last executing test programs: 33.430982576s ago: executing program 0 (id=1671): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x60, 0x887}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x23e) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d5, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) 32.495790657s ago: executing program 0 (id=1676): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x242942, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC=0x0]) socket$nl_route(0x10, 0x3, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f000000b2c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvfrom(r2, 0x0, 0x0, 0x40010320, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) read$FUSE(0xffffffffffffffff, &(0x7f0000003b80)={0x2020}, 0x2020) kexec_load(0xd0ffbf, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0xbfffd000, 0x10000}, {0x0, 0x0, 0x3e0000}], 0x0) 31.327054205s ago: executing program 0 (id=1679): openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$ublk_chdev(&(0x7f00000018c0), 0x0, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000800)=@newtaction={0xa4, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x90, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x37}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) r1 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x6a, 0x2, 0x20000002, 0x1) fcntl$dupfd(r0, 0x406, r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000400)={r7}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x390, 0x398, 0x2a0, 0xffffffff, 0xe0, 0x188, 0x398, 0x188, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r10, 0x84, 0x81, 0x0, &(0x7f00000000c0)) 29.620346473s ago: executing program 0 (id=1683): r0 = socket$inet6_udp(0xa, 0x2, 0x0) mkdir(0x0, 0x114) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x20280, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x11, 0x484, 0x0, 0xfffffffffffffffe) 28.106683343s ago: executing program 0 (id=1686): rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x2}, &(0x7f00000000c0)=0x4) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000100)={r3, 0x7}, 0x8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006740), 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_SIOCINQ(r5, 0x541b, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r5, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x18bbb10e}, 0x94) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000800)={r2, &(0x7f0000000700)='^/\x00', 0x200, &(0x7f0000000740)={@align=0x3, {0x6, 0x2a, 0x4, 0xf}}, 0x0, &(0x7f0000000780), &(0x7f00000007c0)=0x90}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="ea15c0fa084509000000609f18110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085000000860000008510000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x47, &(0x7f00000003c0)=""/71, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0xc, 0x40cd, 0xc}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000880)=[0xffffffffffffffff, 0xffffffffffffffff, r5, r6, r7], &(0x7f00000008c0)=[{0x0, 0x3, 0x2, 0xb}, {0x0, 0x5, 0x7, 0x5}, {0x2, 0x1, 0x7, 0x4}, {0x3, 0x3, 0xd, 0x6}], 0x10, 0x7}, 0x94) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_CONTINUE(r8, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) r9 = syz_io_uring_setup(0x827c8, &(0x7f0000000540)={0x0, 0x800069ea, 0x3000, 0x2, 0x8000d, 0x0, r5}, &(0x7f0000000140), &(0x7f0000000080)=0x0, &(0x7f00000005c0)=0x0) syz_io_uring_submit(0x0, r10, r11, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd=r7, 0x8, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r9, 0x1, 0x1, 0x1, 0x0, 0x0) 27.69499314s ago: executing program 0 (id=1690): ptrace$ARCH_SHSTK_LOCK(0x1e, 0x0, 0x0, 0x5003) process_mrelease(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r3}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000180)=""/40}, 0x20) r4 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix={0x0, 0x0, 0x35315842, 0x0, 0x0, 0x0, 0x0, 0x2}}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000200)={0x18, r6, 0x1, 0x0, &(0x7f0000000040)=[{0xffffffffffffedc7, 0xfffffffffffffff9}]}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r7, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$VT_DISALLOCATE(r7, 0x5608) epoll_create(0x80000000) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x48, 0x1, r6, 0x0, 0x2, 0x8}) 16.734815287s ago: executing program 2 (id=1712): socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) getrlimit(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xe}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='pagemap\x00') read$FUSE(r3, &(0x7f00000004c0)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0x2020) sendmsg$NFT_BATCH(r3, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x120, 0x16, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xdc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'bond0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x148}, 0x1, 0x0, 0x0, 0x4000804}, 0x4810) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) socket$nl_route(0x10, 0x3, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) write$binfmt_elf64(r5, 0x0, 0xe8) close(r5) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r5, 0xc004ae0a, &(0x7f0000000080)={0x4, [0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x24}}, @in6={0xa, 0x4e22, 0xb, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, @in6={0xa, 0x4e21, 0x3, @remote, 0x4}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3e}}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x25}}, @in6={0xa, 0x4e23, 0x101, @local, 0x48}, @in6={0xa, 0x4e24, 0xffffff01, @private0, 0xfffffff7}], 0xb0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) 14.424175807s ago: executing program 2 (id=1716): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) r1 = userfaultfd(0x1) (async) r2 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) fsopen(0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000580)={0x0, &(0x7f0000000080)=[@rdmsr={0x66, 0x18, {0xb90}}, @wr_crn={0x67, 0x20, {0x3, 0x7}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @host16=0xc08, 0x9, 0x5, 0x9d9}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest32=0x482c, 0xffffffffffffffff, 0x1, 0x8}}], 0xa8}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x77359400}) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xd16d, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) (async) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"/1771], 0x6eb) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x20, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) (async) lseek(0xffffffffffffffff, 0x38, 0x0) (async) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000140), 0x4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) (async) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 13.650942698s ago: executing program 2 (id=1717): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000380)={0x5, 0x1, 0x0, "eee98fa706178749cb4dfd93e33c9b6b7bd152f35ed734fc70157dcb4f1891e2", 0x43353039}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x13, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x800) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x20, 0x0, 0x1, 0x0, 0x1, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)=ANY=[@ANYBLOB="70010000", @ANYRES16=r10, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="51003300d0000800ffffffffffff080211000000ffffffffffff00400c0112000e2d1a000304020000000000000000000800160000000004050000000d6512505050505050080211000001ffffffffffff000000"], 0x70}, 0x1, 0x0, 0x0, 0xc0}, 0x0) recvmmsg$unix(r5, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) dup3(r1, r0, 0x0) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs2/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r11, 0x6) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r11, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) 12.536128302s ago: executing program 32 (id=1690): ptrace$ARCH_SHSTK_LOCK(0x1e, 0x0, 0x0, 0x5003) process_mrelease(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r3}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r3, 0x0, &(0x7f0000000180)=""/40}, 0x20) r4 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix={0x0, 0x0, 0x35315842, 0x0, 0x0, 0x0, 0x0, 0x2}}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000200)={0x18, r6, 0x1, 0x0, &(0x7f0000000040)=[{0xffffffffffffedc7, 0xfffffffffffffff9}]}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r7, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$VT_DISALLOCATE(r7, 0x5608) epoll_create(0x80000000) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x48, 0x1, r6, 0x0, 0x2, 0x8}) 12.318308098s ago: executing program 1 (id=1722): openat$nvram(0xffffffffffffff9c, 0x0, 0x8882, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="420000000300000000000000"], 0x42) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000540)={r5, @in={{0x2, 0x0, @empty}}, 0x4, 0x0, 0x6bc, 0x0, 0xd4}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xf, 0x8000, 0x20000, 0x0, 0xcd, 0x0, 0x4}, 0x9c) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15, 0x2000000}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) 11.334642316s ago: executing program 1 (id=1724): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000180)=0x79, 0x4) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_procfs(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) keyctl$clear(0x11, 0xfffffffffffffffd) ioperm(0x6, 0x9, 0x824) syz_ublk_setup_io_uring(0x757b, &(0x7f00000016c0)={0x0, 0xed61, 0x40, 0x0, 0xe6}, &(0x7f0000001740), &(0x7f0000001780), &(0x7f00000017c0)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) llistxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x109) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) fremovexattr(r2, &(0x7f0000000000)=@known='system.posix_acl_default\x00') 9.426335071s ago: executing program 1 (id=1727): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x9, 0x6, 0xa, 0x1e64, 0xfffffe0400000001, 0x4, 0xffffffff}, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000000)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080), r6, 0x0, 0x3, 0x1}}, 0x20) eventfd2(0x4, 0x800) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r4, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) splice(0xffffffffffffffff, &(0x7f0000000040)=0x7, 0xffffffffffffffff, 0x0, 0xfffffffffffff629, 0x9) bind$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x17, 0x0, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, 0x14) openat$binderfs(0xffffffffffffff9c, 0x0, 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000040)=0x9848, 0x4) 6.995995098s ago: executing program 4 (id=1730): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) 5.802994561s ago: executing program 3 (id=1731): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x242942, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC=0x0]) socket$nl_route(0x10, 0x3, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f000000b2c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvfrom(r2, 0x0, 0x0, 0x40010320, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x150}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) kexec_load(0xd0ffbf, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0xbfffd000, 0x10000}, {0x0, 0x0, 0x3e0000}], 0x0) 5.572746997s ago: executing program 2 (id=1732): r0 = io_uring_setup(0x27e3, &(0x7f0000000400)={0x0, 0x5c48, 0x40, 0x2, 0x1a0}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='fdinfo/3\x00') read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x2010, 0xffffffffffffffff, 0xa3e52000) write$sndseq(0xffffffffffffffff, &(0x7f00000006c0)=[{0x7, 0xfc, 0x35, 0xfc, @tick=0x7fffffff, {0x1, 0x1}, {0x8, 0x5}, @raw8={"9bca1348eda9d1f268d514cc"}}, {0xb, 0x7, 0x9, 0x1, @time={0x7, 0x6}, {0x6}, {0x40, 0x6}, @raw8={"b137ac2241a2ba8db8839d47"}}, {0x0, 0x81, 0x80, 0x4a, @time={0x7fff, 0x2}, {0x6, 0x3}, {0x1, 0x8}, @result={0xe39, 0x7}}, {0xc0, 0x9a, 0xc6, 0x4, @time={0xfffffffe, 0x10}, {0x7c, 0xfe}, {0x0, 0x3}, @note={0x80, 0x0, 0x5, 0x0, 0x80000000}}, {0x3, 0x3, 0x6, 0x7f, @tick=0x6, {0x3, 0x1}, {0xda, 0x2}, @ext={0x84, &(0x7f0000000600)="32b398360cd4b63db1f6d569ba8eb08317256a3aa5f950086e626cfabedd141d21db09e745c032d4d4bda56644f41c72a882ec18deb193e36567cfd1d6694e69ff8ad7de7cd5fee5df05c2505c71fc1081a4346b4a9cfef114f638e993a9ed7f8a0b78e777dccee85de9065c5016dee008197c2a41135a3e9c92e9bffe1392b0279e40a0"}}], 0x8c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$sg(&(0x7f0000000180), 0xf17, 0x100) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000005c0)=[{{&(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000340)=""/60, 0x3c}, {&(0x7f0000000380)=""/95, 0x5f}], 0x2, &(0x7f00000004c0)=""/119, 0x77}}], 0x1, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$alg(0x26, 0x5, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x12, 0x40000180}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000100)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r6, 0xc01864b0, &(0x7f0000000080)={r7, r8, 0x1, 0x0, 0x200}) bind$alg(r5, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r9 = accept4(r5, 0x0, 0x0, 0x800) accept4$inet(r9, 0x0, 0x0, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, 0x0, 0x81}, 0x94) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) 4.883041507s ago: executing program 4 (id=1733): r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x79, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_ublk_setup_io_uring(0x757b, &(0x7f00000016c0)={0x0, 0xed61, 0x40, 0x0, 0xe6}, &(0x7f0000001740), &(0x7f0000001780), &(0x7f00000017c0)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) llistxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x109) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) fremovexattr(r3, &(0x7f0000000000)=@known='system.posix_acl_default\x00') 4.680399412s ago: executing program 3 (id=1734): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0xc4042, 0x1ff) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xa8282, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) userfaultfd(0x801) prlimit64(0x0, 0xa, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r2, &(0x7f0000005280), 0x4000000000001cd, 0x1008c811) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0600000004000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="920eb05600000000000000140edb6572406e43f700dd304dc9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000030000000000000000010000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000007020000f8ffffffb703000008000000b70400000000000085000000c30000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) sendmsg$nl_route(r4, 0x0, 0x40050) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x3, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40240, 0x104) getsockopt$inet6_mreq(r0, 0x29, 0x1e, &(0x7f0000000340), 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, 0x0, 0x40080) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040f0401000604"], 0x7) 4.465354412s ago: executing program 2 (id=1735): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r1, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc040841}, 0x20000084) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0xd03, 0xffffffff, 0x76f1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc02, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1, 0x7, 0x0, 0x8000, 0x4}, 0x6, 0x0, 0x7c1, 0x0, 0x1, 0x15, 0x12, 0x1d, 0x87, 0x7fffffff, {0x8, 0x1, 0x6, 0x3, 0x6, 0x2}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r7) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x28, r9, 0x1, 0x20000000, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048001}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x48, r6, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "ba8b6914ff99672f"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "c32992d95456b33e440aeb7efd"}]}, 0x48}, 0x1, 0x0, 0x0, 0x20014081}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x2}, @IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast1}]}}}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x1729}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c044) 3.854488822s ago: executing program 1 (id=1736): r0 = open(&(0x7f0000000280)='.\x00', 0x400, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x7a, 0x0, 0x1, 0x7, 0x10000, @value=r0}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffff7feffff7ffd]}, 0x0, 0x8) r4 = gettid() tkill(r4, 0x12) io_pgetevents(0x0, 0x4, 0x2, &(0x7f0000000240)=[{}, {}], &(0x7f0000000080)={0x0, 0x989680}, &(0x7f0000000000)={0x0}) open(&(0x7f0000000380)='./bus\x00', 0x105040, 0x145) creat(&(0x7f0000000100)='./bus\x00', 0x0) r5 = msgget$private(0x0, 0x0) msgctl$MSG_STAT(r5, 0xb, &(0x7f00000003c0)=""/172) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/vlan/config\x00') read$FUSE(r6, &(0x7f0000002140)={0x2020}, 0x2020) 3.807927161s ago: executing program 3 (id=1737): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f00000001c0)}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0xfffd, 0x7, @private0, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000001c0), 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000480)={0x7, 0x1, 0x836, 0x8, 0x7}, 0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="0600000004000000040000000c"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@call={0x85, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3}, 0xc) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000080)=0x10000008, 0x4) close_range(r0, r0, 0x200000000000000) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x9, 0x10}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x9, 0x6, 0xce68, 0x4001, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x4, 0x7}, 0x50) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x90002, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f0000000400)={'mangle\x00', 0x0, [0x8, 0x5, 0x8, 0x3, 0x4]}, &(0x7f0000000480)=0x54) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 3.571123032s ago: executing program 4 (id=1738): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r0, &(0x7f0000000000)="1c00001f1a005f0214f9f407000904001f000000ff02000200000000", 0x1c) 2.815908716s ago: executing program 1 (id=1739): ptrace$ARCH_SHSTK_LOCK(0x1e, 0x0, 0x0, 0x5003) process_mrelease(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r3, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) r4 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix={0x0, 0x0, 0x35315842, 0x0, 0x0, 0x0, 0x0, 0x2}}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000200)={0x18, r6, 0x1, 0x0, &(0x7f0000000040)=[{0xffffffffffffedc7, 0xfffffffffffffff9}]}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r7, &(0x7f0000000000)={0xfc, {"fce3ad0eed0d07f91b50091887f70706d038e7ff7fc6e5539b0d3c0a8b089b3f35383a340890e0879b0af8c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c523c921b1b233107200773090acd3b78130daa61d8e8040040005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bde7095d6a345badc56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a91e0dad47f36fd9f73c152a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76ea0270e4c10d64cd5a62427264f2377fe763c434708337c8de98f371bb943a8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa7ea5677747430af4162b987b80c3e001cd34e1c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df11847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e30400f7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad046581927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fc83c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad83872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddba02635478d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f79400000000ddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df04b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e785419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02b7fa64b6de3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd502ac8044ae185d2ba300004e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f08df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88e4facfd4c735a20307c737afa2d60399473296b831dbd933d93990f00064279b10ea0c5833f41f157ea2302993dbe97fb1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea10c00a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeee964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac3fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2102596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e42df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed62480ec43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e069160f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df076f0ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f87296ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb90372927db6ff959c0837d2e7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef869c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d050000008926407a4eddd5d0fc5a752f900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023dd0000000400", 0x1000}}, 0x1006) 2.535052559s ago: executing program 3 (id=1740): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000150000000900020073797a31000000000500050007000000280007800a001100100300000000000018000180"], 0x50}, 0x1, 0x0, 0x0, 0x3004c047}, 0x2004c050) 2.534815576s ago: executing program 4 (id=1741): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$FUSE(0xffffffffffffffff, &(0x7f00000004c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_GETQUOTA(r3, 0xffffffff80000701, r4, &(0x7f0000002500)) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) 1.121503848s ago: executing program 1 (id=1742): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r1, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1) sendmsg$NFT_BATCH(r2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x45) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r4, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000672000/0x1000)=nil) syz_clone3(&(0x7f0000000140)={0x120006200, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}}, 0x0) close(r0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) close(0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) write(r0, &(0x7f00000001c0)="f279cab401a8aa60d569a864269b2f11ff4b5e622fe28fccad246c8cd6476567f6d4c0186c9a0dbd6fed08b7a29c31adf6bcff4fba1a283c0eb61d7990a1dd7c", 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.10589827s ago: executing program 3 (id=1743): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x242942, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC=0x0]) socket$nl_route(0x10, 0x3, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f000000b2c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvfrom(r2, 0x0, 0x0, 0x40010320, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x150}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) kexec_load(0xd0ffbf, 0x0, 0x0, 0x0) 949.24408ms ago: executing program 4 (id=1744): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x38, [0xb, 0xc957, 0x1, 0x8, 0x7ffffffb, 0x2, 0x80007, 0x83, 0x20000006, 0xca, 0x6, 0x5f, 0x8, 0x5, 0xfeff2d37, 0xffffff00, 0x20100001, 0x3, 0x0, 0x5, 0x6, 0x9, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0x5, 0x4, 0x3, 0x89d2, 0x9, 0x4c74, 0x80000000, 0x40000, 0x0, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0xfffffa01, 0x42, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x7, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x6, 0x4, 0x7, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0x11, 0x400, 0x6c7, 0x2, 0xfffffffc, 0x3, 0x0, 0x84, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xffff, 0x2, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x802, 0x7, 0x0, 0x1, 0x4, 0x5f31, 0xd, 0x7f, 0x2, 0x4, 0xb, 0x3ff, 0x2000c, 0x8, 0x9, 0x9, 0x47, 0x60f6, 0xffffffff, 0xfe000000, 0xfffe, 0xfffffffe, 0xd5e, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x3, 0x1], [0x7, 0x408, 0x8004, 0x6, 0xffffffff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x30000, 0x3, 0x30f0, 0x7, 0xb, 0x5, 0x2, 0x0, 0x5a9c, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7c, 0x7, 0x7, 0x0, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x7, 0x8c8, 0x2000af, 0xfffffffe, 0x1000, 0x7ff, 0x125, 0x4, 0x7, 0xfff, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x6, 0x0, 0x27], [0x9, 0xbb33, 0x7, 0x81, 0x8, 0x6, 0x3, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x8007, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7ffc, 0x81, 0x2000a620, 0x2, 0x7, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x10000018, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x1, 0x7e, 0xda4, 0x9602, 0x7, 0xaf, 0x8, 0x4, 0xffffffff, 0x5, 0x45, 0xc, 0x30b1d693, 0x5, 0x1f40, 0x1, 0x41, 0x6c1b, 0x0, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x4000000000000000, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 914.92922ms ago: executing program 2 (id=1745): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000001440)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000006000000020000000200000f039f000002000000060000000300000000000000000000000000000044942d000000000000000200000000000000000100000f010000000000000000000000000000008400002e"], &(0x7f00000014c0)=""/2, 0x6a, 0x2, 0x1}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000001440)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000006000000020000000200000f039f000002000000060000000300000000000000000000000000000044942d000000000000000200000000000000000100000f010000000000000000000000000000008400002e"], &(0x7f00000014c0)=""/2, 0x6a, 0x2, 0x1}, 0x28) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_open_dev$usbfs(&(0x7f0000000100), 0x80, 0x40000) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000006c0)=""/52, 0x34}, {&(0x7f0000001500)=""/4096, 0x1000}], 0x2}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x70bd2a, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1b}, [@FRA_FLOW={0x8, 0xb, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x70bd2a, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1b}, [@FRA_FLOW={0x8, 0xb, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x0) 594.990368ms ago: executing program 4 (id=1746): prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0x21, "d4f58dd752b83465b68f56a2379e01c052b55eb0d4aef76337d8e0a59928f4ee16"}, &(0x7f0000000100)=0x29) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000001c0)={0x40, 0x201, 0x4, 0x2, r1}, 0x10) r2 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000380)={0xc, 0x8, 0x144, {&(0x7f0000001140)}}, 0x10) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x1, @empty, 0x100009}, {0xa, 0x4e22, 0xfffffffc, @mcast1}, r4, 0x3}}, 0x48) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000080)=0xf3f, 0x4) sendto$packet(r6, &(0x7f00000000c0)="3f0302e90302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYBLOB="fd3014a65a81f2ca7a00b717a7aec8a658b71ff14816683156877b0b87aaaee6e621808201534f8d23f16db2d4f6b0bb4f91a8480f33078540991c9dffa2da4b46c2c75bbf58cc64c532bb33eb2b2d90798b90e65f77fc09f7993beef800f91925edfafe060649401822ca502a9c6be9eafa0aa5", @ANYRES8=r4, @ANYRES32, @ANYRES8=r4, @ANYRESDEC], 0x0) 0s ago: executing program 3 (id=1747): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000192000/0x3000)=nil, 0x3000, 0xa, 0x12, r2, 0xaa898000) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') write$binfmt_format(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0xa8, r7, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x63, 0xe, {{{}, {}, @device_a, @device_a, @from_mac}, 0x8, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @val={0x4, 0x6, {0xb3, 0x2, 0xd, 0x1ff}}, @void, @val={0x5, 0x3, {0x7, 0xc7, 0x6}}, @void, @void, @void, @val={0x2d, 0x1a, {0x2ff, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_PROBE_RESP={0xe, 0x91, "70f1b77dbb5f8cf7ca95"}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4010}, 0x20000014) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r5, 0x4, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x20008011) kernel console output (not intermixed with test programs): dVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 443.375179][ T804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1536, setting to 1024 [ 443.375209][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.394377][ T5719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.403842][ T804] usb 5-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 443.409176][ T5719] usb 4-1: Product: syz [ 443.412992][ T29] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 443.418773][ T5704] usb 2-1: Product: syz [ 443.426708][ T2363] pvrusb2: Invalid write control endpoint [ 443.430906][ T5719] usb 4-1: Manufacturer: syz [ 443.441134][ T5704] usb 2-1: Manufacturer: syz [ 443.442130][ T804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.445828][ T5704] usb 2-1: SerialNumber: syz [ 443.458441][ T5719] usb 4-1: SerialNumber: syz [ 443.485048][ T804] usb 5-1: config 0 descriptor?? [ 443.490150][ T5719] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 443.496229][T10426] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 443.526495][ T30] audit: type=1400 audit(1784012575.685:1204): avc: denied { firmware_load } for pid=5744 comm="kworker/0:7" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 443.570234][ T5744] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 443.612564][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 443.628817][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.645111][ T29] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 443.660977][ T29] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 443.670399][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.734506][ T29] usb 3-1: config 0 descriptor?? [ 443.768265][ T2363] pvrusb2: Invalid write control endpoint [ 443.775151][ T2363] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 443.786170][ T2363] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 443.794830][ T2363] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 443.838527][T10445] netlink: 'syz.1.1276': attribute type 1 has an invalid length. [ 443.849298][ T2363] pvrusb2: Device being rendered inoperable [ 443.852119][T10448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.860699][ T2363] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 443.866083][T10448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.880634][ T2363] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 443.960199][T10455] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1275'. [ 444.054807][ T804] hid_parser_main: 28 callbacks suppressed [ 444.054861][ T804] lg-g15 0003:046D:0A07.000A: unknown main item tag 0x1 [ 444.172906][ T804] lg-g15 0003:046D:0A07.000A: unknown main item tag 0x1 [ 444.190655][ T2363] pvrusb2: Attached sub-driver cx25840 [ 444.221717][T10450] fuse: Unknown parameter 'fd0x0000000000000005' [ 444.248758][T10445] 8021q: adding VLAN 0 to HW filter on device bond1 [ 444.269999][ T804] lg-g15 0003:046D:0A07.000A: item fetching failed at offset 2/5 [ 444.281289][ T2363] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 444.389777][ T24] usb 4-1: USB disconnect, device number 23 [ 444.407911][ T804] lg-g15 0003:046D:0A07.000A: probe with driver lg-g15 failed with error -22 [ 444.418766][ T2363] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 444.440731][ T804] usb 5-1: USB disconnect, device number 32 [ 444.442573][ T5704] usb 2-1: selecting invalid altsetting 0 [ 444.618017][ T5744] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 444.632875][ T5744] ath9k_htc: Failed to initialize the device [ 444.650261][ T24] usb 4-1: ath9k_htc: USB layer deinitialized [ 444.681223][ T29] microsoft 0003:045E:07DA.000B: invalid report_size -351423527 [ 444.689515][ T29] microsoft 0003:045E:07DA.000B: item 0 4 1 7 parsing failed [ 444.702654][ T29] microsoft 0003:045E:07DA.000B: parse failed [ 444.708893][ T29] microsoft 0003:045E:07DA.000B: probe with driver microsoft failed with error -22 [ 444.781588][ T5704] usb 2-1: USB disconnect, device number 27 [ 444.901200][ T9327] udevd[9327]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 445.465870][ T30] audit: type=1400 audit(1784012577.625:1205): avc: denied { unlink } for pid=5610 comm="syz-executor" name="file0" dev="tmpfs" ino=1338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 445.784193][ T29] usb 1-1: USB disconnect, device number 15 [ 445.807376][ T5704] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 445.926822][T10483] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 445.935257][T10483] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 445.945944][T10483] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 445.976875][ T30] audit: type=1400 audit(1784012578.105:1206): avc: denied { firmware_load } for pid=10475 comm="syz.1.1283" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 446.193908][ T804] usb 3-1: USB disconnect, device number 32 [ 446.682931][ T5704] usb 4-1: Using ep0 maxpacket: 32 [ 446.729214][ T5625] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 446.902176][ T5704] usb 4-1: no configurations [ 446.906837][ T5704] usb 4-1: can't read configurations, error -22 [ 446.979780][T10496] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1287'. [ 447.054954][ T5704] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 447.262033][ T5704] usb 4-1: Using ep0 maxpacket: 32 [ 447.285614][ T5704] usb 4-1: no configurations [ 447.299858][ T5704] usb 4-1: can't read configurations, error -22 [ 447.318614][T10504] netlink: 'syz.1.1291': attribute type 10 has an invalid length. [ 447.328981][ T5704] usb usb4-port1: attempt power cycle [ 447.336801][T10504] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1291'. [ 447.365720][T10504] dummy0: entered promiscuous mode [ 447.378245][T10504] bridge0: port 4(dummy0) entered blocking state [ 447.397545][T10504] bridge0: port 4(dummy0) entered disabled state [ 447.411069][T10504] dummy0: entered allmulticast mode [ 447.430082][T10504] bridge0: port 4(dummy0) entered blocking state [ 447.436702][T10504] bridge0: port 4(dummy0) entered forwarding state [ 447.712106][ T5704] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 447.733143][ T5704] usb 4-1: Using ep0 maxpacket: 32 [ 447.740471][ T5704] usb 4-1: no configurations [ 447.746301][ T5704] usb 4-1: can't read configurations, error -22 [ 447.882005][ T5704] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 447.922652][ T5704] usb 4-1: Using ep0 maxpacket: 32 [ 447.928505][ T5704] usb 4-1: no configurations [ 447.939471][ T5704] usb 4-1: can't read configurations, error -22 [ 447.970253][ T5704] usb usb4-port1: unable to enumerate USB device [ 449.420186][ T30] audit: type=1400 audit(1784012581.575:1207): avc: denied { read write } for pid=10530 comm="syz.2.1299" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 449.448486][ T29] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 449.460127][ T30] audit: type=1400 audit(1784012581.575:1208): avc: denied { open } for pid=10530 comm="syz.2.1299" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 450.052005][ T29] usb 2-1: Using ep0 maxpacket: 16 [ 450.067177][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.080206][ T804] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 450.089309][ T29] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 450.092024][ T5704] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 450.110175][ T29] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 450.120115][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.139988][T10539] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1300'. [ 450.159042][ T29] usb 2-1: config 0 descriptor?? [ 450.272488][ T804] usb 3-1: Using ep0 maxpacket: 8 [ 450.282055][ T5704] usb 1-1: Using ep0 maxpacket: 32 [ 450.284040][ T804] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 450.300201][ T5704] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 450.304090][ T804] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 450.321135][ T804] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 450.322206][ T5704] usb 1-1: config 0 has no interface number 0 [ 450.331460][ T804] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 450.351920][ T5704] usb 1-1: config 0 interface 184 has no altsetting 0 [ 450.367193][ T804] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 450.367807][ T5704] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 450.393004][ T5704] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.401488][ T5704] usb 1-1: Product: syz [ 450.406095][ T30] audit: type=1400 audit(1784012582.565:1209): avc: denied { getopt } for pid=10540 comm="syz.3.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 450.426850][ T5704] usb 1-1: Manufacturer: syz [ 450.426870][ T5704] usb 1-1: SerialNumber: syz [ 450.436921][ T804] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 450.437085][ T5704] usb 1-1: config 0 descriptor?? [ 450.454806][ T804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.598335][T10525] fuse: Unknown parameter 'fd0x0000000000000005' [ 450.676475][ T804] usb 3-1: GET_CAPABILITIES returned 0 [ 450.682364][ T804] usbtmc 3-1:16.0: can't read capabilities [ 450.790295][ T29] microsoft 0003:045E:07DA.000C: invalid report_size -351423527 [ 450.803953][ T29] microsoft 0003:045E:07DA.000C: item 0 4 1 7 parsing failed [ 450.816668][ T29] microsoft 0003:045E:07DA.000C: parse failed [ 450.829347][ T29] microsoft 0003:045E:07DA.000C: probe with driver microsoft failed with error -22 [ 451.067487][ T5704] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 451.099893][ T5704] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 451.930785][ T5704] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 451.947184][ T5704] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 451.964740][ T5704] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 451.974816][ T5704] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 451.991276][ T5704] usb 1-1: USB disconnect, device number 16 [ 452.563735][ T9914] usb 3-1: USB disconnect, device number 33 [ 452.623915][ T804] usb 2-1: USB disconnect, device number 28 [ 452.694146][ T30] audit: type=1400 audit(1784012584.855:1210): avc: denied { create } for pid=10563 comm="syz.1.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 453.765755][T10588] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1312'. [ 454.132901][ T29] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 454.748198][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 454.797088][ T29] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 454.809244][ T29] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 454.823098][ T29] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 454.833538][ T29] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 454.852138][ T29] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 454.861308][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.897683][T10604] syzkaller0: entered promiscuous mode [ 454.910668][T10604] syzkaller0: entered allmulticast mode [ 455.088477][T10590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.041966][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 456.091972][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 456.132078][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 456.183030][T10590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.229550][ T29] usb 3-1: usb_control_msg returned -71 [ 456.260556][ T29] usbtmc 3-1:16.0: can't read capabilities [ 456.316256][ T29] usb 3-1: USB disconnect, device number 34 [ 457.480605][T10633] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1324'. [ 457.747574][T10634] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20005 [ 459.675696][T10649] syz.4.1329 (10649): drop_caches: 2 [ 460.000158][T10662] team0 (unregistering): Port device team_slave_0 removed [ 460.053108][T10662] team0 (unregistering): Port device team_slave_1 removed [ 460.245455][ T5704] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 460.473559][T10675] fuse: Bad value for 'fd' [ 460.494141][ T5704] usb 5-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 460.554639][T10676] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 460.604114][ T5704] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 460.617974][ T5704] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 460.634282][ T5704] usb 5-1: config 0 interface 0 has no altsetting 0 [ 460.648246][ T5704] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 460.663667][ T5704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.699314][ T5704] usb 5-1: config 0 descriptor?? [ 460.717918][T10665] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 460.733419][ T9914] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 460.907209][ T9914] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 460.922484][ T9914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.939866][ T9914] usb 1-1: Product: syz [ 460.955613][ T9914] usb 1-1: Manufacturer: syz [ 460.965659][ T9914] usb 1-1: SerialNumber: syz [ 460.993348][ T9914] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 461.009721][ T5744] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 461.150287][ T5704] steelseries 0003:1038:1410.000D: unknown main item tag 0x2 [ 461.167120][ T5704] steelseries 0003:1038:1410.000D: unknown main item tag 0x3 [ 461.197838][ T5704] steelseries 0003:1038:1410.000D: unknown main item tag 0x1 [ 461.222910][ T5704] steelseries 0003:1038:1410.000D: unknown main item tag 0x2 [ 461.257723][ T5704] steelseries 0003:1038:1410.000D: not enough fields in HID_OUTPUT_REPORT 0 [ 462.238375][T10689] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1340'. [ 462.240196][ T5744] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 462.259157][ T5744] ath9k_htc: Failed to initialize the device [ 462.358419][ T5704] usb 5-1: USB disconnect, device number 33 [ 462.477017][ T5744] usb 1-1: ath9k_htc: USB layer deinitialized [ 462.562778][T10678] x_tables: duplicate underflow at hook 4 [ 462.582476][T10678] sctp: [Deprecated]: syz.0.1336 (pid 10678) Use of int in maxseg socket option. [ 462.582476][T10678] Use struct sctp_assoc_value instead [ 462.629897][ T10] usb 1-1: USB disconnect, device number 17 [ 463.560912][T10703] FAULT_INJECTION: forcing a failure. [ 463.560912][T10703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.574095][T10703] CPU: 1 UID: 0 PID: 10703 Comm: syz.4.1345 Tainted: G L syzkaller #0 PREEMPT(full) [ 463.574121][T10703] Tainted: [L]=SOFTLOCKUP [ 463.574127][T10703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 463.574136][T10703] Call Trace: [ 463.574144][T10703] [ 463.574151][T10703] dump_stack_lvl+0x100/0x190 [ 463.574177][T10703] should_fail_ex.cold+0x5/0xa [ 463.574198][T10703] _copy_from_user+0x2e/0xd0 [ 463.574228][T10703] memdup_user+0x6b/0xe0 [ 463.574246][T10703] strndup_user+0x78/0xe0 [ 463.574262][T10703] __x64_sys_mount+0x136/0x310 [ 463.574283][T10703] ? __pfx___x64_sys_mount+0x10/0x10 [ 463.574309][T10703] do_syscall_64+0x115/0x870 [ 463.574332][T10703] ? clear_bhb_loop+0x40/0x90 [ 463.574351][T10703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.574368][T10703] RIP: 0033:0x7f7c58b9de59 [ 463.574383][T10703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.574398][T10703] RSP: 002b:00007f7c59b01028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 463.574415][T10703] RAX: ffffffffffffffda RBX: 00007f7c58e26090 RCX: 00007f7c58b9de59 [ 463.574426][T10703] RDX: 00002000000001c0 RSI: 0000200000000140 RDI: 00002000000000c0 [ 463.574436][T10703] RBP: 00007f7c59b01090 R08: 0000200000000440 R09: 0000000000000000 [ 463.574447][T10703] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 463.574457][T10703] R13: 00007f7c58e26128 R14: 00007f7c58e26090 R15: 00007ffe004febb8 [ 463.574480][T10703] [ 463.929130][T10675] kexec: Could not allocate control_code_buffer [ 464.418390][T10721] devpts: Bad value for 'max' [ 464.491668][ T29] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 464.588774][T10725] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20005 [ 464.662180][ T29] usb 4-1: Using ep0 maxpacket: 32 [ 464.776029][ T29] usb 4-1: no configurations [ 464.820552][ T29] usb 4-1: can't read configurations, error -22 [ 465.001347][ T29] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 465.293042][ T29] usb 4-1: Using ep0 maxpacket: 32 [ 465.326878][ T29] usb 4-1: no configurations [ 465.340157][ T29] usb 4-1: can't read configurations, error -22 [ 465.668738][ T29] usb usb4-port1: attempt power cycle [ 465.675253][T10738] binder: 10735:10738 ioctl c0306201 200000000480 returned -14 [ 465.708156][ T30] audit: type=1400 audit(1784012597.865:1211): avc: denied { create } for pid=10735 comm="syz.4.1354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 465.778648][T10740] fuseblk: Unknown parameter '0x000000000000fcff0x000000000000000c' [ 466.026383][T10744] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 466.033493][ T29] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 466.082602][ T29] usb 4-1: Using ep0 maxpacket: 32 [ 466.097130][ T29] usb 4-1: no configurations [ 466.108990][ T29] usb 4-1: can't read configurations, error -22 [ 466.142966][T10746] netlink: 'syz.2.1357': attribute type 1 has an invalid length. [ 466.192871][T10746] 8021q: adding VLAN 0 to HW filter on device bond1 [ 466.202064][ T10] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 466.230852][ T30] audit: type=1400 audit(1784012598.385:1212): avc: denied { getopt } for pid=10745 comm="syz.2.1357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 466.252111][ T29] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 466.283144][ T29] usb 4-1: Using ep0 maxpacket: 32 [ 466.289548][ T29] usb 4-1: no configurations [ 466.295761][ T29] usb 4-1: can't read configurations, error -22 [ 466.302287][ T29] usb usb4-port1: unable to enumerate USB device [ 466.383830][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 466.398339][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 466.407785][ T10] usb 1-1: config 250 has an invalid interface number: 59 but max is 2 [ 466.416303][ T10] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 466.427091][ T10] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 3 [ 466.436352][ T10] usb 1-1: config 250 has no interface number 0 [ 466.443033][ T10] usb 1-1: config 250 interface 59 altsetting 255 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 466.454824][ T10] usb 1-1: config 250 interface 59 altsetting 255 has an endpoint descriptor with address 0xC2, changing to 0x82 [ 466.468601][ T10] usb 1-1: config 250 interface 59 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 466.480927][ T10] usb 1-1: config 250 interface 59 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 466.494313][ T804] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 466.502198][ T10] usb 1-1: config 250 interface 59 has no altsetting 0 [ 466.511133][ T10] usb 1-1: New USB device found, idVendor=1b80, idProduct=e302, bcdDevice=8c.2b [ 466.527682][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.536101][ T10] usb 1-1: Product: ì­—â°¾ê“᜙죘ã¸î²²â”œá…쪶쪅創孫ꄪ볜훼┙倻㞡䙋꒕ꬰỖ⧆⻥㬭唛ㄕ鹥ï¶ë‰™î›¶êˆî…¢ä·‘㯼ᆡæ¤ï„œê’—⽡匱fflí€æš‘Რ჊〕뙔ꨳ₈ìªï½®í“²á ‹ï·œê¥µé¼ºá±µï¹æ±Žâ‘¢æ–„澄᥂㣖梃찂빞è [ 466.559541][ T10] usb 1-1: Manufacturer: Ђ [ 466.565846][ T10] usb 1-1: SerialNumber: æˆàª†ë¹±ç“´éž‡ì˜†ãƒ—믪æ´á­‡î—æ¾å«¹ìŒ¹í–¨ï·ƒêŠƒé·ÑƒÒ»ä»±çˆ¬ë‰¤é‘ªè˜¨á–„顮㵻ﴣ娇럧䲓੿ﵩê‹ê»—橫ꨲè¢æˆ’ᆇ윊ѣ퇮豸夊㋢凴帜ç¯æŸ•ã¹€âƒ‘穛綈煕礉빛â¬ë¶žé¬±â´ªî‹¨ä‰µë¼¯ë€ï¯¹ážç¢‹ì—Šá¤ëŒ¢êˆì ’ስ⑲ㆽ孻뮤喭뻤ã½ï˜®êἴ敒ꮮ쑵駪੫䦲ב怒辟⿉䇡녰ꊭཇ┮Âంã‹ë‹¸æ½¨ì»ŽáˆŠåŒ˜ÛŽ [ 466.647629][ T804] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 466.659405][ T804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.669952][ T804] usb 3-1: Product: syz [ 466.674387][ T804] usb 3-1: Manufacturer: syz [ 466.680745][ T804] usb 3-1: SerialNumber: syz [ 466.688496][ T804] usb 3-1: config 0 descriptor?? [ 466.695781][ T804] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 035 [ 466.812061][ T10] em28xx 1-1:250.59: New device Ђ ì­—â°¾ê“᜙죘ã¸î²²â”œá…쪶쪅創孫ꄪ볜훼┙倻㞡䙋꒕ꬰỖ⧆⻥㬭唛ㄕ鹥ï¶ë‰™î›¶êˆî…¢ä·‘㯼ᆡæ¤ï„œê’—⽡匱fflí€æš‘Რ჊〕뙔ꨳ₈ìªï½®í“²á ‹ï·œê¥µé¼ºá±µï¹æ±Žâ‘¢æ–„澄᥂㣖梃찂빞è @ 12 Mbps (1b80:e302, interface 59, class 59) [ 466.846926][ T10] em28xx 1-1:250.59: Device initialization failed. [ 466.853934][ T10] em28xx 1-1:250.59: Device must be connected to a high-speed USB 2.0 port. [ 466.883477][ T10] usb 1-1: USB disconnect, device number 18 [ 467.440125][ T804] (null): failure reading functionality [ 467.761687][ T804] i2c i2c-1: connected i2c-tiny-usb device [ 467.957136][ T30] audit: type=1400 audit(1784012600.115:1213): avc: denied { bind } for pid=10774 comm="syz.1.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 468.105648][ T5739] usb 3-1: USB disconnect, device number 35 [ 468.202991][ T804] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 468.824111][ T804] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 468.865990][ T804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.891518][ T30] audit: type=1400 audit(1784012600.115:1214): avc: denied { connect } for pid=10774 comm="syz.1.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 468.930361][ T804] usb 2-1: Product: syz [ 468.948734][ T804] usb 2-1: Manufacturer: syz [ 469.295759][ T804] usb 2-1: SerialNumber: syz [ 469.327409][ T804] usb 2-1: config 0 descriptor?? [ 470.061956][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 470.171962][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 470.934756][ T804] usb 2-1: Firmware version (0.0) predates our first public release. [ 470.982097][ T804] usb 2-1: Please update to version 0.2 or newer [ 471.068956][T10806] netlink: 'syz.3.1374': attribute type 2 has an invalid length. [ 471.131512][ T804] usb 2-1: USB disconnect, device number 29 [ 471.242628][T10810] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20005 [ 472.872091][ T804] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 472.885732][ T30] audit: type=1326 audit(1784012605.045:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10822 comm="syz.4.1375" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c58b9de59 code=0x7ffc0000 [ 472.953156][ T30] audit: type=1326 audit(1784012605.045:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10822 comm="syz.4.1375" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f7c58b9de59 code=0x7ffc0000 [ 472.985004][ T30] audit: type=1326 audit(1784012605.045:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10822 comm="syz.4.1375" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c58b9de59 code=0x7ffc0000 [ 473.016278][ T30] audit: type=1326 audit(1784012605.045:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10822 comm="syz.4.1375" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f7c58b9de59 code=0x7ffc0000 [ 473.047269][ T30] audit: type=1326 audit(1784012605.045:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10822 comm="syz.4.1375" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c58b9de59 code=0x7ffc0000 [ 473.076280][ T30] audit: type=1326 audit(1784012605.045:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10822 comm="syz.4.1375" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f7c58b9de59 code=0x7ffc0000 [ 473.110384][ T30] audit: type=1326 audit(1784012605.045:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10822 comm="syz.4.1375" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c58b9de59 code=0x7ffc0000 [ 473.137774][ T30] audit: type=1326 audit(1784012605.075:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10822 comm="syz.4.1375" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c58b9de59 code=0x7ffc0000 [ 473.245120][ T804] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 473.254377][ T804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.275123][ T804] usb 2-1: config 0 descriptor?? [ 473.305048][ T804] cp210x 2-1:0.0: cp210x converter detected [ 473.678575][T10845] FAULT_INJECTION: forcing a failure. [ 473.678575][T10845] name failslab, interval 1, probability 0, space 0, times 0 [ 473.691331][T10845] CPU: 0 UID: 0 PID: 10845 Comm: syz.2.1386 Tainted: G L syzkaller #0 PREEMPT(full) [ 473.691358][T10845] Tainted: [L]=SOFTLOCKUP [ 473.691365][T10845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 473.691374][T10845] Call Trace: [ 473.691381][T10845] [ 473.691387][T10845] dump_stack_lvl+0x100/0x190 [ 473.691410][T10845] should_fail_ex.cold+0x5/0xa [ 473.691431][T10845] should_failslab+0xc2/0x120 [ 473.691445][T10845] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 473.691457][T10845] ? __alloc_skb+0x5b7/0x710 [ 473.691467][T10845] ? __alloc_skb+0x140/0x710 [ 473.691479][T10845] __alloc_skb+0x140/0x710 [ 473.691487][T10845] ? __alloc_skb+0x5b7/0x710 [ 473.691498][T10845] ? __pfx___alloc_skb+0x10/0x10 [ 473.691519][T10845] netlink_alloc_large_skb+0x69/0x150 [ 473.691544][T10845] netlink_sendmsg+0x680/0xda0 [ 473.691570][T10845] ? __pfx_netlink_sendmsg+0x10/0x10 [ 473.691591][T10845] ? selinux_socket_sendmsg+0x198/0x2f0 [ 473.691607][T10845] sock_write_iter+0x53a/0x5b0 [ 473.691621][T10845] ? __pfx_netlink_sendmsg+0x10/0x10 [ 473.691636][T10845] ? __pfx_sock_write_iter+0x10/0x10 [ 473.691658][T10845] ? bpf_lsm_file_permission+0x9/0x10 [ 473.691681][T10845] ? security_file_permission+0x76/0x210 [ 473.691705][T10845] ? rw_verify_area+0xce/0x6d0 [ 473.691727][T10845] vfs_write+0x6ac/0x1050 [ 473.691742][T10845] ? __pfx_sock_write_iter+0x10/0x10 [ 473.691757][T10845] ? __pfx_vfs_write+0x10/0x10 [ 473.691771][T10845] ? find_held_lock+0x2b/0x80 [ 473.691801][T10845] ksys_write+0x1f8/0x250 [ 473.691824][T10845] ? __pfx_ksys_write+0x10/0x10 [ 473.691852][T10845] do_syscall_64+0x115/0x870 [ 473.691873][T10845] ? clear_bhb_loop+0x40/0x90 [ 473.691886][T10845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.691897][T10845] RIP: 0033:0x7f18e659de59 [ 473.691907][T10845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.691917][T10845] RSP: 002b:00007f18e73cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 473.691936][T10845] RAX: ffffffffffffffda RBX: 00007f18e6826180 RCX: 00007f18e659de59 [ 473.691948][T10845] RDX: 0000000000000027 RSI: 0000200000005c00 RDI: 0000000000000008 [ 473.691957][T10845] RBP: 00007f18e73cd090 R08: 0000000000000000 R09: 0000000000000000 [ 473.691967][T10845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.691977][T10845] R13: 00007f18e6826218 R14: 00007f18e6826180 R15: 00007ffd8da2eac8 [ 473.691998][T10845] [ 474.382111][ T30] audit: type=1400 audit(1784012606.535:1223): avc: denied { mount } for pid=10816 comm="syz.1.1379" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 474.405394][T10847] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 474.433160][ T30] audit: type=1400 audit(1784012606.565:1224): avc: denied { mounton } for pid=10816 comm="syz.1.1379" path="/298/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 475.651240][T10872] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1393'. [ 476.887750][ T804] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 477.024892][ T804] cp210x 2-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 477.080188][ T804] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 477.164474][T10883] netlink: 65185 bytes leftover after parsing attributes in process `syz.4.1397'. [ 477.180726][ T804] usb 2-1: cp210x converter now attached to ttyUSB0 [ 477.211457][ T804] usb 2-1: USB disconnect, device number 30 [ 477.227711][T10883] veth0_to_bond: default FDB implementation only supports local addresses [ 477.227969][T10885] openvswitch: netlink: Unknown key attributes 20 [ 477.242353][ T804] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 477.423565][T10888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1398'. [ 477.426991][ T804] cp210x 2-1:0.0: device disconnected [ 477.437155][T10888] syz_tun: entered promiscuous mode [ 477.448114][T10888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1398'. [ 477.953405][ T29] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 477.987169][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 477.987184][ T30] audit: type=1400 audit(1784012610.145:1231): avc: denied { write } for pid=10900 comm="syz.3.1403" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 478.056284][T10901] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 478.162193][ T29] usb 1-1: Using ep0 maxpacket: 16 [ 478.182177][ T29] usb 1-1: config 0 interface 0 has no altsetting 0 [ 478.210556][ T29] usb 1-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 478.358954][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.395644][ T29] usb 1-1: config 0 descriptor?? [ 478.722117][ T804] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 478.883562][ T804] usb 4-1: Using ep0 maxpacket: 32 [ 478.897450][ T804] usb 4-1: unable to get BOS descriptor or descriptor too short [ 478.913601][ T804] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 478.923393][ T804] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 478.931788][ T804] usb 4-1: config 14 has no interface number 0 [ 478.938653][ T804] usb 4-1: config 14 has no interface number 1 [ 478.945516][ T804] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 478.956695][ T804] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 478.969135][ T804] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 478.981144][ T804] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 478.993495][ T804] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 479.005893][ T804] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 479.022713][ T29] usbhid 1-1:0.0: can't add hid device: -71 [ 479.030527][ T804] usb 4-1: config 14 interface 57 has no altsetting 0 [ 479.037549][ T29] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 479.045551][ T804] usb 4-1: config 14 interface 228 has no altsetting 0 [ 479.056734][ T29] usb 1-1: USB disconnect, device number 19 [ 479.066495][ T804] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 479.086095][ T804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.096038][ T804] usb 4-1: Product: syz [ 479.100210][ T804] usb 4-1: Manufacturer: syz [ 479.105318][ T804] usb 4-1: SerialNumber: syz [ 479.162046][ T5704] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 479.311982][ T5704] usb 5-1: Using ep0 maxpacket: 32 [ 479.318136][ T5704] usb 5-1: no configurations [ 479.324562][ T5704] usb 5-1: can't read configurations, error -22 [ 479.462037][ T5704] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 479.527229][ T804] legousbtower 4-1:14.57: interrupt endpoints not found [ 479.622154][ T5704] usb 5-1: Using ep0 maxpacket: 32 [ 479.628187][ T5704] usb 5-1: no configurations [ 479.632944][ T5704] usb 5-1: can't read configurations, error -22 [ 479.639666][ T5704] usb usb5-port1: attempt power cycle [ 479.799955][ T804] legousbtower 4-1:14.228: get version request failed: -32 [ 479.834225][ T804] legousbtower 4-1:14.228: probe with driver legousbtower failed with error -32 [ 480.062228][ T5704] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 480.114348][ T5704] usb 5-1: Using ep0 maxpacket: 32 [ 480.135282][ T5704] usb 5-1: no configurations [ 480.164772][ T5704] usb 5-1: can't read configurations, error -22 [ 480.362572][ T5704] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 480.463734][ T5704] usb 5-1: Using ep0 maxpacket: 32 [ 480.496628][ T5704] usb 5-1: no configurations [ 480.543207][ T5704] usb 5-1: can't read configurations, error -22 [ 480.630992][ T5704] usb usb5-port1: unable to enumerate USB device [ 480.679453][ T5704] usb 4-1: USB disconnect, device number 32 [ 482.785837][T10944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1415'. [ 483.248744][T10946] FAULT_INJECTION: forcing a failure. [ 483.248744][T10946] name failslab, interval 1, probability 0, space 0, times 0 [ 483.351242][T10946] CPU: 1 UID: 0 PID: 10946 Comm: syz.4.1414 Tainted: G L syzkaller #0 PREEMPT(full) [ 483.351272][T10946] Tainted: [L]=SOFTLOCKUP [ 483.351278][T10946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 483.351288][T10946] Call Trace: [ 483.351294][T10946] [ 483.351300][T10946] dump_stack_lvl+0x100/0x190 [ 483.351328][T10946] should_fail_ex.cold+0x5/0xa [ 483.351351][T10946] should_failslab+0xc2/0x120 [ 483.351372][T10946] __kmalloc_cache_noprof+0x91/0x6c0 [ 483.351400][T10946] ? percpu_ref_init+0xec/0x3f0 [ 483.351430][T10946] ? __pfx_io_ring_ctx_ref_free+0x10/0x10 [ 483.351454][T10946] percpu_ref_init+0xec/0x3f0 [ 483.351482][T10946] io_uring_setup.cold+0x2be/0x1cae [ 483.351512][T10946] ? __pfx_io_uring_setup+0x10/0x10 [ 483.351535][T10946] ? find_held_lock+0x2b/0x80 [ 483.351561][T10946] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 483.351579][T10946] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 483.351612][T10946] ? ksys_write+0x1ac/0x250 [ 483.351638][T10946] ? __pfx_ksys_write+0x10/0x10 [ 483.351667][T10946] __x64_sys_io_uring_setup+0xc2/0x170 [ 483.351692][T10946] do_syscall_64+0x115/0x870 [ 483.351717][T10946] ? clear_bhb_loop+0x40/0x90 [ 483.351739][T10946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.351757][T10946] RIP: 0033:0x7f7c58b9de59 [ 483.351772][T10946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.351788][T10946] RSP: 002b:00007f7c59b21ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 483.351806][T10946] RAX: ffffffffffffffda RBX: 0000200000000488 RCX: 00007f7c58b9de59 [ 483.351817][T10946] RDX: 0000200000000508 RSI: 0000200000000488 RDI: 00000000000003c9 [ 483.351827][T10946] RBP: 0000200000000480 R08: 0000000000000000 R09: 0000000000000000 [ 483.351837][T10946] R10: 0000200000000510 R11: 0000000000000206 R12: 0000200000000508 [ 483.351848][T10946] R13: 0000200000000510 R14: 00007f7c59b21fd8 R15: 0000000000000000 [ 483.351871][T10946] [ 484.020578][T10961] loop3: detected capacity change from 0 to 7 [ 484.074159][T10961] Dev loop3: unable to read RDB block 7 [ 484.093186][T10961] loop3: unable to read partition table [ 484.125109][T10961] loop3: partition table beyond EOD, truncated [ 484.166392][T10965] fuse: Unknown parameter '0x000000000000000400000000000000000000' [ 484.214967][T10961] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 484.256213][T10968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1420'. [ 484.267075][T10968] netlink: 'syz.1.1420': attribute type 30 has an invalid length. [ 484.297245][T10966] fuse: Bad value for 'fd' [ 484.324488][T10969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1420'. [ 484.393044][ T8350] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.413602][T10969] netlink: 'syz.1.1420': attribute type 30 has an invalid length. [ 484.438500][ T8350] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.500560][ T8350] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.549849][ T8350] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.933782][T10979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1423'. [ 486.706049][T11003] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1426'. [ 487.418027][T11009] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 488.615155][ T29] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 488.709524][T11027] fuse: Unknown parameter '0x000000000000000400000000000000000000' [ 488.951108][ T29] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 488.999813][ T29] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 489.057871][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.196252][ T29] usb 4-1: config 0 descriptor?? [ 489.452344][ T29] pwc: Askey VC010 type 2 USB webcam detected. [ 489.978863][T11048] trusted_key: encrypted_key: master key parameter 'ddfault' is invalid [ 490.265221][T11046] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 491.300007][ T5625] Bluetooth: hci4: unexpected event for opcode 0x1405 [ 491.621693][T11020] nbd: must specify a device to reconfigure [ 491.624178][ T30] audit: type=1400 audit(1784012623.785:1232): avc: denied { append } for pid=11019 comm="syz.3.1432" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 491.636938][ T29] pwc: recv_control_msg error -32 req 02 val 2b00 [ 491.637672][ T29] pwc: recv_control_msg error -32 req 02 val 2700 [ 491.843507][ T29] pwc: recv_control_msg error -71 req 04 val 1000 [ 491.850352][ T29] pwc: recv_control_msg error -71 req 04 val 1300 [ 491.862063][ T29] pwc: recv_control_msg error -71 req 04 val 1400 [ 491.890791][ T29] pwc: recv_control_msg error -71 req 02 val 2000 [ 491.920090][ T29] pwc: recv_control_msg error -71 req 02 val 2100 [ 491.946772][ T29] pwc: recv_control_msg error -71 req 04 val 1500 [ 491.972213][ T29] pwc: recv_control_msg error -71 req 02 val 2500 [ 492.104764][ T29] pwc: recv_control_msg error -71 req 02 val 2400 [ 492.111901][ T29] pwc: recv_control_msg error -71 req 02 val 2600 [ 492.120576][ T29] pwc: recv_control_msg error -71 req 02 val 2900 [ 492.127826][ T29] pwc: recv_control_msg error -71 req 02 val 2800 [ 492.135943][ T29] pwc: recv_control_msg error -71 req 04 val 1100 [ 492.142985][ T29] pwc: recv_control_msg error -71 req 04 val 1200 [ 492.167247][ T29] pwc: Registered as video103. [ 492.173353][T11076] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 492.223381][ T29] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input15 [ 492.422459][ T29] usb 4-1: USB disconnect, device number 33 [ 493.522907][ T30] audit: type=1400 audit(1784012625.685:1233): avc: denied { ioctl } for pid=11083 comm="syz.3.1449" path="socket:[31889]" dev="sockfs" ino=31889 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 493.772006][ T5704] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 493.905809][T11087] nbd: couldn't find a device at index 0 [ 493.952298][ T5704] usb 3-1: Using ep0 maxpacket: 32 [ 493.968611][ T5704] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 494.002598][ T5704] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 494.021907][ T5704] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 494.038173][ T5704] usb 3-1: Product: syz [ 494.048702][ T5704] usb 3-1: Manufacturer: syz [ 494.062692][ T5704] usb 3-1: SerialNumber: syz [ 494.085321][ T5704] usb 3-1: config 0 descriptor?? [ 494.099468][T11092] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 494.103805][ T804] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 494.107986][ T5704] hub 3-1:0.0: bad descriptor, ignoring hub [ 494.140716][ T5704] hub 3-1:0.0: probe with driver hub failed with error -5 [ 494.174923][ T29] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 494.282296][ T804] usb 5-1: Using ep0 maxpacket: 8 [ 494.296323][ T804] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 494.306774][ T804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.321776][T11092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.326404][ T804] pvrusb2: Hardware description: Terratec Grabster AV400 [ 494.340586][ T804] pvrusb2: ********** [ 494.345143][ T29] usb 4-1: Using ep0 maxpacket: 32 [ 494.363930][ T804] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 494.409558][T11104] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 494.410715][ T804] pvrusb2: Important functionality might not be entirely working. [ 494.422004][ T30] audit: type=1400 audit(1784012626.565:1234): avc: denied { mount } for pid=11097 comm="syz.1.1453" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 494.427319][ T804] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 494.478331][ T29] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 494.497562][ T29] usb 4-1: config 0 has no interface number 0 [ 494.524830][ T29] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 494.913019][T11092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.930301][ T804] pvrusb2: ********** [ 494.931687][ T30] audit: type=1400 audit(1784012626.565:1235): avc: denied { mounton } for pid=11097 comm="syz.1.1453" path="/312/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 494.967517][ T29] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 494.986966][ T2363] pvrusb2: Invalid write control endpoint [ 495.022482][ T29] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 495.055422][ T29] usb 4-1: config 0 interface 196 has no altsetting 0 [ 495.068841][ T29] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 495.091760][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.130152][ T29] usb 4-1: Product: syz [ 495.156668][ T29] usb 4-1: Manufacturer: syz [ 495.171582][ T2363] pvrusb2: Invalid write control endpoint [ 495.187838][ T29] usb 4-1: SerialNumber: syz [ 495.200487][ T2363] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 495.261734][ T29] usb 4-1: config 0 descriptor?? [ 495.267079][T11111] input: syz1 as /devices/virtual/input/input16 [ 495.281297][ T2363] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 495.296065][ T30] audit: type=1400 audit(1784012627.435:1236): avc: denied { mount } for pid=11095 comm="syz.4.1452" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 495.377070][ T2363] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 495.404279][T11087] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 495.424218][ T2363] pvrusb2: Device being rendered inoperable [ 495.436254][ T5704] usb 3-1: USB disconnect, device number 36 [ 495.453851][T11096] pvrusb2: Attempted to execute control transfer when device not ok [ 495.483964][ T2363] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 495.507091][ T2363] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 495.516502][ T9914] usb 5-1: USB disconnect, device number 38 [ 495.657405][ T2363] pvrusb2: Attached sub-driver cx25840 [ 495.663334][ T2363] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 495.674557][ T2363] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 495.701682][ T30] audit: type=1400 audit(1784012627.855:1237): avc: denied { unmount } for pid=5615 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 496.033518][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 496.039902][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 496.697857][ T29] ipheth 4-1:0.196: ipheth_get_macaddr: usb_control_msg: -110 [ 496.711092][ T29] ipheth 4-1:0.196: probe with driver ipheth failed with error -110 [ 497.222627][T11121] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1457'. [ 497.305602][ T29] usb 4-1: USB disconnect, device number 34 [ 497.896282][T11128] genirq: Flags mismatch irq 4. 00200000 (aio_iiro_16) vs. 00200080 (ttyS0) [ 499.319570][T11141] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1464'. [ 499.331113][ T29] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 499.535134][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.560453][ T29] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 499.595816][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.632193][ T10] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 499.784068][ T29] usb 4-1: config 0 descriptor?? [ 500.970059][ T29] usbhid 4-1:0.0: can't add hid device: -71 [ 500.976951][ T10] usb 5-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=d0.db [ 500.989387][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.999188][ T10] usb 5-1: Product: syz [ 501.014593][ T10] usb 5-1: Manufacturer: syz [ 501.023369][ T29] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 501.035800][ T10] usb 5-1: SerialNumber: syz [ 501.066292][ T29] usb 4-1: USB disconnect, device number 35 [ 501.078303][ T10] usb 5-1: config 0 descriptor?? [ 502.587334][T11158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1468'. [ 502.753239][T11141] geneve2: entered promiscuous mode [ 502.782360][T11141] geneve2: entered allmulticast mode [ 502.905691][T11163] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 502.915052][T11163] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 502.924396][T11163] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 503.989575][ T29] usb 5-1: USB disconnect, device number 39 [ 504.156931][ T30] audit: type=1400 audit(1784012636.305:1238): avc: denied { connect } for pid=11176 comm="syz.3.1473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 504.416825][T11181] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 504.895618][T11168] nbd: couldn't find a device at index 0 [ 505.173009][ T29] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 505.421473][ T30] audit: type=1400 audit(1784012637.575:1239): avc: denied { bind } for pid=11190 comm="syz.0.1477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 505.572632][ T30] audit: type=1400 audit(1784012637.665:1240): avc: denied { write } for pid=11190 comm="syz.0.1477" path="socket:[32124]" dev="sockfs" ino=32124 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 505.880184][ T30] audit: type=1400 audit(1784012637.665:1241): avc: denied { accept } for pid=11190 comm="syz.0.1477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 506.079823][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 506.089195][ T29] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 506.099780][ T29] usb 3-1: config 0 has no interface number 0 [ 506.107680][ T29] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 506.119532][ T29] usb 3-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 506.130810][ T29] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 506.174261][ T29] usb 3-1: config 0 interface 196 has no altsetting 0 [ 506.398891][ T30] audit: type=1400 audit(1784012638.345:1242): avc: denied { shutdown } for pid=11198 comm="syz.3.1478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 507.931274][ T29] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 507.944205][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.970301][ T29] usb 3-1: Product: syz [ 508.213960][ T29] usb 3-1: config 0 descriptor?? [ 508.260962][ T29] usb 3-1: can't set config #0, error -71 [ 508.304208][ T29] usb 3-1: USB disconnect, device number 37 [ 508.447538][T11222] netlink: 'syz.1.1484': attribute type 10 has an invalid length. [ 508.476835][T11222] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 508.489954][T11222] team0: Port device netdevsim1 added [ 508.507470][ T5625] Bluetooth: hci3: ISO packet for unknown connection handle 1039 [ 508.524746][T11223] netlink: 'syz.1.1484': attribute type 10 has an invalid length. [ 508.553383][T11223] team0: Port device netdevsim1 removed [ 508.568075][T11223] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 508.694851][T11223] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 508.795809][ T5625] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 508.894167][ T5704] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 510.111263][ T30] audit: type=1400 audit(1784012641.525:1243): avc: denied { getopt } for pid=11219 comm="syz.3.1483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 510.198411][ T5704] usb 5-1: Using ep0 maxpacket: 8 [ 510.215978][T11225] netlink: 'syz.3.1483': attribute type 12 has an invalid length. [ 510.324530][ T5704] usb 5-1: unable to get BOS descriptor or descriptor too short [ 510.460934][ T5704] usb 5-1: config 4 has an invalid interface number: 110 but max is 0 [ 510.570272][ T5704] usb 5-1: config 4 has no interface number 0 [ 510.867619][T11230] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20005 [ 511.326696][ T5704] usb 5-1: string descriptor 0 read error: -71 [ 511.388306][ T5704] usb 5-1: New USB device found, idVendor=0781, idProduct=0001, bcdDevice= 2.00 [ 511.446596][ T5704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.506800][ T5704] usb 5-1: can't set config #4, error -71 [ 511.516654][T11236] fuse: Bad value for 'user_id' [ 511.545579][T11236] fuse: Bad value for 'user_id' [ 511.551107][ T5704] usb 5-1: USB disconnect, device number 40 [ 512.015786][T11242] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 512.673258][ T5704] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 512.852190][ T5704] usb 3-1: device descriptor read/64, error -71 [ 513.050332][T11258] nbd: couldn't find a device at index 0 [ 513.112049][ T5704] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 513.163925][ T29] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 513.190225][T11244] kexec: Could not allocate control_code_buffer [ 513.271997][ T5704] usb 3-1: device descriptor read/64, error -71 [ 513.292023][ T10] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 513.350082][ T29] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 513.369015][ T29] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 513.382063][ T29] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 513.400764][ T29] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 513.402638][ T5704] usb usb3-port1: attempt power cycle [ 513.412080][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.440227][ T29] usb 1-1: config 0 descriptor?? [ 513.460744][ T29] usb-storage 1-1:0.0: USB Mass Storage device detected [ 513.472017][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 513.503885][ T10] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 513.510016][ T29] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 513.536966][ T10] usb 4-1: config 0 has no interface number 0 [ 513.550717][ T10] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 513.607847][ T10] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 513.635743][ T10] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 513.780179][T11263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.783402][ T10] usb 4-1: config 0 interface 196 has no altsetting 0 [ 513.793089][T11263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.804331][ T5704] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 513.814313][ T9914] usb 1-1: USB disconnect, device number 20 [ 514.593047][ T5704] usb 3-1: device descriptor read/8, error -71 [ 514.604006][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 514.620338][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.663919][ T10] usb 4-1: Product: syz [ 514.668134][ T10] usb 4-1: Manufacturer: syz [ 514.672940][ T10] usb 4-1: SerialNumber: syz [ 515.135946][ T30] audit: type=1326 audit(1784012647.195:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11273 comm="syz.4.1499" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c58b9de59 code=0x7ffc0000 [ 515.163920][ T10] usb 4-1: config 0 descriptor?? [ 515.175856][T11258] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 515.185387][ T30] audit: type=1326 audit(1784012647.195:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11273 comm="syz.4.1499" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c58b9de59 code=0x7ffc0000 [ 515.211974][ T30] audit: type=1326 audit(1784012647.195:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11273 comm="syz.4.1499" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c58b9de59 code=0x7ffc0000 [ 515.285992][ T30] audit: type=1326 audit(1784012647.195:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11273 comm="syz.4.1499" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c58b9de59 code=0x7ffc0000 [ 515.314340][ T5704] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 515.352665][ T30] audit: type=1326 audit(1784012647.195:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11273 comm="syz.4.1499" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7c58b9de59 code=0x7ffc0000 [ 515.379793][ T5704] usb 3-1: device descriptor read/8, error -71 [ 515.404452][ T30] audit: type=1326 audit(1784012647.195:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11273 comm="syz.4.1499" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c58b9de59 code=0x7ffc0000 [ 515.471361][ T30] audit: type=1326 audit(1784012647.195:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11273 comm="syz.4.1499" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c58b9de59 code=0x7ffc0000 [ 515.503601][ T5704] usb usb3-port1: unable to enumerate USB device [ 515.567505][ T30] audit: type=1326 audit(1784012647.195:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11273 comm="syz.4.1499" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c58b9de59 code=0x7ffc0000 [ 515.705927][ T30] audit: type=1326 audit(1784012647.205:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11273 comm="syz.4.1499" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c58b9de59 code=0x7ffc0000 [ 515.874107][ T30] audit: type=1326 audit(1784012647.205:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11273 comm="syz.4.1499" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7c58b9de59 code=0x7ffc0000 [ 515.997855][ T10] ipheth 4-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 516.273806][ T10] ipheth 4-1:0.196: Apple iPhone USB Ethernet device attached [ 516.379440][ T10] usb 4-1: USB disconnect, device number 36 [ 517.085608][ T10] ipheth 4-1:0.196: Apple iPhone USB Ethernet now disconnected [ 517.301114][T11300] fuse: Unknown parameter '0x000000000000000400000000000000000000' [ 517.544837][T11310] fuse: Bad value for 'user_id' [ 517.568947][T11310] fuse: Bad value for 'user_id' [ 518.824124][T11326] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20005 [ 520.462091][ T804] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 520.494047][T11313] kexec: Could not allocate control_code_buffer [ 520.511045][T11334] nbd: couldn't find a device at index 0 [ 520.633316][ T804] usb 3-1: Using ep0 maxpacket: 32 [ 520.648646][ T804] usb 3-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice= 0.40 [ 520.659240][ T804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.669324][ T804] usb 3-1: Product: syz [ 520.674021][ T804] usb 3-1: Manufacturer: syz [ 520.679059][ T804] usb 3-1: SerialNumber: syz [ 520.762783][ T29] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 520.792144][ T24] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 520.915253][T11330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.925268][T11330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.946577][ T804] usb 3-1: MBOX3: Invalid descriptor size=18. [ 520.962324][ T29] usb 1-1: Using ep0 maxpacket: 32 [ 520.970940][ T804] usb 3-1: USB disconnect, device number 42 [ 521.008355][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 521.045878][ T29] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 521.068072][ T24] usb 2-1: config 0 has no interfaces? [ 521.077597][ T29] usb 1-1: config 0 has no interface number 0 [ 521.097217][ T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 521.112924][ T29] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 521.127461][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.136488][ T29] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 521.153974][ T24] usb 2-1: config 0 descriptor?? [ 521.160593][ T29] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 521.171803][ T29] usb 1-1: config 0 interface 196 has no altsetting 0 [ 521.185841][ T29] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 521.196083][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.204870][ T29] usb 1-1: Product: syz [ 521.209498][ T29] usb 1-1: Manufacturer: syz [ 521.214680][ T29] usb 1-1: SerialNumber: syz [ 521.225377][ T29] usb 1-1: config 0 descriptor?? [ 521.231807][T11334] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 521.490697][ T5704] usb 2-1: USB disconnect, device number 31 [ 521.697079][T11360] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 521.775371][T11361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1521'. [ 521.837110][T11363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1522'. [ 522.133429][ T9914] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 522.352895][ T29] ipheth 1-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 522.381969][ T9914] usb 5-1: Using ep0 maxpacket: 16 [ 522.394237][ T9914] usb 5-1: config 251 has an invalid interface number: 202 but max is 0 [ 522.479091][ T9914] usb 5-1: config 251 has no interface number 0 [ 522.541979][ T9914] usb 5-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 522.649842][ T29] ipheth 1-1:0.196: Apple iPhone USB Ethernet device attached [ 522.655826][ T9914] usb 5-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 522.714175][ T29] usb 1-1: USB disconnect, device number 21 [ 522.760116][ T9914] usb 5-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 522.885246][ T9914] usb 5-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 522.967314][ T9914] usb 5-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 523.022026][ T9914] usb 5-1: config 251 interface 202 has no altsetting 0 [ 523.038485][ T9914] usb 5-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 523.057705][ T9914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.151119][T11371] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20005 [ 523.186998][ T9914] usb 5-1: Product: syz [ 523.187048][ T9914] usb 5-1: Manufacturer: syz [ 523.187089][ T9914] usb 5-1: SerialNumber: syz [ 523.194710][ T29] ipheth 1-1:0.196: Apple iPhone USB Ethernet now disconnected [ 523.458963][T11363] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 524.579178][ T9914] cxacru_cm: 70 callbacks suppressed [ 524.579201][ T9914] cxacru 5-1:251.202: send of cm 0x90 failed (-71) [ 524.592006][ T9914] cxacru 5-1:251.202: usbatm_usb_probe: invalid endpoint 02! [ 524.599862][ T9914] cxacru 5-1:251.202: probe with driver cxacru failed with error -22 [ 524.612159][ T9914] usb 5-1: USB disconnect, device number 41 [ 524.691186][T11378] trusted_key: encrypted_key: insufficient parameters specified [ 527.310495][T11407] fuse: Unknown parameter '0x000000000000000400000000000000000000' [ 528.614860][ T9914] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 528.744711][T11422] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 528.872356][ T9914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.949847][ T9914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.112155][ T9914] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 529.142370][ T9914] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 529.217894][ T9914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.250331][ T9914] usb 1-1: config 0 descriptor?? [ 529.463255][T11423] nbd: couldn't find a device at index 0 [ 529.478410][T11416] exfat: Deprecated parameter 'debug' [ 529.501870][T11416] exFAT-fs (loop0): unable to read boot sector [ 529.525262][T11416] exFAT-fs (loop0): failed to read boot sector [ 529.541633][T11416] exFAT-fs (loop0): failed to recognize exfat type [ 529.604825][T11433] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1542'. [ 529.771773][ T30] audit: type=1400 audit(1784012661.925:1324): avc: denied { write } for pid=11428 comm="syz.3.1541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 529.801862][ T10] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 529.846875][ T9914] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 529.985348][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 529.997866][ T10] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 530.018833][ T10] usb 5-1: config 0 has no interface number 0 [ 530.037330][ T10] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 530.057898][ T10] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 530.072636][ T5719] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 530.085833][ T10] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 530.093851][T11438] 9p: Bad value for 'wfdno' [ 530.106259][ T10] usb 5-1: config 0 interface 196 has no altsetting 0 [ 530.120935][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 530.137905][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.149528][ T30] audit: type=1326 audit(1784012662.295:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11437 comm="syz.1.1543" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bfff9de59 code=0x7ffc0000 [ 530.183647][ T10] usb 5-1: Product: syz [ 530.190788][ T10] usb 5-1: Manufacturer: syz [ 530.201656][ T10] usb 5-1: SerialNumber: syz [ 530.213264][ T10] usb 5-1: config 0 descriptor?? [ 530.222595][ T30] audit: type=1326 audit(1784012662.295:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11437 comm="syz.1.1543" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f5bfff9de59 code=0x7ffc0000 [ 530.261266][T11423] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 530.273646][ T5719] usb 4-1: Using ep0 maxpacket: 8 [ 530.288847][ T5719] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 530.305514][ T5719] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.314151][ T30] audit: type=1326 audit(1784012662.295:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11437 comm="syz.1.1543" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bfff9de59 code=0x7ffc0000 [ 530.341333][ T30] audit: type=1326 audit(1784012662.295:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11437 comm="syz.1.1543" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f5bfff9de59 code=0x7ffc0000 [ 530.379776][ T9914] usb 1-1: USB disconnect, device number 22 [ 530.392619][ T5719] pvrusb2: Hardware description: Terratec Grabster AV400 [ 530.415790][ T5719] pvrusb2: ********** [ 530.433386][ T5719] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 530.461829][ T5719] pvrusb2: Important functionality might not be entirely working. [ 530.470355][ T30] audit: type=1326 audit(1784012662.295:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11437 comm="syz.1.1543" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bfff9de59 code=0x7ffc0000 [ 530.509077][ T30] audit: type=1326 audit(1784012662.295:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11437 comm="syz.1.1543" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f5bfff9de59 code=0x7ffc0000 [ 530.534405][ T5719] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 530.537927][ T30] audit: type=1326 audit(1784012662.295:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11437 comm="syz.1.1543" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bfff9de59 code=0x7ffc0000 [ 530.566830][ T5719] pvrusb2: ********** [ 530.592147][ T2363] pvrusb2: Invalid write control endpoint [ 530.670263][ T2363] pvrusb2: Invalid write control endpoint [ 530.681247][ T2363] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 530.695647][ T2363] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 530.706358][ T2363] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 530.718836][ T2363] pvrusb2: Device being rendered inoperable [ 530.725896][ T2363] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 530.733521][ T2363] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 530.748806][ T2363] pvrusb2: Attached sub-driver cx25840 [ 530.754573][ T2363] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 530.767384][ T2363] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 531.039700][ T10] ipheth 5-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 531.066235][ T10] ipheth 5-1:0.196: Apple iPhone USB Ethernet device attached [ 531.428822][ T10] usb 5-1: USB disconnect, device number 42 [ 531.522895][ T10] ipheth 5-1:0.196: Apple iPhone USB Ethernet now disconnected [ 532.754134][ T24] usb 4-1: USB disconnect, device number 37 [ 532.951489][T11474] fuse: Unknown parameter '0x000000000000000400000000000000000000' [ 533.200027][T11477] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 533.729498][T11482] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1552'. [ 533.776821][ T30] audit: type=1400 audit(1784012665.935:1332): avc: denied { write } for pid=11453 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 533.999754][T11489] FAULT_INJECTION: forcing a failure. [ 533.999754][T11489] name fail_futex, interval 1, probability 0, space 0, times 1 [ 534.028854][T11489] CPU: 0 UID: 0 PID: 11489 Comm: syz.2.1554 Tainted: G L syzkaller #0 PREEMPT(full) [ 534.028884][T11489] Tainted: [L]=SOFTLOCKUP [ 534.028890][T11489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 534.028900][T11489] Call Trace: [ 534.028906][T11489] [ 534.028913][T11489] dump_stack_lvl+0x100/0x190 [ 534.028941][T11489] should_fail_ex.cold+0x5/0xa [ 534.028964][T11489] get_futex_key+0x1d2/0x14f0 [ 534.028989][T11489] ? __pfx_get_futex_key+0x10/0x10 [ 534.029018][T11489] futex_wake_op+0x131/0xe70 [ 534.029044][T11489] ? get_pid_task+0xfc/0x250 [ 534.029069][T11489] ? get_pid_task+0xfc/0x250 [ 534.029098][T11489] ? __pfx_futex_wake_op+0x10/0x10 [ 534.029125][T11489] ? find_held_lock+0x2b/0x80 [ 534.029155][T11489] ? rcu_read_lock_any_held+0x6a/0xa0 [ 534.029181][T11489] ? find_held_lock+0x2b/0x80 [ 534.029204][T11489] ? ksys_write+0x190/0x250 [ 534.029227][T11489] ? ksys_write+0x190/0x250 [ 534.029254][T11489] do_futex+0x3d8/0x440 [ 534.029277][T11489] ? __pfx_do_futex+0x10/0x10 [ 534.029300][T11489] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 534.029331][T11489] __x64_sys_futex+0x34f/0x4d0 [ 534.029356][T11489] ? fput+0x79/0x100 [ 534.029374][T11489] ? __pfx___x64_sys_futex+0x10/0x10 [ 534.029396][T11489] ? ksys_write+0x1ac/0x250 [ 534.029419][T11489] ? __pfx_ksys_write+0x10/0x10 [ 534.029450][T11489] do_syscall_64+0x115/0x870 [ 534.029475][T11489] ? clear_bhb_loop+0x40/0x90 [ 534.029496][T11489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.029521][T11489] RIP: 0033:0x7f18e659de59 [ 534.029537][T11489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.029553][T11489] RSP: 002b:00007f18e740f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 534.029572][T11489] RAX: ffffffffffffffda RBX: 00007f18e6825fa0 RCX: 00007f18e659de59 [ 534.029583][T11489] RDX: 0000000000000008 RSI: 0000000000000085 RDI: 0000000000000000 [ 534.029594][T11489] RBP: 00007f18e740f090 R08: 0000000000000000 R09: 0000000000000000 [ 534.029605][T11489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.029615][T11489] R13: 00007f18e6826038 R14: 00007f18e6825fa0 R15: 00007ffd8da2eac8 [ 534.029639][T11489] [ 534.266170][ T30] audit: type=1400 audit(1784012666.425:1333): avc: denied { write } for pid=11487 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 536.270110][T11516] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1558'. [ 536.997795][ T30] audit: type=1400 audit(1784012669.155:1334): avc: denied { write } for pid=11507 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 537.406016][ T30] audit: type=1400 audit(1784012669.565:1335): avc: denied { write } for pid=11530 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 538.508678][T11539] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 538.532851][T11539] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 538.625111][ T30] audit: type=1400 audit(1784012670.785:1336): avc: denied { setopt } for pid=11538 comm="syz.0.1563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 538.869899][T11552] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 538.903719][T11541] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1559'. [ 538.968045][T11541] nbd: must specify at least one socket [ 539.114719][T11541] nbd: couldn't find a device at index 0 [ 539.864218][T11555] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1566'. [ 540.952121][T11558] fuse: Unknown parameter '0x000000000000000400000000000000000000' [ 541.072164][ T9914] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 541.252012][ T9914] usb 4-1: Using ep0 maxpacket: 32 [ 541.270675][ T9914] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 541.299607][ T9914] usb 4-1: config 0 has no interface number 0 [ 541.317535][ T9914] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 541.357365][ T9914] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 541.387302][ T9914] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 541.428685][ T9914] usb 4-1: config 0 interface 196 has no altsetting 0 [ 541.458320][ T9914] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 541.485120][ T9914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.513855][ T9914] usb 4-1: Product: syz [ 541.524823][ T9914] usb 4-1: Manufacturer: syz [ 541.540736][ T9914] usb 4-1: SerialNumber: syz [ 541.561227][ T9914] usb 4-1: config 0 descriptor?? [ 541.759962][ T9914] usb 4-1: can't set config #0, error -71 [ 541.795032][ T9914] usb 4-1: USB disconnect, device number 38 [ 543.366970][T11567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1569'. [ 543.447071][T11549] syz.0.1563 (11549) used greatest stack depth: 19768 bytes left [ 543.564510][ T30] audit: type=1400 audit(1784012675.725:1337): avc: denied { listen } for pid=11570 comm="syz.4.1571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 543.692677][T11571] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1571'. [ 543.797953][T11576] dns_resolver: Unsupported content type (32) [ 544.496276][T11583] 9p: Bad value for 'rfdno' [ 545.663869][ T29] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 545.776932][T11589] netlink: 'syz.1.1576': attribute type 1 has an invalid length. [ 545.813791][T11589] 8021q: adding VLAN 0 to HW filter on device bond2 [ 545.873488][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 545.924520][ T30] audit: type=1400 audit(1784012678.085:1338): avc: denied { ioctl } for pid=11587 comm="syz.2.1577" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 545.959573][ T29] usb 5-1: config 5 has an invalid interface number: 115 but max is 2 [ 545.984116][ T29] usb 5-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 546.063033][ T29] usb 5-1: config 5 has an invalid interface number: 207 but max is 2 [ 546.089973][ T29] usb 5-1: config 5 has an invalid interface number: 206 but max is 2 [ 546.131064][ T29] usb 5-1: config 5 has an invalid interface number: 195 but max is 2 [ 546.162299][ T29] usb 5-1: config 5 has an invalid interface number: 32 but max is 2 [ 546.196077][ T29] usb 5-1: config 5 contains an unexpected descriptor of type 0x1, skipping [ 546.222259][ T29] usb 5-1: config 5 has 5 interfaces, different from the descriptor's value: 3 [ 546.251167][ T29] usb 5-1: config 5 has no interface number 0 [ 546.273644][ T29] usb 5-1: config 5 has no interface number 1 [ 546.292092][ T29] usb 5-1: config 5 has no interface number 2 [ 546.312573][ T29] usb 5-1: config 5 has no interface number 3 [ 546.360251][ T29] usb 5-1: config 5 has no interface number 4 [ 546.378634][ T29] usb 5-1: config 5 interface 115 altsetting 6 endpoint 0xC has an invalid bInterval 105, changing to 10 [ 546.412703][ T29] usb 5-1: config 5 interface 115 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 546.446207][ T29] usb 5-1: config 5 interface 115 altsetting 6 has a duplicate endpoint with address 0xC, skipping [ 546.492370][ T29] usb 5-1: config 5 interface 115 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 546.524819][ T29] usb 5-1: config 5 interface 115 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 546.572071][ T29] usb 5-1: config 5 interface 115 altsetting 6 bulk endpoint 0x6 has invalid maxpacket 32 [ 546.636228][ T29] usb 5-1: config 5 interface 115 altsetting 6 has a duplicate endpoint with address 0xC, skipping [ 546.674035][ T29] usb 5-1: config 5 interface 115 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 546.736308][ T29] usb 5-1: config 5 interface 115 altsetting 6 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 546.831232][ T29] usb 5-1: config 5 interface 115 altsetting 6 has a duplicate endpoint with address 0x8E, skipping [ 546.861250][ T29] usb 5-1: config 5 interface 207 altsetting 44 has a duplicate endpoint with address 0xB, skipping [ 546.890625][ T29] usb 5-1: config 5 interface 207 altsetting 44 has 4 endpoint descriptors, different from the interface descriptor's value: 16 [ 547.000848][ T29] usb 5-1: too many endpoints for config 5 interface 206 altsetting 48: 83, using maximum allowed: 30 [ 547.053289][ T30] audit: type=1400 audit(1784012679.205:1339): avc: denied { ioctl } for pid=11602 comm="syz.0.1578" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x642e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 547.150544][ T29] usb 5-1: config 5 interface 206 altsetting 48 has a duplicate endpoint with address 0xD, skipping [ 547.170157][ T29] usb 5-1: config 5 interface 206 altsetting 48 has 5 endpoint descriptors, different from the interface descriptor's value: 83 [ 547.204797][ T29] usb 5-1: too many endpoints for config 5 interface 195 altsetting 141: 85, using maximum allowed: 30 [ 547.366652][ T29] usb 5-1: config 5 interface 195 altsetting 141 has an invalid descriptor for endpoint zero, skipping [ 547.383696][ T29] usb 5-1: config 5 interface 195 altsetting 141 has a duplicate endpoint with address 0x2, skipping [ 547.395869][ T29] usb 5-1: config 5 interface 195 altsetting 141 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 547.415186][ T29] usb 5-1: config 5 interface 195 altsetting 141 has an invalid descriptor for endpoint zero, skipping [ 547.427555][ T29] usb 5-1: config 5 interface 195 altsetting 141 has a duplicate endpoint with address 0x7, skipping [ 547.440385][ T29] usb 5-1: config 5 interface 195 altsetting 141 endpoint 0xA has invalid maxpacket 528, setting to 64 [ 547.515303][T11613] fuse: Unknown parameter '0x000000000000000400000000000000000000' [ 548.250324][ T29] usb 5-1: config 5 interface 195 altsetting 141 has a duplicate endpoint with address 0xE, skipping [ 548.262155][ T29] usb 5-1: config 5 interface 195 altsetting 141 has 7 endpoint descriptors, different from the interface descriptor's value: 85 [ 548.276190][ T29] usb 5-1: config 5 interface 32 altsetting 10 has a duplicate endpoint with address 0xD, skipping [ 548.289790][ T29] usb 5-1: config 5 interface 32 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 548.302008][ T29] usb 5-1: config 5 interface 32 altsetting 10 has a duplicate endpoint with address 0x8, skipping [ 548.322171][ T29] usb 5-1: config 5 interface 32 altsetting 10 has a duplicate endpoint with address 0x4, skipping [ 548.377937][ T29] usb 5-1: config 5 interface 32 altsetting 10 has a duplicate endpoint with address 0x2, skipping [ 548.389934][ T29] usb 5-1: config 5 interface 32 altsetting 10 endpoint 0x1 has invalid wMaxPacketSize 0 [ 548.401434][ T29] usb 5-1: config 5 interface 32 altsetting 10 has a duplicate endpoint with address 0x3, skipping [ 548.413460][ T29] usb 5-1: config 5 interface 32 altsetting 10 has a duplicate endpoint with address 0xB, skipping [ 548.435184][ T29] usb 5-1: config 5 interface 32 altsetting 10 has a duplicate endpoint with address 0x6, skipping [ 548.452740][ T29] usb 5-1: config 5 interface 32 altsetting 10 has a duplicate endpoint with address 0x7, skipping [ 548.477461][ T29] usb 5-1: config 5 interface 32 altsetting 10 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 548.492042][ T29] usb 5-1: config 5 interface 32 altsetting 10 has a duplicate endpoint with address 0xC, skipping [ 548.509541][ T29] usb 5-1: config 5 interface 32 altsetting 10 has a duplicate endpoint with address 0x9, skipping [ 548.608388][ T29] usb 5-1: config 5 interface 32 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 548.659025][ T29] usb 5-1: config 5 interface 115 has no altsetting 0 [ 548.699490][ T29] usb 5-1: config 5 interface 207 has no altsetting 0 [ 548.727026][ T29] usb 5-1: config 5 interface 206 has no altsetting 0 [ 548.740560][ T29] usb 5-1: config 5 interface 195 has no altsetting 0 [ 548.748851][ T29] usb 5-1: config 5 interface 32 has no altsetting 0 [ 548.802751][ T29] usb 5-1: string descriptor 0 read error: -71 [ 548.820122][ T29] usb 5-1: New USB device found, idVendor=1f71, idProduct=3301, bcdDevice=2a.af [ 548.825604][ T30] audit: type=1400 audit(1784012680.975:1340): avc: denied { mounton } for pid=11623 comm="syz.1.1587" path="/344/file0" dev="tmpfs" ino=1844 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 548.840132][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.980234][ T29] usb 5-1: can't set config #5, error -71 [ 549.035011][ T29] usb 5-1: USB disconnect, device number 43 [ 549.477064][ T30] audit: type=1400 audit(1784012681.615:1341): avc: denied { setattr } for pid=11631 comm="syz.3.1590" name="tun" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 550.767244][T11650] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11650 comm=syz.3.1593 [ 551.683826][T11661] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1597'. [ 551.702130][T11661] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1597'. [ 551.719220][T11661] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1597'. [ 551.802231][T11661] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1597'. [ 552.575843][T11673] fuse: Unknown parameter '0x000000000000000400000000000000000000' [ 552.591731][T11666] input: syz1 as /devices/virtual/input/input18 [ 553.351132][ T8339] Bluetooth: hci5: Frame reassembly failed (-84) [ 553.735551][T11687] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10 sclass=netlink_route_socket pid=11687 comm=syz.3.1605 [ 554.111845][T11694] overlayfs: failed to resolve './file2': -2 [ 554.256720][T11695] netlink: 'syz.0.1608': attribute type 49 has an invalid length. [ 554.705877][T11695] bond0: (slave bond_slave_0): Releasing backup interface [ 554.783706][T11695] bond_slave_0: entered promiscuous mode [ 554.798878][T11695] bond_slave_0: entered allmulticast mode [ 554.842965][ T9914] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 555.023257][ T9914] usb 1-1: Using ep0 maxpacket: 8 [ 555.051321][ T9914] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 48, changing to 7 [ 555.236220][ T9914] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 555.276755][ T9914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.306732][ T9914] usb 1-1: Product: syz [ 555.320397][ T9914] usb 1-1: Manufacturer: syz [ 555.336087][ T9914] usb 1-1: SerialNumber: syz [ 555.405806][ T5625] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 555.412428][ T5623] Bluetooth: hci5: command 0x1003 tx timeout [ 555.493576][ T10] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 555.683953][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 555.747252][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 555.791447][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 555.824243][ T10] usb 3-1: can't read configurations, error -61 [ 555.876292][ T9914] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 555.891871][ T9914] usb 1-1: found format II with max.bitrate = 1025, frame size=32767 [ 555.915181][ T9914] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 556.002080][ T10] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 556.537182][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 556.552735][ T9914] usb 1-1: USB disconnect, device number 23 [ 556.567215][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 556.601566][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 556.663441][ T10] usb 3-1: can't read configurations, error -61 [ 556.698951][ T30] audit: type=1400 audit(1784012688.855:1342): avc: denied { write } for pid=11714 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 556.735307][ T10] usb usb3-port1: attempt power cycle [ 556.754357][T10429] udevd[10429]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 557.122036][ T10] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 557.255072][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 557.266982][ T30] audit: type=1400 audit(1784012689.425:1343): avc: denied { write } for pid=11731 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 557.315333][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 557.340192][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.358688][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 557.399622][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 558.004196][ T10] usb 3-1: can't read configurations, error -61 [ 558.131163][ T30] audit: type=1400 audit(1784012690.285:1344): avc: denied { shutdown } for pid=11737 comm="syz.0.1614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 558.322333][ T10] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 559.494528][ T10] usb 3-1: device descriptor read/8, error -71 [ 559.522116][ T30] audit: type=1400 audit(1784012690.595:1345): avc: denied { mount } for pid=11739 comm="syz.4.1615" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 559.594913][ T30] audit: type=1400 audit(1784012691.285:1346): avc: denied { read } for pid=11737 comm="syz.0.1614" path="socket:[34676]" dev="sockfs" ino=34676 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 559.648867][ T30] audit: type=1400 audit(1784012691.805:1347): avc: denied { ioctl } for pid=11746 comm="syz.4.1616" path="socket:[33498]" dev="sockfs" ino=33498 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 559.678998][T11747] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1616'. [ 559.684776][ T10] usb usb3-port1: unable to enumerate USB device [ 559.698699][T11750] netlink: 'syz.2.1617': attribute type 13 has an invalid length. [ 560.482351][ T30] audit: type=1400 audit(1784012692.225:1348): avc: denied { relabelfrom } for pid=11764 comm="syz.4.1621" name="" dev="pipefs" ino=34787 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 560.795614][ T30] audit: type=1400 audit(1784012692.955:1349): avc: denied { write } for pid=11777 comm="syz.4.1623" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 560.906870][ T30] audit: type=1400 audit(1784012692.975:1350): avc: denied { connect } for pid=11773 comm="syz.2.1622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 561.160386][ T30] audit: type=1400 audit(1784012693.315:1351): avc: denied { write } for pid=11751 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 561.672318][ T804] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 561.882891][ T30] audit: type=1400 audit(1784012694.035:1352): avc: denied { write } for pid=11796 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 561.962113][ T804] usb 4-1: Using ep0 maxpacket: 32 [ 561.995636][ T804] usb 4-1: no configurations [ 562.029066][ T804] usb 4-1: can't read configurations, error -22 [ 562.192821][ T804] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 562.195597][T11806] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20005 [ 562.762198][ T804] usb 4-1: Using ep0 maxpacket: 32 [ 562.778907][ T804] usb 4-1: no configurations [ 562.787773][ T804] usb 4-1: can't read configurations, error -22 [ 562.811239][ T804] usb usb4-port1: attempt power cycle [ 562.911980][ T10] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 563.092006][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 563.106004][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 563.130326][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.164083][ T804] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 563.204667][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 563.212947][ T804] usb 4-1: Using ep0 maxpacket: 32 [ 563.235925][ T10] pvrusb2: ********** [ 563.236761][ T804] usb 4-1: no configurations [ 563.256570][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 563.273986][ T804] usb 4-1: can't read configurations, error -22 [ 563.290980][ T10] pvrusb2: Important functionality might not be entirely working. [ 563.316679][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 563.355448][ T10] pvrusb2: ********** [ 563.397579][ T2363] pvrusb2: Invalid write control endpoint [ 563.442099][ T804] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 563.468388][ T804] usb 4-1: Using ep0 maxpacket: 32 [ 563.469618][ T804] usb 4-1: no configurations [ 563.469649][ T804] usb 4-1: can't read configurations, error -22 [ 563.470114][ T804] usb usb4-port1: unable to enumerate USB device [ 563.536078][ T2363] pvrusb2: Invalid write control endpoint [ 563.561959][ T2363] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 563.561992][ T2363] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 563.562000][ T2363] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 563.562009][ T2363] pvrusb2: Device being rendered inoperable [ 563.563006][ T2363] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 563.563054][ T2363] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 563.577373][ T2363] pvrusb2: Attached sub-driver cx25840 [ 563.577404][ T2363] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 563.577412][ T2363] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 563.634493][T11809] netlink: 'syz.2.1628': attribute type 21 has an invalid length. [ 563.634558][T11809] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1628'. [ 563.957960][T11826] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1633'. [ 563.975499][ T5704] usb 3-1: USB disconnect, device number 47 [ 565.677235][T11847] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20005 [ 566.432000][ T10] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 566.582215][T11859] tipc: Started in network mode [ 566.599788][T11859] tipc: Node identity 7ac4789907d7, cluster identity 4711 [ 566.626096][T11859] tipc: Enabled bearer , priority 0 [ 566.647378][T11862] i2c i2c-0: dtv_property_process_set: SET cmd 0x0000ffff undefined [ 566.657928][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 566.660178][T11861] syzkaller0: MTU too low for tipc bearer [ 566.687475][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 566.692265][T11858] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1644'. [ 566.701608][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 65401, setting to 1024 [ 566.720512][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 1024 [ 566.721816][T11861] tipc: Disabling bearer [ 566.734568][ T10] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 566.750343][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.763231][ T10] usb 5-1: Product: syz [ 566.767845][ T10] usb 5-1: Manufacturer: syz [ 566.774107][ T10] usb 5-1: SerialNumber: syz [ 566.802774][ T10] usb 5-1: config 0 descriptor?? [ 566.817099][T11851] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 566.825108][T11851] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 566.838367][ T10] usb 5-1: ucan: probing device on interface #0 [ 566.945920][T11865] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1645'. [ 566.960417][T11865] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 566.967704][T11865] IPv6: NLM_F_CREATE should be set when creating new route [ 567.048780][ T10] usb 5-1: ucan: device protocol version 0 is not supported [ 567.057139][ T10] usb 5-1: ucan: probe failed; try to update the device firmware [ 567.118510][T11868] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 567.128581][T11868] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1645'. [ 567.228102][ T8335] Bluetooth: hci5: Frame reassembly failed (-84) [ 567.272017][ T9914] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 567.335806][ T30] audit: type=1400 audit(1784012699.495:1353): avc: denied { setopt } for pid=11869 comm="syz.0.1647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 567.383190][ T10] usb 5-1: USB disconnect, device number 44 [ 567.492014][ T9914] usb 3-1: Using ep0 maxpacket: 32 [ 567.499097][ T9914] usb 3-1: no configurations [ 567.506355][ T9914] usb 3-1: can't read configurations, error -22 [ 567.642497][ T9914] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 567.822134][ T9914] usb 3-1: Using ep0 maxpacket: 32 [ 567.830883][ T9914] usb 3-1: no configurations [ 567.841071][ T9914] usb 3-1: can't read configurations, error -22 [ 567.858832][ T9914] usb usb3-port1: attempt power cycle [ 568.164029][ T30] audit: type=1400 audit(1784012700.325:1354): avc: denied { write } for pid=11877 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 568.225249][ T9914] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 568.254672][ T9914] usb 3-1: Using ep0 maxpacket: 32 [ 568.271138][ T9914] usb 3-1: no configurations [ 568.280569][ T9914] usb 3-1: can't read configurations, error -22 [ 568.422923][ T30] audit: type=1400 audit(1784012700.575:1355): avc: denied { write } for pid=11888 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 568.453203][ T9914] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 568.484919][ T9914] usb 3-1: Using ep0 maxpacket: 32 [ 568.491706][ T9914] usb 3-1: no configurations [ 568.496496][ T9914] usb 3-1: can't read configurations, error -22 [ 568.503294][ T9914] usb usb3-port1: unable to enumerate USB device [ 568.579818][T11891] netlink: 'syz.4.1649': attribute type 1 has an invalid length. [ 569.220543][T11891] 8021q: adding VLAN 0 to HW filter on device bond1 [ 569.242170][ T5623] Bluetooth: hci5: command 0x1003 tx timeout [ 569.250050][ T5625] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 569.359254][T11896] bond1 (unregistering): Released all slaves [ 569.478365][ T30] audit: type=1400 audit(1784012701.635:1356): avc: denied { write } for pid=11893 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 569.566708][ T30] audit: type=1400 audit(1784012701.725:1357): avc: denied { write } for pid=11910 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 569.628544][T11913] fuse: Unknown parameter 'user_id00000000000000000000' [ 570.103727][T11924] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20005 [ 570.813455][T11929] bond2: entered promiscuous mode [ 570.820109][T11929] 8021q: adding VLAN 0 to HW filter on device bond2 [ 570.827916][T11931] dummy0: entered allmulticast mode [ 570.836482][T11931] dummy0: left allmulticast mode [ 572.278921][T11944] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1660'. [ 572.329173][ T30] audit: type=1400 audit(1784012704.485:1358): avc: denied { watch watch_reads } for pid=11939 comm="syz.0.1659" path="/" dev="ramfs" ino=35227 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 572.396110][T11944] team0: Port device team_slave_0 removed [ 572.476973][T11919] kexec: Could not allocate control_code_buffer [ 573.539838][ T30] audit: type=1800 audit(1784012705.695:1359): pid=11941 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1659" name="bus" dev="ramfs" ino=35228 res=0 errno=0 [ 573.570527][ T30] audit: type=1400 audit(1784012705.725:1360): avc: denied { ioctl } for pid=11955 comm="syz.1.1663" path="socket:[35263]" dev="sockfs" ino=35263 ioctlcmd=0xf514 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 573.939207][T11970] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20005 [ 574.367389][T11964] input: syz0 as /devices/virtual/input/input19 [ 574.472068][ T5739] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 574.672130][ T5739] usb 5-1: Using ep0 maxpacket: 32 [ 574.673078][ T5739] usb 5-1: no configurations [ 574.673110][ T5739] usb 5-1: can't read configurations, error -22 [ 574.802772][ T5739] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 574.824334][ T30] audit: type=1400 audit(1784012706.955:1361): avc: denied { wake_alarm } for pid=11984 comm="syz.0.1671" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 574.836332][T11988] FAULT_INJECTION: forcing a failure. [ 574.836332][T11988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 574.836362][T11988] CPU: 0 UID: 0 PID: 11988 Comm: syz.1.1672 Tainted: G L syzkaller #0 PREEMPT(full) [ 574.836384][T11988] Tainted: [L]=SOFTLOCKUP [ 574.836390][T11988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 574.836400][T11988] Call Trace: [ 574.836405][T11988] [ 574.836411][T11988] dump_stack_lvl+0x100/0x190 [ 574.836436][T11988] should_fail_ex.cold+0x5/0xa [ 574.836461][T11988] _copy_from_user+0x2e/0xd0 [ 574.836482][T11988] move_addr_to_kernel+0x65/0x170 [ 574.836506][T11988] copy_msghdr_from_user+0x3f0/0x4c0 [ 574.836529][T11988] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 574.836555][T11988] ? __pfx__kstrtoull+0x10/0x10 [ 574.836583][T11988] ___sys_sendmsg+0x106/0x1e0 [ 574.836607][T11988] ? __pfx____sys_sendmsg+0x10/0x10 [ 574.836639][T11988] ? find_held_lock+0x2b/0x80 [ 574.836676][T11988] __sys_sendmmsg+0x20c/0x440 [ 574.836697][T11988] ? __pfx___sys_sendmmsg+0x10/0x10 [ 574.836713][T11988] ? ksys_write+0x190/0x250 [ 574.836752][T11988] ? fput+0x79/0x100 [ 574.836768][T11988] ? ksys_write+0x1ac/0x250 [ 574.836790][T11988] ? __pfx_ksys_write+0x10/0x10 [ 574.836816][T11988] __x64_sys_sendmmsg+0x9c/0x100 [ 574.836833][T11988] ? lockdep_hardirqs_on+0x78/0x100 [ 574.836857][T11988] do_syscall_64+0x115/0x870 [ 574.836880][T11988] ? clear_bhb_loop+0x40/0x90 [ 574.836900][T11988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.836916][T11988] RIP: 0033:0x7f5bfff9de59 [ 574.836929][T11988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 574.836944][T11988] RSP: 002b:00007f5c00d99028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 574.836960][T11988] RAX: ffffffffffffffda RBX: 00007f5c00225fa0 RCX: 00007f5bfff9de59 [ 574.836971][T11988] RDX: 0000000000000001 RSI: 0000200000008d80 RDI: 0000000000000003 [ 574.836981][T11988] RBP: 00007f5c00d99090 R08: 0000000000000000 R09: 0000000000000000 [ 574.836991][T11988] R10: 0000000024048000 R11: 0000000000000246 R12: 0000000000000001 [ 574.837000][T11988] R13: 00007f5c00226038 R14: 00007f5c00225fa0 R15: 00007ffd12843cf8 [ 574.837022][T11988] [ 574.993241][T11992] fuse: Bad value for 'fd' [ 574.996413][ T5739] usb 5-1: Using ep0 maxpacket: 32 [ 574.997326][ T5739] usb 5-1: no configurations [ 574.997356][ T5739] usb 5-1: can't read configurations, error -22 [ 574.997916][ T5739] usb usb5-port1: attempt power cycle [ 575.351581][T11998] netlink: 'syz.2.1674': attribute type 13 has an invalid length. [ 575.362114][ T5739] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 575.387823][ T30] audit: type=1400 audit(1784012707.545:1362): avc: denied { write } for pid=11967 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 575.412735][ T5739] usb 5-1: Using ep0 maxpacket: 32 [ 575.665287][ T804] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 575.676709][ T30] audit: type=1400 audit(1784012707.835:1363): avc: denied { write } for pid=12002 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 575.726184][ T5739] usb 5-1: no configurations [ 575.830352][T12006] fuse: Unknown parameter '0x000000000000000400000000000000000000' [ 575.874370][ T5739] usb 5-1: can't read configurations, error -22 [ 576.023296][ T5739] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 576.048827][ T804] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 576.087686][ T5739] usb 5-1: Using ep0 maxpacket: 32 [ 576.105388][ T5739] usb 5-1: no configurations [ 576.230956][ T5739] usb 5-1: can't read configurations, error -22 [ 576.241233][ T804] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 576.260552][ T5739] usb usb5-port1: unable to enumerate USB device [ 576.269154][ T804] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 576.282326][ T804] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 576.298490][ T804] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 576.310551][ T804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.333477][ T804] usb 3-1: config 0 descriptor?? [ 576.749490][ T804] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 576.765874][ T804] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 576.791502][ T804] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 576.838943][ T804] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 576.880560][ T804] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 576.949870][ T30] audit: type=1400 audit(1784012709.105:1364): avc: denied { relabelfrom } for pid=11997 comm="syz.2.1674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 577.124891][ T804] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 577.149663][ T804] usb 3-1: USB disconnect, device number 52 [ 577.169101][T12030] netlink: 'syz.0.1679': attribute type 15 has an invalid length. [ 577.437312][ T30] audit: type=1400 audit(1784012709.105:1365): avc: denied { relabelto } for pid=11997 comm="syz.2.1674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 577.459565][T12030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1679'. [ 577.581547][T12034] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20005 [ 577.634124][ T30] audit: type=1400 audit(1784012709.315:1366): avc: denied { write } for pid=12023 comm="syz.0.1679" lport=36645 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 578.041433][ T30] audit: type=1400 audit(1784012709.955:1367): avc: denied { write } for pid=12012 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 578.085463][T12026] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1679'. [ 578.216484][ T30] audit: type=1800 audit(1784012710.375:1368): pid=12038 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1681" name="file0" dev="overlay" ino=1726 res=0 errno=0 [ 578.247709][T12030] netlink: 'syz.0.1679': attribute type 15 has an invalid length. [ 578.248038][ T8345] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 578.271998][T12030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1679'. [ 578.421155][ T8345] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 578.464850][ T8345] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 578.501179][T12036] fido_id[12036]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 578.527692][ T8345] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 578.541022][ T804] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 578.765948][ T804] usb 5-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 578.789715][ T804] usb 5-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 578.810868][T11993] kexec: Could not allocate control_code_buffer [ 578.816201][ T804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.842278][ T804] usb 5-1: Product: syz [ 578.858338][ T804] usb 5-1: Manufacturer: syz [ 578.865343][ T804] usb 5-1: SerialNumber: syz [ 578.881166][ T804] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 578.891991][ T804] dvb-usb: bulk message failed: -22 (3/0) [ 578.915836][ T804] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 579.046965][ T804] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 579.056333][ T804] usb 5-1: media controller created [ 579.085721][ T804] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 579.961831][T12055] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1685'. [ 580.218086][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 580.218115][ T30] audit: type=1400 audit(1784012712.375:1370): avc: denied { ioctl } for pid=12060 comm="syz.0.1686" path="socket:[33788]" dev="sockfs" ino=33788 ioctlcmd=0x586a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 580.251238][ T804] DVB: Unable to find symbol mt352_attach() [ 580.257600][ T804] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 580.267165][ T804] dvb-usb: bulk message failed: -22 (3/0) [ 580.292314][ T804] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 580.380389][ T804] usb 5-1: USB disconnect, device number 49 [ 580.441484][T12067] fuse: Unknown parameter '0x000000000000000400000000000000000000' [ 580.947779][ T804] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 582.070514][T12082] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1692'. [ 582.128477][T12082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1692'. [ 582.399259][T12085] can0: slcan on ttyS3. [ 582.451086][ T30] audit: type=1400 audit(1784012714.605:1371): avc: denied { read } for pid=12088 comm="syz.1.1694" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 582.451163][ T30] audit: type=1400 audit(1784012714.605:1372): avc: denied { open } for pid=12088 comm="syz.1.1694" path="/360/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 582.543228][ T5811] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 582.695837][ T5811] usb 5-1: unable to get BOS descriptor or descriptor too short [ 582.696971][ T5811] usb 5-1: not running at top speed; connect to a high speed hub [ 582.697825][ T5811] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 582.700236][ T5811] usb 5-1: New USB device found, idVendor=15c2, idProduct=003c, bcdDevice=8a.3e [ 582.700260][ T5811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.700278][ T5811] usb 5-1: Product: syz [ 582.700292][ T5811] usb 5-1: Manufacturer: syz [ 582.700311][ T5811] usb 5-1: SerialNumber: syz [ 584.433130][T12113] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1698'. [ 584.745380][T12087] can0 (unregistered): slcan off ttyS3. [ 584.779890][ T30] audit: type=1400 audit(1784012716.935:1373): avc: denied { write } for pid=12094 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 585.030529][ T30] audit: type=1400 audit(1784012717.185:1374): avc: denied { write } for pid=12125 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 585.334976][ T5811] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 585.335090][ T5811] imon 5-1:5.0: unable to initialize intf0, err -19 [ 585.335109][ T5811] imon:imon_probe: failed to initialize context! [ 585.340302][ T5811] imon 5-1:5.0: unable to register, err -19 [ 585.348520][ T5811] usb 5-1: USB disconnect, device number 50 [ 586.107418][T12143] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 586.505827][ T30] audit: type=1400 audit(1784012718.665:1375): avc: denied { write } for pid=12129 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 586.577016][ T30] audit: type=1400 audit(1784012718.735:1376): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 587.610400][T12152] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20005 [ 588.154901][ T30] audit: type=1400 audit(1784012720.315:1377): avc: denied { write } for pid=12154 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 588.191469][T12157] fuse: Unknown parameter '0x000000000000000400000000000000000000' [ 588.415049][T12164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1707'. [ 588.424613][T12165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1706'. [ 588.436901][T12164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1707'. [ 588.483479][ T30] audit: type=1400 audit(1784012720.645:1378): avc: denied { load_policy } for pid=12163 comm="syz.2.1707" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 588.509880][T12164] SELinux: invalid class [ 588.522273][T12164] SELinux: failed to load policy [ 588.603345][ T29] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 589.132890][ T29] usb 2-1: Using ep0 maxpacket: 32 [ 589.321610][ T29] usb 2-1: no configurations [ 589.459172][ T29] usb 2-1: can't read configurations, error -22 [ 590.099544][ T29] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 590.377061][T12173] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 590.472031][ T29] usb 2-1: Using ep0 maxpacket: 32 [ 590.484478][ T29] usb 2-1: no configurations [ 590.489745][ T29] usb 2-1: can't read configurations, error -22 [ 590.499607][ T29] usb usb2-port1: attempt power cycle [ 590.541491][ T30] audit: type=1400 audit(1784012722.695:1379): avc: denied { cmd } for pid=12172 comm="syz.2.1710" path="/dev/ublk-control" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 590.571733][T12178] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 590.593838][T12173] netlink: 'syz.2.1710': attribute type 1 has an invalid length. [ 590.618171][T12173] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1710'. [ 590.808479][T12176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1711'. [ 590.878008][ T29] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 591.331433][ T29] usb 2-1: Using ep0 maxpacket: 32 [ 591.448543][ T29] usb 2-1: device descriptor read/all, error -71 [ 591.727583][ T30] audit: type=1400 audit(1784012723.885:1380): avc: denied { setopt } for pid=12182 comm="syz.1.1713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 591.935227][T12187] netlink: 71 bytes leftover after parsing attributes in process `syz.2.1712'. [ 594.099020][T12194] bridge_slave_0: left allmulticast mode [ 594.112891][T12194] bridge_slave_0: left promiscuous mode [ 594.121267][T12194] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.709588][T12209] fuse: Unknown parameter '0x000000000000000400000000000000000000' [ 595.136597][T12194] bridge_slave_1: left allmulticast mode [ 595.161240][T12194] bridge_slave_1: left promiscuous mode [ 595.191309][T12194] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.278343][T12194] bond0: (slave bond_slave_0): Releasing backup interface [ 595.334874][T12194] bond0: (slave bond_slave_1): Releasing backup interface [ 595.400124][T12194] team0: Port device team_slave_0 removed [ 595.457221][T12194] team0: Port device team_slave_1 removed [ 595.478739][T12194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 595.505338][T12194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 595.602810][T12194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 595.646355][T12194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 595.680697][T12194] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 595.783005][T12219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1109 sclass=netlink_route_socket pid=12219 comm=syz.4.1721 [ 596.142757][ T5623] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 596.159912][ T5623] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 596.194097][ T5623] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 596.215124][ T5623] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 596.334266][ T5623] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 596.599839][ T30] audit: type=1400 audit(1784012728.755:1381): avc: denied { mounton } for pid=12225 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 598.612059][T12230] Bluetooth: hci5: command tx timeout [ 600.283174][T12228] syz.4.1723 (12228): drop_caches: 2 [ 600.611818][T12260] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 600.715168][T12230] Bluetooth: hci5: command tx timeout [ 601.564804][T12263] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 602.378648][T12263] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 602.387915][T12272] fuse: Unknown parameter '0x000000000000000400000000000000000000' [ 602.447481][T12263] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 602.568189][T12263] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 602.762044][T12230] Bluetooth: hci5: command tx timeout [ 603.006301][ T8347] smbdirect: ib_dev[syz2] removed [ 603.396456][T12225] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.444293][T12225] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.491249][T12225] bridge_slave_0: entered allmulticast mode [ 603.522236][T12225] bridge_slave_0: entered promiscuous mode [ 603.567010][T12225] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.663769][T12225] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.685135][T12225] bridge_slave_1: entered allmulticast mode [ 603.722632][T12225] bridge_slave_1: entered promiscuous mode [ 604.323382][T12225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 604.371101][T12225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 604.892167][T12230] Bluetooth: hci5: command tx timeout [ 607.024300][T12293] ipip0: entered promiscuous mode [ 607.080351][T12293] ipip0: entered allmulticast mode [ 607.116545][T12225] team0: Port device team_slave_0 added [ 607.124134][T12312] fuse: Unknown parameter '0x000000000000000400000000000000000000' [ 607.126282][T12225] team0: Port device team_slave_1 added [ 607.312700][T12225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 607.332101][T12225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 607.334637][T12316] binder: BINDER_SET_CONTEXT_MGR already set [ 607.361739][T12225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 607.379684][T12225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 607.397809][T12316] binder: 12315:12316 ioctl 4018620d 200000004a80 returned -16 [ 607.418863][T12225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 607.526422][ T30] audit: type=1400 audit(1784012739.685:1382): avc: denied { map } for pid=12309 comm="syz.1.1742" path="socket:[37125]" dev="sockfs" ino=37125 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 607.607682][T12225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 607.949630][T12225] hsr_slave_0: entered promiscuous mode [ 607.970107][T12225] hsr_slave_1: entered promiscuous mode [ 607.978326][T12230] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 607.988650][T12230] Bluetooth: hci2: Injecting HCI hardware error event [ 607.997493][T12230] Bluetooth: hci2: hardware error 0x00 [ 608.020236][T12225] debugfs: 'hsr0' already exists in 'hsr' [ 608.028139][T12225] Cannot create hsr debugfs directory [ 608.072027][ T10] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 713.181850][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 713.188846][ C0] rcu: 1-...!: (0 ticks this GP) idle=7ac4/1/0x4000000000000000 softirq=54497/54497 fqs=1 [ 713.199717][ C0] rcu: (detected by 0, t=10502 jiffies, g=62977, q=230 ncpus=2) [ 713.207434][ C0] Sending NMI from CPU 0 to CPUs 1: [ 713.207459][ C1] NMI backtrace for cpu 1 [ 713.207473][ C1] CPU: 1 UID: 0 PID: 12310 Comm: syz.1.1742 Tainted: G L syzkaller #0 PREEMPT(full) [ 713.207492][ C1] Tainted: [L]=SOFTLOCKUP [ 713.207497][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 713.207504][ C1] RIP: 0010:__this_cpu_preempt_check+0x0/0x20 [ 713.207532][ C1] Code: c6 00 0f 40 8c 48 c7 c7 40 0f 40 8c e9 f9 fe ff ff 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 89 fe 48 c7 c7 80 0f 40 8c e9 cd fe ff ff 66 2e 0f [ 713.207545][ C1] RSP: 0018:ffffc90000a08d58 EFLAGS: 00000096 [ 713.207558][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ac156fbfe921c2fb [ 713.207567][ C1] RDX: 0000000000000000 RSI: 00000000109fc3dd RDI: ffffffff8e17df68 [ 713.207576][ C1] RBP: ffff8880486d62c0 R08: 00000000ffffffff R09: 0000000000000d83 [ 713.207585][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 713.207594][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 713.207602][ C1] FS: 00007f5c00d996c0(0000) GS:ffff888123ee8000(0000) knlGS:0000000000000000 [ 713.207617][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 713.207626][ C1] CR2: 00007f54a419c440 CR3: 000000007409e000 CR4: 00000000003526f0 [ 713.207635][ C1] Call Trace: [ 713.207641][ C1] [ 713.207645][ C1] lock_acquire+0x1c9/0x370 [ 713.207662][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 713.207680][ C1] ? __pfx_advance_sched+0x10/0x10 [ 713.207694][ C1] _raw_spin_lock+0x2e/0x40 [ 713.207710][ C1] ? advance_sched+0xe5/0xd20 [ 713.207722][ C1] advance_sched+0xe5/0xd20 [ 713.207734][ C1] ? find_held_lock+0x2b/0x80 [ 713.207759][ C1] ? __hrtimer_run_queues+0x37b/0x9c0 [ 713.207778][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 713.207796][ C1] ? __pfx_advance_sched+0x10/0x10 [ 713.207809][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 713.207830][ C1] hrtimer_interrupt+0x3e5/0x940 [ 713.207852][ C1] __sysvec_apic_timer_interrupt+0x109/0x470 [ 713.207873][ C1] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 713.207892][ C1] [ 713.207896][ C1] [ 713.207900][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 713.207915][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 713.207934][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 56 30 29 f6 48 89 df e8 de 7f 29 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 a5 8f 18 f6 65 8b 05 ee 38 a7 08 85 c0 74 16 5b [ 713.207946][ C1] RSP: 0018:ffffc90004a4fd78 EFLAGS: 00000246 [ 713.207957][ C1] RAX: 0000000000000006 RBX: ffffffff9b7333d8 RCX: 0000000000000000 [ 713.207966][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a3c59 RDI: ffffffff8c400f80 [ 713.207974][ C1] RBP: 0000000000000283 R08: 0000000000000001 R09: 0000000000000000 [ 713.207983][ C1] R10: 0000000000000001 R11: ffffffffffffffff R12: 1ffff92000949fb6 [ 713.207991][ C1] R13: 000000000cdfb43b R14: 000000000cdfb43b R15: 0000000000000000 [ 713.208005][ C1] do_settimeofday64+0x326/0x4d0 [ 713.208020][ C1] ? __pfx_do_settimeofday64+0x10/0x10 [ 713.208035][ C1] ? security_capable+0x80/0x260 [ 713.208049][ C1] ? rdma_disconnect+0x7e0/0x870 [ 713.208067][ C1] ? capable+0xd3/0xf0 [ 713.208082][ C1] do_sys_settimeofday64+0x1dc/0x260 [ 713.208098][ C1] __x64_sys_clock_settime+0x1c1/0x2a0 [ 713.208118][ C1] ? __pfx___x64_sys_clock_settime+0x10/0x10 [ 713.208141][ C1] do_syscall_64+0x115/0x870 [ 713.208159][ C1] ? clear_bhb_loop+0x40/0x90 [ 713.208174][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.208188][ C1] RIP: 0033:0x7f5bfff9de59 [ 713.208201][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 713.208212][ C1] RSP: 002b:00007f5c00d99028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3 [ 713.208224][ C1] RAX: ffffffffffffffda RBX: 00007f5c00225fa0 RCX: 00007f5bfff9de59 [ 713.208233][ C1] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 713.208241][ C1] RBP: 00007f5c00033e6f R08: 0000000000000000 R09: 0000000000000000 [ 713.208249][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 713.208257][ C1] R13: 00007f5c00226038 R14: 00007f5c00225fa0 R15: 00007ffd12843cf8 [ 713.208270][ C1] [ 713.208454][ C0] rcu: rcu_preempt kthread starved for 10500 jiffies! g62977 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 713.639727][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 713.649681][ C0] rcu: RCU grace-period kthread stack dump: [ 713.655552][ C0] task:rcu_preempt state:R running task stack:27672 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 713.669032][ C0] Call Trace: [ 713.672296][ C0] [ 713.675238][ C0] __schedule+0x125c/0x6730 [ 713.679757][ C0] ? __pfx___schedule+0x10/0x10 [ 713.684599][ C0] ? find_held_lock+0x2b/0x80 [ 713.689274][ C0] ? schedule+0x225/0x2c0 [ 713.693602][ C0] schedule+0xdd/0x2c0 [ 713.697665][ C0] schedule_timeout+0x127/0x280 [ 713.702508][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 713.707875][ C0] ? __pfx_process_timeout+0x10/0x10 [ 713.713161][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 713.718961][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 713.724413][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 713.729167][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 713.734450][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 713.739382][ C0] ? rcu_is_watching+0x12/0xc0 [ 713.744160][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 713.749964][ C0] rcu_gp_kthread+0x179/0x230 [ 713.754631][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 713.759816][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 713.765620][ C0] ? __kthread_parkme+0x18c/0x230 [ 713.770642][ C0] ? kthread+0x13a/0x450 [ 713.774879][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 713.780067][ C0] kthread+0x370/0x450 [ 713.784134][ C0] ? __pfx_kthread+0x10/0x10 [ 713.788723][ C0] ret_from_fork+0x72b/0xd50 [ 713.793308][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 713.798415][ C0] ? __switch_to+0x800/0x10f0 [ 713.803090][ C0] ? __pfx_kthread+0x10/0x10 [ 713.807679][ C0] ret_from_fork_asm+0x1a/0x30 [ 713.812450][ C0] [ 713.815459][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 713.821767][ C0] CPU: 0 UID: 0 PID: 12335 Comm: modprobe Tainted: G L syzkaller #0 PREEMPT(full) [ 713.832517][ C0] Tainted: [L]=SOFTLOCKUP [ 713.836824][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 713.846866][ C0] RIP: 0010:smp_call_function_many_cond+0x589/0x16c0 [ 713.853532][ C0] Code: b8 00 00 00 00 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 c9 95 0c 00 f3 90 <41> 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 2c 0f 00 00 8b 45 08 31 [ 713.873123][ C0] RSP: 0018:ffffc9000245f8a8 EFLAGS: 00000293 [ 713.879177][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff81fd46fd [ 713.887135][ C0] RDX: ffff88801f3a0000 RSI: ffffffff81fd46d7 RDI: ffff88801f3a0000 [ 713.895094][ C0] RBP: ffff8880b8541240 R08: 0000000000000005 R09: 0000000000000000 [ 713.903050][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 713.911005][ C0] R13: ffffed10170a8249 R14: 0000000000000001 R15: ffff8880b843c880 [ 713.918964][ C0] FS: 0000000000000000(0000) GS:ffff888123de8000(0000) knlGS:0000000000000000 [ 713.927884][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 713.934457][ C0] CR2: 00007f54a4122e9c CR3: 000000000e992000 CR4: 00000000003526f0 [ 713.942420][ C0] Call Trace: [ 713.945684][ C0] [ 713.948607][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 713.953802][ C0] ? free_pgd_range+0x2a0/0x10d0 [ 713.958747][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 713.965074][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 713.970265][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 713.975373][ C0] flush_tlb_mm_range+0x45f/0x16f0 [ 713.980481][ C0] ? __pfx_free_pgtables+0x10/0x10 [ 713.985586][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 713.991130][ C0] tlb_finish_mmu+0x3fe/0x810 [ 713.995805][ C0] exit_mmap+0x454/0xa00 [ 714.000043][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 714.004816][ C0] ? rcu_is_watching+0x12/0xc0 [ 714.009578][ C0] ? __lock_acquire+0x49f/0x1a40 [ 714.014507][ C0] ? find_held_lock+0x2b/0x80 [ 714.019180][ C0] ? uprobe_clear_state+0x5f/0x260 [ 714.024289][ C0] ? __mutex_unlock_slowpath+0x35d/0x930 [ 714.029927][ C0] ? arch_uprobe_clear_state+0x107/0x150 [ 714.035559][ C0] __mmput+0x12a/0x410 [ 714.039622][ C0] mmput+0x67/0x80 [ 714.043336][ C0] do_exit+0x8b1/0x2ae0 [ 714.047491][ C0] ? do_raw_spin_lock+0x128/0x260 [ 714.052507][ C0] ? __pfx_do_exit+0x10/0x10 [ 714.057092][ C0] ? do_group_exit+0x1bd/0x2a0 [ 714.061854][ C0] ? rcu_is_watching+0x12/0xc0 [ 714.066616][ C0] do_group_exit+0xd5/0x2a0 [ 714.071116][ C0] __x64_sys_exit_group+0x3e/0x50 [ 714.076151][ C0] x64_sys_call+0x102c/0x1530 [ 714.080834][ C0] do_syscall_64+0x115/0x870 [ 714.085418][ C0] ? clear_bhb_loop+0x40/0x90 [ 714.090090][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.095973][ C0] RIP: 0033:0x7f54a42816c5 [ 714.100376][ C0] Code: Unable to access opcode bytes at 0x7f54a428169b. [ 714.107377][ C0] RSP: 002b:00007ffdfa2af978 EFLAGS: 00000206 ORIG_RAX: 00000000000000e7 [ 714.115777][ C0] RAX: ffffffffffffffda RBX: 00007f54a4382fe8 RCX: 00007f54a42816c5 [ 714.123738][ C0] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000001 [ 714.131718][ C0] RBP: 0000000000000001 R08: 00007ffdfa2af908 R09: 0000000000000000 [ 714.139678][ C0] R10: 00007ffdfa2af7a0 R11: 0000000000000206 R12: 0000000000000000 [ 714.147635][ C0] R13: 0000000000000001 R14: 00007f54a4381680 R15: 00007f54a4383000 [ 714.155607][ C0]