx___sys_bpf+0x10/0x10 [ 2253.460443][T12794] ? proc_fail_nth_write+0x9f/0x220 [ 2253.460464][T12794] ? find_held_lock+0x2b/0x80 [ 2253.460487][T12794] ? find_held_lock+0x2b/0x80 [ 2253.460505][T12794] ? ksys_write+0x190/0x250 [ 2253.460534][T12794] ? __mutex_unlock_slowpath+0x15c/0x790 [ 2253.460554][T12794] ? __fget_files+0x215/0x3d0 [ 2253.460581][T12794] ? fput+0x79/0x100 [ 2253.460599][T12794] ? ksys_write+0x1ac/0x250 [ 2253.460636][T12794] ? __pfx_ksys_write+0x10/0x10 [ 2253.460664][T12794] __x64_sys_bpf+0x7b/0xc0 [ 2253.460681][T12794] ? lockdep_hardirqs_on+0x78/0x100 [ 2253.460699][T12794] do_syscall_64+0x106/0xf80 [ 2253.460717][T12794] ? clear_bhb_loop+0x40/0x90 [ 2253.460737][T12794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2253.460754][T12794] RIP: 0033:0x7f04fad9c799 [ 2253.460768][T12794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2253.460784][T12794] RSP: 002b:00007f04fbd2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2253.460800][T12794] RAX: ffffffffffffffda RBX: 00007f04fb015fa0 RCX: 00007f04fad9c799 [ 2253.460810][T12794] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 2253.460820][T12794] RBP: 00007f04fbd2f090 R08: 0000000000000000 R09: 0000000000000000 [ 2253.460830][T12794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2253.460839][T12794] R13: 00007f04fb016038 R14: 00007f04fb015fa0 R15: 00007ffc7294e448 [ 2253.460861][T12794] [ 2253.710002][ T7885] Bluetooth: hci5: command tx timeout [ 2253.885278][T14244] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2253.894799][T14244] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2253.904134][T14244] bond0 (unregistering): Released all slaves [ 2253.914746][T14244] bond1 (unregistering): Released all slaves [ 2253.932277][T14244] bond2 (unregistering): Released all slaves [ 2253.943735][T14244] bond3 (unregistering): Released all slaves [ 2254.134493][T12803] netlink: 'syz.6.12615': attribute type 2 has an invalid length. [ 2254.142934][T12803] netlink: 'syz.6.12615': attribute type 1 has an invalid length. [ 2254.482610][ T7885] Bluetooth: hci2: command 0x0406 tx timeout [ 2254.575002][T12753] bridge0: port 1(bridge_slave_0) entered blocking state [ 2254.604186][T12813] FAULT_INJECTION: forcing a failure. [ 2254.604186][T12813] name failslab, interval 1, probability 0, space 0, times 0 [ 2254.647476][T12813] CPU: 1 UID: 0 PID: 12813 Comm: syz.6.12618 Not tainted syzkaller #0 PREEMPT(full) [ 2254.647502][T12813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 2254.647512][T12813] Call Trace: [ 2254.647519][T12813] [ 2254.647527][T12813] dump_stack_lvl+0x100/0x190 [ 2254.647563][T12813] should_fail_ex.cold+0x5/0xa [ 2254.647588][T12813] ? tomoyo_realpath_from_path+0xb6/0x690 [ 2254.647611][T12813] should_failslab+0xc2/0x120 [ 2254.647629][T12813] __kmalloc_noprof+0xe0/0x850 [ 2254.647660][T12813] tomoyo_realpath_from_path+0xb6/0x690 [ 2254.647689][T12813] tomoyo_path_number_perm+0x23c/0x580 [ 2254.647707][T12813] ? tomoyo_path_number_perm+0x22e/0x580 [ 2254.647728][T12813] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2254.647771][T12813] ? find_held_lock+0x2b/0x80 [ 2254.647794][T12813] ? __fget_files+0x215/0x3d0 [ 2254.647813][T12813] ? hook_file_ioctl_common+0x146/0x410 [ 2254.647843][T12813] ? __fget_files+0x21f/0x3d0 [ 2254.647867][T12813] security_file_ioctl+0xd3/0x230 [ 2254.647891][T12813] __x64_sys_ioctl+0xb7/0x210 [ 2254.647919][T12813] do_syscall_64+0x106/0xf80 [ 2254.647938][T12813] ? clear_bhb_loop+0x40/0x90 [ 2254.647961][T12813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2254.647979][T12813] RIP: 0033:0x7fc99e39c799 [ 2254.647994][T12813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2254.648011][T12813] RSP: 002b:00007fc99f196028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2254.648029][T12813] RAX: ffffffffffffffda RBX: 00007fc99e616090 RCX: 00007fc99e39c799 [ 2254.648041][T12813] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 2254.648052][T12813] RBP: 00007fc99f196090 R08: 0000000000000000 R09: 0000000000000000 [ 2254.648063][T12813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2254.648073][T12813] R13: 00007fc99e616128 R14: 00007fc99e616090 R15: 00007fffce282b98 [ 2254.648098][T12813] [ 2254.648106][T12813] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2254.667934][T12753] bridge0: port 1(bridge_slave_0) entered disabled state [ 2254.860100][T12753] bridge_slave_0: entered allmulticast mode [ 2254.868619][T12753] bridge_slave_0: entered promiscuous mode [ 2254.911486][T12753] bridge0: port 2(bridge_slave_1) entered blocking state [ 2254.918680][T12753] bridge0: port 2(bridge_slave_1) entered disabled state [ 2254.926040][T12753] bridge_slave_1: entered allmulticast mode [ 2255.007845][ T29] audit: type=1400 audit(1773318129.602:1046): avc: denied { accept } for pid=12808 comm="syz.4.12617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2255.055924][T12753] bridge_slave_1: entered promiscuous mode [ 2255.183150][T12753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2255.255261][T12753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2255.461399][T12753] team0: Port device team_slave_0 added [ 2255.528946][T12753] team0: Port device team_slave_1 added [ 2255.576275][T14244] hsr_slave_0: left promiscuous mode [ 2255.635622][T14244] hsr_slave_1: left promiscuous mode [ 2255.650196][T14244] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2255.678259][T14244] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2255.761859][ T5814] Bluetooth: hci5: command tx timeout [ 2255.904182][T14244] team0 (unregistering): Port device team_slave_1 removed [ 2255.943127][T14244] team0 (unregistering): Port device team_slave_0 removed [ 2256.099501][T12753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2256.122420][T12753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2256.148711][T12753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2256.169784][T12753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2256.196137][T12753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2256.222973][T12753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2256.309402][T12753] hsr_slave_0: entered promiscuous mode [ 2256.333693][T12753] hsr_slave_1: entered promiscuous mode [ 2256.340357][T12753] debugfs: 'hsr0' already exists in 'hsr' [ 2256.346158][T12753] Cannot create hsr debugfs directory [ 2256.468309][T14244] IPVS: stop unused estimator thread 0... [ 2256.867784][T12753] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2256.883269][T12753] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2256.904397][T12753] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2256.915104][T12753] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2257.011751][T12753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2257.034054][T12753] 8021q: adding VLAN 0 to HW filter on device team0 [ 2257.047320][T14249] bridge0: port 1(bridge_slave_0) entered blocking state [ 2257.054540][T14249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2257.083830][T14249] bridge0: port 2(bridge_slave_1) entered blocking state [ 2257.091011][T14249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2257.288793][T12753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2257.289936][T12815] Bluetooth: hci6: Opcode 0x0c1a failed: -110 [ 2257.301982][ T5814] Bluetooth: hci6: command 0x0406 tx timeout [ 2257.537515][T12753] veth0_vlan: entered promiscuous mode [ 2257.549298][T12815] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2257.566287][T12753] veth1_vlan: entered promiscuous mode [ 2257.574921][T12815] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2257.594040][T12815] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2257.607414][T12753] veth0_macvtap: entered promiscuous mode [ 2257.610994][T12815] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2257.618593][T12753] veth1_macvtap: entered promiscuous mode [ 2257.627623][T12815] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2257.647980][T12753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2257.657161][T12815] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2257.665892][T12753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2257.673356][T12815] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2257.683853][T12815] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2257.703007][T12815] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2257.709428][ T9767] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2257.721121][T12815] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 2257.727115][ T9767] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2257.737828][ T9767] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2257.749099][T12815] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 2257.808393][ T9767] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2257.946670][T12902] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12621'. [ 2258.029420][T28760] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 2258.092332][ T1123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2258.102366][ T1123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2258.127053][T14249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2258.135371][T14249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2258.309111][T12905] block device autoloading is deprecated and will be removed. [ 2258.530668][ T5872] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 2258.555697][ T29] audit: type=1400 audit(1773318132.812:1047): avc: denied { write } for pid=12897 comm="syz.1.12622" name="file0" dev="tmpfs" ino=443 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2258.586760][ T29] audit: type=1400 audit(1773318133.032:1048): avc: denied { ioctl } for pid=12897 comm="syz.1.12622" path="/80/file0" dev="tmpfs" ino=443 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2258.617590][T28760] usb 3-1: device descriptor read/all, error -71 [ 2258.710191][ T5872] usb 5-1: Using ep0 maxpacket: 32 [ 2258.718598][ T5872] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 2258.733449][ T5872] usb 5-1: config 0 has no interface number 0 [ 2258.739747][ T5872] usb 5-1: config 0 interface 184 has no altsetting 0 [ 2258.761451][T12911] netlink: 1624 bytes leftover after parsing attributes in process `syz.5.12599'. [ 2258.771550][T12909] netlink: 'syz.2.12625': attribute type 72 has an invalid length. [ 2258.793250][T12913] FAULT_INJECTION: forcing a failure. [ 2258.793250][T12913] name failslab, interval 1, probability 0, space 0, times 0 [ 2258.807743][T12913] CPU: 0 UID: 0 PID: 12913 Comm: syz.6.12626 Not tainted syzkaller #0 PREEMPT(full) [ 2258.807766][T12913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 2258.807776][T12913] Call Trace: [ 2258.807782][T12913] [ 2258.807789][T12913] dump_stack_lvl+0x100/0x190 [ 2258.807823][T12913] should_fail_ex.cold+0x5/0xa [ 2258.807847][T12913] ? tomoyo_realpath_from_path+0xb6/0x690 [ 2258.807870][T12913] should_failslab+0xc2/0x120 [ 2258.807888][T12913] __kmalloc_noprof+0xe0/0x850 [ 2258.807917][T12913] tomoyo_realpath_from_path+0xb6/0x690 [ 2258.807946][T12913] tomoyo_path_number_perm+0x23c/0x580 [ 2258.807965][T12913] ? tomoyo_path_number_perm+0x22e/0x580 [ 2258.807985][T12913] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2258.808031][T12913] ? find_held_lock+0x2b/0x80 [ 2258.808054][T12913] ? __fget_files+0x215/0x3d0 [ 2258.808072][T12913] ? hook_file_ioctl_common+0x146/0x410 [ 2258.808102][T12913] ? __fget_files+0x21f/0x3d0 [ 2258.808131][T12913] security_file_ioctl+0xd3/0x230 [ 2258.808154][T12913] __x64_sys_ioctl+0xb7/0x210 [ 2258.808183][T12913] do_syscall_64+0x106/0xf80 [ 2258.808202][T12913] ? clear_bhb_loop+0x40/0x90 [ 2258.808224][T12913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2258.808241][T12913] RIP: 0033:0x7fc99e39c799 [ 2258.808256][T12913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2258.808274][T12913] RSP: 002b:00007fc99f1b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2258.808292][T12913] RAX: ffffffffffffffda RBX: 00007fc99e615fa0 RCX: 00007fc99e39c799 [ 2258.808304][T12913] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 2258.808315][T12913] RBP: 00007fc99f1b8090 R08: 0000000000000000 R09: 0000000000000000 [ 2258.808325][T12913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2258.808336][T12913] R13: 00007fc99e616038 R14: 00007fc99e615fa0 R15: 00007fffce282b98 [ 2258.808361][T12913] [ 2258.808787][ T5872] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2258.837412][T12913] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2258.873380][T12919] 9p: Bad value for 'rfdno' [ 2259.027202][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2259.035271][ T5872] usb 5-1: Product: syz [ 2259.039460][ T5872] usb 5-1: Manufacturer: syz [ 2259.044165][ T5872] usb 5-1: SerialNumber: syz [ 2259.058361][ T5872] usb 5-1: config 0 descriptor?? [ 2259.369980][ T5814] Bluetooth: hci2: command 0x0406 tx timeout [ 2259.600463][ T5814] Bluetooth: hci3: command 0x0c1a tx timeout [ 2259.680116][ T5814] Bluetooth: hci4: command 0x0c1a tx timeout [ 2259.690566][ T5872] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 2259.702145][ T5872] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2259.707022][T12934] FAULT_INJECTION: forcing a failure. [ 2259.707022][T12934] name failslab, interval 1, probability 0, space 0, times 0 [ 2259.724779][T12934] CPU: 1 UID: 0 PID: 12934 Comm: syz.5.12632 Not tainted syzkaller #0 PREEMPT(full) [ 2259.724803][T12934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 2259.724814][T12934] Call Trace: [ 2259.724821][T12934] [ 2259.724827][T12934] dump_stack_lvl+0x100/0x190 [ 2259.724860][T12934] should_fail_ex.cold+0x5/0xa [ 2259.724876][T12934] ? tomoyo_realpath_from_path+0xb6/0x690 [ 2259.724892][T12934] should_failslab+0xc2/0x120 [ 2259.724903][T12934] __kmalloc_noprof+0xe0/0x850 [ 2259.724921][T12934] tomoyo_realpath_from_path+0xb6/0x690 [ 2259.724948][T12934] tomoyo_path_number_perm+0x23c/0x580 [ 2259.724965][T12934] ? tomoyo_path_number_perm+0x22e/0x580 [ 2259.724985][T12934] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2259.725018][T12934] ? find_held_lock+0x2b/0x80 [ 2259.725032][T12934] ? __fget_files+0x215/0x3d0 [ 2259.725043][T12934] ? hook_file_ioctl_common+0x146/0x410 [ 2259.725061][T12934] ? __fget_files+0x21f/0x3d0 [ 2259.725086][T12934] security_file_ioctl+0xd3/0x230 [ 2259.725108][T12934] __x64_sys_ioctl+0xb7/0x210 [ 2259.725135][T12934] do_syscall_64+0x106/0xf80 [ 2259.725151][T12934] ? clear_bhb_loop+0x40/0x90 [ 2259.725172][T12934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2259.725188][T12934] RIP: 0033:0x7f6838f9c799 [ 2259.725204][T12934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2259.725220][T12934] RSP: 002b:00007f6839e27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2259.725238][T12934] RAX: ffffffffffffffda RBX: 00007f6839215fa0 RCX: 00007f6838f9c799 [ 2259.725249][T12934] RDX: 0000200000000040 RSI: 00000000c02064b2 RDI: 0000000000000003 [ 2259.725260][T12934] RBP: 00007f6839e27090 R08: 0000000000000000 R09: 0000000000000000 [ 2259.725270][T12934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2259.725280][T12934] R13: 00007f6839216038 R14: 00007f6839215fa0 R15: 00007ffd1c3e7d68 [ 2259.725297][T12934] [ 2259.725302][T12934] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2259.759993][ T5814] Bluetooth: hci5: command 0x0419 tx timeout [ 2259.935487][T28760] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 2259.986924][T12940] FAULT_INJECTION: forcing a failure. [ 2259.986924][T12940] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2260.000568][T12940] CPU: 0 UID: 0 PID: 12940 Comm: syz.5.12634 Not tainted syzkaller #0 PREEMPT(full) [ 2260.000599][T12940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 2260.000610][T12940] Call Trace: [ 2260.000616][T12940] [ 2260.000622][T12940] dump_stack_lvl+0x100/0x190 [ 2260.000659][T12940] should_fail_ex.cold+0x5/0xa [ 2260.000681][T12940] _copy_from_user+0x2e/0xd0 [ 2260.000708][T12940] move_addr_to_kernel+0x65/0x170 [ 2260.000734][T12940] __sys_sendto+0x1c9/0x4b0 [ 2260.000751][T12940] ? __pfx___sys_sendto+0x10/0x10 [ 2260.000787][T12940] ? ksys_write+0x1ac/0x250 [ 2260.000813][T12940] ? __pfx_ksys_write+0x10/0x10 [ 2260.000842][T12940] __x64_sys_sendto+0xe0/0x1c0 [ 2260.000857][T12940] ? do_syscall_64+0x95/0xf80 [ 2260.000876][T12940] ? lockdep_hardirqs_on+0x78/0x100 [ 2260.000894][T12940] do_syscall_64+0x106/0xf80 [ 2260.000911][T12940] ? clear_bhb_loop+0x40/0x90 [ 2260.000931][T12940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2260.000948][T12940] RIP: 0033:0x7f6838f9c799 [ 2260.000962][T12940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2260.000978][T12940] RSP: 002b:00007f6839e27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2260.000994][T12940] RAX: ffffffffffffffda RBX: 00007f6839215fa0 RCX: 00007f6838f9c799 [ 2260.001005][T12940] RDX: 000000000000fce0 RSI: 00002000000002c0 RDI: 0000000000000003 [ 2260.001015][T12940] RBP: 00007f6839e27090 R08: 0000200000000140 R09: 0000000000000014 [ 2260.001025][T12940] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 2260.001035][T12940] R13: 00007f6839216038 R14: 00007f6839215fa0 R15: 00007ffd1c3e7d68 [ 2260.001058][T12940] [ 2260.236024][T12944] netlink: 1624 bytes leftover after parsing attributes in process `syz.5.12637'. [ 2260.271702][T28760] usb 3-1: Using ep0 maxpacket: 16 [ 2260.283204][T28760] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2260.292322][T28760] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2260.302493][T28760] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2260.314266][T28760] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2260.323431][T28760] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2260.333532][T28760] usb 3-1: Product: syz [ 2260.337758][T28760] usb 3-1: Manufacturer: syz [ 2260.342437][T28760] usb 3-1: SerialNumber: syz [ 2260.395357][T12948] netlink: 'syz.6.12638': attribute type 72 has an invalid length. [ 2260.587528][T12953] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12639'. [ 2260.899982][ T5872] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 2260.960320][T28760] usb 3-1: 0:2 : does not exist [ 2260.966748][ T5872] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 2260.983406][ T5872] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 2260.993350][ T5872] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61 [ 2261.005211][ T5872] usb 5-1: USB disconnect, device number 46 [ 2261.257872][ T29] audit: type=1400 audit(1773318135.852:1049): avc: denied { ioctl } for pid=12960 comm="syz.5.12643" path="socket:[236452]" dev="sockfs" ino=236452 ioctlcmd=0x587e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 2261.440027][ T7885] Bluetooth: hci2: command 0x0406 tx timeout [ 2261.683518][ T7885] Bluetooth: hci3: command 0x0c1a tx timeout [ 2262.156270][ T7885] Bluetooth: hci4: command 0x0c1a tx timeout [ 2262.161652][T11691] Bluetooth: hci5: command 0x0419 tx timeout [ 2262.201018][T28760] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 2262.581228][T28760] usb 3-1: USB disconnect, device number 38 [ 2262.616063][T12591] udevd[12591]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2262.782587][T12995] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.12649'. [ 2263.605085][T13005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12653'. [ 2263.665888][T28760] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 2263.717683][T13008] FAULT_INJECTION: forcing a failure. [ 2263.717683][T13008] name failslab, interval 1, probability 0, space 0, times 0 [ 2263.784337][T13008] CPU: 0 UID: 0 PID: 13008 Comm: syz.6.12655 Not tainted syzkaller #0 PREEMPT(full) [ 2263.784365][T13008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 2263.784374][T13008] Call Trace: [ 2263.784380][T13008] [ 2263.784386][T13008] dump_stack_lvl+0x100/0x190 [ 2263.784418][T13008] should_fail_ex.cold+0x5/0xa [ 2263.784439][T13008] ? tomoyo_realpath_from_path+0xb6/0x690 [ 2263.784461][T13008] should_failslab+0xc2/0x120 [ 2263.784478][T13008] __kmalloc_noprof+0xe0/0x850 [ 2263.784507][T13008] tomoyo_realpath_from_path+0xb6/0x690 [ 2263.784533][T13008] tomoyo_path_number_perm+0x23c/0x580 [ 2263.784552][T13008] ? tomoyo_path_number_perm+0x22e/0x580 [ 2263.784573][T13008] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2263.784615][T13008] ? find_held_lock+0x2b/0x80 [ 2263.784638][T13008] ? __fget_files+0x215/0x3d0 [ 2263.784656][T13008] ? hook_file_ioctl_common+0x146/0x410 [ 2263.784687][T13008] ? __fget_files+0x21f/0x3d0 [ 2263.784709][T13008] security_file_ioctl+0xd3/0x230 [ 2263.784732][T13008] __x64_sys_ioctl+0xb7/0x210 [ 2263.784760][T13008] do_syscall_64+0x106/0xf80 [ 2263.784780][T13008] ? clear_bhb_loop+0x40/0x90 [ 2263.784803][T13008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2263.784819][T13008] RIP: 0033:0x7fc99e39c799 [ 2263.784834][T13008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2263.784849][T13008] RSP: 002b:00007fc99f1b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2263.784866][T13008] RAX: ffffffffffffffda RBX: 00007fc99e615fa0 RCX: 00007fc99e39c799 [ 2263.784877][T13008] RDX: 0000000000000000 RSI: 000000000000af02 RDI: 0000000000000003 [ 2263.784887][T13008] RBP: 00007fc99f1b8090 R08: 0000000000000000 R09: 0000000000000000 [ 2263.784897][T13008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2263.784906][T13008] R13: 00007fc99e616038 R14: 00007fc99e615fa0 R15: 00007fffce282b98 [ 2263.784929][T13008] [ 2263.784937][T13008] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2263.815833][T13011] netlink: 'syz.1.12656': attribute type 72 has an invalid length. [ 2263.860142][T28760] usb 5-1: Using ep0 maxpacket: 16 [ 2264.077487][T28760] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 2264.087883][T28760] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2264.097604][T28760] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2264.106089][T28760] usb 5-1: Product: syz [ 2264.111196][T28760] usb 5-1: Manufacturer: syz [ 2264.115809][T28760] usb 5-1: SerialNumber: syz [ 2264.144931][T28760] r8152-cfgselector 5-1: Unknown version 0x0000 [ 2264.154802][T28760] r8152-cfgselector 5-1: config 0 descriptor?? [ 2264.245414][ T5814] Bluetooth: hci4: command 0x0c1a tx timeout [ 2264.251725][T12971] Bluetooth: hci5: command 0x0419 tx timeout [ 2264.258015][T11691] Bluetooth: hci3: command 0x0c1a tx timeout [ 2264.859098][T13002] veth0: entered promiscuous mode [ 2265.200785][T13000] veth0: left promiscuous mode [ 2265.474019][T28760] r8152-cfgselector 5-1: Unknown version 0x0000 [ 2265.490159][T28760] r8152-cfgselector 5-1: bad CDC descriptors [ 2265.537581][T28760] r8152-cfgselector 5-1: USB disconnect, device number 47 [ 2265.837152][T13033] netlink: 'syz.6.12662': attribute type 2 has an invalid length. [ 2265.845107][T13033] netlink: 'syz.6.12662': attribute type 1 has an invalid length. [ 2266.239222][ T29] audit: type=1326 audit(1773318140.802:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13034 comm="syz.5.12663" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6838f9c799 code=0x0 [ 2266.333541][T11691] Bluetooth: hci5: command 0x0419 tx timeout [ 2267.203201][T13070] netlink: 'syz.2.12670': attribute type 25 has an invalid length. [ 2267.347635][T13070] netlink: 'syz.2.12670': attribute type 3 has an invalid length. [ 2267.439633][T13070] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12670'. [ 2267.469954][ T5914] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 2267.489961][ T1153] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 2267.818711][T13086] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 2267.889960][ T1153] usb 7-1: Using ep0 maxpacket: 8 [ 2267.895093][ T5914] usb 6-1: Using ep0 maxpacket: 16 [ 2267.902956][ T1153] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2267.925533][ T5914] usb 6-1: config 0 has no interfaces? [ 2267.932845][ T1153] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2267.961532][ T5914] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2267.979499][ T1153] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2267.986732][ T5914] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2268.002446][ T1153] pvrusb2: ********** [ 2268.006682][ T5914] usb 6-1: Manufacturer: syz [ 2268.011643][ T1153] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2268.023184][ T1153] pvrusb2: Important functionality might not be entirely working. [ 2268.034122][ T5914] usb 6-1: config 0 descriptor?? [ 2268.079651][ T1153] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2268.105344][ T1153] pvrusb2: ********** [ 2268.179309][ T2335] pvrusb2: Invalid write control endpoint [ 2268.360890][ T2335] pvrusb2: Invalid write control endpoint [ 2268.367337][ T2335] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2268.410996][T11691] Bluetooth: hci5: command 0x0419 tx timeout [ 2268.413081][ T2335] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2268.424893][ T2335] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2268.435203][T13100] netlink: 'syz.6.12671': attribute type 21 has an invalid length. [ 2268.465225][T13100] netlink: 156 bytes leftover after parsing attributes in process `syz.6.12671'. [ 2268.483697][ T2335] pvrusb2: Device being rendered inoperable [ 2268.499802][ T2335] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 2268.515533][ T2335] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 2268.522694][ T1153] usb 7-1: USB disconnect, device number 50 [ 2268.551834][ T2335] pvrusb2: Attached sub-driver cx25840 [ 2268.570537][ T2335] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2268.620653][ T2335] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2269.549951][T11199] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 2270.279964][T11199] usb 3-1: Using ep0 maxpacket: 32 [ 2270.313814][T11199] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2270.353807][T11199] usb 3-1: config 39 has an invalid interface number: 39 but max is 0 [ 2270.395424][T11199] usb 3-1: config 39 has no interface number 0 [ 2270.396868][T15587] usb 6-1: USB disconnect, device number 42 [ 2270.423229][T11199] usb 3-1: config 39 interface 39 altsetting 5 bulk endpoint 0x2 has invalid maxpacket 8 [ 2270.460211][T11199] usb 3-1: config 39 interface 39 has no altsetting 0 [ 2270.530117][T11199] usb 3-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=2f.47 [ 2270.557343][T11199] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2271.211922][T11199] usb 3-1: Product: syz [ 2271.229916][T11199] usb 3-1: Manufacturer: syz [ 2271.240003][T11199] usb 3-1: SerialNumber: syz [ 2271.308728][T13110] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2271.554329][T13110] netlink: 'syz.2.12680': attribute type 4 has an invalid length. [ 2271.598437][T13130] FAULT_INJECTION: forcing a failure. [ 2271.598437][T13130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2271.604515][T11199] usb 3-1: BOGUS urb xfer, pipe 1 != type 3 [ 2271.612243][T13130] CPU: 1 UID: 0 PID: 13130 Comm: syz.1.12687 Not tainted syzkaller #0 PREEMPT(full) [ 2271.612266][T13130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 2271.612276][T13130] Call Trace: [ 2271.612281][T13130] [ 2271.612287][T13130] dump_stack_lvl+0x100/0x190 [ 2271.612317][T13130] should_fail_ex.cold+0x5/0xa [ 2271.612339][T13130] _copy_to_user+0x32/0xd0 [ 2271.612363][T13130] simple_read_from_buffer+0xcb/0x170 [ 2271.612396][T13130] proc_fail_nth_read+0x1af/0x230 [ 2271.612419][T13130] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2271.612441][T13130] ? rw_verify_area+0xce/0x6d0 [ 2271.612462][T13130] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2271.612483][T13130] vfs_read+0x1e4/0xb30 [ 2271.612508][T13130] ? __pfx_vfs_read+0x10/0x10 [ 2271.612529][T13130] ? __fget_files+0x215/0x3d0 [ 2271.612551][T13130] ? __fget_files+0x21f/0x3d0 [ 2271.612573][T13130] ksys_read+0x12a/0x250 [ 2271.612595][T13130] ? __pfx_ksys_read+0x10/0x10 [ 2271.612624][T13130] do_syscall_64+0x106/0xf80 [ 2271.612641][T13130] ? clear_bhb_loop+0x40/0x90 [ 2271.612661][T13130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2271.612677][T13130] RIP: 0033:0x7f04fad5cfce [ 2271.612691][T13130] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2271.612705][T13130] RSP: 002b:00007f04fbd2efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2271.612720][T13130] RAX: ffffffffffffffda RBX: 00007f04fbd2f6c0 RCX: 00007f04fad5cfce [ 2271.612730][T13130] RDX: 000000000000000f RSI: 00007f04fbd2f0a0 RDI: 0000000000000005 [ 2271.612739][T13130] RBP: 00007f04fbd2f090 R08: 0000000000000000 R09: 0000000000000000 [ 2271.612748][T13130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2271.612758][T13130] R13: 00007f04fb016038 R14: 00007f04fb015fa0 R15: 00007ffc7294e448 [ 2271.612779][T13130] [ 2271.839132][ T29] audit: type=1400 audit(1773318146.432:1051): avc: denied { ioctl } for pid=13131 comm="syz.6.12688" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 2271.854340][T11199] (null): radio-mr800 - initialization failed [ 2271.870914][T11199] radio-mr800 3-1:39.39: probe with driver radio-mr800 failed with error -71 [ 2271.900772][T13135] FAULT_INJECTION: forcing a failure. [ 2271.900772][T13135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2271.934389][T13135] CPU: 0 UID: 0 PID: 13135 Comm: syz.1.12689 Not tainted syzkaller #0 PREEMPT(full) [ 2271.934416][T13135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 2271.934427][T13135] Call Trace: [ 2271.934434][T13135] [ 2271.934441][T13135] dump_stack_lvl+0x100/0x190 [ 2271.934476][T13135] should_fail_ex.cold+0x5/0xa [ 2271.934500][T13135] _copy_from_user+0x2e/0xd0 [ 2271.934528][T13135] move_addr_to_kernel+0x65/0x170 [ 2271.934555][T13135] __sys_sendto+0x1c9/0x4b0 [ 2271.934574][T13135] ? __pfx___sys_sendto+0x10/0x10 [ 2271.934612][T13135] ? ksys_write+0x1ac/0x250 [ 2271.934640][T13135] ? __pfx_ksys_write+0x10/0x10 [ 2271.934669][T13135] __x64_sys_sendto+0xe0/0x1c0 [ 2271.934686][T13135] ? do_syscall_64+0x95/0xf80 [ 2271.934705][T13135] ? lockdep_hardirqs_on+0x78/0x100 [ 2271.934725][T13135] do_syscall_64+0x106/0xf80 [ 2271.934743][T13135] ? clear_bhb_loop+0x40/0x90 [ 2271.934766][T13135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2271.934785][T13135] RIP: 0033:0x7f04fad9c799 [ 2271.934801][T13135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2271.934818][T13135] RSP: 002b:00007f04fbd2f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2271.934835][T13135] RAX: ffffffffffffffda RBX: 00007f04fb015fa0 RCX: 00007f04fad9c799 [ 2271.934847][T13135] RDX: 000000000000fce0 RSI: 00002000000002c0 RDI: 0000000000000003 [ 2271.934858][T13135] RBP: 00007f04fbd2f090 R08: 0000200000000140 R09: 0000000000000014 [ 2271.934868][T13135] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 2271.934884][T13135] R13: 00007f04fb016038 R14: 00007f04fb015fa0 R15: 00007ffc7294e448 [ 2271.934907][T13135] [ 2272.113958][T11199] usbhid 3-1:39.39: couldn't find an input interrupt endpoint [ 2272.124761][T11199] usb 3-1: USB disconnect, device number 39 [ 2272.160305][T15587] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 2272.374859][T15587] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2272.419709][T15587] usb 7-1: New USB device found, idVendor=046d, idProduct=c22e, bcdDevice= 0.00 [ 2272.433203][T15587] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2272.643448][T15587] usb 7-1: config 0 descriptor?? [ 2273.421064][T13156] netlink: 'syz.1.12693': attribute type 1 has an invalid length. [ 2273.422656][T15587] lg-g15 0003:046D:C22E.004F: unknown main item tag 0x0 [ 2273.536157][T15587] lg-g15 0003:046D:C22E.004F: unknown main item tag 0x0 [ 2273.598175][ T29] audit: type=1400 audit(1773318148.192:1052): avc: denied { listen } for pid=13149 comm="syz.5.12695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2273.626468][T15587] lg-g15 0003:046D:C22E.004F: unknown main item tag 0x0 [ 2273.628658][T13155] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12695'. [ 2273.641206][T15587] lg-g15 0003:046D:C22E.004F: unknown main item tag 0x0 [ 2273.655634][T13154] 9p: Bad value for 'rfdno' [ 2273.667554][T13155] bridge_slave_1: left allmulticast mode [ 2273.676142][T13155] bridge_slave_1: left promiscuous mode [ 2273.682673][T15587] lg-g15 0003:046D:C22E.004F: unknown main item tag 0x0 [ 2273.699432][T15587] lg-g15 0003:046D:C22E.004F: unknown main item tag 0x0 [ 2273.706978][T13155] bridge0: port 2(bridge_slave_1) entered disabled state [ 2273.726500][T15587] lg-g15 0003:046D:C22E.004F: item fetching failed at offset 9/235 [ 2273.749697][T13155] bridge_slave_0: left allmulticast mode [ 2273.757391][T15587] lg-g15 0003:046D:C22E.004F: probe with driver lg-g15 failed with error -22 [ 2273.766720][T13155] bridge_slave_0: left promiscuous mode [ 2273.776370][T15587] usb 7-1: USB disconnect, device number 51 [ 2273.782795][T13155] bridge0: port 1(bridge_slave_0) entered disabled state [ 2273.839291][T13165] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12695'. [ 2274.119967][T11454] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 2275.169935][T11454] usb 6-1: Using ep0 maxpacket: 8 [ 2275.696528][T11454] usb 6-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 2275.721179][T11454] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2275.756644][T11454] usb 6-1: Product: syz [ 2275.769894][T11454] usb 6-1: Manufacturer: syz [ 2275.774534][T11454] usb 6-1: SerialNumber: syz [ 2275.802589][T11454] usb 6-1: config 0 descriptor?? [ 2275.836588][T11454] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 2275.886927][T11454] pctv452e: pctv452e_power_ctrl: 1 [ 2275.886927][T11454] [ 2275.933581][T11454] usb 6-1: selecting invalid altsetting 3 [ 2275.939347][T11454] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 2275.939347][T11454] [ 2276.054237][T11454] dvb-usb: bulk message failed: -22 (5/0) [ 2276.093999][T11454] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2276.307973][T11454] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 2276.389443][T11454] usb 6-1: media controller created [ 2276.408157][T11454] dvb-usb: bulk message failed: -22 (8/0) [ 2276.431684][T11454] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 2276.494245][T11454] dvb-usb: MAC address reading failed. [ 2276.567370][T11454] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2276.987996][T13218] input: syz1 as /devices/virtual/input/input141 [ 2277.388940][T11454] DVB: Unable to find symbol stb0899_attach() [ 2277.629030][T13206] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 2277.629918][T11454] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 2277.683025][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2277.690221][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2277.910379][T11454] rc_core: IR keymap rc-tt-1500 not found [ 2278.607217][T11454] Registered IR keymap rc-empty [ 2278.618271][T11454] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 2278.653298][T11454] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input142 [ 2278.701795][T11454] dvb-usb: schedule remote query interval to 100 msecs. [ 2278.708804][T11454] pctv452e: pctv452e_power_ctrl: 0 [ 2278.708804][T11454] [ 2278.862248][ T5806] dvb-usb: bulk message failed: -22 (4/0) [ 2278.941254][ T29] audit: type=1800 audit(1773318153.432:1053): pid=13208 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.12708" name="bus" dev="overlay" ino=411 res=0 errno=0 [ 2278.988377][T11454] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 2279.012631][ T5806] dvb-usb: error -22 while querying for an remote control event. [ 2279.054058][T11454] usb 6-1: USB disconnect, device number 43 [ 2279.340336][T11454] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 2281.036657][T13271] xt_hashlimit: max too large, truncated to 1048576 [ 2281.603166][T13275] netlink: 4804 bytes leftover after parsing attributes in process `syz.6.12732'. [ 2281.673181][T13275] netlink: 4804 bytes leftover after parsing attributes in process `syz.6.12732'. [ 2281.824842][T13279] x_tables: duplicate underflow at hook 1 [ 2282.703981][ T29] audit: type=1400 audit(1773318157.292:1054): avc: denied { setopt } for pid=13286 comm="syz.6.12738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 2283.307808][ T29] audit: type=1400 audit(1773318157.902:1055): avc: denied { ioctl } for pid=13298 comm="syz.5.12742" path="socket:[238169]" dev="sockfs" ino=238169 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2283.920553][T13313] syzkaller0: entered promiscuous mode [ 2283.951078][T13313] syzkaller0: entered allmulticast mode [ 2284.077718][T13313] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12749'. [ 2284.087128][T13313] netlink: 356 bytes leftover after parsing attributes in process `syz.5.12749'. [ 2284.713422][T13326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2284.734854][T13326] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2285.231571][T13336] syzkaller1: entered promiscuous mode [ 2285.257094][T13336] syzkaller1: entered allmulticast mode [ 2285.616109][T13348] syzkaller0: entered promiscuous mode [ 2285.652403][T13348] syzkaller0: entered allmulticast mode [ 2286.111724][T13360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12764'. [ 2286.673433][T13372] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12770'. [ 2286.695739][T13376] netlink: 165 bytes leftover after parsing attributes in process `syz.1.12769'. [ 2286.707887][T13372] netlink: 312 bytes leftover after parsing attributes in process `syz.5.12770'. [ 2287.189174][T13389] syzkaller0: entered promiscuous mode [ 2287.195067][T13389] syzkaller0: entered allmulticast mode [ 2288.376475][T13417] syzkaller0: entered promiscuous mode [ 2288.420298][T13417] syzkaller0: entered allmulticast mode [ 2288.825611][T13428] bond0: (slave bond_slave_0): Releasing backup interface [ 2289.068539][T13428] bond0: (slave bond_slave_1): Releasing backup interface [ 2289.098174][T13428] team0: Port device team_slave_0 removed [ 2289.180134][T13438] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12789'. [ 2289.189445][T13438] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12789'. [ 2289.555341][T13428] team0: Port device team_slave_1 removed [ 2289.573873][T13428] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2289.608102][T13438] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12789'. [ 2289.617354][T13438] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12789'. [ 2289.643227][T13428] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2289.674945][T13428] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2289.706747][T13428] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2289.755727][T13428] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2290.499183][T13462] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12799'. [ 2290.826486][T13472] lo speed is unknown, defaulting to 1000 [ 2290.832668][T13472] lo speed is unknown, defaulting to 1000 [ 2290.840508][T13472] lo speed is unknown, defaulting to 1000 [ 2290.900700][T13472] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 2291.107261][T13472] lo speed is unknown, defaulting to 1000 [ 2291.121729][T13472] lo speed is unknown, defaulting to 1000 [ 2291.136115][T13472] lo speed is unknown, defaulting to 1000 [ 2291.150371][T13472] lo speed is unknown, defaulting to 1000 [ 2291.156887][T13472] lo speed is unknown, defaulting to 1000 [ 2291.163303][T13472] lo speed is unknown, defaulting to 1000 [ 2292.092965][T13505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12812'. [ 2292.148461][T11454] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 2292.280039][T10484] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 2292.308378][T11454] usb 3-1: config 0 has no interfaces? [ 2292.319313][T11454] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 2292.350003][T11454] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2292.368260][T11454] usb 3-1: Manufacturer: syz [ 2292.379089][T11454] usb 3-1: config 0 descriptor?? [ 2292.460064][T10484] usb 2-1: Using ep0 maxpacket: 16 [ 2292.472930][T10484] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 2292.490137][T10484] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2292.506894][T10484] usb 2-1: Product: syz [ 2292.518420][T10484] usb 2-1: Manufacturer: syz [ 2292.526595][T10484] usb 2-1: SerialNumber: syz [ 2292.533149][T10484] usb 2-1: config 0 descriptor?? [ 2292.957423][T10484] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 2292.969964][T10484] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2292.987859][T10484] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 2292.997176][T10484] usb 2-1: media controller created [ 2293.115265][T10484] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2293.136755][T13522] program syz.5.12818 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2293.590008][ T5806] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 2293.670110][T10484] zl10353_read_register: readreg error (reg=127, ret==0) [ 2293.677236][T10484] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 2293.686184][T10484] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 2293.697183][T10484] usb 2-1: USB disconnect, device number 31 [ 2293.728313][T10484] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 2293.740221][ T5806] usb 5-1: Using ep0 maxpacket: 32 [ 2293.747096][ T5806] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2293.765304][ T5806] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2293.776930][ T5806] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2293.785875][ T5806] usb 5-1: Product: syz [ 2293.790330][ T5806] usb 5-1: Manufacturer: syz [ 2293.795035][ T5806] usb 5-1: SerialNumber: syz [ 2293.801943][ T5806] usb 5-1: config 0 descriptor?? [ 2293.813359][ T5806] hub 5-1:0.0: bad descriptor, ignoring hub [ 2293.819299][ T5806] hub 5-1:0.0: probe with driver hub failed with error -5 [ 2293.952250][T13537] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12825'. [ 2294.424292][T13552] bridge0: port 2(bridge_slave_1) entered disabled state [ 2294.431701][T13552] bridge0: port 1(bridge_slave_0) entered disabled state [ 2294.479810][T13552] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2294.489664][T13552] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2294.582695][ T9767] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2294.592109][ T9767] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2294.606489][ T9767] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2294.626923][ T9767] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2295.434120][ T5806] usb 3-1: USB disconnect, device number 40 [ 2295.674771][T13549] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2295.727868][ T1153] lo speed is unknown, defaulting to 1000 [ 2295.737966][ T1153] syz0: Port: 1 Link ACTIVE [ 2297.455672][ T1153] usb 5-1: USB disconnect, device number 48 [ 2297.893158][T13581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12837'. [ 2298.152372][T13591] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2298.188376][T13591] overlayfs: missing 'lowerdir' [ 2298.446031][ T29] audit: type=1800 audit(1773318173.032:1056): pid=13593 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.12841" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=240866 res=0 errno=0 [ 2298.610771][ T1153] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 2298.748856][T13590] lo speed is unknown, defaulting to 1000 [ 2298.819926][ T1153] usb 3-1: Using ep0 maxpacket: 8 [ 2298.854922][ T1153] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 2298.873321][ T1153] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 2298.942835][ T1153] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2298.960513][T13603] netlink: 'syz.5.12843': attribute type 1 has an invalid length. [ 2298.981260][ T1153] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 2299.000338][ T1153] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2299.015203][ T1153] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2299.044923][ T1153] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2299.056296][ T1153] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2299.069986][T11454] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 2299.179361][T13603] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2299.233112][T11454] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2299.263447][T11454] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 2299.294387][ T1153] usb 3-1: usb_control_msg returned -32 [ 2299.304490][ T1153] usbtmc 3-1:16.0: can't read capabilities [ 2299.432405][T11454] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2299.468982][T11454] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2299.541437][T11454] usb 2-1: SerialNumber: syz [ 2299.606579][T11454] cdc_mbim 2-1:1.0: CDC Union missing and no IAD found [ 2299.659324][T11454] cdc_mbim 2-1:1.0: bind() failure [ 2299.667651][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 2299.679392][T13616] usbtmc 3-1:16.0: Unable to send data, error -71 [ 2299.691069][T13616] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 2301.400029][T11454] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 2301.559949][T11454] usb 5-1: Using ep0 maxpacket: 8 [ 2301.570978][T11454] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 2301.580671][T11454] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 2301.596134][T11454] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2301.615791][T11454] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 2301.627968][T11454] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2301.638517][T11454] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2301.687818][T11454] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2301.704148][T11454] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2301.862635][T10484] usb 3-1: USB disconnect, device number 41 [ 2301.921929][T13644] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2301.933922][T11454] usb 5-1: usb_control_msg returned -32 [ 2301.946314][T11454] usbtmc 5-1:16.0: can't read capabilities [ 2301.979998][ T1153] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 2302.139921][ T1153] usb 6-1: Using ep0 maxpacket: 32 [ 2302.152210][ T1153] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 2302.164148][ T1153] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2302.179490][T13651] trusted_key: encrypted_key: insufficient parameters specified [ 2302.190186][ T1153] usb 6-1: config 0 descriptor?? [ 2302.208316][ T1153] as10x_usb: device has been detected [ 2302.243471][ T1153] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 2302.272433][ T1153] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 2302.356371][T14895] usb 2-1: USB disconnect, device number 32 [ 2302.409318][ T1153] as10x_usb: error during firmware upload part1 [ 2302.429317][ T1153] Registered device nBox DVB-T Dongle [ 2303.482737][ T29] audit: type=1400 audit(1773318178.082:1057): avc: denied { append } for pid=13661 comm="syz.2.12860" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2303.515142][T13665] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12859'. [ 2303.534536][T13665] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12859'. [ 2303.544148][T13665] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12859'. [ 2303.554074][T13665] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12859'. [ 2304.230184][ T1153] usb 5-1: USB disconnect, device number 49 [ 2304.507221][T13681] syzkaller0: entered promiscuous mode [ 2304.516361][T13681] syzkaller0: entered allmulticast mode [ 2304.923275][ T1153] usb 6-1: USB disconnect, device number 44 [ 2304.955420][ T1153] Unregistered device nBox DVB-T Dongle [ 2304.971737][ T1153] as10x_usb: device has been disconnected [ 2306.960176][ T1153] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 2307.034914][T13718] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12876'. [ 2307.100088][T11454] usb 6-1: new low-speed USB device number 45 using dummy_hcd [ 2307.121029][ T1153] usb 5-1: device descriptor read/64, error -71 [ 2307.149989][T10484] usb 7-1: new full-speed USB device number 52 using dummy_hcd [ 2307.282144][T11454] usb 6-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 2307.313638][T11454] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 2307.337530][T10484] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2307.379940][ T1153] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 2307.388075][T11454] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 2307.398822][T10484] usb 7-1: not running at top speed; connect to a high speed hub [ 2307.421702][T10484] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 2307.433895][T11454] usb 6-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 2307.466413][T10484] usb 7-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 2307.496807][T11454] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2307.506087][T10484] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2307.550680][ T1153] usb 5-1: device descriptor read/64, error -71 [ 2307.564404][T10484] usb 7-1: Product: syz [ 2307.576281][T10484] usb 7-1: Manufacturer: syz [ 2307.586332][T10484] usb 7-1: SerialNumber: syz [ 2307.670158][ T1153] usb usb5-port1: attempt power cycle [ 2307.812982][T11454] usb 6-1: string descriptor 0 read error: -71 [ 2307.870784][T10484] usb 7-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 2307.879245][T10484] usb 7-1: found format II with max.bitrate = 512, frame size=4095 [ 2307.938625][T10484] usb 7-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 2307.952696][T10484] usb 7-1: found format II with max.bitrate = 512, frame size=4095 [ 2307.972148][T10484] usb 7-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 2308.012173][ T1153] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 2308.050651][ T1153] usb 5-1: device descriptor read/8, error -71 [ 2308.061442][T10484] usb 7-1: USB disconnect, device number 52 [ 2308.107045][T11454] usb 6-1: USB disconnect, device number 45 [ 2308.187810][T13727] udevd[13727]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2308.310012][ T1153] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 2308.334389][ T1153] usb 5-1: device descriptor read/8, error -71 [ 2308.457305][T13733] hub 9-0:1.0: USB hub found [ 2308.460271][ T1153] usb usb5-port1: unable to enumerate USB device [ 2308.472562][T13733] hub 9-0:1.0: 1 port detected [ 2308.607756][T13742] lo speed is unknown, defaulting to 1000 [ 2309.648069][T13756] raw_sendmsg: syz.6.12889 forgot to set AF_INET. Fix it! [ 2310.030195][T11454] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 2310.201443][T11454] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 2310.222109][T11454] usb 7-1: config 0 has no interface number 0 [ 2310.247469][T11454] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2310.267372][T11454] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2310.283145][T11454] usb 7-1: Product: syz [ 2310.294659][T11454] usb 7-1: Manufacturer: syz [ 2310.898801][T11454] usb 7-1: SerialNumber: syz [ 2311.103919][T11454] usb 7-1: config 0 descriptor?? [ 2311.352378][T11454] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 2311.363629][T11454] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2311.550372][T11454] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 2311.553349][T13760] usb 7-1: dvb_usb_ec168: I2C read not implemented [ 2311.558426][T11454] usb 7-1: media controller created [ 2311.566000][T11454] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2311.968930][T11454] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 2312.063645][T11454] usb 7-1: USB disconnect, device number 53 [ 2312.586282][T13815] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 2313.430909][T13212] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 2313.747586][T13212] usb 3-1: Using ep0 maxpacket: 8 [ 2313.765071][T13212] usb 3-1: config 0 has no interfaces? [ 2313.773980][T13212] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2313.787487][T13212] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2313.802613][T13212] usb 3-1: config 0 descriptor?? [ 2314.069605][T13835] kernel profiling enabled (shift: 6) [ 2314.287895][T13836] input: syz0 as /devices/virtual/input/input144 [ 2314.347867][ T29] audit: type=1400 audit(1773318188.942:1058): avc: denied { write } for pid=13834 comm="syz.5.12911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 2314.619914][T14895] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 2314.760034][T13212] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 2314.770114][T14895] usb 6-1: Using ep0 maxpacket: 32 [ 2314.778245][T14895] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 2314.790427][T14895] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 2314.805200][T14895] usb 6-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 2314.818641][T14895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2314.827220][T14895] usb 6-1: Product: syz [ 2314.832650][T14895] usb 6-1: Manufacturer: syz [ 2314.851819][T14895] usb 6-1: SerialNumber: syz [ 2314.867080][T14895] usb 6-1: config 0 descriptor?? [ 2314.876476][T14895] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2314.911554][T13212] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2314.919792][T13212] usb 2-1: config 0 has no interface number 0 [ 2314.928355][T13212] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2314.938855][T13212] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2314.956011][T13212] usb 2-1: Product: syz [ 2314.962935][T13212] usb 2-1: Manufacturer: syz [ 2314.967567][T13212] usb 2-1: SerialNumber: syz [ 2314.998661][T13212] usb 2-1: config 0 descriptor?? [ 2315.088644][T14895] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 2315.199765][T14895] usb 6-1: USB disconnect, device number 46 [ 2315.215650][T13212] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 2315.229194][T13449] udevd[13449]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2315.264015][T13212] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2315.297909][T13212] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 2315.322840][T13212] usb 2-1: media controller created [ 2315.350168][T13212] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2315.420789][T13212] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 2315.504269][T13212] usb 2-1: USB disconnect, device number 33 [ 2315.924688][T13213] usb 3-1: USB disconnect, device number 42 [ 2315.992289][T13863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12922'. [ 2316.058215][T13865] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12923'. [ 2316.140008][T11454] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 2316.164284][T13865] geneve2: entered promiscuous mode [ 2316.231936][ T63] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2316.268859][ T63] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2316.285365][ T63] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2316.325119][T11454] usb 6-1: config 0 has an invalid interface number: 158 but max is 1 [ 2316.327826][ T63] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2316.377769][T11454] usb 6-1: config 0 has an invalid interface number: 239 but max is 1 [ 2316.386643][T13213] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 2316.435111][T11454] usb 6-1: config 0 has no interface number 0 [ 2316.475114][T11454] usb 6-1: config 0 has no interface number 1 [ 2316.517394][T11454] usb 6-1: config 0 interface 158 has no altsetting 0 [ 2316.606939][T11454] usb 6-1: config 0 interface 239 has no altsetting 0 [ 2316.631022][T13213] usb 5-1: Using ep0 maxpacket: 8 [ 2316.652927][T11454] usb 6-1: New USB device found, idVendor=041e, idProduct=401d, bcdDevice= 3.d9 [ 2316.702676][T11454] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2316.732681][T11454] usb 6-1: Product: syz [ 2316.739125][T13213] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 2316.833462][ T29] audit: type=1800 audit(1773318191.422:1059): pid=13882 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.12929" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=241631 res=0 errno=0 [ 2316.903605][T11454] usb 6-1: Manufacturer: syz [ 2316.912925][T13213] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 2316.939414][T13885] lo speed is unknown, defaulting to 1000 [ 2316.947898][T11454] usb 6-1: SerialNumber: syz [ 2316.973511][T11454] usb 6-1: config 0 descriptor?? [ 2316.979225][T13213] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2317.021805][T13213] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 2317.082459][T13213] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2317.113678][T13213] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2317.129991][T13213] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2317.162721][T13213] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2317.432486][T13213] usb 5-1: usb_control_msg returned -32 [ 2317.438584][T13859] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12920'. [ 2317.579924][T13213] usbtmc 5-1:16.0: can't read capabilities [ 2318.809968][T13212] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 2318.961406][T13212] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 2319.050089][T13212] usb 7-1: config 0 has no interface number 0 [ 2319.078174][T13212] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2319.087538][T13212] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2319.100520][T13212] usb 7-1: Product: syz [ 2319.105107][T13212] usb 7-1: Manufacturer: syz [ 2319.109712][T13212] usb 7-1: SerialNumber: syz [ 2319.128211][T13212] usb 7-1: config 0 descriptor?? [ 2319.137047][T13906] netlink: 52 bytes leftover after parsing attributes in process `syz.1.12936'. [ 2319.214865][T11454] usb 6-1: bad CDC descriptors [ 2319.234803][T11454] usb 6-1: USB disconnect, device number 47 [ 2319.407109][ T5806] usb 5-1: USB disconnect, device number 54 [ 2319.467880][T13212] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 2319.510320][T13212] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2319.567107][T13212] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 2319.802841][T13212] usb 7-1: media controller created [ 2319.838544][T13212] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2319.869940][ T5806] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 2319.913646][T13212] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 2320.035054][T13212] usb 7-1: USB disconnect, device number 54 [ 2320.081340][T13917] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12940'. [ 2320.096155][ T5806] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 2320.119094][ T5806] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2320.174335][ T5806] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2320.190204][ T5806] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2320.219572][ T5806] usb 5-1: Manufacturer: syz [ 2320.232043][ T5806] usb 5-1: config 0 descriptor?? [ 2320.369955][ T5806] rc_core: IR keymap rc-hauppauge not found [ 2320.395997][ T5806] Registered IR keymap rc-empty [ 2320.421436][ T5806] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 2320.455402][ T5806] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input145 [ 2320.798501][ T29] audit: type=1400 audit(1773318195.382:1060): avc: denied { append } for pid=13931 comm="syz.1.12947" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2320.972494][ T29] audit: type=1400 audit(1773318195.492:1061): avc: denied { setopt } for pid=13931 comm="syz.1.12947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 2321.287331][T13946] vimc link validate: Scaler:src:16x16 (0x33424752, 12, 0, 4, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2321.617375][ T5806] usb 5-1: USB disconnect, device number 55 [ 2321.686952][T13949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12951'. [ 2321.745480][T13949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12951'. [ 2321.785074][T13949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12951'. [ 2321.831647][T13949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12951'. [ 2322.310278][ T5806] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 2322.382596][T11454] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 2322.492663][ T5806] usb 6-1: config 0 has no interfaces? [ 2322.498391][ T5806] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2322.507588][ T5806] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2322.551957][T11454] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2322.563178][T11454] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2322.656515][ T29] audit: type=1400 audit(1773318197.242:1062): avc: denied { read } for pid=13970 comm="syz.4.12959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 2322.678814][ T5806] usb 6-1: config 0 descriptor?? [ 2322.699484][T11454] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2322.716440][ T29] audit: type=1400 audit(1773318197.292:1063): avc: denied { ioctl } for pid=13970 comm="syz.4.12959" path="socket:[242824]" dev="sockfs" ino=242824 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 2322.751752][T11454] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2322.775274][T11454] usb 2-1: config 0 descriptor?? [ 2322.831789][T11454] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 2322.849069][T11454] dvb-usb: bulk message failed: -22 (3/0) [ 2322.864241][T11454] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 2322.877981][T11454] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 2322.913913][T11454] usb 2-1: media controller created [ 2322.941699][T11454] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2322.982481][T11454] dvb-usb: bulk message failed: -22 (6/0) [ 2322.993245][T11454] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 2323.016365][T11454] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input146 [ 2323.032864][T13953] dvb-usb: bulk message failed: -22 (2/0) [ 2323.063883][T11454] dvb-usb: schedule remote query interval to 150 msecs. [ 2323.078594][T11454] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 2323.105559][T11454] usb 2-1: USB disconnect, device number 34 [ 2323.142775][T11454] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 2323.395747][T13988] syzkaller0: entered promiscuous mode [ 2323.417818][T13988] syzkaller0: entered allmulticast mode [ 2323.466411][T13212] usb 6-1: USB disconnect, device number 48 [ 2324.109918][T11454] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 2324.120635][T13212] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 2324.338861][T13212] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 2324.347514][T13212] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2324.368486][T11454] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2324.377180][T11454] usb 2-1: config 0 has no interface number 0 [ 2324.378571][T13212] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2324.439957][T13212] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2324.467109][T13212] usb 7-1: Manufacturer: syz [ 2324.503334][T13212] usb 7-1: config 0 descriptor?? [ 2324.565530][T11454] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2324.577458][T11454] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2324.586175][T11454] usb 2-1: Product: syz [ 2324.592384][T11454] usb 2-1: Manufacturer: syz [ 2324.599983][T13212] rc_core: IR keymap rc-hauppauge not found [ 2324.599987][T11454] usb 2-1: SerialNumber: syz [ 2324.612595][T13212] Registered IR keymap rc-empty [ 2324.622792][T13212] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 2324.635762][T11454] usb 2-1: config 0 descriptor?? [ 2324.658376][T13212] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input147 [ 2324.853607][T11454] dvb_usb_ec168 2-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 2324.909304][T11454] usb 2-1: USB disconnect, device number 35 [ 2324.931837][T14024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12975'. [ 2324.959748][T14024] vlan0: entered allmulticast mode [ 2324.968653][T14024] veth0_vlan: entered allmulticast mode [ 2325.023494][T14024] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 2325.207146][T11454] usb 7-1: USB disconnect, device number 55 [ 2325.707141][ T29] audit: type=1400 audit(1773318200.302:1064): avc: denied { getopt } for pid=14039 comm="syz.5.12981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2325.904785][T14053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12985'. [ 2326.204401][T14064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12988'. [ 2326.214785][T14064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12988'. [ 2326.224673][T14064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12988'. [ 2326.234223][T14064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12988'. [ 2327.100568][T13212] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 2327.267896][T13212] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 2327.276076][T13212] usb 6-1: config 0 has no interface number 0 [ 2327.284002][T13212] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2327.293428][T13212] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2327.337267][T13212] usb 6-1: Product: syz [ 2327.353535][T13212] usb 6-1: Manufacturer: syz [ 2327.400971][T13212] usb 6-1: SerialNumber: syz [ 2327.531711][T13212] usb 6-1: config 0 descriptor?? [ 2327.805180][T13212] dvb_usb_ec168 6-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 2327.979317][T13212] usb 6-1: USB disconnect, device number 49 [ 2328.029990][T10176] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 2328.090609][T14089] netlink: 'syz.4.12996': attribute type 1 has an invalid length. [ 2328.176702][T14089] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2328.214794][T10176] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 2328.223737][T10176] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2328.236098][T10176] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2328.245926][T10176] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2328.258889][T10176] usb 3-1: Manufacturer: syz [ 2328.273281][T14090] bond1: (slave veth3): Enslaving as an active interface with a down link [ 2328.300240][T10176] usb 3-1: config 0 descriptor?? [ 2328.369889][T10176] rc_core: IR keymap rc-hauppauge not found [ 2328.376294][T10176] Registered IR keymap rc-empty [ 2328.382816][T10176] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 2328.394781][T10176] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input148 [ 2328.515039][ T5806] usb 3-1: USB disconnect, device number 43 [ 2328.731298][T11454] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 2328.904160][T11454] usb 6-1: config 0 has no interfaces? [ 2328.910112][T11454] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2328.919226][T11454] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2328.932422][T11454] usb 6-1: config 0 descriptor?? [ 2329.480000][T10176] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 2329.649911][T10176] usb 3-1: Using ep0 maxpacket: 16 [ 2329.656531][T10176] usb 3-1: config 0 has no interfaces? [ 2329.670760][T10176] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2329.694838][T10176] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2329.716176][T10176] usb 3-1: Product: syz [ 2329.728728][T10176] usb 3-1: Manufacturer: syz [ 2329.748922][T10176] usb 3-1: SerialNumber: syz [ 2329.762584][T11454] usb 6-1: USB disconnect, device number 50 [ 2329.762815][T10176] usb 3-1: config 0 descriptor?? [ 2330.172090][T14118] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 2331.036112][T14127] team0: entered promiscuous mode [ 2331.041825][T14127] team_slave_0: entered promiscuous mode [ 2331.048877][T14127] team_slave_1: entered promiscuous mode [ 2331.057490][T14127] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 2331.143028][T14127] team0: left promiscuous mode [ 2331.176232][T14127] team_slave_0: left promiscuous mode [ 2331.210072][T14127] team_slave_1: left promiscuous mode [ 2331.260044][T10176] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 2331.397667][ T29] audit: type=1400 audit(1773318205.992:1065): avc: denied { create } for pid=14130 comm="syz.5.13011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 2331.451637][T10176] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 2331.459782][T10176] usb 5-1: config 0 has no interface number 0 [ 2331.467890][T10176] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2331.477199][T10176] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2331.485677][T10176] usb 5-1: Product: syz [ 2331.489912][T10176] usb 5-1: Manufacturer: syz [ 2331.494511][T10176] usb 5-1: SerialNumber: syz [ 2331.501131][T10176] usb 5-1: config 0 descriptor?? [ 2331.559970][T13212] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 2331.579988][T11454] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 2331.711126][T10176] dvb_usb_ec168 5-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 2331.721411][T13212] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 2331.730683][T13212] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2331.741077][T10176] usb 5-1: USB disconnect, device number 56 [ 2331.748989][T11454] usb 2-1: config 0 has no interfaces? [ 2331.761033][T11454] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2331.770677][T11454] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2331.780418][T13212] usb 7-1: config 0 descriptor?? [ 2331.794160][T11454] usb 2-1: config 0 descriptor?? [ 2332.033095][T10176] usb 2-1: USB disconnect, device number 36 [ 2332.526959][T10176] usb 3-1: USB disconnect, device number 44 [ 2332.721588][T14150] lo speed is unknown, defaulting to 1000 [ 2332.899963][T10176] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 2333.050138][T10176] usb 3-1: Using ep0 maxpacket: 16 [ 2333.058223][T10176] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 2333.072545][T10176] usb 3-1: config 0 has no interface number 0 [ 2333.179904][T10176] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2333.211735][T10176] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2333.232591][T10176] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2333.249878][T10176] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2333.279960][T10176] usb 3-1: Product: syz [ 2333.298603][T10176] usb 3-1: SerialNumber: syz [ 2333.320511][T10176] usb 3-1: config 0 descriptor?? [ 2333.331791][T10176] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 2333.349811][T10176] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input149 [ 2333.550558][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2333.551235][T11454] usb 3-1: USB disconnect, device number 45 [ 2333.557847][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 2333.584860][T11454] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 2334.674499][T14173] netlink: 400 bytes leftover after parsing attributes in process `syz.1.13023'. [ 2334.793161][T13212] usb 7-1: Cannot set autoneg [ 2334.798199][T13212] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 2334.842154][T13212] usb 7-1: USB disconnect, device number 56 [ 2335.362582][T14182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2335.387899][T14182] 8021q: adding VLAN 0 to HW filter on device team0 [ 2335.644731][T14182] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2336.288150][T13212] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 2336.563774][T13212] usb 5-1: config 0 has no interfaces? [ 2336.570150][T13212] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2336.614174][T13212] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2336.636089][T13212] usb 5-1: config 0 descriptor?? [ 2336.881364][T13213] usb 5-1: USB disconnect, device number 57 [ 2337.037110][T14209] input: syz0 as /devices/virtual/input/input150 [ 2337.200353][T13213] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 2337.289401][T13212] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 2337.359912][T13213] usb 6-1: Using ep0 maxpacket: 16 [ 2337.367201][T13213] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 2337.376840][T13213] usb 6-1: config 0 has no interface number 0 [ 2337.387685][T13213] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2337.405839][T13213] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2337.428775][T13213] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2337.559929][T13213] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2337.559964][T13212] usb 7-1: Using ep0 maxpacket: 32 [ 2337.582292][T13213] usb 6-1: Product: syz [ 2337.588394][T13213] usb 6-1: SerialNumber: syz [ 2337.602964][T13213] usb 6-1: config 0 descriptor?? [ 2337.609687][T13212] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 2337.631539][T13213] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 2337.648955][T13212] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 2337.662477][T13213] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input151 [ 2337.683224][T13212] usb 7-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 2337.695749][T13212] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2337.709395][T13212] usb 7-1: Product: syz [ 2337.714233][T13212] usb 7-1: Manufacturer: syz [ 2337.721042][T13212] usb 7-1: SerialNumber: syz [ 2337.740366][T13212] usb 7-1: config 0 descriptor?? [ 2337.773650][T13212] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 2337.832627][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2337.833510][ T5914] usb 6-1: USB disconnect, device number 51 [ 2337.839608][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 2337.870152][ T5914] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 2337.947712][T13212] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 2337.985963][T13212] usb 7-1: USB disconnect, device number 57 [ 2338.029143][T13727] udevd[13727]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2338.800040][ T29] audit: type=1400 audit(1773318213.372:1066): avc: denied { map } for pid=14223 comm="syz.1.13038" path="socket:[242445]" dev="sockfs" ino=242445 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2339.138325][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2339.153220][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2340.600524][T14272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13048'. [ 2340.621854][T14272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13048'. [ 2340.632494][T14272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13048'. [ 2340.643807][T14272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13048'. [ 2340.671959][T14272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13048'. [ 2340.822048][T13213] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 2340.979990][T13213] usb 3-1: Using ep0 maxpacket: 16 [ 2340.986865][T13213] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 2340.996832][T13213] usb 3-1: config 0 has no interface number 0 [ 2341.018959][T14278] netlink: 52 bytes leftover after parsing attributes in process `syz.6.13052'. [ 2341.047579][T13213] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2341.073289][T13213] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2341.236382][T13213] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2341.289921][T13213] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2341.305970][T13213] usb 3-1: Product: syz [ 2341.321878][T13213] usb 3-1: SerialNumber: syz [ 2341.339390][T13213] usb 3-1: config 0 descriptor?? [ 2341.358649][T13213] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 2341.387643][T13213] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input152 [ 2341.581634][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2341.590662][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2341.597809][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2341.605003][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2341.612133][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2341.619246][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2341.626396][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2341.633525][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2341.640647][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2341.647642][T13213] usb 3-1: USB disconnect, device number 46 [ 2341.653637][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2341.653654][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 2341.700544][T13213] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 2341.984769][T14293] lo speed is unknown, defaulting to 1000 [ 2342.114251][T14295] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13054'. [ 2343.098635][T14313] netlink: 388 bytes leftover after parsing attributes in process `syz.1.13061'. [ 2343.790812][T14334] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13067'. [ 2343.799957][T14334] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13067'. [ 2343.859911][T11454] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 2344.029889][T11454] usb 2-1: Using ep0 maxpacket: 8 [ 2344.036890][T11454] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 2344.051965][T11454] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 2344.093710][T11454] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2344.139753][T11454] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 2344.255470][T11454] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2344.281420][T11454] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2344.314824][T11454] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2344.342221][T11454] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2344.420013][T13212] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 2344.601769][T13212] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2344.613555][T13212] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2344.635616][T11454] usb 2-1: usb_control_msg returned -32 [ 2344.642929][T13212] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2344.652174][T11454] usbtmc 2-1:16.0: can't read capabilities [ 2344.725948][T14340] binder: BINDER_SET_CONTEXT_MGR already set [ 2344.732127][T14340] binder: 14337:14340 ioctl 4018620d 200000000040 returned -16 [ 2344.801629][T13212] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2344.815146][T11454] usb 2-1: USB disconnect, device number 37 [ 2344.857057][T13212] usb 3-1: config 0 descriptor?? [ 2344.873918][T13212] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 2344.892100][T13212] dvb-usb: bulk message failed: -22 (3/0) [ 2344.921087][T13212] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 2344.944890][T13212] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 2344.972731][T13212] usb 3-1: media controller created [ 2345.026989][T13212] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2345.095117][T13212] dvb-usb: bulk message failed: -22 (6/0) [ 2345.146004][T13212] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 2345.179376][T13212] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input153 [ 2345.210292][T13212] dvb-usb: schedule remote query interval to 150 msecs. [ 2345.217726][T13212] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 2345.276288][T13212] usb 3-1: USB disconnect, device number 47 [ 2345.312046][T13212] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 2346.955271][T14368] geneve1: entered allmulticast mode [ 2347.664808][ T5914] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 2347.692065][T13212] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 2347.881560][T13212] usb 2-1: Using ep0 maxpacket: 8 [ 2347.890860][ T5914] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2347.918062][ T5914] usb 6-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 2347.927742][T13212] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 2347.939949][T13212] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 2347.971353][ T5914] usb 6-1: config 220 interface 0 has no altsetting 0 [ 2347.993174][T13212] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2348.023619][ T5914] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2348.054650][T13212] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 2348.054691][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2348.074267][T13212] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2348.089892][ T1153] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 2348.100037][T13212] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2348.113160][ T5914] usb 6-1: Product: syz [ 2348.117688][ T5914] usb 6-1: Manufacturer: syz [ 2348.122614][T13212] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2348.135503][ T5914] usb 6-1: SerialNumber: syz [ 2348.145344][T13212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2348.259952][ T1153] usb 7-1: Using ep0 maxpacket: 32 [ 2348.277642][ T1153] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2348.300472][ T1153] usb 7-1: config 0 has no interfaces? [ 2348.318837][ T1153] usb 7-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 2348.330002][ T1153] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2348.338203][ T1153] usb 7-1: Product: syz [ 2348.349910][ T1153] usb 7-1: Manufacturer: syz [ 2348.358461][ T1153] usb 7-1: SerialNumber: syz [ 2348.372354][ T5914] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 2348.386539][T13212] usb 2-1: usb_control_msg returned -32 [ 2348.394534][ T1153] usb 7-1: config 0 descriptor?? [ 2348.401857][ T5914] uvcvideo 6-1:220.0: No valid video chain found. [ 2348.410347][T13212] usbtmc 2-1:16.0: can't read capabilities [ 2348.429714][ T5914] usb 6-1: USB disconnect, device number 52 [ 2348.438920][T13212] usb 2-1: USB disconnect, device number 38 [ 2348.625519][ T5806] usb 7-1: USB disconnect, device number 58 [ 2349.329938][ T1153] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 2349.664426][T13212] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 2349.687636][ T1153] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2349.802860][ T1153] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2349.823703][ T1153] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2349.841445][ T1153] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2349.861396][T13212] usb 7-1: config 0 has no interfaces? [ 2349.906281][T13212] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2349.969498][ T1153] usb 2-1: config 0 descriptor?? [ 2349.974708][T13212] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2349.986293][ T1153] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 2349.993390][ T1153] dvb-usb: bulk message failed: -22 (3/0) [ 2350.004225][T13212] usb 7-1: config 0 descriptor?? [ 2350.013232][ T1153] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 2350.025288][ T1153] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 2350.032753][ T1153] usb 2-1: media controller created [ 2350.040770][ T1153] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2350.099708][T14424] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 2350.116366][ T1153] dvb-usb: bulk message failed: -22 (6/0) [ 2350.127475][ T1153] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 2350.149675][T14424] Error validating options; rc = [-22] [ 2350.161384][ T1153] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input154 [ 2350.215697][ T1153] dvb-usb: schedule remote query interval to 150 msecs. [ 2350.226452][ T1153] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 2350.271687][ T1153] usb 2-1: USB disconnect, device number 39 [ 2350.295206][ T1153] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 2350.550773][T14438] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 2350.621287][T14440] netlink: 376 bytes leftover after parsing attributes in process `syz.4.13109'. [ 2350.683906][T14442] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13110'. [ 2350.817380][ T5806] usb 7-1: USB disconnect, device number 59 [ 2350.866524][T14446] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 2350.873081][T14446] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2350.923664][T14446] vhci_hcd vhci_hcd.0: Device attached [ 2350.952216][ T1153] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 2351.149890][ T1153] usb 5-1: Using ep0 maxpacket: 32 [ 2351.156373][ T1153] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 2351.165769][ T1153] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2351.190082][ T1153] usb 5-1: config 0 descriptor?? [ 2351.400960][T13213] usb 38-1: SetAddress Request (2) to port 0 [ 2351.407316][T13213] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 2351.459907][ T5806] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 2351.586804][T14447] vhci_hcd: connection reset by peer [ 2351.594879][ T63] vhci_hcd vhci_hcd.2: stop threads [ 2351.603269][ T63] vhci_hcd vhci_hcd.2: release socket [ 2351.610172][ T63] vhci_hcd vhci_hcd.2: disconnect device [ 2351.621946][ T5806] usb 7-1: Using ep0 maxpacket: 16 [ 2351.629169][ T5806] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 2351.637454][ T1153] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 2351.637601][ T5806] usb 7-1: config 0 has no interface number 0 [ 2351.655466][ T5806] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2351.656983][ T1153] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2351.730491][ T1153] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 2351.741350][ T5806] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2351.741468][ T1153] usb 5-1: media controller created [ 2351.771971][ T1153] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2351.772395][ T5806] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2351.798650][ T5806] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2351.844830][ T5806] usb 7-1: Product: syz [ 2351.855613][ T5806] usb 7-1: SerialNumber: syz [ 2351.876215][ T5806] usb 7-1: config 0 descriptor?? [ 2351.896065][ T5806] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 2351.927238][ T5806] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input155 [ 2351.949525][ T1153] DVB: Unable to find symbol dib7000p_attach() [ 2351.956568][ T1153] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 2352.229433][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2352.230838][T13212] usb 7-1: USB disconnect, device number 60 [ 2352.236423][ C0] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 2352.295569][T13212] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 2352.322586][ T1153] rc_core: IR keymap rc-dib0700-rc5 not found [ 2352.337430][ T1153] Registered IR keymap rc-empty [ 2352.626702][T14472] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13120'. [ 2352.676830][ T5806] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 2353.370202][ T5806] usb 6-1: device descriptor read/64, error -71 [ 2353.489940][T13212] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 2353.639913][ T5806] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 2353.649947][T10176] usb 7-1: new full-speed USB device number 61 using dummy_hcd [ 2353.657637][T13212] usb 3-1: Using ep0 maxpacket: 32 [ 2353.697448][T13212] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40 [ 2353.706707][T13212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2353.718492][T13212] usb 3-1: Product: syz [ 2353.724129][T13212] usb 3-1: Manufacturer: syz [ 2353.729783][T13212] usb 3-1: SerialNumber: syz [ 2353.769920][ T5806] usb 6-1: device descriptor read/64, error -71 [ 2353.811741][T10176] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2353.826929][T10176] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2353.840215][T10176] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2353.849403][T10176] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2353.861432][T10176] usb 7-1: config 0 descriptor?? [ 2353.881436][T10176] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 2353.888280][T10176] dvb-usb: bulk message failed: -22 (3/0) [ 2353.892283][ T5806] usb usb6-port1: attempt power cycle [ 2353.905481][T10176] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 2353.916802][T10176] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 2353.930302][T10176] usb 7-1: media controller created [ 2353.937307][T10176] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2353.987332][T10176] dvb-usb: bulk message failed: -22 (6/0) [ 2353.999204][T13212] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 2354.010514][T10176] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 2354.018116][T13212] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2354.039687][T10176] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input157 [ 2354.089118][T10176] dvb-usb: schedule remote query interval to 150 msecs. [ 2354.117049][T10176] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 2354.155615][T10176] usb 7-1: USB disconnect, device number 61 [ 2354.211134][T10176] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 2354.270017][ T5806] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 2354.273485][T13212] usb 3-1: USB disconnect, device number 48 [ 2354.330387][ T5806] usb 6-1: device descriptor read/8, error -71 [ 2354.338136][T13726] udevd[13726]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2354.479888][ C1] ------------[ cut here ]------------ [ 2354.485911][ C1] ODEBUG: free active (active state 0) object: ffff88804a8c2c90 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 [ 2354.498835][ C1] WARNING: lib/debugobjects.c:629 at debug_print_object+0x18e/0x2a0, CPU#1: udevd/13731 [ 2354.508570][ C1] Modules linked in: [ 2354.512974][ C1] CPU: 1 UID: 0 PID: 13731 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 2354.523526][ C1] Tainted: [L]=SOFTLOCKUP [ 2354.527834][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 2354.537893][ C1] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 2354.543729][ C1] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 62 cb e5 0b 41 56 48 8b 14 dd 60 0d 1b 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 2c 8c db 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 2354.563341][ C1] RSP: 0018:ffffc90000a08a38 EFLAGS: 00010246 [ 2354.569405][ C1] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 2354.577387][ C1] RDX: ffffffff8c1b0ca0 RSI: ffffffff8c1b08c0 RDI: ffffffff90e3f630 [ 2354.585368][ C1] RBP: 0000000000000001 R08: ffff88804a8c2c90 R09: ffffffff8bb2b900 [ 2354.593340][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1b08c0 [ 2354.601315][ C1] R13: ffffffff8bb2b940 R14: ffffffff8a7b5db0 R15: ffffc90000a08b38 [ 2354.609269][ C1] FS: 00007fcd3494d880(0000) GS:ffff888124445000(0000) knlGS:0000000000000000 [ 2354.618215][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2354.624823][ C1] CR2: 0000001b2f8f0ff8 CR3: 00000000887bd000 CR4: 00000000003526f0 [ 2354.629894][ T5806] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 2354.632814][ C1] Call Trace: [ 2354.643678][ C1] [ 2354.646507][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 2354.652146][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2354.657948][ C1] debug_check_no_obj_freed+0x4da/0x630 [ 2354.663504][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 2354.669559][ C1] ? mark_held_locks+0x40/0x70 [ 2354.674338][ C1] ? kasan_quarantine_put+0x104/0x240 [ 2354.679704][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 2354.684926][ C1] ? rose_timer_expiry+0x53f/0x630 [ 2354.690039][ C1] kfree+0x38f/0x6b0 [ 2354.693929][ C1] rose_timer_expiry+0x53f/0x630 [ 2354.698865][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 2354.704338][ C1] call_timer_fn+0x19a/0x670 [ 2354.708931][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 2354.714058][ C1] ? debug_object_activate+0x331/0x490 [ 2354.719514][ C1] ? __run_timers+0x747/0xb30 [ 2354.724193][ C1] ? rcu_is_watching+0x12/0xc0 [ 2354.728959][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 2354.734415][ C1] __run_timers+0x757/0xb30 [ 2354.738905][ C1] ? __pfx___run_timers+0x10/0x10 [ 2354.743932][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 2354.748953][ C1] run_timer_base+0x114/0x190 [ 2354.753628][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 2354.758809][ C1] run_timer_softirq+0x1a/0x50 [ 2354.763572][ C1] handle_softirqs+0x1eb/0x9e0 [ 2354.768331][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 2354.773623][ C1] __irq_exit_rcu+0xef/0x150 [ 2354.778195][ C1] irq_exit_rcu+0x9/0x30 [ 2354.782434][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 2354.788049][ C1] [ 2354.790973][ C1] [ 2354.793884][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2354.799882][ C1] RIP: 0010:lock_acquire+0x5e/0x380 [ 2354.805076][ C1] Code: 05 fb cb 28 12 83 f8 07 0f 87 f0 00 00 00 48 0f a3 05 c6 9e f4 0e 0f 82 c2 02 00 00 8b 35 ae d2 f4 0e 85 f6 0f 85 dd 00 00 00 <48> 8b 44 24 30 65 48 2b 05 9d cb 28 12 0f 85 02 03 00 00 48 83 c4 [ 2354.824681][ C1] RSP: 0018:ffffc900034778b0 EFLAGS: 00000206 [ 2354.830743][ C1] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000000 [ 2354.838704][ C1] RDX: 0000000000000000 RSI: ffffffff8de4ec4a RDI: ffffffff8c1afba0 [ 2354.846674][ C1] RBP: ffffffff8e7e7620 R08: 0000000086db7919 R09: 0000000000000007 [ 2354.854639][ C1] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 2354.862603][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2354.870587][ C1] ? is_module_text_address+0x148/0x220 [ 2354.876117][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2354.882270][ C1] is_bpf_text_address+0x36/0x1a0 [ 2354.887289][ C1] ? is_bpf_text_address+0x25/0x1a0 [ 2354.892498][ C1] kernel_text_address+0x8d/0x100 [ 2354.897504][ C1] __kernel_text_address+0xd/0x30 [ 2354.902525][ C1] unwind_get_return_address+0x59/0xa0 [ 2354.907971][ C1] arch_stack_walk+0xa6/0xf0 [ 2354.912562][ C1] ? putname+0xb1/0x110 [ 2354.916699][ C1] stack_trace_save+0x8e/0xc0 [ 2354.921376][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 2354.926746][ C1] ? __lock_acquire+0x4a5/0x2630 [ 2354.931683][ C1] kasan_save_stack+0x30/0x50 [ 2354.936344][ C1] ? kasan_save_stack+0x30/0x50 [ 2354.941196][ C1] ? kasan_save_track+0x14/0x30 [ 2354.946030][ C1] ? kasan_save_free_info+0x3b/0x70 [ 2354.951225][ C1] ? __kasan_slab_free+0x5f/0x80 [ 2354.956146][ C1] ? kmem_cache_free+0x124/0x6a0 [ 2354.961086][ C1] ? putname+0xb1/0x110 [ 2354.965235][ C1] ? do_sys_openat2+0x152/0x1e0 [ 2354.970083][ C1] ? __x64_sys_openat+0x12d/0x210 [ 2354.975086][ C1] ? do_syscall_64+0x106/0xf80 [ 2354.979855][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2354.985918][ C1] kasan_save_track+0x14/0x30 [ 2354.990597][ C1] kasan_save_free_info+0x3b/0x70 [ 2354.995611][ C1] __kasan_slab_free+0x5f/0x80 [ 2355.000374][ C1] kmem_cache_free+0x124/0x6a0 [ 2355.005127][ C1] putname+0xb1/0x110 [ 2355.009088][ C1] do_sys_openat2+0x152/0x1e0 [ 2355.013762][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 2355.018957][ C1] ? __sys_recvmsg+0x18c/0x220 [ 2355.023719][ C1] ? __pfx___sys_recvmsg+0x10/0x10 [ 2355.028813][ C1] __x64_sys_openat+0x12d/0x210 [ 2355.033662][ C1] ? __pfx___x64_sys_openat+0x10/0x10 [ 2355.039022][ C1] do_syscall_64+0x106/0xf80 [ 2355.043608][ C1] ? clear_bhb_loop+0x40/0x90 [ 2355.048269][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2355.054164][ C1] RIP: 0033:0x7fcd342a7407 [ 2355.058560][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 2355.078173][ C1] RSP: 002b:00007ffe0b2242b0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 2355.086589][ C1] RAX: ffffffffffffffda RBX: 00007fcd3494d880 RCX: 00007fcd342a7407 [ 2355.094563][ C1] RDX: 0000000000080000 RSI: 00007ffe0b224420 RDI: ffffffffffffff9c [ 2355.102526][ C1] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 2355.110492][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000560c309177f5 [ 2355.118442][ C1] R13: 0000560c309177f5 R14: 0000000000000001 R15: 0000560c30932140 [ 2355.126427][ C1] [ 2355.129432][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2355.136692][ C1] CPU: 1 UID: 0 PID: 13731 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 2355.147172][ C1] Tainted: [L]=SOFTLOCKUP [ 2355.151474][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 2355.161507][ C1] Call Trace: [ 2355.164766][ C1] [ 2355.167590][ C1] dump_stack_lvl+0x100/0x190 [ 2355.172260][ C1] vpanic+0x552/0x970 [ 2355.176228][ C1] ? __pfx_vpanic+0x10/0x10 [ 2355.180714][ C1] panic+0xd1/0xe0 [ 2355.184416][ C1] ? __pfx_panic+0x10/0x10 [ 2355.188823][ C1] ? check_panic_on_warn+0x1f/0x90 [ 2355.193922][ C1] check_panic_on_warn.cold+0x19/0x34 [ 2355.199272][ C1] ? debug_print_object+0x18e/0x2a0 [ 2355.204466][ C1] __warn.cold+0x191/0x348 [ 2355.208863][ C1] __report_bug+0x296/0x3d0 [ 2355.213357][ C1] ? debug_print_object+0x18e/0x2a0 [ 2355.218542][ C1] ? __pfx___report_bug+0x10/0x10 [ 2355.223549][ C1] ? rose_timer_expiry+0x537/0x630 [ 2355.228645][ C1] ? stack_trace_save+0x8e/0xc0 [ 2355.233480][ C1] report_bug_entry+0xe1/0x290 [ 2355.238224][ C1] ? debug_print_object+0x19b/0x2a0 [ 2355.243400][ C1] handle_bug+0x1cd/0x2a0 [ 2355.247712][ C1] exc_invalid_op+0x17/0x50 [ 2355.252193][ C1] asm_exc_invalid_op+0x1a/0x20 [ 2355.257022][ C1] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 2355.262807][ C1] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 62 cb e5 0b 41 56 48 8b 14 dd 60 0d 1b 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 2c 8c db 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 2355.282397][ C1] RSP: 0018:ffffc90000a08a38 EFLAGS: 00010246 [ 2355.288462][ C1] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 2355.296408][ C1] RDX: ffffffff8c1b0ca0 RSI: ffffffff8c1b08c0 RDI: ffffffff90e3f630 [ 2355.304355][ C1] RBP: 0000000000000001 R08: ffff88804a8c2c90 R09: ffffffff8bb2b900 [ 2355.312304][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1b08c0 [ 2355.320261][ C1] R13: ffffffff8bb2b940 R14: ffffffff8a7b5db0 R15: ffffc90000a08b38 [ 2355.328229][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 2355.333861][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 2355.339487][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2355.345277][ C1] debug_check_no_obj_freed+0x4da/0x630 [ 2355.350809][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 2355.356858][ C1] ? mark_held_locks+0x40/0x70 [ 2355.361609][ C1] ? kasan_quarantine_put+0x104/0x240 [ 2355.366978][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 2355.372156][ C1] ? rose_timer_expiry+0x53f/0x630 [ 2355.377250][ C1] kfree+0x38f/0x6b0 [ 2355.381147][ C1] rose_timer_expiry+0x53f/0x630 [ 2355.386099][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 2355.391563][ C1] call_timer_fn+0x19a/0x670 [ 2355.396146][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 2355.401246][ C1] ? debug_object_activate+0x331/0x490 [ 2355.406696][ C1] ? __run_timers+0x747/0xb30 [ 2355.411364][ C1] ? rcu_is_watching+0x12/0xc0 [ 2355.416121][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 2355.421568][ C1] __run_timers+0x757/0xb30 [ 2355.426066][ C1] ? __pfx___run_timers+0x10/0x10 [ 2355.431087][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 2355.436113][ C1] run_timer_base+0x114/0x190 [ 2355.440779][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 2355.445970][ C1] run_timer_softirq+0x1a/0x50 [ 2355.450725][ C1] handle_softirqs+0x1eb/0x9e0 [ 2355.455482][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 2355.460759][ C1] __irq_exit_rcu+0xef/0x150 [ 2355.465337][ C1] irq_exit_rcu+0x9/0x30 [ 2355.469565][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 2355.475180][ C1] [ 2355.478095][ C1] [ 2355.481010][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2355.486978][ C1] RIP: 0010:lock_acquire+0x5e/0x380 [ 2355.492168][ C1] Code: 05 fb cb 28 12 83 f8 07 0f 87 f0 00 00 00 48 0f a3 05 c6 9e f4 0e 0f 82 c2 02 00 00 8b 35 ae d2 f4 0e 85 f6 0f 85 dd 00 00 00 <48> 8b 44 24 30 65 48 2b 05 9d cb 28 12 0f 85 02 03 00 00 48 83 c4 [ 2355.511760][ C1] RSP: 0018:ffffc900034778b0 EFLAGS: 00000206 [ 2355.517813][ C1] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000000 [ 2355.525767][ C1] RDX: 0000000000000000 RSI: ffffffff8de4ec4a RDI: ffffffff8c1afba0 [ 2355.533722][ C1] RBP: ffffffff8e7e7620 R08: 0000000086db7919 R09: 0000000000000007 [ 2355.541682][ C1] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 2355.549637][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2355.557601][ C1] ? is_module_text_address+0x148/0x220 [ 2355.563133][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2355.569278][ C1] is_bpf_text_address+0x36/0x1a0 [ 2355.574293][ C1] ? is_bpf_text_address+0x25/0x1a0 [ 2355.579486][ C1] kernel_text_address+0x8d/0x100 [ 2355.584498][ C1] __kernel_text_address+0xd/0x30 [ 2355.589506][ C1] unwind_get_return_address+0x59/0xa0 [ 2355.594952][ C1] arch_stack_walk+0xa6/0xf0 [ 2355.599536][ C1] ? putname+0xb1/0x110 [ 2355.603677][ C1] stack_trace_save+0x8e/0xc0 [ 2355.608343][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 2355.613704][ C1] ? __lock_acquire+0x4a5/0x2630 [ 2355.618634][ C1] kasan_save_stack+0x30/0x50 [ 2355.623313][ C1] ? kasan_save_stack+0x30/0x50 [ 2355.628154][ C1] ? kasan_save_track+0x14/0x30 [ 2355.632991][ C1] ? kasan_save_free_info+0x3b/0x70 [ 2355.638164][ C1] ? __kasan_slab_free+0x5f/0x80 [ 2355.643080][ C1] ? kmem_cache_free+0x124/0x6a0 [ 2355.647995][ C1] ? putname+0xb1/0x110 [ 2355.652126][ C1] ? do_sys_openat2+0x152/0x1e0 [ 2355.656970][ C1] ? __x64_sys_openat+0x12d/0x210 [ 2355.661971][ C1] ? do_syscall_64+0x106/0xf80 [ 2355.666711][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2355.672767][ C1] kasan_save_track+0x14/0x30 [ 2355.677423][ C1] kasan_save_free_info+0x3b/0x70 [ 2355.682424][ C1] __kasan_slab_free+0x5f/0x80 [ 2355.687167][ C1] kmem_cache_free+0x124/0x6a0 [ 2355.691910][ C1] putname+0xb1/0x110 [ 2355.695868][ C1] do_sys_openat2+0x152/0x1e0 [ 2355.700519][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 2355.705695][ C1] ? __sys_recvmsg+0x18c/0x220 [ 2355.710435][ C1] ? __pfx___sys_recvmsg+0x10/0x10 [ 2355.715523][ C1] __x64_sys_openat+0x12d/0x210 [ 2355.720353][ C1] ? __pfx___x64_sys_openat+0x10/0x10 [ 2355.725720][ C1] do_syscall_64+0x106/0xf80 [ 2355.730291][ C1] ? clear_bhb_loop+0x40/0x90 [ 2355.734950][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2355.740817][ C1] RIP: 0033:0x7fcd342a7407 [ 2355.745207][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 2355.764787][ C1] RSP: 002b:00007ffe0b2242b0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 2355.773174][ C1] RAX: ffffffffffffffda RBX: 00007fcd3494d880 RCX: 00007fcd342a7407 [ 2355.781125][ C1] RDX: 0000000000080000 RSI: 00007ffe0b224420 RDI: ffffffffffffff9c [ 2355.789071][ C1] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 2355.797014][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000560c309177f5 [ 2355.804960][ C1] R13: 0000560c309177f5 R14: 0000000000000001 R15: 0000560c30932140 [ 2355.812945][ C1] [ 2355.816153][ C1] Kernel Offset: disabled [ 2355.820468][ C1] Rebooting in 86400 seconds..