last executing test programs: 24m1.451026813s ago: executing program 4 (id=783): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x300, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40a25, 0x23}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x400c000) r4 = socket$rds(0x15, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000180)={r0, 0x1, 0x8}) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) ioctl$BLKREPORTZONE(r5, 0xc0101282, &(0x7f0000000480)={0x3c9, 0x8, 0x0, [{0x3, 0x2, 0x0, 0x5, 0x9, 0x0, 0x8}, {0xffffffffffffffff, 0x1, 0xe3, 0x7, 0x2, 0xa6, 0x7, '\x00', 0x2}, {0xfffffffffffff0c6, 0x1a6, 0x0, 0x3a, 0x3f, 0x0, 0x0, '\x00', 0x4}, {0x7ff, 0x80, 0xe, 0x0, 0x4, 0x0, 0x5, '\x00', 0x7}, {0xfffffffffffffffa, 0x400, 0x9, 0x3, 0xf, 0x5, 0x8a, '\x00', 0x6}, {0x1, 0x4, 0xffff, 0x0, 0xf7, 0x1, 0x7}, {0xfff, 0x67ca7a12, 0x8, 0x6, 0x2, 0x4, 0x6, '\x00', 0x7fffffffffffffff}, {0x1, 0x8, 0x8000000000000, 0xfa, 0x3d, 0x3, 0x3, '\x00', 0x400}]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x411}}], 0x48}, 0x0) 24m0.563141715s ago: executing program 4 (id=787): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x28e08a7aa33ba155) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x30, r5, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x11}, 0x20000000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x40, 0x42, 0x1, 0xffffffff, 0x25dfdbfd, {0x2}, [@nested={0x18, 0x38, 0x0, 0x1, [@nested={0x14, 0x3, 0x0, 0x1, [@nested={0x10, 0x66, 0x0, 0x1, [@typed={0x9, 0x7e, 0x0, 0x0, @binary="ac66d0741d"}]}]}]}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0xc8, 0x0, 0x0, @u64=0x2}]}, @nested={0x4, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001300)={0x44, 0x1, 0x9, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}]}]}, 0x44}}, 0x8000) 23m58.851810601s ago: executing program 4 (id=792): openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x7, 0x50201) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000000c0)=0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x482400, 0xc) execveat(r4, &(0x7f0000000280)='./file0\x00', &(0x7f0000000380)={[&(0x7f0000000340)='\x00']}, &(0x7f00000004c0)={[&(0x7f00000003c0)='/dev/v4l-subdev#\x00', &(0x7f0000000400)='\x00', &(0x7f0000000440)='{+!:&$\x00', &(0x7f0000000480)='/dev/v4l-subdev#\x00']}, 0x1000) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) capset(0x0, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) waitid(0x1, r5, &(0x7f0000000500), 0x1000000, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000340), 0x8200, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r6, 0x3b89, &(0x7f00000002c0)={0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x0, 0x0}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x3a, [0xfffffff8, 0x0, 0x5, 0x10009, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x401, 0xb4, 0xa, 0xb2b9, 0x26, 0x8, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x1000, 0x1, 0x48, 0x100d, 0x4, 0x12a0, 0x8000, 0x1, 0x7, 0x6, 0x7, 0x81, 0x40008a, 0x79, 0x2, 0x10001, 0x4, 0x91, 0x4, 0xe76b, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x2, 0x2, 0x2, 0x2, 0x7, 0x4, 0x7, 0x4, 0x4, 0xffffffff, 0x9], [0x9, 0x16e, 0x6, 0xf6ca, 0x4, 0xc66, 0xa8a9, 0x20000070, 0x8e, 0xd50, 0x7, 0x5, 0xfffffffe, 0x80d, 0x4, 0xa7, 0x1000, 0x0, 0x200b395, 0x400000, 0x80000000, 0x10000, 0x19, 0x7, 0x400001, 0x3, 0x3, 0x8, 0x1000000, 0x402, 0x6, 0x4c2336d3, 0x96, 0x0, 0xfffffff6, 0x401, 0x6, 0xf1, 0x4, 0xffffffff, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x0, 0x1ce, 0x1, 0x80000004, 0x80000001, 0x2, 0x2, 0x9, 0x95, 0x80000000, 0x4, 0xfffffff9, 0x40000003, 0x1000, 0xfffff804, 0x5], [0x80000000, 0xfffffffe, 0xfffc, 0xc, 0x2, 0x2e6bf783, 0x5, 0x5, 0x400005, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x1e6, 0x400, 0x41, 0x6, 0xee4b, 0x2008004, 0x1, 0x8000003, 0x5, 0x89, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x30000b, 0x8000, 0x401, 0x3e55, 0x9, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x1, 0x9d26, 0x110000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0x0, 0x3, 0x5, 0x8, 0x77, 0x9, 0xdf8e, 0x10000, 0x3, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xbb3f, 0x1005, 0x1, 0x8000007, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xffbffff7, 0x8, 0x7, 0x5396, 0x939, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xffffffff, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x0, 0x3, 0xf, 0xe, 0x10, 0x26c, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0xf, 0x463f, 0x4, 0xdad, 0x8003, 0x8, 0x14000, 0x5, 0x9]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) 23m57.769591768s ago: executing program 4 (id=795): syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0026}]}) close_range(r1, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200007, 0x801, 0x4, 0x7}) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000080)=0x1e, 0x4) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x9, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000003c0)={0x101, 0x2, 0x2, 0x0, 0xc}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x45) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x68, &(0x7f0000005a40)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "75e700", 0x32, 0x3a, 0x0, @dev, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a3579e", 0x0, 0x2c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [], "6be2"}}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r7 = fanotify_init(0x81, 0x40000) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5) fanotify_mark(r7, 0x105, 0x40001032, r6, 0x0) read$FUSE(r7, &(0x7f0000005ac0)={0x2020}, 0x2020) 23m56.074554325s ago: executing program 4 (id=800): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x439, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x12257}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x1}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}]}}}]}, 0x60}}, 0x0) 23m55.643266338s ago: executing program 4 (id=802): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x4e1f, 0x3, 'lblc\x00', 0x7, 0x10000004, 0x5c}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e1f, 0xe0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 23m55.418175114s ago: executing program 32 (id=802): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x4e1f, 0x3, 'lblc\x00', 0x7, 0x10000004, 0x5c}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e1f, 0xe0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 13.550804588s ago: executing program 5 (id=6014): syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) userfaultfd(0x801) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) prlimit64(0xffffffffffffffff, 0xb, &(0x7f0000000180)={0xfff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'comedi_test\x00', [0x80008004, 0x5, 0x23, 0x100401, 0x1, 0x0, 0x10001, 0x1000008, 0x2, 0x3ff, 0x9, 0x3ff, 0x9, 0xe, 0x6, 0x8001, 0x3, 0x4, 0x0, 0x391, 0x80000088, 0xd, 0x3, 0xfffffff6, 0x200000a, 0x4, 0x0, 0x6, 0x4, 0x181, 0x7d]}) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)='pstore\x00', 0x28c2008, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x4028, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, 0x0, &(0x7f0000000040), 0x5005) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0x20) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x20000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300), 0x0, 0x0, 0x0, 0x1}}, 0x40) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4002, 0x0, 0x7, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x0, 0x8, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@empty, @multicast2}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fc, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000580)=0xdfa, 0x4) write$binfmt_misc(r0, &(0x7f0000000000)="180c4552", 0x4) write$P9_RREADLINK(r0, &(0x7f0000000080)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000040), 0xe09) 12.694719646s ago: executing program 5 (id=6018): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) 12.316804201s ago: executing program 5 (id=6019): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0xc0a82, 0x146) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) futex(&(0x7f0000004000)=0x2, 0x8d, 0x2, 0x0, 0x0, 0x82) 11.479116606s ago: executing program 5 (id=6022): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0xffffffffffffff24}], 0x1, 0x0, 0x0, 0x7400}, 0x44851) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x0, @mcast1}, 0x80, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0904000000000000"], 0x84}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000780)="7bef212a6246844589eee8729249a7e9d8beb74fcbccc76c7de509573c289ab1c5c27ec9cd47aade1f3510148f48a75cbf944465c32f0b5d03184652e3b9430723f0c1f2bcbb7d0debfe7dad1c973e506e7e0482aef13be75f9549f2b680005bd305114af36202a779f918268682ba85f2e25febf270f9f9e09efb16c96e27563cac6f978363ae6ce5487e8dc61990d87497368e5e2c74fdeb1900c6f488b24c646c5f67449dec26f6b320d86820efb0725d758ac1430cc18e6305ccec894d37ddb5a1a43c6dc0242945056f7c2bd1c9c73210c82a48c61602de97", 0xdb) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) unshare(0x62040200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) eventfd(0x8000) ioctl$KVM_X86_SET_MSR_FILTER(r4, 0x4188aec6, &(0x7f0000001c80)={0x1, [{0x1, 0x8, 0x7, &(0x7f0000000100)='i'}, {0x2, 0x748, 0x3, &(0x7f0000000200)="3ceb429081d89265a57084da8dd19a213a3d87ff7ff265b1c835ae27e4451ba6e6fabb58b472097431fef821c7ffbd4d23c118eaa18c697eea38180dc65ded60ce9b0333cb8eb204439978bd1835ad797658987b3b97324cec3f0df54a5a67466af8601b482e5973624e9ec12dd1a563d9675c2fcff7726fb085fba4978ca842867633d3c4fe719da6c30b188a99318593e5e53042bc08dd992b86a9c05052b85ea8008f3a32f56cb097cd9624c746691dde1610a53cdc2025900367f044c2d6de1d9157a1e516573beef4dd6e7b67a215ed075fa0ed432a5d853b32dfaca2e4944934114b01685f71"}, {0x3, 0x158, 0x1, &(0x7f0000000380)="4190248bd839aec19b3261d32d1c822a3e926da63da686e42410490d792e4fcb50b9c31d335ceeaad48119"}, {0x3, 0x5e0, 0x769, &(0x7f00000003c0)="1554b4e75b6b286e0a6dfbdee61f7d3863521418426df6aef722d54e2fc5930a6334e90bdef392b99175da271db7fb8c8ab4ebcc93b527769ad48e3cf31c2ca20d31caa7116a93c8e0c638814bc5da08dca40c7dcc2a746b1119b803fcf7ffd3fcb5b97fd7f80f0976f0d45ab5ac891e11d7214cb5145a16d685ca42bf75eb2742ccb9612179a75ed5bde83a84caf18040deb76ef43227004415733fdcd188b3c65349026296505b34ffd4017b7da3157e4c1dfcd62a15965df4823f"}, {0x1, 0x550, 0x2, &(0x7f0000000480)="72fecac6f0ddd03b34db85788ed9c40e6be92e4a0ac71d239f2f7265275c0a767dccc2539ba1efe99dfc784a4b6a9e58701eadf3ad3f29f42405d94707b83a1c92a758ebaa4e2abfcfea8ce9c5d583430658faefd992857c603b500384fe778689877abfb3a021dbfd56234865f212abf726a25cccdee0d2a65ad2c64e0edce8a448c03beb3df3a2ca7eed692a5534544a4422b963d2a066ca04db19cf5e3ffac31efc9c74b51809aa2e"}, {0x3, 0xe8, 0x1, &(0x7f0000000540)="8c44152fa34430f92c915e3618f8e72f93c87ea97655482d99bf806f88"}, {0x0, 0xd0, 0x200, &(0x7f0000000580)="02e7ea134cf7d8dde847c793183ddc6d2d01266365d1047ca4d7"}, {0x1, 0x0, 0x10000, 0x0}, {0x2, 0x2c0, 0xa75, &(0x7f00000006c0)="941805b7b9af1202bbe6c80577b0d5f7513d83ed98921ab620373b871eba90ffee90d6939521a8c27012a6ad1831306ee4cf7d1ec217ef4b4a98accb6dffecca0a298f1d649ff6a5f2ae88e28da4dab0c9bbfcccba23a7ec"}, {0x6, 0x128, 0x3, &(0x7f0000000740)="3c9e264d7ad3d79f6bcb6a50c3764d0b0dde7ef63a00df35159a8ed38d00a06ad7f2954c48"}, {0x1, 0x8000, 0x0, &(0x7f0000000980)="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"}, {0x1, 0x1f8, 0x751b, &(0x7f0000001980)="5f03ae1c45e40e75f13a060dd175bddf8e95bb239283f1b62ed7f5c630e4cfcb85e59bce7bc29a87a4ede79acc39e5dfa29741fd057f909af7adab8f967641"}, {0x2, 0x128, 0xfffffffe, &(0x7f00000019c0)="aebfd7bea43028eb5aaf909b1934362e3f39381b746f1c77d7f980af89375d5cac152c17d4"}, {0x3, 0x308, 0x1800000, &(0x7f0000001a40)="3d7aace3daea3d24efb1f793487965134d2afdf1f735e305945775b17c40cbfd23a3545598d4e6309975db77f056e7fb1c66dca54423fd8b67f965921a388b5d62064f4bea7724cf41629df3c7f4d6b40174185047ae368a64b1647e840f4d48fa"}, {0x1, 0x3e8, 0x8, &(0x7f0000001ac0)="eb3df8b9f3d293c533285a55a6686bbb76779730457d1f737aed5ac5ff740af896b82bc1a5595b795aa259f62c14deaac692f6e57609772283441ca5f83ea9fbcbd87b014f4b282f4400b0329ddaf65f2ae4aaff00769255fad585b12f43426a5e4c3948239d1a959e883244ca94e720b1c2b84413f59170ebfdc8f21e"}, {0x1, 0x670, 0x1, &(0x7f0000001b80)="5a9ad2b5fcf24a8573df8482fc2bd8f77ffbcd109487f6045a5da47101789f9cc18a1ff690c2dfaa969ae194fefefa7b21acd68af1a161f536c448070ea218f822c702be0170992496027c44296445778b91ef0c39ba6807b28fa2753c82dcc24f5ec5b79885fac318cad821d5a7204962dbdca38694db7a947a06199f6587e550bb80e16ecec76f2e18eb1534e795066b19d8bb5ca5a536b726814b6218a48d09c51b293c1c78d331513f8a8628c2b1f97a784154916d1bf65ebc507e02859ad5ebf8d1570c9c46f9d3bedb77f2"}]}) 8.089596832s ago: executing program 5 (id=6034): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket(0x80000000000000a, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000027c0)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000002800)={0x2020}, 0x2020) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mlock(&(0x7f0000499000/0x2000)=nil, 0x2000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) 7.591675803s ago: executing program 0 (id=6035): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101000) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x5, 0x2, 0x1, 'queue1\x00', 0x3}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$setperm(0x5, r5, 0x82004) keyctl$read(0xb, r5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f00000000c0)={0x101, 0x0, 0x0, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x1, 0x10}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18002100002ce663b5ad3206740000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r7, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r8}, 0x8) sendto$inet6(r0, &(0x7f0000000180)="9a", 0x1, 0x800, &(0x7f0000000480)={0xa, 0x4e23, 0x20000000, @loopback}, 0x1c) 7.390836372s ago: executing program 3 (id=6037): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2803, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400020000bfb932ec057943e519092e01ece06010800000000000000000500000805000100070000000500010079545a0700000009000200734d0184797a3100008200a8cfe74f8c2418d48f31e75d5f980c1eb5cf4a14323f0e4527b0e0a86779c90f84b07efaf5d56c58126d4f0285ef6fd60a6ffaca332a16eab6c68f83ede1354e4ff4b38dbc6ed937d22b51fb1a782d290199cd8bb1ca5cccab10bbb78c6d1ab24074c86046a18e3e9c7819f437894d49a337024ab490ec62d41a553fc50095a31f94e035dab4c92623effe821c55cac844590e5bce43eec6c6"], 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x20000080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) getrlimit(0x2, &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) close(0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000740)) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f00000005c0)=""/180) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000009000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r4, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) 5.902941129s ago: executing program 0 (id=6043): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20008080) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) syz_open_dev$video4linux(0x0, 0x7, 0xe0c61) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) ptrace(0x10, 0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, 0x0, 0x0, 0x4003) read$msr(r0, &(0x7f000001aa40)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x10080}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x3c, 0x8, 0x0, 0x1}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 5.824243219s ago: executing program 2 (id=6044): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101000) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x5, 0x2, 0x1, 'queue1\x00', 0x3}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$setperm(0x5, r5, 0x82004) keyctl$read(0xb, r5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f00000000c0)={0x101, 0x0, 0x0, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x1, 0x10}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18002100002ce663b5ad3206740000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r7, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r8}, 0x8) sendto$inet6(r0, &(0x7f0000000180)="9a", 0x1, 0x800, &(0x7f0000000480)={0xa, 0x4e23, 0x20000000, @loopback}, 0x1c) 5.75790394s ago: executing program 1 (id=6045): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101000) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x5, 0x2, 0x1, 'queue1\x00', 0x3}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)='h', 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f00000000c0)={0x101, 0x0, 0x0, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x1, 0x10}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18002100002ce663b5ad3206740000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r7, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r8}, 0x8) sendto$inet6(r0, &(0x7f0000000180)="9a", 0x1, 0x800, &(0x7f0000000480)={0xa, 0x4e23, 0x20000000, @loopback}, 0x1c) 5.379160773s ago: executing program 0 (id=6046): syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000002c00070128bd7000ffdbdf25017c0000080001800400348008000280040001"], 0x24}, 0x1, 0x0, 0x0, 0x4881}, 0x2400c810) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r2}}, 0x20) 5.26080285s ago: executing program 0 (id=6047): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000"], 0x0, 0x37}, 0x28) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$ttyS3(0xffffff9c, 0x0, 0x210100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0xa, 0x80000, 0x3) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000c29f2dbd7000fcffff1f00000000", @ANYRES32=r4, @ANYBLOB="46160600060000002400128009000100626f6e64040000000014000280050001000200000005000e00050000"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x480) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 4.661615262s ago: executing program 0 (id=6048): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0xffffffffffffff24}], 0x1, 0x0, 0x0, 0x7400}, 0x44851) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x0, @mcast1}, 0x80, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0904000000000000"], 0x84}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000780)="7bef212a6246844589eee8729249a7e9d8beb74fcbccc76c7de509573c289ab1c5c27ec9cd47aade1f3510148f48a75cbf944465c32f0b5d03184652e3b9430723f0c1f2bcbb7d0debfe7dad1c973e506e7e0482aef13be75f9549f2b680005bd305114af36202a779f918268682ba85f2e25febf270f9f9e09efb16c96e27563cac6f978363ae6ce5487e8dc61990d87497368e5e2c74fdeb1900c6f488b24c646c5f67449dec26f6b320d86820efb0725d758ac1430cc18e6305ccec894d37ddb5a1a43c6dc0242945056f7c2bd1c9c73210c82a48c61602de97", 0xdb) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) unshare(0x62040200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) eventfd(0x8000) ioctl$KVM_X86_SET_MSR_FILTER(r4, 0x4188aec6, &(0x7f0000001c80)={0x1, [{0x1, 0x8, 0x7, &(0x7f0000000100)='i'}, {0x2, 0x748, 0x3, &(0x7f0000000200)="3ceb429081d89265a57084da8dd19a213a3d87ff7ff265b1c835ae27e4451ba6e6fabb58b472097431fef821c7ffbd4d23c118eaa18c697eea38180dc65ded60ce9b0333cb8eb204439978bd1835ad797658987b3b97324cec3f0df54a5a67466af8601b482e5973624e9ec12dd1a563d9675c2fcff7726fb085fba4978ca842867633d3c4fe719da6c30b188a99318593e5e53042bc08dd992b86a9c05052b85ea8008f3a32f56cb097cd9624c746691dde1610a53cdc2025900367f044c2d6de1d9157a1e516573beef4dd6e7b67a215ed075fa0ed432a5d853b32dfaca2e4944934114b01685f71"}, {0x3, 0x158, 0x1, &(0x7f0000000380)="4190248bd839aec19b3261d32d1c822a3e926da63da686e42410490d792e4fcb50b9c31d335ceeaad48119"}, {0x3, 0x5e0, 0x769, &(0x7f00000003c0)="1554b4e75b6b286e0a6dfbdee61f7d3863521418426df6aef722d54e2fc5930a6334e90bdef392b99175da271db7fb8c8ab4ebcc93b527769ad48e3cf31c2ca20d31caa7116a93c8e0c638814bc5da08dca40c7dcc2a746b1119b803fcf7ffd3fcb5b97fd7f80f0976f0d45ab5ac891e11d7214cb5145a16d685ca42bf75eb2742ccb9612179a75ed5bde83a84caf18040deb76ef43227004415733fdcd188b3c65349026296505b34ffd4017b7da3157e4c1dfcd62a15965df4823f"}, {0x1, 0x550, 0x2, &(0x7f0000000480)="72fecac6f0ddd03b34db85788ed9c40e6be92e4a0ac71d239f2f7265275c0a767dccc2539ba1efe99dfc784a4b6a9e58701eadf3ad3f29f42405d94707b83a1c92a758ebaa4e2abfcfea8ce9c5d583430658faefd992857c603b500384fe778689877abfb3a021dbfd56234865f212abf726a25cccdee0d2a65ad2c64e0edce8a448c03beb3df3a2ca7eed692a5534544a4422b963d2a066ca04db19cf5e3ffac31efc9c74b51809aa2e"}, {0x3, 0xe8, 0x1, &(0x7f0000000540)="8c44152fa34430f92c915e3618f8e72f93c87ea97655482d99bf806f88"}, {0x0, 0xd0, 0x200, &(0x7f0000000580)="02e7ea134cf7d8dde847c793183ddc6d2d01266365d1047ca4d7"}, {0x1, 0x0, 0x10000, &(0x7f00000005c0)}, {0x2, 0x2c0, 0xa75, &(0x7f00000006c0)="941805b7b9af1202bbe6c80577b0d5f7513d83ed98921ab620373b871eba90ffee90d6939521a8c27012a6ad1831306ee4cf7d1ec217ef4b4a98accb6dffecca0a298f1d649ff6a5f2ae88e28da4dab0c9bbfcccba23a7ec"}, {0x6, 0x128, 0x3, &(0x7f0000000740)="3c9e264d7ad3d79f6bcb6a50c3764d0b0dde7ef63a00df35159a8ed38d00a06ad7f2954c48"}, {0x1, 0x8000, 0x0, &(0x7f0000000980)="d7b4f4e6d068dfdd6721b1d4e5d55c68b416e75564ed9a31672332e39ba02e15dc67fa491805d4bc18962fcbe5cb478704dfe949d10062525a16a216fe72157cd5fce61e2c26577521d3e1360c004f48746fbf93a8d887b1a30ec8b0f86b53909bd481b183dc323bee1531f480bcc7988edb23b45623c81ac491f7354e204942f3e6c0ae3255bc8a98b0591363cfc0a233c0cfc0267fdfda69fad640e1b0d9e43a17aab882985ed45782cd0a5227f3b609df42376687e1b93ea661c075eca243e1f9d93ae725cd500a1ed2362e307529de0d0b54d69597dd3ddd4c55edd474940d27fef0c51a1b45610a18972000207b895ad8bfab12743639f51936f5bacecf15fe32e7c0bcbced04eddde372b4a9180798848434ed1c76e2a600428ec3ca543455a0baefe1bc743460a1de0ab6c7d8c63cf07c839b4c0d7f3c7d4f41f9995379b9b93d144a7720a79302a30fc8f159520fd8a1bee09954221c71b0da3998d48871e702dfaf80daf9fac0a3098a03b332eafdacf3ba78682e69f8783d903a1dfa5dee707686a2e067b8460458b84a4e026fb61b27c7a4e911fcf50a54cf5c8a1a062ebb09e38022232c89173e3df76321c8e123181c20aa0170eaba73abbb0bbcc199f14a6942c881441d11956c3ddfc7cf916b559e45048b923c8cc62d1e05ff72a22cfd9806aa84ebf57e855bb843112ce916df1165b4f12d771884ea0a4a0ba6be78b5510423bf1b82be11a6838acbe2b9558eac6109bbbe76369f4aca64c32997d14c383642b380cd4dbc629b6abf00bff07e662ec88213de97190b96fded61cbc30a833bb7e471d2ca971316dedc3731e62c80b2d87bf94338ef7131c90e47f5a8099ebd0176d4f1568637a14cea6fc74cef7ae1e8fd2cdd5b43389fdf1b2c3416b2c87790fe5d35dd4384183efde4a7c071d9d8fdf60ace45766e34204be98de2417f3dc6bdf332020aa418d1f9d999d69390942431ecdd828291ce9238a27a64ff4a570fc033656b773a444ae7e075ef151283075979796b31dfaf31c5887dc3c11128deb5e4a5a05c86d051c6ce32c9acdc736fa45a2cd72f5f3ff25abce56bae3ee5bc37bf37ca3f77a1132a4dde24ff960a42c920dcf7aab3ea6584a51da17b5bfd6c288df4a5661573a971cf7d6e66e416742000d5ba2230f6a992bef0850b99ab8fd29baaff9739871f57c62077d67eba74adfea8c88466e22cdc0e1ef2a2e86eb7c559dcb6ed998a386192cc299626149fa77616801a508cd6a18b2ab62dacef16499e0be8120b10651c0ba9b7b1fed5f6cd7bad76d6ddd792f7b621bc0ae8f98091f9adde0e68c7872f248a4cc3dbd45fe32fa30d3ba378a042e1dc7985146b8e1ef18fe60c8645017d354f6e1f77b38679b8aba2fcb1583ea8d551ec75b8f2ebbf9f7dd1247c2eb1a07ba3a58b65fb3adaaaeffa6fb811ea58f4893cac2dff979c2d716a1426c260bb3bdffd88cfe8e72d217aaa76fb825ed4c33f288d425e8c86e7327164e893b1341510723fc16088fe651abbd2841a731b14fc7b076d8e9a5f157f5a15da7408d57cd4d096704d9dbd4ab32eeaa18492c6153ed5c8daa279902fbcb96e07f1ae0f9664ad9f04f229753c8f7c01b8fd4d61f9631962cc69c82074c4d3e2b5bb4cd7617ca81c5c747129273624f4a808fec6e8cfb43becb6ba689f45458aedbbb4c9299c4d3cbdc07579d4319d4f3f31d6cf24cd93ea81dc4a33d5862944ddef63100a2dccf467fc69bafc4dd31fab66612eb14b01369608b1e4af96ef2714f055234f95c2c54eb6e9f58ee5f440599c799a2d5ee525c92cb92d0dadfa9e88890ac4f2ca1dcd4151308379b0f4fce3b9fb0336a0df48e0dfa81a928cf2e5ba45693e4ab2553a1149b705005264511319583ab2d9d184689f156da4057741a2d6e1414edda8577bdc32f48cecaeba55cdcfc4bae8820e7c2c845cf414f3a68cb5aee0a43a3d6cd21d6b9a6c27666c586c75532d37e0099c701ab76ae1f59175616f1ddf68cafd784189c8f52fe604d85e4e0ac7e68742c7ec470dd327ce5e7bc85fc5e65fa532f66164b81067c9ac6d1a98c3e81b3f36ab7486ce568b1f36da7893699b4e63b9ff2184c04a55a07ad0b491ee3bc05b78e37d4508c5e55fdf3011826cd869fd000b8dd52d92266dccfea6e80b440ba0aabece47e2a36cf35c08e0cb9e247a21c1f92810e8d11ae89d1729cceca06b503138cf70221360bc7a42e4363052a4bf57fb665861c53588a43ef9ed3f8f36280d2dfc095783d277e080c5b9d4de57643780a279c05d9e7530528d2fd6ca8a8ad55612796066f601d57cb6890ba4b87051f7635aa6d79f8aee28ea8a721fcdc77fcb5fa452ccde8c4eff0aa18b649f76a16a256e80d225b47aace87c84195b6f378c12a19e475045c178e034cade987df79064a991c002116fe30e8f7403bc2780d56ff29474c9d6d19d1b2a2e2795ba4328d5eac25ed28cd73428da8cccb5b02f22c841f9851d3755361c8bf26ae4dcb8ed55a66d3eeada08e72fd76a3c8ca5eab7c5f57572d7b05b88b36f11a892485e6b34471c1441bc338edeb0f06bb865a29e445ce56efa5ec68d7b3ad61a6c5fb72ea18a6d6fe78067e0a312e87c54da555fac4b08f7b45d9d94931c3dd551fb76c417f2983d7712d07cfa60e733c47c2e6439cf876d573dfdb95d5121a1e857cc278796f3105bf2e48e78babfab83005131a07ded32c98444349229d4247407d9c98264a4a53130a067584553643624de407f921385496756518d29ca62c2b2ea14be072d8bf60b9b8e47a5efb361a7f92415c19da5b3a99d2591ee34af4129fa9e400a5ebbdb362f3d126f5765089f57b3438c55a454640239a345baf497b22870ab9037286b2210b4842653d9f226a4a434627a940c4956d147f4becae2bf9b4b1b7e05dc3c831d752076582de7c8f4d3f2029ea7347796ac21474c3fce7164c42205a73b0f752f7a1e6a759676e5433573a95052cfc6b0786310eb527954e6e235dadd2e65815c447c9f614875fcba450bfa960431d41ab148988561558576567422a1a156f55427864af28cf11a909c97aaa953cdd535c8c5a80d646adafbb789014323bb6dc33e21d1b80b4d8235d6d3dae8771d11b065212d23abc96ea481ba40f0b1fa79bae48064f455ec9809fd8e1f6e238ccb8751185349a724b29e5c7ebb983c30a2d288af030e0177c1f4594293d73d482a3539df9ed3f6dca90a7c22c35f7b58cf10eab6285f1564cf3e3b124ad7886d2c9af1e84f05eb56eab6094dc6227da67c2c6461bcf77bf163940b3daff3cfb30d21399f4f9eeee82af1c9bdb46070340babbf86ae1401effd942d051b8ac57364ac4b0611d459732ed398dbe0e83b2dd8aedf50ce4c77f7630bacd8aa4db4dec0090fb48e47f391d468ee8d270ed7c16463f86239033dc6f823bab35a919cff1d83d0615c645feca9483226041a90d334b6d8dbad25613ec03aa80291f9f8805801565a5ea60a06c3464dc96b186089ed8daac50860e728f7d2dd5041ad48eef8331835a105ddadb9bf91938130c916715a000cd8fecda775e33eda6bee62c175d664b184288209508a77bee739086de8928e7f3202091abbea890f3549a9e3af209e14818a22c84fe4fd433fd6ce9308bbe296d80366924f0ecccaeb6cd62644a1be52956b39a4eb01d5169c6bce05e24b34a8f6b5a68d3fdd35561359b5d536454f0541a2acb4186e40bd3d44f5e78319317259eac78018d207fa5575f48483a9f5d30f982e3693af272add878938fc362a850cbc2ebb85a75af12bcf434f58108540ae78d1af2bbc46bf5a95a0112e98a23ad7f3db442fdfbbdc7757e95684ad1ae8c6009eb525a26f82e0c05e79dc9c7ef6bba71c07c10952475f704934a49fd6434a69b66d9e4e4700f2e3043d431fba62282ef7f73d55573b3cd4fe9f4b3a1fa8193c68a8a32d6d3f1d8fa9cf84b3f7366a8f75053e275d51a65f56191d4db3bca2decc77bf3ca4caffe643239d93a10209d676bad14c721db26362991b5ad435e07f271931ac8d8763289c78f8cc51c26096e2fa98444468edd9b3f93b1b2bd27bed924f98bcfff8b58eb184e621fb776456067bf254818b95c5b12281750180774541b137211fce1dd21b71b1e70ab1cb8a8a92ca9eedd61dad3a975936d67924faa558ad4f640f519b034ffa17973354b067cf4358c2624a1f0905be7a9eb30f30670917c8ba9cc4b284c20463fee8353df802c1d17a1acf959f1f82eb500d3daf39f06faf9679563731ad989d010f468830ae915902a1918ee321c0138116c7871ba03f707c5b55cda833552415cdce7a7b28e24b30ff39160f01d1db0e56dd7496394c8bf0c86a06e844a7c813bc1c8a06c44a9d8de67847d53c56b6c84207e6832f7a63dff34e7b79d3f31b66ac34ae279cfd6f87f975c5e9114f5d7ed5eae39f33840f032ca2f6479c8bca9b5dd585084d3922cb35415e7160a484367c01861f565ff097c0616359bade640cd983ded891bf03eb0a3af3f860126f3aa01d042f75939fb48a42ecb31ce38ddecd2eca88e536e2a5786807713a944a1cd9d50064803e8415ffa640078d1eefedf89ed6b17fdb1fc21012b937086cfa370d8163748bb2e8fc58a259cd9b55ac715cca6c6bbf97caa0c14899868abe1dddb08718375b6ad7195d3731a012b9624d580aa2cb4b7ffb4cf3b33f242ce0700cdccd6d30a0cb52cd10bf978fec9e50d2cafefa7c57429ed24f39b33b8ce47e0b5e26d3f7a512919d7fc97c85195b1018f171feddc185d29e1cc84c1bc50e13c47fe99c56cac96bafa4881e956ec44693e86560e9dd5ae261a98bf91065ea3f863d3ba1fdc78adeecca1c85810ff345873f527841f1a2d20d4923c3fd7415b29aed59aaf7093e4d8a4f32d66cf12c64319b3600ffc8bad708a263f6e5ef380e605abac01a20a136db5a06198b575b8fc1812fdc7c57d4bf0fabc558628902206f653ee087e8a0fbede0e32e2ae8ef77ac03980bf53f2a9fbf1906ddf127d12b2695566fc5180efcd9f25d4ce881a156503160efe77ab42c3a637d41375e8c57165c8972ace3133a9711a638012890df58411ac570f172466d9da55eb712d8ee5e107938eaec07d81729876a61d32ae58e52e6568189ff15332f0eac9d462cdc27e0788c9f1d31012ef4e9717f70ea23e192fa64c53915f96ae8bb9720674ad39d715dfb9935694aabcbb0743db82dfdfba3c84265476418c46411f1c1d8c5bc888e26d6a7bc5482c65cc59d97f1907b5fce9b8047f579c54600141ce8bb4eab3a1c7fd53383d8bd04aa99aa9271b9d36c35dfc30e54426c6b1db9787a2fdb910bc3084f33dc476c7f700e1e1341ed0ffaf343167147eb8c0628d3dc8e3d572a17c908c78189dede2a0206b9f9d4b5b0f85560de54fbfab37442f9ce867ccbbe2f2632c57025ffc92ce1a384ce554d7950b5333af28803d64ba9cbdd406d23c8ecdaa58e5122da6e9e0ff673fa0dbf494b287ce4f782b6a79a60c20df520f10796166a1db2ec6118726a60aebf57a87a35328344d71f187ef5e1330d9d60e0f700afff2a04918ce3092a804a84beb71c9d9c6bd953dcd33c9ae47feb012236395b2176c0e878d802988ee0960a1de9deadf98d03982d8ef29e8fa8e063a50454fb486bf24b1060286acf1faa8bad02e2939f7c68b38d663a678fa4a90f7cb04011a8d7dc8b99322e3687a33b886d7562d15e3b4940d5ae55b6a3340b9328f487fc539e3b20b09576db39ff40cdbba289c54dc9"}, {0x1, 0x1f8, 0x751b, &(0x7f0000001980)="5f03ae1c45e40e75f13a060dd175bddf8e95bb239283f1b62ed7f5c630e4cfcb85e59bce7bc29a87a4ede79acc39e5dfa29741fd057f909af7adab8f967641"}, {0x2, 0x128, 0xfffffffe, &(0x7f00000019c0)="aebfd7bea43028eb5aaf909b1934362e3f39381b746f1c77d7f980af89375d5cac152c17d4"}, {0x3, 0x308, 0x1800000, &(0x7f0000001a40)="3d7aace3daea3d24efb1f793487965134d2afdf1f735e305945775b17c40cbfd23a3545598d4e6309975db77f056e7fb1c66dca54423fd8b67f965921a388b5d62064f4bea7724cf41629df3c7f4d6b40174185047ae368a64b1647e840f4d48fa"}, {0x1, 0x3e8, 0x8, &(0x7f0000001ac0)="eb3df8b9f3d293c533285a55a6686bbb76779730457d1f737aed5ac5ff740af896b82bc1a5595b795aa259f62c14deaac692f6e57609772283441ca5f83ea9fbcbd87b014f4b282f4400b0329ddaf65f2ae4aaff00769255fad585b12f43426a5e4c3948239d1a959e883244ca94e720b1c2b84413f59170ebfdc8f21e"}, {0x1, 0x670, 0x1, &(0x7f0000001b80)="5a9ad2b5fcf24a8573df8482fc2bd8f77ffbcd109487f6045a5da47101789f9cc18a1ff690c2dfaa969ae194fefefa7b21acd68af1a161f536c448070ea218f822c702be0170992496027c44296445778b91ef0c39ba6807b28fa2753c82dcc24f5ec5b79885fac318cad821d5a7204962dbdca38694db7a947a06199f6587e550bb80e16ecec76f2e18eb1534e795066b19d8bb5ca5a536b726814b6218a48d09c51b293c1c78d331513f8a8628c2b1f97a784154916d1bf65ebc507e02859ad5ebf8d1570c9c46f9d3bedb77f2"}]}) 4.394595714s ago: executing program 5 (id=6049): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) setsockopt$inet_tcp_int(r3, 0x6, 0xc, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000340)='net/netlink\x00') syz_create_resource$binfmt(&(0x7f0000000280)='./file0\x00') preadv(r4, &(0x7f0000000800)=[{&(0x7f0000000380)=""/149, 0x95}], 0x1, 0x4, 0x3) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='test_dummy_encryption', 0x0, 0x0) r5 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x109080) ioctl$MEDIA_IOC_DEVICE_INFO(r5, 0xc1007c00, &(0x7f0000000440)) 4.043055004s ago: executing program 3 (id=6050): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt(0xffffffffffffffff, 0xc, 0x7f, 0x0, 0x0) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r3, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) 3.648843159s ago: executing program 1 (id=6051): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001940)={0x14, 0x49, 0x1, 0x70bd26, 0xfffffffc, {0xa, 0x0, 0x6e1c}}, 0x14}}, 0x20048800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, 0x0, 0x0) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) setgroups(0x0, 0x0) keyctl$chown(0x4, r7, 0xee01, 0x0) keyctl$KEYCTL_MOVE(0x3, r7, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') readv(r8, &(0x7f0000001440)=[{0x0}, {0x0, 0x61}], 0x2) getsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000140), &(0x7f0000000180)=0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000000)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x98, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x7ee}}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffb, 0x3, 0x20000000, 0x80800001, 0x8001}, 0x81}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xac}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd31800180600fc010000000000000000000000000002fe8000000000000000000000000000aa000040", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7dbb721d9e780000fe020102"], 0x0) 3.43828112s ago: executing program 3 (id=6052): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x400000000000008a}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (rerun: 64) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x19, 0x2, 0x74}, 0x2c) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async, rerun: 64) write$tun(r2, &(0x7f0000000100)={@val={0x0, 0x891f}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x67, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x86dd, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x6e, 0x100, @void}}}}}}}}, 0x32) (rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmsg$FOU_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x5) recvmmsg$unix(r7, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000240)=""/4, 0x4}, {&(0x7f0000001000)=""/4096, 0x1000}], 0x2}}], 0x1, 0x12102, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) 3.408085549s ago: executing program 2 (id=6053): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f3, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r3, 0x0, 0x0}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_clone3(&(0x7f0000000240)={0x100202000, &(0x7f0000000040), &(0x7f0000000080)=0x0, 0x0, {0x9}, &(0x7f0000000340)=""/233, 0xe9, &(0x7f0000000140)=""/73, &(0x7f0000000200)=[0x0], 0x1}, 0x58) sched_setaffinity(r5, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x40) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x16a2) ioctl$KVM_GET_MSRS_sys(r4, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0000082, 0x0, 0x1}]}) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r7, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x111, 0x2}}, 0x20) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ufs\x00', 0x2208004, 0x0) 2.657250004s ago: executing program 1 (id=6054): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) r1 = syz_open_pts(r0, 0x0) readv(r0, &(0x7f0000000800)=[{&(0x7f0000000300)=""/53, 0x35}], 0x1) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x6) ioctl$TCFLSH(r1, 0x540b, 0x2) 2.279399392s ago: executing program 1 (id=6055): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r0, 0x8004510a, &(0x7f00000003c0)) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000080)={{0x2, 0x4e20, @private=0xa010102}, {0x306, @multicast}, 0x0, {0x2, 0x4e24, @empty}, 'veth1_to_team\x00'}) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x440007, 0x1) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0xc0) socket$inet_smc(0x2b, 0x1, 0x0) 2.279198405s ago: executing program 3 (id=6056): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="24000000000000008400000001"], 0x30}], 0x1, 0x0) inotify_init() 2.213548923s ago: executing program 2 (id=6057): syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000002c00070128bd7000ffdbdf25017c0000080001800400348008000280040001"], 0x24}, 0x1, 0x0, 0x0, 0x4881}, 0x2400c810) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000c000}, 0x20004000) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r2}}, 0x20) 2.20905568s ago: executing program 3 (id=6058): r0 = syz_io_uring_setup(0x3001, &(0x7f00000001c0)={0x0, 0x200081ba, 0x0, 0xfffffffe, 0x385}, &(0x7f0000000540), &(0x7f0000000500), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000040)={0x0, r0, 0xa, {0x6, 0x8}, 0x5}, 0x1) 2.142479315s ago: executing program 1 (id=6059): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x3d6d9000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000001c0)) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) r4 = dup2(r3, r3) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r9, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) sendmmsg(r9, &(0x7f0000007fc0), 0x800001d, 0x810) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000300)=0x3) read$FUSE(r4, &(0x7f00000063c0)={0x2020}, 0x2020) socket$nl_generic(0x10, 0x3, 0x10) 2.065398881s ago: executing program 3 (id=6060): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2803, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400020000bfb932ec057943e519092e01ece06010800000000000000000500000805000100070000000500010079545a0700000009000200734d0184797a3100008200a8cfe74f8c2418d48f31e75d5f980c1eb5cf4a14323f0e4527b0e0a86779c90f84b07efaf5d56c58126d4f0285ef6fd60a6ffaca332a16eab6c68f83ede1354e4ff4b38dbc6ed937d22b51fb1a782d290199cd8bb1ca5cccab10bbb78c6d1ab24074c86046a18e3e9c7819f437894d49a337024ab490ec62d41a553fc50095a31f94e035dab4c92623effe821c55cac844590e5bce43eec6c6"], 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x20000080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) getrlimit(0x2, &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) close(0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000740)) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f00000005c0)=""/180) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000009000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r4, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) 1.182677353s ago: executing program 1 (id=6061): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400500142603600e120800060000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f", 0x49}], 0x1}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x68}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\v\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000040)={0x8, 0x7, 0xca0, 0xeffa}, 0x8) 1.002736156s ago: executing program 2 (id=6062): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb32, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = io_uring_setup(0x46ea, &(0x7f00000000c0)={0x0, 0xc0a6, 0x1000, 0x1, 0x3e2}) r5 = add_key(&(0x7f0000000300)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000200)='u', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a50000000090aebd500000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14001180090001006c61737400000000040002801400000011000100"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x149842, 0x0) write$dsp(r7, &(0x7f0000000040)="02", 0xfffffda3) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r7, 0x0) close(r7) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff001f00000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 695.762334ms ago: executing program 2 (id=6063): socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x20802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt(0xffffffffffffffff, 0xc, 0x7f, 0x0, 0x0) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r3, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) 600.856657ms ago: executing program 0 (id=6064): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'ip6_vti0\x00', 0x0, 0x4, 0x1, 0x41, 0x2, 0x6e, @loopback, @private1={0xfc, 0x1, '\x00', 0x81}, 0x8000, 0x8060, 0xe7}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="15170000bcb7040008000a00", @ANYRES32=r2, @ANYBLOB="140012800cf7ff0280080005"], 0x44}, 0x1, 0x0, 0x0, 0x240448d5}, 0x8000002) r3 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x694f840696960e3d) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x5dc, 0x4) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) 0s ago: executing program 2 (id=6065): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), r0) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x28, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x40) (fail_nth: 2) kernel console output (not intermixed with test programs): turer: syz [ 1604.619543][T26565] usb 1-1: SerialNumber: syz [ 1604.690643][ T5928] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 1604.707244][ T5928] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 1604.714988][ T5928] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1604.725978][ T5928] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 1604.850768][ T5928] usb 2-1: USB disconnect, device number 34 [ 1604.918562][T26849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1604.944301][T26849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1605.702698][T26871] netlink: 'syz.5.5524': attribute type 1 has an invalid length. [ 1606.149283][T26877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5527'. [ 1606.169003][T26878] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1607.489557][T26901] netlink: 'syz.2.5533': attribute type 1 has an invalid length. [ 1607.570454][T26901] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1607.645364][T26905] bond1: (slave geneve2): making interface the new active one [ 1607.662615][T26905] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1607.793366][T26565] usb 1-1: Could not find all expected endpoints [ 1607.830241][T26565] usb 1-1: USB disconnect, device number 31 [ 1608.259570][ T5928] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1608.315779][T26920] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1608.335602][T26921] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1608.831951][ T30] audit: type=1804 audit(2000000019.933:2570): pid=26927 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.5539" name="/newroot/369/file0" dev="tmpfs" ino=1985 res=1 errno=0 [ 1609.376342][T26934] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5542'. [ 1609.459056][T26938] syzkaller0: entered promiscuous mode [ 1609.465772][T26938] syzkaller0: entered allmulticast mode [ 1609.551631][T26940] sd 0:0:1:0: device reset [ 1610.543100][T26949] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26949 comm=syz.5.5545 [ 1610.962990][ T30] audit: type=1400 audit(2000000021.626:2571): avc: denied { watch_sb } for pid=26952 comm="syz.2.5548" path="/46/file0" dev="tmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1611.046955][T26957] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1611.167018][T26957] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1611.247124][T26957] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1611.365607][T26957] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1611.547315][T26970] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1611.662029][ T6157] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1611.705651][ T6157] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1611.740483][ T6157] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1611.774500][ T6157] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1611.783357][ T30] audit: type=1400 audit(2000000022.683:2572): avc: denied { accept } for pid=26974 comm="syz.2.5554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1611.876101][ T30] audit: type=1400 audit(2000000022.683:2573): avc: denied { write } for pid=26974 comm="syz.2.5554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1612.335336][T26981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5555'. [ 1613.345738][T27013] /dev/nullb0: Can't open blockdev [ 1614.457899][T27025] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1614.497441][T27025] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5562'. [ 1614.556253][T17615] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1614.781053][T17615] usb 3-1: device descriptor read/64, error -71 [ 1615.048241][T17615] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1615.219427][T17615] usb 3-1: device descriptor read/64, error -71 [ 1615.477942][T17615] usb usb3-port1: attempt power cycle [ 1615.680962][T27043] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5572'. [ 1615.903333][T17615] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1616.032227][T17615] usb 3-1: device descriptor read/8, error -71 [ 1616.042839][T27046] sd 0:0:1:0: device reset [ 1616.298832][T17615] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1616.332858][T17615] usb 3-1: device descriptor read/8, error -71 [ 1616.412057][T27059] FAULT_INJECTION: forcing a failure. [ 1616.412057][T27059] name failslab, interval 1, probability 0, space 0, times 0 [ 1616.425037][T27059] CPU: 1 UID: 0 PID: 27059 Comm: syz.1.5576 Tainted: G L syzkaller #0 PREEMPT(full) [ 1616.425068][T27059] Tainted: [L]=SOFTLOCKUP [ 1616.425074][T27059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1616.425084][T27059] Call Trace: [ 1616.425091][T27059] [ 1616.425098][T27059] dump_stack_lvl+0x100/0x190 [ 1616.425125][T27059] should_fail_ex.cold+0x5/0xa [ 1616.425149][T27059] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 1616.425179][T27059] should_failslab+0xc2/0x120 [ 1616.425198][T27059] __kmalloc_noprof+0xe0/0x850 [ 1616.425230][T27059] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 1616.425264][T27059] genl_family_rcv_msg_doit+0xc7/0x300 [ 1616.425293][T27059] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1616.425322][T27059] ? bpf_lsm_capable+0x9/0x10 [ 1616.425339][T27059] ? security_capable+0x80/0x260 [ 1616.425365][T27059] ? ns_capable+0xd2/0xf0 [ 1616.425392][T27059] genl_rcv_msg+0x560/0x800 [ 1616.425422][T27059] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1616.425449][T27059] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1616.425478][T27059] ? __lock_acquire+0x4a5/0x2630 [ 1616.425505][T27059] netlink_rcv_skb+0x159/0x420 [ 1616.425528][T27059] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1616.425555][T27059] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1616.425589][T27059] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1616.425617][T27059] genl_rcv+0x28/0x40 [ 1616.425640][T27059] netlink_unicast+0x585/0x850 [ 1616.425668][T27059] ? __pfx_netlink_unicast+0x10/0x10 [ 1616.425699][T27059] netlink_sendmsg+0x8b0/0xda0 [ 1616.425728][T27059] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1616.425750][T27059] ? __might_fault+0x90/0x140 [ 1616.425791][T27059] ____sys_sendmsg+0x9e1/0xb70 [ 1616.425815][T27059] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1616.425841][T27059] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1616.425881][T27059] ___sys_sendmsg+0x190/0x1e0 [ 1616.425909][T27059] ? __pfx____sys_sendmsg+0x10/0x10 [ 1616.425965][T27059] __sys_sendmsg+0x170/0x220 [ 1616.425986][T27059] ? __pfx___sys_sendmsg+0x10/0x10 [ 1616.426017][T27059] ? rcu_is_watching+0x12/0xc0 [ 1616.426047][T27059] do_syscall_64+0x10b/0xf80 [ 1616.426064][T27059] ? clear_bhb_loop+0x40/0x90 [ 1616.426087][T27059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1616.426105][T27059] RIP: 0033:0x7fe3da39c819 [ 1616.426121][T27059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1616.426143][T27059] RSP: 002b:00007fe3db204028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1616.426162][T27059] RAX: ffffffffffffffda RBX: 00007fe3da615fa0 RCX: 00007fe3da39c819 [ 1616.426174][T27059] RDX: 0000000020008800 RSI: 0000200000000100 RDI: 0000000000000003 [ 1616.426184][T27059] RBP: 00007fe3db204090 R08: 0000000000000000 R09: 0000000000000000 [ 1616.426194][T27059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1616.426204][T27059] R13: 00007fe3da616038 R14: 00007fe3da615fa0 R15: 00007ffc36eac718 [ 1616.426229][T27059] [ 1616.492029][T17615] usb usb3-port1: unable to enumerate USB device [ 1617.203830][T27071] sd 0:0:1:0: device reset [ 1617.227979][T27076] FAULT_INJECTION: forcing a failure. [ 1617.227979][T27076] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1617.241566][T27076] CPU: 1 UID: 0 PID: 27076 Comm: syz.1.5580 Tainted: G L syzkaller #0 PREEMPT(full) [ 1617.241595][T27076] Tainted: [L]=SOFTLOCKUP [ 1617.241601][T27076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1617.241610][T27076] Call Trace: [ 1617.241616][T27076] [ 1617.241622][T27076] dump_stack_lvl+0x100/0x190 [ 1617.241646][T27076] should_fail_ex.cold+0x5/0xa [ 1617.241669][T27076] _copy_from_iter+0x43a/0x1690 [ 1617.241693][T27076] ? __pfx__copy_from_iter+0x10/0x10 [ 1617.241712][T27076] ? __pfx___alloc_skb+0x10/0x10 [ 1617.241737][T27076] netlink_sendmsg+0x808/0xda0 [ 1617.241763][T27076] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1617.241792][T27076] ____sys_sendmsg+0x9e1/0xb70 [ 1617.241812][T27076] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1617.241834][T27076] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1617.241864][T27076] ___sys_sendmsg+0x190/0x1e0 [ 1617.241888][T27076] ? __pfx____sys_sendmsg+0x10/0x10 [ 1617.241936][T27076] __sys_sendmsg+0x170/0x220 [ 1617.241954][T27076] ? __pfx___sys_sendmsg+0x10/0x10 [ 1617.241980][T27076] ? rcu_is_watching+0x12/0xc0 [ 1617.242007][T27076] do_syscall_64+0x10b/0xf80 [ 1617.242022][T27076] ? clear_bhb_loop+0x40/0x90 [ 1617.242041][T27076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1617.242058][T27076] RIP: 0033:0x7fe3da39c819 [ 1617.242072][T27076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1617.242088][T27076] RSP: 002b:00007fe3db1e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1617.242105][T27076] RAX: ffffffffffffffda RBX: 00007fe3da616090 RCX: 00007fe3da39c819 [ 1617.242115][T27076] RDX: 0000000004000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1617.242125][T27076] RBP: 00007fe3db1e3090 R08: 0000000000000000 R09: 0000000000000000 [ 1617.242135][T27076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1617.242144][T27076] R13: 00007fe3da616128 R14: 00007fe3da616090 R15: 00007ffc36eac718 [ 1617.242166][T27076] [ 1618.621780][ T30] audit: type=1400 audit(2000000029.081:2574): avc: denied { name_bind } for pid=27089 comm="syz.1.5585" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1618.781426][T27098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5586'. [ 1618.911520][T27100] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1618.918703][T27100] overlayfs: failed to set xattr on upper [ 1618.924442][T27100] overlayfs: ...falling back to redirect_dir=nofollow. [ 1618.931541][T27100] overlayfs: ...falling back to index=off. [ 1618.937365][T27100] overlayfs: ...falling back to uuid=null. [ 1618.985862][T27101] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 1619.356298][ T5928] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1619.548729][ T5928] usb 2-1: Using ep0 maxpacket: 32 [ 1619.624738][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1619.666512][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1619.707889][ T5928] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1619.751919][T26565] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1619.764924][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1619.809824][ T5928] usb 2-1: config 0 descriptor?? [ 1619.933694][T26565] usb 1-1: Using ep0 maxpacket: 32 [ 1620.072578][T26565] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1620.103393][T26565] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1620.186872][T27114] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1620.193971][T27114] overlayfs: failed to set xattr on upper [ 1620.199735][T27114] overlayfs: ...falling back to redirect_dir=nofollow. [ 1620.206651][T27114] overlayfs: ...falling back to index=off. [ 1620.212526][T27114] overlayfs: ...falling back to uuid=null. [ 1620.738464][T26565] usb 1-1: config 0 descriptor?? [ 1620.772872][T26565] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1621.186835][T27090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1621.217419][T27090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1621.269596][ T5928] usbhid 2-1:0.0: can't add hid device: -71 [ 1621.288512][ T5928] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1621.323185][ T5928] usb 2-1: USB disconnect, device number 35 [ 1621.462478][T26565] gspca_vc032x: reg_r err -110 [ 1621.468135][T26565] gspca_vc032x: I2c Bus Busy Wait 00 [ 1621.473988][T26565] gspca_vc032x: I2c Bus Busy Wait 00 [ 1621.480245][T26565] gspca_vc032x: I2c Bus Busy Wait 00 [ 1621.488013][T26565] gspca_vc032x: I2c Bus Busy Wait 00 [ 1621.493508][T26565] gspca_vc032x: I2c Bus Busy Wait 00 [ 1621.500183][T26565] gspca_vc032x: I2c Bus Busy Wait 00 [ 1621.508834][T26565] gspca_vc032x: I2c Bus Busy Wait 00 [ 1621.514403][T26565] gspca_vc032x: I2c Bus Busy Wait 00 [ 1621.520673][T26565] gspca_vc032x: I2c Bus Busy Wait 00 [ 1621.526250][T26565] gspca_vc032x: I2c Bus Busy Wait 00 [ 1621.532692][T26565] gspca_vc032x: I2c Bus Busy Wait 00 [ 1621.538398][T26565] gspca_vc032x: I2c Bus Busy Wait 00 [ 1621.543900][T26565] gspca_vc032x: I2c Bus Busy Wait 00 [ 1621.549640][T26565] gspca_vc032x: I2c Bus Busy Wait 00 [ 1621.555119][T26565] gspca_vc032x: I2c Bus Busy Wait 00 [ 1621.560821][T26565] gspca_vc032x: I2c Bus Busy Wait 00 [ 1621.579796][T26565] gspca_vc032x: I2c Bus Busy Wait 00 [ 1621.592597][T26565] gspca_vc032x: I2c Bus Busy Wait 00 [ 1621.606221][T26565] gspca_vc032x: Unknown sensor... [ 1621.619621][T26565] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 1622.179784][T26125] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 1622.447616][T26125] usb 6-1: Using ep0 maxpacket: 8 [ 1622.496783][T26125] usb 6-1: config 3 has an invalid interface number: 175 but max is 0 [ 1622.518590][T26125] usb 6-1: config 3 has no interface number 0 [ 1622.542190][T26125] usb 6-1: config 3 interface 175 has no altsetting 0 [ 1622.558524][T26125] usb 6-1: New USB device found, idVendor=095a, idProduct=3003, bcdDevice=32.bd [ 1622.576362][T26125] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1622.585334][T26125] usb 6-1: Product: syz [ 1622.590058][T26125] usb 6-1: Manufacturer: syz [ 1622.595059][T26125] usb 6-1: SerialNumber: syz [ 1622.632060][T27138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5600'. [ 1622.808473][T27149] netlink: 'syz.3.5602': attribute type 11 has an invalid length. [ 1622.819838][T27149] netlink: 'syz.3.5602': attribute type 23 has an invalid length. [ 1622.834523][T26125] kaweth 6-1:3.175: couldn't find required endpoints [ 1622.844991][T27149] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5602'. [ 1622.857662][T26125] usb 6-1: USB disconnect, device number 109 [ 1622.916091][T26565] usb 1-1: USB disconnect, device number 32 [ 1622.948611][T27149] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5602'. [ 1623.045189][T17615] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1623.171145][T27157] NILFS (nullb0): couldn't find nilfs on the device [ 1623.582611][T17615] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1623.601385][T17615] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1623.621871][T17615] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1623.663020][T17615] usb 2-1: config 0 descriptor?? [ 1623.904320][T26565] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1624.055899][T27169] binder: 27168:27169 ioctl c0306201 0 returned -14 [ 1624.081707][T26565] usb 1-1: Using ep0 maxpacket: 32 [ 1624.106905][T26565] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1624.156149][T17615] hid_parser_main: 28 callbacks suppressed [ 1624.156164][T17615] logitech 0003:046D:C29C.0012: unknown main item tag 0x0 [ 1624.181056][T26565] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1624.231492][T26565] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1624.231504][T17615] logitech 0003:046D:C29C.0012: unknown main item tag 0x0 [ 1624.231542][T17615] logitech 0003:046D:C29C.0012: unknown main item tag 0x0 [ 1624.283132][T26565] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1624.316319][T26565] usb 1-1: config 0 descriptor?? [ 1624.356680][T17615] logitech 0003:046D:C29C.0012: unknown main item tag 0x0 [ 1624.388373][T17615] logitech 0003:046D:C29C.0012: unknown main item tag 0x0 [ 1624.399767][T17615] logitech 0003:046D:C29C.0012: unknown main item tag 0x0 [ 1624.407413][T17615] logitech 0003:046D:C29C.0012: unknown main item tag 0x0 [ 1624.414862][T17615] logitech 0003:046D:C29C.0012: unknown main item tag 0x0 [ 1624.422124][T17615] logitech 0003:046D:C29C.0012: unknown main item tag 0x0 [ 1624.433754][T17615] logitech 0003:046D:C29C.0012: unknown main item tag 0x0 [ 1624.659072][T12394] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1624.784718][T17615] logitech 0003:046D:C29C.0012: hidraw0: USB HID vff.fd Device [HID 046d:c29c] on usb-dummy_hcd.1-1/input0 [ 1624.876464][T27181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5614'. [ 1624.943705][T12394] usb 4-1: Using ep0 maxpacket: 32 [ 1624.950620][T12394] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1624.961490][T12394] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1624.973378][T12394] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1624.984802][T12394] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1625.000970][T12394] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1625.010177][T12394] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1625.020391][T12394] usb 4-1: Product: syz [ 1625.024864][T12394] usb 4-1: Manufacturer: syz [ 1625.029535][T12394] usb 4-1: SerialNumber: syz [ 1625.047504][T17615] logitech 0003:046D:C29C.0012: no inputs found [ 1625.064894][ C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1625.092732][T12394] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input117 [ 1625.113726][T17615] usb 2-1: USB disconnect, device number 36 [ 1625.371811][T27192] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1625.606756][T27155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1625.640781][T27155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1625.653136][T12394] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1625.667096][T12394] (id 0x00) [ 1625.672192][T26565] usbhid 1-1:0.0: can't add hid device: -71 [ 1625.683915][T26565] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1625.695154][T26565] usb 1-1: USB disconnect, device number 33 [ 1625.762333][T12394] rc_core: IR keymap rc-imon-pad not found [ 1625.769764][T12394] Registered IR keymap rc-empty [ 1625.777859][T12394] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1625.788235][T12394] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1625.870622][T12394] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 1625.890139][T12394] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input118 [ 1625.913007][T12394] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:25> initialized [ 1626.380809][T26565] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1626.565877][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1626.806820][T12394] usb 4-1: USB disconnect, device number 25 [ 1628.138837][T27217] netlink: 'syz.0.5623': attribute type 1 has an invalid length. [ 1628.389856][T26565] usb 3-1: Using ep0 maxpacket: 16 [ 1628.433174][T26565] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1628.445579][T26565] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1628.455603][T26565] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1628.464779][T26565] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1628.491819][T26565] usb 3-1: config 0 descriptor?? [ 1628.780286][T27222] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5624'. [ 1628.866347][T27227] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1628.896065][T27227] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5618'. [ 1629.110475][T27231] siw: device registration error -23 [ 1629.138231][T21941] usb 1-1: new low-speed USB device number 34 using dummy_hcd [ 1630.174505][T27233] netlink: 'syz.3.5626': attribute type 1 has an invalid length. [ 1630.227168][T26565] usbhid 3-1:0.0: can't add hid device: -71 [ 1630.237737][T26565] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1630.251537][T21941] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1630.265646][T26565] usb 3-1: USB disconnect, device number 93 [ 1630.274631][T21941] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1630.304571][T21941] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1630.316384][T21941] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1630.328650][T21941] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1630.341003][T21941] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1630.350668][T21941] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1630.364936][T21941] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1630.386790][T21941] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1630.439463][T27239] FAULT_INJECTION: forcing a failure. [ 1630.439463][T27239] name failslab, interval 1, probability 0, space 0, times 0 [ 1630.464581][T27239] CPU: 0 UID: 0 PID: 27239 Comm: syz.5.5630 Tainted: G L syzkaller #0 PREEMPT(full) [ 1630.464615][T27239] Tainted: [L]=SOFTLOCKUP [ 1630.464622][T27239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1630.464633][T27239] Call Trace: [ 1630.464639][T27239] [ 1630.464646][T27239] dump_stack_lvl+0x100/0x190 [ 1630.464674][T27239] should_fail_ex.cold+0x5/0xa [ 1630.464699][T27239] should_failslab+0xc2/0x120 [ 1630.464718][T27239] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1630.464744][T27239] ? __alloc_skb+0x140/0x710 [ 1630.464761][T27239] ? __alloc_skb+0x5b7/0x710 [ 1630.464781][T27239] __alloc_skb+0x140/0x710 [ 1630.464797][T27239] ? __alloc_skb+0x5b7/0x710 [ 1630.464813][T27239] ? __pfx___alloc_skb+0x10/0x10 [ 1630.464837][T27239] alloc_skb_with_frags+0xdd/0x760 [ 1630.464858][T27239] ? __might_fault+0xc5/0x140 [ 1630.464882][T27239] ? __might_fault+0xc5/0x140 [ 1630.464910][T27239] sock_alloc_send_pskb+0x801/0x980 [ 1630.464939][T27239] ? _copy_from_iter+0x270/0x1690 [ 1630.464966][T27239] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1630.464994][T27239] ? _parse_integer_limit+0x17f/0x1d0 [ 1630.465022][T27239] ? _kstrtoull+0x13c/0x1f0 [ 1630.465045][T27239] ? iov_iter_advance+0xac/0x6d0 [ 1630.465062][T27239] ? __pfx__kstrtoull+0x10/0x10 [ 1630.465090][T27239] tun_get_user+0x904/0x3c20 [ 1630.465128][T27239] ? __pfx_tun_get_user+0x10/0x10 [ 1630.465156][T27239] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1630.465188][T27239] ? find_held_lock+0x2b/0x80 [ 1630.465205][T27239] ? tun_get+0x191/0x370 [ 1630.465231][T27239] ? tun_get+0x191/0x370 [ 1630.465261][T27239] tun_chr_write_iter+0xdc/0x200 [ 1630.465290][T27239] vfs_write+0x6ac/0x1070 [ 1630.465309][T27239] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1630.465337][T27239] ? __pfx_vfs_write+0x10/0x10 [ 1630.465353][T27239] ? find_held_lock+0x2b/0x80 [ 1630.465384][T27239] ksys_write+0x12a/0x250 [ 1630.465408][T27239] ? __pfx_ksys_write+0x10/0x10 [ 1630.465428][T27239] ? rcu_is_watching+0x12/0xc0 [ 1630.465456][T27239] do_syscall_64+0x10b/0xf80 [ 1630.465473][T27239] ? clear_bhb_loop+0x40/0x90 [ 1630.465495][T27239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1630.465513][T27239] RIP: 0033:0x7fec5939c819 [ 1630.465531][T27239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1630.465549][T27239] RSP: 002b:00007fec575f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1630.465567][T27239] RAX: ffffffffffffffda RBX: 00007fec59615fa0 RCX: 00007fec5939c819 [ 1630.465579][T27239] RDX: 0000000000000058 RSI: 0000200000001100 RDI: 0000000000000004 [ 1630.465589][T27239] RBP: 00007fec575f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1630.465599][T27239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1630.465610][T27239] R13: 00007fec59616038 R14: 00007fec59615fa0 R15: 00007fffb7c0c878 [ 1630.465633][T27239] [ 1631.098789][T21941] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1631.128590][T27245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5627'. [ 1631.164974][T21941] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1631.194679][T21941] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1631.589914][T21941] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1631.623815][T21941] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1631.643125][T21941] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1631.754635][T21941] usb 1-1: string descriptor 0 read error: -22 [ 1631.761091][T21941] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1631.770637][T21941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1631.793169][T21941] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1631.899085][T27256] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1632.316562][T21941] usb 1-1: USB disconnect, device number 34 [ 1632.970635][T27271] syzkaller0: entered promiscuous mode [ 1632.989753][T27271] syzkaller0: entered allmulticast mode [ 1633.005431][T27276] FAULT_INJECTION: forcing a failure. [ 1633.005431][T27276] name failslab, interval 1, probability 0, space 0, times 0 [ 1633.024031][T27274] bridge0: port 1(vlan4) entered blocking state [ 1633.032310][T27276] CPU: 1 UID: 0 PID: 27276 Comm: syz.3.5638 Tainted: G L syzkaller #0 PREEMPT(full) [ 1633.032338][T27276] Tainted: [L]=SOFTLOCKUP [ 1633.032344][T27276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1633.032354][T27276] Call Trace: [ 1633.032360][T27276] [ 1633.032367][T27276] dump_stack_lvl+0x100/0x190 [ 1633.032391][T27276] should_fail_ex.cold+0x5/0xa [ 1633.032414][T27276] should_failslab+0xc2/0x120 [ 1633.032432][T27276] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1633.032455][T27276] ? skb_clone+0x190/0x400 [ 1633.032478][T27276] skb_clone+0x190/0x400 [ 1633.032497][T27276] netlink_deliver_tap+0xaed/0xcc0 [ 1633.032525][T27276] netlink_unicast+0x62b/0x850 [ 1633.032552][T27276] ? __pfx_netlink_unicast+0x10/0x10 [ 1633.032583][T27276] netlink_sendmsg+0x8b0/0xda0 [ 1633.032611][T27276] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1633.032632][T27276] ? __might_fault+0x90/0x140 [ 1633.032670][T27276] ____sys_sendmsg+0x9e1/0xb70 [ 1633.032693][T27276] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1633.032718][T27276] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1633.032752][T27276] ___sys_sendmsg+0x190/0x1e0 [ 1633.032778][T27276] ? __pfx____sys_sendmsg+0x10/0x10 [ 1633.032832][T27276] __sys_sendmsg+0x170/0x220 [ 1633.032852][T27276] ? __pfx___sys_sendmsg+0x10/0x10 [ 1633.032880][T27276] ? rcu_is_watching+0x12/0xc0 [ 1633.032909][T27276] do_syscall_64+0x10b/0xf80 [ 1633.032924][T27276] ? clear_bhb_loop+0x40/0x90 [ 1633.032944][T27276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1633.032961][T27276] RIP: 0033:0x7f469519c819 [ 1633.032976][T27276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1633.032992][T27276] RSP: 002b:00007f4696112028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1633.033008][T27276] RAX: ffffffffffffffda RBX: 00007f4695415fa0 RCX: 00007f469519c819 [ 1633.033019][T27276] RDX: 0000000000000000 RSI: 0000200000000f00 RDI: 0000000000000003 [ 1633.033029][T27276] RBP: 00007f4696112090 R08: 0000000000000000 R09: 0000000000000000 [ 1633.033039][T27276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1633.033049][T27276] R13: 00007f4695416038 R14: 00007f4695415fa0 R15: 00007fff5fba75f8 [ 1633.033073][T27276] [ 1633.033125][T27276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5638'. [ 1633.158002][T27274] bridge0: port 1(vlan4) entered disabled state [ 1633.166069][T27280] netlink: 'syz.1.5640': attribute type 1 has an invalid length. [ 1633.174090][T27274] vlan4: entered allmulticast mode [ 1633.532171][T27274] geneve0: entered allmulticast mode [ 1633.551178][T27274] vlan4: entered promiscuous mode [ 1633.564146][T27274] geneve0: entered promiscuous mode [ 1633.585516][T12394] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1633.671846][T27289] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5642'. [ 1633.767402][T12394] usb 1-1: Using ep0 maxpacket: 8 [ 1633.776787][T12394] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1633.794778][T12394] usb 1-1: config 5 has an invalid interface number: 18 but max is 0 [ 1633.813558][T12394] usb 1-1: config 5 has no interface number 0 [ 1633.833183][T12394] usb 1-1: config 5 interface 18 has no altsetting 0 [ 1633.930227][T27293] binder: BINDER_SET_CONTEXT_MGR already set [ 1633.937038][T27293] binder: 27292:27293 ioctl 4018620d 200000004a80 returned -16 [ 1633.946627][T12394] usb 1-1: New USB device found, idVendor=157e, idProduct=3205, bcdDevice=c9.b4 [ 1633.957018][T12394] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1633.971447][T12394] usb 1-1: Product: syz [ 1633.977309][T12394] usb 1-1: Manufacturer: syz [ 1634.045143][T27297] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1634.382876][T12394] usb 1-1: SerialNumber: syz [ 1634.510540][ T30] audit: type=1400 audit(2000000043.954:2575): avc: denied { bind } for pid=27304 comm="syz.2.5647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1634.531235][ T30] audit: type=1400 audit(2000000043.982:2576): avc: denied { listen } for pid=27304 comm="syz.2.5647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1634.608210][T27307] FAULT_INJECTION: forcing a failure. [ 1634.608210][T27307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1634.624917][T27278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1634.629661][T27307] CPU: 1 UID: 0 PID: 27307 Comm: syz.5.5648 Tainted: G L syzkaller #0 PREEMPT(full) [ 1634.629689][T27307] Tainted: [L]=SOFTLOCKUP [ 1634.629695][T27307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1634.629704][T27307] Call Trace: [ 1634.629710][T27307] [ 1634.629716][T27307] dump_stack_lvl+0x100/0x190 [ 1634.629741][T27307] should_fail_ex.cold+0x5/0xa [ 1634.629762][T27307] _copy_from_user+0x2e/0xd0 [ 1634.629782][T27307] memdup_user+0x6b/0xe0 [ 1634.629797][T27307] proc_pid_attr_write+0x22f/0x780 [ 1634.629818][T27307] vfs_write+0x2aa/0x1070 [ 1634.629835][T27307] ? __pfx_proc_pid_attr_write+0x10/0x10 [ 1634.629854][T27307] ? __pfx_vfs_write+0x10/0x10 [ 1634.629869][T27307] ? __fget_files+0x215/0x3d0 [ 1634.629892][T27307] ? __fget_files+0x21f/0x3d0 [ 1634.629916][T27307] ksys_write+0x12a/0x250 [ 1634.629932][T27307] ? __pfx_ksys_write+0x10/0x10 [ 1634.629949][T27307] ? rcu_is_watching+0x12/0xc0 [ 1634.629974][T27307] do_syscall_64+0x10b/0xf80 [ 1634.629989][T27307] ? clear_bhb_loop+0x40/0x90 [ 1634.630016][T27307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1634.630032][T27307] RIP: 0033:0x7fec5939c819 [ 1634.630045][T27307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1634.630060][T27307] RSP: 002b:00007fec575f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1634.630077][T27307] RAX: ffffffffffffffda RBX: 00007fec59615fa0 RCX: 00007fec5939c819 [ 1634.630090][T27307] RDX: 000000000000001d RSI: 0000200000000100 RDI: 0000000000000003 [ 1634.630099][T27307] RBP: 00007fec575f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1634.630108][T27307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1634.630117][T27307] R13: 00007fec59616038 R14: 00007fec59615fa0 R15: 00007fffb7c0c878 [ 1634.630139][T27307] [ 1634.730315][T21941] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1634.735700][T27278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1635.755646][T21941] usb 4-1: Using ep0 maxpacket: 8 [ 1635.762481][T21941] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1635.770990][T21941] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1635.780915][T21941] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1635.790883][T21941] usb 4-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1635.801822][T21941] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1635.940741][T21941] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1635.950060][T21941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1635.981954][T21941] usbtmc 4-1:16.0: bulk endpoints not found [ 1636.119605][T27320] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5652'. [ 1636.120039][T26125] usb 6-1: new full-speed USB device number 110 using dummy_hcd [ 1636.223261][ T5928] usb 2-1: new low-speed USB device number 37 using dummy_hcd [ 1636.521875][ T5928] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1636.521936][T26125] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1636.545376][T26125] usb 6-1: no configurations [ 1636.552229][T26125] usb 6-1: can't read configurations, error -22 [ 1636.552242][ T5928] usb 2-1: config 8 has an invalid interface number: 109 but max is 0 [ 1636.552264][ T5928] usb 2-1: config 8 has no interface number 0 [ 1636.552295][ T5928] usb 2-1: config 8 interface 109 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 8 [ 1636.586019][ T5928] usb 2-1: config 8 interface 109 altsetting 0 endpoint 0x8E has invalid maxpacket 19095, setting to 8 [ 1636.600339][ T5928] usb 2-1: config 8 interface 109 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1636.618230][ T5928] usb 2-1: string descriptor 0 read error: -22 [ 1636.624698][ T5928] usb 2-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=d4.29 [ 1636.641617][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1636.682752][T27316] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 1636.693851][ T5928] metro_usb 2-1:8.109: Metrologic USB to Serial converter detected [ 1636.708664][T27331] syzkaller0: entered promiscuous mode [ 1636.719359][ T5928] usb 2-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 1636.729132][T27331] syzkaller0: entered allmulticast mode [ 1637.228631][T27340] FAULT_INJECTION: forcing a failure. [ 1637.228631][T27340] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1637.246176][T27340] CPU: 1 UID: 0 PID: 27340 Comm: syz.5.5658 Tainted: G L syzkaller #0 PREEMPT(full) [ 1637.246204][T27340] Tainted: [L]=SOFTLOCKUP [ 1637.246210][T27340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1637.246219][T27340] Call Trace: [ 1637.246226][T27340] [ 1637.246232][T27340] dump_stack_lvl+0x100/0x190 [ 1637.246257][T27340] should_fail_ex.cold+0x5/0xa [ 1637.246280][T27340] _copy_to_iter+0x5a4/0x1720 [ 1637.246306][T27340] ? __pfx__copy_to_iter+0x10/0x10 [ 1637.246324][T27340] ? _raw_spin_unlock+0x28/0x50 [ 1637.246347][T27340] ? unix_get_first+0x273/0x340 [ 1637.246378][T27340] seq_read_iter+0xdab/0x1270 [ 1637.246407][T27340] seq_read+0x33b/0x4c0 [ 1637.246426][T27340] ? __pfx_seq_read+0x10/0x10 [ 1637.246443][T27340] ? preempt_schedule_thunk+0x16/0x30 [ 1637.246474][T27340] ? import_ubuf+0x1b6/0x220 [ 1637.246496][T27340] ? selinux_file_permission+0x8f/0x6d0 [ 1637.246519][T27340] ? __pfx_seq_read+0x10/0x10 [ 1637.246537][T27340] proc_reg_read+0x240/0x330 [ 1637.246559][T27340] ? __pfx_proc_reg_read+0x10/0x10 [ 1637.246580][T27340] vfs_readv+0x5d8/0x8d0 [ 1637.246614][T27340] ? __pfx_vfs_readv+0x10/0x10 [ 1637.246640][T27340] ? find_held_lock+0x2b/0x80 [ 1637.246678][T27340] ? __fget_files+0x21f/0x3d0 [ 1637.246704][T27340] ? do_preadv+0x1ac/0x270 [ 1637.246718][T27340] do_preadv+0x1ac/0x270 [ 1637.246735][T27340] ? __pfx_do_preadv+0x10/0x10 [ 1637.246752][T27340] ? rcu_is_watching+0x12/0xc0 [ 1637.246781][T27340] do_syscall_64+0x10b/0xf80 [ 1637.246796][T27340] ? clear_bhb_loop+0x40/0x90 [ 1637.246817][T27340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1637.246833][T27340] RIP: 0033:0x7fec5939c819 [ 1637.246848][T27340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1637.246864][T27340] RSP: 002b:00007fec575f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1637.246881][T27340] RAX: ffffffffffffffda RBX: 00007fec59615fa0 RCX: 00007fec5939c819 [ 1637.246892][T27340] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000008 [ 1637.246901][T27340] RBP: 00007fec575f6090 R08: 00000000fffffffe R09: 0000000000000000 [ 1637.246910][T27340] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 1637.246920][T27340] R13: 00007fec59616038 R14: 00007fec59615fa0 R15: 00007fffb7c0c878 [ 1637.246941][T27340] [ 1637.927447][T27343] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5659'. [ 1637.940881][ T5928] usb 4-1: USB disconnect, device number 26 [ 1637.957039][ T5888] usb 2-1: USB disconnect, device number 37 [ 1637.974002][ T5888] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 1637.989498][ T5888] metro_usb 2-1:8.109: device disconnected [ 1638.263208][T27352] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1638.672097][T12394] usb 1-1: Could not find all expected endpoints [ 1638.698562][T12394] usb 1-1: USB disconnect, device number 35 [ 1639.255309][T27363] syzkaller0: entered promiscuous mode [ 1639.294427][T27363] syzkaller0: entered allmulticast mode [ 1639.893888][T27376] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1640.213715][T12394] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1640.492587][T12394] usb 3-1: Using ep0 maxpacket: 8 [ 1640.505890][T12394] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1640.515592][T12394] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1640.526215][T12394] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1640.536135][T12394] usb 3-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1640.555789][ T5928] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1640.933206][ T30] audit: type=1400 audit(2000000049.641:2577): avc: denied { watch } for pid=27386 comm="syz.1.5673" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1947 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1640.960759][T12394] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1640.976533][T12394] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1640.994113][ T5888] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 1641.007194][T12394] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1641.025603][T12394] usbtmc 3-1:16.0: bulk endpoints not found [ 1641.154632][ T5928] usb 4-1: Using ep0 maxpacket: 32 [ 1641.162787][ T5928] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1641.173777][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1641.175873][ T5888] usb 6-1: Using ep0 maxpacket: 32 [ 1641.197753][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1641.215419][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1641.226798][ T5888] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1641.233815][ T5928] usb 4-1: config 0 descriptor?? [ 1641.236302][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1641.309798][ T5888] usb 6-1: config 0 descriptor?? [ 1641.334125][ T5928] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1641.349166][T27395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5675'. [ 1641.710391][T21941] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1641.849364][T21941] usb 1-1: device descriptor read/64, error -71 [ 1641.913698][ T5928] gspca_vc032x: reg_r err -110 [ 1641.918518][ T5928] gspca_vc032x: I2c Bus Busy Wait 00 [ 1641.923876][ T5928] gspca_vc032x: I2c Bus Busy Wait 00 [ 1641.929562][ T5928] gspca_vc032x: I2c Bus Busy Wait 00 [ 1641.934898][ T5928] gspca_vc032x: I2c Bus Busy Wait 00 [ 1641.940212][ T5928] gspca_vc032x: I2c Bus Busy Wait 00 [ 1641.945629][ T5928] gspca_vc032x: I2c Bus Busy Wait 00 [ 1641.950950][ T5928] gspca_vc032x: I2c Bus Busy Wait 00 [ 1641.956298][ T5928] gspca_vc032x: I2c Bus Busy Wait 00 [ 1641.961588][ T5928] gspca_vc032x: I2c Bus Busy Wait 00 [ 1641.967579][ T5928] gspca_vc032x: I2c Bus Busy Wait 00 [ 1641.972890][ T5928] gspca_vc032x: I2c Bus Busy Wait 00 [ 1641.978242][ T5928] gspca_vc032x: I2c Bus Busy Wait 00 [ 1641.983527][ T5928] gspca_vc032x: I2c Bus Busy Wait 00 [ 1641.989781][ T5928] gspca_vc032x: I2c Bus Busy Wait 00 [ 1641.995083][ T5928] gspca_vc032x: I2c Bus Busy Wait 00 [ 1642.000437][ T5928] gspca_vc032x: I2c Bus Busy Wait 00 [ 1642.005730][ T5928] gspca_vc032x: I2c Bus Busy Wait 00 [ 1642.011159][ T5928] gspca_vc032x: I2c Bus Busy Wait 00 [ 1642.016456][ T5928] gspca_vc032x: Unknown sensor... [ 1642.021551][ T5928] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 1642.032943][T27382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1642.043265][T27382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1642.059307][ T5888] usbhid 6-1:0.0: can't add hid device: -71 [ 1642.069180][ T5888] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1642.079967][ T5888] usb 6-1: USB disconnect, device number 112 [ 1642.106034][T21941] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1642.314777][T21941] usb 1-1: device descriptor read/64, error -71 [ 1642.443614][T27406] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1642.776956][T21941] usb usb1-port1: attempt power cycle [ 1643.034037][ T30] audit: type=1400 audit(2000000051.924:2578): avc: denied { ioctl } for pid=27407 comm="syz.5.5679" path="socket:[107248]" dev="sockfs" ino=107248 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1643.184955][T21941] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1643.229534][T21941] usb 1-1: device descriptor read/8, error -71 [ 1643.251622][ T5888] usb 4-1: USB disconnect, device number 27 [ 1643.272177][T12394] usb 3-1: USB disconnect, device number 94 [ 1643.341211][T27427] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5682'. [ 1643.363498][T27427] tipc: Invalid UDP bearer configuration [ 1643.363548][T27427] tipc: Enabling of bearer rejected, failed to enable media [ 1643.536304][T27435] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1643.549289][T21941] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1643.557315][ T5829] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1643.599707][T21941] usb 1-1: device descriptor read/8, error -71 [ 1643.970969][T21941] usb usb1-port1: unable to enumerate USB device [ 1643.983373][ T30] audit: type=1400 audit(2000000052.812:2579): avc: denied { getopt } for pid=27436 comm="syz.2.5685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1644.005250][ T5829] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1644.017178][ T5829] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1644.027624][ T5829] usb 2-1: New USB device found, idVendor=0b05, idProduct=1afe, bcdDevice= 0.00 [ 1644.037052][ T5829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1644.047440][ T5829] usb 2-1: config 0 descriptor?? [ 1644.200726][T27444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5688'. [ 1644.357678][T27419] wg1: entered promiscuous mode [ 1644.378969][T27419] wg1: entered allmulticast mode [ 1644.601882][ T5829] hid (null): invalid report_size 12647 [ 1644.611951][ T5829] hid_parser_main: 23 callbacks suppressed [ 1644.611964][ T5829] hid-generic 0003:0B05:1AFE.0013: unknown main item tag 0x0 [ 1644.637456][ T5829] hid-generic 0003:0B05:1AFE.0013: unknown main item tag 0x0 [ 1644.645268][ T5829] hid-generic 0003:0B05:1AFE.0013: unknown main item tag 0x0 [ 1644.654090][ T5829] hid-generic 0003:0B05:1AFE.0013: unknown main item tag 0x0 [ 1644.662821][ T5829] hid-generic 0003:0B05:1AFE.0013: unknown main item tag 0x0 [ 1644.670493][ T5829] hid-generic 0003:0B05:1AFE.0013: unknown main item tag 0x0 [ 1644.680529][ T5829] hid-generic 0003:0B05:1AFE.0013: unknown main item tag 0x0 [ 1644.689221][ T5829] hid-generic 0003:0B05:1AFE.0013: unknown main item tag 0x0 [ 1644.697804][ T5829] hid-generic 0003:0B05:1AFE.0013: unknown main item tag 0x0 [ 1644.714890][T27453] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1644.797387][ T5829] hid-generic 0003:0B05:1AFE.0013: unknown main item tag 0x0 [ 1644.880095][ T5829] hid-generic 0003:0B05:1AFE.0013: invalid report_size 12647 [ 1644.949354][ T5829] hid-generic 0003:0B05:1AFE.0013: item 0 4 1 7 parsing failed [ 1645.003403][ T5829] hid-generic 0003:0B05:1AFE.0013: probe with driver hid-generic failed with error -22 [ 1645.047361][ T5829] usb 2-1: USB disconnect, device number 38 [ 1645.061199][T27455] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5691'. [ 1645.621472][T27465] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5695'. [ 1646.078146][ T5829] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 1646.166721][ T30] audit: type=1400 audit(2000000054.851:2580): avc: denied { create } for pid=27475 comm="syz.3.5700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 1646.226000][T27478] vxcan1 speed is unknown, defaulting to 1000 [ 1646.232310][T27479] netlink: 'syz.3.5700': attribute type 1 has an invalid length. [ 1646.243993][ T5829] usb 6-1: Using ep0 maxpacket: 16 [ 1646.253651][ T5829] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 1646.274885][T27476] mac80211_hwsim hwsim26 wlan0: entered promiscuous mode [ 1646.282451][ T5829] usb 6-1: config 0 has no interface number 0 [ 1646.303275][ T5829] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1646.323487][ T5829] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1646.340930][T27484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5702'. [ 1646.341339][ T5829] usb 6-1: Product: syz [ 1646.376051][ T5829] usb 6-1: Manufacturer: syz [ 1646.382170][ T5928] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1646.398588][ T5829] usb 6-1: SerialNumber: syz [ 1646.418428][ T5829] usb 6-1: config 0 descriptor?? [ 1646.426721][ T5829] hub 6-1:0.132: bad descriptor, ignoring hub [ 1646.439812][ T5829] hub 6-1:0.132: probe with driver hub failed with error -5 [ 1646.458968][T27488] bond2: entered promiscuous mode [ 1646.459896][ T5829] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.132/input/input119 [ 1646.469746][T27488] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1646.517899][ T30] audit: type=1400 audit(2000000055.188:2581): avc: denied { read } for pid=27487 comm="syz.2.5703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1646.576172][T27478] lo speed is unknown, defaulting to 1000 [ 1646.595822][ T5928] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1646.607074][ T30] audit: type=1400 audit(2000000055.235:2582): avc: denied { ioctl } for pid=27487 comm="syz.2.5703" path="socket:[108062]" dev="sockfs" ino=108062 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1646.654162][ T5928] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1646.786385][ T5928] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1646.796168][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1646.804305][ T5928] usb 2-1: Product: syz [ 1646.808550][ T5928] usb 2-1: Manufacturer: syz [ 1646.813258][ T5928] usb 2-1: SerialNumber: syz [ 1646.913050][T27495] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1647.224337][ T5928] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1647.242418][ T5928] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1647.264941][ T5928] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 1647.283980][ T5928] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 1647.374480][ T5928] usb 2-1: USB disconnect, device number 39 [ 1647.434951][T25877] udevd[25877]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1648.700039][ T5829] usb 6-1: USB disconnect, device number 113 [ 1648.979812][ T5829] usb 6-1: new full-speed USB device number 114 using dummy_hcd [ 1649.184735][ T5829] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1649.202959][ T5829] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1649.225176][ T5829] usb 6-1: config 0 descriptor?? [ 1649.234124][ T5829] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1649.290532][ T30] audit: type=1400 audit(2000000057.770:2583): avc: denied { shutdown } for pid=27514 comm="syz.0.5711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1649.500943][ T5829] gp8psk: usb in 128 operation failed. [ 1649.737612][ T5829] gp8psk: usb in 146 operation failed. [ 1649.754905][ T5829] gp8psk: failed to get FW version [ 1649.774070][ T5829] gp8psk: usb in 149 operation failed. [ 1649.788214][ T5829] gp8psk: failed to get FPGA version [ 1649.800983][ T5829] gp8psk: usb in 138 operation failed. [ 1649.811988][ T5829] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1649.828760][ T5829] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1649.842419][ T30] audit: type=1400 audit(2000000058.294:2584): avc: denied { execute_no_trans } for pid=27519 comm="syz.1.5713" path=2F6D656D66643A5B0BDB58AE5B1A02FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="hugetlbfs" ino=107516 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1649.878016][ T5829] usb 6-1: USB disconnect, device number 114 [ 1649.976342][ T30] audit: type=1400 audit(2000000058.415:2585): avc: denied { listen } for pid=27520 comm="syz.3.5714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1650.096729][ T30] audit: type=1400 audit(2000000058.415:2586): avc: denied { accept } for pid=27520 comm="syz.3.5714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1650.231080][ T5888] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 1650.288288][T27525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5715'. [ 1650.417227][ T5888] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1650.440558][ T5888] usb 2-1: not running at top speed; connect to a high speed hub [ 1650.474944][ T5888] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1650.501637][ T5888] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1650.524988][ T5888] usb 2-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40 [ 1650.544344][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1650.556655][ T5888] usb 2-1: Product: syz [ 1650.561772][ T5888] usb 2-1: Manufacturer: syz [ 1650.566828][ T5888] usb 2-1: SerialNumber: syz [ 1650.816951][T27521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1650.844678][T27521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1650.860865][ T5888] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1650.871701][ T5888] usb 2-1: MIDIStreaming interface descriptor not found [ 1650.974619][ T5888] usb 2-1: USB disconnect, device number 40 [ 1651.577842][ T5888] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1651.760110][ T5888] usb 4-1: Using ep0 maxpacket: 8 [ 1651.770790][ T5888] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1652.777537][ T5888] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1652.799211][ T5888] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1652.811867][ T5888] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1652.823399][ T5888] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1652.833402][ T5888] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1652.847157][ T5888] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1652.856349][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1652.879658][ T5888] usbtmc 4-1:16.0: probe with driver usbtmc failed with error -22 [ 1653.087829][T27567] FAULT_INJECTION: forcing a failure. [ 1653.087829][T27567] name failslab, interval 1, probability 0, space 0, times 0 [ 1653.101598][T27567] CPU: 0 UID: 0 PID: 27567 Comm: syz.2.5729 Tainted: G L syzkaller #0 PREEMPT(full) [ 1653.101628][T27567] Tainted: [L]=SOFTLOCKUP [ 1653.101634][T27567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1653.101645][T27567] Call Trace: [ 1653.101651][T27567] [ 1653.101658][T27567] dump_stack_lvl+0x100/0x190 [ 1653.101683][T27567] should_fail_ex.cold+0x5/0xa [ 1653.101707][T27567] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 1653.101734][T27567] should_failslab+0xc2/0x120 [ 1653.101753][T27567] __kmalloc_noprof+0xe0/0x850 [ 1653.101782][T27567] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 1653.101815][T27567] genl_start+0x18f/0x970 [ 1653.101842][T27567] __netlink_dump_start+0x60e/0x990 [ 1653.101869][T27567] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 1653.101897][T27567] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 1653.101930][T27567] ? __pfx_genl_get_cmd+0x10/0x10 [ 1653.101953][T27567] ? __pfx_genl_start+0x10/0x10 [ 1653.101976][T27567] ? __pfx_genl_dumpit+0x10/0x10 [ 1653.101999][T27567] ? __pfx_genl_done+0x10/0x10 [ 1653.102025][T27567] ? __dev_queue_xmit+0xa10/0x4950 [ 1653.102049][T27567] ? __radix_tree_lookup+0x217/0x2b0 [ 1653.102078][T27567] genl_rcv_msg+0x471/0x800 [ 1653.102106][T27567] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1653.102132][T27567] ? __pfx_smcr_nl_get_lgr+0x10/0x10 [ 1653.102164][T27567] netlink_rcv_skb+0x159/0x420 [ 1653.102205][T27567] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1653.102232][T27567] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1653.102266][T27567] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1653.102292][T27567] genl_rcv+0x28/0x40 [ 1653.102314][T27567] netlink_unicast+0x585/0x850 [ 1653.102341][T27567] ? __pfx_netlink_unicast+0x10/0x10 [ 1653.102371][T27567] netlink_sendmsg+0x8b0/0xda0 [ 1653.102398][T27567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1653.102420][T27567] ? __might_fault+0x90/0x140 [ 1653.102451][T27567] ____sys_sendmsg+0x9e1/0xb70 [ 1653.102473][T27567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1653.102498][T27567] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1653.102532][T27567] ___sys_sendmsg+0x190/0x1e0 [ 1653.102558][T27567] ? __pfx____sys_sendmsg+0x10/0x10 [ 1653.102612][T27567] __sys_sendmsg+0x170/0x220 [ 1653.102631][T27567] ? __pfx___sys_sendmsg+0x10/0x10 [ 1653.102661][T27567] ? rcu_is_watching+0x12/0xc0 [ 1653.102693][T27567] do_syscall_64+0x10b/0xf80 [ 1653.102709][T27567] ? clear_bhb_loop+0x40/0x90 [ 1653.102730][T27567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1653.102748][T27567] RIP: 0033:0x7f39b059c819 [ 1653.102764][T27567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1653.102781][T27567] RSP: 002b:00007f39b13c3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1653.102800][T27567] RAX: ffffffffffffffda RBX: 00007f39b0815fa0 RCX: 00007f39b059c819 [ 1653.102812][T27567] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 1653.102822][T27567] RBP: 00007f39b13c3090 R08: 0000000000000000 R09: 0000000000000000 [ 1653.102833][T27567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1653.102843][T27567] R13: 00007f39b0816038 R14: 00007f39b0815fa0 R15: 00007fff22a65b08 [ 1653.102868][T27567] [ 1653.470402][ T30] audit: type=1400 audit(2000000061.680:2587): avc: denied { map } for pid=27569 comm="syz.2.5730" path="cgroup:[4026532955]" dev="nsfs" ino=4026532955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1653.987571][T27577] vxcan1 speed is unknown, defaulting to 1000 [ 1654.166543][T26125] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1654.339885][T27577] lo speed is unknown, defaulting to 1000 [ 1654.355289][T27580] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 1654.392547][T26125] usb 3-1: Using ep0 maxpacket: 32 [ 1654.417408][T26125] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1654.440470][T26125] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1654.457588][T26125] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1654.466952][T26125] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1654.483840][T26125] usb 3-1: config 0 descriptor?? [ 1654.500175][T27587] 9p: Bad value for 'rfdno' [ 1654.563376][T27590] netlink: 'syz.0.5734': attribute type 3 has an invalid length. [ 1655.591539][T12394] usb 4-1: USB disconnect, device number 28 [ 1656.059694][T27611] siw: device registration error -23 [ 1656.207240][T27609] sctp: [Deprecated]: syz.3.5741 (pid 27609) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1656.207240][T27609] Use struct sctp_sack_info instead [ 1660.807791][T26125] usbhid 3-1:0.0: can't add hid device: -71 [ 1660.833107][T26125] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1660.936159][T26125] usb 3-1: USB disconnect, device number 95 [ 1661.136809][T27633] netlink: 'syz.5.5750': attribute type 1 has an invalid length. [ 1661.595096][ T5829] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1661.798089][ T5829] usb 4-1: Using ep0 maxpacket: 16 [ 1662.011889][T21941] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1662.111742][ T5829] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1662.155002][ T5829] usb 4-1: no configurations [ 1662.168170][ T5829] usb 4-1: can't read configurations, error -22 [ 1662.215135][T21941] usb 3-1: Using ep0 maxpacket: 8 [ 1663.202259][T21941] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1663.232536][T21941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1663.257077][T21941] usb 3-1: Product: syz [ 1663.270717][T21941] usb 3-1: Manufacturer: syz [ 1663.283323][T21941] usb 3-1: SerialNumber: syz [ 1663.299347][T21941] usb 3-1: config 0 descriptor?? [ 1663.530022][T26565] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1663.539546][T21941] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1663.701020][T26565] usb 1-1: device descriptor read/64, error -71 [ 1663.866148][T27666] FAULT_INJECTION: forcing a failure. [ 1663.866148][T27666] name failslab, interval 1, probability 0, space 0, times 0 [ 1663.878990][T27666] CPU: 1 UID: 0 PID: 27666 Comm: syz.5.5756 Tainted: G L syzkaller #0 PREEMPT(full) [ 1663.879020][T27666] Tainted: [L]=SOFTLOCKUP [ 1663.879027][T27666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1663.879037][T27666] Call Trace: [ 1663.879046][T27666] [ 1663.879057][T27666] dump_stack_lvl+0x100/0x190 [ 1663.879083][T27666] should_fail_ex.cold+0x5/0xa [ 1663.879107][T27666] ? tomoyo_encode2+0xfb/0x3c0 [ 1663.879125][T27666] should_failslab+0xc2/0x120 [ 1663.879144][T27666] __kmalloc_noprof+0xe0/0x850 [ 1663.879174][T27666] tomoyo_encode2+0xfb/0x3c0 [ 1663.879197][T27666] tomoyo_encode+0x29/0x50 [ 1663.879214][T27666] tomoyo_realpath_from_path+0x18c/0x690 [ 1663.879240][T27666] tomoyo_path_number_perm+0x23c/0x580 [ 1663.879266][T27666] ? tomoyo_path_number_perm+0x22e/0x580 [ 1663.879294][T27666] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1663.879319][T27666] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1663.879348][T27666] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1663.879394][T27666] ? find_held_lock+0x2b/0x80 [ 1663.879408][T27666] ? __fget_files+0x215/0x3d0 [ 1663.879428][T27666] ? hook_file_ioctl_common+0x149/0x410 [ 1663.879448][T27666] ? __fget_files+0x215/0x3d0 [ 1663.879473][T27666] ? __fget_files+0x21f/0x3d0 [ 1663.879496][T27666] security_file_ioctl+0xd3/0x230 [ 1663.879516][T27666] __x64_sys_ioctl+0xb7/0x210 [ 1663.879536][T27666] do_syscall_64+0x10b/0xf80 [ 1663.879552][T27666] ? clear_bhb_loop+0x40/0x90 [ 1663.879573][T27666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1663.879592][T27666] RIP: 0033:0x7fec5939c819 [ 1663.879607][T27666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1663.879624][T27666] RSP: 002b:00007fec575b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1663.879642][T27666] RAX: ffffffffffffffda RBX: 00007fec59616180 RCX: 00007fec5939c819 [ 1663.879654][T27666] RDX: 00002000000000c0 RSI: 00000000c0303e03 RDI: 000000000000000a [ 1663.879664][T27666] RBP: 00007fec575b4090 R08: 0000000000000000 R09: 0000000000000000 [ 1663.879674][T27666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1663.879684][T27666] R13: 00007fec59616218 R14: 00007fec59616180 R15: 00007fffb7c0c878 [ 1663.879708][T27666] [ 1663.879820][T27666] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1664.151886][T26125] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1664.171750][T26565] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1664.238734][T27639] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5751'. [ 1664.291687][T27672] netlink: 'syz.5.5764': attribute type 1 has an invalid length. [ 1664.321052][T26565] usb 1-1: device descriptor read/64, error -71 [ 1664.321320][T26125] usb 2-1: Using ep0 maxpacket: 8 [ 1664.349120][T26125] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1664.365652][T26125] usb 2-1: config 5 has an invalid interface number: 18 but max is 0 [ 1664.382310][T26125] usb 2-1: config 5 has no interface number 0 [ 1664.395379][T26125] usb 2-1: config 5 interface 18 has no altsetting 0 [ 1664.412309][T26125] usb 2-1: New USB device found, idVendor=157e, idProduct=3205, bcdDevice=c9.b4 [ 1664.431159][T26125] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1664.449464][T26125] usb 2-1: Product: syz [ 1664.458259][T26125] usb 2-1: Manufacturer: syz [ 1664.467169][T27639] netlink: 232 bytes leftover after parsing attributes in process `syz.2.5751'. [ 1664.468934][T26125] usb 2-1: SerialNumber: syz [ 1664.481882][T26565] usb usb1-port1: attempt power cycle [ 1664.900000][T26565] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1665.243189][T26565] usb 1-1: device descriptor read/8, error -71 [ 1665.274038][T27665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1665.518363][T26565] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1666.229362][T27665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1666.248775][T21941] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1666.259555][T26565] usb 1-1: device descriptor read/8, error -71 [ 1666.410248][T26565] usb usb1-port1: unable to enumerate USB device [ 1666.420802][T21941] usb 3-1: USB disconnect, device number 96 [ 1666.457177][ T30] audit: type=1804 audit(2000000073.831:2588): pid=27685 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.5767" name="/newroot/419/file0" dev="tmpfs" ino=2250 res=1 errno=0 [ 1668.139067][T26125] usb 2-1: Could not find all expected endpoints [ 1668.166396][T26125] usb 2-1: USB disconnect, device number 41 [ 1669.041766][T27717] FAULT_INJECTION: forcing a failure. [ 1669.041766][T27717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1669.057350][T27717] CPU: 0 UID: 0 PID: 27717 Comm: syz.2.5776 Tainted: G L syzkaller #0 PREEMPT(full) [ 1669.057380][T27717] Tainted: [L]=SOFTLOCKUP [ 1669.057386][T27717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1669.057395][T27717] Call Trace: [ 1669.057401][T27717] [ 1669.057407][T27717] dump_stack_lvl+0x100/0x190 [ 1669.057433][T27717] should_fail_ex.cold+0x5/0xa [ 1669.057456][T27717] _copy_from_user+0x2e/0xd0 [ 1669.057476][T27717] copy_mount_options+0x76/0x190 [ 1669.057505][T27717] __x64_sys_mount+0x1ab/0x310 [ 1669.057530][T27717] ? __pfx___x64_sys_mount+0x10/0x10 [ 1669.057556][T27717] ? rcu_is_watching+0x12/0xc0 [ 1669.057584][T27717] do_syscall_64+0x10b/0xf80 [ 1669.057600][T27717] ? clear_bhb_loop+0x40/0x90 [ 1669.057620][T27717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1669.057637][T27717] RIP: 0033:0x7f39b059c819 [ 1669.057651][T27717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1669.057666][T27717] RSP: 002b:00007f39b1381028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1669.057683][T27717] RAX: ffffffffffffffda RBX: 00007f39b0816180 RCX: 00007f39b059c819 [ 1669.057693][T27717] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000000 [ 1669.057703][T27717] RBP: 00007f39b1381090 R08: 0000200000000680 R09: 0000000000000000 [ 1669.057711][T27717] R10: 0000000000110000 R11: 0000000000000246 R12: 0000000000000001 [ 1669.057721][T27717] R13: 00007f39b0816218 R14: 00007f39b0816180 R15: 00007fff22a65b08 [ 1669.057744][T27717] [ 1669.582186][T27735] FAULT_INJECTION: forcing a failure. [ 1669.582186][T27735] name failslab, interval 1, probability 0, space 0, times 0 [ 1669.595951][T27735] CPU: 0 UID: 0 PID: 27735 Comm: syz.0.5780 Tainted: G L syzkaller #0 PREEMPT(full) [ 1669.595979][T27735] Tainted: [L]=SOFTLOCKUP [ 1669.595985][T27735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1669.595995][T27735] Call Trace: [ 1669.596001][T27735] [ 1669.596007][T27735] dump_stack_lvl+0x100/0x190 [ 1669.596031][T27735] should_fail_ex.cold+0x5/0xa [ 1669.596047][T27735] should_failslab+0xc2/0x120 [ 1669.596058][T27735] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1669.596079][T27735] ? ima_calc_file_hash_tfm+0x236/0x350 [ 1669.596092][T27735] ? irqentry_exit+0x246/0x790 [ 1669.596102][T27735] ? sha256_init+0xd/0xc0 [ 1669.596117][T27735] ima_calc_file_hash_tfm+0x236/0x350 [ 1669.596130][T27735] ? __pfx_ima_calc_file_hash_tfm+0x10/0x10 [ 1669.596157][T27735] ? shmem_huge_global_enabled.isra.0+0x6c/0x210 [ 1669.596175][T27735] ? ima_alloc_tfm+0x21a/0x2e0 [ 1669.596185][T27735] ? shmem_getattr+0x38e/0x450 [ 1669.596202][T27735] ima_calc_file_hash+0x1e3/0x380 [ 1669.596216][T27735] ima_collect_measurement+0x94f/0xb30 [ 1669.596233][T27735] ? __pfx_ima_collect_measurement+0x10/0x10 [ 1669.596259][T27735] ? vfs_getxattr_alloc+0xec/0x350 [ 1669.596276][T27735] ? ima_get_hash_algo+0x22d/0x400 [ 1669.596294][T27735] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 1669.596316][T27735] ? process_measurement+0xdfe/0x2350 [ 1669.596327][T27735] process_measurement+0xdfe/0x2350 [ 1669.596343][T27735] ? __pfx_process_measurement+0x10/0x10 [ 1669.596356][T27735] ? avc_has_perm+0x135/0x1e0 [ 1669.596371][T27735] ? __pfx_avc_has_perm+0x10/0x10 [ 1669.596386][T27735] ? find_held_lock+0x2b/0x80 [ 1669.596396][T27735] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1669.596410][T27735] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1669.596436][T27735] ? __file_map_prot_check+0x3b1/0x550 [ 1669.596456][T27735] ima_file_mmap+0x1bb/0x1e0 [ 1669.596468][T27735] ? __pfx_ima_file_mmap+0x10/0x10 [ 1669.596480][T27735] ? proc_fail_nth_write+0x9f/0x220 [ 1669.596494][T27735] security_mmap_file+0x278/0x9b0 [ 1669.596507][T27735] vm_mmap_pgoff+0xec/0x470 [ 1669.596520][T27735] ? find_held_lock+0x2b/0x80 [ 1669.596530][T27735] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1669.596541][T27735] ? __fget_files+0x215/0x3d0 [ 1669.596557][T27735] ? __fget_files+0x21f/0x3d0 [ 1669.596573][T27735] ksys_mmap_pgoff+0x3cb/0x610 [ 1669.596586][T27735] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1669.596598][T27735] ? xfd_validate_state+0x129/0x190 [ 1669.596614][T27735] ? ksys_write+0x1ac/0x250 [ 1669.596629][T27735] __x64_sys_mmap+0x125/0x190 [ 1669.596644][T27735] do_syscall_64+0x10b/0xf80 [ 1669.596654][T27735] ? clear_bhb_loop+0x40/0x90 [ 1669.596667][T27735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1669.596679][T27735] RIP: 0033:0x7f6d13f9c819 [ 1669.596689][T27735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1669.596700][T27735] RSP: 002b:00007f6d14e0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1669.596712][T27735] RAX: ffffffffffffffda RBX: 00007f6d14216090 RCX: 00007f6d13f9c819 [ 1669.596719][T27735] RDX: 00000000027ffff7 RSI: 0000000000600000 RDI: 0000200000000000 [ 1669.596726][T27735] RBP: 00007f6d14e0f090 R08: 0000000000000007 R09: 0000000000000000 [ 1669.596732][T27735] R10: 0000000004012011 R11: 0000000000000246 R12: 0000000000000001 [ 1669.596738][T27735] R13: 00007f6d14216128 R14: 00007f6d14216090 R15: 00007fff5bfe5c48 [ 1669.596753][T27735] [ 1669.602381][T21941] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 1669.966779][ T30] audit: type=1800 audit(2000000076.777:2589): pid=27735 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.5780" name="file1" dev="tmpfs" ino=2561 res=0 errno=0 [ 1670.168814][T21941] usb 6-1: Using ep0 maxpacket: 16 [ 1671.360468][T27755] vxfs: WRONG superblock magic 00000000 at 1 [ 1671.370325][T27755] vxfs: WRONG superblock magic 00000000 at 8 [ 1671.378337][T27755] vxfs: can't find superblock. [ 1672.146900][ T30] audit: type=1400 audit(2000000078.554:2590): avc: denied { map } for pid=27748 comm="syz.1.5784" path="socket:[109010]" dev="sockfs" ino=109010 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1672.956630][T21941] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1672.966853][T21941] usb 6-1: no configurations [ 1672.972561][T21941] usb 6-1: can't read configurations, error -22 [ 1673.225609][T27766] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1673.366846][ T5888] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1673.429713][T12394] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1673.536490][ T5888] usb 3-1: Using ep0 maxpacket: 32 [ 1673.544951][ T5888] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1673.559719][ T5888] usb 3-1: config 0 has no interface number 0 [ 1673.573789][ T5888] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1673.591492][T12394] usb 2-1: Using ep0 maxpacket: 16 [ 1673.601779][T12394] usb 2-1: config 0 has no interfaces? [ 1673.607802][ T5888] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1673.622116][T12394] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1673.632413][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1673.647526][T12394] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1673.657347][ T5888] usb 3-1: Product: syz [ 1673.663393][ T5888] usb 3-1: Manufacturer: syz [ 1673.668142][T12394] usb 2-1: Product: syz [ 1673.672409][ T5888] usb 3-1: SerialNumber: syz [ 1673.677050][T12394] usb 2-1: Manufacturer: syz [ 1673.682169][T12394] usb 2-1: SerialNumber: syz [ 1673.690374][ T5888] usb 3-1: config 0 descriptor?? [ 1673.698826][T12394] usb 2-1: config 0 descriptor?? [ 1674.467145][ T5888] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1675.111008][T26565] usb 2-1: USB disconnect, device number 42 [ 1675.117496][ T5888] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1675.364401][T26125] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1675.535557][T26125] usb 4-1: Using ep0 maxpacket: 32 [ 1675.639909][T27763] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5788'. [ 1675.661208][T26125] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1675.946514][T27763] input: syz0 as /devices/virtual/input/input120 [ 1675.953103][T26125] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1675.999443][T26125] usb 4-1: config 0 descriptor?? [ 1676.037786][T26125] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1676.050486][ T5888] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 1676.075339][ T5888] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 1676.089746][ T5888] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1676.100558][ T5888] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 1676.132452][ T5888] usb 3-1: USB disconnect, device number 97 [ 1676.330759][T27803] netlink: 'syz.5.5796': attribute type 11 has an invalid length. [ 1676.388296][T27803] netlink: 'syz.5.5796': attribute type 23 has an invalid length. [ 1676.411598][T27803] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5796'. [ 1676.500019][T27801] netlink: 88 bytes leftover after parsing attributes in process `syz.5.5796'. [ 1676.615583][T26125] gspca_vc032x: reg_r err -110 [ 1676.620514][T26125] gspca_vc032x: I2c Bus Busy Wait 00 [ 1676.633116][T26125] gspca_vc032x: I2c Bus Busy Wait 00 [ 1676.641046][T26125] gspca_vc032x: I2c Bus Busy Wait 00 [ 1676.646648][T26125] gspca_vc032x: I2c Bus Busy Wait 00 [ 1676.652346][T26125] gspca_vc032x: I2c Bus Busy Wait 00 [ 1676.659197][T26125] gspca_vc032x: I2c Bus Busy Wait 00 [ 1676.664627][T26125] gspca_vc032x: I2c Bus Busy Wait 00 [ 1676.671322][T26125] gspca_vc032x: I2c Bus Busy Wait 00 [ 1676.677019][T26125] gspca_vc032x: I2c Bus Busy Wait 00 [ 1676.695236][T26125] gspca_vc032x: I2c Bus Busy Wait 00 [ 1676.703791][T26125] gspca_vc032x: I2c Bus Busy Wait 00 [ 1676.709367][T26125] gspca_vc032x: I2c Bus Busy Wait 00 [ 1676.714947][T26125] gspca_vc032x: I2c Bus Busy Wait 00 [ 1676.720517][T26125] gspca_vc032x: I2c Bus Busy Wait 00 [ 1676.728753][T26125] gspca_vc032x: I2c Bus Busy Wait 00 [ 1676.734338][T26125] gspca_vc032x: I2c Bus Busy Wait 00 [ 1676.739819][T26125] gspca_vc032x: I2c Bus Busy Wait 00 [ 1676.746733][T26125] gspca_vc032x: I2c Bus Busy Wait 00 [ 1676.753382][T26125] gspca_vc032x: Unknown sensor... [ 1676.797176][T26125] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 1677.040003][T27815] FAULT_INJECTION: forcing a failure. [ 1677.040003][T27815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1677.053244][T27815] CPU: 1 UID: 0 PID: 27815 Comm: syz.2.5798 Tainted: G L syzkaller #0 PREEMPT(full) [ 1677.053272][T27815] Tainted: [L]=SOFTLOCKUP [ 1677.053279][T27815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1677.053289][T27815] Call Trace: [ 1677.053295][T27815] [ 1677.053302][T27815] dump_stack_lvl+0x100/0x190 [ 1677.053328][T27815] should_fail_ex.cold+0x5/0xa [ 1677.053353][T27815] _copy_from_user+0x2e/0xd0 [ 1677.053373][T27815] dev_ethtool+0x162/0x5d80 [ 1677.053391][T27815] ? __lock_acquire+0x4a5/0x2630 [ 1677.053417][T27815] ? __lock_acquire+0x4a5/0x2630 [ 1677.053442][T27815] ? __pfx_dev_ethtool+0x10/0x10 [ 1677.053459][T27815] ? lock_acquire+0x1b1/0x370 [ 1677.053479][T27815] ? find_held_lock+0x2b/0x80 [ 1677.053494][T27815] ? finish_task_switch.isra.0+0x2c6/0x1010 [ 1677.053522][T27815] ? finish_task_switch.isra.0+0x2c6/0x1010 [ 1677.053549][T27815] ? rcu_is_watching+0x12/0xc0 [ 1677.053575][T27815] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 1677.053602][T27815] ? lockdep_hardirqs_on+0x78/0x100 [ 1677.053629][T27815] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 1677.053657][T27815] ? rcu_is_watching+0x12/0xc0 [ 1677.053682][T27815] ? trace_sched_exit_tp+0x11c/0x160 [ 1677.053702][T27815] ? __schedule+0x10fb/0x6820 [ 1677.053726][T27815] ? __lock_acquire+0x4a5/0x2630 [ 1677.053756][T27815] ? __lock_acquire+0x4a5/0x2630 [ 1677.053777][T27815] ? __pfx___schedule+0x10/0x10 [ 1677.053802][T27815] ? preempt_schedule_irq+0x7b/0x90 [ 1677.053833][T27815] ? find_held_lock+0x2b/0x80 [ 1677.053848][T27815] ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90 [ 1677.053870][T27815] ? rcu_is_watching+0x12/0xc0 [ 1677.053895][T27815] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1677.053919][T27815] ? lockdep_hardirqs_on+0x78/0x100 [ 1677.053944][T27815] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1677.053969][T27815] ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90 [ 1677.053993][T27815] ? rcu_is_watching+0x12/0xc0 [ 1677.054020][T27815] ? __rcu_read_unlock+0x27f/0x5e0 [ 1677.054046][T27815] dev_ioctl+0x63b/0x10e0 [ 1677.054066][T27815] sock_do_ioctl+0x1a0/0x280 [ 1677.054086][T27815] ? irqentry_exit+0x246/0x790 [ 1677.054102][T27815] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1677.054123][T27815] ? irqentry_exit+0x246/0x790 [ 1677.054147][T27815] ? sock_ioctl+0x174/0x6b0 [ 1677.054174][T27815] sock_ioctl+0x599/0x6b0 [ 1677.054204][T27815] ? __pfx_sock_ioctl+0x10/0x10 [ 1677.054228][T27815] ? ioctl_has_perm.constprop.0.isra.0+0x2f/0x540 [ 1677.054253][T27815] ? selinux_file_ioctl+0x13b/0x290 [ 1677.054271][T27815] ? selinux_file_ioctl+0xb6/0x290 [ 1677.054289][T27815] ? __pfx_sock_ioctl+0x10/0x10 [ 1677.054314][T27815] __x64_sys_ioctl+0x18e/0x210 [ 1677.054334][T27815] do_syscall_64+0x10b/0xf80 [ 1677.054350][T27815] ? clear_bhb_loop+0x40/0x90 [ 1677.054372][T27815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1677.054390][T27815] RIP: 0033:0x7f39b059c819 [ 1677.054405][T27815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1677.054421][T27815] RSP: 002b:00007f39b1381028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1677.054438][T27815] RAX: ffffffffffffffda RBX: 00007f39b0816180 RCX: 00007f39b059c819 [ 1677.054450][T27815] RDX: 0000200000000240 RSI: 0000000000008946 RDI: 0000000000000008 [ 1677.054460][T27815] RBP: 00007f39b1381090 R08: 0000000000000000 R09: 0000000000000000 [ 1677.054470][T27815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1677.054480][T27815] R13: 00007f39b0816218 R14: 00007f39b0816180 R15: 00007fff22a65b08 [ 1677.054504][T27815] [ 1677.495888][T26565] usb 4-1: USB disconnect, device number 31 [ 1677.869958][T27830] xfrm0: entered promiscuous mode [ 1677.875001][T27830] xfrm0: entered allmulticast mode [ 1677.950253][T27830] netlink: 'syz.1.5802': attribute type 10 has an invalid length. [ 1677.958206][T27830] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5802'. [ 1677.967966][T27830] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 1678.206349][T27836] tmpfs: Bad value for 'nr_blocks' [ 1678.382211][T27839] sch_tbf: burst 4 is lower than device lo mtu (65550) ! [ 1678.413591][T27839] xt_l2tp: v2 doesn't support IP mode [ 1678.665875][T27833] FAULT_INJECTION: forcing a failure. [ 1678.665875][T27833] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1678.689865][T27833] CPU: 1 UID: 0 PID: 27833 Comm: syz.2.5804 Tainted: G L syzkaller #0 PREEMPT(full) [ 1678.689897][T27833] Tainted: [L]=SOFTLOCKUP [ 1678.689904][T27833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1678.689914][T27833] Call Trace: [ 1678.689920][T27833] [ 1678.689928][T27833] dump_stack_lvl+0x100/0x190 [ 1678.689955][T27833] should_fail_ex.cold+0x5/0xa [ 1678.689976][T27833] ? prepare_alloc_pages+0x16d/0x5f0 [ 1678.689999][T27833] should_fail_alloc_page+0xeb/0x140 [ 1678.690019][T27833] prepare_alloc_pages+0x1f0/0x5f0 [ 1678.690038][T27833] ? trace_sched_exit_tp+0x11c/0x160 [ 1678.690062][T27833] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 1678.690104][T27833] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1678.690130][T27833] ? __lock_acquire+0x4a5/0x2630 [ 1678.690156][T27833] ? __lock_acquire+0x4a5/0x2630 [ 1678.690188][T27833] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1678.690211][T27833] ? policy_nodemask+0xed/0x4f0 [ 1678.690232][T27833] alloc_pages_mpol+0x1fb/0x540 [ 1678.690258][T27833] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1678.690282][T27833] ? __pfx_filemap_map_pages+0x10/0x10 [ 1678.690308][T27833] alloc_pages_noprof+0x1a/0x160 [ 1678.690329][T27833] pte_alloc_one+0x1c/0x3d0 [ 1678.690356][T27833] __do_fault+0x26c/0x440 [ 1678.690386][T27833] do_fault+0x2db/0x1750 [ 1678.690409][T27833] __handle_mm_fault+0x187d/0x2a00 [ 1678.690436][T27833] ? mt_find+0x45e/0x8e0 [ 1678.690455][T27833] ? __pfx___handle_mm_fault+0x10/0x10 [ 1678.690473][T27833] ? __pfx_mt_find+0x10/0x10 [ 1678.690502][T27833] ? find_vma+0xbf/0x140 [ 1678.690517][T27833] ? __pfx_find_vma+0x10/0x10 [ 1678.690536][T27833] handle_mm_fault+0x36d/0xa20 [ 1678.690563][T27833] do_user_addr_fault+0x74c/0x12f0 [ 1678.690585][T27833] ? trace_page_fault_kernel+0x7a/0x200 [ 1678.690609][T27833] exc_page_fault+0x6f/0xd0 [ 1678.690636][T27833] asm_exc_page_fault+0x26/0x30 [ 1678.690653][T27833] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1678.690674][T27833] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1678.690690][T27833] RSP: 0018:ffffc90004da7e68 EFLAGS: 00050206 [ 1678.690704][T27833] RAX: 0000000000000001 RBX: 0000000000000800 RCX: 0000000000000800 [ 1678.690714][T27833] RDX: 0000000000000001 RSI: ffff88805c7cb000 RDI: 0000200000000000 [ 1678.690724][T27833] RBP: 0000200000000000 R08: 0000000000000000 R09: ffffed100b8f96ff [ 1678.690735][T27833] R10: ffff88805c7cb7ff R11: 0000000000000000 R12: ffff88805c7cb000 [ 1678.690745][T27833] R13: 0000200000000800 R14: 00007ffffffff000 R15: 0000000000000000 [ 1678.690768][T27833] _copy_to_user+0xa4/0xd0 [ 1678.690789][T27833] __do_sys_mincore+0x294/0x610 [ 1678.690819][T27833] do_syscall_64+0x10b/0xf80 [ 1678.690833][T27833] ? clear_bhb_loop+0x40/0x90 [ 1678.690853][T27833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1678.690869][T27833] RIP: 0033:0x7f39b059c819 [ 1678.690883][T27833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1678.690897][T27833] RSP: 002b:00007f39b13c3028 EFLAGS: 00000246 ORIG_RAX: 000000000000001b [ 1678.690911][T27833] RAX: ffffffffffffffda RBX: 00007f39b0815fa0 RCX: 00007f39b059c819 [ 1678.690922][T27833] RDX: 0000200000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 1678.690932][T27833] RBP: 00007f39b13c3090 R08: 0000000000000000 R09: 0000000000000000 [ 1678.690942][T27833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1678.690951][T27833] R13: 00007f39b0816038 R14: 00007f39b0815fa0 R15: 00007fff22a65b08 [ 1678.690974][T27833] [ 1679.258101][T27854] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5809'. [ 1679.341468][ T5888] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 1679.384315][T26125] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1679.513260][ T5888] usb 6-1: Using ep0 maxpacket: 16 [ 1679.555549][T26125] usb 4-1: Using ep0 maxpacket: 32 [ 1679.587085][T26125] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1679.605460][T26125] usb 4-1: config 0 has no interface number 0 [ 1679.657027][T26125] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1679.725168][T26125] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1679.747896][ T6255] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1679.797007][T26125] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1679.818704][T26125] usb 4-1: Product: syz [ 1679.824145][T26125] usb 4-1: Manufacturer: syz [ 1679.828779][T26125] usb 4-1: SerialNumber: syz [ 1679.846623][T26125] usb 4-1: config 0 descriptor?? [ 1679.933681][ T6255] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1679.945573][ T6255] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 1679.959411][ T6255] usb 1-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 1679.969113][ T6255] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1679.985092][ T6255] usb 1-1: config 0 descriptor?? [ 1680.098635][ T6255] option 1-1:0.0: GSM modem (1-port) converter detected [ 1680.209434][T27874] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1681.040196][T26125] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1681.145003][T26125] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1681.857562][T27846] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5808'. [ 1681.903107][T27846] input: syz0 as /devices/virtual/input/input121 [ 1681.984305][T26125] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 1682.003498][T26125] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 1682.014922][T26125] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1682.028926][T26125] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 1682.051499][T27888] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5819'. [ 1682.071045][T26125] usb 4-1: USB disconnect, device number 32 [ 1682.417066][T27899] tipc: Started in network mode [ 1682.422048][T27899] tipc: Node identity 4004, cluster identity 4711 [ 1682.428455][T27899] tipc: Node number set to 16388 [ 1682.701254][T27905] netlink: 'syz.3.5824': attribute type 1 has an invalid length. [ 1682.771643][T27905] bond5: entered promiscuous mode [ 1682.780024][T27905] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1682.802752][T27909] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1682.824435][T27909] bond5: (slave sit1): The slave device specified does not support setting the MAC address [ 1682.852032][T27909] bond5: (slave sit1): Setting fail_over_mac to active for active-backup mode [ 1682.867564][ T30] audit: type=1804 audit(2000000089.190:2591): pid=27913 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.5826" name="file0" dev="tmpfs" ino=2854 res=1 errno=0 [ 1682.893591][T27909] bond5: (slave sit1): making interface the new active one [ 1682.900920][T27909] sit1: entered promiscuous mode [ 1682.923584][T27909] bond5: (slave sit1): Enslaving as an active interface with an up link [ 1682.941432][T26125] usb 1-1: USB disconnect, device number 44 [ 1682.959195][T26125] option 1-1:0.0: device disconnected [ 1683.043749][T27915] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5827'. [ 1683.071371][T27915] bridge0: port 1(vlan3) entered blocking state [ 1683.078152][T27915] bridge0: port 1(vlan3) entered disabled state [ 1683.086639][T27915] vlan3: entered allmulticast mode [ 1683.092454][T27915] geneve0: entered allmulticast mode [ 1683.171835][T27917] fuse: fd is not a fuse device [ 1683.367566][T27928] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1683.382418][ T30] audit: type=1400 audit(2000000089.667:2592): avc: denied { write } for pid=27924 comm="syz.0.5832" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1684.076497][ T5829] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1684.889897][ T5829] usb 3-1: Using ep0 maxpacket: 32 [ 1684.913300][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1684.913629][ T5888] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1684.949383][ T5888] usb 6-1: no configurations [ 1684.960863][ T5888] usb 6-1: can't read configurations, error -22 [ 1685.067425][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1685.078792][ T5829] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1685.087943][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1685.117050][ T5829] usb 3-1: config 0 descriptor?? [ 1685.594617][ T30] audit: type=1400 audit(2000000091.351:2593): avc: denied { remount } for pid=27945 comm="syz.0.5836" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1685.651959][ T5888] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 1685.819937][ T5888] usb 6-1: device descriptor read/64, error -32 [ 1685.950280][ T5888] usb usb6-port1: attempt power cycle [ 1686.289480][T27969] sd 0:0:1:0: device reset [ 1686.354419][ T5888] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 1686.375976][ T5888] usb 6-1: device descriptor read/8, error -32 [ 1686.429211][T26125] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1686.600219][T26125] usb 4-1: Using ep0 maxpacket: 32 [ 1686.606966][ T5829] usbhid 3-1:0.0: can't add hid device: -71 [ 1686.628162][ T5829] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1686.632498][ T5888] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 1686.647283][T26125] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1686.675396][T26125] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1686.696555][T26125] usb 4-1: config 0 descriptor?? [ 1686.701568][ T5829] usb 3-1: USB disconnect, device number 98 [ 1686.712976][ T5888] usb 6-1: device descriptor read/8, error -32 [ 1686.835605][ T5888] usb usb6-port1: unable to enumerate USB device [ 1686.843824][T26125] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1687.080395][T27976] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5844'. [ 1687.144198][T27982] fuse: fd is not a fuse device [ 1687.392576][T26125] gspca_vc032x: reg_r err -110 [ 1687.414462][T26125] gspca_vc032x: I2c Bus Busy Wait 00 [ 1687.432053][T26125] gspca_vc032x: I2c Bus Busy Wait 00 [ 1687.441172][T26125] gspca_vc032x: I2c Bus Busy Wait 00 [ 1687.447042][T27985] sctp: [Deprecated]: syz.0.5845 (pid 27985) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1687.447042][T27985] Use struct sctp_sack_info instead [ 1688.458519][T26125] gspca_vc032x: I2c Bus Busy Wait 00 [ 1688.471624][T26125] gspca_vc032x: I2c Bus Busy Wait 00 [ 1688.488226][T26125] gspca_vc032x: I2c Bus Busy Wait 00 [ 1688.501312][T26125] gspca_vc032x: I2c Bus Busy Wait 00 [ 1688.509275][T26125] gspca_vc032x: I2c Bus Busy Wait 00 [ 1688.780316][T26125] gspca_vc032x: I2c Bus Busy Wait 00 [ 1688.786115][T26125] gspca_vc032x: I2c Bus Busy Wait 00 [ 1688.791970][T26125] gspca_vc032x: I2c Bus Busy Wait 00 [ 1688.797313][T26125] gspca_vc032x: I2c Bus Busy Wait 00 [ 1688.804579][T26125] gspca_vc032x: I2c Bus Busy Wait 00 [ 1688.809989][T26125] gspca_vc032x: I2c Bus Busy Wait 00 [ 1688.815471][T26125] gspca_vc032x: I2c Bus Busy Wait 00 [ 1688.821890][T26125] gspca_vc032x: I2c Bus Busy Wait 00 [ 1688.829901][T26125] gspca_vc032x: I2c Bus Busy Wait 00 [ 1688.835354][T26125] gspca_vc032x: I2c Bus Busy Wait 00 [ 1688.850128][T26125] gspca_vc032x: Unknown sensor... [ 1688.868474][T26125] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 1688.995276][ T30] audit: type=1400 audit(2000000094.830:2594): avc: denied { lock } for pid=27986 comm="syz.1.5846" path="socket:[110235]" dev="sockfs" ino=110235 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1689.222126][T28000] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5849'. [ 1689.258346][ T5888] usb 4-1: USB disconnect, device number 33 [ 1689.361308][T28002] netlink: 'syz.3.5850': attribute type 10 has an invalid length. [ 1689.438603][T28004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1689.472594][T28004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1689.480561][T26565] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1689.508398][T28002] team0: Device wg1 is of different type [ 1689.669298][T26565] usb 3-1: Using ep0 maxpacket: 32 [ 1689.686945][ T30] audit: type=1400 audit(2000000095.560:2595): avc: denied { bind } for pid=28010 comm="syz.3.5853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1689.709426][T26565] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1690.046954][T26565] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1690.178844][T26565] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1690.189758][T26565] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1690.219413][T26565] usb 3-1: config 0 descriptor?? [ 1690.288550][T28019] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1690.691263][ T30] audit: type=1400 audit(2000000096.495:2596): avc: denied { ioctl } for pid=28010 comm="syz.3.5853" path="socket:[109434]" dev="sockfs" ino=109434 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1691.085540][T26565] usb 3-1: can't set config #0, error -71 [ 1691.121457][T26565] usb 3-1: USB disconnect, device number 99 [ 1691.186082][T28037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5860'. [ 1691.203275][T28037] netlink: 7 bytes leftover after parsing attributes in process `syz.3.5860'. [ 1691.298040][T28038] sctp: [Deprecated]: syz.0.5858 (pid 28038) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1691.298040][T28038] Use struct sctp_sack_info instead [ 1692.308497][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1693.196739][T28043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5861'. [ 1694.033230][ T5829] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1694.041001][T26565] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1694.107352][T28063] netlink: 'syz.5.5863': attribute type 10 has an invalid length. [ 1694.115214][T28063] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5863'. [ 1694.214345][T26565] usb 4-1: Using ep0 maxpacket: 16 [ 1694.220530][ T5829] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1694.231129][ T5829] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1694.273500][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1694.321392][ T5829] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1694.394024][T28079] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5868'. [ 1694.521146][T26565] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1694.531859][T26565] usb 4-1: no configurations [ 1694.560836][T26565] usb 4-1: can't read configurations, error -22 [ 1694.576926][T28072] genirq: Flags mismatch irq 4. 00200000 (aio_iiro_16) vs. 00200080 (ttyS0) [ 1694.703808][T28089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5871'. [ 1694.891011][T28087] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5870'. [ 1694.931736][ T30] audit: type=1400 audit(2000000100.471:2597): avc: denied { getopt } for pid=28085 comm="syz.1.5870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1695.155117][T28095] sctp: [Deprecated]: syz.3.5872 (pid 28095) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1695.155117][T28095] Use struct sctp_sack_info instead [ 1696.917998][ T5829] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -71 [ 1696.939284][ T5829] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1696.967555][ T5829] stv0680 3-1:4.0: last error: 86, command = 0x78 [ 1696.997343][ T5829] usb 3-1: USB disconnect, device number 100 [ 1697.105538][T28100] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1697.485191][T26565] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1697.502320][T28123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1697.514318][T28123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1697.552547][T28126] vxcan1 speed is unknown, defaulting to 1000 [ 1697.598886][ T30] audit: type=1400 audit(2000000102.968:2598): avc: denied { create } for pid=28125 comm="syz.3.5883" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 1697.665883][T26565] usb 1-1: Using ep0 maxpacket: 8 [ 1697.679712][T26565] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1697.688882][T26565] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1697.712585][T26565] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1697.721443][T28126] lo speed is unknown, defaulting to 1000 [ 1697.848205][T26565] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1697.858700][T26565] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1697.874538][T26565] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1697.884441][T26565] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1697.926241][T28131] sctp: [Deprecated]: syz.2.5884 (pid 28131) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1697.926241][T28131] Use struct sctp_sack_info instead [ 1698.955551][T26565] usb 1-1: usb_control_msg returned -32 [ 1698.973239][T26565] usbtmc 1-1:16.0: can't read capabilities [ 1699.796144][T28137] CUSE: unknown device info "€" [ 1699.801087][T28137] CUSE: unknown device info "" [ 1699.806236][T28137] CUSE: unknown device info "" [ 1699.811402][T28137] CUSE: unknown device info "" [ 1699.818101][T28137] CUSE: unknown device info "+" [ 1699.823351][T28141] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=28141 comm=syz.2.5887 [ 1699.836166][T28137] CUSE: unknown device info "‚" [ 1699.842958][T28137] CUSE: unknown device info "" [ 1699.849425][T28137] CUSE: zero length info key specified [ 1699.859144][ T30] audit: type=1400 audit(2000000105.082:2599): avc: denied { listen } for pid=28140 comm="syz.2.5887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1700.112611][ T30] audit: type=1400 audit(2000000105.316:2600): avc: denied { append } for pid=28150 comm="syz.5.5890" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1700.566616][T28165] netlink: 'syz.5.5894': attribute type 4 has an invalid length. [ 1700.574458][T28165] netlink: 152 bytes leftover after parsing attributes in process `syz.5.5894'. [ 1700.583967][T28165] .`: renamed from bond0 [ 1700.591508][ T30] audit: type=1400 audit(2000000105.765:2601): avc: denied { execute } for pid=28162 comm="syz.5.5894" path="/dev/snd/pcmC0D0c" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 1700.785344][ T30] audit: type=1804 audit(2000000105.943:2602): pid=28172 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.5897" name="file0" dev="tmpfs" ino=2961 res=1 errno=0 [ 1701.073434][T12394] usb 1-1: USB disconnect, device number 45 [ 1701.559952][T28182] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28182 comm=syz.2.5901 [ 1701.656479][T28184] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1701.834495][ T5888] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1702.516600][ T5888] usb 3-1: device descriptor read/64, error -71 [ 1702.582732][ T5895] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1702.671870][ T30] audit: type=1804 audit(2000000107.711:2603): pid=28202 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.5908" name="file0" dev="tmpfs" ino=2978 res=1 errno=0 [ 1702.801580][ T5895] usb 4-1: device descriptor read/64, error -71 [ 1703.813570][ T5888] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1703.837323][T28210] overlayfs: failed to resolve './file0': -2 [ 1703.908413][ T5895] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1703.983181][ T5888] usb 3-1: device descriptor read/64, error -71 [ 1704.068728][ T5895] usb 4-1: device descriptor read/64, error -71 [ 1704.112011][ T5888] usb usb3-port1: attempt power cycle [ 1704.198072][ T5895] usb usb4-port1: attempt power cycle [ 1704.419239][T28230] kAFS: unable to lookup cell 'ÿ' [ 1704.483058][T28236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1704.484546][T28237] kAFS: unable to lookup cell '(,c¾Ì' [ 1704.491769][ T5888] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1704.511239][T28236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1704.539897][T28236] input: syz0 as /devices/virtual/input/input122 [ 1704.550668][ T5888] usb 3-1: device descriptor read/8, error -71 [ 1704.582147][ T5895] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1704.616152][ T5895] usb 4-1: device descriptor read/8, error -71 [ 1704.648393][T28230] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1704.670904][T28230] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1704.709146][ T30] audit: type=1400 audit(2000000109.610:2604): avc: denied { firmware_load } for pid=28223 comm="syz.0.5913" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1704.711441][T28230] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1704.818327][ T5888] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1704.870531][ T5895] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1704.917858][ T5895] usb 4-1: device descriptor read/8, error -71 [ 1705.042032][ T5895] usb usb4-port1: unable to enumerate USB device [ 1705.084420][ T5888] usb 3-1: device not accepting address 104, error -71 [ 1705.143127][ T5888] usb usb3-port1: unable to enumerate USB device [ 1705.469249][ T5888] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1705.889834][ T5888] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1706.319236][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1706.501070][ T5888] usb 3-1: Product: syz [ 1706.637663][ T5888] usb 3-1: Manufacturer: syz [ 1706.733485][ T5888] usb 3-1: SerialNumber: syz [ 1706.762782][ T5888] usb 3-1: config 0 descriptor?? [ 1707.015961][ T5888] usb 3-1: f81604_read: reg: 105 failed: -EPROTO [ 1707.031828][ T5888] f81604 3-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 1707.087280][ T5888] f81604 3-1:0.0: probe with driver f81604 failed with error -71 [ 1707.149056][ T5888] usb 3-1: USB disconnect, device number 105 [ 1707.471993][ T30] audit: type=1400 audit(2000000112.201:2605): avc: denied { mount } for pid=28306 comm="syz.5.5937" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1707.494800][ T30] audit: type=1400 audit(2000000112.201:2606): avc: denied { mounton } for pid=28306 comm="syz.5.5937" path="/456/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1707.518228][ T30] audit: type=1400 audit(2000000112.201:2607): avc: denied { unmount } for pid=28306 comm="syz.5.5937" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1707.593460][ T30] audit: type=1400 audit(2000000112.313:2608): avc: denied { mounton } for pid=28310 comm="syz.0.5939" path="/proc/1724/cgroup" dev="proc" ino=112147 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 1707.743695][ T30] audit: type=1400 audit(2000000112.453:2609): avc: denied { setattr } for pid=28320 comm="syz.2.5943" name="ptmx" dev="devtmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 1708.059726][ T30] audit: type=1804 audit(2000000112.753:2610): pid=28342 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.5952" name="/newroot/508/file0" dev="tmpfs" ino=2723 res=1 errno=0 [ 1708.167506][T28343] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1708.628806][T28347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5953'. [ 1708.995848][T28354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1709.013344][T28354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1709.253716][ T5888] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1709.703367][ T5888] usb 3-1: Using ep0 maxpacket: 32 [ 1709.738655][ T5888] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1709.761446][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1709.787711][ T5888] usb 3-1: config 0 descriptor?? [ 1709.909794][ T5888] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1710.472599][ T5888] gspca_vc032x: reg_r err -110 [ 1710.486955][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 1710.504446][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 1710.519997][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 1710.536579][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 1710.548511][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 1710.559266][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 1710.570065][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 1710.582187][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 1710.593582][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 1710.606693][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 1710.618229][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 1710.630206][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 1710.640618][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 1710.652413][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 1710.663479][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 1710.675231][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 1710.686279][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 1710.697752][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 1710.708725][ T5888] gspca_vc032x: Unknown sensor... [ 1710.723295][ T5888] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 1712.220080][ T5829] usb 3-1: USB disconnect, device number 106 [ 1712.298281][T28387] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5963'. [ 1712.620938][T28400] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1712.698722][T28399] xt_hashlimit: size too large, truncated to 1048576 [ 1712.913009][ T30] audit: type=1400 audit(2000000002.151:2611): avc: denied { accept } for pid=28389 comm="syz.5.5964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1713.289325][ T30] audit: type=1804 audit(2000000002.824:2612): pid=28406 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.5968" name="/newroot/464/file0" dev="tmpfs" ino=2495 res=1 errno=0 [ 1713.963216][ T6255] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1715.325914][ T6255] usb 3-1: Using ep0 maxpacket: 16 [ 1715.343560][ T6255] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1715.777550][ T6255] usb 3-1: no configurations [ 1715.782210][ T6255] usb 3-1: can't read configurations, error -22 [ 1716.181191][ T5888] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1716.340245][T28442] sd 0:0:1:0: device reset [ 1716.384307][ T5888] usb 1-1: Using ep0 maxpacket: 32 [ 1716.403513][ T5888] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1716.424115][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1716.452714][ T5888] usb 1-1: config 0 descriptor?? [ 1716.476250][ T30] audit: type=1400 audit(2000000005.808:2613): avc: denied { relabelfrom } for pid=28443 comm="syz.2.5978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1716.560525][ T30] audit: type=1400 audit(2000000005.808:2614): avc: denied { relabelto } for pid=28443 comm="syz.2.5978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1716.660338][ T5888] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1716.941268][T28451] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5979'. [ 1717.038455][T28452] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1717.468287][ T5888] gspca_vc032x: reg_r err -110 [ 1717.477313][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 1717.489252][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 1717.509520][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 1717.512396][T28451] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28451 comm=syz.2.5979 [ 1717.549561][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 1717.566126][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 1717.573191][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 1717.579662][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 1717.585652][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 1717.591414][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 1717.597327][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 1717.602747][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 1717.608676][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 1717.622657][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 1717.629379][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 1717.635919][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 1717.641393][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 1717.647255][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 1717.653558][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 1717.662677][ T5888] gspca_vc032x: Unknown sensor... [ 1717.670483][ T5888] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 1718.275007][T28463] sd 0:0:1:0: device reset [ 1718.428372][ T5829] usb 1-1: USB disconnect, device number 46 [ 1718.575697][ T5888] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1719.797675][ T5888] usb 3-1: Using ep0 maxpacket: 32 [ 1719.877135][ T5888] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1719.899991][ T30] audit: type=1804 audit(2000000009.007:2615): pid=28475 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.5986" name="/newroot/512/file0" dev="tmpfs" ino=2745 res=1 errno=0 [ 1719.900301][ T5888] usb 3-1: config 0 has no interface number 0 [ 1719.976741][ T5888] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1720.001412][ T5888] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1720.014730][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1720.026536][ T5888] usb 3-1: Product: syz [ 1720.030967][ T5888] usb 3-1: Manufacturer: syz [ 1720.038498][ T5888] usb 3-1: SerialNumber: syz [ 1720.099253][ T5888] usb 3-1: config 0 descriptor?? [ 1720.772270][ T5888] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1720.799670][ T5888] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1721.967982][T28465] input: syz0 as /devices/virtual/input/input123 [ 1722.127740][ T5888] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 1722.158449][ T5888] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 1722.461993][ T5888] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1722.501135][ T5888] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 1722.549776][ T5888] usb 3-1: USB disconnect, device number 109 [ 1722.730492][T28514] sctp: [Deprecated]: syz.0.5998 (pid 28514) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1722.730492][T28514] Use struct sctp_sack_info instead [ 1723.774900][T28518] sd 0:0:1:0: device reset [ 1724.992539][ T5895] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1725.189126][ T30] audit: type=1804 audit(2000000004.639:2616): pid=28527 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.6002" name="file0" dev="tmpfs" ino=3080 res=1 errno=0 [ 1725.246845][ T5895] usb 1-1: Using ep0 maxpacket: 16 [ 1725.264271][ T5895] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1725.275033][ T5895] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1725.291227][ T5895] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1725.300648][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1725.317070][ T5895] usb 1-1: Product: syz [ 1725.327163][ T5895] usb 1-1: Manufacturer: syz [ 1725.335411][ T5895] usb 1-1: SerialNumber: syz [ 1725.507598][T28538] vxcan1 speed is unknown, defaulting to 1000 [ 1725.587673][ T5895] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 1725.748028][ T5895] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1725.932868][T28542] syzkaller0: entered promiscuous mode [ 1725.938606][T28542] syzkaller0: entered allmulticast mode [ 1726.056780][T28538] lo speed is unknown, defaulting to 1000 [ 1726.069146][ T5895] usb 1-1: 2:1 : bogus bTerminalLink 6 [ 1726.413501][ T5895] usb 1-1: USB disconnect, device number 47 [ 1726.474626][T28553] netlink: 'syz.3.6010': attribute type 11 has an invalid length. [ 1726.485722][T28553] netlink: 'syz.3.6010': attribute type 23 has an invalid length. [ 1726.495677][T28553] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6010'. [ 1726.526155][T25877] udevd[25877]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1726.584916][T28555] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6010'. [ 1727.310083][ T5829] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1727.502677][ T5829] usb 4-1: Using ep0 maxpacket: 32 [ 1727.534128][ T5829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1727.582002][ T5829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1727.630263][ T5829] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1727.674391][ T5829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1727.718577][ T5829] usb 4-1: config 0 descriptor?? [ 1727.737743][ T5888] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1727.941532][ T5888] usb 1-1: Using ep0 maxpacket: 32 [ 1727.954885][ T30] audit: type=1804 audit(2000000007.221:2617): pid=28569 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.6014" name="/newroot/473/file0" dev="tmpfs" ino=2542 res=1 errno=0 [ 1727.991223][ T5888] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1728.001516][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1728.024080][ T5888] usb 1-1: config 0 descriptor?? [ 1728.093362][ T5888] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1728.387010][T28558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1728.410391][T28558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1728.448688][ T5829] usbhid 4-1:0.0: can't add hid device: -71 [ 1728.456584][ T5829] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1728.491607][ T5829] usb 4-1: USB disconnect, device number 40 [ 1728.735620][ T5888] gspca_vc032x: reg_r err -110 [ 1728.742750][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 1728.748130][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 1728.753540][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 1728.759170][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 1728.764611][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 1728.769939][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 1728.775718][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 1728.856008][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 1728.861948][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 1728.870220][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 1728.876306][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 1728.882127][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 1728.887708][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 1728.893393][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 1728.898698][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 1728.904320][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 1728.909616][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 1728.915256][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 1728.920561][ T5888] gspca_vc032x: Unknown sensor... [ 1728.926186][ T5888] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 1729.876908][T28596] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=28596 comm=syz.2.6024 [ 1729.898385][T28597] vxcan1 speed is unknown, defaulting to 1000 [ 1730.315204][T28597] lo speed is unknown, defaulting to 1000 [ 1730.393588][T26565] usb 1-1: USB disconnect, device number 48 [ 1730.408016][T28615] vxcan1 speed is unknown, defaulting to 1000 [ 1730.731067][ T5928] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1731.300766][ T5928] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1731.328655][ T5928] usb 4-1: config 63 has an invalid interface number: 66 but max is 0 [ 1731.344193][ T5928] usb 4-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1731.375662][ T5928] usb 4-1: config 63 has no interface number 0 [ 1731.399433][ T5928] usb 4-1: config 63 interface 66 has no altsetting 0 [ 1731.415743][T28615] lo speed is unknown, defaulting to 1000 [ 1731.429250][ T5928] usb 4-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1731.492565][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1731.531587][ T5928] usb 4-1: Product: syz [ 1731.545093][ T5928] usb 4-1: Manufacturer: syz [ 1731.572732][ T5928] usb 4-1: SerialNumber: syz [ 1731.974528][T28611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1732.095667][T28611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1732.135691][ T5928] uvcvideo 4-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 1732.160295][ T5928] uvcvideo 4-1:63.66: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 1732.174290][ T5928] uvcvideo 4-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 1732.184627][ T5928] uvcvideo 4-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 1732.195268][ T5928] uvcvideo 4-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 1732.205796][ T5928] uvcvideo 4-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 1732.232548][ T5928] uvcvideo 4-1:63.66: No streaming interface found for terminal 29. [ 1732.261359][ T5928] uvcvideo 4-1:63.66: Entity type for entity Output 32773 was not initialized! [ 1732.331866][ T5928] usb 4-1: USB disconnect, device number 41 [ 1732.479029][T28634] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1732.687181][T28637] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1732.743820][T28637] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6031'. [ 1733.947593][T28659] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1734.505098][ T5928] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1734.681786][ T5928] usb 4-1: Using ep0 maxpacket: 32 [ 1734.691511][T28672] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1734.768295][ T5928] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1734.779403][T28672] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6040'. [ 1734.999515][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1735.247533][ T5928] usb 4-1: config 0 descriptor?? [ 1735.487886][ T5928] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1735.947176][T28695] netlink: 'syz.0.6046': attribute type 1 has an invalid length. [ 1736.029407][T28699] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1736.086719][ T5928] gspca_vc032x: reg_r err -110 [ 1736.093650][ T5928] gspca_vc032x: I2c Bus Busy Wait 00 [ 1736.106991][ T5928] gspca_vc032x: I2c Bus Busy Wait 00 [ 1736.119108][ T5928] gspca_vc032x: I2c Bus Busy Wait 00 [ 1736.124743][ T5928] gspca_vc032x: I2c Bus Busy Wait 00 [ 1736.135090][ T5928] gspca_vc032x: I2c Bus Busy Wait 00 [ 1736.156730][ T5928] gspca_vc032x: I2c Bus Busy Wait 00 [ 1736.164985][ T5928] gspca_vc032x: I2c Bus Busy Wait 00 [ 1736.172547][ T5928] gspca_vc032x: I2c Bus Busy Wait 00 [ 1736.192224][ T5928] gspca_vc032x: I2c Bus Busy Wait 00 [ 1736.204104][ T5928] gspca_vc032x: I2c Bus Busy Wait 00 [ 1736.255335][ T5928] gspca_vc032x: I2c Bus Busy Wait 00 [ 1736.256214][T28704] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1736.452775][ T5928] gspca_vc032x: I2c Bus Busy Wait 00 [ 1736.479115][ T5928] gspca_vc032x: I2c Bus Busy Wait 00 [ 1736.503505][ T5928] gspca_vc032x: I2c Bus Busy Wait 00 [ 1736.527375][ T5928] gspca_vc032x: I2c Bus Busy Wait 00 [ 1736.542355][ T5928] gspca_vc032x: I2c Bus Busy Wait 00 [ 1736.562415][ T5928] gspca_vc032x: I2c Bus Busy Wait 00 [ 1736.570962][ T5928] gspca_vc032x: I2c Bus Busy Wait 00 [ 1736.576432][ T5928] gspca_vc032x: Unknown sensor... [ 1736.582786][ T5928] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 1736.742428][T28709] vxcan1 speed is unknown, defaulting to 1000 [ 1737.235961][T26565] usb 4-1: USB disconnect, device number 42 [ 1737.354396][T28709] lo speed is unknown, defaulting to 1000 [ 1739.162407][T28750] netlink: 'syz.2.6057': attribute type 1 has an invalid length. [ 1740.525209][T12394] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1740.694727][T12394] usb 4-1: Using ep0 maxpacket: 32 [ 1740.713133][T12394] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1740.753374][T12394] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1740.792384][T12394] usb 4-1: config 0 descriptor?? [ 1741.056258][T12394] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1741.443039][ C0] ------------[ cut here ]------------ [ 1741.450721][ C0] ODEBUG: free active (active state 0) object: ffff88803446e890 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 [ 1741.463616][ C0] WARNING: lib/debugobjects.c:629 at debug_print_object+0x18e/0x2a0, CPU#0: swapper/0/0 [ 1741.473346][ C0] Modules linked in: [ 1741.479424][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1741.489939][ C0] Tainted: [L]=SOFTLOCKUP [ 1741.494244][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1741.504328][ C0] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 1741.510138][ C0] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 32 60 e4 0b 41 56 48 8b 14 dd c0 24 1c 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 6c 0d da 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 1741.529750][ C0] RSP: 0018:ffffc90000007a28 EFLAGS: 00010246 [ 1741.535796][ C0] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 1741.543757][ C0] RDX: ffffffff8c1c2400 RSI: ffffffff8c1c2020 RDI: ffffffff90e66da0 [ 1741.551718][ C0] RBP: 0000000000000001 R08: ffff88803446e890 R09: ffffffff8bb2c6e0 [ 1741.559663][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1c2020 [ 1741.567630][ C0] R13: ffffffff8bb2c720 R14: ffffffff8a8333d0 R15: ffffc90000007b28 [ 1741.575633][ C0] FS: 0000000000000000(0000) GS:ffff8881242e7000(0000) knlGS:0000000000000000 [ 1741.584573][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1741.591144][ C0] CR2: 0000200000b64030 CR3: 00000000681bd000 CR4: 00000000003526f0 [ 1741.599115][ C0] Call Trace: [ 1741.602371][ C0] [ 1741.605203][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1741.610820][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1741.616620][ C0] debug_check_no_obj_freed+0x4da/0x630 [ 1741.622148][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1741.628208][ C0] ? mark_held_locks+0x40/0x70 [ 1741.632950][ C0] ? kasan_quarantine_put+0x104/0x240 [ 1741.638313][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1741.643508][ C0] ? rose_timer_expiry+0x53f/0x630 [ 1741.648610][ C0] ? rose_timer_expiry+0x4c0/0x630 [ 1741.653702][ C0] kfree+0x3d0/0x6c0 [ 1741.657590][ C0] rose_timer_expiry+0x53f/0x630 [ 1741.662521][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1741.667970][ C0] call_timer_fn+0x19a/0x640 [ 1741.672538][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1741.677631][ C0] ? __run_timers+0x74f/0xaf0 [ 1741.682308][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1741.687755][ C0] ? rcu_is_watching+0x12/0xc0 [ 1741.692521][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1741.697963][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1741.703436][ C0] __run_timers+0x75f/0xaf0 [ 1741.707934][ C0] ? __pfx___run_timers+0x10/0x10 [ 1741.712963][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 1741.717977][ C0] run_timer_base+0x114/0x190 [ 1741.722666][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 1741.727840][ C0] ? rcu_is_watching+0x12/0xc0 [ 1741.732606][ C0] run_timer_softirq+0x1a/0x50 [ 1741.737351][ C0] handle_softirqs+0x1ea/0xa00 [ 1741.742103][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1741.747383][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1741.752215][ C0] ? __hrtimer_rearm_deferred+0x9b/0x740 [ 1741.757844][ C0] __irq_exit_rcu+0x162/0x210 [ 1741.762512][ C0] irq_exit_rcu+0x9/0x30 [ 1741.766754][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1741.772370][ C0] [ 1741.775288][ C0] [ 1741.778195][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1741.784151][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1741.789790][ C0] Code: a6 87 02 e9 83 42 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 50 12 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1741.809388][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000242 [ 1741.815439][ C0] RAX: 0000000008b7d2a1 RBX: ffffffff8e4955c0 RCX: ffffffff8b994045 [ 1741.823400][ C0] RDX: 0000000000000000 RSI: ffffffff8df562a9 RDI: ffffffff8c1c1300 [ 1741.831415][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170867b5 [ 1741.839405][ C0] R10: ffff8880b8433dab R11: 0000000000000000 R12: 0000000000000000 [ 1741.847366][ C0] R13: fffffbfff1c92ab8 R14: 0000000000000000 R15: ffffffff90dbe750 [ 1741.855342][ C0] ? ct_kernel_exit+0x125/0x180 [ 1741.860206][ C0] default_idle+0x9/0x10 [ 1741.864428][ C0] default_idle_call+0x6c/0xb0 [ 1741.869170][ C0] do_idle+0x464/0x590 [ 1741.873250][ C0] ? __pfx_do_idle+0x10/0x10 [ 1741.877826][ C0] cpu_startup_entry+0x4f/0x60 [ 1741.882593][ C0] rest_init+0x251/0x260 [ 1741.886817][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1741.892357][ C0] start_kernel+0x484/0x490 [ 1741.897106][ C0] x86_64_start_reservations+0x24/0x30 [ 1741.902552][ C0] x86_64_start_kernel+0x12b/0x130 [ 1741.907659][ C0] common_startup_64+0x13e/0x148 [ 1741.912595][ C0] [ 1741.915616][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1741.922887][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1741.933368][ C0] Tainted: [L]=SOFTLOCKUP [ 1741.937665][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1741.947705][ C0] Call Trace: [ 1741.950962][ C0] [ 1741.953785][ C0] dump_stack_lvl+0x100/0x190 [ 1741.958444][ C0] vpanic+0x552/0x970 [ 1741.962404][ C0] ? __pfx_vpanic+0x10/0x10 [ 1741.966885][ C0] panic+0xd1/0xe0 [ 1741.970580][ C0] ? __pfx_panic+0x10/0x10 [ 1741.974984][ C0] ? check_panic_on_warn+0x1f/0x90 [ 1741.980089][ C0] check_panic_on_warn.cold+0x19/0x34 [ 1741.985444][ C0] ? debug_print_object+0x18e/0x2a0 [ 1741.990629][ C0] __warn.cold+0x191/0x328 [ 1741.995023][ C0] __report_bug+0x296/0x3d0 [ 1741.999509][ C0] ? debug_print_object+0x18e/0x2a0 [ 1742.004683][ C0] ? __pfx___report_bug+0x10/0x10 [ 1742.009692][ C0] ? rose_timer_expiry+0x537/0x630 [ 1742.014797][ C0] ? stack_trace_save+0x8e/0xc0 [ 1742.019626][ C0] report_bug_entry+0xe1/0x290 [ 1742.024826][ C0] ? debug_print_object+0x19b/0x2a0 [ 1742.030295][ C0] handle_bug+0x1cd/0x2a0 [ 1742.034625][ C0] exc_invalid_op+0x17/0x50 [ 1742.039113][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1742.043944][ C0] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 1742.049727][ C0] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 32 60 e4 0b 41 56 48 8b 14 dd c0 24 1c 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 6c 0d da 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 1742.069308][ C0] RSP: 0018:ffffc90000007a28 EFLAGS: 00010246 [ 1742.075349][ C0] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 1742.083293][ C0] RDX: ffffffff8c1c2400 RSI: ffffffff8c1c2020 RDI: ffffffff90e66da0 [ 1742.091239][ C0] RBP: 0000000000000001 R08: ffff88803446e890 R09: ffffffff8bb2c6e0 [ 1742.099186][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1c2020 [ 1742.107130][ C0] R13: ffffffff8bb2c720 R14: ffffffff8a8333d0 R15: ffffc90000007b28 [ 1742.115076][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1742.120698][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1742.126304][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1742.132105][ C0] debug_check_no_obj_freed+0x4da/0x630 [ 1742.137635][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1742.143691][ C0] ? mark_held_locks+0x40/0x70 [ 1742.148441][ C0] ? kasan_quarantine_put+0x104/0x240 [ 1742.153829][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1742.159022][ C0] ? rose_timer_expiry+0x53f/0x630 [ 1742.164132][ C0] ? rose_timer_expiry+0x4c0/0x630 [ 1742.169221][ C0] kfree+0x3d0/0x6c0 [ 1742.173100][ C0] rose_timer_expiry+0x53f/0x630 [ 1742.178020][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1742.183459][ C0] call_timer_fn+0x19a/0x640 [ 1742.188036][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1742.193125][ C0] ? __run_timers+0x74f/0xaf0 [ 1742.197777][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1742.203231][ C0] ? rcu_is_watching+0x12/0xc0 [ 1742.207986][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1742.213436][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1742.218883][ C0] __run_timers+0x75f/0xaf0 [ 1742.223555][ C0] ? __pfx___run_timers+0x10/0x10 [ 1742.228563][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 1742.233859][ C0] run_timer_base+0x114/0x190 [ 1742.238534][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 1742.243723][ C0] ? rcu_is_watching+0x12/0xc0 [ 1742.248481][ C0] run_timer_softirq+0x1a/0x50 [ 1742.253242][ C0] handle_softirqs+0x1ea/0xa00 [ 1742.258004][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1742.263271][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1742.268103][ C0] ? __hrtimer_rearm_deferred+0x9b/0x740 [ 1742.273719][ C0] __irq_exit_rcu+0x162/0x210 [ 1742.278377][ C0] irq_exit_rcu+0x9/0x30 [ 1742.282606][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1742.288232][ C0] [ 1742.291138][ C0] [ 1742.294045][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1742.300016][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1742.305632][ C0] Code: a6 87 02 e9 83 42 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 50 12 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1742.325229][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000242 [ 1742.331288][ C0] RAX: 0000000008b7d2a1 RBX: ffffffff8e4955c0 RCX: ffffffff8b994045 [ 1742.339236][ C0] RDX: 0000000000000000 RSI: ffffffff8df562a9 RDI: ffffffff8c1c1300 [ 1742.347188][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170867b5 [ 1742.355135][ C0] R10: ffff8880b8433dab R11: 0000000000000000 R12: 0000000000000000 [ 1742.363083][ C0] R13: fffffbfff1c92ab8 R14: 0000000000000000 R15: ffffffff90dbe750 [ 1742.371034][ C0] ? ct_kernel_exit+0x125/0x180 [ 1742.375865][ C0] default_idle+0x9/0x10 [ 1742.380085][ C0] default_idle_call+0x6c/0xb0 [ 1742.384838][ C0] do_idle+0x464/0x590 [ 1742.388888][ C0] ? __pfx_do_idle+0x10/0x10 [ 1742.393463][ C0] cpu_startup_entry+0x4f/0x60 [ 1742.398204][ C0] rest_init+0x251/0x260 [ 1742.402429][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1742.407958][ C0] start_kernel+0x484/0x490 [ 1742.412446][ C0] x86_64_start_reservations+0x24/0x30 [ 1742.418696][ C0] x86_64_start_kernel+0x12b/0x130 [ 1742.423829][ C0] common_startup_64+0x13e/0x148 [ 1742.428768][ C0] [ 1742.432160][ C0] Kernel Offset: disabled [ 1742.436465][ C0] Rebooting in 86400 seconds..