last executing test programs: 15.068682332s ago: executing program 4 (id=3026): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x2180, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='oom_score_adj\x00') write$binfmt_script(r3, 0x0, 0xffffff74) r4 = socket(0x1d, 0x2, 0x6) r5 = socket(0x1, 0x1, 0x0) ioctl$SIOCGETSGCNT(r5, 0x89a0, &(0x7f0000000200)={@dev={0xac, 0x14, 0x14, 0x25}, @rand_addr=0x64010125}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) bind$can_j1939(r4, 0x0, 0x0) r6 = syz_open_procfs(0x0, 0x0) fchdir(r6) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x4, 0x0, 0x9}) ioctl$VIDIOC_REQBUFS(r7, 0xc0585609, &(0x7f0000000280)={0x0, 0xa}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB], 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x7}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003f9aab106d04f0080d50010203010902390001000016470904000003080662"], 0x0) 11.99371297s ago: executing program 1 (id=3041): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000180)=0x7) (async) sched_setscheduler(0x0, 0x6, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000002b80)=[{{&(0x7f0000002d00)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000080)=""/24, 0x18}, {&(0x7f0000002a00)=""/90, 0x5a}, {&(0x7f00000004c0)=""/108, 0x6c}, {&(0x7f0000000540)=""/233, 0xe9}, {&(0x7f0000000640)=""/241, 0xf1}], 0x6, &(0x7f00000007c0)=""/4096, 0x1000}, 0x5}, {{&(0x7f00000017c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000002e00)=[{&(0x7f00000001c0)=""/6, 0x6}, {&(0x7f0000001840)=""/4080, 0xff0}, {&(0x7f0000002840)=""/59, 0x3b}, {&(0x7f0000002880)=""/102, 0x66}, {&(0x7f0000002c00)=""/212, 0xd4}, {&(0x7f0000002900)=""/248, 0xf8}, {&(0x7f0000000440)=""/81, 0x51}, {&(0x7f0000002d80)=""/80, 0x50}], 0x8, &(0x7f0000002a80)=""/205, 0xcd}, 0xfffffffd}], 0x2, 0x2, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x501441, 0x8) (async) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x501441, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6) getsockopt(r4, 0x4, 0x3, &(0x7f0000000040)=""/10, &(0x7f0000000100)=0xa) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r5, 0x5608, 0x3) r6 = socket(0x3, 0x800, 0x2) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0x8) accept4(r7, 0x0, 0x0, 0x0) (async) r8 = accept4(r7, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) setrlimit(0x8, 0x0) listen(r6, 0x8b) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x8, 0x32, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r9 = socket(0x2c, 0xa, 0x6) connect$l2tp6(r9, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 11.990243032s ago: executing program 4 (id=3042): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() fcntl$lock(0xffffffffffffffff, 0x25, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0xa7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x1, './file1\x00'}, 0xfffffeba) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001540)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="1807000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0004000000000000b7e8ff0000001000850000000c000000b7000000000000009500000000000000ef7c5f2ea0973a80c9323d65c9a01f07baf345ef6e98567d29a24c6160499ef37ac1f479b02d6d6cee10ec57a269bf171a03abd4821a38d3a8c0102781a3f16d7de511ee02bf6b7a20800b408e0f8ece37474993017f66857a"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r5 = memfd_create(&(0x7f00000003c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,U\xb1]*\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3S\xef}\xfd\x12\xbc:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec=\x9e\xc3\xfd\x85d\x0fl5\xf3\xbe\" 6\r<\xea\x8dz\xcf6\x99\x91\xear8p\xaaR\xd5\xa6\xab#N>\x9a\xdf\xea\x009\xfbB\xc1\xd0_\xc0\'Z\xeb\xd8\xaf\xf0\'J\xe2\xff\xe5x*;(p\xf7p\xce\xbb\xa7\xfe\x04\xd0t\x81\x1a\x1b?m/\x1ex\xf8\x88^\xbaU\xb9\xa6\xab\x8d\a\xa6\"\xd9\x13\xeb\xe2\rh\x8dsx\xaa!\xd5Q\xf8\xce*\x95\x0es\xfaZ\x94t\x19\xdc\xdc\xcf\x0f\x9a\xa2O>\xb9\xfc\x01\fW\xee\xffh\xbd\xb2\xb4z\xeb\x84\x13\x13u\x8f\xe2\\Z\xef\xa3\xe1c\xc5\xe6', 0x3) write$bt_hci(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="01"], 0x2b) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r6, 0xc4089434, &(0x7f0000001480)={0x0, 0xc319, 0x0, [0x5, 0x9, 0x1, 0x8, 0x5], [0xfffffffffffffffe, 0xb3, 0x3, 0x95b, 0x101, 0x1ff, 0xf326, 0x0, 0x9, 0x6, 0xf, 0x1, 0x4, 0x9, 0x3f, 0xdcc, 0x11, 0xffffffffffffff16, 0x9, 0x8, 0x1, 0x6, 0x0, 0x5, 0x8, 0x1, 0x1, 0xc000, 0xc1, 0x8, 0xba11, 0xfc, 0x3, 0x3231, 0xb8e, 0x7fffffff, 0x4, 0x5, 0x3, 0x40, 0x1, 0x4, 0x1, 0x6, 0x8, 0x100, 0x4, 0xfffffffffffffffd, 0x9, 0x200, 0x1, 0x4, 0x4, 0xffffffffb6237230, 0x7, 0x2, 0x7, 0x8, 0x1c53, 0x9a, 0x4, 0xea9, 0x4, 0x4, 0x18, 0x7fffffff, 0x4, 0x9, 0xd16, 0x9f07, 0x2, 0x10, 0x2, 0x9, 0xe85, 0x5, 0x8, 0x80, 0x4, 0x81af, 0x9e3, 0x7, 0x6, 0x1, 0x4, 0x9, 0x3, 0x1, 0x7fffffffffffffff, 0x7c3, 0x7fffffff, 0x7, 0xa37, 0x1, 0x3, 0x0, 0x8, 0x4, 0x0, 0x0, 0x81, 0x2, 0xd19, 0x7f, 0x1, 0xffffffffffffffff, 0x2, 0x7fff, 0x40, 0xe19, 0x1, 0x1, 0x5, 0x763d, 0x89de, 0x4, 0x56f, 0x8000000000000001, 0x7, 0x763, 0x2]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 11.864393899s ago: executing program 1 (id=3043): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2721, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, 0x0, 0x1, 0x80, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x87}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 11.007178504s ago: executing program 4 (id=3044): r0 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x101400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000002000000000000000000000300000000030000000200000002000000000000000000000105000020200000000000000000000003000000000200000002"], 0x0, 0x5a}, 0x20) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 7.620468158s ago: executing program 4 (id=3050): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="10001d000600000200000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc00, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7.60297998s ago: executing program 1 (id=3051): prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xf4, 0x78, 0x68, 0x8, 0xab4, 0x14, 0xc418, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2d, 0x8a, 0x54}}]}}]}}, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xf4, 0x78, 0x68, 0x8, 0xab4, 0x14, 0xc418, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2d, 0x8a, 0x54}}]}}]}}, 0x0) (async) 6.872507035s ago: executing program 2 (id=3053): r0 = syz_io_uring_setup(0x6bd3, &(0x7f0000000140)={0x0, 0xec32, 0x100, 0x402, 0x100001dd}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) fallocate(r3, 0x4, 0x9, 0xdf01) r4 = syz_io_uring_setup(0x232b, &(0x7f0000000080)={0x0, 0xe435, 0x9020}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r4, 0x7368, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$BLKBSZGET(r3, 0x80081270, &(0x7f0000000240)) mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f00000002c0)={0x78, 0x49}, 0x20) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x45}) io_uring_enter(r0, 0x75fa, 0xe475, 0x0, 0x0, 0x0) 6.843028424s ago: executing program 0 (id=3054): r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106d04d308280b0102030109022900010000000009046900000e01000008240501020205050764f7edb276"], 0x0) syz_usb_control_io(r0, &(0x7f0000002780)={0x2c, 0x0, &(0x7f0000002400)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0}, 0x0) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) syz_usb_connect(0x0, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106d04d308280b0102030109022900010000000009046900000e01000008240501020205050764f7edb276"], 0x0) (async) syz_usb_control_io(r0, &(0x7f0000002780)={0x2c, 0x0, &(0x7f0000002400)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0}, 0x0) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$6lowpan_control(r1, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) (async) 6.445919099s ago: executing program 2 (id=3057): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) r2 = dup(r1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x1c, &(0x7f0000001840)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b7080000080000007b00020000000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000006200000076000000bf91000000000000b5020000000000008500000085000000b70000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000340)=0x15) ioctl$TCFLSH(r5, 0x540b, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r8, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000003c0)={0x30, r9, 0x239, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10}]}]}, 0x30}}, 0x0) read$msr(r7, &(0x7f0000002700)=""/102392, 0x18ff8) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r10, 0xc0045006, 0x0) ioctl$SNDCTL_DSP_SPEED(r10, 0xc0045002, &(0x7f00000000c0)=0x6) read$dsp(r10, &(0x7f00000011c0)=""/4117, 0x200021d5) r11 = syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r11, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f907, 0x5}) sendmsg$IPCTNL_MSG_EXP_DELETE(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000000202050000000000000000000a00000001003a0000002c000180140003000000000000000000000000000000000114000400"/80], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x80) 5.74663515s ago: executing program 4 (id=3058): sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) socket(0xa, 0x5, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000380)={0x37a4, {{0xa, 0x4e22, 0x6, @mcast1, 0x1f4f}}, {{0xa, 0x4e20, 0x10, @loopback, 0x6}}}, 0x108) r5 = fcntl$getown(r4, 0x9) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) kcmp(r5, r6, 0x2, r1, 0xffffffffffffffff) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, &(0x7f0000000100)={0x80, 0x21, 0x63, {0x63, 0x10, "1a45ecf186bc5449ca525d2ed634243ebc5ccb57140ac3af569166636679df40a1b3353e67258dc2979d0fcbcd509712e7986147c454b7856e1888e3ba304eca0b646abd5f7c5322b40590cc15cf02b4effd426caaceb5fd071cd1f3a68bc74f64"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc07}}, &(0x7f00000001c0)={0x0, 0x22, 0xc, {[@local=@item_4={0x3, 0x2, 0x4, "22fc95b5"}, @main=@item_012={0x1, 0x0, 0xa, '*'}, @local=@item_4={0x3, 0x2, 0x4, "5ba7adad"}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0xc73}}}}, &(0x7f00000007c0)={0x2c, &(0x7f00000004c0)={0x20, 0xc, 0xb1, "73fc7c92851c9d24e5649a043b8205df70710440687c15405bf6ac72a2da10e658e7adbf63f1cfbbaeca5a530ba53967e6ddbd59e9ece85f09399be62a29cd97582b9e354660599c19930f6b0a3f43e7f676118e0258647a2770064cd6ae0c650859a1f9213f2a2975874c56b112f9317dc954c840838763c6256d8e2778839df47d1953f03ecb4bd37da3c364d0c3e4627f17b385c865d51ebbe7cb176b315b974fb60ad2d2f4be97f85bed37dd463893"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x51}, &(0x7f0000000680)={0x20, 0x1, 0xfd, "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"}, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0xfd}}) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) 5.552333261s ago: executing program 3 (id=3059): inotify_init() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = dup2(r1, r1) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001501e956815e460e7a924c36c961be583a4beafac80d0871e63509e1d4090000006c44585da4c5387bb9982db18702f38c681a540c364f7242dcf95d2736f45d9f1c94c0792538bb41c2b9a8c16fbbbc1cab3709e36de65505a69e1f19d17e18c3f425b952a52a478a35ebfc00b61a9894d9b2b87516d3e472004d7e1b6c11b00c489dd824b5a2c677", @ANYRES16=0x0, @ANYBLOB="010300000000fedbdf25050000000800f3ff", @ANYRES32=r4, @ANYRES8=0x0], 0xfffffffffffffe74}, 0x1, 0x0, 0x0, 0x4044041}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0)=[0x0], 0x0, 0x0, 0x0, 0x8e, 0x0, 0x1, 0x0, r7}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}, 0xd0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="1ffdffff7100000126bd7000ffdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="0c00018006000200090000f2010001800000048000000200130000000c00df8005000600000000000c00018005000000d60000000c000180060002000e000000100001800c00048008000100090000000c0001800800010004000400100001800c0004800800020011000000"], 0x80}, 0x1, 0x0, 0x0, 0x48000}, 0x24084095) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000001c0)='.\x00', &(0x7f0000000080)='adfs\x00', 0x200800, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) 5.315870968s ago: executing program 3 (id=3060): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) (async) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x6}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r1 = getpid() mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='ntfs3\x00', 0x0, &(0x7f00000001c0)='discard') (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000040)) (async) fsmount(0xffffffffffffffff, 0x0, 0x0) (async) open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) (async) close(0xffffffffffffffff) (async) memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa00xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x5416}}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r3, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_LK(r3, &(0x7f0000000340)={0x28, 0x0, 0x0, {{0x2, 0x0, 0x1}}}, 0x28) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x3f) write$FUSE_POLL(r4, &(0x7f0000000140)={0x18, 0x0, 0x0, {0x1}}, 0x18) 5.205686848s ago: executing program 0 (id=3062): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='netfs_sreq\x00', r0}, 0x18) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x5416}}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r3, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_LK(r3, &(0x7f0000000340)={0x28, 0x0, 0x0, {{0x2, 0x0, 0x1}}}, 0x28) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x3f) write$FUSE_POLL(r4, &(0x7f0000000140)={0x18, 0x0, 0x0, {0x1}}, 0x18) (fail_nth: 1) 5.108219752s ago: executing program 3 (id=3063): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) unlinkat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x0) r4 = syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100}) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000f80)={0x29, 0x6, 0x0, {0x4, 0x1}}, 0x29) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x1004) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_usb_control_io(r4, &(0x7f0000000500)={0x2c, &(0x7f0000000440)={0x0, 0xa, 0xba, {0xba, 0x7, "e6eaccdeaec5e8da6636dd40005e2fcf57213a15047eb5664e53373e538cc8fe48a3f2a51eff4e0d73d620d62edf9b11bb85729df01b464465d4d670fcf625c4896a7149af0a7a5b06cbd5381d7f4f061e5fd30bd5481907790b8853ceca784d66eb8d76e3b0ac77f208710144c7822b77b21e9ba6f5d1d85c51d8bc775e94f294edff613f7e15a65b794f2030723db54aa0c9563afe41722cdfd8b97fa69b56434c35c432891284f1e0a1873e207af6330c8b3235d80af4"}}, &(0x7f00000000c0)={0x0, 0x3, 0x3c, @string={0x3c, 0x3, "4d9d281fd074e5a531ec8f24bf57679603aa079e633d82cdfcbcec0da3baddd60a39bbcec4adaafcf340751cf48ff82ed804b704a4407e7270a1"}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf8, 0x0, 0x8, 0xf1, "e186991d", "cde5b8b1"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xa1, 0x1c, 0x7, 0x3, 0x6, 0x7, 0x4}}}, &(0x7f0000000ac0)={0x84, &(0x7f0000000540)={0x20, 0x30, 0x44, "35551345abf99ec38bd319883fcb989604cf794072a353bd561f5a6cd1060d710699ff16fa48b6a0675f3825aa81af6e0b031ddcae3c9269344c40c06a3b6fea5cfe53ea"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000006c0)={0x20, 0x0, 0x8, {0x100, 0x10, [0xf000]}}, &(0x7f0000000700)={0x40, 0x7, 0x2, 0xde3}, &(0x7f0000000740)={0x40, 0x9, 0x1, 0xd}, &(0x7f0000000780)={0x40, 0xb, 0x2, "a0f5"}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0x401}, &(0x7f0000000880)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000900)={0x40, 0x19, 0x2, "0563"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x3}, &(0x7f00000009c0)={0x40, 0x1e, 0x1}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0x9}}) write$6lowpan_control(r5, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000000)=0xffff0018) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) socket$rxrpc(0x21, 0x2, 0xa) write$6lowpan_control(r5, &(0x7f0000000340)='connect aa:aa:aa:aa:aa:10 0', 0x1b) r7 = landlock_create_ruleset(0x0, 0x0, 0x1) landlock_restrict_self(r7, 0x5) landlock_restrict_self(0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB]}, 0x78) socket$nl_route(0x10, 0x3, 0x0) 3.805458584s ago: executing program 1 (id=3064): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESHEX=0x0]) read$FUSE(r0, &(0x7f0000002480)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x2) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x10000002, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r3, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x18d042, 0x140) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r4, 0x2000) 3.539954223s ago: executing program 0 (id=3065): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f00000001c0), 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r4, 0x4068aea3, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x20000400) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r5, 0x4) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="70020000", @ANYRES16=r9, @ANYBLOB, @ANYBLOB="6a47078f92ed"], 0x270}}, 0x0) listen(r2, 0x5) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000440)=0x1, &(0x7f00000007c0)=0x4) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b0000"], 0x15) dup(r1) 2.64422382s ago: executing program 1 (id=3066): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002d65652204305800060160102030109021200010d0420060904b4d20c050006267f07"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) unshare(0x2c020400) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000dfffff9400"/24], &(0x7f00000003c0)='GPL\x00'}, 0x90) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x8, 0x3, 0x458, 0x0, 0x60, 0xd0e0000, 0x0, 0x100, 0x3c0, 0x1d8, 0x1d8, 0x3c0, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x2a0, 0x2c0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r6}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x9400, 0x98, 0x100, 0x94, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x243) read$msr(r5, &(0x7f000001aa40)=""/102400, 0x19000) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000006200), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r7, &(0x7f0000000400)=ANY=[@ANYBLOB="33000000060000000000000000000000040000000006000000000000000000000a000000000000002f6465762f667573650000b944d8c315fc18afe383901fa8534e606a696ef306b712c282a06f662f1c45af5dbcb67cec0014a85914754fded137efa42f041f41ee6d66d3333ae40dfc9be554581ded612038f6b455fb4595d7bb1995d23fb1e967dd6f3e2208492d5d33963a677faa4dd88382f6ecf1825d074286cf7e65ea8bdf9f81c04ef24a52494dcd02eaa5a458b60c8601c68a3e"], 0x33) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000140)={'bridge_slave_1\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x10}}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) 2.596155045s ago: executing program 2 (id=3067): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000280)={0x30, r1, 0x801, 0x70bd21, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}]}, 0x30}}, 0x0) 2.416271055s ago: executing program 4 (id=3068): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$sock(r2, &(0x7f0000001840)={&(0x7f0000000280)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x4000}, 0x80, &(0x7f0000001700)=[{&(0x7f0000000300)="69d8bcd3e71fb9a18bd92abd36a735fee4f817e0484a6fb6685dae00477c91f9f5d0b0e82d55e4fb92943578e2256a310b184affdf3915840cc2caf809e6443f2c8bea12fba78dff1a6afae9100dd0fcdffe06b1cdaf7fe53617e64e4342674ca4c3044c6d4b92395d276d8798a4dcfcee504bad98c2726d04443c376fb3ba5e26e12fd3d043429d75d06532ac177b84441ae1d31a6bcf63bee83ca6ee7dcb2c9d63da92aea34701aa84850e59198fcbcedc064ffc15ccfbe33c", 0xba}, {&(0x7f00000003c0)="709a5cd673c244597097902655b2421c1971c84a20455abef802ef3b432f3e42be2aa583e2939f21cfc0e37abcc8bc5aeef253b532f4e212294fbfc14f2624d7d1988347911d7a18bf0c5a2455b2381a407b4fd47c8194a33e83d0463be18ecb9793eff16804605411f8bb55ce42c919805a8b5730789496c721dc46428b5c4940fb24c0b4001b6581d993b6de6c15c738fdfdd4bae68ab7060cca1f67a57d1284918bec43cebcaf7fe1c22fc146152445f040ff42a5", 0xb6}, {&(0x7f0000000200)="f8b0cc4ae80331b1563686a136af151cbf47", 0x12}, {&(0x7f0000000580)="b2444d1e9f7680a83e6259d6c033e8e279703c2559f99cefef33b7dc81adbb2e8c3f87f18bb8a08f1c135df26b3e08011db9d79701c5c6b46ac5b7870e7ba4caaae4b6", 0x43}, {&(0x7f0000000600)="91c368e2360a542da257e6bdf2a9f35bbe125ad7542a6085725daa0728b60d003b79e288fa1bffcd038a6f135dd9960a1a20094b9215ac5c9d041a3c306ef3019e9a49ba514cb1ff32649eb3905516a4c89b362a8f2ef08c0666c95fea6e0be7168ea54c3f5839356cadb188d6b6015df1da53e9a0efe6f71d458b7f2f7eea6f8a9678d10cb6d9905e20efc090f267d5918dcea971a898a44a24dc2447827583032317071e364a1fdec18d92b63ee511af2ad2cb2e0e8b4501c2ca299ce3614fd1a116e92ba1cb09b9c44d98898d4a2b6093a3e6f058f02b2ed2f38740380458004ebd9fb39c1399930a72cea6d3964fbcedfd68a5965093ac8f99c196d4865111744c2c38248b53b8db3a5e9e15e0dc406594ac24d3802493d503fe3877ed0e3d912dc5a7b8e949c1184c28d3545471dbcd2885d0fcc5845211e389a329a872116a1d1e188df8e9eea4ba8bd78d4467c3e2f3b951e27207b17480b82558a037ea235a2e2d7f6934bc45a987898ff1ed7ab5b0740d22d3f6fd29089f7b296c3351d3ec7d3960b0351d421d5d18b2c57c8d04ae37de66da2e43963a303cdfc7e45726300d2d41eed485d9f073b83773de87647728ffda8c1861a7da0eec4195158944c199ec0a54ced05e0b0b25c1a3164fec0697c2be57aa76cf8b859686610411eb4baaf2ba7858d1abe57718cb254727bdfd3d8075cbd4dfa92eb8bee7d2d8f43337106156639a7bb0c14b17cc5b2888c18969ec7f1457976a1f887c3e8b61847ec8ed82e50768070c45402392708afe2cc5e4a12865a4784d57d41a5e0cf501f7e185783b3bcd856fcbbb20a4ef6e277c30d4a527099cb398897145d19dd52a2cc52ac4a510155e9731726219b45e4944fbaf598d04dc91674dd13e978f2c675c3eab900df0d7816d3d6679113487545b1f7e92e5bc4e39387f4ecb0cb36316d6bf00848f660c92e14aca85538490808d50c03b1dcef53b4e38dae2c41f8a6d2cb1b781390ff8c61330b1c5ed9f87efdd2d6189d30172135cde3b8a0f302eacc8be124d9b4eb6ca658f1c77fe5cf391e095bd528b5fc27dadcf2cf98e4f296a3ec41c74ca95a9966d3be4f6a4f98203c7ff651eec9b655d46d95d2e791b2dc99eabb50ab789cd1ce403a915c669ecf42864b8467310353bfa94857928ea70d8bccc7880b4c2f9aeea1cfea7b0adc9e2fe60861cc8cfe75c1f316190a6f500e273a969f9317ac178edf6288625aedd3abfd8eafe44caa3eb62966aea5027f1f0760aa26742d6c6f5de8f202692086afa90e20ea7559142e964f6e08f218446f17179370c8bceabf3f4c456db0f7377460a8f11e2f7971781139a6f23258a6eb3dabc7d3fa5518b3be4d6c26ad3b299401da1beda542f0d22ceb3abdb3121f15bdc5b67c13a091fb531baf6ee508cbd335a009c7928ca914d0495ccfc3fe2b419c2edc2ff4060e49c6d2188646d6cd68ee267c4f600e3f751717b27268cb983c6c461ec7073ba6cc36952fe1ed2906b1acf366d736261009da8699a2f77ca7bd740d25773bfcce1e02071ac519e6f122ed5f94ded4c89a1a2dda2dbe57a88a1fc1a0fc1dd7f634a971e6a492eeccf7ec26cdd95e90e89112c977573661187325b02ad5bcf05add2b030a2b9fc5ada251eb55aabcbcce64e144db3a97e32870962db165a4ae22217b2b42016847e90acc221461f5f152882437c66092878e59ea30b3454b7f30df5afb386fc88d784d3b3ae8a150a4481e3f288b61459faff1af67fc931ccca2bb17a5f352cbd0fb8764c7a5bee4d7e894357347f8503a2b4a294f25b842bdf355d7397cf1b1f80cf6342698228dfce369b33d448034c83f8d9033f9ae8fd05f9aa0a82224014c614a960f426eabf72e6cec8a2a4dc0e4f003c33d8e28409c2182c662dc4e1988c6a5c5b6cfe25e3d282498fb04d6b3aa0c8da50f2f16d1882f61f0eddc2997fdefc8b69fc7f2dad78e4c090707b99c34a19981d6d21e84c73dba5f52f408b39cffd7c5bc0bbf4cfe03be8cc44b61be2e7cbb2e1ea2edb608dc59539314b5a592cfb6a08c362322319c97f37e316b1bd7a7f72206b8b4050d9d7a0703aa4ec2fd6561f5e7bf532988296f857451d704cb0c9754abd51f157e10a76c282a8dca76265f9aad88d70875e0c1416703fc44e4256aae8c5b268791c297c371b8a5a957719faac24043e7bc3f7b6700e07f341aaee833efee7c1ce305971800997b2d6ff1d38f7a5fe743d2d121b79bd2efe7236b76f86bb5be825c8919bff8399932c9b0d339733745cadd4536631fbf9c0217b41841e492efd6643b71eb6b039b1d9a77656bdb8b7e86dfb7a47918a04e8263961c350cae8f0a067e4a829e36f9a6b53b5336853db944aae73794d5fc97002044bd5bc2e172fb39bc21c083ef107ba52f9f988db371c28ea2e6772dc0c31d5e2cef88417853fb28764619da22d459d8df841dffd01744ed9ea0338e6ae0afeb609b1220bd7c53846544728f9ff19cb27d6e72ba5691cbd3e301ec3752b270f2f6cc8d4c032d852a975bfc93687c443dfef19cc2ee5117da29e6df99d25b2d37a15bd06e178bb3188b8a669f70a90cbc67ea132c813f2054f144cfa361ef0add51913b7c0d7ca3e68de8d7baeeaeb0e2bac03eae2aaa866ae0be9cf7e089c35e03da225f2b8a03ce231c7fe00171940f0de83eda1720dcb9cdfebf3ffb38535d1807a9558a0b5ed67a684cab3cb19ae3ae3c2b776b5a8628635ad4acebf7eea6b8fe90c4ad8e55663dad9a6124162fd6c60a641bb53fa0235e451cd55aa2ca7822d4aec7a494f9e1e093d4435758c0fd26d37f5044532b79647f5d1193bf08fb72515af00e54de72a7fe0337971e7dafc326472deffa6a6742e208cdf15e10097d9b7d25981c9a983d36a500fd085540b99758b36f356f11c29ada3e0e8453ec2520f85576f35eb54420ea89d8a5588299a7339fc14103dc88010ec86675740943bc85e83b96bd310c5d6cea313c55212cfc3eb45315e294b7df4feba72392e64d594c99c4a23c48f2b43055ad89e134fdbeac6293033633399a1d505f459c42f731c81d562403e250e5ff58ab28984530a781f94ccdde300821f42f8b23d4f66a96a7e125eda71f4223430e461eb19f89f271d80a786b9aac90bd5a0d262dd3ef07fef6fb8b93eb9549b02060783d31ed8eb02a462b64b18669ac7491d9cc67195bd02def4e59a9c3f71d841b3a64345eb8d698a952ffc5aa3cc40fcea73ec25d1ef92890db2416891375f7de6d034fa9162930a75a9b4d8ea46465c40a56723031d8c1076a5dd567dc64fd02586d23704310c86cbbe0fd5587bf456a8880c91dbbd7f10c24c57910fa909eca0337e167c666ec89f77a9042f894bfaca22f4bfdaa4841e1d84089f0a472b857fb5191d7da2c3aeaec8c662fc24e12b0dab19290ce1cc3ee562bc1cda0399e096bf1f42d0a6e595c7688f53720896137b5f5f9d66c239f65e0b46c28efdcd2de4c069fc6a934c28bac4887dddf1b3398097cc579ac519d520e368ea71c70cecb91353bcc1de20627d84561da5489ab58c3d5553986e43a259501df29d304e9262ccd6aa344c34b786566cd04a894097c09e12d32ef7d84270eb93d73349de815fe7e04ccc12aae6840fe826ba5e8d09aa8e5361447ddddc5914c8be152f7bbce95078d55af922d2432e3c254b4fdf8ac0b43df84db432f1d4b2e88eb68bf5653d83843ef64d9b7eb768c185b29b881fcea1ca58ce4ebfef9248fa7d6e7f981c7f1f2d8e3465db77750fa0314cae2714cbbd786b2d02f932e4991c0971a4c16b8096d5b39d45dee04f222a3c2cc78a0038d7545b0b2f299e009b79552941abaad9ce712f6152076a558856c4b78cb83f6713253f913430974c7f53b3c0e34c8bd794e6a74261ef4a088416028c47cd01467d42c7d943b483a2bcaa647d9ad24d3f119160ccb8020f803c51a011e02801d0b2338015b25f9291f74a8e057a6ea183d997b2fa4b787fc829965ce309eab1e43c26d1ccbc82639fc2c93cc1bc65958d7dac2b4c46214093a52d2e59dd799958b0c10d935cd716b8ddca7b972391933104fa2985b73fc721d00d8c5bf688dfd929a8552e89d6a931f8d152bd11196ff0029b5bbb615835994620e5c4b4dcd8c2e74231acc176511d52651ef79b7e4c9a9ef57d9c3989c5f1f46e748466fb6af48c28b0711c56a02da6b43ae636b32a34b7eed1c17af7c815aa9fa8df753b76ccce8d4cd3e57125ee5d27610be21237f58031a2e154e2de5f12e250d8a20e5937f0bef2880ea0d4adc4a0f105252864c065c0136dbed97bec310f1c6d14ae4eac9faff72205af611bc6ffe09ede0d0dc139af9d1462db19561a752880b8b4ee384f3131771420986231130824f0f5a3c437f9e8b0ed1effe8f5df6e845c72f2d3e3d1459a8fe97b91b197ca5fa86fdc662e5bf65ac7135d6c24ae1405d7bb513244d729205df9afb2b4a841d63a78e7c7b9767568d96f5bb9191f8bb14a1bc3fd4363dfd9983eb249610436154071c6293abd9c2ace93b97f5977b16ed7253f01d8964232ce2b5d78d982250079cc38ed78cb1efd0c9a0d08ee2c67d66f5581cbfe0fbc208169891110280e287791bb95fa5cc1b2af5de6348e8e730f33f6def56eeb5ea5db87c7777c1b53f5990e8ef00da45b3866efeff7d701ccb88f26603b15c0cb42965dd9166587395d18be871c1ece114a296f04e9718ab66c561e7420e67940d144f92799aace360bcc448c831ff67392665f291d7933a04ff2f13b2106fed22c6470c0bc925a5d0957a9b10364439dfd9c9f6ab8e251a9aa88a9408e9aaf70a9b959a555b7b3b48f73793f2ac9f6d27598ddc2d849118b4ac0eb5c24ed8b4331ea3c0f1d8256e04716dfa841a96faf26fbd8d15876905d138edac976eb4850f901e44b974ad50ed4ff6b5643fc011bf971964c2e8565dd1c8859a56295cef9a8d4b6cc06da41e979efde4683675aca1e78b603cf32f5ecc3045053a2d72c088228007a399aad860e8e80917ceaec88972ea079bbe6f1a0b9f003021b18bd15788f071c96ac11e8026bba5a1729e682453a5f7384b60d66af998f8b55aa6aa2f6bc4f5d6210d396997f8e14f451895a95b423593a7bfba6d81a267c7c41117f82323a0ceebd6a38c57756b1a1e2196c9105df5cf2ccafc771b7a55651b35b65a2adfdba30b7c2ef87b8956a7a3e37c3d284d3b0bfcbe0336c4362b18e5cfa6de796313ff3ec51357c4064b0941dd63b3050ea2505fdf1db3dba08b28c12ef093f10766982f041ef05836a41f8d1e1a2180d5f516f465edae690509d9a1b252279f3204900d6c73b17946f205fd90b36d3172f6fe52565f23494b3db89e74733625c2bff65d4680a2d34ca798e607456d615e280d4b14b1b5d34cd8269122d1e57c28c19523e0bf11a8529f07be637ba22139c100bc313e75758ed865926e60603afc37183acc536de40542485b26b1c5154a284ecf083e3c9905d8383dfaf2f361d7c9ad556cff03fe6a81689219c4ae6722232e3f08a23c8ecd892c762ae5c02eedff6c27a060de02f3ec2741fc4a68f12b2e72cbb6d2f46a62cb551f37e0908cbac6c5a8d01ec00b1cfe5d185d08dd346bf4fb9268da1286d7b85b693f0029fa011a6b85f5afa33e66b0c17cfb0eda5de7a2e4cd499ec78aec4f9dba7428a5c72b3b50822faee4d5fcf7b6690ed9abb56b5f992126211fb03f1930eea1c3d2110274cf23b06ad09143df585f8976e2e3b2e8476f5317c9907fd4164d6", 0xffc}, {&(0x7f0000001600)="a9c0201ac98b117e6a2e278fed0eba9fb81c2879732b8c8649e0df8fd8dfa2ea4cad8cd7359e70edb3f1057fbab393a37898883a2f94f7fbb1baee4552cfdc1e997792714a21da6e6f68465ed7963781c6f688e043e9c42f463614d9ee8eb9def5d88c8e8247efbcade4f496626163add0e0b5a66fbb946cdfc2bb62de6f14f7005206afd5ba2107da4e14bd2b24e6e85633da06272d4c26e30552c00e53ae0c235f53187e1f1d68d0ff82087ffd03736727ccb1d83cbcbf7335529aa399abe60fc421a40d193e37136b", 0xca}, {&(0x7f0000000500)="227280e9566731b0115ed761fed430ec96a9e5e347de5160b386b1e4254d8d0b352c4ae317436712c7c9077402d67ea5", 0x30}], 0x7, &(0x7f0000001780)=[@txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffff0}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14, 0x1, 0x24, 0xfff}}, @mark={{0x14, 0x1, 0x24, 0x6e}}, @txtime={{0x18, 0x1, 0x3d, 0xc}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @mark={{0x14, 0x1, 0x24, 0xfffeffff}}], 0xc0}, 0x604c010) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket(0x8, 0x80801, 0x1) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0xa, 0x0, 0x9, @mcast2, 0xffffffff}}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000018c0)=@raw={'raw\x00', 0x9, 0x3, 0x2a8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x210, 0xffffffff, 0xffffffff, 0x210, 0xffffffff, 0x3, &(0x7f0000001880), {[{{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@icmp={{0x28}, {0x12, "fe99", 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x0, 0x4, 'snmp\x00', {0x401}}}}, {{@ip={@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x31}, 0xffffff00, 0xff, 'vlan1\x00', 'macvtap0\x00', {}, {}, 0x5e, 0x1, 0x41}, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@unspec=@realm={{0x30}, {0x6, 0x8}}, @inet=@rpfilter={{0x28}, {0xe}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x12, 0x1, 0x99, 0xffffff81, 'snmp\x00', 'syz0\x00', {0x101}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x100000c, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/if_inet6\x00') pread64(r5, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040) 2.31966754s ago: executing program 2 (id=3069): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f00000018c0)=""/102400, 0x19000) socket$netlink(0x10, 0x3, 0x0) r1 = syz_usbip_server_init(0x2) fsetxattr$security_capability(r1, &(0x7f0000000000), &(0x7f0000000040)=@v2={0x2000000, [{0xbc, 0x4}, {0x1, 0xa}]}, 0x14, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$caif_stream(0x25, 0x1, 0x5) readv(r4, &(0x7f0000000140)=[{&(0x7f0000000040)=""/187, 0xbb}], 0x1) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="43cd0a65ad640000000000", @ANYRES16=r5, @ANYBLOB="00032bbd7000fedbdf2501000000340003801400020070696d7265673100000000000000000014000600ff020000000000000000000000000001080005006401010008000500b20f0000"], 0x50}}, 0x4000084) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x80, 0x2, 0x1dd}, &(0x7f0000000380)=0x0, &(0x7f0000000180)=0x0) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$ARCH_SET_CPUID(0x1e, r9, 0x1, 0x1012) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x3, r6, 0x0, 0x0, 0x0, 0x80800}) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_ABS_SETUP(r10, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r10, 0x40045564, 0x3) write$uinput_user_dev(r10, &(0x7f0000000380)={'syz1\x00', {0x1, 0x2, 0xfff7, 0xb06}, 0x27, [0x1000, 0x10001, 0x7f, 0x10, 0xc, 0x827, 0x0, 0x1, 0xcf1, 0x2, 0x0, 0x8, 0x3, 0x103, 0xc776, 0x7, 0x7, 0x9, 0x3, 0xfffffffd, 0xfffffffd, 0x4, 0x2, 0xa, 0xe, 0x1, 0x80800000, 0x4, 0x8, 0xb, 0x4, 0xaa, 0x956, 0x1, 0x88, 0x4, 0x8000, 0x7, 0xa, 0x0, 0x9de, 0x1, 0x0, 0x80000000, 0x7, 0x2, 0x7fff, 0xc30, 0x40000000, 0x5, 0xb05, 0xc, 0x8, 0x5, 0x6, 0x4, 0x0, 0x3, 0x2, 0x9, 0x5, 0x6, 0x0, 0x3fcc], [0x800, 0x96, 0x100, 0x0, 0x401, 0x6, 0x1, 0x8, 0x7, 0x80, 0xfff, 0x2f, 0x9, 0x3, 0x10001, 0x0, 0x10000, 0x6, 0x100, 0x4, 0x7fffffff, 0x1, 0x8001, 0x1, 0xd, 0x5, 0x1000, 0x8, 0x1, 0x9, 0x80000002, 0xd, 0x1, 0x7, 0x7fff, 0x3, 0x9f9, 0x1, 0x2, 0xb342, 0x2, 0x451f, 0x1, 0x605f, 0xb0, 0xd4e5, 0x3, 0x80000002, 0x1, 0x2, 0x5, 0x0, 0x6c, 0x7, 0x101, 0xca8, 0x0, 0x7fffffff, 0xfffffffe, 0xffffff81, 0x5, 0x7, 0x5, 0xd], [0xfffffff5, 0x0, 0x0, 0xdd, 0x6, 0x4, 0x80000349, 0x10000000, 0x89ef, 0xcb4, 0x4, 0x6, 0x0, 0xf, 0x100, 0xa0000000, 0x0, 0x5, 0x4, 0x9, 0x6, 0xe, 0xcc, 0x7, 0x1, 0x8, 0x6, 0x6, 0x2, 0x10001, 0x407fff, 0x1, 0xfb, 0x2, 0x1, 0x1, 0x0, 0x1fd, 0x6, 0xf, 0x4, 0x2, 0x1000, 0xfa, 0x5, 0x2, 0x6, 0x0, 0x2, 0x3, 0x9, 0x5, 0x741, 0x3, 0x8, 0x2, 0x10, 0x8, 0x6, 0x7ff, 0xd, 0x5, 0xf4d, 0xd7e8], [0xd803, 0x9, 0x1, 0x1d43, 0x5, 0x4f84, 0x7ff, 0x0, 0x4, 0x2b, 0x6, 0x81, 0xffffffff, 0x200, 0xa, 0x1, 0x7fff, 0x7, 0x4, 0xd, 0x2acd684b, 0x2, 0x0, 0x80000000, 0x8009, 0x4, 0x41, 0x7fff, 0x2, 0x4, 0x5, 0x6, 0xda, 0x200, 0x0, 0x6, 0x2, 0x3ff, 0x6a, 0x6, 0x9, 0x8, 0x5, 0xffffff2d, 0x4, 0xbe9f, 0x6, 0x2, 0x8cb3, 0x7, 0x400, 0x7, 0x10000, 0x1c0000, 0x8, 0xaa3, 0x38e5, 0x0, 0x5, 0x2, 0x1, 0x3, 0x6, 0x4]}, 0x45c) 1.945916693s ago: executing program 0 (id=3070): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000280)={0x10, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d33, 0x1000, 0x0, 0x4000000}) sched_setscheduler(0x0, 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000400)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x39, 0x2c, 0x0, @local, @mcast2, {[], @ndisc_redir={0x89, 0x2, 0x0, '\x00', @private0, @ipv4={'\x00', '\xff\xff', @multicast1}, [{0xe, 0x2, "a3da6f0a80f08715f2cee9a42f4cd4"}]}}}}}, 0x6f) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x9, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1.591963891s ago: executing program 3 (id=3071): r0 = socket$inet_udp(0x2, 0x2, 0x0) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0xf000, 0x3, &(0x7f0000009000/0xf000)=nil) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="80000400", @ANYRES16=0x0, @ANYBLOB="000428bd7000fddbdf25070000007400038014000200766574683100000000000000000000001400020073797a5f74756e0000000000000000000800050000000000080001000200000014000600ff01000000000000000000000000000105000800010000001400060000000000000000000000000000000001080003000100000008000600000000000800050003000000"], 0x98}, 0x1, 0x0, 0x0, 0x40005}, 0x40) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000061401"], 0x40}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0xc80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000014000/0x1000)=nil}) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0x3, @local, 0x0, 0x80000}, 0x20) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) 1.152058541s ago: executing program 3 (id=3072): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000002580)=[{{&(0x7f00000004c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000540)=""/216, 0xd8}, {&(0x7f0000000640)=""/216, 0xd8}], 0x2, &(0x7f0000000780)=""/32, 0x20}, 0x8}, {{&(0x7f00000007c0)=@tipc=@name, 0x80, &(0x7f0000001e00)=[{&(0x7f0000000840)=""/220, 0xdc}, {&(0x7f0000000940)=""/199, 0xc7}, {&(0x7f0000000a40)=""/67, 0x43}, {&(0x7f0000000ac0)=""/194, 0xc2}, {&(0x7f0000001c40)=""/217, 0xd9}, {&(0x7f0000000bc0)=""/29, 0x1d}, {&(0x7f0000001d40)=""/43, 0x2b}, {&(0x7f0000001d80)=""/90, 0x5a}], 0x8, &(0x7f0000001e80)=""/244, 0xf4}, 0x101}, {{&(0x7f0000001f80)=@xdp, 0x80, &(0x7f0000002400)=[{&(0x7f0000002000)=""/170, 0xaa}, {&(0x7f00000020c0)=""/233, 0xe9}, {&(0x7f00000021c0)=""/71, 0x47}, {&(0x7f0000002240)=""/137, 0x89}, {&(0x7f0000002300)=""/141, 0x8d}, {&(0x7f00000023c0)}], 0x6, &(0x7f0000002480)=""/250, 0xfa}, 0x37}], 0x3, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$dri(0x0, 0xb, 0x20000) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, r5}]) r6 = eventfd(0xfffffff8) r7 = eventfd(0x101) r8 = eventfd2(0x3, 0x80000) io_submit(0x0, 0x4, &(0x7f0000000480)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x8, r3, &(0x7f00000002c0)="db912f98c34949df1c6f654f9e2a261e1d716d043aface17379c662f5e30ffb56fc5de50b871bad9c03360e00c1ac7ef894274774608b4fc5a84d4e38818b32299fe9f5d900087c0e7b1baaa60c60f6f864ae466e8705255857e64727b37cc36647d285f2d77af4cecb3b6b2f8c09442cb6c3464bcb706d85d3e566ca56e38cc3fab0014f1f47a1cec7b0a79acf8688266fe769b420d2d0461e008833459b64a12330dc9b7", 0xa5, 0x7fe9ac9d}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0xd, r1, &(0x7f0000000c40)="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", 0x1000, 0x8000, 0x0, 0x4, r6}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x7, r4, &(0x7f0000000380)="06d4e325937a39348ebb7bb31327166f052e8c5759f35025da7f82557c1407aa8c8f66f546cc058ea5c3fcc1c11e8104eb36a3a68381cdb3ae42416b2cf7e24e779619aceea8e5543864999dabaab3231439d25a61299c667bc1", 0x5a, 0x5, 0x0, 0x2, r7}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x8, r0, &(0x7f0000000400)="398a190ccc45608b3cbcd3", 0xb, 0x7c, 0x0, 0x2, r8}]) r9 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f000001fc40)=[@text16={0x10, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0], 0x48) r10 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r10, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$sock_linger(r10, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r10, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x2c}, 0x28) kexec_load(0x5, 0x3, &(0x7f0000001080), 0x3e0000) 1.092570032s ago: executing program 0 (id=3073): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = add_key$user(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x2}, &(0x7f0000000580)="d7", 0x1, 0xffffffffffffffff) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r1) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) keyctl$read(0xb, r0, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x27) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x14}, [@ldst={0x2, 0x0, 0x3, 0x1c10a1, 0x0, 0xc, 0x20000000}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d0500904431000000010902120001000080040904"], 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, 0x0) r5 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000cab000)=0xc) read$FUSE(r5, &(0x7f00000005c0)={0x2020}, 0x2020) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r6, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x8, 0x2b}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="20e87da92a3a"}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@random="07549e14f654", @device_a, @broadcast}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000810}, 0x4000000) 586.124µs ago: executing program 2 (id=3074): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x14, 0x38, 0x701, 0xfffffffc, 0x0, {0x2}}, 0x14}}, 0x4008000) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000bff4f96eb6db9fdb0000000000290000000092808d0bf9080b8cbc000000000000"], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee9, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x400, 0x9, 0x3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000066af1aa66c44b0000950000000000000000"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001800090400000001fedbdf250a000000000000000000008008001e0001000000080008"], 0x2c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xac, 0x2, 0x7, 0x3, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFACCT_PKTS={0xc}, @NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x40000}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}]}, @NFACCT_PKTS={0xc}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8001}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000810}, 0xc0c4) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) 0s ago: executing program 3 (id=3075): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='netfs_sreq\x00', r0}, 0x18) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x5416}}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r3, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_LK(r3, &(0x7f0000000340)={0x28, 0x0, 0x0, {{0x2, 0x0, 0x1}}}, 0x28) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x3f) write$FUSE_POLL(r4, &(0x7f0000000140)={0x18, 0x0, 0x0, {0x1}}, 0x18) kernel console output (not intermixed with test programs): 725.405159][ T30] audit: type=1400 audit(1757531833.438:7656): avc: denied { write } for pid=16537 comm="syz.1.2681" path="socket:[51733]" dev="sockfs" ino=51733 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 725.609138][T16477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 725.644587][T16477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 725.675251][T16550] kvm: pic: non byte read [ 725.679848][T16550] kvm: pic: level sensitive irq not supported [ 725.679902][T16550] kvm: pic: non byte read [ 725.691121][T16550] kvm: pic: level sensitive irq not supported [ 725.691160][T16550] kvm: pic: non byte read [ 725.719110][T16550] kvm: pic: level sensitive irq not supported [ 725.719166][T16550] kvm: pic: non byte read [ 725.754208][T16550] kvm: pic: level sensitive irq not supported [ 725.754263][T16550] kvm: pic: non byte read [ 725.769896][T16477] team0: Port device team_slave_0 added [ 725.776843][T16477] team0: Port device team_slave_1 added [ 725.784348][T16550] kvm: pic: level sensitive irq not supported [ 725.784400][T16550] kvm: pic: non byte read [ 725.801795][T16550] kvm: pic: level sensitive irq not supported [ 725.801851][T16550] kvm: pic: non byte read [ 725.820252][T16550] kvm: pic: level sensitive irq not supported [ 725.820304][T16550] kvm: pic: non byte read [ 725.869105][T16550] kvm: pic: level sensitive irq not supported [ 725.869165][T16550] kvm: pic: non byte read [ 725.892231][T16477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 725.900496][T16477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 725.942739][T16477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 725.962408][T16477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 725.970154][T16477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 725.997130][T16477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 726.099525][T16563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2686'. [ 726.172112][T16563] bridge0: port 5(team0) entered disabled state [ 726.379328][T16563] bridge0: port 4(batadv0) entered disabled state [ 726.403217][ T5844] Bluetooth: hci5: command tx timeout [ 726.431632][T16563] gretap0: left allmulticast mode [ 726.439823][T16563] gretap0: left promiscuous mode [ 726.461512][T16563] bridge0: port 3(gretap0) entered disabled state [ 726.513361][T16563] bridge_slave_1: left allmulticast mode [ 726.519701][T16563] bridge_slave_1: left promiscuous mode [ 726.530039][T16563] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.563771][T16563] bridge_slave_0: left allmulticast mode [ 726.570195][T16563] bridge_slave_0: left promiscuous mode [ 726.683238][T16563] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.836910][T16477] hsr_slave_0: entered promiscuous mode [ 726.843917][T16477] hsr_slave_1: entered promiscuous mode [ 726.857109][T16477] debugfs: 'hsr0' already exists in 'hsr' [ 726.862903][T16477] Cannot create hsr debugfs directory [ 726.973822][T15787] IPVS: stop unused estimator thread 0... [ 727.003962][T15267] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 727.054324][T16571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.062907][T16571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.160711][T15267] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.17 [ 727.170691][T15267] usb 4-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 727.182427][T15267] usb 4-1: Product: syz [ 727.187492][T15267] usb 4-1: Manufacturer: syz [ 727.353757][T15267] usb 4-1: SerialNumber: syz [ 727.455926][T15267] usb 4-1: config 0 descriptor?? [ 727.472724][T15267] ch341 4-1:0.0: ch341-uart converter detected [ 727.628821][T16477] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 727.665708][T16477] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 727.685768][T16477] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 727.704427][T16477] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 728.012698][T16477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 728.039908][T16477] 8021q: adding VLAN 0 to HW filter on device team0 [ 728.494108][ T5844] Bluetooth: hci5: command tx timeout [ 728.564501][T15267] usb 4-1: failed to receive control message: -110 [ 728.901362][T15784] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.908443][T15784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 728.927528][T15267] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 728.955165][T15784] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.962291][T15784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 728.971432][ T30] audit: type=1400 audit(1757531837.108:7657): avc: denied { mount } for pid=16599 comm="syz.1.2695" name="/" dev="hugetlbfs" ino=52789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 729.008954][ T30] audit: type=1400 audit(1757531837.168:7658): avc: denied { bind } for pid=16601 comm="syz.2.2696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 729.101230][T16477] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 729.113305][T16477] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 729.303426][ T30] audit: type=1400 audit(1757531837.448:7659): avc: denied { remount } for pid=16599 comm="syz.1.2695" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 729.627887][T16477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 729.815437][ T24] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 729.816948][ T30] audit: type=1400 audit(1757531837.978:7660): avc: denied { unmount } for pid=5842 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 729.843239][ C0] vkms_vblank_simulate: vblank timer overrun [ 729.849126][ T48] usb 4-1: USB disconnect, device number 72 [ 729.857655][ T48] ch341 4-1:0.0: device disconnected [ 729.893305][T16477] veth0_vlan: entered promiscuous mode [ 729.915922][T16477] veth1_vlan: entered promiscuous mode [ 729.940196][ T30] audit: type=1400 audit(1757531838.088:7661): avc: denied { append } for pid=16622 comm="syz.3.2700" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 729.963128][ C0] vkms_vblank_simulate: vblank timer overrun [ 729.983948][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 729.992729][T16477] veth0_macvtap: entered promiscuous mode [ 729.995940][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.014831][T16477] veth1_macvtap: entered promiscuous mode [ 730.038052][T16477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 730.038904][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 730.053265][T16477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 730.075573][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 730.075646][T15784] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.091794][ T24] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 730.111708][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.118107][T15784] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.135920][ T24] usb 1-1: config 0 descriptor?? [ 730.161005][T15784] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.163812][ T975] usb 2-1: new low-speed USB device number 85 using dummy_hcd [ 730.180450][T15784] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.495671][ T975] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 730.510589][ T975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.523806][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 730.537257][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 730.549580][ T975] usb 2-1: config 0 descriptor?? [ 730.561292][T15787] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 730.571200][T15789] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 730.583637][T15787] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 730.594512][T15789] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 730.616628][ T24] usb 1-1: USB disconnect, device number 82 [ 730.636376][ T30] audit: type=1400 audit(1757531838.798:7662): avc: denied { mounton } for pid=16477 comm="syz-executor" path="/root/syzkaller.WmIpu4/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 730.660783][ C0] vkms_vblank_simulate: vblank timer overrun [ 730.853355][ T975] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 730.873781][ T30] audit: type=1400 audit(1757531838.828:7663): avc: denied { mounton } for pid=16477 comm="syz-executor" path="/root/syzkaller.WmIpu4/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=53109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 730.901398][ C0] vkms_vblank_simulate: vblank timer overrun [ 731.011905][T16638] netlink: 'syz.0.2702': attribute type 4 has an invalid length. [ 731.053272][T16638] netlink: 'syz.0.2702': attribute type 4 has an invalid length. [ 731.121075][ T24] lo speed is unknown, defaulting to 1000 [ 731.127755][ T24] syz0: Port: 1 Link ACTIVE [ 731.141539][ T30] audit: type=1400 audit(1757531838.858:7664): avc: denied { mounton } for pid=16477 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 731.176244][T16643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2668'. [ 731.204130][T16643] geneve2: entered promiscuous mode [ 731.285972][T16642] trusted_key: encrypted_key: master key parameter '' is invalid [ 731.418509][ T30] audit: type=1400 audit(1757531838.858:7665): avc: denied { mount } for pid=16477 comm="syz-executor" name="/" dev="gadgetfs" ino=7550 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 731.449430][ T30] audit: type=1400 audit(1757531839.038:7666): avc: denied { write } for pid=16477 comm="syz-executor" name="cgroup.procs" dev="cgroup" ino=294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 731.869370][ T30] audit: type=1400 audit(1757531839.038:7667): avc: denied { open } for pid=16477 comm="syz-executor" path="/syzcgroup/cpu/syz4/cgroup.procs" dev="cgroup" ino=294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 732.312765][T16657] usb usb8: usbfs: process 16657 (syz.2.2704) did not claim interface 0 before use [ 732.498786][T16660] fuse: Bad value for 'user_id' [ 732.518896][T16660] fuse: Bad value for 'user_id' [ 733.075015][T16669] input: syz1 as /devices/virtual/input/input35 [ 733.640552][ T975] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 733.789091][ T975] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 733.915015][ T975] asix 2-1:0.0: probe with driver asix failed with error -71 [ 733.953384][ T975] usb 2-1: USB disconnect, device number 85 [ 734.344157][T16686] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2712'. [ 734.943896][T15267] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 735.103182][T15267] usb 1-1: Using ep0 maxpacket: 16 [ 735.112406][T15267] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.124156][T15267] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 735.143076][T15267] usb 1-1: config 0 interface 0 has no altsetting 0 [ 735.156714][T15267] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 735.167585][T15267] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.173738][ T24] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 735.177261][T15267] usb 1-1: config 0 descriptor?? [ 735.343356][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 735.371870][ T24] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 735.394854][ T24] usb 4-1: config 0 has no interface number 0 [ 735.401049][ T24] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.442683][ T24] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 735.457958][ T24] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 735.502656][ T24] usb 4-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 735.512430][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.686318][T15267] hid (null): unknown global tag 0xc [ 735.746036][T15267] hid (null): unknown global tag 0xd [ 735.761309][T15267] hid (null): report_id 45411 is invalid [ 735.777770][T15267] hid (null): bogus close delimiter [ 735.791993][ T24] usb 4-1: config 0 descriptor?? [ 735.793956][T15267] hid_parser_main: 9 callbacks suppressed [ 735.793975][T15267] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 735.823055][T15267] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 735.831394][T15267] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 735.843358][T15267] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 735.872614][T15267] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 735.883722][T15267] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 735.890731][T15267] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 735.898175][T15267] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 735.898891][T16688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 735.905691][T15267] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 735.905716][T15267] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 735.906183][T15267] cougar 0003:060B:500A.001F: unexpected long global item [ 735.939373][T15267] cougar 0003:060B:500A.001F: parse failed [ 735.945272][T15267] cougar 0003:060B:500A.001F: probe with driver cougar failed with error -22 [ 735.957357][T16688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.048634][ T975] usb 1-1: USB disconnect, device number 83 [ 736.282519][ T24] holtek_mouse 0003:04D9:A072.0020: item fetching failed at offset 0/4 [ 736.378234][ T24] holtek_mouse 0003:04D9:A072.0020: hid parse failed: -22 [ 736.395695][ T24] holtek_mouse 0003:04D9:A072.0020: probe with driver holtek_mouse failed with error -22 [ 736.484381][ T5964] usb 4-1: USB disconnect, device number 73 [ 736.519226][T16719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 736.527489][T16727] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2722'. [ 736.531626][T16719] 8021q: adding VLAN 0 to HW filter on device team0 [ 736.571851][T16728] vim2m vim2m.0: vidioc_s_fmt queue busy [ 736.598689][T16719] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 736.755251][ T24] lo speed is unknown, defaulting to 1000 [ 737.300987][ T24] syz2: Port: 1 Link ACTIVE [ 737.377180][T16733] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2724'. [ 737.572502][T16742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 737.584735][T16742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 737.703235][T15267] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 738.105206][T15267] usb 2-1: Using ep0 maxpacket: 16 [ 738.146439][T15267] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 738.159527][T15267] usb 2-1: config 0 has no interface number 0 [ 738.202206][T15267] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 738.212827][T15267] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.221019][T15267] usb 2-1: Product: syz [ 738.227743][T15267] usb 2-1: Manufacturer: syz [ 738.233330][T15267] usb 2-1: SerialNumber: syz [ 738.235379][T16752] netlink: 'syz.2.2729': attribute type 10 has an invalid length. [ 738.449563][T16752] veth0_vlan: left promiscuous mode [ 738.457047][T16752] veth0_vlan: entered promiscuous mode [ 738.468149][T16752] team0: Device veth0_vlan failed to register rx_handler [ 738.478043][T15267] usb 2-1: config 0 descriptor?? [ 738.494176][T15267] hub 2-1:0.132: bad descriptor, ignoring hub [ 738.500253][T15267] hub 2-1:0.132: probe with driver hub failed with error -5 [ 738.511600][T15267] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input36 [ 738.824944][ T975] usb 2-1: USB disconnect, device number 86 [ 738.908390][T16762] netlink: 'syz.0.2730': attribute type 10 has an invalid length. [ 738.917154][T16762] veth0_vlan: left promiscuous mode [ 738.924200][T16762] veth0_vlan: entered promiscuous mode [ 738.931706][T16762] team0: Device veth0_vlan failed to register rx_handler [ 739.543440][ T975] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 739.557688][T16772] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 739.569921][T16772] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 739.589567][T16772] bond0: (slave batadv0): Releasing backup interface [ 739.755086][ T975] usb 2-1: unable to get BOS descriptor or descriptor too short [ 739.837103][ T975] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 739.847988][ T975] usb 2-1: config 1 has no interface number 1 [ 739.859238][ T975] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 739.883698][ T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.899963][ T975] usb 2-1: Product: syz [ 739.928362][ T975] usb 2-1: Manufacturer: syz [ 739.939244][ T975] usb 2-1: SerialNumber: syz [ 740.884144][T16787] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 740.893968][T16787] exFAT-fs (loop3): unable to read boot sector [ 740.900131][T16787] exFAT-fs (loop3): failed to read boot sector [ 740.906859][T16787] exFAT-fs (loop3): failed to recognize exfat type [ 741.040219][T16785] netlink: 'syz.4.2734': attribute type 10 has an invalid length. [ 741.149364][T16785] veth0_vlan: left promiscuous mode [ 741.164841][T16785] veth0_vlan: entered promiscuous mode [ 741.178927][T16785] team0: Device veth0_vlan failed to register rx_handler [ 741.491490][ T975] usb 2-1: 2:1: invalid format type 0x1020 is detected, processed as PCM [ 741.542274][T16794] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2738'. [ 741.564489][ T975] usb 2-1: 2:1 : sample bitwidth 178 in over sample bytes 1 [ 741.622877][ T975] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 741.652098][ T975] usb 2-1: USB disconnect, device number 87 [ 741.668825][T16794] netlink: 'syz.1.2738': attribute type 10 has an invalid length. [ 741.999156][T16794] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2738'. [ 742.072227][T16794] batman_adv: batadv0: Adding interface: virt_wifi0 [ 742.118693][T16794] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 742.155172][T16794] batman_adv: batadv0: Interface activated: virt_wifi0 [ 742.505854][ T30] audit: type=1400 audit(1757531850.618:7668): avc: denied { read } for pid=16809 comm="syz.0.2741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 743.246452][ T5858] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 743.263228][ T30] audit: type=1400 audit(1757531851.418:7669): avc: denied { append } for pid=16821 comm="syz.2.2744" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 743.389589][T16822] netlink: 'syz.1.2743': attribute type 1 has an invalid length. [ 743.397687][T16822] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2743'. [ 743.472342][ T5858] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 743.496433][ T5858] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.592366][ T5858] usb 1-1: Product: syz [ 743.629831][ T5858] usb 1-1: Manufacturer: syz [ 743.641364][ T5858] usb 1-1: SerialNumber: syz [ 743.667418][ T30] audit: type=1400 audit(1757531851.828:7670): avc: denied { ioctl } for pid=16828 comm="syz.4.2746" path="socket:[54443]" dev="sockfs" ino=54443 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 743.840137][ T30] audit: type=1400 audit(1757531851.998:7671): avc: denied { accept } for pid=16828 comm="syz.4.2746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 743.942830][ T30] audit: type=1400 audit(1757531851.998:7672): avc: denied { search } for pid=16834 comm="syz.3.2748" name="/" dev="configfs" ino=223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 744.243920][T15267] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 744.373926][T15267] usb 4-1: device descriptor read/64, error -71 [ 744.663232][ T5895] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 744.670909][T15267] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 744.814701][T15267] usb 4-1: device descriptor read/64, error -71 [ 744.833202][ T5895] usb 3-1: Using ep0 maxpacket: 8 [ 744.840207][ T5895] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 744.848593][ T5895] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 744.858466][ T5895] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 744.868487][ T5895] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 744.899641][ T5895] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 744.934527][T15267] usb usb4-port1: attempt power cycle [ 744.940310][ T5895] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 744.956637][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.184487][ T30] audit: type=1400 audit(1757531853.338:7673): avc: denied { watch } for pid=16841 comm="syz.2.2750" path="/" dev="ramfs" ino=54468 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 745.207156][ T5895] usb 3-1: GET_CAPABILITIES returned 0 [ 745.212787][ T5895] usbtmc 3-1:16.0: can't read capabilities [ 745.238557][ T30] audit: type=1400 audit(1757531853.338:7674): avc: denied { watch_sb watch_reads } for pid=16841 comm="syz.2.2750" path="/" dev="ramfs" ino=54468 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 745.290403][T15267] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 745.389184][T16842] xt_limit: Overflow, try lower: 271964/0 [ 745.399360][T15267] usb 4-1: device descriptor read/8, error -71 [ 745.452544][ T5895] usb 3-1: USB disconnect, device number 73 [ 745.560218][ T5858] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 745.590076][ T5858] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 745.643845][T15267] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 745.706346][ T5858] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 745.755838][T16844] ptrace attach of "./syz-executor exec"[16477] was attempted by " @   À  @    8   appletalk_socketsocketˆ        @ @ \x0a À  @  €  @ @  À @  € €   À     @ @   @  ÿÿ \x0b       @ @   @ @   \x09  @ @   @ @     @ À  @ @ À    @   € À @   @À @  € \x0c @  @  € D @ À  €  @   \x0c  @ À  @ @ À    @   € À @   @À @  € \x0c @  @  € [ 745.757360][T16844] SELinux: failed to load policy [ 745.848355][ C1] vkms_vblank_simulate: vblank timer overrun [ 745.854111][T15267] usb 4-1: device descriptor read/8, error -71 [ 745.980253][T15267] usb usb4-port1: unable to enumerate USB device [ 745.986869][ T5858] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 746.033419][ T5858] usb 1-1: USB disconnect, device number 84 [ 746.808310][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.004498][ T5858] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 747.049825][ T30] audit: type=1400 audit(1757531855.208:7675): avc: denied { bind } for pid=16865 comm="syz.2.2757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 747.148913][T16867] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2756'. [ 747.364235][ T24] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 747.464039][ T975] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 747.529871][T16871] lo speed is unknown, defaulting to 1000 [ 747.539345][T16871] lo speed is unknown, defaulting to 1000 [ 747.553801][ T5858] usb 1-1: Using ep0 maxpacket: 8 [ 747.564408][ T5858] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 747.578020][ T5858] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 747.587576][ T5858] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.612077][ T5858] usb 1-1: config 0 descriptor?? [ 747.623792][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 747.629282][ T975] usb 4-1: no configurations [ 747.634390][ T975] usb 4-1: can't read configurations, error -22 [ 747.641785][ T24] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 747.651053][ T24] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 747.659646][ T24] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 747.668351][ T24] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 747.677223][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 747.694296][ T24] usb 3-1: config 0 has no interface number 0 [ 747.700592][ T24] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 747.711762][ T24] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 747.722171][ T24] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 747.740224][ T24] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 747.764247][ T24] usb 3-1: config 0 interface 125 has no altsetting 0 [ 747.785109][ T975] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 747.794797][ T24] usb 3-1: config 0 interface 125 has no altsetting 2 [ 747.806246][ T24] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 747.815853][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.824292][ T5964] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 747.838045][ T24] usb 3-1: Product: syz [ 747.847064][ T24] usb 3-1: Manufacturer: syz [ 747.849946][ T5858] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 747.851656][ T24] usb 3-1: SerialNumber: syz [ 747.908090][ T24] usb 3-1: config 0 descriptor?? [ 747.915444][ T24] usb 3-1: selecting invalid altsetting 2 [ 747.983543][ T5964] usb 2-1: Using ep0 maxpacket: 16 [ 747.989159][ T975] usb 4-1: no configurations [ 748.000813][ T975] usb 4-1: can't read configurations, error -22 [ 748.009195][ T975] usb usb4-port1: attempt power cycle [ 748.015532][ T5964] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 748.024473][ T5964] usb 2-1: config 0 has no interface number 0 [ 748.030597][ T5964] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 748.052366][ T5964] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 748.074441][T16852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 748.083983][T16852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 748.189128][ T5964] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 748.198845][ T5964] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 748.207245][ T5964] usb 2-1: Manufacturer: syz [ 748.212032][ T5964] usb 2-1: SerialNumber: syz [ 748.218693][ T5964] usb 2-1: config 0 descriptor?? [ 748.225726][T16876] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 748.249906][T16883] netlink: 'syz.0.2753': attribute type 13 has an invalid length. [ 748.497160][ T5964] usbtouchscreen 2-1:0.214: Failed to read FW rev: -71 [ 748.518721][ T5964] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 748.528636][ T975] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 748.546131][ T5964] usb 2-1: USB disconnect, device number 88 [ 748.564692][ T975] usb 4-1: no configurations [ 748.570068][ T975] usb 4-1: can't read configurations, error -22 [ 748.660252][T16888] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2763'. [ 748.798425][ T975] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 748.812030][ T30] audit: type=1400 audit(1757531856.977:7676): avc: denied { relabelfrom } for pid=16851 comm="syz.0.2753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 748.824555][ T975] usb 4-1: no configurations [ 748.834994][ T30] audit: type=1400 audit(1757531856.977:7677): avc: denied { relabelto } for pid=16851 comm="syz.0.2753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 748.837327][ T975] usb 4-1: can't read configurations, error -22 [ 748.866173][ T975] usb usb4-port1: unable to enumerate USB device [ 749.422502][ T30] audit: type=1400 audit(1757531857.577:7678): avc: denied { write } for pid=16865 comm="syz.2.2757" path="socket:[53481]" dev="sockfs" ino=53481 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 750.523778][T15267] usb 3-1: USB disconnect, device number 74 [ 750.597968][T16902] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 750.604488][T16902] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 750.735221][T16902] vhci_hcd vhci_hcd.0: Device attached [ 751.003253][ T24] usb 37-1: new high-speed USB device number 3 using vhci_hcd [ 751.036591][T16893] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.044150][T16893] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.737536][T16905] vhci_hcd: connection reset by peer [ 751.747513][ T6961] vhci_hcd: stop threads [ 751.751798][ T6961] vhci_hcd: release socket [ 751.764060][ T6961] vhci_hcd: disconnect device [ 752.215560][T16893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 752.442974][T16893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 752.683590][ T5895] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 752.849533][ T5895] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 752.862476][ T5895] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 752.878716][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 10 [ 752.897115][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 752.906878][ T5895] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 752.921489][ T5895] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 752.932356][ T5895] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 752.940428][ T5895] usb 3-1: Manufacturer: syz [ 752.947412][ T5895] usb 3-1: config 0 descriptor?? [ 753.073432][ T5895] usb 1-1: USB disconnect, device number 85 [ 753.080966][T16921] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2770'. [ 753.101933][ T6961] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.142702][ T6961] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.152828][T16927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2772'. [ 753.175065][T16918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.203440][T16918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.241108][T15267] usb 3-1: USB disconnect, device number 75 [ 753.362121][T15781] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.371880][T16935] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2774'. [ 753.401977][T15781] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.527823][ T30] audit: type=1400 audit(1757531861.687:7679): avc: denied { setopt } for pid=16933 comm="syz.3.2775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 753.533795][T16941] fuse: Bad value for 'rootmode' [ 755.061850][T16945] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65534 sclass=netlink_route_socket pid=16945 comm=syz.4.2776 [ 756.153595][ T24] vhci_hcd: vhci_device speed not set [ 756.840488][ T30] audit: type=1400 audit(1757531864.997:7680): avc: denied { read } for pid=16985 comm="syz.1.2786" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 756.842482][T16986] netlink: 448 bytes leftover after parsing attributes in process `syz.1.2786'. [ 756.986655][ T30] audit: type=1400 audit(1757531864.997:7681): avc: denied { open } for pid=16985 comm="syz.1.2786" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 757.033862][ T5858] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 757.243545][ T5858] usb 1-1: Using ep0 maxpacket: 16 [ 757.274831][T16995] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2788'. [ 757.313635][ T5858] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 757.346481][ T5858] usb 1-1: config 0 interface 0 has no altsetting 0 [ 757.377808][ T5858] usb 1-1: New USB device found, idVendor=046d, idProduct=c219, bcdDevice= 0.00 [ 757.419602][ T5858] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.481099][ T5858] usb 1-1: config 0 descriptor?? [ 757.604255][T12472] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 757.713091][T16982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 757.723568][T16982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 757.765598][T12472] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 757.779876][T12472] usb 3-1: config 0 has no interface number 0 [ 757.801958][T12472] usb 3-1: New USB device found, idVendor=1660, idProduct=1921, bcdDevice=1f.84 [ 757.811872][T12472] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.821690][T12472] usb 3-1: Product: syz [ 757.826778][T12472] usb 3-1: Manufacturer: syz [ 757.831361][T12472] usb 3-1: SerialNumber: syz [ 757.840805][T12472] usb 3-1: config 0 descriptor?? [ 757.985318][ T5858] hid_parser_main: 72 callbacks suppressed [ 757.985331][ T5858] logitech 0003:046D:C219.0021: unknown main item tag 0x0 [ 758.013634][ T5858] logitech 0003:046D:C219.0021: unknown main item tag 0x0 [ 758.020856][ T5858] logitech 0003:046D:C219.0021: unknown main item tag 0x0 [ 758.029069][ T5858] logitech 0003:046D:C219.0021: unknown main item tag 0x0 [ 758.036755][ T5858] logitech 0003:046D:C219.0021: unknown main item tag 0x0 [ 758.093822][ T5858] logitech 0003:046D:C219.0021: hidraw0: USB HID v0.05 Device [HID 046d:c219] on usb-dummy_hcd.0-1/input0 [ 758.105359][ T5858] logitech 0003:046D:C219.0021: no inputs found [ 758.235416][T16982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 758.259718][T16982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 758.809666][ T5858] usb 1-1: USB disconnect, device number 86 [ 758.824540][ T30] audit: type=1400 audit(1757531866.507:7682): avc: denied { validate_trans } for pid=17004 comm="syz.4.2790" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 758.854359][T17013] netlink: 'syz.1.2791': attribute type 10 has an invalid length. [ 758.862633][T17013] veth0_vlan: left promiscuous mode [ 758.869328][T17013] veth0_vlan: entered promiscuous mode [ 758.882295][T17014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 758.891278][T17013] team0: Device veth0_vlan failed to register rx_handler [ 758.904856][T17014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 758.928484][ T30] audit: type=1400 audit(1757531867.087:7683): avc: denied { append } for pid=16990 comm="syz.2.2787" name="sg0" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 759.037702][T12472] dvb-usb: found a 'Medion CTX1921 DVB-T USB' in warm state. [ 759.084656][T12472] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 759.103964][T12472] dvbdev: DVB: registering new adapter (Medion CTX1921 DVB-T USB) [ 759.126604][T12472] usb 3-1: media controller created [ 759.622012][T12472] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 759.646816][T17021] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 759.700383][T12472] DVB: Unable to find symbol dib7000p_attach() [ 759.708045][T12472] dvb-usb: no frontend was attached by 'Medion CTX1921 DVB-T USB' [ 759.825880][T12472] rc_core: IR keymap rc-dib0700-rc5 not found [ 759.925859][T17021] lo speed is unknown, defaulting to 1000 [ 759.932457][T17021] lo speed is unknown, defaulting to 1000 [ 759.960578][T12472] Registered IR keymap rc-empty [ 760.001766][T12472] dvb-usb: could not initialize remote control. [ 760.018644][T12472] dvb-usb: Medion CTX1921 DVB-T USB successfully initialized and connected. [ 760.133518][ T5858] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 760.715870][ T30] audit: type=1800 audit(1757531868.877:7684): pid=17010 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.2787" name="bus" dev="ramfs" ino=54919 res=0 errno=0 [ 760.861736][ T5858] usb 1-1: Using ep0 maxpacket: 32 [ 760.880641][ T5858] usb 1-1: config 0 has an invalid interface number: 86 but max is 0 [ 760.932534][T17046] netlink: 'syz.3.2799': attribute type 2 has an invalid length. [ 760.940856][T17046] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2799'. [ 760.950534][ T5858] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 761.001337][ T5858] usb 1-1: config 0 has no interface number 0 [ 761.037106][ T5895] usb 3-1: USB disconnect, device number 76 [ 761.065726][ T5858] usb 1-1: config 0 interface 86 altsetting 2 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 761.119666][ T5858] usb 1-1: config 0 interface 86 altsetting 2 endpoint 0x6 has invalid wMaxPacketSize 0 [ 761.164664][ T5895] dvb-usb: Medion CTX1921 DVB-T USB successfully deinitialized and disconnected. [ 761.190925][ T5858] usb 1-1: config 0 interface 86 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 761.223900][ T5858] usb 1-1: config 0 interface 86 has no altsetting 0 [ 761.245178][ T5858] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=33.7a [ 761.255174][ T5858] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.273501][ T5858] usb 1-1: Product: syz [ 761.288710][T17055] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 761.332687][ T5858] usb 1-1: Manufacturer: syz [ 761.349264][ T5858] usb 1-1: SerialNumber: syz [ 761.363453][ T5858] usb 1-1: config 0 descriptor?? [ 761.444237][T17059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2804'. [ 761.453894][T17059] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2804'. [ 761.583799][T15267] usb 1-1: USB disconnect, device number 87 [ 761.664052][ T5895] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 761.845026][ T5895] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 761.853322][ T5895] usb 3-1: config 0 has no interface number 0 [ 761.865314][ T5895] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 761.879474][ T5895] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 761.889612][ T5895] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 761.906319][ T5895] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 762.038352][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.049781][ T5895] usb 3-1: config 0 descriptor?? [ 762.723194][T15267] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 762.761431][T17086] netlink: 'syz.0.2810': attribute type 10 has an invalid length. [ 762.821463][T17086] veth0_vlan: left promiscuous mode [ 762.829451][T17086] veth0_vlan: entered promiscuous mode [ 762.838320][T17086] team0: Device veth0_vlan failed to register rx_handler [ 762.877868][ T5895] usbhid 3-1:0.1: can't add hid device: -71 [ 762.894567][T15267] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 762.907345][T15267] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 762.929077][ T5895] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 762.943795][T15267] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 762.963877][ T5895] usb 3-1: USB disconnect, device number 77 [ 762.983531][T15267] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 763.024617][T15267] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 763.040838][T15267] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.061499][T15267] usb 4-1: config 0 descriptor?? [ 763.189170][T17090] trusted_key: encrypted_key: master key parameter is missing [ 763.235147][T17094] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2814'. [ 763.481970][T17106] netlink: 'syz.1.2815': attribute type 10 has an invalid length. [ 763.490792][T17106] veth0_vlan: left promiscuous mode [ 763.498560][T17106] veth0_vlan: entered promiscuous mode [ 763.509855][T17106] team0: Device veth0_vlan failed to register rx_handler [ 764.060441][T15267] usbhid 4-1:0.0: can't add hid device: -71 [ 764.127183][T15267] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 764.221153][T15267] usb 4-1: USB disconnect, device number 82 [ 764.449934][T17135] ALSA: seq fatal error: cannot create timer (-22) [ 764.510761][T17135] Invalid ELF header magic: != ELF [ 764.555570][ T30] audit: type=1400 audit(1757531872.667:7685): avc: denied { module_load } for pid=17127 comm="syz.4.2822" path="/sys/kernel/notes" dev="sysfs" ino=1406 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 764.738427][T15267] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 764.850791][T17139] tipc: Enabled bearer , priority 0 [ 765.241250][T15267] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 765.346986][T15267] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 765.440135][ T30] audit: type=1400 audit(1757531873.597:7686): avc: denied { getopt } for pid=17140 comm="syz.2.2824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 765.504245][T15267] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.641666][T15267] usb 4-1: config 0 descriptor?? [ 765.762322][T17146] netlink: ct family unspecified [ 765.767379][T17146] openvswitch: netlink: Actions may not be safe on all matching packets [ 765.976743][ T24] tipc: Node number set to 2130706433 [ 766.080515][T15267] lua 0003:1E7D:2C2E.0022: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.3-1/input0 [ 766.136287][ T30] audit: type=1400 audit(1757531874.277:7687): avc: denied { lock } for pid=17149 comm="syz.2.2827" path="socket:[55215]" dev="sockfs" ino=55215 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 766.298564][T17126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 766.335060][T17126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 766.360303][ T24] usb 4-1: USB disconnect, device number 83 [ 767.644454][T17185] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2834'. [ 767.863190][ T30] audit: type=1400 audit(1757531876.019:7688): avc: denied { map } for pid=17187 comm="syz.1.2836" path="socket:[54170]" dev="sockfs" ino=54170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 767.922186][T17177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2832'. [ 768.143289][T12472] usb 2-1: new low-speed USB device number 89 using dummy_hcd [ 768.320419][T12472] usb 2-1: config 14 has an invalid interface number: 99 but max is 2 [ 768.331782][T12472] usb 2-1: config 14 contains an unexpected descriptor of type 0x1, skipping [ 768.367445][T15267] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 768.492717][T12472] usb 2-1: config 14 contains an unexpected descriptor of type 0x2, skipping [ 768.502674][T12472] usb 2-1: config 14 has an invalid interface number: 151 but max is 2 [ 768.511094][T12472] usb 2-1: config 14 has an invalid interface number: 192 but max is 2 [ 768.521934][T12472] usb 2-1: config 14 has an invalid interface number: 214 but max is 2 [ 768.531285][T12472] usb 2-1: config 14 has 4 interfaces, different from the descriptor's value: 3 [ 768.540956][T12472] usb 2-1: config 14 has no interface number 0 [ 768.547719][T12472] usb 2-1: config 14 has no interface number 1 [ 768.554485][T12472] usb 2-1: config 14 has no interface number 2 [ 768.560649][T12472] usb 2-1: config 14 has no interface number 3 [ 768.572953][T12472] usb 2-1: config 14 interface 99 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 8 [ 768.584608][T12472] usb 2-1: config 14 interface 99 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 768.717278][T12472] usb 2-1: config 14 interface 99 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 768.825828][T12472] usb 2-1: config 14 interface 99 altsetting 0 endpoint 0x9 has invalid maxpacket 64, setting to 8 [ 768.981868][T12472] usb 2-1: config 14 interface 99 altsetting 0 endpoint 0xB has invalid maxpacket 16, setting to 8 [ 769.001896][T12472] usb 2-1: config 14 interface 99 altsetting 0 endpoint 0x1 has invalid maxpacket 64, setting to 8 [ 769.023722][T12472] usb 2-1: config 14 interface 99 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 769.043784][T12472] usb 2-1: config 14 interface 99 altsetting 0 endpoint 0xA is Bulk; changing to Interrupt [ 769.054527][T12472] usb 2-1: config 14 interface 99 altsetting 0 endpoint 0x5 has invalid maxpacket 64, setting to 8 [ 769.076100][T12472] usb 2-1: config 14 interface 99 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 769.103259][T12472] usb 2-1: config 14 interface 99 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 769.123403][T12472] usb 2-1: config 14 interface 99 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 769.161983][T12472] usb 2-1: config 14 interface 99 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 769.196373][T15267] usb 4-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=cb.d7 [ 769.203838][T12472] usb 2-1: config 14 interface 99 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 769.216457][T15267] usb 4-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3 [ 769.216481][T15267] usb 4-1: Product: syz [ 769.216495][T15267] usb 4-1: Manufacturer: syz [ 769.216509][T15267] usb 4-1: SerialNumber: syz [ 769.218336][T15267] usb 4-1: config 0 descriptor?? [ 769.225646][T12472] usb 2-1: config 14 interface 151 altsetting 22 endpoint 0xF has invalid maxpacket 1024, setting to 8 [ 769.676880][T12472] usb 2-1: config 14 interface 151 altsetting 22 has a duplicate endpoint with address 0x3, skipping [ 769.687893][T12472] usb 2-1: config 14 interface 151 altsetting 22 has a duplicate endpoint with address 0xC, skipping [ 769.698791][T12472] usb 2-1: config 14 interface 151 altsetting 22 endpoint 0x8 has invalid maxpacket 16, setting to 8 [ 769.705904][T15267] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 769.709673][T12472] usb 2-1: config 14 interface 151 altsetting 22 endpoint 0x7 has invalid maxpacket 16, setting to 8 [ 769.730698][T15267] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 769.745398][T12472] usb 2-1: config 14 interface 151 altsetting 22 has an invalid descriptor for endpoint zero, skipping [ 769.757032][T12472] usb 2-1: config 14 interface 151 altsetting 22 has a duplicate endpoint with address 0x7, skipping [ 769.768562][T12472] usb 2-1: config 14 interface 151 altsetting 22 has 7 endpoint descriptors, different from the interface descriptor's value: 13 [ 769.782466][T12472] usb 2-1: too many endpoints for config 14 interface 192 altsetting 67: 56, using maximum allowed: 30 [ 769.795379][T12472] usb 2-1: config 14 interface 192 altsetting 67 has a duplicate endpoint with address 0xB, skipping [ 769.809842][T12472] usb 2-1: config 14 interface 192 altsetting 67 has a duplicate endpoint with address 0xF, skipping [ 769.821334][T12472] usb 2-1: config 14 interface 192 altsetting 67 has a duplicate endpoint with address 0x8, skipping [ 769.832773][T12472] usb 2-1: config 14 interface 192 altsetting 67 has an invalid descriptor for endpoint zero, skipping [ 769.919800][T12472] usb 2-1: config 14 interface 192 altsetting 67 endpoint 0xE has invalid maxpacket 64, setting to 8 [ 769.959276][T12472] usb 2-1: config 14 interface 192 altsetting 67 has a duplicate endpoint with address 0x7, skipping [ 769.990537][T12472] usb 2-1: config 14 interface 192 altsetting 67 has 6 endpoint descriptors, different from the interface descriptor's value: 56 [ 770.028120][T12472] usb 2-1: config 14 interface 214 altsetting 252 endpoint 0x4 is Bulk; changing to Interrupt [ 770.063741][T12472] usb 2-1: config 14 interface 214 altsetting 252 has a duplicate endpoint with address 0xE, skipping [ 770.085905][T12472] usb 2-1: config 14 interface 214 altsetting 252 has a duplicate endpoint with address 0x4, skipping [ 770.112209][T12472] usb 2-1: config 14 interface 214 altsetting 252 has a duplicate endpoint with address 0x3, skipping [ 770.126794][T12472] usb 2-1: config 14 interface 214 altsetting 252 has a duplicate endpoint with address 0xA, skipping [ 770.138169][T12472] usb 2-1: config 14 interface 151 has no altsetting 0 [ 770.146857][T12472] usb 2-1: config 14 interface 192 has no altsetting 0 [ 770.155449][T12472] usb 2-1: config 14 interface 214 has no altsetting 0 [ 770.165390][T12472] usb 2-1: New USB device found, idVendor=12d1, idProduct=b9f4, bcdDevice=67.6e [ 770.174819][T12472] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.183727][T12472] usb 2-1: Product: ⠛旯ุ싧릪泶瓦鱉㡻å•á˜‹â˜ä£¸ï“«àµ‹é©ƒáž¿îœ¦à¢¾â®«é‘²ß±â°Ÿê‹ª [ 770.195867][T12472] usb 2-1: Manufacturer: 빪Ϳ짷刌浗鎧铌鞾広㡤ﻫǦゥ짔녡㵰㘖⚌ã«ì¨¡ë¦¯ä·ìš˜â¥¶ãŸ¾à£•ãŒà¤¹ç±½à¨•æ’翔잫烹체䱆í¬é¢ä›¢ï³°ãµ‹æŒšè—œç»–쥚ꋧﭗà¾ë¬®á®µïœ¤â‚⊺悧㴸뱻꫔䧴녔ê¿ã—¢ç«°á•¬ê·Œç¡ ï”¸á¨…ੂ쑃á­à±‡äµ©ï‡•è³—镄㓘ͯꆳ㪵囌ჲ爹㒀冀಻곡㿳䆇涗 [ 770.224652][T12472] usb 2-1: SerialNumber: 㑨؎緌Ç뤇ä£æŠ€ìš—Ǜ䚜çšáˆ™ï»‰é–œå•¹ã·½ë䎡㾆從ᆇᮈ仳὞ꌻặá…룑ᲈ︎Ჿä”髣鱟앆ꮺ⻉⎞Õ䕜걅跙採蜉콫ï±ã¹šË½ï²«â¾”辟雽瞩氹㱣팚챱죅숃㣭 [ 770.249089][T17196] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 770.260867][T17196] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 770.268880][T17196] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 770.472759][ T30] audit: type=1400 audit(1757531878.629:7689): avc: denied { write } for pid=17233 comm="syz.0.2848" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 770.480836][T17196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 770.506427][ T30] audit: type=1400 audit(1757531878.669:7690): avc: denied { read } for pid=17233 comm="syz.0.2848" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 770.508155][T17196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 770.537374][ T5964] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 770.537453][ T30] audit: type=1400 audit(1757531878.669:7691): avc: denied { open } for pid=17233 comm="syz.0.2848" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 770.605891][T12472] option 2-1:14.99: GSM modem (1-port) converter detected [ 770.608304][T17238] ubi: mtd0 is already attached to ubi31 [ 770.627521][T12472] option 2-1:14.151: GSM modem (1-port) converter detected [ 770.642823][T12472] usb 2-1: USB disconnect, device number 89 [ 770.652483][T12472] option 2-1:14.99: device disconnected [ 770.660880][T12472] option 2-1:14.151: device disconnected [ 770.764771][ T5964] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 770.776112][ T5964] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 770.786661][ T5964] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 770.796298][ T5964] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.807465][ T5964] usb 3-1: config 0 descriptor?? [ 770.899754][T17241] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=17241 comm=syz.4.2850 [ 771.030756][T15267] usb 4-1: USB disconnect, device number 84 [ 771.057721][T17250] netlink: 'syz.3.2853': attribute type 1 has an invalid length. [ 771.066003][T17250] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.2853'. [ 771.375242][ T5964] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 771.386721][ T5964] cp2112 0003:10C4:EA90.0023: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 771.572257][ T5964] cp2112 0003:10C4:EA90.0023: Part Number: 0x65 Device Version: 0x8E [ 771.740819][ T30] audit: type=1400 audit(1757531879.839:7692): avc: denied { map } for pid=17255 comm="syz.0.2855" path="socket:[54251]" dev="sockfs" ino=54251 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 771.794581][T17262] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2855'. [ 771.845745][ T5964] cp2112 0003:10C4:EA90.0023: error requesting SMBus config [ 771.921781][ T5964] cp2112 0003:10C4:EA90.0023: probe with driver cp2112 failed with error -71 [ 771.934927][ T5964] usb 3-1: USB disconnect, device number 78 [ 771.951534][T17265] vlan0: entered allmulticast mode [ 771.958001][T17265] bridge_slave_0: entered allmulticast mode [ 772.793163][T15267] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 772.953782][T15267] usb 2-1: Using ep0 maxpacket: 16 [ 773.020393][ T30] audit: type=1400 audit(1757531881.179:7693): avc: denied { read } for pid=17276 comm="syz.2.2860" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 773.027471][T17279] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 773.058301][ T30] audit: type=1400 audit(1757531881.179:7694): avc: denied { open } for pid=17276 comm="syz.2.2860" path="/540/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 773.073166][T17279] block device autoloading is deprecated and will be removed. [ 773.228961][T17270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2858'. [ 773.238577][T17270] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 773.254288][T17270] sctp: [Deprecated]: syz.3.2858 (pid 17270) Use of struct sctp_assoc_value in delayed_ack socket option. [ 773.254288][T17270] Use struct sctp_sack_info instead [ 773.330474][T17282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2860'. [ 773.576125][T17288] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2863'. [ 774.124988][T17308] netlink: 'syz.4.2868': attribute type 10 has an invalid length. [ 774.132841][T17308] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2868'. [ 774.144008][T17308] dummy0: entered promiscuous mode [ 774.150732][T17308] bridge0: port 3(dummy0) entered blocking state [ 774.157537][T17308] bridge0: port 3(dummy0) entered disabled state [ 774.164379][T17308] dummy0: entered allmulticast mode [ 774.313216][ T5858] usb 1-1: new full-speed USB device number 88 using dummy_hcd [ 774.935646][ T30] audit: type=1400 audit(1757531883.099:7695): avc: denied { setopt } for pid=17316 comm="syz.3.2872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 774.974879][ T5858] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 775.057215][ T5858] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.235059][ T5858] usb 1-1: config 0 descriptor?? [ 775.243049][ T5858] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 775.372300][T15267] usb 2-1: unable to get BOS descriptor or descriptor too short [ 775.384723][T15267] usb 2-1: too many configurations: 126, using maximum allowed: 8 [ 775.441088][T15267] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 775.455538][T15267] usb 2-1: can't read configurations, error -71 [ 775.662944][ T5858] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 775.730144][ T5858] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 776.044122][T12472] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 776.227408][ T5858] usb 1-1: USB disconnect, device number 88 [ 776.244562][T12472] usb 3-1: Using ep0 maxpacket: 8 [ 776.261058][T12472] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 776.284933][T12472] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 776.303983][ T5170] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 776.315567][ T5170] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 776.323981][ T5170] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 776.338614][ T5170] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 776.346892][ T5170] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 776.364076][T12472] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.380275][T12472] usb 3-1: config 0 descriptor?? [ 776.460823][T17338] lo speed is unknown, defaulting to 1000 [ 776.475138][T17338] lo speed is unknown, defaulting to 1000 [ 776.591676][T12472] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 777.245916][T17365] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 777.255999][T17365] exFAT-fs (loop4): unable to read boot sector [ 777.262180][T17365] exFAT-fs (loop4): failed to read boot sector [ 777.268971][T17365] exFAT-fs (loop4): failed to recognize exfat type [ 777.297625][T17365] netlink: 'syz.4.2881': attribute type 83 has an invalid length. [ 777.952859][ T30] audit: type=1400 audit(1757531886.079:7696): avc: denied { module_load } for pid=17334 comm="syz.2.2876" path="/545/bus" dev="tmpfs" ino=2949 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 777.983686][T17368] Invalid ELF header magic: != ELF [ 778.018702][ T30] audit: type=1400 audit(1757531886.159:7697): avc: denied { getopt } for pid=17369 comm="syz.1.2883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 778.187748][T17382] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17382 comm=syz.0.2884 [ 778.414384][ T5170] Bluetooth: hci3: command tx timeout [ 778.489181][T17386] random: crng reseeded on system resumption [ 778.853225][ T30] audit: type=1400 audit(1757531886.649:7698): avc: denied { append } for pid=17383 comm="syz.4.2886" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 778.876421][ C0] vkms_vblank_simulate: vblank timer overrun [ 778.908966][ T30] audit: type=1400 audit(1757531886.649:7699): avc: denied { open } for pid=17383 comm="syz.4.2886" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 778.941251][ T30] audit: type=1400 audit(1757531887.059:7700): avc: denied { firmware_load } for pid=15781 comm="kworker/u8:19" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 779.001748][T17390] loop6: detected capacity change from 0 to 524287999 [ 779.011026][ T30] audit: type=1400 audit(1757531887.179:7701): avc: denied { map } for pid=17389 comm="syz.0.2887" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 779.100519][ T24] usb 3-1: USB disconnect, device number 79 [ 779.470169][ T5858] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 779.640804][ T5858] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 779.649540][ T5858] usb 1-1: config 0 has no interface number 0 [ 779.663039][ T5858] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 779.684557][ T5858] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.692537][ T5858] usb 1-1: Product: syz [ 779.697493][ T5858] usb 1-1: Manufacturer: syz [ 779.702159][ T5858] usb 1-1: SerialNumber: syz [ 779.710597][ T5858] usb 1-1: config 0 descriptor?? [ 779.939071][ T6963] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 779.950614][ T6963] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 779.979269][ T30] audit: type=1400 audit(1757531888.139:7702): avc: denied { connect } for pid=17389 comm="syz.0.2887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 780.102049][ T6963] bond0 (unregistering): Released all slaves [ 780.197386][ T6963] bond1 (unregistering): Released all slaves [ 780.296731][T17338] chnl_net:caif_netlink_parms(): no params data found [ 780.679244][ T5858] dvb_usb_ec168 1-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 780.718966][ T5858] usb 1-1: USB disconnect, device number 89 [ 780.730744][ T6963] : left promiscuous mode [ 780.735581][ T5170] Bluetooth: hci3: command tx timeout [ 780.836838][ T6963] tipc: Disabling bearer [ 780.845088][ T6963] tipc: Left network mode [ 780.849550][T17338] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.857772][T17338] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.872070][T17338] bridge_slave_0: entered allmulticast mode [ 780.880627][T17338] bridge_slave_0: entered promiscuous mode [ 780.897633][T17338] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.905017][T17338] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.912488][T17338] bridge_slave_1: entered allmulticast mode [ 780.919968][T17338] bridge_slave_1: entered promiscuous mode [ 780.989326][T17338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 781.002735][T17338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 781.059092][ T30] audit: type=1400 audit(1757531889.219:7703): avc: denied { append } for pid=17419 comm="syz.2.2893" name="video4" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 781.082425][T15267] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 781.098325][T17338] team0: Port device team_slave_0 added [ 781.117679][T17338] team0: Port device team_slave_1 added [ 781.129738][ T6963] batadv_slave_0: left promiscuous mode [ 781.137214][ T6963] hsr_slave_0: left promiscuous mode [ 781.146368][ T6963] hsr_slave_1: left promiscuous mode [ 781.161169][ T6963] pim6reg (unregistering): left allmulticast mode [ 781.243851][T15267] usb 2-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 251, changing to 11 [ 781.255094][T15267] usb 2-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 781.267981][T15267] usb 2-1: config 1 interface 0 has no altsetting 0 [ 781.276429][T15267] usb 2-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.40 [ 781.286050][T15267] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.294127][T15267] usb 2-1: Product: 汪 [ 781.298321][T15267] usb 2-1: Manufacturer: Ѷ耆ï¦çº¦ìµ ì”¼äƒ»ë•˜ä†°èš‰à Šä²‹à¯£â†å§ªè“Žä§¿ç¹¡ä±¾ï°¢æ¤ºã­©â£ƒì¢µáŸžï¾é¦Žèº¬ä½‘ê·á˜¶à¶”鵡婘è¤å£é±…৲ã“㹩䠋 [ 781.313603][T15267] usb 2-1: SerialNumber: syz [ 781.472154][T17429] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.2894'. [ 781.503177][ T5964] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 781.634642][T17418] overlayfs: failed to resolve './file1': -2 [ 781.908968][T17433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 781.967481][T17433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 782.276116][ T6963] team0 (unregistering): Port device team_slave_1 removed [ 782.308291][ T6963] team0 (unregistering): Port device team_slave_0 removed [ 782.329590][ T5964] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 782.340868][ T5964] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 782.352269][ T5964] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 782.363128][ T5964] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 782.377975][ T5964] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 782.387449][ T5964] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 782.396027][ T5964] usb 1-1: Manufacturer: syz [ 782.402702][ T5964] usb 1-1: config 0 descriptor?? [ 782.710633][T17338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 782.720619][T17338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 782.746521][ C0] vkms_vblank_simulate: vblank timer overrun [ 782.752739][T17338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 782.769117][T17338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 782.777582][T17338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 782.804190][ T5170] Bluetooth: hci3: command tx timeout [ 782.810412][T17338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 782.826362][ T5964] appleir 0003:05AC:8243.0024: unknown main item tag 0x0 [ 782.852929][ T5964] appleir 0003:05AC:8243.0024: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 782.893036][T15267] usbhid 2-1:1.0: can't add hid device: -71 [ 782.899161][T15267] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 782.907341][T17437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2897'. [ 782.920644][T15267] usb 2-1: USB disconnect, device number 92 [ 782.923969][T17338] hsr_slave_0: entered promiscuous mode [ 782.932679][T17338] hsr_slave_1: entered promiscuous mode [ 782.945104][T17338] debugfs: 'hsr0' already exists in 'hsr' [ 782.950917][T17338] Cannot create hsr debugfs directory [ 783.185314][ T30] audit: type=1400 audit(1757531891.349:7704): avc: denied { write } for pid=17441 comm="syz.2.2899" name="file0" dev="fuse" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 783.228621][ T30] audit: type=1400 audit(1757531891.349:7705): avc: denied { ioctl } for pid=17441 comm="syz.2.2899" path="/551/file0/file0" dev="fuse" ino=4 ioctlcmd=0x301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 783.255309][T15267] usb 1-1: USB disconnect, device number 90 [ 784.163941][T17461] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2902'. [ 784.584740][T17338] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 784.608565][T17338] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 784.625916][T17338] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 784.638527][T17338] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 784.733983][ T24] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 784.752243][T17338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 784.783737][T17338] 8021q: adding VLAN 0 to HW filter on device team0 [ 784.802809][ T6963] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.810494][ T6963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 784.838548][ T6963] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.845625][ T6963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 784.853722][T12472] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 784.883905][ T5170] Bluetooth: hci3: command tx timeout [ 784.896953][T17338] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 784.908140][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 784.915735][T17338] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 784.930939][ T24] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 784.945630][ T24] usb 1-1: config 0 has no interface number 0 [ 784.955362][ T24] usb 1-1: config 0 interface 85 has no altsetting 0 [ 784.980491][ T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 784.991121][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.999980][ T24] usb 1-1: Product: syz [ 785.004910][T12472] usb 2-1: Using ep0 maxpacket: 16 [ 785.010157][ T24] usb 1-1: Manufacturer: syz [ 785.014975][ T24] usb 1-1: SerialNumber: syz [ 785.020576][T12472] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 785.035764][ T24] usb 1-1: config 0 descriptor?? [ 785.040810][T12472] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 785.051492][T12472] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 785.062484][ T24] appletouch 1-1:0.85: Could not find int-in endpoint [ 785.069679][ T24] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 785.079040][ T24] usbhid 1-1:0.85: couldn't find an input interrupt endpoint [ 785.087097][T12472] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.098969][T12472] usb 2-1: config 0 descriptor?? [ 785.167968][T17338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 785.203921][T17338] veth0_vlan: entered promiscuous mode [ 785.214284][T17338] veth1_vlan: entered promiscuous mode [ 785.239623][T17338] veth0_macvtap: entered promiscuous mode [ 785.248112][T17338] veth1_macvtap: entered promiscuous mode [ 785.265692][T17338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 785.289853][T17338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 785.301478][T17466] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2904'. [ 785.305776][ T6963] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.332300][ T6963] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.341926][ T6963] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.372771][ T6963] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.419380][T15787] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.429781][T15787] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.460074][T15788] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.469314][T15788] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.856499][T17494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2873'. [ 785.870040][T17494] bridge_slave_1: left allmulticast mode [ 785.876565][T17494] bridge_slave_1: left promiscuous mode [ 785.890918][T17494] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.910727][T17494] bridge_slave_0: left allmulticast mode [ 785.916516][T17494] bridge_slave_0: left promiscuous mode [ 785.928621][T17494] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.165463][ T975] usb 1-1: USB disconnect, device number 91 [ 787.833582][ T30] audit: type=1400 audit(1757531895.979:7706): avc: denied { setattr } for pid=17514 comm="syz.3.2912" name="PINGv6" dev="sockfs" ino=57284 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 787.872702][T17517] overlayfs: missing 'workdir' [ 787.907652][T12472] usbhid 2-1:0.0: can't add hid device: -71 [ 788.003789][T12472] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 788.019237][T12472] usb 2-1: USB disconnect, device number 93 [ 788.241520][T17525] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2914'. [ 788.252784][T17525] 8021q: VLANs not supported on ip6gre0 [ 789.003560][ T30] audit: type=1400 audit(1757531897.159:7707): avc: denied { connect } for pid=17536 comm="syz.3.2919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 789.343995][T17545] hfsplus: unable to find HFS+ superblock [ 789.388779][T17545] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2920'. [ 789.397900][T17545] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2920'. [ 789.913484][ T30] audit: type=1400 audit(1757531898.049:7708): avc: denied { unmount } for pid=5846 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 789.976667][T12472] usb 4-1: new low-speed USB device number 85 using dummy_hcd [ 790.200268][T12472] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 790.323862][T12472] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.414436][T12472] usb 4-1: config 0 descriptor?? [ 790.632082][T12472] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 790.741389][ T5903] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 791.034652][T17573] netlink: 'syz.4.2928': attribute type 8 has an invalid length. [ 791.073283][ T5903] usb 3-1: Using ep0 maxpacket: 32 [ 791.079748][ T5903] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 791.088800][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.098272][ T5903] usb 3-1: config 0 descriptor?? [ 791.263730][ T5964] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 791.315300][ T5903] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 791.328646][ T5903] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 791.338398][ T5903] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 791.346085][ T5903] usb 3-1: media controller created [ 791.361286][ T5903] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 791.431912][ T5964] usb 2-1: unable to get BOS descriptor or descriptor too short [ 791.511919][ T30] audit: type=1400 audit(1757531899.659:7709): avc: denied { write } for pid=17574 comm="syz.0.2929" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 791.561207][ T5964] usb 2-1: config index 0 descriptor too short (expected 4310, got 145) [ 791.571521][ T5964] usb 2-1: config 193 has too many interfaces: 103, using maximum allowed: 32 [ 791.581719][ T5964] usb 2-1: config 193 has an invalid descriptor of length 0, skipping remainder of the config [ 791.593944][ T5964] usb 2-1: config 193 has 3 interfaces, different from the descriptor's value: 103 [ 791.604369][ T5964] usb 2-1: config 193 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 791.617920][ T5964] usb 2-1: config 193 interface 1 has no altsetting 0 [ 791.635892][ T5964] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 791.649007][ T5964] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.658503][ T5964] usb 2-1: Product: syz [ 791.662841][ T5964] usb 2-1: Manufacturer: syz [ 791.668138][ T5964] usb 2-1: SerialNumber: syz [ 791.680494][ T5903] DVB: Unable to find symbol dib7000p_attach() [ 791.691845][ T5903] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 791.743124][ T5903] rc_core: IR keymap rc-dib0700-rc5 not found [ 791.749288][ T5903] Registered IR keymap rc-empty [ 791.754813][ T5903] dvb-usb: could not initialize remote control. [ 791.761089][ T5903] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 791.802827][ T5903] usb 3-1: USB disconnect, device number 80 [ 791.825813][ T5903] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 791.894574][ T5964] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 791.909772][ T5964] snd-usb-audio 2-1:193.0: probe with driver snd-usb-audio failed with error -22 [ 791.922984][ T5964] usb 2-1: USB disconnect, device number 94 [ 792.506884][ T30] audit: type=1400 audit(1757531900.609:7710): avc: denied { write } for pid=17585 comm="syz.0.2931" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 792.795636][T17594] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2934'. [ 792.853255][ T5903] usb 3-1: new full-speed USB device number 81 using dummy_hcd [ 792.951761][T12472] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 792.962326][T12472] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 792.974233][T12472] asix 4-1:0.0: probe with driver asix failed with error -71 [ 792.983549][ T5903] usb 3-1: device descriptor read/64, error -71 [ 792.984183][T12472] usb 4-1: USB disconnect, device number 85 [ 793.053307][T15267] usb 2-1: new full-speed USB device number 95 using dummy_hcd [ 793.214691][T15267] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 793.226267][ T5903] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 793.233878][T15267] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 793.245079][T15267] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 793.256775][T15267] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 793.265903][T15267] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.274312][T15267] usb 2-1: Product: syz [ 793.278458][T15267] usb 2-1: Manufacturer: syz [ 793.283019][T15267] usb 2-1: SerialNumber: syz [ 793.288825][T15267] usb 2-1: config 0 descriptor?? [ 793.383177][ T5903] usb 3-1: device descriptor read/64, error -71 [ 793.423161][ T5895] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 793.493582][ T5903] usb usb3-port1: attempt power cycle [ 793.583270][ T5895] usb 1-1: Using ep0 maxpacket: 32 [ 793.685333][T17607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2934'. [ 793.723543][T17607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 793.741190][T17607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 793.790161][T17607] 9pnet_virtio: no channels available for device /dev/nbd1 [ 793.953183][ T5895] usb 1-1: config 4 has an invalid interface number: 8 but max is 0 [ 793.973644][ T5895] usb 1-1: config 4 has no interface number 0 [ 793.983169][ T5895] usb 1-1: config 4 interface 8 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 793.994304][ T5895] usb 1-1: config 4 interface 8 altsetting 1 bulk endpoint 0x8A has invalid maxpacket 0 [ 794.008728][ T5895] usb 1-1: config 4 interface 8 has no altsetting 0 [ 794.022040][T15267] powermate: unknown product id 0240 [ 794.028862][T15267] powermate: Expected payload of 3--6 bytes, found 0 bytes! [ 794.043267][ T5903] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 794.051901][ T5895] usb 1-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=60.65 [ 794.065853][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.074756][T15267] powermate 2-1:0.0: probe with driver powermate failed with error -5 [ 794.083331][ T5895] usb 1-1: Product: syz [ 794.087924][ T5903] usb 3-1: device descriptor read/8, error -71 [ 794.096887][T15267] usb 2-1: USB disconnect, device number 95 [ 794.102873][ T5895] usb 1-1: Manufacturer: syz [ 794.111244][ T5895] usb 1-1: SerialNumber: syz [ 794.330995][ T5895] opticon 1-1:4.8: opticon converter detected [ 794.339336][ T5895] usb 1-1: opticon converter now attached to ttyUSB0 [ 794.346266][ T5903] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 794.357181][ T5895] usb 1-1: USB disconnect, device number 92 [ 794.369085][ T5895] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 794.377514][ T5895] opticon 1-1:4.8: device disconnected [ 794.397363][ T5903] usb 3-1: device descriptor read/8, error -71 [ 794.516360][ T5903] usb usb3-port1: unable to enumerate USB device [ 795.063093][T17632] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2945'. [ 795.334461][T17635] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2943'. [ 795.913203][ T5903] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 796.086690][T17646] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2947'. [ 796.124964][ T5903] usb 3-1: Using ep0 maxpacket: 8 [ 796.136546][ T5903] usb 3-1: config 0 has an invalid interface number: 56 but max is 0 [ 796.148549][ T5903] usb 3-1: config 0 has no interface number 0 [ 796.167249][ T5903] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 796.178683][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.188289][ T5903] usb 3-1: Product: syz [ 796.333316][ T5903] usb 3-1: Manufacturer: syz [ 796.351249][ T5903] usb 3-1: SerialNumber: syz [ 796.624275][ T5903] usb 3-1: config 0 descriptor?? [ 796.940261][T17644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.374763][T17644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 797.519922][ T30] audit: type=1400 audit(1757531905.679:7711): avc: denied { read } for pid=17655 comm="syz.0.2952" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 797.610833][ T30] audit: type=1400 audit(1757531905.679:7712): avc: denied { open } for pid=17655 comm="syz.0.2952" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 797.635626][ C1] vkms_vblank_simulate: vblank timer overrun [ 797.729878][ T5903] peak_usb 3-1:0.56: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 797.808807][ T30] audit: type=1400 audit(1757531905.679:7713): avc: denied { ioctl } for pid=17655 comm="syz.0.2952" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 797.846876][ T5903] peak_usb 3-1:0.56 can0: sending command failure: -8 [ 797.855141][ T5903] peak_usb 3-1:0.56 can0: sending command failure: -8 [ 797.856705][T17677] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 797.862137][ T5903] peak_usb 3-1:0.56 can0: sending command failure: -8 [ 797.976743][ T5903] peak_usb 3-1:0.56: probe with driver peak_usb failed with error -8 [ 798.096242][T15267] usb 3-1: USB disconnect, device number 85 [ 798.137576][ T30] audit: type=1400 audit(1757531906.299:7714): avc: denied { write } for pid=17683 comm="syz.3.2957" name="mouse0" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 798.217819][T17687] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2957'. [ 798.253255][ T5903] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 798.424245][ T5903] usb 2-1: Using ep0 maxpacket: 8 [ 798.430750][ T5903] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 798.439425][ T5903] usb 2-1: config 0 has no interface number 0 [ 798.445635][ T5903] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 798.456474][ T5903] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 798.468169][ T5903] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 76, changing to 10 [ 798.480172][ T5903] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 33656, setting to 1024 [ 798.508623][ T5903] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 798.552389][ T5903] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 798.562232][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.571860][ T5903] usb 2-1: config 0 descriptor?? [ 798.579028][ T5903] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 798.619743][ T30] audit: type=1400 audit(1757531906.779:7715): avc: denied { ioctl } for pid=17692 comm="syz.0.2959" path="/dev/vcsu" dev="devtmpfs" ino=15 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="/usr/sbin/ntpd" [ 798.828827][ T5903] usb 2-1: USB disconnect, device number 96 [ 798.886772][ T5903] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 799.623137][ T30] audit: type=1400 audit(1757531907.729:7716): avc: denied { write } for pid=17699 comm="syz.1.2961" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 799.847689][T17714] syz.1.2965 uses old SIOCAX25GETINFO [ 799.870397][ T30] audit: type=1400 audit(1757531908.009:7717): avc: denied { ioctl } for pid=17713 comm="syz.1.2965" path="socket:[57990]" dev="sockfs" ino=57990 ioctlcmd=0x89e9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 800.879487][T17734] 9pnet_fd: Insufficient options for proto=fd [ 800.886747][ T30] audit: type=1400 audit(1757531909.039:7718): avc: denied { read } for pid=17728 comm="syz.0.2968" dev="sockfs" ino=58682 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 801.063689][T17739] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2971'. [ 802.146792][T17751] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2974'. [ 803.127266][T17770] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 803.136488][T17770] bridge0: entered allmulticast mode [ 804.124984][ T30] audit: type=1400 audit(1757531912.099:7719): avc: denied { ioctl } for pid=17773 comm="syz.1.2980" path="mnt:[4026532785]" dev="nsfs" ino=4026532785 ioctlcmd=0x940a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 804.744210][T17788] netlink: 'syz.4.2979': attribute type 10 has an invalid length. [ 804.784288][T17788] veth0_vlan: left promiscuous mode [ 804.804484][T17788] veth0_vlan: entered promiscuous mode [ 804.811773][T17788] team0: Device veth0_vlan failed to register rx_handler [ 804.858888][T17793] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2982'. [ 804.884355][ T30] audit: type=1400 audit(1757531913.049:7720): avc: denied { getopt } for pid=17794 comm="syz.1.2983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 805.200698][ T30] audit: type=1400 audit(1757531913.359:7721): avc: denied { append } for pid=17803 comm="syz.1.2985" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 805.278546][T17782] lo speed is unknown, defaulting to 1000 [ 805.286761][T17782] lo speed is unknown, defaulting to 1000 [ 805.483474][T15267] usb 2-1: new low-speed USB device number 97 using dummy_hcd [ 805.658048][T15267] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 805.668800][T15267] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.679149][T15267] usb 2-1: config 0 descriptor?? [ 805.975431][ T975] usb 1-1: new full-speed USB device number 93 using dummy_hcd [ 806.009740][T15267] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 806.205523][ T975] usb 1-1: too many configurations: 152, using maximum allowed: 8 [ 806.260934][ T975] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 806.270341][ T975] usb 1-1: can't read configurations, error -61 [ 806.523156][ T5895] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 806.851188][ T975] usb 1-1: new full-speed USB device number 94 using dummy_hcd [ 807.435994][ T975] usb 1-1: too many configurations: 152, using maximum allowed: 8 [ 807.443138][ T5895] usb 4-1: device descriptor read/64, error -71 [ 807.454748][ T975] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 807.467681][ T975] usb 1-1: can't read configurations, error -61 [ 807.474848][ T975] usb usb1-port1: attempt power cycle [ 807.713395][ T5895] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 807.813188][ T975] usb 1-1: new full-speed USB device number 95 using dummy_hcd [ 807.840394][ T975] usb 1-1: too many configurations: 152, using maximum allowed: 8 [ 807.853382][ T5895] usb 4-1: device descriptor read/64, error -71 [ 807.860192][ T975] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 807.871295][ T975] usb 1-1: can't read configurations, error -61 [ 807.973991][ T5895] usb usb4-port1: attempt power cycle [ 808.113831][ T975] usb 1-1: new full-speed USB device number 96 using dummy_hcd [ 808.264505][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.286967][ T975] usb 1-1: too many configurations: 152, using maximum allowed: 8 [ 808.301481][ T975] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 808.310408][ T975] usb 1-1: can't read configurations, error -61 [ 808.366864][T15267] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 808.367717][ T975] usb usb1-port1: unable to enumerate USB device [ 808.376985][T15267] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 808.377180][T15267] asix 2-1:0.0: probe with driver asix failed with error -71 [ 808.387593][T15267] usb 2-1: USB disconnect, device number 97 [ 808.433224][ T5895] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 808.466575][ T5895] usb 4-1: device descriptor read/8, error -71 [ 808.699841][T17850] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 808.724159][ T5895] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 808.767985][ T5895] usb 4-1: device descriptor read/8, error -71 [ 808.852952][T17855] lo speed is unknown, defaulting to 1000 [ 808.860749][T17855] lo speed is unknown, defaulting to 1000 [ 808.923380][ T5895] usb usb4-port1: unable to enumerate USB device [ 809.199551][ T30] audit: type=1326 audit(1757531917.359:7722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17866 comm="syz.3.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74ff8eba9 code=0x7ffc0000 [ 809.226011][ T30] audit: type=1326 audit(1757531917.369:7723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17866 comm="syz.3.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd74ff8eba9 code=0x7ffc0000 [ 809.256568][ T30] audit: type=1326 audit(1757531917.369:7724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17866 comm="syz.3.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74ff8eba9 code=0x7ffc0000 [ 809.287553][ T975] usb 2-1: new low-speed USB device number 98 using dummy_hcd [ 809.303882][ T30] audit: type=1326 audit(1757531917.369:7725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17866 comm="syz.3.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fd74ff8eba9 code=0x7ffc0000 [ 809.329598][ T30] audit: type=1326 audit(1757531917.369:7726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17866 comm="syz.3.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74ff8eba9 code=0x7ffc0000 [ 809.353952][ T30] audit: type=1326 audit(1757531917.369:7727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17866 comm="syz.3.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74ff8eba9 code=0x7ffc0000 [ 809.378642][ T30] audit: type=1326 audit(1757531917.369:7728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17866 comm="syz.3.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd74ff8eba9 code=0x7ffc0000 [ 809.402970][ T30] audit: type=1326 audit(1757531917.369:7729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17866 comm="syz.3.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74ff8eba9 code=0x7ffc0000 [ 809.427414][ T30] audit: type=1326 audit(1757531917.369:7730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17866 comm="syz.3.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74ff8eba9 code=0x7ffc0000 [ 809.451334][ T30] audit: type=1326 audit(1757531917.369:7731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17866 comm="syz.3.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd74ff8eba9 code=0x7ffc0000 [ 809.484653][ T975] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 809.494214][ T975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.503828][ T975] usb 2-1: config 0 descriptor?? [ 809.714377][ T975] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 810.188695][T17889] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3006'. [ 810.198965][T17889] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3006'. [ 810.208080][T17889] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3006'. [ 810.220602][T17889] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3006'. [ 810.229601][T17889] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3006'. [ 810.271332][T17889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3006'. [ 810.432100][T17828] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 811.478586][T17924] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 37748736, id = 0 [ 812.112680][ T975] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 812.138774][ T975] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 812.239598][ T975] asix 2-1:0.0: probe with driver asix failed with error -71 [ 812.366468][ T975] usb 2-1: USB disconnect, device number 98 [ 812.876339][T17948] program syz.2.3017 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 813.264662][T15267] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 813.416156][T15267] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 813.427676][T15267] usb 1-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 813.436798][ T5895] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 813.500111][T15267] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.542660][T15267] usb 1-1: config 0 descriptor?? [ 813.604894][ T5895] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 813.631252][ T5895] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 813.650010][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.671062][ T5895] usb 3-1: Product: syz [ 813.680155][ T5895] usb 3-1: Manufacturer: syz [ 813.690423][T17951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3021'. [ 813.703131][ T5895] usb 3-1: SerialNumber: syz [ 813.714092][ T5895] usb 3-1: config 0 descriptor?? [ 813.716466][T17951] CUSE: DEVNAME unspecified [ 813.765589][ T5895] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 813.831197][T17953] fuse: Unknown parameter 'default_Uermissions' [ 813.996608][T15267] wacom 0003:056A:0000.0025: Unknown device_type for 'HID 056a:0000'. Assuming pen. [ 814.062924][T15267] wacom 0003:056A:0000.0025: hidraw0: USB HID v0.00 Device [HID 056a:0000] on usb-dummy_hcd.0-1/input0 [ 814.087760][T15267] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0000.0025/input/input44 [ 814.197874][T15267] usb 1-1: USB disconnect, device number 97 [ 815.243663][ T975] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 815.259935][T17991] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3033'. [ 815.427192][ T975] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 815.597045][ T975] usb 1-1: config 0 interface 0 has no altsetting 0 [ 815.626229][ T975] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 815.656664][ T975] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 815.696765][T15267] usb 3-1: USB disconnect, device number 86 [ 815.709013][ T975] usb 1-1: Product: syz [ 815.716520][ T975] usb 1-1: Manufacturer: syz [ 815.723033][ T975] usb 1-1: SerialNumber: syz [ 815.747644][ T975] usb 1-1: config 0 descriptor?? [ 815.786975][ T975] usb 1-1: selecting invalid altsetting 0 [ 816.041325][T15267] usb 1-1: USB disconnect, device number 98 [ 816.124056][T17999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 816.157281][T17999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 816.173355][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 816.173369][ T30] audit: type=1400 audit(1757531924.319:7754): avc: denied { ioctl } for pid=18000 comm="syz.1.3037" path="socket:[59783]" dev="sockfs" ino=59783 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 816.234995][ T30] audit: type=1400 audit(1757531924.319:7755): avc: denied { setattr } for pid=18000 comm="syz.1.3037" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 816.263175][ T5895] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 816.363916][ T975] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 816.673997][T18011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3038'. [ 816.700105][ T5895] usb 4-1: device descriptor read/64, error -71 [ 817.123136][ T5895] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 817.143471][ T975] usb 3-1: device descriptor read/64, error -71 [ 817.220195][ T30] audit: type=1400 audit(1757531925.379:7756): avc: denied { listen } for pid=18015 comm="syz.1.3041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 817.263217][ T5895] usb 4-1: device descriptor read/64, error -71 [ 817.303383][T15267] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 817.402329][ T5895] usb usb4-port1: attempt power cycle [ 817.753030][ T975] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 818.166918][ T5895] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 818.195588][T15267] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 818.208361][ T5895] usb 4-1: device descriptor read/8, error -71 [ 818.218023][T15267] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.238215][T15267] usb 1-1: Product: syz [ 818.242388][T15267] usb 1-1: Manufacturer: syz [ 818.258481][T15267] usb 1-1: SerialNumber: syz [ 818.275263][ T975] usb 3-1: Using ep0 maxpacket: 8 [ 818.281734][ T975] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 818.298125][ T975] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 818.308212][ T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.316687][ T975] usb 3-1: Product: syz [ 818.320839][ T975] usb 3-1: Manufacturer: syz [ 818.326019][ T975] usb 3-1: SerialNumber: syz [ 818.332154][ T975] usb 3-1: config 0 descriptor?? [ 818.339432][ T975] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 818.346087][ T975] usb 3-1: selecting invalid altsetting 1 [ 818.463154][ T5895] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 818.472988][T18014] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3040'. [ 818.484330][ T5895] usb 4-1: device descriptor read/8, error -71 [ 818.533230][ T5858] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 818.547673][ T975] gspca_stk014: reg_r err -71 [ 818.552453][ T975] stk014 3-1:0.0: probe with driver stk014 failed with error -71 [ 818.564589][ T975] usb 3-1: USB disconnect, device number 88 [ 818.604137][ T5895] usb usb4-port1: unable to enumerate USB device [ 818.723340][ T5858] usb 2-1: Using ep0 maxpacket: 32 [ 818.729638][ T5858] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 818.737783][ T5858] usb 2-1: config 0 has no interface number 0 [ 818.743928][ T5858] usb 2-1: config 0 interface 89 has no altsetting 0 [ 818.752382][ T5858] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 818.761580][ T5858] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.769863][ T5858] usb 2-1: Product: syz [ 818.774100][ T5858] usb 2-1: Manufacturer: syz [ 818.778688][ T5858] usb 2-1: SerialNumber: syz [ 818.785660][ T5858] usb 2-1: config 0 descriptor?? [ 818.792561][ T5858] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 818.802048][ T5858] em28xx 2-1:0.89: Video interface 89 found: bulk [ 819.687872][ T5858] em28xx 2-1:0.89: unknown em28xx chip ID (247) [ 819.793876][ T975] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 819.953251][ T975] usb 4-1: Using ep0 maxpacket: 16 [ 819.986212][ T975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 820.017349][ T975] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 820.056123][ T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.056675][T15267] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 820.076110][ T975] usb 4-1: config 0 descriptor?? [ 820.077430][T15267] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 820.092919][T15267] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 820.112381][T15267] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 820.131127][T15267] usb 1-1: USB disconnect, device number 99 [ 820.529205][ T5858] em28xx 2-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 820.565333][ T5858] em28xx 2-1:0.89: board has no eeprom [ 820.943516][ T5858] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 820.967195][ T5858] em28xx 2-1:0.89: analog set to bulk mode. [ 820.993548][ T5895] em28xx 2-1:0.89: Registering V4L2 extension [ 821.022505][ T5858] usb 2-1: USB disconnect, device number 99 [ 821.090148][ T5858] em28xx 2-1:0.89: Disconnecting em28xx [ 821.573676][ T5895] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 821.581637][ T5895] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 821.589169][ T5895] em28xx 2-1:0.89: No AC97 audio processor [ 821.601923][ T5895] usb 2-1: Decoder not found [ 821.620117][ T5895] em28xx 2-1:0.89: failed to create media graph [ 821.634895][ T5895] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 821.701788][ T5895] em28xx 2-1:0.89: Registering snapshot button... [ 822.277561][ T5895] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input47 [ 822.331918][ T5895] em28xx 2-1:0.89: Remote control support is not available for this card. [ 822.364190][ T5858] em28xx 2-1:0.89: Closing input extension [ 822.372606][ T5858] em28xx 2-1:0.89: Deregistering snapshot button [ 822.408030][ T5858] em28xx 2-1:0.89: Freeing device [ 822.601575][ T975] usbhid 4-1:0.0: can't add hid device: -71 [ 822.613177][ T975] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 822.626595][ T30] audit: type=1400 audit(1757531930.789:7757): avc: denied { setattr } for pid=18065 comm="syz.3.3055" name="ROSE" dev="sockfs" ino=60001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 822.629368][ T975] usb 4-1: USB disconnect, device number 94 [ 822.649255][ C0] vkms_vblank_simulate: vblank timer overrun [ 822.649485][ T5895] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 822.713691][ T5858] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 822.793972][ T5895] usb 1-1: Using ep0 maxpacket: 16 [ 822.801049][ T5895] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 822.830457][ T5895] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 822.848575][T18072] 9pnet_fd: Insufficient options for proto=fd [ 822.871531][ T5895] usb 1-1: config 0 has no interface number 0 [ 822.890118][ T5895] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 822.900773][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.917838][ T5895] usb 1-1: Product: syz [ 823.336846][ T5895] usb 1-1: Manufacturer: syz [ 823.342083][ T5895] usb 1-1: SerialNumber: syz [ 823.349549][ T5895] usb 1-1: config 0 descriptor?? [ 823.354588][ T5858] usb 2-1: Using ep0 maxpacket: 8 [ 823.368908][ T5858] usb 2-1: New USB device found, idVendor=0ab4, idProduct=0014, bcdDevice=c4.18 [ 823.406584][ T5858] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.433223][T18076] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3057'. [ 823.448073][ T5858] usb 2-1: Product: syz [ 823.452304][ T5858] usb 2-1: Manufacturer: syz [ 823.463302][ T5858] usb 2-1: SerialNumber: syz [ 823.475332][ T5858] usb 2-1: config 0 descriptor?? [ 823.488436][ T5858] esd_usb 2-1:0.0: sending version message failed [ 823.497092][ T5858] esd_usb 2-1:0.0: probe with driver esd_usb failed with error -22 [ 823.598738][T18064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 823.626038][T18064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 823.715358][T18085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 823.784669][T18084] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 823.875729][T18085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 823.890535][ T5895] usb 1-1: Found UVC 0.00 device syz (046d:08d3) [ 823.900152][ T5858] usb 2-1: USB disconnect, device number 100 [ 823.941461][ T5895] usb 1-1: No valid video chain found. [ 823.950510][ T5895] usb 1-1: USB disconnect, device number 100 [ 823.987569][T18091] ntfs3(loop3): try to read out of volume at offset 0x0 [ 824.133131][T18096] netlink: 'syz.4.3058': attribute type 10 has an invalid length. [ 824.141906][T18096] veth0_vlan: left promiscuous mode [ 824.153162][T18096] veth0_vlan: entered promiscuous mode [ 824.168582][T18096] team0: Device veth0_vlan failed to register rx_handler [ 824.231011][T18101] FAULT_INJECTION: forcing a failure. [ 824.231011][T18101] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 824.300686][T18101] CPU: 1 UID: 0 PID: 18101 Comm: syz.0.3062 Not tainted syzkaller #0 PREEMPT(full) [ 824.300711][T18101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 824.300722][T18101] Call Trace: [ 824.300728][T18101] [ 824.300735][T18101] dump_stack_lvl+0x16c/0x1f0 [ 824.300762][T18101] should_fail_ex+0x512/0x640 [ 824.300789][T18101] should_fail_alloc_page+0xe7/0x130 [ 824.300812][T18101] prepare_alloc_pages+0x3c2/0x610 [ 824.300840][T18101] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 824.300867][T18101] ? __pfx___might_resched+0x10/0x10 [ 824.300891][T18101] ? find_held_lock+0x2b/0x80 [ 824.300913][T18101] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 824.300937][T18101] ? up_write+0x1b2/0x520 [ 824.300958][T18101] ? process_measurement+0x1e6/0x23e0 [ 824.300987][T18101] ? __lock_acquire+0x62e/0x1ce0 [ 824.301012][T18101] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 824.301035][T18101] ? policy_nodemask+0xea/0x4e0 [ 824.301058][T18101] alloc_pages_mpol+0x1fb/0x550 [ 824.301080][T18101] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 824.301108][T18101] folio_alloc_mpol_noprof+0x36/0x2f0 [ 824.301134][T18101] shmem_alloc_folio+0x135/0x160 [ 824.301161][T18101] shmem_alloc_and_add_folio+0x499/0xc20 [ 824.301196][T18101] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 824.301227][T18101] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 824.301249][T18101] shmem_get_folio_gfp+0x67f/0x1600 [ 824.301274][T18101] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 824.301299][T18101] shmem_write_begin+0x160/0x300 [ 824.301321][T18101] ? __pfx_shmem_write_begin+0x10/0x10 [ 824.301340][T18101] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 824.301365][T18101] ? reacquire_held_locks+0xcd/0x1f0 [ 824.301394][T18101] generic_perform_write+0x3c2/0x900 [ 824.301430][T18101] ? __pfx_generic_perform_write+0x10/0x10 [ 824.301461][T18101] ? generic_update_time+0xcf/0xf0 [ 824.301488][T18101] ? mnt_put_write_access_file+0x45/0xf0 [ 824.301511][T18101] shmem_file_write_iter+0x10e/0x140 [ 824.301534][T18101] vfs_write+0x7d3/0x11d0 [ 824.301554][T18101] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 824.301576][T18101] ? __pfx___mutex_lock+0x10/0x10 [ 824.301599][T18101] ? __pfx_vfs_write+0x10/0x10 [ 824.301635][T18101] ksys_write+0x12a/0x250 [ 824.301652][T18101] ? __pfx_ksys_write+0x10/0x10 [ 824.301678][T18101] do_syscall_64+0xcd/0x4c0 [ 824.301703][T18101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.301721][T18101] RIP: 0033:0x7ffa3bd8eba9 [ 824.301735][T18101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 824.301751][T18101] RSP: 002b:00007ffa3cc7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 824.301767][T18101] RAX: ffffffffffffffda RBX: 00007ffa3bfd6090 RCX: 00007ffa3bd8eba9 [ 824.301778][T18101] RDX: 0000000000000018 RSI: 0000200000000140 RDI: 0000000000000008 [ 824.301788][T18101] RBP: 00007ffa3cc7e090 R08: 0000000000000000 R09: 0000000000000000 [ 824.301798][T18101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 824.301807][T18101] R13: 00007ffa3bfd6128 R14: 00007ffa3bfd6090 R15: 00007ffe8b9690f8 [ 824.301832][T18101] [ 825.288772][ T30] audit: type=1400 audit(1757531933.439:7758): avc: denied { read } for pid=18099 comm="syz.3.3063" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 825.558906][T18111] fuse: Bad value for 'fd' [ 825.683261][T18106] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 825.689939][T18106] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 825.713278][T18106] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 825.754983][T18106] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 825.764463][T18106] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 825.776965][ T30] audit: type=1800 audit(1757531933.889:7759): pid=18112 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.3064" name="file1" dev="tmpfs" ino=3184 res=0 errno=0 [ 825.786146][T18106] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 827.236685][ T5858] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 827.431254][T18129] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 827.437783][T18129] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 827.495498][ T5858] usb 2-1: Using ep0 maxpacket: 32 [ 827.635812][ T30] audit: type=1400 audit(1757531935.799:7760): avc: denied { read } for pid=18125 comm="syz.2.3069" path="socket:[60544]" dev="sockfs" ino=60544 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 827.659379][T18129] vhci_hcd vhci_hcd.0: Device attached [ 827.667797][ T5858] usb 2-1: unable to get BOS descriptor or descriptor too short [ 827.732439][ T5858] usb 2-1: config 13 has an invalid interface number: 180 but max is 0 [ 827.740737][ T5858] usb 2-1: config 13 has no interface number 0 [ 827.747689][ T5858] usb 2-1: config 13 interface 180 altsetting 210 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 827.763193][ T5170] Bluetooth: hci5: command 0x0c1a tx timeout [ 827.816458][ T5858] usb 2-1: config 13 interface 180 has no altsetting 0 [ 827.844870][ T5858] usb 2-1: New USB device found, idVendor=0543, idProduct=0080, bcdDevice=16.60 [ 827.853600][ T5964] vhci_hcd: vhci_device speed not set [ 827.862850][ T5170] Bluetooth: hci3: command 0x0405 tx timeout [ 827.933693][ T5964] usb 37-1: new full-speed USB device number 4 using vhci_hcd [ 828.013515][ T5858] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.021527][ T5858] usb 2-1: Product: syz [ 828.025714][ T5858] usb 2-1: Manufacturer: syz [ 828.030327][ T5858] usb 2-1: SerialNumber: syz [ 828.627708][ T30] audit: type=1404 audit(1757531936.719:7761): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 828.642753][ T5903] usb 1-1: new full-speed USB device number 101 using dummy_hcd [ 828.660700][ T30] audit: type=1400 audit(1757531936.819:7762): avc: denied { ioctl } for pid=18147 comm="syz.0.3073" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 828.685617][ C0] vkms_vblank_simulate: vblank timer overrun [ 828.842298][ T30] audit: type=1400 audit(1757531936.819:7763): avc: denied { read } for pid=18147 comm="syz.0.3073" dev="nsfs" ino=4026532790 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 829.037084][ T30] audit: type=1400 audit(1757531936.849:7764): avc: denied { bpf } for pid=18145 comm="syz.3.3072" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 829.158132][ T30] audit: type=1400 audit(1757531936.859:7765): avc: denied { kexec_image_load } for pid=18145 comm="syz.3.3072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=0 [ 829.204732][ T30] audit: type=1400 audit(1757531936.899:7766): avc: denied { create } for pid=18147 comm="syz.0.3073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 829.267939][ T30] audit: type=1400 audit(1757531937.029:7767): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.194 dest=44662 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 829.293627][ T30] audit: type=1400 audit(1757531937.149:7768): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.194 dest=44662 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 829.338052][ T30] audit: type=1400 audit(1757531937.219:7769): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.194 dest=44662 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 829.789078][ T5858] usb 2-1: USB disconnect, device number 101 [ 829.843236][ T5170] Bluetooth: hci5: command 0x0c1a tx timeout [ 829.934251][ T5170] Bluetooth: hci3: command 0x0405 tx timeout [ 831.923200][ T5170] Bluetooth: hci5: command 0x0c1a tx timeout [ 832.003419][ T5170] Bluetooth: hci3: command 0x0405 tx timeout [ 835.707729][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 835.707741][ T30] audit: type=1400 audit(1757531943.869:7829): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.194 dest=44662 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 835.923620][ T30] audit: type=1400 audit(1757531944.089:7830): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.194 dest=44662 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 842.363804][ T30] audit: type=1400 audit(1757531950.529:7831): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.194 dest=44662 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 842.804138][ T30] audit: type=1400 audit(1757531950.969:7832): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.194 dest=44662 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 855.675868][ T30] audit: type=1400 audit(1757531963.839:7833): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.194 dest=44662 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 856.885554][ T30] audit: type=1400 audit(1757531965.049:7834): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.194 dest=44662 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 869.685227][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 883.579655][ T30] audit: type=1400 audit(1757531991.739:7835): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.194 dest=44662 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 884.403827][ T30] audit: type=1400 audit(1757531992.569:7836): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.194 dest=44662 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 931.124505][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.831397][ T30] audit: type=1400 audit(1757532044.989:7837): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.194 dest=44662 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 941.373844][ T30] audit: type=1400 audit(1757532049.539:7838): avc: denied { recv } for pid=6961 comm="kworker/u8:17" saddr=10.128.0.169 src=30006 daddr=10.128.1.194 dest=44662 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 956.724405][ T30] audit: type=1400 audit(1757532064.889:7839): avc: denied { egress } for pid=23 comm="ksoftirqd/1" saddr=fe80::20 daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 956.747984][ T30] audit: type=1400 audit(1757532064.889:7840): avc: denied { egress } for pid=23 comm="ksoftirqd/1" saddr=fe80::20 daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 956.851305][ T30] audit: type=1400 audit(1757532065.009:7841): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=37022 daddr=10.128.1.194 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 957.066865][ T30] audit: type=1400 audit(1757532065.229:7842): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=37022 daddr=10.128.1.194 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 957.282916][ T30] audit: type=1400 audit(1757532065.439:7843): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=37022 daddr=10.128.1.194 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 957.722863][ T30] audit: type=1400 audit(1757532065.879:7844): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=37022 daddr=10.128.1.194 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 958.591068][ T30] audit: type=1400 audit(1757532066.749:7845): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=37022 daddr=10.128.1.194 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 960.314878][ T30] audit: type=1400 audit(1757532068.479:7846): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=37022 daddr=10.128.1.194 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 963.966830][ T30] audit: type=1400 audit(1757532072.129:7847): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=37022 daddr=10.128.1.194 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 970.879077][ T30] audit: type=1400 audit(1757532079.039:7848): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=37022 daddr=10.128.1.194 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 978.493206][ T31] INFO: task kworker/1:4:5964 blocked for more than 143 seconds. [ 978.501225][ T31] Not tainted syzkaller #0 [ 978.506197][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 978.515045][ T31] task:kworker/1:4 state:D stack:18200 pid:5964 tgid:5964 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 978.527136][ T31] Workqueue: usb_hub_wq hub_event [ 978.532156][ T31] Call Trace: [ 978.535436][ T31] [ 978.538345][ T31] __schedule+0x1190/0x5de0 [ 978.542848][ T31] ? __pfx___schedule+0x10/0x10 [ 978.547714][ T31] ? find_held_lock+0x2b/0x80 [ 978.552367][ T31] ? schedule+0x2d7/0x3a0 [ 978.556697][ T31] schedule+0xe7/0x3a0 [ 978.560739][ T31] usb_kill_urb+0x253/0x320 [ 978.565260][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 978.570275][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 978.576338][ T31] ? lockdep_init_map_type+0xd0/0x280 [ 978.581682][ T31] usb_start_wait_urb+0x250/0x4b0 [ 978.586697][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 978.592221][ T31] ? __asan_memset+0x23/0x50 [ 978.596810][ T31] usb_control_msg+0x326/0x4a0 [ 978.601550][ T31] ? __pfx_usb_control_msg+0x10/0x10 [ 978.606857][ T31] get_bMaxPacketSize0.constprop.0+0xd0/0x1f0 [ 978.613176][ T31] hub_port_init+0x690/0x3a70 [ 978.617868][ T31] hub_event+0x2ce1/0x4fe0 [ 978.622280][ T31] ? __pfx_hub_event+0x10/0x10 [ 978.627039][ T31] ? pool_move_batch+0x290/0x290 [ 978.631962][ T31] ? rcu_is_watching+0x12/0xc0 [ 978.636792][ T31] process_one_work+0x9cc/0x1b70 [ 978.641709][ T31] ? __pfx_hcd_resume_work+0x10/0x10 [ 978.647338][ T31] ? __pfx_process_one_work+0x10/0x10 [ 978.652715][ T31] ? assign_work+0x1a0/0x250 [ 978.657298][ T31] worker_thread+0x6c8/0xf10 [ 978.661868][ T31] ? __kthread_parkme+0x19e/0x250 [ 978.666896][ T31] ? __pfx_worker_thread+0x10/0x10 [ 978.672002][ T31] kthread+0x3c2/0x780 [ 978.676060][ T31] ? __pfx_kthread+0x10/0x10 [ 978.680622][ T31] ? rcu_is_watching+0x12/0xc0 [ 978.685403][ T31] ? __pfx_kthread+0x10/0x10 [ 978.689998][ T31] ret_from_fork+0x5d4/0x6f0 [ 978.694594][ T31] ? __pfx_kthread+0x10/0x10 [ 978.699168][ T31] ret_from_fork_asm+0x1a/0x30 [ 978.703957][ T31] [ 978.706978][ T31] [ 978.706978][ T31] Showing all locks held in the system: [ 978.714807][ T31] 1 lock held by khungtaskd/31: [ 978.719641][ T31] #0: ffffffff8e5c1260 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 978.729552][ T31] 2 locks held by getty/5609: [ 978.734252][ T31] #0: ffff88803655e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 978.744137][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 978.754259][ T31] 5 locks held by kworker/1:4/5964: [ 978.759423][ T31] #0: ffff888143ab3148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 978.770212][ T31] #1: ffffc9000426fd10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 978.781412][ T31] #2: ffff8881457e2198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0 [ 978.790271][ T31] #3: ffff8881457e5518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2981/0x4fe0 [ 978.800186][ T31] #4: ffff88802a4a2f68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x29aa/0x4fe0 [ 978.809847][ T31] [ 978.812145][ T31] ============================================= [ 978.812145][ T31] [ 978.820710][ T31] NMI backtrace for cpu 0 [ 978.820724][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 978.820743][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 978.820752][ T31] Call Trace: [ 978.820757][ T31] [ 978.820765][ T31] dump_stack_lvl+0x116/0x1f0 [ 978.820789][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 978.820807][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 978.820833][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 978.820851][ T31] watchdog+0xf0e/0x1260 [ 978.820868][ T31] ? __pfx_watchdog+0x10/0x10 [ 978.820878][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 978.820893][ T31] ? __kthread_parkme+0x19e/0x250 [ 978.820908][ T31] ? __pfx_watchdog+0x10/0x10 [ 978.820919][ T31] kthread+0x3c2/0x780 [ 978.820930][ T31] ? __pfx_kthread+0x10/0x10 [ 978.820940][ T31] ? rcu_is_watching+0x12/0xc0 [ 978.820953][ T31] ? __pfx_kthread+0x10/0x10 [ 978.820964][ T31] ret_from_fork+0x5d4/0x6f0 [ 978.820974][ T31] ? __pfx_kthread+0x10/0x10 [ 978.820984][ T31] ret_from_fork_asm+0x1a/0x30 [ 978.821002][ T31] [ 978.821006][ T31] Sending NMI from CPU 0 to CPUs 1: [ 978.936175][ C1] NMI backtrace for cpu 1 [ 978.936188][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 978.936204][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 978.936212][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 978.936232][ C1] Code: cc 61 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 b3 15 00 fb f4 8c 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 978.936244][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2 [ 978.936256][ C1] RAX: 00000000028124d1 RBX: 0000000000000001 RCX: ffffffff8b945c29 [ 978.936265][ C1] RDX: 0000000000000000 RSI: ffffffff8de522e8 RDI: ffffffff8c162d80 [ 978.936273][ C1] RBP: ffffed1003c5d488 R08: 0000000000000001 R09: ffffed10170a6655 [ 978.936282][ C1] R10: ffff8880b85332ab R11: 0000000000000000 R12: 0000000000000001 [ 978.936290][ C1] R13: ffff88801e2ea440 R14: ffffffff90ab6b90 R15: 0000000000000000 [ 978.936299][ C1] FS: 0000000000000000(0000) GS:ffff8881247b5000(0000) knlGS:0000000000000000 [ 978.936312][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 978.936321][ C1] CR2: 00007ffe8b967bd8 CR3: 000000000e380000 CR4: 00000000003526f0 [ 978.936329][ C1] Call Trace: [ 978.936334][ C1] [ 978.936338][ C1] default_idle+0x13/0x20 [ 978.936355][ C1] default_idle_call+0x6d/0xb0 [ 978.936372][ C1] do_idle+0x391/0x510 [ 978.936389][ C1] ? __pfx_do_idle+0x10/0x10 [ 978.936404][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 978.936420][ C1] cpu_startup_entry+0x4f/0x60 [ 978.936436][ C1] start_secondary+0x21d/0x2b0 [ 978.936454][ C1] ? __pfx_start_secondary+0x10/0x10 [ 978.936474][ C1] common_startup_64+0x13e/0x148 [ 978.936493][ C1] [ 978.937208][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 979.112933][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 979.122020][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 979.132046][ T31] Call Trace: [ 979.135299][ T31] [ 979.138323][ T31] dump_stack_lvl+0x3d/0x1f0 [ 979.142901][ T31] vpanic+0x6e8/0x7a0 [ 979.146860][ T31] ? __pfx_vpanic+0x10/0x10 [ 979.151341][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 979.157208][ T31] panic+0xca/0xd0 [ 979.160907][ T31] ? __pfx_panic+0x10/0x10 [ 979.165299][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 979.170646][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 979.176773][ T31] ? watchdog+0xd78/0x1260 [ 979.181161][ T31] ? watchdog+0xd6b/0x1260 [ 979.185548][ T31] watchdog+0xd89/0x1260 [ 979.189768][ T31] ? __pfx_watchdog+0x10/0x10 [ 979.194414][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 979.199586][ T31] ? __kthread_parkme+0x19e/0x250 [ 979.204588][ T31] ? __pfx_watchdog+0x10/0x10 [ 979.209236][ T31] kthread+0x3c2/0x780 [ 979.213278][ T31] ? __pfx_kthread+0x10/0x10 [ 979.217840][ T31] ? rcu_is_watching+0x12/0xc0 [ 979.222578][ T31] ? __pfx_kthread+0x10/0x10 [ 979.227149][ T31] ret_from_fork+0x5d4/0x6f0 [ 979.231724][ T31] ? __pfx_kthread+0x10/0x10 [ 979.236293][ T31] ret_from_fork_asm+0x1a/0x30 [ 979.241044][ T31] [ 979.244233][ T31] Kernel Offset: disabled [ 979.248533][ T31] Rebooting in 86400 seconds..