last executing test programs: 3m11.472665916s ago: executing program 2 (id=786): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x8010, 0xffffffffffffffff, 0x2d75000) mlockall(0x5) ioctl$sock_x25_SIOCDELRT(r0, 0x890c, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0xffffffffffffffff}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000280), r3) getsockname$packet(r3, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYRES16=r4, @ANYRES16=r3, @ANYBLOB="090200000000000000000100000008000600ac1414bb08000b00", @ANYBLOB="2f87998525d716314defd39b6669cde8fd633b245c23d0277defc0f32d162b689424f7babcef3c884155bc288efe1ba929340c8df8730e66ea14b29b82360b44188d33cfce8bce463de5f299098b13b71111939468a92a7b24bb0273312453335d31a945cced6018455734e027a0d0edc5ee91254bc361aaabd3ba4fb57c34580044c6b04463007b8755f352922aafcc53fe7f69f1c2d9812ba3cbc48ede68713d0093258b9c21bf7d73ab04e2354ee713e7e07586afd02e6758b85a0813e49b", @ANYBLOB="06000a004e200000f3da7601c4223a730042cf18e53fc93f5978b619173e930a92f2408f1245b4e6b9cdb1"], 0x2c}, 0x1, 0x0, 0x0, 0x4008080}, 0x4000080) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xf0) 3m11.275939542s ago: executing program 2 (id=787): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000100001002abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8111000000000000140003006272696467655f736c6176655f3600001c0016801800018414000b0000000000000500"/56], 0x50}}, 0x0) openat$snapshot(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002340)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$key(0xf, 0x3, 0x2) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000000080)={[{@quota}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x37]}}]}) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002480)={{}, &(0x7f0000002400), &(0x7f0000002440)}, 0x20) read$FUSE(r6, &(0x7f0000000300)={0x2020}, 0x2020) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000005c0)={r5, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r7 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88000) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001280)={r4, 0x200, {0x2a12, 0x80010000, 0x0, 0x2, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) 3m10.158078495s ago: executing program 2 (id=791): r0 = dup(0xffffffffffffffff) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500), 0x800, 0x0) timer_create(0x5, &(0x7f0000533fa0)={0x0, 0x10021, 0x1}, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) 3m8.691865274s ago: executing program 2 (id=794): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x20302, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x3) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000240), 0x4) clock_adjtime(0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000f80)=@ipv6_newnexthop={0x98, 0x68, 0xd16, 0x70bd2c, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x2}, [@NHA_GROUP={0x2c, 0x2, [{0x1, 0x40}, {0x2, 0xbb}, {0x4, 0x80}, {0x2, 0x5}, {0x2, 0x2}]}, @NHA_OIF={0x8}, @NHA_GROUP={0x4c, 0x2, [{0x1, 0x4}, {0x2, 0x8}, {0x0, 0x1}, {0x1, 0x40}, {0x1, 0xfd}, {0x0, 0x4}, {0x0, 0xd6}, {0x2, 0x4}, {0x1, 0x7}]}]}, 0x98}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x301}, {0xfffffffd, 0x80000}]}}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1142, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000440), 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 3m4.169855966s ago: executing program 2 (id=806): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) lseek(0xffffffffffffffff, 0xae7d, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000dd0000000a00000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000a42d3c37d01843ea", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x18, 0x8001, 0x0, 0x13b, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000019140)={0xa, 0x4e24, 0x0, @empty}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r6, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) write$FUSE_BMAP(r3, &(0x7f0000000180)={0x18}, 0x18) timer_gettime(0x0, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@access_uid}]}}) 3m1.779113094s ago: executing program 2 (id=814): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [], 0x6b}}) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xa16, 0x5, 0xffff, 0x400e0a, 0x6, "203c5e0000ff765e000080fffffffffffffff2", 0x8, 0x15}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xff) r2 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850", 0x4, 0xfffffffffffffffe) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_FLOW_MAX_RATE={0xfffffffffffffd87, 0x7, 0x3}]}}]}, 0x48}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000000)={'dummy0\x00', @random="e80300001000"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r7, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'gretap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000100001040000", @ANYRES32=0x0, @ANYRES32=r9], 0x4c}}, 0x40000) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) dup(r10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 2m46.807560281s ago: executing program 32 (id=814): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [], 0x6b}}) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xa16, 0x5, 0xffff, 0x400e0a, 0x6, "203c5e0000ff765e000080fffffffffffffff2", 0x8, 0x15}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xff) r2 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850", 0x4, 0xfffffffffffffffe) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_FLOW_MAX_RATE={0xfffffffffffffd87, 0x7, 0x3}]}}]}, 0x48}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000000)={'dummy0\x00', @random="e80300001000"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r7, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'gretap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000100001040000", @ANYRES32=0x0, @ANYRES32=r9], 0x4c}}, 0x40000) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) dup(r10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 10.913891891s ago: executing program 1 (id=1355): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x80c, 0x0, &(0x7f0000000180)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, 0x0, 0x0) write(r1, &(0x7f0000000340), 0x11000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x54a0feee7272d01c}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), r1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x80, 0x700, 0x54b, 0x29d7, {{0x23, 0x4, 0x2, 0x10, 0x8c, 0x64, 0x0, 0x23, 0x4, 0x0, @remote, @multicast2, {[@generic={0x82, 0x7, "acfacc144b"}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xb, 0xe5, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @timestamp_addr={0x44, 0x2c, 0xac, 0x1, 0x6, [{@remote, 0x3}, {@loopback, 0x3}, {@remote, 0x80000000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xd}, {@multicast2, 0x7fffffff}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0xc, 0x2, [{0x2, 0x6, "fa4987a3"}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x1f, 0x31, [@dev={0xac, 0x14, 0x14, 0x11}, @private=0xa010101, @empty, @local, @multicast2, @multicast2, @remote]}]}}}}}) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00082abd7000fedbdf250200000005000300880000000400050008000b00", @ANYRES32=r6, @ANYBLOB='\a\x00\x00\x00', @ANYRES32=r6, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x5e14e4cf0c7a9bb4}, 0x44081) sendmsg$netlink(r4, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007a000106000000004ec0000007"], 0x18}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) io_uring_setup(0x21a4, &(0x7f0000000000)={0x0, 0x603f, 0x10, 0x1, 0x11cb}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) ppoll(&(0x7f0000000040)=[{r10, 0xc5cb}], 0x1, 0x0, 0x0, 0x0) close(r9) landlock_create_ruleset(&(0x7f0000000040)={0xc015, 0x2}, 0x18, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r11, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r12 = dup(r11) write$FUSE_BMAP(r12, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r12, &(0x7f0000000300)=ANY=[@ANYRESOCT=r5], 0xb0) 10.907107786s ago: executing program 5 (id=1357): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0xfc, 0xe1, 0x0, 0x6, 0xd9, 0x6, 0x1, 0xfb, 0x8, 0xc, 0x0, 0xfd, 0x40, 0x1, 0x3}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x8000000400007c, 0x0, 0x8, 0x0, 0x4, 0x0, 0x8005], 0x1, 0x3c4210}) mount$fuse(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x4, 0x0, &(0x7f00008feff0)={0x0, 0x80}}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x8, 0x889, {}, 0x1119dff, 0xffffffff7fffffff, 0xcd41}}}, 0x90) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) r4 = syz_open_dev$evdev(&(0x7f0000000140), 0x20000, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0x1, 0x4}, 0x6) ioctl$EVIOCGLED(r4, 0x80284504, &(0x7f0000000200)=""/58) ioctl$KVM_RUN(r2, 0xae80, 0x0) fsopen(&(0x7f0000000300)='bfs\x00', 0x1) 9.816701644s ago: executing program 0 (id=1360): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) io_uring_enter(0xffffffffffffffff, 0x6e2, 0x600, 0x1, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100}) sendmsg$inet(r1, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1c00000000000000000000000800", @ANYRES32=0x0], 0x38}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) open(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000004c00)=""/102367, 0x18fdf) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/cgroup.procs\x00', 0x2, 0x128) io_setup(0x9, &(0x7f0000001d00)=0x0) io_submit(r7, 0x1, &(0x7f00000000c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x8, r6, &(0x7f0000000100)="331e76", 0x3, 0x7, 0x0, 0x2}]) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 9.370145533s ago: executing program 5 (id=1361): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x20302, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x3) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) clock_adjtime(0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 8.967495939s ago: executing program 1 (id=1362): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) lseek(r0, 0x84b0, 0x1) socket(0x10, 0x1, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001dc00)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x50d0, &(0x7f0000000000)={0x0, 0xfffffffd, 0x2, 0x2, 0x332}, &(0x7f0000000100), &(0x7f0000ff4000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x62102) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) mount(&(0x7f0000000180)=@nullb, 0x0, &(0x7f0000000040)='befs\x00', 0x0, 0x0) socket(0x2, 0x80805, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000380)=@in6={0x2, 0x4e22, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x4000000) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 7.953880552s ago: executing program 4 (id=1364): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r3 = socket(0x200000100000011, 0x3, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x1b, "5660010000000000000005000000ed5100000000000000010000000000007e00"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000180)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) close_range(r3, r5, 0x0) sendmsg$inet6(r3, 0x0, 0x1) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0}, 0x300440f1) setsockopt$sock_attach_bpf(r6, 0x1, 0x12, &(0x7f00000007c0), 0x29) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000580)=ANY=[@ANYBLOB="0180c200000050a245d5cde086dd65cb87b40008cc4c3fc0c6e319bd19d97a682b2bff00000000000000000000000000000000ff02000000000000b47bea1a0000000187000400f76b0400"], 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r7, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0x1, 0x2, 0x5, 0x722, 0x13, 0x7, 0x7f, 0x3f, 0xb763599953cb091d, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) fsopen(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000580)='.\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000000)={[{@upperdir, 0x5c}]}) socket$alg(0x26, 0x5, 0x0) 7.474195459s ago: executing program 3 (id=1365): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x5, &(0x7f0000000200)={0x77359400}, 0x1, 0x8}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 7.261092262s ago: executing program 1 (id=1366): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x5) eventfd(0x3) pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)='!', 0x1}], 0x1, 0x400003, 0x800004, 0x7) lseek(0xffffffffffffffff, 0xe, 0x3) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000002c0)=[@op={0x18}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x1}], 0x48}], 0x1, 0x0) setsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f0000000280)=0x1, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_IRQFD(r1, 0x4020ae76, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2, 0x2, 0x2, r2}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x2, 0x1, r2}) 6.685657615s ago: executing program 0 (id=1367): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e00000004000000040000000a00000004000000", @ANYRES32, @ANYBLOB="000000000000000000000000afd4b98e00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x3f) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@map=0x1, 0x7, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x3, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$vga_arbiter(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='trylock none'], 0xd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x2, 0xc0, 0x80000, {r6, r7/1000+10000}, {r8, r9/1000+60000}, {0x0, 0x1, 0x1}, 0x1, @can={{0x0, 0x0, 0x0, 0x1}, 0x4, 0x2, 0x0, 0x0, "8117061de741aae9"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000851}, 0x50) read$msr(r5, &(0x7f0000004300)=""/102400, 0x19000) 6.42374067s ago: executing program 4 (id=1368): connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000280)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) (async) r0 = syz_usb_connect(0x2, 0x68, &(0x7f0000000600)=ANY=[], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = syz_clone3(&(0x7f00000001c0)={0x40200, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x38}, &(0x7f00000000c0)=""/120, 0x78, &(0x7f0000000140)=""/3, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x6}, 0x58) (async) r2 = syz_io_uring_setup(0x23a, &(0x7f0000000480)={0x0, 0xa101, 0x0, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000002280)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffffffffdd7, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'veth1_to_hsr\x00'}}}) (async) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x5) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000002c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20000045}, 0x4008051) (async) prlimit64(0x0, 0xe, 0x0, 0x0) 6.362233786s ago: executing program 3 (id=1369): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x80800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) capset(&(0x7f0000000000)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000040)={0x0, 0x6c7, 0x0, 0x8a, 0x7, 0x40}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x1ff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) r6 = syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x200783) ioctl$NBD_SET_BLKSIZE(r6, 0xab01, 0x5) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r5, 0x0, 0x0, 0x800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000389000/0x4000)=nil) syz_open_dev$video4linux(&(0x7f0000000c80), 0x200007, 0x8482) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) 6.249998552s ago: executing program 5 (id=1370): r0 = syz_open_dev$swradio(&(0x7f0000000100), 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000140)={0x7fffffff, 0x5, 0xf0d}) (fail_nth: 1) 5.546006822s ago: executing program 5 (id=1371): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000000025ba660eda3ba1634381456b4acb52da70e7342f1c3f202bdac2df53fb49940edd9ea5fbe2b7106234ad28a144d9fb635ad9aace9fad85096edfd9b493e72ec97caeac983c8b38a67baa43f17e11a0614cf6eacca03df1fbc0fe237f0eba6c6e980a0b83181fee575b818124d29560632fd1e95c4ec8f6ef458c98", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r2, 0x0, 0x0}, 0x20) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r3, 0x890c, &(0x7f00000013c0)={0x1, @null, @bpq0, 0x42, 'syz0\x00', @null, 0x5, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 5.149044799s ago: executing program 5 (id=1372): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r3 = socket(0x200000100000011, 0x3, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x38}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32, @ANYBLOB="003000000000000014001a80100004800c"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x1b, "5660010000000000000005000000ed5100000000000000010000000000007e00", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000180)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r7}) close_range(r3, r7, 0x0) sendmsg$inet6(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0xa, 0x4e24, 0xfffff72e, @private1, 0xfffffe01}, 0x1c, &(0x7f0000000140), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="10000000290000003e000000090000004c0000002900000036000000290600000000000007300000000102c5031d9400000000000002000000000000000700000000000000010000000000008002000000000000000400000000009a6674ed8b45200105b35067be8a0f06ba8f7f880f57779444cd6788bd2cd1f105e10adab0e8e9e23ea379d4cc5226f26d03e0aa15531b5a5034a21b4cdb5ca69e57f546c72b82955d37780f35d59c"], 0x5c}, 0x1) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0}, 0x300440f1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x12, &(0x7f00000007c0), 0x29) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r8, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r8, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x3, 0xdd9f83, 0x1, 0x9, 0x1, 0x2, 0x5, 0x722, 0x13, 0x7, 0x7f, 0x3f, 0xb763599953cb0905, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 4.841803072s ago: executing program 1 (id=1373): socket$unix(0x1, 0x2, 0x0) r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf668118643c1d831, 0x110, r0, 0x0) syz_io_uring_setup(0x33da, &(0x7f0000000280)={0x0, 0x2463, 0x4, 0x2, 0x401b4, 0x0, r0}, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000002, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0xfdef) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYRES32], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/sockstat\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x200000, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000500)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r6, 0x55555555}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000340), &(0x7f00000000c0)=[r7], &(0x7f0000000180), 0x0, 0xff}) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) r10 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r10, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r11, 0x7ff}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r9, 0x45809000) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r9, 0x4068aea3, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) 4.719160825s ago: executing program 0 (id=1374): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1) 4.662546942s ago: executing program 0 (id=1375): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, 0x0, 0x0) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="270e28bd70000000000004070200"], 0x14}, 0x1, 0x40030000000000}, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="018d85ce4707cefb5340380000e703000e00000000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fdffffff00"/28], 0x50) r3 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x6, 0x5, 0x2, 0x0, 0x9, "0000004c5b76df7300", "00004702", "0300", '\x00', ["fdffffff84a438dfc5d5c010", "1b0a1c0000000000001d0d01", "0000efffffffff3c8600"]}) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x5, 0x0, 0x3, 0x1000006, 'U\x00', "1575a859", "0725eade", "00000100", ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740), 0x0, 0xffffd6c0, 0xffffffffffffffff, 0x0, 0x20}, 0x38) r5 = socket(0x10, 0x2, 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) pread64(r5, &(0x7f00000003c0)=""/203, 0xcb, 0x9) io_submit(r6, 0x0, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f00000000c0)={0x18, 0x0, {0x4, @multicast, 'bond0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r7, 0x80047453, &(0x7f00000002c0)={0x18, 0x4000000, {0x4, @remote, 'erspan0\x00'}}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) io_uring_enter(0xffffffffffffffff, 0x6e2, 0x600, 0x8e, 0x0, 0x0) 4.373971406s ago: executing program 3 (id=1376): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000180)={0x2020}, 0x2024) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents(r4, 0x0, 0x0) (async) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x2) (async) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x44014, &(0x7f0000000180)={0x11, 0x1, r2, 0x1, 0x7, 0x6, @broadcast}, 0x14) 4.094053556s ago: executing program 3 (id=1377): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xcc657405ba8b63ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) r3 = eventfd2(0x0, 0x0) writev(r3, 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x8100, 0x31) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x216822a75a8bdd29}, 0x14}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) 3.796573445s ago: executing program 0 (id=1378): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r6) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000040)='lY', 0x2}], 0x1) sendmsg$IEEE802154_LLSEC_DEL_KEY(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x30, r7, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xc4}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x48004) r9 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f0000000240)={0x800, 0x8001, 0xbb9, 0x7, 0xb7}) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x1}]}) connect$unix(r9, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e21}, 0x6e) close_range(r10, 0xffffffffffffffff, 0x600000000000000) 3.325538751s ago: executing program 4 (id=1379): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x3d}) 3.275187611s ago: executing program 4 (id=1380): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x80000018}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x10000, 0x1, 0x8000000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x14, r4, 0x300, 0x70bd27, 0x25dfdbfc}, 0x14}}, 0x0) epoll_create1(0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x400c044}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) setsockopt$inet_tcp_int(r7, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r7, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r7, &(0x7f0000004980), 0x0, 0x20008000) setsockopt$inet_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000380)={0x20, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x470, 0x3}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x24004084}, 0x600008b1) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) 3.181982609s ago: executing program 3 (id=1381): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0xfffffffffffffdf1) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) r3 = syz_open_dev$vbi(0x0, 0x0, 0x2) r4 = openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r4, 0x4004510d, &(0x7f0000000000)) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x4) sendmsg$BATADV_CMD_SET_VLAN(r6, &(0x7f0000000500)={&(0x7f0000000240), 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xe}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40801}, 0x200008d4) writev(r6, &(0x7f0000000300)=[{&(0x7f00000003c0)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000000224e0000", 0x58}], 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008600)={0x2c, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x15}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0xfffffffffffffcc0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae", @ANYRESOCT=r3, @ANYRESHEX=r3], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x4000) recvmmsg(r5, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x0, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r9, r8, &(0x7f0000002080)=0x64, 0x21c) 2.287787394s ago: executing program 0 (id=1382): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x20302, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x3) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000240), 0x4) clock_adjtime(0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x301}, {0xfffffffd, 0x80000}]}}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1142, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000440), 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_usb_connect(0x0, 0x6ae, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xe2, 0x48, 0x3c, 0x10, 0x12d1, 0x142a, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69c, 0x4, 0x7, 0x2, 0x50, 0x0, [{{0x9, 0x4, 0x49, 0x1, 0x2, 0x89, 0x15, 0xda, 0xfa, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "c72706e9df51"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x5b7, 0x8, 0x216, 0x36}, {0x6, 0x24, 0x1a, 0x8001, 0x10}, [@mdlm_detail={0x9, 0x24, 0x13, 0x7, "0a0c9b9d5c"}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x9}, @mbim={0xc, 0x24, 0x1b, 0x5, 0x200, 0x9, 0x7, 0x7, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0x88, 0x1, 0xc9, 0x7}, @dmm={0x7, 0x24, 0x14, 0x8, 0x5}, @obex={0x5}]}], [{{0x9, 0x5, 0xa, 0x3, 0x200, 0x1, 0xe, 0xb, [@generic={0x99, 0x7, "d8a83b0a4c5d4fed8acc3b5039aa95b5a9ab96bbf2dec858884f7696d5d07bf351591c685b3fd9d3a674f26724bdbc97c3695b9d7c6b20a46bb54c9a9089e933ac3b1248a4c8f387342323e56f8eab1c51d5458302ac9bd98886e9b51b30a176869036d779632dab8c65bb374da654d5570794bd6629dec6f15514c148e2e30102e2d67451154edffbea4580e2f5bb0982263a7cee02af"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x58, 0x71, 0x0, [@generic={0x8f, 0xf, "94a359ff114306acef6d13d507b29a4126c6f5a9b49cacdcd6cf41d3ce75e85c4a20cd91ff49f6de0f2b3c8917f14fdc743f47d0ac476e8e7af7983497ca9db2819286322aebec9dd4accc145bd5943d5f6dbcf73b1c58d76fa2ee3e9dd0abe0986ab159499f0ce5d9e46e3dce89f8c0bed1aaaac31571ae118829835afa1cba9f87dee733cbd4e49c373a7140"}, @generic={0x68, 0x3, "1df8a9fc37b4a6aa2026626b536bcba3e14e7dbc26958d7b50857e6b019e2f9a7a50107d2a0fd066ce4b820ea594a8452bf6d1d4b23e11aaf785a4a45c9e6bad2b854dc7f78d04783fb77d16a9a85488760f6e0acd9ddf53e62165b9247153eda76ff28679af"}]}}]}}, {{0x9, 0x4, 0x51, 0x1, 0x4, 0x18, 0x9b, 0x7b, 0x4, [], [{{0x9, 0x5, 0x8, 0x8, 0x20, 0x10, 0xf9, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0xf7b1}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xf, 0x6b}]}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x4, 0xf, 0xf6, [@generic={0xab, 0x24, "63131912f164978bc4cf63e933fa35e2495b53ccbc1d5d3134232b30c51491f61180ccaaa1e7c740770340ee4378a2e7cc682a37a71f8b11b44db0e0436c653c2745573398ec482591f2e24ea93237853820ca14fc001855442e10fcf92426fd3f55da77583c32889eff790c2b29d31f04ceac1476283ce144340de8d9d2b37d0f7bfde835e61ea8a6749b67a971f30e13cbda29f723cbc6d24d0c258e9237122f473ebfe4f8b8de5e"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xe}]}}, {{0x9, 0x5, 0xd, 0x4, 0x400, 0x7, 0xcf, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xca, 0x87f}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x5, 0x0, 0x2}}]}}, {{0x9, 0x4, 0x9, 0x4, 0x7, 0xab, 0xc6, 0xc1, 0x8, [], [{{0x9, 0x5, 0x3, 0x8, 0x20, 0x7f, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xf2, 0x2}, @generic={0xee, 0xb, "86d21a2f231cbde4266f2adfbd8c11c5280701a28c92848955d1fae82fa0fef7865382573fa0cc204e485d7b305c3017661669a47908690bcb06756f0d67e2f73477486239ee30fd3910215eca8da37a117bf8941016436b2c9d5ebeb55f2f55c6710f008e7ea9df31e981437ebe56ba7f7dce69595e5709bcaa132367f164beaf1dba95a8d3a492fb864b2b16af3570f0d2f05ecc7dea65389a1b24a56822981d61cc66db568e66de2e376554d5008e01f9058ff0bad0d6830618b395b3c2abb1f89b24fc79f7910ef7ff40d759fbd89ede35cf0b16a6d742cc7b30c1c71109e996a5ec15155225f962981f"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x5f, 0x10, 0x5}}, {{0x9, 0x5, 0x8, 0x4, 0x200, 0x5, 0x0, 0x0, [@generic={0x63, 0x10, "371850687f5858f6114e5f45569f565a6f6d408ec2e0ac91070a4513a099e187e6c6e18cbe8b75cf743146f9fb317e0bb2f50f632e7a2fbee9e0c704072fa86d4321a19b072459447b2d3e0e10d6b6d18602be3db261113cb50f3931025665d0cf"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x1, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x800}]}}, {{0x9, 0x5, 0x4, 0x3, 0x40, 0x2, 0x4, 0x2d, [@generic={0x9a, 0x4, "ed184b36a41906209df1f66ff5444a3fb98a2a1a95fc73373560eb251adb66add1a2efd11b9ee0db52065ea5527ecd9195e0f04d2172f1536bcce9f2f945cb0630b860f0ffb6c568c36a85024456905f7de8cfc43bef36cbeefe765909d3fe4899701bbc0fb42059cf9df5d3850eb8e110afdb485af5e45c26b688424333b9f6b1efc0ffb913bbdab033a72ea0f396a4f8dba8f17a93c38a"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x2}]}}, {{0x9, 0x5, 0x5, 0x1, 0x8, 0x4, 0x0, 0xf, [@generic={0xef, 0x7, "69a67678e0299a90835e243b69d75dc61496107f79b0e3b14656b025468f9a37c8d894ca12f9a2961ec0e3b62398b40f5245640ff7c86fda9d82483e86f2c7f6fef73e50cea944faf118038beaca14add0ccd402d1cd1ce7622a95e01b2960597df05d0261a1f69725633e6d842d94fbfce2db71f246ceb215f8195e874aeb48337cdbb562c8c6516442148d0d90488c243e1838c5d81bb50f751727ecd2ca32da92bfc2a35f5e08bb8ccc34cb73d8517b4eb3f4903fc47915354bdb7ecb9ace66b844ff2351339f02c8f308e05995c7763a772b2d42624cd3274dcf244320f11f23e6d22b942faf03676f2b0b"}]}}, {{0x9, 0x5, 0x4, 0x31, 0x10, 0x3, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xeb, 0xc000}, @uac_iso={0x7, 0x25, 0x1, 0x87, 0xf, 0x4}]}}]}}, {{0x9, 0x4, 0x2, 0x8, 0x0, 0x36, 0x26, 0x98, 0xd, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x400000, 0x7, 0x7, 0x81}, [@dmm={0x7, 0x24, 0x14, 0x5c, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0xf7}, @mbim_extended={0x8, 0x24, 0x1c, 0x1, 0x81, 0x8}, @dmm={0x7, 0x24, 0x14, 0x7, 0xa}, @network_terminal={0x7, 0x24, 0xa, 0x9, 0x6, 0x3, 0x6}, @dmm={0x7, 0x24, 0x14, 0x5, 0x2}]}, @uac_control={{0xa, 0x24, 0x1, 0x9}, [@processing_unit={0xd, 0x24, 0x7, 0x5, 0x1, 0x4, "3707d493d0c9"}]}]}}]}}]}}, &(0x7f0000000dc0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x9, 0x6, 0x8f, 0x20, 0xa8}, 0x24, &(0x7f0000000100)={0x5, 0xf, 0x24, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x1, 0x0, 0x2}, @ssp_cap={0x18, 0x10, 0xa, 0x8, 0x3, 0x4a, 0xf, 0xfff4, [0xff0030, 0x3ff0, 0xf]}]}, 0xa, [{0x7c, &(0x7f0000000140)=@string={0x7c, 0x3, "4fe3d7ddb3ad48e9b7ff0ee7181b6ef0374df038bf9aa857e10f9815711c8f09bbe496c1bda60fd73d6a3744a80e477a7a3a87f567047788ac488f3ed1decd673f0f71afa4180509cd31e0802dd23b84b59a18bf1bafd0db7afe6b876a31501e750626c01d9004b62511619ae0f4017cb109b710664037cf13e5"}}, {0xdc, &(0x7f0000000300)=@string={0xdc, 0x3, "7152bb1175f7184a9071fdde38dcee91888884a96ecd42830175c864fc6d57c57445c5381d0d596012207743f905e790a49af81f77bedae550ae4c67ff52cffd974a04626045d85b92616afbecd2c45cb134fc471ae0189f9d396fac49a7f99c8b15d8c04db199d29152180d9346ead3d44d52aea2283b4286a8ec7062d50089a21411d9801795ec076d0a93532cecb39b28b34c63c99d89fd93ee53ff388149b96854fe985c143d3c04618a45f5aa1e446f8d7bdd15a152ff07019a13e2b8544a49585f7e0d2aec6b9f1bd7c8d2b3e5231adfa9e633b5b44e08"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x443}}, {0x94, &(0x7f0000000b40)=@string={0x94, 0x3, "c41231d7b804a3534b0114e439e710d83fb508f6d7346e94638fd46e9dee2cbc649db9e15c89c363a0cbbfd26dc8e7fe4cbe822f9ec9dde14f1d84398123b88614148dd36894c36a41b39ef4a27ffd40f2a02929fccc5a8b358ffc6aedfa20c1adf2f380cc00b511afcf7ac3595497c680940f812a07ae94409a0fb2c46a8cf92e09a5942e003d6dab339701e260f9707067"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x41e}}, {0x26, &(0x7f0000000c00)=@string={0x26, 0x3, "3c9fc2e184bc75a99f16cce8a44ea1d3718f417fe4b89000b541aee389f087548099a050"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x449}}, {0xc9, &(0x7f0000000c80)=@string={0xc9, 0x3, "0bd668d645445f580fb4f4d241ee965dcccda34dbee44d071285964bb4602a88b49bb01acd7a8e74253507f2bd5c947b9f6c4d17264aef703b77a38c93598c6c6912e651191570db0acfc8d0a8cd7e4e8c45600f7817a3aa094fa925e393c0dc266629ebc795426d32ffe1de778c1651c74f617e4a0bb38aa13ad39ae2d335e4ef08d1d31b2e9c91d213fac93f1ad0f7564f3b5e663b80370bae73a50a8602e5c107665ab472263941cd7e6ac98fdfca24817f093f8a83d12297376ed95a3bb20a1b5c93fdaac5"}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x444}}]}) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000e80)=""/44, &(0x7f0000000ec0)=0x2c) 2.210683486s ago: executing program 5 (id=1383): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036571a20cd0c8000fe67010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000000c0)={0x34, &(0x7f0000000440)=ANY=[@ANYBLOB="0014080000"], 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x102, 0x0, 0x0) 1.225684841s ago: executing program 4 (id=1384): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = syz_open_dev$I2C(0x0, 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x6004404c) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a31000000000800054000000002"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0xa}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56543, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {0x1, 0xb}, {0xe, 0xb}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x8021}, 0x4048800) sendmsg$NFT_BATCH(r4, 0x0, 0x40) socket$inet(0x2, 0x2, 0x6a113fc2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x4c}}, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r8, 0x0, 0x5}, 0x18) 847.668488ms ago: executing program 1 (id=1385): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1) 174.311678ms ago: executing program 1 (id=1386): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYRES16=0x0], 0x0) syz_emit_ethernet(0x76, &(0x7f00000004c0)={@link_local, @local, @val={@val={0x88a8, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b33c83", 0x38, 0x3a, 0x0, @empty, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9b5e, {0xe, 0x6, "90f26f", 0x5, 0x2f, 0x1, @dev={0xfe, 0x80, '\x00', 0x35}, @mcast2, [@srh={0x32, 0x0, 0x4, 0x0, 0xd, 0x68, 0x7}]}}}}}}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[], 0xc4}}, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xb8}}, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0xee) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)="fe", 0x1a000}], 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) open(0x0, 0x14d27e, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r7, &(0x7f0000000640)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000200)={'vxcan1\x00'}) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) 69.559127ms ago: executing program 4 (id=1387): syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xf) socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x88000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000200)={'pim6reg0\x00'}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x1000, 0x4, 0x10000000, 0xc}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2cee2000", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$TCFLSH(r2, 0x400455c8, 0x4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xb2) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x11) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(0x0, 0x9, 0x2) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x40) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900}) ioctl$VIDIOC_DQEVENT(r4, 0x80885659, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r5, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) 0s ago: executing program 3 (id=1388): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x258a, 0x33, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0x40}}}}}]}}]}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x20}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "a9ceaa5d"}]}}, 0x0}, 0x0) kernel console output (not intermixed with test programs): system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 424.798603][ T5916] hid_parser_main: 791 callbacks suppressed [ 424.798616][ T5916] asus 0003:0B05:1A30.000E: unknown main item tag 0x0 [ 424.814301][ T5916] asus 0003:0B05:1A30.000E: unknown main item tag 0x0 [ 424.821244][ T5916] asus 0003:0B05:1A30.000E: unknown main item tag 0x0 [ 424.846193][ T5916] asus 0003:0B05:1A30.000E: unknown main item tag 0x0 [ 424.875272][ T30] audit: type=1400 audit(1758393327.196:701): avc: denied { create } for pid=10061 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 424.924406][ T5916] asus 0003:0B05:1A30.000E: unknown main item tag 0x0 [ 424.941138][ T5916] asus 0003:0B05:1A30.000E: unknown main item tag 0x0 [ 424.949267][ T5916] asus 0003:0B05:1A30.000E: unknown main item tag 0x0 [ 424.962756][ T5916] asus 0003:0B05:1A30.000E: unknown main item tag 0x0 [ 424.972664][ T7478] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 424.982786][ T5916] asus 0003:0B05:1A30.000E: unknown main item tag 0x0 [ 424.990608][ T5916] asus 0003:0B05:1A30.000E: unknown main item tag 0x0 [ 425.191725][ T7478] usb 4-1: device descriptor read/64, error -71 [ 425.212744][ T30] audit: type=1400 audit(1758393327.236:702): avc: denied { write } for pid=10061 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=7064 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 425.244191][ T30] audit: type=1400 audit(1758393327.236:703): avc: denied { append } for pid=10061 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" dev="tmpfs" ino=7064 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 425.246743][T10056] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 425.303349][T10056] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 425.309302][T10056] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 425.382905][T10056] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 425.388870][T10056] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 425.397047][ T5916] asus 0003:0B05:1A30.000E: item 0 0 0 8 parsing failed [ 425.404841][ T5916] asus 0003:0B05:1A30.000E: Asus hid parse failed: -22 [ 425.411759][ T5916] asus 0003:0B05:1A30.000E: probe with driver asus failed with error -22 [ 425.463941][ T30] audit: type=1400 audit(1758393327.986:704): avc: denied { remove_name } for pid=10080 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=7064 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 425.512714][ T30] audit: type=1400 audit(1758393328.026:705): avc: denied { unlink } for pid=10080 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=7064 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 425.542947][ T7478] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 425.703512][ T7478] usb 4-1: device descriptor read/64, error -71 [ 425.713991][ T5916] usb 1-1: USB disconnect, device number 21 [ 426.068353][ T9479] Bluetooth: hci0: command 0x0c1a tx timeout [ 426.102151][ T7478] usb usb4-port1: attempt power cycle [ 426.463158][ T10] usb 2-1: new low-speed USB device number 33 using dummy_hcd [ 426.661089][T10118] FAULT_INJECTION: forcing a failure. [ 426.661089][T10118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 426.676595][T10118] CPU: 0 UID: 0 PID: 10118 Comm: syz.3.1046 Not tainted syzkaller #0 PREEMPT(full) [ 426.676620][T10118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 426.676629][T10118] Call Trace: [ 426.676635][T10118] [ 426.676642][T10118] dump_stack_lvl+0x16c/0x1f0 [ 426.676669][T10118] should_fail_ex+0x512/0x640 [ 426.676696][T10118] _copy_to_user+0x32/0xd0 [ 426.676724][T10118] drm_ioctl+0x5eb/0xc30 [ 426.676752][T10118] ? __pfx_drm_getcap+0x10/0x10 [ 426.676774][T10118] ? __pfx_drm_ioctl+0x10/0x10 [ 426.676807][T10118] ? selinux_file_ioctl+0x180/0x270 [ 426.676832][T10118] ? selinux_file_ioctl+0xb4/0x270 [ 426.676857][T10118] ? __pfx_drm_ioctl+0x10/0x10 [ 426.676882][T10118] __x64_sys_ioctl+0x18e/0x210 [ 426.676910][T10118] do_syscall_64+0xcd/0x4e0 [ 426.676935][T10118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.676953][T10118] RIP: 0033:0x7f363318ec29 [ 426.676967][T10118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.676984][T10118] RSP: 002b:00007f36313f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 426.677000][T10118] RAX: ffffffffffffffda RBX: 00007f36333d5fa0 RCX: 00007f363318ec29 [ 426.677012][T10118] RDX: 0000200000000300 RSI: 00000000c010640c RDI: 0000000000000003 [ 426.677022][T10118] RBP: 00007f36313f6090 R08: 0000000000000000 R09: 0000000000000000 [ 426.677033][T10118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.677043][T10118] R13: 00007f36333d6038 R14: 00007f36333d5fa0 R15: 00007ffc04e4cda8 [ 426.677067][T10118] [ 426.853634][ T5977] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 426.960083][T10123] 9pnet_fd: Insufficient options for proto=fd [ 426.993014][T10122] sctp: [Deprecated]: syz.3.1047 (pid 10122) Use of int in maxseg socket option. [ 426.993014][T10122] Use struct sctp_assoc_value instead [ 427.008111][ T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 427.016229][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 427.027321][ T10] usb 2-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 427.039039][ T5977] usb 5-1: Using ep0 maxpacket: 8 [ 427.047771][ T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 427.057094][ T5977] usb 5-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 427.081342][ T5977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.100256][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 427.111077][ T5977] usb 5-1: Product: syz [ 427.115307][ T10] usb 2-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 427.126277][ T5977] usb 5-1: Manufacturer: syz [ 427.130907][ T5977] usb 5-1: SerialNumber: syz [ 427.139343][ T5977] usb 5-1: config 0 descriptor?? [ 427.146766][ T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 427.167501][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 427.181156][ T5977] usb 5-1: selecting invalid altsetting 3 [ 427.187417][ T5977] comedi comedi5: could not set alternate setting 3 in high speed [ 427.195304][ T10] usb 2-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 427.206599][ T5977] usbdux 5-1:0.0: driver 'usbdux' failed to auto-configure device. [ 427.224993][ T5977] usbdux 5-1:0.0: probe with driver usbdux failed with error -22 [ 427.234490][ T10] usb 2-1: string descriptor 0 read error: -22 [ 427.241801][ T10] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 427.255045][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.343167][ T9479] Bluetooth: hci2: command 0x0c1a tx timeout [ 427.343195][ T5858] Bluetooth: hci1: command 0x0c1a tx timeout [ 427.362400][ T10] adutux 2-1:168.0: interrupt endpoints not found [ 427.423675][ T5858] Bluetooth: hci5: command 0x040f tx timeout [ 427.424465][ T9479] Bluetooth: hci3: command 0x0c1a tx timeout [ 427.925263][T10096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.948883][ T10] usb 5-1: USB disconnect, device number 24 [ 427.973012][T10096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.305558][ T5968] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 428.409010][ T6836] syzkaller0: tun_net_xmit 76 [ 428.463834][ T5964] syzkaller0: tun_net_xmit 76 [ 428.478213][ T6836] syzkaller0: tun_net_xmit 48 [ 428.514399][T10096] syzkaller0: create flow: hash 870930584 index 1 [ 428.565558][T10096] syzkaller0: delete flow: hash 870930584 index 1 [ 428.697528][ T5968] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 428.753101][ T5968] usb 1-1: config 0 has no interface number 0 [ 429.126529][ T5968] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 429.155447][ T5968] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.165097][ T5968] usb 1-1: Product: syz [ 429.176946][ T5968] usb 1-1: Manufacturer: syz [ 429.181622][ T5968] usb 1-1: SerialNumber: syz [ 429.909431][ T5968] usb 1-1: config 0 descriptor?? [ 429.971471][ T5964] usb 2-1: USB disconnect, device number 33 [ 430.100456][T10144] tipc: Enabling of bearer rejected, failed to enable media [ 430.128728][T10128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.156370][T10128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.203753][ T5968] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 430.225884][ T5968] usb 1-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2 [ 430.246815][ T5968] usb 1-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw [ 430.623092][ T5964] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 430.795256][ T5964] usb 2-1: Using ep0 maxpacket: 16 [ 430.806287][ T5964] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 430.817036][ T5964] usb 2-1: config 0 has no interface number 0 [ 430.826836][ T5964] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.838873][ T5964] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.849165][ T5964] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 430.858325][ T5964] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.875681][ T5964] usb 2-1: config 0 descriptor?? [ 431.042727][ T5977] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 431.042736][ T78] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 431.213412][ T78] usb 6-1: Using ep0 maxpacket: 8 [ 431.295778][ T5977] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 431.297305][ T78] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 431.305537][ T5977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.413844][ T5977] usb 4-1: Product: syz [ 431.418034][ T5977] usb 4-1: Manufacturer: syz [ 431.423003][ T5977] usb 4-1: SerialNumber: syz [ 431.536820][T10154] netlink: 'syz.1.1055': attribute type 16 has an invalid length. [ 431.538071][ T5977] usb 4-1: config 0 descriptor?? [ 431.573972][T10154] netlink: 'syz.1.1055': attribute type 17 has an invalid length. [ 431.588558][ T78] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 431.598964][ T5977] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 431.646625][T10174] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1055'. [ 431.695750][ T5964] usbhid 2-1:0.1: can't add hid device: -71 [ 431.712677][ T5964] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 431.867937][ T78] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 431.867985][ T5977] gspca_sunplus: reg_r err -32 [ 431.922831][ T5977] usb 4-1: USB disconnect, device number 23 [ 432.013012][ T5964] usb 2-1: USB disconnect, device number 34 [ 432.073509][ T78] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 432.093510][ T78] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 432.107138][ T78] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 432.118801][ T78] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.391742][ T78] usb 6-1: usb_control_msg returned -32 [ 432.422635][ T78] usbtmc 6-1:16.0: can't read capabilities [ 432.573972][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 432.573986][ T30] audit: type=1400 audit(1758393335.086:712): avc: denied { read write } for pid=10180 comm="syz.1.1062" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 433.052941][ T30] audit: type=1400 audit(1758393335.096:713): avc: denied { open } for pid=10180 comm="syz.1.1062" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 433.559431][ T30] audit: type=1400 audit(1758393335.176:714): avc: denied { ioctl } for pid=10180 comm="syz.1.1062" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 433.689136][T10194] : entered promiscuous mode [ 433.707811][T10195] No source specified [ 433.712485][T10194] 9pnet_fd: Insufficient options for proto=fd [ 433.721605][T10195] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1064'. [ 433.960049][ T5977] usb 6-1: USB disconnect, device number 4 [ 434.158156][T10210] comedi: valid board names for 8255 driver are: [ 434.179547][T10210] 8255 [ 434.182462][T10210] comedi: valid board names for vmk80xx driver are: [ 434.189168][T10210] vmk80xx [ 434.478926][T10210] comedi: valid board names for usbduxsigma driver are: [ 434.486213][T10210] usbduxsigma [ 434.489981][T10210] comedi: valid board names for usbduxfast driver are: [ 434.496959][T10210] usbduxfast [ 434.500314][T10210] comedi: valid board names for usbdux driver are: [ 434.506921][T10210] usbdux [ 434.510272][T10210] comedi: valid board names for ni6501 driver are: [ 434.555256][T10210] ni6501 [ 434.558362][T10210] comedi: valid board names for dt9812 driver are: [ 434.565658][T10210] dt9812 [ 434.568781][T10210] comedi: valid board names for ni_labpc_cs driver are: [ 434.577630][T10210] ni_labpc_cs [ 434.581178][T10210] comedi: valid board names for ni_daq_700 driver are: [ 434.588582][T10210] ni_daq_700 [ 434.595854][T10210] comedi: valid board names for labpc_pci driver are: [ 434.603044][T10210] labpc_pci [ 434.606441][T10210] comedi: valid board names for adl_pci9118 driver are: [ 434.615762][T10210] pci9118dg [ 434.619076][T10210] pci9118hg [ 434.622432][T10210] pci9118hr [ 434.627324][T10210] comedi: valid board names for 8255_pci driver are: [ 434.660717][T10210] 8255_pci [ 434.665960][T10210] comedi: valid board names for s526 driver are: [ 434.672357][T10210] s526 [ 434.675238][T10210] comedi: valid board names for multiq3 driver are: [ 434.681919][T10210] multiq3 [ 434.685112][T10210] comedi: valid board names for pcmuio driver are: [ 434.691669][T10210] pcmuio48 [ 434.694933][T10210] pcmuio96 [ 434.698136][T10210] comedi: valid board names for pcmmio driver are: [ 434.704756][T10210] pcmmio [ 434.707743][T10210] comedi: valid board names for pcmda12 driver are: [ 434.714760][T10210] pcmda12 [ 434.718469][T10210] comedi: valid board names for pcmad driver are: [ 434.725148][T10210] pcmad12 [ 434.808738][T10210] pcmad16 [ 434.813446][T10210] comedi: valid board names for ni_labpc driver are: [ 434.825150][T10210] lab-pc-1200 [ 434.829246][T10210] lab-pc-1200ai [ 434.835446][T10210] lab-pc+ [ 434.839324][T10210] comedi: valid board names for atmio16 driver are: [ 434.849606][T10210] atmio16 [ 434.854608][T10210] atmio16d [ 434.857845][T10210] comedi: valid board names for ni_at_ao driver are: [ 434.938324][T10210] at-ao-6 [ 434.977572][T10210] at-ao-10 [ 434.981656][T10210] comedi: valid board names for ni_at_a2150 driver are: [ 434.989360][T10210] ni_at_a2150 [ 434.994054][T10219] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1071'. [ 435.000518][T10210] comedi: valid board names for adq12b driver are: [ 435.009831][T10210] adq12b [ 435.012934][T10210] comedi: valid board names for mpc624 driver are: [ 435.019517][T10210] mpc624 [ 435.046818][T10210] comedi: valid board names for c6xdigio driver are: [ 435.053793][T10210] c6xdigio [ 435.056995][T10210] comedi: valid board names for aio_iiro_16 driver are: [ 435.064136][T10210] aio_iiro_16 [ 435.067574][T10210] comedi: valid board names for aio_aio12_8 driver are: [ 435.082577][T10210] aio_aio12_8 [ 435.086441][T10210] aio_ai12_8 [ 435.107650][T10210] aio_ao12_4 [ 435.111024][T10210] comedi: valid board names for fl512 driver are: [ 435.117495][T10210] fl512 [ 435.120373][T10210] comedi: valid board names for dmm32at driver are: [ 435.128960][T10210] dmm32at [ 435.132004][T10210] comedi: valid board names for dt282x driver are: [ 435.159410][T10210] dt2821 [ 435.172375][T10210] dt2821-f [ 435.177509][T10210] dt2821-g [ 435.180819][T10210] dt2823 [ 435.183912][T10210] dt2824-pgh [ 435.187267][T10210] dt2824-pgl [ 435.190579][T10210] dt2825 [ 435.193872][T10210] dt2827 [ 435.196830][T10210] dt2828 [ 435.199783][T10210] dt2829 [ 435.202873][T10210] dt21-ez [ 435.205940][T10210] dt23-ez [ 435.209012][T10210] dt24-ez [ 435.212049][T10210] dt24-ez-pgl [ 435.215507][T10210] comedi: valid board names for dt2817 driver are: [ 435.224875][T10210] dt2817 [ 435.228790][T10210] comedi: valid board names for dt2815 driver are: [ 435.235800][T10210] dt2815 [ 435.238746][T10210] comedi: valid board names for dt2814 driver are: [ 435.245472][T10210] dt2814 [ 435.248442][T10210] comedi: valid board names for dt2811 driver are: [ 435.271565][T10210] dt2811-pgh [ 435.277362][T10210] dt2811-pgl [ 435.280696][T10210] comedi: valid board names for dt2801 driver are: [ 435.289364][T10210] dt2801 [ 435.292369][T10210] comedi: valid board names for das6402 driver are: [ 435.299589][T10210] das6402-12 [ 435.445260][T10210] das6402-16 [ 435.448787][T10210] comedi: valid board names for das1800 driver are: [ 435.455730][T10210] das-1701st [ 435.752652][T10230] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 435.810611][T10210] das-1701st-da [ 435.814783][T10210] das-1702st [ 435.818177][T10210] das-1702st-da [ 435.821822][T10210] das-1702hr [ 435.827540][T10210] das-1702hr-da [ 435.831228][T10210] das-1701ao [ 435.835237][T10210] das-1702ao [ 435.838613][T10210] das-1801st [ 435.842703][T10210] das-1801st-da [ 435.855294][T10210] das-1802st [ 435.858908][T10210] das-1802st-da [ 435.867661][T10210] das-1802hr [ 435.871260][T10210] das-1802hr-da [ 435.905121][T10210] das-1801hc [ 435.908509][T10210] das-1802hc [ 435.912248][T10210] das-1801ao [ 435.916970][T10210] das-1802ao [ 435.917047][T10210] comedi: valid board names for das800 driver are: [ 435.917072][T10210] das-800 [ 435.917079][T10210] cio-das800 [ 435.917097][T10210] das-801 [ 435.917118][T10210] cio-das801 [ 435.917125][T10210] das-802 [ 435.917143][T10210] cio-das802 [ 435.917164][T10210] cio-das802/16 [ 435.917171][T10210] comedi: valid board names for isa-das08 driver are: [ 435.917190][T10210] isa-das08 [ 435.917197][T10210] das08-pgm [ 435.917222][T10210] das08-pgh [ 435.917249][T10210] das08-pgl [ 435.917277][T10210] das08-aoh [ 435.917395][T10210] das08-aol [ 435.917520][T10210] das08-aom [ 435.917571][T10210] das08/jr-ao [ 435.917602][T10210] das08jr-16-ao [ 435.917662][T10210] pc104-das08 [ 435.917670][T10210] das08jr/16 [ 435.917676][T10210] comedi: valid board names for das16m1 driver are: [ 435.917709][T10210] das16m1 [ 435.917737][T10210] comedi: valid board names for dac02 driver are: [ 435.917765][T10210] dac02 [ 435.917792][T10210] comedi: valid board names for rti802 driver are: [ 435.917820][T10210] rti802 [ 435.917847][T10210] comedi: valid board names for rti800 driver are: [ 435.917875][T10210] rti800 [ 435.917902][T10210] rti815 [ 435.917929][T10210] comedi: valid board names for pcm3724 driver are: [ 435.917956][T10210] pcm3724 [ 435.917983][T10210] comedi: valid board names for pcl818 driver are: [ 435.918098][T10210] pcl818l [ 435.918126][T10210] pcl818h [ 435.918152][T10210] pcl818hd [ 435.918179][T10210] pcl818hg [ 435.918255][T10210] pcl818 [ 435.918407][T10210] pcl718 [ 435.918434][T10210] pcm3718 [ 435.918460][T10210] comedi: valid board names for pcl816 driver are: [ 435.918488][T10210] pcl816 [ 435.918515][T10210] pcl814b [ 435.918541][T10210] comedi: valid board names for pcl812 driver are: [ 435.918569][T10210] pcl812 [ 435.918596][T10210] pcl812pg [ 436.099447][T10210] acl8112pg [ 436.180180][T10210] acl8112dg [ 436.183701][T10210] acl8112hg [ 436.186994][T10210] a821pgl [ 436.190043][T10210] a821pglnda [ 436.193517][T10210] a821pgh [ 436.196571][T10210] a822pgl [ 436.199649][T10210] a822pgh [ 436.205270][T10210] a823pgl [ 436.208340][T10210] a823pgh [ 436.211370][T10210] pcl813 [ 436.219346][T10210] pcl813b [ 436.226065][T10210] acl8113 [ 436.229115][T10210] iso813 [ 436.232216][T10210] acl8216 [ 436.238682][T10210] a826pg [ 436.241940][T10210] comedi: valid board names for pcl730 driver are: [ 436.251118][T10210] pcl730 [ 436.254411][T10210] iso730 [ 436.257380][T10210] acl7130 [ 436.260835][T10210] pcm3730 [ 436.264055][T10210] pcl725 [ 436.267008][T10210] p8r8dio [ 436.270049][T10210] acl7225b [ 436.273358][T10210] p16r16dio [ 436.276630][T10210] pcl733 [ 436.279597][T10210] pcl734 [ 436.282633][T10210] opmm-1616-xt [ 436.286120][T10210] pearl-mm-p [ 436.289414][T10210] ir104-pbf [ 436.292683][T10210] comedi: valid board names for pcl726 driver are: [ 436.299205][T10210] pcl726 [ 436.302182][T10210] pcl727 [ 436.305306][T10210] pcl728 [ 436.308306][T10210] acl6126 [ 436.311548][T10210] acl6128 [ 436.314705][T10210] comedi: valid board names for pcl724 driver are: [ 436.321264][T10210] pcl724 [ 436.324516][T10210] pcl722 [ 436.328278][T10210] pcl731 [ 436.331279][T10210] acl7122 [ 436.335806][T10210] acl7124 [ 436.338897][T10210] pet48dio [ 436.342154][T10210] pcmio48 [ 436.345842][T10210] onyx-mm-dio [ 436.349407][T10210] comedi: valid board names for pcl711 driver are: [ 436.358595][T10210] pcl711 [ 436.361570][T10210] pcl711b [ 436.364751][T10210] acl8112hg [ 436.367988][T10210] acl8112dg [ 436.371205][T10210] comedi: valid board names for amplc_pc263 driver are: [ 436.378483][T10210] pc263 [ 436.381362][T10210] comedi: valid board names for amplc_pc236 driver are: [ 436.388882][T10210] pc36at [ 436.391887][T10210] comedi: valid board names for amplc_dio200 driver are: [ 436.409105][T10210] pc212e [ 436.412093][T10210] pc214e [ 436.415411][T10210] pc215e [ 436.418391][T10210] pc218e [ 436.421340][T10210] pc272e [ 436.424350][T10210] comedi: valid board names for comedi_parport driver are: [ 436.431559][T10210] comedi_parport [ 436.435351][T10210] comedi: valid board names for comedi_test driver are: [ 436.442317][T10210] comedi_test [ 436.445860][T10210] comedi: valid board names for comedi_bond driver are: [ 436.452958][T10210] comedi_bond [ 436.628699][ T30] audit: type=1400 audit(1758393339.146:715): avc: denied { ioctl } for pid=10235 comm="syz.3.1075" path="socket:[26169]" dev="sockfs" ino=26169 ioctlcmd=0x5441 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 436.862868][ T5977] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 436.992623][ T5977] usb 4-1: device descriptor read/64, error -71 [ 437.002616][ T92] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 437.081456][ T30] audit: type=1400 audit(1758393339.596:716): avc: denied { setopt } for pid=10248 comm="syz.5.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 437.110415][ T30] audit: type=1400 audit(1758393339.596:717): avc: denied { connect } for pid=10248 comm="syz.5.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 437.123791][T10249] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1079'. [ 437.165573][ T92] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 437.176235][ T92] usb 2-1: config 0 interface 0 has no altsetting 1 [ 437.200256][ T92] usb 2-1: New USB device found, idVendor=2013, idProduct=0461, bcdDevice=5a.70 [ 437.213480][T10249] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1079'. [ 437.222514][ T92] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.230998][ T92] usb 2-1: Product: syz [ 437.236682][ T92] usb 2-1: Manufacturer: syz [ 437.241273][ T92] usb 2-1: SerialNumber: syz [ 437.246042][ T5977] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 437.271019][ T92] usb 2-1: config 0 descriptor?? [ 437.382782][ T5977] usb 4-1: device descriptor read/64, error -71 [ 437.482442][T10247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.494538][ T5977] usb usb4-port1: attempt power cycle [ 437.498307][ T30] audit: type=1400 audit(1758393339.996:718): avc: denied { setopt } for pid=10246 comm="syz.1.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 437.551566][T10247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.755385][ T30] audit: type=1400 audit(1758393340.266:719): avc: denied { write } for pid=10246 comm="syz.1.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 438.402814][ T5977] usb 4-1: new low-speed USB device number 26 using dummy_hcd [ 438.453809][ T92] usb 2-1: USB disconnect, device number 35 [ 438.497965][ T5977] usb 4-1: device descriptor read/8, error -71 [ 438.802651][ T5977] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 438.833687][ T5977] usb 4-1: device descriptor read/8, error -71 [ 438.972758][ T5977] usb usb4-port1: unable to enumerate USB device [ 439.185299][T10273] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1085'. [ 439.221865][ T7478] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 439.750144][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.757583][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.897686][ T7478] usb 6-1: Using ep0 maxpacket: 8 [ 440.073820][ T7478] usb 6-1: config 0 has an invalid interface number: 151 but max is 1 [ 440.622851][ T5858] Bluetooth: hci5: command 0x040f tx timeout [ 440.972645][ T7478] usb 6-1: config 0 has no interface number 1 [ 440.978783][ T7478] usb 6-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 441.096646][ T7478] usb 6-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 441.287805][ T7478] usb 6-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 441.301153][ T7478] usb 6-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 441.322460][ T7478] usb 6-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 441.389864][ T7478] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 441.403969][ T7478] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 441.415088][ T7478] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 441.435192][ T7478] usb 6-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 441.445727][ T7478] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.454546][ T7478] usb 6-1: Product: syz [ 441.477138][ T7478] usb 6-1: Manufacturer: syz [ 441.494460][ T7478] usb 6-1: SerialNumber: syz [ 441.504673][ T7478] usb 6-1: config 0 descriptor?? [ 442.321138][ T30] audit: type=1326 audit(1758393344.766:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10300 comm="syz.0.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97b798ec29 code=0x7ffc0000 [ 442.449294][ T30] audit: type=1326 audit(1758393344.766:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10300 comm="syz.0.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f97b798ec29 code=0x7ffc0000 [ 442.488667][ T30] audit: type=1326 audit(1758393344.776:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10300 comm="syz.0.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97b798ec29 code=0x7ffc0000 [ 442.523274][ T30] audit: type=1326 audit(1758393344.776:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10300 comm="syz.0.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f97b798ec29 code=0x7ffc0000 [ 442.558983][ T30] audit: type=1326 audit(1758393344.776:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10300 comm="syz.0.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97b798ec29 code=0x7ffc0000 [ 442.583464][ T30] audit: type=1326 audit(1758393344.776:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10300 comm="syz.0.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f97b798ec29 code=0x7ffc0000 [ 442.661368][ T30] audit: type=1326 audit(1758393344.776:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10300 comm="syz.0.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97b798ec29 code=0x7ffc0000 [ 442.674052][T10309] program syz.3.1094 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 442.689388][ T30] audit: type=1326 audit(1758393344.776:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10300 comm="syz.0.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f97b798ec29 code=0x7ffc0000 [ 442.728893][ T30] audit: type=1326 audit(1758393344.776:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10300 comm="syz.0.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97b798ec29 code=0x7ffc0000 [ 442.744719][ T7478] usb 6-1: can't set config #0, error -71 [ 442.752420][T10309] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 442.771138][ T30] audit: type=1326 audit(1758393344.776:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10300 comm="syz.0.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f97b798ec29 code=0x7ffc0000 [ 442.830288][ T7478] usb 6-1: USB disconnect, device number 5 [ 442.840564][ T30] audit: type=1326 audit(1758393344.776:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10300 comm="syz.0.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97b798ec29 code=0x7ffc0000 [ 442.864355][ T30] audit: type=1326 audit(1758393344.776:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10300 comm="syz.0.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f97b798ec29 code=0x7ffc0000 [ 442.978924][ T30] audit: type=1326 audit(1758393344.776:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10300 comm="syz.0.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97b798ec29 code=0x7ffc0000 [ 443.072799][ T30] audit: type=1326 audit(1758393344.776:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10300 comm="syz.0.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f97b798ec29 code=0x7ffc0000 [ 443.146779][ T30] audit: type=1326 audit(1758393344.776:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10300 comm="syz.0.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97b798ec29 code=0x7ffc0000 [ 443.239810][ T30] audit: type=1326 audit(1758393344.776:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10300 comm="syz.0.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f97b798ec29 code=0x7ffc0000 [ 443.289562][ T30] audit: type=1326 audit(1758393344.836:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10300 comm="syz.0.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97b798ec29 code=0x7ffc0000 [ 443.372807][ T30] audit: type=1326 audit(1758393344.836:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10300 comm="syz.0.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97b798ec29 code=0x7ffc0000 [ 443.396523][ T7478] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 443.419424][T10319] fuse: Bad value for 'fd' [ 443.492600][ T30] audit: type=1326 audit(1758393344.836:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10300 comm="syz.0.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f97b798ec29 code=0x7ffc0000 [ 443.575818][ T7478] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 443.585721][ T7478] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.638128][ T7478] usb 6-1: Product: syz [ 443.647532][ T7478] usb 6-1: Manufacturer: syz [ 443.652598][ T7478] usb 6-1: SerialNumber: syz [ 443.952268][T10314] syz.3.1096 (10314) used greatest stack depth: 19848 bytes left [ 444.975786][T10338] comedi: valid board names for 8255 driver are: [ 444.982179][T10338] 8255 [ 444.985207][T10338] comedi: valid board names for vmk80xx driver are: [ 444.992062][T10338] vmk80xx [ 444.995372][T10338] comedi: valid board names for usbduxsigma driver are: [ 445.013229][T10338] usbduxsigma [ 445.022676][T10338] comedi: valid board names for usbduxfast driver are: [ 445.029835][T10338] usbduxfast [ 445.055385][T10338] comedi: valid board names for usbdux driver are: [ 445.066853][T10338] usbdux [ 445.090927][T10338] comedi: valid board names for ni6501 driver are: [ 445.142809][T10338] ni6501 [ 445.152669][T10338] comedi: valid board names for dt9812 driver are: [ 445.233022][T10338] dt9812 [ 445.236373][T10338] comedi: valid board names for ni_labpc_cs driver are: [ 445.274296][T10338] ni_labpc_cs [ 445.305631][T10338] comedi: valid board names for ni_daq_700 driver are: [ 445.312497][T10338] ni_daq_700 [ 445.396632][T10338] comedi: valid board names for labpc_pci driver are: [ 445.412602][T10338] labpc_pci [ 445.415883][T10338] comedi: valid board names for adl_pci9118 driver are: [ 445.424002][T10338] pci9118dg [ 445.427673][T10338] pci9118hg [ 445.430911][T10338] pci9118hr [ 445.438904][T10338] comedi: valid board names for 8255_pci driver are: [ 445.493589][T10338] 8255_pci [ 445.510062][T10338] comedi: valid board names for s526 driver are: [ 445.527027][T10338] s526 [ 445.529823][T10338] comedi: valid board names for multiq3 driver are: [ 445.646036][T10338] multiq3 [ 445.677323][ T7478] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 445.678976][T10338] comedi: valid board names for pcmuio driver are: [ 445.735866][T10338] pcmuio48 [ 445.736607][ T7478] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 445.738995][T10338] pcmuio96 [ 445.739007][T10338] comedi: valid board names for pcmmio driver are: [ 445.902846][T10338] pcmmio [ 445.905988][T10338] comedi: valid board names for pcmda12 driver are: [ 445.913034][T10338] pcmda12 [ 445.916230][T10338] comedi: valid board names for pcmad driver are: [ 445.923340][T10338] pcmad12 [ 445.926462][T10338] pcmad16 [ 445.929506][T10338] comedi: valid board names for ni_labpc driver are: [ 445.936583][T10338] lab-pc-1200 [ 445.940031][T10338] lab-pc-1200ai [ 445.943800][ T5916] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 446.075088][T10338] lab-pc+ [ 446.094664][T10338] comedi: valid board names for atmio16 driver are: [ 446.432388][ T7478] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000118. ret = -EPROTO [ 446.446718][ T7478] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 446.456129][T10338] atmio16 [ 446.459148][T10338] atmio16d [ 446.462250][T10338] comedi: valid board names for ni_at_ao driver are: [ 446.472275][ T7478] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 446.486443][T10338] at-ao-6 [ 446.487703][ T7478] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 446.500746][T10338] at-ao-10 [ 446.510776][T10338] comedi: valid board names for ni_at_a2150 driver are: [ 446.523216][T10338] ni_at_a2150 [ 446.530760][T10338] comedi: valid board names for adq12b driver are: [ 446.551837][T10338] adq12b [ 446.560053][T10338] comedi: valid board names for mpc624 driver are: [ 446.561097][ T7478] usb 6-1: USB disconnect, device number 6 [ 446.604183][ T5916] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 446.613382][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.691303][ T5916] usb 4-1: Product: syz [ 446.698055][ T5916] usb 4-1: Manufacturer: syz [ 446.703704][ T5916] usb 4-1: SerialNumber: syz [ 446.709379][T10338] mpc624 [ 446.715237][T10338] comedi: valid board names for c6xdigio driver are: [ 446.731974][ T5916] usb 4-1: config 0 descriptor?? [ 446.765861][T10338] c6xdigio [ 446.768990][T10338] comedi: valid board names for aio_iiro_16 driver are: [ 446.875260][T10338] aio_iiro_16 [ 446.878652][T10338] comedi: valid board names for aio_aio12_8 driver are: [ 446.916935][T10357] block nbd4: Attempted send on invalid socket [ 446.925587][T10357] I/O error, dev nbd4, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 446.935345][T10357] gfs2: error -5 reading superblock [ 446.965663][T10338] aio_aio12_8 [ 446.972649][T10338] aio_ai12_8 [ 446.975932][T10338] aio_ao12_4 [ 446.979207][T10338] comedi: valid board names for fl512 driver are: [ 446.992616][T10338] fl512 [ 446.995472][T10338] comedi: valid board names for dmm32at driver are: [ 447.003135][T10338] dmm32at [ 447.006136][T10338] comedi: valid board names for dt282x driver are: [ 447.012645][T10338] dt2821 [ 447.015588][T10338] dt2821-f [ 447.018687][T10338] dt2821-g [ 447.021780][T10338] dt2823 [ 447.024759][T10338] dt2824-pgh [ 447.030044][T10338] dt2824-pgl [ 447.044665][ T92] usb 4-1: USB disconnect, device number 28 [ 447.062591][T10338] dt2825 [ 447.077271][T10338] dt2827 [ 447.171882][T10338] dt2828 [ 447.233101][T10338] dt2829 [ 447.327991][T10338] dt21-ez [ 447.437030][ T9479] Bluetooth: hci5: command 0x040f tx timeout [ 447.443557][T10338] dt23-ez [ 447.465419][T10338] dt24-ez [ 447.490174][T10338] dt24-ez-pgl [ 447.512954][T10338] comedi: valid board names for dt2817 driver are: [ 447.520245][T10338] dt2817 [ 447.581131][T10338] comedi: valid board names for dt2815 driver are: [ 447.590665][T10338] dt2815 [ 447.594090][T10338] comedi: valid board names for dt2814 driver are: [ 447.624571][T10338] dt2814 [ 447.634356][T10338] comedi: valid board names for dt2811 driver are: [ 447.660836][T10338] dt2811-pgh [ 447.666636][T10338] dt2811-pgl [ 447.670018][T10338] comedi: valid board names for dt2801 driver are: [ 447.716883][T10338] dt2801 [ 447.736520][T10338] comedi: valid board names for das6402 driver are: [ 447.759253][T10338] das6402-12 [ 447.759429][T10370] syz_tun: entered promiscuous mode [ 447.777157][T10338] das6402-16 [ 447.785009][T10370] batadv_slave_0: entered promiscuous mode [ 447.790991][T10338] comedi: valid board names for das1800 driver are: [ 447.798252][T10338] das-1701st [ 447.801778][T10338] das-1701st-da [ 447.862665][T10338] das-1702st [ 447.866066][T10338] das-1702st-da [ 447.869628][T10338] das-1702hr [ 447.873078][T10338] das-1702hr-da [ 447.877917][T10338] das-1701ao [ 447.881205][T10338] das-1702ao [ 447.886530][T10338] das-1801st [ 447.889831][T10338] das-1801st-da [ 447.894960][T10338] das-1802st [ 447.900133][T10338] das-1802st-da [ 447.904230][T10338] das-1802hr [ 447.908106][T10338] das-1802hr-da [ 447.931717][T10338] das-1801hc [ 447.941528][T10338] das-1802hc [ 447.949372][T10338] das-1801ao [ 447.955459][T10338] das-1802ao [ 447.962705][T10338] comedi: valid board names for das800 driver are: [ 447.969900][T10338] das-800 [ 447.973375][T10338] cio-das800 [ 447.976830][T10338] das-801 [ 447.980290][T10338] cio-das801 [ 447.990346][T10338] das-802 [ 447.993864][T10338] cio-das802 [ 447.997422][T10338] cio-das802/16 [ 448.001223][T10338] comedi: valid board names for isa-das08 driver are: [ 448.008932][T10338] isa-das08 [ 448.012441][T10338] das08-pgm [ 448.033120][T10338] das08-pgh [ 448.036546][T10338] das08-pgl [ 448.043659][T10338] das08-aoh [ 448.047286][T10338] das08-aol [ 448.051560][T10338] das08-aom [ 448.056499][T10338] das08/jr-ao [ 448.060925][T10338] das08jr-16-ao [ 448.065929][T10338] pc104-das08 [ 448.071806][T10338] das08jr/16 [ 448.081060][T10338] comedi: valid board names for das16m1 driver are: [ 448.089011][T10338] das16m1 [ 448.092796][T10338] comedi: valid board names for dac02 driver are: [ 448.115812][T10338] dac02 [ 448.123011][T10338] comedi: valid board names for rti802 driver are: [ 448.322856][T10338] rti802 [ 448.325927][T10338] comedi: valid board names for rti800 driver are: [ 448.341467][T10338] rti800 [ 448.345047][T10338] rti815 [ 448.348132][T10338] comedi: valid board names for pcm3724 driver are: [ 448.408951][T10379] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1114'. [ 448.861293][T10338] pcm3724 [ 448.868242][T10338] comedi: valid board names for pcl818 driver are: [ 448.918662][T10338] pcl818l [ 448.925870][T10338] pcl818h [ 448.930203][T10338] pcl818hd [ 448.952728][T10338] pcl818hg [ 448.955919][T10338] pcl818 [ 448.958904][T10338] pcl718 [ 448.961972][T10338] pcm3718 [ 448.970710][T10338] comedi: valid board names for pcl816 driver are: [ 448.982742][T10338] pcl816 [ 448.992714][T10338] pcl814b [ 449.000912][T10338] comedi: valid board names for pcl812 driver are: [ 449.048326][T10338] pcl812 [ 449.052928][T10338] pcl812pg [ 449.056589][T10338] acl8112pg [ 449.062892][T10338] acl8112dg [ 449.128239][T10338] acl8112hg [ 449.148289][T10338] a821pgl [ 449.184855][T10338] a821pglnda [ 449.189495][T10338] a821pgh [ 449.194857][T10338] a822pgl [ 449.198224][T10338] a822pgh [ 449.201250][T10338] a823pgl [ 449.204621][T10338] a823pgh [ 449.208087][T10338] pcl813 [ 449.228364][T10338] pcl813b [ 449.241580][T10338] acl8113 [ 449.379732][T10338] iso813 [ 449.394923][T10338] acl8216 [ 449.398053][T10338] a826pg [ 449.400985][T10338] comedi: valid board names for pcl730 driver are: [ 449.425504][T10338] pcl730 [ 449.436402][T10338] iso730 [ 449.439504][T10338] acl7130 [ 449.442773][T10338] pcm3730 [ 449.445869][T10338] pcl725 [ 449.466976][T10338] p8r8dio [ 449.542667][T10338] acl7225b [ 449.545798][T10338] p16r16dio [ 449.561383][T10338] pcl733 [ 449.566104][T10338] pcl734 [ 449.567063][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 449.567075][ T30] audit: type=1400 audit(1758393352.086:758): avc: denied { firmware_load } for pid=10384 comm="syz.0.1117" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 449.572394][T10338] opmm-1616-xt [ 449.631094][T10394] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1117'. [ 449.641021][T10394] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1117'. [ 449.657760][T10338] pearl-mm-p [ 449.661085][T10338] ir104-pbf [ 449.711094][T10338] comedi: valid board names for pcl726 driver are: [ 449.721849][T10338] pcl726 [ 449.728109][T10338] pcl727 [ 449.733309][T10338] pcl728 [ 449.740880][T10338] acl6126 [ 449.748505][T10338] acl6128 [ 449.770457][T10338] comedi: valid board names for pcl724 driver are: [ 449.782507][T10338] pcl724 [ 449.786652][T10338] pcl722 [ 449.789586][T10338] pcl731 [ 449.793133][T10338] acl7122 [ 449.797134][T10338] acl7124 [ 449.803944][T10338] pet48dio [ 449.809250][T10338] pcmio48 [ 449.819346][T10338] onyx-mm-dio [ 449.823676][T10338] comedi: valid board names for pcl711 driver are: [ 449.832305][T10338] pcl711 [ 449.836921][T10338] pcl711b [ 449.865152][T10338] acl8112hg [ 449.868401][T10338] acl8112dg [ 449.874315][T10338] comedi: valid board names for amplc_pc263 driver are: [ 449.881891][T10338] pc263 [ 449.889843][T10338] comedi: valid board names for amplc_pc236 driver are: [ 450.195418][T10390] syz.0.1117 (10390) used greatest stack depth: 19048 bytes left [ 450.211402][T10338] pc36at [ 450.217158][T10338] comedi: valid board names for amplc_dio200 driver are: [ 450.224363][T10338] pc212e [ 450.227312][T10338] pc214e [ 450.240506][T10338] pc215e [ 450.243687][T10338] pc218e [ 450.292907][T10338] pc272e [ 450.295867][T10338] comedi: valid board names for comedi_parport driver are: [ 450.308086][T10338] comedi_parport [ 450.316261][T10338] comedi: valid board names for comedi_test driver are: [ 450.324379][T10338] comedi_test [ 450.327822][T10338] comedi: valid board names for comedi_bond driver are: [ 450.337256][T10338] comedi_bond [ 450.621913][T10411] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1124'. [ 450.632308][T10399] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 450.634912][T10411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1124'. [ 450.669694][T10399] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 450.722487][T10399] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 450.731717][T10411] tipc: Enabling of bearer rejected, failed to enable media [ 450.750165][T10399] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 450.769896][T10399] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 450.843350][T10416] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 451.665031][ T30] audit: type=1400 audit(1758393353.596:759): avc: denied { ioctl } for pid=10414 comm="syz.0.1128" path="socket:[27337]" dev="sockfs" ino=27337 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 451.750863][T10418] wireguard0: entered promiscuous mode [ 451.756545][T10418] wireguard0: entered allmulticast mode [ 451.902720][ T5858] Bluetooth: hci0: command 0x0c1a tx timeout [ 452.172861][ T5937] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 452.180769][ T92] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 452.256169][T10430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1131'. [ 452.352703][ T5937] usb 5-1: Using ep0 maxpacket: 8 [ 452.357769][ T92] usb 6-1: Using ep0 maxpacket: 32 [ 452.364741][ T92] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 452.373629][ T92] usb 6-1: config 0 has no interface number 0 [ 452.381329][ T5937] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 452.389094][ T92] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 452.400138][ T5937] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 452.411572][ T92] usb 6-1: config 0 interface 85 has no altsetting 0 [ 452.418402][ T5937] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 452.431149][ T5937] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 48, changing to 9 [ 452.443536][ T5937] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 24624, setting to 1024 [ 452.457672][ T92] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 452.467714][ T92] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.478696][ T92] usb 6-1: Product: syz [ 452.483114][ T5937] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 452.490775][ T92] usb 6-1: Manufacturer: syz [ 452.497862][ T5937] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 452.509176][ T92] usb 6-1: SerialNumber: syz [ 452.518690][ T92] usb 6-1: config 0 descriptor?? [ 452.527192][ T5937] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 452.540184][ T5937] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 48, changing to 9 [ 452.554652][ T5937] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 24624, setting to 1024 [ 452.567443][ T5937] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 452.575066][ T5937] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 452.586716][ T5937] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 452.598618][ T5937] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 48, changing to 9 [ 452.610581][ T5937] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 24624, setting to 1024 [ 452.628033][ T5937] usb 5-1: string descriptor 0 read error: -22 [ 452.636731][ T5937] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 452.648231][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.674184][ T5937] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 452.702814][ T5858] Bluetooth: hci1: command 0x0c1a tx timeout [ 452.755737][ T92] appletouch 6-1:0.85: Failed to read mode from device. [ 452.764033][ T92] appletouch 6-1:0.85: probe with driver appletouch failed with error -5 [ 452.782932][ T5858] Bluetooth: hci5: command 0x040f tx timeout [ 452.782949][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 452.782986][ T9479] Bluetooth: hci3: command 0x0c1a tx timeout [ 452.891664][T10408] overlayfs: upper fs does not support tmpfile. [ 452.961372][ T7478] usb 5-1: USB disconnect, device number 25 [ 454.467949][ T30] audit: type=1400 audit(1758393356.976:760): avc: denied { lock } for pid=10461 comm="syz.1.1142" path="/dev/ptyq6" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 454.588003][T10452] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 454.620753][T10452] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 454.663165][T10452] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 454.669387][T10452] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 454.680498][T10452] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 454.691018][ T92] usb 6-1: USB disconnect, device number 7 [ 454.947643][ T5916] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 454.953061][T10466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1143'. [ 455.121193][ T5916] usb 5-1: Using ep0 maxpacket: 16 [ 455.141365][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.154076][ T5916] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 455.166912][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.200020][ T5916] usb 5-1: config 0 descriptor?? [ 455.217357][T10468] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1144'. [ 455.492966][ T7478] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 455.820040][T10476] netlink: 'syz.4.1140': attribute type 7 has an invalid length. [ 455.828346][T10476] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1140'. [ 455.828521][ T9479] Bluetooth: hci0: command 0x0c1a tx timeout [ 455.840047][T10476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.854100][T10476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.056264][ T7478] usb 6-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=a9.25 [ 456.155312][ T7478] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.172761][ T7478] usb 6-1: Product: syz [ 456.182739][ T7478] usb 6-1: Manufacturer: syz [ 456.196216][ T7478] usb 6-1: SerialNumber: syz [ 456.218575][ T7478] usb 6-1: config 0 descriptor?? [ 456.452849][ T5937] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 456.570597][ T92] usb 6-1: USB disconnect, device number 8 [ 456.612924][ T5937] usb 4-1: Using ep0 maxpacket: 32 [ 456.623756][ T9479] Bluetooth: hci1: command 0x0c1a tx timeout [ 456.633293][ T5937] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 456.642165][ T5937] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 456.652697][ T5937] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 456.661740][ T5937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 456.671478][ T5937] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 456.681508][ T5937] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 456.695500][ T5937] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 456.705405][ T5858] Bluetooth: hci3: command 0x0c1a tx timeout [ 456.705467][ T5858] Bluetooth: hci2: command 0x0c1a tx timeout [ 456.705535][ T9479] Bluetooth: hci5: command 0x040f tx timeout [ 456.727008][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.737670][ T5937] usb 4-1: config 0 descriptor?? [ 456.846081][ T5916] usbhid 5-1:0.0: can't add hid device: -71 [ 456.852165][ T5916] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 456.864227][ T5916] usb 5-1: USB disconnect, device number 26 [ 457.066974][T10490] Bluetooth: hci6: Frame reassembly failed (-84) [ 457.127426][ T12] Bluetooth: hci6: Frame reassembly failed (-84) [ 458.390453][ T30] audit: type=1400 audit(1758393360.906:761): avc: denied { bind } for pid=10507 comm="syz.5.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 458.535866][T10511] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1156'. [ 459.337394][ T50] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 459.992889][T10520] netlink: 'syz.5.1158': attribute type 10 has an invalid length. [ 460.055816][T10520] batman_adv: batadv0: Adding interface: team0 [ 460.061989][T10520] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.125916][T10520] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 460.203375][ T5937] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 29 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 460.788836][ T5916] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 461.275773][ T5916] usb 5-1: Using ep0 maxpacket: 8 [ 461.366436][ T5916] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 461.527062][ T5916] usb 5-1: config 0 has no interface number 0 [ 461.728989][ T5937] usb 4-1: USB disconnect, device number 29 [ 461.778367][ T5916] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 461.800813][T10532] nvme_fabrics: missing parameter 'transport=%s' [ 461.829312][ T5937] usblp0: removed [ 461.836260][T10532] nvme_fabrics: missing parameter 'nqn=%s' [ 461.887449][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.987222][ T5916] usb 5-1: config 0 descriptor?? [ 462.016659][ T30] audit: type=1326 audit(1758393364.536:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10521 comm="syz.1.1160" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7d66d8ec29 code=0x0 [ 462.103767][ T5916] viperboard 5-1:0.143: version 0.00 found at bus 005 address 027 [ 462.128659][ T5916] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 462.188282][ T5916] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 462.352015][ T30] audit: type=1400 audit(1758393364.866:763): avc: denied { write } for pid=10543 comm="syz.3.1167" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 462.438610][ T30] audit: type=1400 audit(1758393364.866:764): avc: denied { nlmsg_read } for pid=10543 comm="syz.3.1167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 462.565108][ T30] audit: type=1400 audit(1758393364.896:765): avc: denied { setopt } for pid=10543 comm="syz.3.1167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 462.585436][ C1] vkms_vblank_simulate: vblank timer overrun [ 462.854155][T10555] vcan0: tx drop: invalid sa for name 0xfffffffffffffffe [ 463.820067][ T5937] usb 5-1: USB disconnect, device number 27 [ 464.454288][T10580] genirq: Flags mismatch irq 4. 00200000 (aio_iiro_16) vs. 00200080 (ttyS0) [ 464.482630][ T9] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 464.632692][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 464.639550][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 464.648588][ T9] usb 2-1: can't read configurations, error -61 [ 464.662649][ T7478] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 464.672641][ T5937] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 464.782652][ T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 464.822617][ T5937] usb 5-1: Using ep0 maxpacket: 32 [ 464.822692][ T7478] usb 6-1: Using ep0 maxpacket: 8 [ 464.845681][ T5937] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 464.876986][ T5937] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 464.886722][ T7478] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 464.892106][ T5937] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 464.896079][ T7478] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.913173][ T7478] usb 6-1: Product: syz [ 464.914294][ T5937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 464.917408][ T7478] usb 6-1: Manufacturer: syz [ 464.930680][ T5937] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 464.932335][ T7478] usb 6-1: SerialNumber: syz [ 464.942317][ T5937] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 464.948221][ T7478] usb 6-1: config 0 descriptor?? [ 464.961645][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 464.970899][ T5937] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 464.982100][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 464.992065][ T9] usb 2-1: can't read configurations, error -61 [ 464.999698][ T9] usb usb2-port1: attempt power cycle [ 465.006638][ T5937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.018219][ T5937] usb 5-1: config 0 descriptor?? [ 465.175978][ T7478] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 465.376364][T10591] Bluetooth: hci6: Frame reassembly failed (-84) [ 465.382831][ T9] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 465.452351][ T7524] Bluetooth: hci6: Frame reassembly failed (-84) [ 465.474516][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 465.507783][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 465.515651][ T9] usb 2-1: can't read configurations, error -61 [ 465.630794][ T30] audit: type=1800 audit(1758393368.146:766): pid=10595 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1179" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 465.652153][ C1] vkms_vblank_simulate: vblank timer overrun [ 465.892674][ T9] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 465.913560][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 465.920857][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 465.936358][ T9] usb 2-1: can't read configurations, error -61 [ 465.965371][ T9] usb usb2-port1: unable to enumerate USB device [ 467.013148][T10607] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1182'. [ 467.424202][ T50] Bluetooth: hci6: command 0x1003 tx timeout [ 467.431963][ T9479] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 468.029502][T10615] ip6tnl1: entered promiscuous mode [ 468.034960][T10615] ip6tnl1: entered allmulticast mode [ 468.421498][ T7478] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 468.481079][ T7478] usb 6-1: USB disconnect, device number 9 [ 468.600862][T10619] tipc: Started in network mode [ 468.606834][ T5937] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 28 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 468.637674][T10619] tipc: Node identity be3d87118393, cluster identity 4711 [ 468.667643][ T5937] usb 5-1: USB disconnect, device number 28 [ 468.680231][T10619] tipc: Enabled bearer , priority 0 [ 468.693479][ T5937] usblp0: removed [ 468.722892][T10621] syzkaller0: entered promiscuous mode [ 468.737829][T10621] syzkaller0: entered allmulticast mode [ 468.767063][T10619] tipc: Resetting bearer [ 468.857289][T10618] tipc: Resetting bearer [ 469.781104][ T5937] tipc: Node number set to 1034848017 [ 469.822616][T10631] nvme_fabrics: missing parameter 'transport=%s' [ 469.828965][T10631] nvme_fabrics: missing parameter 'nqn=%s' [ 469.963404][T10618] tipc: Disabling bearer [ 470.349777][T10639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1191'. [ 470.501597][T10620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1185'. [ 471.153132][ T5937] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 471.243653][T10660] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1195'. [ 471.914466][ T5937] usb 2-1: Using ep0 maxpacket: 32 [ 472.027139][ T5937] usb 2-1: config 0 has an invalid interface number: 135 but max is 0 [ 472.052762][ T5937] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 472.080417][ T5937] usb 2-1: config 0 has no interface number 0 [ 472.133313][ T5937] usb 2-1: config 0 interface 135 altsetting 89 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 472.167116][ T5937] usb 2-1: config 0 interface 135 has no altsetting 0 [ 472.188522][ T5937] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 472.214763][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.232870][ T7478] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 472.245084][ T5937] usb 2-1: Product: syz [ 472.249283][ T5937] usb 2-1: Manufacturer: syz [ 472.264726][ T5937] usb 2-1: SerialNumber: syz [ 472.274310][ T5937] usb 2-1: config 0 descriptor?? [ 472.436620][ T7478] usb 5-1: Using ep0 maxpacket: 16 [ 472.472658][ T7478] usb 5-1: config 4 has an invalid interface number: 51 but max is 0 [ 472.489771][ T7478] usb 5-1: config 4 has no interface number 0 [ 472.533302][ T7478] usb 5-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 472.596777][ T7478] usb 5-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 472.626028][ T7478] usb 5-1: config 4 interface 51 has no altsetting 0 [ 472.660815][ T7478] usb 5-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 472.677739][ T7478] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.696221][ T7478] usb 5-1: Product: syz [ 472.704637][ T7478] usb 5-1: Manufacturer: syz [ 472.712755][ T7478] usb 5-1: SerialNumber: syz [ 472.885115][T10684] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 472.927777][T10666] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 472.935678][T10666] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 473.350917][T10666] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 473.506235][T10666] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 473.526736][ T7478] cdc_eem 5-1:4.51 usb0: register 'cdc_eem' at usb-dummy_hcd.4-1, CDC EEM Device, 12:e7:09:c3:85:55 [ 473.873776][ T5937] em28xx 2-1:0.135: audio device (0ccd:10af): interface 135, class 1 [ 474.025391][ T5937] usb 2-1: USB disconnect, device number 40 [ 474.278810][ T7478] usb 5-1: USB disconnect, device number 29 [ 474.330850][ T7478] cdc_eem 5-1:4.51 usb0: unregister 'cdc_eem' usb-dummy_hcd.4-1, CDC EEM Device [ 475.886504][ T30] audit: type=1400 audit(1758393378.396:767): avc: denied { bind } for pid=10714 comm="syz.4.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 476.169155][T10727] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 476.264644][T10718] vlan2: entered allmulticast mode [ 476.306318][T10718] bond0: entered allmulticast mode [ 476.355913][T10718] bond_slave_0: entered allmulticast mode [ 476.369159][T10718] bond_slave_1: entered allmulticast mode [ 476.571189][ T30] audit: type=1804 audit(1758393379.046:768): pid=10736 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.1209" name="/newroot/258/bus/bus" dev="overlay" ino=1420 res=1 errno=0 [ 476.984810][ T30] audit: type=1804 audit(1758393379.056:769): pid=10736 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1209" name="/newroot/258/bus/bus" dev="overlay" ino=1420 res=1 errno=0 [ 477.582842][ T9479] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 477.589180][ T9479] Bluetooth: hci2: command 0x0c1a tx timeout [ 477.810614][T10747] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1212'. [ 478.227835][T10738] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 478.260437][T10738] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 478.275983][T10738] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 478.292212][T10738] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 478.294216][T10747] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1212'. [ 478.320977][T10738] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 478.554890][T10747] hsr_slave_1 (unregistering): left promiscuous mode [ 479.233220][ T9479] Bluetooth: hci0: command 0x0c1a tx timeout [ 480.232657][ T7478] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 480.314450][ T5858] Bluetooth: hci1: command 0x0c1a tx timeout [ 480.314450][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 480.314502][ T9479] Bluetooth: hci3: command 0x0c1a tx timeout [ 480.387628][ T9479] Bluetooth: hci5: command 0x040f tx timeout [ 480.482813][ T9] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 480.642712][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 480.651248][ T9] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 480.696901][ T9] usb 2-1: config 0 has no interface number 0 [ 480.771651][ T9] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 480.829918][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.979975][ T9] usb 2-1: config 0 descriptor?? [ 481.184580][ T9] viperboard 2-1:0.143: version 0.00 found at bus 002 address 041 [ 481.486734][ T9] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 481.606032][ T9] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 482.012682][ T7478] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 482.073133][ T9] usb 2-1: USB disconnect, device number 41 [ 482.083681][ T7478] usb 5-1: config 1 has no interface number 0 [ 482.090226][ T7478] usb 5-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid maxpacket 80, setting to 64 [ 482.157808][ T7478] usb 5-1: config 1 interface 105 has no altsetting 0 [ 482.164883][T10773] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1218'. [ 482.186613][ T7478] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 482.212705][ T7478] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.227760][ T7478] usb 5-1: Product: syz [ 482.241723][ T7478] usb 5-1: Manufacturer: syz [ 482.254972][ T7478] usb 5-1: SerialNumber: syz [ 482.266546][T10771] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 482.417467][ T30] audit: type=1400 audit(1758393384.936:770): avc: denied { unmount } for pid=9393 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 482.486426][T10771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.531118][T10771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.570520][ T7478] aqc111 5-1:1.105: probe with driver aqc111 failed with error -71 [ 482.600711][ T7478] usb 5-1: USB disconnect, device number 30 [ 482.677095][ T30] audit: type=1800 audit(1758393385.196:771): pid=10786 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.1224" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 484.247589][ T30] audit: type=1400 audit(1758393386.766:772): avc: denied { kexec_image_load } for pid=10798 comm="syz.4.1229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 484.282361][ T30] audit: type=1400 audit(1758393386.766:773): avc: denied { mounton } for pid=10798 comm="syz.4.1229" path="/258/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 484.409534][ T30] audit: type=1400 audit(1758393386.766:774): avc: denied { write } for pid=10798 comm="syz.4.1229" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 484.430776][ T30] audit: type=1400 audit(1758393386.766:775): avc: denied { open } for pid=10798 comm="syz.4.1229" path="/258/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 485.302259][T10814] netlink: 'syz.1.1232': attribute type 10 has an invalid length. [ 485.317521][T10814] veth0_vlan: left promiscuous mode [ 485.324197][T10814] veth0_vlan: entered promiscuous mode [ 485.331325][T10814] team0: Device veth0_vlan failed to register rx_handler [ 485.487286][ T30] audit: type=1400 audit(1758393388.001:776): avc: denied { ioctl } for pid=10815 comm="syz.0.1233" path="socket:[29119]" dev="sockfs" ino=29119 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 486.265808][ T9] libceph: connect (1)[c::]:6789 error -101 [ 486.272044][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 486.380567][ T5916] libceph: connect (1)[b::]:6789 error -101 [ 486.387563][ T5916] libceph: mon0 (1)[b::]:6789 connect error [ 486.423634][T10827] ceph: No mds server is up or the cluster is laggy [ 486.467707][T10823] ceph: No mds server is up or the cluster is laggy [ 486.750513][ T5916] libceph: connect (1)[b::]:6789 error -101 [ 486.791877][ T5916] libceph: mon0 (1)[b::]:6789 connect error [ 487.380440][ T9] libceph: connect (1)[c::]:6789 error -101 [ 487.733127][ T5916] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 487.933125][ T5916] usb 6-1: Using ep0 maxpacket: 8 [ 487.959300][ T5916] usb 6-1: config 0 has an invalid interface number: 143 but max is 0 [ 488.683550][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 488.833402][ T5916] usb 6-1: config 0 has no interface number 0 [ 488.839494][ T5916] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 488.901210][ T5916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.944297][ T5916] usb 6-1: config 0 descriptor?? [ 489.076099][ T5916] viperboard 6-1:0.143: version 0.00 found at bus 006 address 010 [ 489.321027][T10851] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1240'. [ 489.342204][ T5916] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 489.479757][ T5916] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 489.554100][ T5937] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 489.593363][ T5916] usb 6-1: USB disconnect, device number 10 [ 489.722645][ T5937] usb 2-1: Using ep0 maxpacket: 32 [ 489.738288][ T5937] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.773278][ T5937] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 489.804175][ T5937] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 489.836964][ T5937] usb 2-1: config 0 interface 0 has no altsetting 0 [ 489.860969][ T5937] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 489.896994][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.915924][T10867] SELinux: security_context_str_to_sid (Ö) failed with errno=-22 [ 489.935534][ T5937] usb 2-1: config 0 descriptor?? [ 490.405001][ T5937] hid (null): unknown global tag 0xc [ 490.417595][ T5937] hid (null): global environment stack underflow [ 490.456007][ T5937] corsair-cpro 0003:1B1C:0C10.000F: unknown global tag 0xc [ 490.676970][ T5937] corsair-cpro 0003:1B1C:0C10.000F: item 0 1 1 12 parsing failed [ 490.690500][ T5937] corsair-cpro 0003:1B1C:0C10.000F: probe with driver corsair-cpro failed with error -22 [ 490.806990][ T5916] usb 2-1: USB disconnect, device number 42 [ 490.977564][ T5968] usb 1-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 490.994095][ T5968] dvb_usb_ec168 1-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 491.005802][ T5968] usb 1-1: USB disconnect, device number 22 [ 491.101054][T10878] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 492.140681][T10894] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1249'. [ 492.172854][ T5916] usb 4-1: new low-speed USB device number 30 using dummy_hcd [ 492.241395][T10894] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1249'. [ 492.285795][T10894] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1249'. [ 492.301974][T10894] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1249'. [ 492.323104][ T5916] usb 4-1: device descriptor read/64, error -71 [ 492.592770][ T5916] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 492.832849][ T7478] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 492.842698][ T5916] usb 4-1: device descriptor read/64, error -71 [ 492.977738][ T5916] usb usb4-port1: attempt power cycle [ 493.072693][ T7478] usb 5-1: Using ep0 maxpacket: 8 [ 493.087788][ T7478] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 493.134749][ T7478] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.146723][ T7478] usb 5-1: Product: syz [ 493.150964][ T7478] usb 5-1: Manufacturer: syz [ 493.155753][ T7478] usb 5-1: SerialNumber: syz [ 493.170727][ T7478] usb 5-1: config 0 descriptor?? [ 493.393069][ T5916] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 493.469453][ T7478] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 493.800597][ T5916] usb 4-1: device descriptor read/8, error -71 [ 494.814903][ T30] audit: type=1400 audit(1758393397.331:777): avc: denied { append } for pid=10921 comm="syz.3.1258" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 496.172289][ T7478] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 496.772229][ T7478] usb 5-1: USB disconnect, device number 31 [ 498.355156][ T5916] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 498.362854][T10952] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 498.544730][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 499.126501][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.136490][ T5916] usb 5-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 499.145681][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.162442][T10960] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 499.176462][T10960] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 499.183264][T10960] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 499.189866][T10960] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 499.196634][T10960] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 499.223379][ T5916] usb 5-1: config 0 descriptor?? [ 499.254599][T10960] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 499.262209][T10960] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 499.269651][T10960] comedi comedi3: 8255: I/O port conflict (0x3bf,4) [ 499.276494][T10960] comedi comedi3: 8255: I/O port conflict (0xffffffff80000802,4) [ 499.416255][T10960] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 499.427085][T10960] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 499.436302][T10960] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 499.444679][T10960] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 499.683064][ T5937] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 499.722262][ T5916] hid-alps 0003:044E:120C.0010: unbalanced delimiter at end of report description [ 499.760007][ T5916] hid-alps 0003:044E:120C.0010: parse failed [ 499.770299][ T5916] hid-alps 0003:044E:120C.0010: probe with driver hid-alps failed with error -22 [ 499.814665][T10981] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 499.952570][ T5937] usb 2-1: config 0 has an invalid interface number: 124 but max is 0 [ 499.961201][ T5937] usb 2-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config [ 499.982666][ T5937] usb 2-1: config 0 has no interface number 0 [ 500.025197][ T5937] usb 2-1: config 0 interface 124 has no altsetting 0 [ 500.059368][ T5937] usb 2-1: New USB device found, idVendor=0b05, idProduct=17d0, bcdDevice=d1.47 [ 500.070613][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.090701][ T5937] usb 2-1: Product: syz [ 500.094969][ T5937] usb 2-1: Manufacturer: syz [ 500.099584][ T5937] usb 2-1: SerialNumber: syz [ 500.111859][ T5937] usb 2-1: config 0 descriptor?? [ 501.195255][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.201598][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.355165][ T9] usb 5-1: USB disconnect, device number 32 [ 501.371475][T10971] binder: 10969:10971 unknown command 0 [ 501.434521][T10971] binder: 10969:10971 ioctl c0306201 200000000440 returned -22 [ 501.506394][T11002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1275'. [ 501.804192][T11012] batman_adv: batadv0: Adding interface: gretap1 [ 501.850651][T11012] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.884698][T11012] batman_adv: batadv0: Interface activated: gretap1 [ 502.032859][ T5916] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 502.208679][ T5937] usb 2-1: USB disconnect, device number 43 [ 502.356707][ T5916] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 502.379121][ T5916] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 502.632777][ T5916] usb 6-1: config 0 interface 0 has no altsetting 0 [ 502.733229][ T5916] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 502.742308][ T5916] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 502.856347][ T5916] usb 6-1: Product: syz [ 502.860710][ T5916] usb 6-1: Manufacturer: syz [ 502.893447][ T5916] usb 6-1: SerialNumber: syz [ 502.916176][ T5916] usb 6-1: config 0 descriptor?? [ 503.032603][ T976] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 503.051051][ T5916] hub 6-1:0.0: bad descriptor, ignoring hub [ 503.063076][ T5916] hub 6-1:0.0: probe with driver hub failed with error -5 [ 503.131458][ T5964] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 503.157404][ T5916] usb 6-1: selecting invalid altsetting 0 [ 503.256968][ T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.280267][ T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.304780][ T976] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 503.316759][ T976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.325894][ T5964] usb 4-1: Using ep0 maxpacket: 16 [ 503.332363][ T5964] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 503.340674][ T5964] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 503.350961][ T5964] usb 4-1: config 0 has no interface number 0 [ 503.358377][T11063] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=56317 sclass=netlink_xfrm_socket pid=11063 comm=syz.5.1279 [ 503.391700][ T5964] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 503.401616][ T5964] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.410635][ T976] usb 2-1: config 0 descriptor?? [ 503.415938][ T5964] usb 4-1: Product: syz [ 503.432647][ T5964] usb 4-1: Manufacturer: syz [ 503.458317][ T5964] usb 4-1: SerialNumber: syz [ 503.484112][ T5916] usb 6-1: USB disconnect, device number 11 [ 503.510342][ T5964] usb 4-1: config 0 descriptor?? [ 503.521401][ T5964] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 503.536575][ T5964] usb 4-1: No valid video chain found. [ 503.822351][ T30] audit: type=1400 audit(1758393406.331:778): avc: denied { write } for pid=11045 comm="syz.3.1284" path="socket:[29501]" dev="sockfs" ino=29501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 503.882960][ T976] pyra 0003:1E7D:2CF6.0011: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 503.905431][ T5916] usb 4-1: USB disconnect, device number 34 [ 504.076678][ T976] pyra 0003:1E7D:2CF6.0011: couldn't init struct pyra_device [ 504.084801][ T976] pyra 0003:1E7D:2CF6.0011: couldn't install mouse [ 504.096973][ T976] pyra 0003:1E7D:2CF6.0011: probe with driver pyra failed with error -5 [ 504.235519][ T30] audit: type=1400 audit(1758393406.701:779): avc: denied { read } for pid=11072 comm="syz.5.1288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 504.255918][ C0] vkms_vblank_simulate: vblank timer overrun [ 504.489306][ T976] usb 2-1: USB disconnect, device number 44 [ 504.580137][T11084] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 504.642317][T11082] kvm: pic: non byte write [ 504.662242][ T30] audit: type=1400 audit(1758393407.171:780): avc: denied { append } for pid=11089 comm="syz.3.1292" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 507.531363][T11118] SELinux: Context #ÈDÐÞí6Ö äÛͪRy [ 507.554945][T11118] Ff·­óʦYð0¢ÔÈщ•TÄ&S‘ÂYNüµÅ( èÊý¬ôå¡[XFùÝÝŠ¹ˆUüÙ ?½œK-ÖÔ€Î# [ 507.867936][T11129] dump_stack_lvl+0x16c/0x1f0 [ 507.867955][T11129] should_fail_ex+0x512/0x640 [ 507.867973][T11129] get_futex_key+0xff0/0x1560 [ 507.867991][T11129] ? __lock_acquire+0xb97/0x1ce0 [ 507.868009][T11129] ? __pfx_get_futex_key+0x10/0x10 [ 507.868026][T11129] ? get_futex_key+0x5b4/0x1560 [ 507.868045][T11129] futex_wait_setup+0x9d/0x550 [ 507.868062][T11129] futex_wait_requeue_pi+0x241/0x830 [ 507.868076][T11129] ? __fpu_restore_sig+0x635/0x13a0 [ 507.868093][T11129] ? __pfx_futex_wait_requeue_pi+0x10/0x10 [ 507.868106][T11129] ? __pfx___fpu_restore_sig+0x10/0x10 [ 507.868135][T11129] ? __pfx_futex_wake_mark+0x10/0x10 [ 507.868155][T11129] do_futex+0x2ae/0x350 [ 507.868173][T11129] ? __pfx_do_futex+0x10/0x10 [ 507.868194][T11129] __x64_sys_futex+0x1e0/0x4c0 [ 507.868204][T11129] ? restore_signal_shadow_stack+0x63/0x420 [ 507.868219][T11129] ? __pfx___x64_sys_futex+0x10/0x10 [ 507.868236][T11129] ? __do_sys_rt_sigreturn+0x16b/0x230 [ 507.868252][T11129] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 507.868271][T11129] do_syscall_64+0xcd/0x4e0 [ 507.868287][T11129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.868299][T11129] RIP: 0033:0x7f08f4b8ec29 [ 507.868313][T11129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.868324][T11129] RSP: 002b:00007f08f5a0b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 507.868336][T11129] RAX: ffffffffffffffda RBX: 00007f08f4dd5fa0 RCX: 00007f08f4b8ec29 [ 507.868343][T11129] RDX: 0000000000000002 RSI: 000000000000000b RDI: 00002000000002c0 [ 507.868350][T11129] RBP: 00007f08f5a0b090 R08: 00002000000004c0 R09: 0000000000000002 [ 507.868356][T11129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 507.868363][T11129] R13: 00007f08f4dd6038 R14: 00007f08f4dd5fa0 R15: 00007ffd971878b8 [ 507.868377][T11129] [ 508.108857][T11129] pimreg: entered allmulticast mode [ 508.331334][T11136] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1301'. [ 508.341617][ T30] audit: type=1400 audit(1758393410.861:781): avc: denied { module_load } for pid=11134 comm="syz.5.1304" path="/sys/kernel/notes" dev="sysfs" ino=1407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 508.347883][T11136] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1301'. [ 508.374778][T11136] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1301'. [ 508.387990][ T30] audit: type=1400 audit(1758393410.861:782): avc: denied { accept } for pid=11134 comm="syz.5.1304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 508.703493][ T976] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 508.725056][T11136] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1301'. [ 509.024489][ T976] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 509.165262][T11127] netlink: 'syz.0.1300': attribute type 20 has an invalid length. [ 509.173220][T11127] IPv6: NLM_F_CREATE should be specified when creating new route [ 509.185135][ T976] usb 5-1: config 0 has no interfaces? [ 509.191725][ T976] usb 5-1: config 0 has no interfaces? [ 509.200798][ T976] usb 5-1: config 0 has no interfaces? [ 509.209953][T11127] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 509.217195][T11127] IPv6: NLM_F_CREATE should be set when creating new route [ 509.372900][ T976] usb 5-1: config 0 has no interfaces? [ 509.412743][ T976] usb 5-1: config 0 has no interfaces? [ 509.585387][ T976] usb 5-1: config 0 has no interfaces? [ 509.632929][ T976] usb 5-1: config 0 has no interfaces? [ 509.676396][ T976] usb 5-1: config 0 has no interfaces? [ 509.888690][ T976] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 509.948187][ T976] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 510.086112][ T5916] IPVS: starting estimator thread 0... [ 510.350496][ T976] usb 5-1: Product: syz [ 510.365512][ T976] usb 5-1: Manufacturer: syz [ 510.378997][ T976] usb 5-1: SerialNumber: syz [ 510.407256][ T976] usb 5-1: config 0 descriptor?? [ 510.432634][T11155] IPVS: using max 72 ests per chain, 172800 per kthread [ 511.668082][T11156] netlink: 'syz.3.1308': attribute type 10 has an invalid length. [ 511.681799][T11156] batman_adv: batadv0: Adding interface: team0 [ 511.688008][T11156] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.713189][T11156] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 511.748635][T11156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1308'. [ 511.872742][ T5916] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 511.930759][ T5964] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 512.080433][ T30] audit: type=1400 audit(1758393414.351:783): avc: denied { execute } for pid=11139 comm="syz.4.1305" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=30058 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 512.136918][ T5916] usb 2-1: Using ep0 maxpacket: 8 [ 512.233956][ T5916] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 512.242195][ T5916] usb 2-1: config 0 has no interface number 0 [ 512.354482][ T5964] usb 6-1: Using ep0 maxpacket: 8 [ 512.472183][ T5916] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 512.488694][ T5964] usb 6-1: config 0 has an invalid interface number: 143 but max is 0 [ 512.499017][ T30] audit: type=1400 audit(1758393415.011:784): avc: denied { read } for pid=11165 comm="syz.0.1311" name="file0" dev="fuse" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 512.501025][ T5964] usb 6-1: config 0 has no interface number 0 [ 512.532566][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.554659][ T5916] usb 2-1: config 0 descriptor?? [ 512.570161][ T5964] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 512.585448][ T5964] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.594443][ T30] audit: type=1400 audit(1758393415.011:785): avc: denied { open } for pid=11165 comm="syz.0.1311" path="/253/file0/file0" dev="fuse" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 512.643493][ T5964] usb 6-1: config 0 descriptor?? [ 512.658553][T11169] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 512.693087][ T5916] viperboard 2-1:0.143: version 0.00 found at bus 002 address 045 [ 512.734081][T11169] block device autoloading is deprecated and will be removed. [ 512.793582][ T5964] viperboard 6-1:0.143: version 0.00 found at bus 006 address 012 [ 512.812854][ T5916] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 512.829078][ T7478] usb 5-1: USB disconnect, device number 33 [ 512.841019][ T5916] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 512.864068][ T5964] viperboard-i2c viperboard-i2c.4.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 512.895701][ T5964] viperboard-i2c viperboard-i2c.4.auto: probe with driver viperboard-i2c failed with error -5 [ 512.919827][ T5916] usb 2-1: USB disconnect, device number 45 [ 513.055406][ T9] usb 6-1: USB disconnect, device number 12 [ 514.771465][T11197] comedi: valid board names for 8255 driver are: [ 514.795107][T11197] 8255 [ 514.797900][T11197] comedi: valid board names for vmk80xx driver are: [ 514.846998][T11197] vmk80xx [ 514.850050][T11197] comedi: valid board names for usbduxsigma driver are: [ 514.857061][T11197] usbduxsigma [ 514.860511][T11197] comedi: valid board names for usbduxfast driver are: [ 514.868210][T11197] usbduxfast [ 514.871595][T11197] comedi: valid board names for usbdux driver are: [ 514.878195][T11197] usbdux [ 514.882070][T11197] comedi: valid board names for ni6501 driver are: [ 514.890704][T11197] ni6501 [ 514.896377][T11197] comedi: valid board names for dt9812 driver are: [ 514.904231][T11197] dt9812 [ 514.907494][T11197] comedi: valid board names for ni_labpc_cs driver are: [ 514.916133][T11197] ni_labpc_cs [ 514.921999][T11197] comedi: valid board names for ni_daq_700 driver are: [ 514.924467][T11195] netlink: 'syz.5.1318': attribute type 10 has an invalid length. [ 514.940990][T11197] ni_daq_700 [ 514.955683][T11197] comedi: valid board names for labpc_pci driver are: [ 514.963384][T11195] mac80211_hwsim hwsim14 wlan1: entered allmulticast mode [ 514.970726][T11197] labpc_pci [ 514.976662][T11197] comedi: valid board names for adl_pci9118 driver are: [ 514.985823][T11197] pci9118dg [ 514.989041][T11197] pci9118hg [ 514.992294][T11197] pci9118hr [ 515.095632][T11195] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 515.121813][T11197] comedi: valid board names for 8255_pci driver are: [ 515.128998][T11197] 8255_pci [ 515.132170][T11197] comedi: valid board names for s526 driver are: [ 515.143343][T11197] s526 [ 515.147712][T11197] comedi: valid board names for multiq3 driver are: [ 515.156362][T11197] multiq3 [ 515.160703][T11197] comedi: valid board names for pcmuio driver are: [ 515.175621][T11197] pcmuio48 [ 515.179963][T11197] pcmuio96 [ 515.184547][T11197] comedi: valid board names for pcmmio driver are: [ 515.193361][T11197] pcmmio [ 515.197687][T11197] comedi: valid board names for pcmda12 driver are: [ 515.212034][T11197] pcmda12 [ 515.262982][T11197] comedi: valid board names for pcmad driver are: [ 515.272621][T11197] pcmad12 [ 515.275671][T11197] pcmad16 [ 515.281058][T11197] comedi: valid board names for ni_labpc driver are: [ 515.284250][ T30] audit: type=1400 audit(1758393417.791:786): avc: denied { ioctl } for pid=11203 comm="syz.3.1321" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 515.292282][T11197] lab-pc-1200 [ 515.387109][T11197] lab-pc-1200ai [ 515.413457][T11197] lab-pc+ [ 515.417520][T11203] delete_channel: no stack [ 515.434647][T11197] comedi: valid board names for atmio16 driver are: [ 515.462597][T11197] atmio16 [ 515.530151][T11197] atmio16d [ 515.665078][T11197] comedi: valid board names for ni_at_ao driver are: [ 515.671752][T11197] at-ao-6 [ 515.701418][T11197] at-ao-10 [ 515.706383][T11197] comedi: valid board names for ni_at_a2150 driver are: [ 516.186346][T11197] ni_at_a2150 [ 516.198977][T11197] comedi: valid board names for adq12b driver are: [ 516.217603][T11197] adq12b [ 516.236918][T11197] comedi: valid board names for mpc624 driver are: [ 516.287352][T11197] mpc624 [ 516.298088][T11197] comedi: valid board names for c6xdigio driver are: [ 516.305132][T11197] c6xdigio [ 516.308549][T11197] comedi: valid board names for aio_iiro_16 driver are: [ 516.325530][T11227] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1326'. [ 516.342274][T11197] aio_iiro_16 [ 516.346741][T11197] comedi: valid board names for aio_aio12_8 driver are: [ 516.451140][T11197] aio_aio12_8 [ 516.462576][T11197] aio_ai12_8 [ 516.500356][T11197] aio_ao12_4 [ 516.648620][T11197] comedi: valid board names for fl512 driver are: [ 516.655875][T11197] fl512 [ 516.658729][T11197] comedi: valid board names for dmm32at driver are: [ 516.671718][T11197] dmm32at [ 516.677892][T11197] comedi: valid board names for dt282x driver are: [ 516.684645][T11197] dt2821 [ 516.687898][T11197] dt2821-f [ 516.691002][T11197] dt2821-g [ 516.742979][ T5937] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 516.752237][T11197] dt2823 [ 516.761972][T11197] dt2824-pgh [ 516.775635][T11197] dt2824-pgl [ 516.787435][T11197] dt2825 [ 516.883216][T11197] dt2827 [ 516.901098][T11197] dt2828 [ 516.929434][ T5937] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 516.933104][T11197] dt2829 [ 516.953141][T11197] dt21-ez [ 516.956215][T11197] dt23-ez [ 517.068587][T11197] dt24-ez [ 517.071664][T11197] dt24-ez-pgl [ 517.090030][ T5937] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 517.116804][ T5937] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 517.120152][T11197] comedi: valid board names for dt2817 driver are: [ 517.142808][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 517.152630][ T5937] usb 4-1: SerialNumber: syz [ 517.173362][ T5937] usb 4-1: bad CDC descriptors [ 517.216059][T11197] dt2817 [ 517.218999][T11197] comedi: valid board names for dt2815 driver are: [ 517.226193][T11197] dt2815 [ 517.231579][T11197] comedi: valid board names for dt2814 driver are: [ 517.238730][T11197] dt2814 [ 517.243470][T11197] comedi: valid board names for dt2811 driver are: [ 517.251010][T11197] dt2811-pgh [ 517.258551][T11197] dt2811-pgl [ 517.261895][T11197] comedi: valid board names for dt2801 driver are: [ 517.270605][T11197] dt2801 [ 517.274262][T11197] comedi: valid board names for das6402 driver are: [ 517.282243][T11197] das6402-12 [ 517.285842][T11197] das6402-16 [ 517.301029][T11197] comedi: valid board names for das1800 driver are: [ 517.327620][T11197] das-1701st [ 517.334806][T11197] das-1701st-da [ 517.339520][T11197] das-1702st [ 517.345364][T11197] das-1702st-da [ 517.357504][T11197] das-1702hr [ 517.363541][T11197] das-1702hr-da [ 517.380857][T11197] das-1701ao [ 517.388522][T11197] das-1702ao [ 517.395162][T11197] das-1801st [ 517.402816][T11197] das-1801st-da [ 517.408647][T11197] das-1802st [ 517.417400][T11197] das-1802st-da [ 517.424333][T11197] das-1802hr [ 517.431136][T11197] das-1802hr-da [ 517.441211][T11197] das-1801hc [ 517.449035][T11197] das-1802hc [ 517.456758][T11197] das-1801ao [ 517.466275][T11197] das-1802ao [ 517.470216][T11197] comedi: valid board names for das800 driver are: [ 517.479164][T11197] das-800 [ 517.483902][T11197] cio-das800 [ 517.489453][T11197] das-801 [ 517.508294][T11232] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 517.537826][T11197] cio-das801 [ 517.593590][T11232] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 517.603407][T11232] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 517.609493][T11232] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 517.615808][T11232] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 517.629352][T11197] das-802 [ 517.750870][T11197] cio-das802 [ 517.774462][T11197] cio-das802/16 [ 517.784725][T11197] comedi: valid board names for isa-das08 driver are: [ 517.791482][T11197] isa-das08 [ 518.003246][ T10] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 518.234362][T11197] das08-pgm [ 518.237743][T11197] das08-pgh [ 518.242662][T11197] das08-pgl [ 518.253477][T11197] das08-aoh [ 518.260801][T11197] das08-aol [ 518.264393][T11197] das08-aom [ 518.269535][T11197] das08/jr-ao [ 518.274402][T11197] das08jr-16-ao [ 518.278079][T11197] pc104-das08 [ 518.281573][T11197] das08jr/16 [ 518.285248][T11197] comedi: valid board names for das16m1 driver are: [ 518.292023][T11197] das16m1 [ 518.296095][T11197] comedi: valid board names for dac02 driver are: [ 518.311585][T11197] dac02 [ 518.315167][T11197] comedi: valid board names for rti802 driver are: [ 518.321885][T11197] rti802 [ 518.326121][T11197] comedi: valid board names for rti800 driver are: [ 518.335469][T11197] rti800 [ 518.338572][T11197] rti815 [ 518.341642][T11197] comedi: valid board names for pcm3724 driver are: [ 518.349127][T11197] pcm3724 [ 518.352291][T11197] comedi: valid board names for pcl818 driver are: [ 518.360880][T11197] pcl818l [ 518.364137][T11197] pcl818h [ 518.367295][T11197] pcl818hd [ 518.370595][T11197] pcl818hg [ 518.375059][T11197] pcl818 [ 518.378158][T11197] pcl718 [ 518.381300][T11197] pcm3718 [ 518.385642][T11197] comedi: valid board names for pcl816 driver are: [ 518.392330][T11197] pcl816 [ 518.395402][T11197] pcl814b [ 518.398557][T11197] comedi: valid board names for pcl812 driver are: [ 518.405484][T11197] pcl812 [ 518.408697][T11197] pcl812pg [ 518.412801][ T10] usb 6-1: config 0 has no interfaces? [ 518.418794][T11197] acl8112pg [ 518.422211][T11197] acl8112dg [ 518.425950][T11197] acl8112hg [ 518.429412][T11197] a821pgl [ 518.432715][T11197] a821pglnda [ 518.437355][T11197] a821pgh [ 518.440866][T11197] a822pgl [ 518.445555][ T10] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 518.456142][T11197] a822pgh [ 518.459232][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.469122][T11197] a823pgl [ 518.472143][T11197] a823pgh [ 518.476399][ T10] usb 6-1: Product: syz [ 518.481273][T11197] pcl813 [ 518.481840][ T10] usb 6-1: Manufacturer: syz [ 518.489681][T11197] pcl813b [ 518.489980][ T10] usb 6-1: SerialNumber: syz [ 518.506234][ T10] usb 6-1: config 0 descriptor?? [ 518.514576][ T5937] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 518.773171][T11197] acl8113 [ 518.777211][T11197] iso813 [ 518.780137][T11197] acl8216 [ 518.800520][T11197] a826pg [ 518.804521][ T5937] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 518.888640][T11197] comedi: valid board names for pcl730 driver are: [ 518.942627][ T9479] Bluetooth: hci0: command 0x0c1a tx timeout [ 518.982416][T11197] pcl730 [ 518.985541][T11197] iso730 [ 518.988496][T11197] acl7130 [ 518.991987][T11197] pcm3730 [ 518.995149][ T5937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.995767][ T10] usb 6-1: USB disconnect, device number 13 [ 519.010984][T11197] pcl725 [ 519.014479][ T5937] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 519.027911][ T5937] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 519.032790][T11197] p8r8dio [ 519.040130][T11197] acl7225b [ 519.045626][ T5937] usb 5-1: Manufacturer: syz [ 519.045641][T11197] p16r16dio [ 519.050350][T11197] pcl733 [ 519.061827][ T5937] usb 5-1: config 0 descriptor?? [ 519.069002][T11197] pcl734 [ 519.072031][T11197] opmm-1616-xt [ 519.078197][T11197] pearl-mm-p [ 519.081520][T11197] ir104-pbf [ 519.093762][T11197] comedi: valid board names for pcl726 driver are: [ 519.110056][T11197] pcl726 [ 519.117354][T11197] pcl727 [ 519.121791][T11197] pcl728 [ 519.133917][T11197] acl6126 [ 519.137147][T11197] acl6128 [ 519.140214][T11197] comedi: valid board names for pcl724 driver are: [ 519.151574][T11197] pcl724 [ 519.152577][ T5937] rc_core: IR keymap rc-hauppauge not found [ 519.160510][T11197] pcl722 [ 519.167815][ T5937] Registered IR keymap rc-empty [ 519.169396][T11197] pcl731 [ 519.225740][T11197] acl7122 [ 519.373497][T11197] acl7124 [ 519.376886][ T5937] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 519.391575][T11197] pet48dio [ 519.392785][ T5937] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input27 [ 519.408643][T11197] pcmio48 [ 519.428537][T11197] onyx-mm-dio [ 519.433416][T11197] comedi: valid board names for pcl711 driver are: [ 519.441441][T11197] pcl711 [ 519.446630][T11197] pcl711b [ 519.449728][T11197] acl8112hg [ 519.455440][T11197] acl8112dg [ 519.460109][T11197] comedi: valid board names for amplc_pc263 driver are: [ 519.473795][T11197] pc263 [ 519.476702][T11197] comedi: valid board names for amplc_pc236 driver are: [ 519.484887][T11197] pc36at [ 519.488105][T11197] comedi: valid board names for amplc_dio200 driver are: [ 519.512027][ T5937] usb 5-1: USB disconnect, device number 34 [ 519.535198][T11197] pc212e [ 519.570369][T11197] pc214e [ 519.591080][T11197] pc215e [ 519.606114][T11197] pc218e [ 519.626512][T11197] pc272e [ 519.644237][T11197] comedi: valid board names for comedi_parport driver are: [ 519.666157][ T9479] Bluetooth: hci5: command 0x040f tx timeout [ 519.672733][ T5858] Bluetooth: hci3: command 0x0c1a tx timeout [ 519.673583][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 519.678811][ T5861] Bluetooth: hci1: command 0x0c1a tx timeout [ 519.872358][T11197] comedi_parport [ 520.065972][ T5937] usb 4-1: USB disconnect, device number 35 [ 520.082635][T11197] comedi: valid board names for comedi_test driver are: [ 520.263714][T11197] comedi_test [ 520.269470][T11197] comedi: valid board names for comedi_bond driver are: [ 520.277426][T11197] comedi_bond [ 520.481059][ T30] audit: type=1400 audit(1758393422.991:787): avc: denied { read } for pid=11263 comm="syz.0.1336" lport=60766 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 520.560333][T11257] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 520.573778][T11257] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 520.581808][T11257] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 520.593808][T11257] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 520.964155][T11273] fuse: Bad value for 'fd' [ 521.352197][T11257] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 521.516578][ T30] audit: type=1400 audit(1758393424.021:788): avc: denied { getopt } for pid=11277 comm="syz.3.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 521.597997][ T30] audit: type=1400 audit(1758393424.021:789): avc: denied { listen } for pid=11277 comm="syz.3.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 521.672588][ T5937] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 521.707466][T11289] kvm: pic: non byte write [ 521.743165][ T9479] Bluetooth: hci0: command 0x0c1a tx timeout [ 521.784266][T11289] kvm: Disabled LAPIC found during irq injection [ 521.844584][T11294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1341'. [ 521.889114][T11280] netlink: 'syz.1.1338': attribute type 5 has an invalid length. [ 521.911971][ T5937] usb 5-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 521.924679][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.934509][ T5937] usb 5-1: Product: syz [ 521.938844][ T5937] usb 5-1: Manufacturer: syz [ 521.946349][ T5937] usb 5-1: SerialNumber: syz [ 521.966680][ T5937] usb 5-1: config 0 descriptor?? [ 522.418283][T11301] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1337'. [ 522.492730][ T5964] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 522.629897][ T9479] Bluetooth: hci3: command 0x0c1a tx timeout [ 522.636765][ T5858] Bluetooth: hci2: command 0x0c1a tx timeout [ 522.642994][ T5861] Bluetooth: hci1: command 0x0c1a tx timeout [ 522.671651][ T5964] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.683690][ T5964] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 522.693590][ T5964] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 522.730817][ T5964] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 522.740076][ T5964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.760524][ T5964] usb 1-1: config 0 descriptor?? [ 523.035977][ T5916] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 523.079473][ T2202] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.160186][ T2202] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.561734][ T9479] Bluetooth: hci5: command 0x040f tx timeout [ 523.606933][ T5916] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 523.616914][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 523.667211][ T5964] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 523.720756][ T5916] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 523.792126][T11313] comedi: valid board names for 8255 driver are: [ 523.798626][T11313] 8255 [ 523.802444][T11313] comedi: valid board names for vmk80xx driver are: [ 523.809115][T11313] vmk80xx [ 523.812183][T11313] comedi: valid board names for usbduxsigma driver are: [ 523.819256][T11313] usbduxsigma [ 523.822851][T11313] comedi: valid board names for usbduxfast driver are: [ 523.829798][T11313] usbduxfast [ 523.833182][T11313] comedi: valid board names for usbdux driver are: [ 523.839719][T11313] usbdux [ 523.842819][T11313] comedi: valid board names for ni6501 driver are: [ 523.849346][T11313] ni6501 [ 523.852298][T11313] comedi: valid board names for dt9812 driver are: [ 523.858949][T11313] dt9812 [ 523.861927][T11313] comedi: valid board names for ni_labpc_cs driver are: [ 523.868944][T11313] ni_labpc_cs [ 523.872342][T11313] comedi: valid board names for ni_daq_700 driver are: [ 523.879281][T11313] ni_daq_700 [ 523.882737][T11313] comedi: valid board names for labpc_pci driver are: [ 523.889571][T11313] labpc_pci [ 523.892870][T11313] comedi: valid board names for adl_pci9118 driver are: [ 523.899815][T11313] pci9118dg [ 523.903078][T11313] pci9118hg [ 523.907785][T11313] pci9118hr [ 523.911015][T11313] comedi: valid board names for 8255_pci driver are: [ 523.917835][T11313] 8255_pci [ 523.920991][T11313] comedi: valid board names for s526 driver are: [ 523.927424][T11313] s526 [ 523.930222][T11313] comedi: valid board names for multiq3 driver are: [ 523.936959][T11313] multiq3 [ 523.940014][T11313] comedi: valid board names for pcmuio driver are: [ 523.946670][T11313] pcmuio48 [ 523.949812][T11313] pcmuio96 [ 523.953002][T11313] comedi: valid board names for pcmmio driver are: [ 523.959531][T11313] pcmmio [ 523.963286][T11313] comedi: valid board names for pcmda12 driver are: [ 523.969911][T11313] pcmda12 [ 523.973049][T11313] comedi: valid board names for pcmad driver are: [ 523.979484][T11313] pcmad12 [ 523.982554][T11313] pcmad16 [ 523.985608][T11313] comedi: valid board names for ni_labpc driver are: [ 523.992301][T11313] lab-pc-1200 [ 523.995781][T11313] lab-pc-1200ai [ 523.999334][T11313] lab-pc+ [ 524.002384][T11313] comedi: valid board names for atmio16 driver are: [ 524.010480][T11313] atmio16 [ 524.013609][T11313] atmio16d [ 524.016733][T11313] comedi: valid board names for ni_at_ao driver are: [ 524.023510][T11313] at-ao-6 [ 524.026595][T11313] at-ao-10 [ 524.029748][T11313] comedi: valid board names for ni_at_a2150 driver are: [ 524.036837][T11313] ni_at_a2150 [ 524.040254][T11313] comedi: valid board names for adq12b driver are: [ 524.046858][T11313] adq12b [ 524.049838][T11313] comedi: valid board names for mpc624 driver are: [ 524.056405][T11313] mpc624 [ 524.059383][T11313] comedi: valid board names for c6xdigio driver are: [ 524.066152][T11313] c6xdigio [ 524.069303][T11313] comedi: valid board names for aio_iiro_16 driver are: [ 524.076370][T11313] aio_iiro_16 [ 524.079751][T11313] comedi: valid board names for aio_aio12_8 driver are: [ 524.086797][T11313] aio_aio12_8 [ 524.090161][T11313] aio_ai12_8 [ 524.093541][T11313] aio_ao12_4 [ 524.096853][T11313] comedi: valid board names for fl512 driver are: [ 524.103317][T11313] fl512 [ 524.106193][T11313] comedi: valid board names for dmm32at driver are: [ 524.114281][T11313] dmm32at [ 524.117351][T11313] comedi: valid board names for dt282x driver are: [ 524.123958][T11313] dt2821 [ 524.126923][T11313] dt2821-f [ 524.130043][T11313] dt2821-g [ 524.133234][T11313] dt2823 [ 524.136210][T11313] dt2824-pgh [ 524.139508][T11313] dt2824-pgl [ 524.142914][T11313] dt2825 [ 524.145875][T11313] dt2827 [ 524.148832][T11313] dt2828 [ 524.151794][T11313] dt2829 [ 524.154855][T11313] dt21-ez [ 524.157905][T11313] dt23-ez [ 524.160937][T11313] dt24-ez [ 524.164022][T11313] dt24-ez-pgl [ 524.167432][T11313] comedi: valid board names for dt2817 driver are: [ 524.174021][T11313] dt2817 [ 524.176979][T11313] comedi: valid board names for dt2815 driver are: [ 524.183534][T11313] dt2815 [ 524.186483][T11313] comedi: valid board names for dt2814 driver are: [ 524.193115][T11313] dt2814 [ 524.196091][T11313] comedi: valid board names for dt2811 driver are: [ 524.202663][T11313] dt2811-pgh [ 524.205971][T11313] dt2811-pgl [ 524.209283][T11313] comedi: valid board names for dt2801 driver are: [ 524.217356][T11313] dt2801 [ 524.220337][T11313] comedi: valid board names for das6402 driver are: [ 524.227044][T11313] das6402-12 [ 524.230354][T11313] das6402-16 [ 524.233714][T11313] comedi: valid board names for das1800 driver are: [ 524.240329][T11313] das-1701st [ 524.243689][T11313] das-1701st-da [ 524.247240][T11313] das-1702st [ 524.250541][T11313] das-1702st-da [ 524.254196][T11313] das-1702hr [ 524.257513][T11313] das-1702hr-da [ 524.261086][T11313] das-1701ao [ 524.264423][T11313] das-1702ao [ 524.267730][T11313] das-1801st [ 524.271024][T11313] das-1801st-da [ 524.274669][T11313] das-1802st [ 524.277971][T11313] das-1802st-da [ 524.281535][T11313] das-1802hr [ 524.284891][T11313] das-1802hr-da [ 524.288444][T11313] das-1801hc [ 524.291745][T11313] das-1802hc [ 524.295100][T11313] das-1801ao [ 524.298393][T11313] das-1802ao [ 524.301696][T11313] comedi: valid board names for das800 driver are: [ 524.308308][T11313] das-800 [ 524.311350][T11313] cio-das800 [ 524.316061][T11313] das-801 [ 524.319113][T11313] cio-das801 [ 524.322429][T11313] das-802 [ 524.325537][T11313] cio-das802 [ 524.328841][T11313] cio-das802/16 [ 524.332406][T11313] comedi: valid board names for isa-das08 driver are: [ 524.339276][T11313] isa-das08 [ 524.342577][T11313] das08-pgm [ 524.345800][T11313] das08-pgh [ 524.349016][T11313] das08-pgl [ 524.352207][T11313] das08-aoh [ 524.355491][T11313] das08-aol [ 524.358705][T11313] das08-aom [ 524.361907][T11313] das08/jr-ao [ 524.365353][T11313] das08jr-16-ao [ 524.368905][T11313] pc104-das08 [ 524.372288][T11313] das08jr/16 [ 524.375663][T11313] comedi: valid board names for das16m1 driver are: [ 524.382285][T11313] das16m1 [ 524.385965][T11313] comedi: valid board names for dac02 driver are: [ 524.392414][T11313] dac02 [ 524.395375][T11313] comedi: valid board names for rti802 driver are: [ 524.401917][T11313] rti802 [ 524.404942][T11313] comedi: valid board names for rti800 driver are: [ 524.411465][T11313] rti800 [ 524.414494][T11313] rti815 [ 524.419292][T11313] comedi: valid board names for pcm3724 driver are: [ 524.425978][T11313] pcm3724 [ 524.429044][T11313] comedi: valid board names for pcl818 driver are: [ 524.435648][T11313] pcl818l [ 524.438700][T11313] pcl818h [ 524.441732][T11313] pcl818hd [ 524.444902][T11313] pcl818hg [ 524.448034][T11313] pcl818 [ 524.450977][T11313] pcl718 [ 524.454022][T11313] pcm3718 [ 524.457055][T11313] comedi: valid board names for pcl816 driver are: [ 524.463612][T11313] pcl816 [ 524.466575][T11313] pcl814b [ 524.469607][T11313] comedi: valid board names for pcl812 driver are: [ 524.476170][T11313] pcl812 [ 524.479115][T11313] pcl812pg [ 524.482232][T11313] acl8112pg [ 524.485494][T11313] acl8112dg [ 524.488716][T11313] acl8112hg [ 524.491936][T11313] a821pgl [ 524.495016][T11313] a821pglnda [ 524.498308][T11313] a821pgh [ 524.501344][T11313] a822pgl [ 524.504412][T11313] a822pgh [ 524.507451][T11313] a823pgl [ 524.510480][T11313] a823pgh [ 524.513607][T11313] pcl813 [ 524.516581][T11313] pcl813b [ 524.521034][T11313] acl8113 [ 524.524148][T11313] iso813 [ 524.527116][T11313] acl8216 [ 524.530160][T11313] a826pg [ 524.533182][T11313] comedi: valid board names for pcl730 driver are: [ 524.539725][T11313] pcl730 [ 524.543020][T11313] iso730 [ 524.545987][T11313] acl7130 [ 524.549052][T11313] pcm3730 [ 524.552095][T11313] pcl725 [ 524.555135][T11313] p8r8dio [ 524.558200][T11313] acl7225b [ 524.561333][T11313] p16r16dio [ 524.564612][T11313] pcl733 [ 524.567576][T11313] pcl734 [ 524.570529][T11313] opmm-1616-xt [ 524.574085][T11313] pearl-mm-p [ 524.577394][T11313] ir104-pbf [ 524.580600][T11313] comedi: valid board names for pcl726 driver are: [ 524.587189][T11313] pcl726 [ 524.590152][T11313] pcl727 [ 524.593161][T11313] pcl728 [ 524.596135][T11313] acl6126 [ 524.599166][T11313] acl6128 [ 524.602210][T11313] comedi: valid board names for pcl724 driver are: [ 524.608772][T11313] pcl724 [ 524.611729][T11313] pcl722 [ 524.614732][T11313] pcl731 [ 524.617708][T11313] acl7122 [ 524.622045][T11313] acl7124 [ 524.625325][T11313] pet48dio [ 524.628478][T11313] pcmio48 [ 524.631511][T11313] onyx-mm-dio [ 524.634982][T11313] comedi: valid board names for pcl711 driver are: [ 524.641508][T11313] pcl711 [ 524.644553][T11313] pcl711b [ 524.647626][T11313] acl8112hg [ 524.650844][T11313] acl8112dg [ 524.654169][T11313] comedi: valid board names for amplc_pc263 driver are: [ 524.661124][T11313] pc263 [ 524.664045][T11313] comedi: valid board names for amplc_pc236 driver are: [ 524.670987][T11313] pc36at [ 524.674015][T11313] comedi: valid board names for amplc_dio200 driver are: [ 524.681035][T11313] pc212e [ 524.684050][T11313] pc214e [ 524.686995][T11313] pc215e [ 524.689924][T11313] pc218e [ 524.693027][T11313] pc272e [ 524.695969][T11313] comedi: valid board names for comedi_parport driver are: [ 524.703745][T11313] comedi_parport [ 524.707431][T11313] comedi: valid board names for comedi_test driver are: [ 524.714478][T11313] comedi_test [ 524.717904][T11313] comedi: valid board names for comedi_bond driver are: [ 524.726416][T11313] comedi_bond [ 524.914380][ T5916] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 524.942422][ T5964] usb 1-1: USB disconnect, device number 23 [ 524.985557][ T5916] usb 4-1: Manufacturer: syz [ 525.041543][ T5916] usb 4-1: config 0 descriptor?? [ 525.100098][T11316] syzkaller1: entered promiscuous mode [ 525.112242][T11316] syzkaller1: entered allmulticast mode [ 525.199081][T11316] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 525.353196][ T5937] usb 5-1: USB disconnect, device number 35 [ 525.373550][ T5916] rc_core: IR keymap rc-hauppauge not found [ 525.383873][ T5916] Registered IR keymap rc-empty [ 525.392397][ T5916] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 525.422625][ T5916] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input28 [ 525.547700][ T5916] usb 4-1: USB disconnect, device number 36 [ 525.611949][T11325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1349'. [ 528.812741][ T5916] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 529.672698][ T5916] usb 6-1: Using ep0 maxpacket: 8 [ 529.761173][ T5916] usb 6-1: config 0 has an invalid interface number: 143 but max is 0 [ 529.882170][ T5916] usb 6-1: config 0 has no interface number 0 [ 529.895566][ T5916] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 529.925655][ T5916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.958367][ T5916] usb 6-1: config 0 descriptor?? [ 530.181444][ T5916] viperboard 6-1:0.143: version 0.00 found at bus 006 address 014 [ 530.268634][ T5916] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 530.331177][ T5916] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 530.576536][ T5916] usb 6-1: USB disconnect, device number 14 [ 531.439427][T11405] FAULT_INJECTION: forcing a failure. [ 531.439427][T11405] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 531.628753][T11405] CPU: 1 UID: 0 PID: 11405 Comm: syz.5.1370 Not tainted syzkaller #0 PREEMPT(full) [ 531.628779][T11405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 531.628789][T11405] Call Trace: [ 531.628795][T11405] [ 531.628802][T11405] dump_stack_lvl+0x16c/0x1f0 [ 531.628830][T11405] should_fail_ex+0x512/0x640 [ 531.628856][T11405] _copy_to_user+0x32/0xd0 [ 531.628884][T11405] simple_read_from_buffer+0xcb/0x170 [ 531.628905][T11405] proc_fail_nth_read+0x197/0x240 [ 531.628927][T11405] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 531.628950][T11405] ? rw_verify_area+0xcf/0x6c0 [ 531.628976][T11405] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 531.628997][T11405] vfs_read+0x1e1/0xcf0 [ 531.629019][T11405] ? __pfx___mutex_lock+0x10/0x10 [ 531.629043][T11405] ? __pfx_vfs_read+0x10/0x10 [ 531.629068][T11405] ? __fget_files+0x20e/0x3c0 [ 531.629096][T11405] ksys_read+0x12a/0x250 [ 531.629113][T11405] ? __pfx_ksys_read+0x10/0x10 [ 531.629133][T11405] ? fdget+0x187/0x210 [ 531.629156][T11405] do_syscall_64+0xcd/0x4e0 [ 531.629181][T11405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.629199][T11405] RIP: 0033:0x7f8887d8d63c [ 531.629214][T11405] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 531.629231][T11405] RSP: 002b:00007f8888bab030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 531.629249][T11405] RAX: ffffffffffffffda RBX: 00007f8887fd6090 RCX: 00007f8887d8d63c [ 531.629262][T11405] RDX: 000000000000000f RSI: 00007f8888bab0a0 RDI: 0000000000000003 [ 531.629273][T11405] RBP: 00007f8888bab090 R08: 0000000000000000 R09: 0000000000000000 [ 531.629283][T11405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.629294][T11405] R13: 00007f8887fd6128 R14: 00007f8887fd6090 R15: 00007ffe8675ce48 [ 531.629319][T11405] [ 531.818431][ T5937] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 532.282596][ T5937] usb 5-1: device descriptor read/64, error -71 [ 532.566412][ T5937] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 532.781302][ T5937] usb 5-1: device descriptor read/64, error -71 [ 532.897867][ T5937] usb usb5-port1: attempt power cycle [ 533.180777][ T10] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 533.353514][ T10] usb 2-1: device descriptor read/64, error -71 [ 533.359791][ T5937] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 533.553058][ T5937] usb 5-1: device descriptor read/8, error -71 [ 533.722880][ T10] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 533.802996][ T5937] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 534.123038][ T5937] usb 5-1: device descriptor read/8, error -71 [ 534.242811][ T5937] usb usb5-port1: unable to enumerate USB device [ 534.252561][ T10] usb 2-1: device descriptor read/64, error -71 [ 534.416566][ T10] usb usb2-port1: attempt power cycle [ 534.456210][T11446] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=11446 comm=syz.3.1381 [ 534.610794][ T30] audit: type=1326 audit(1758393437.121:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11437 comm="syz.0.1378" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97b798ec29 code=0x0 [ 535.214104][T11446] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 535.242671][ T10] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 535.290909][ T10] usb 2-1: device descriptor read/8, error -71 [ 535.552538][ T10] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 536.333291][ T7478] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 536.381409][ T10] usb 2-1: device descriptor read/8, error -71 [ 536.502133][T11456] nvme_fabrics: missing parameter 'transport=%s' [ 536.636634][ T10] usb usb2-port1: unable to enumerate USB device [ 536.807160][T11456] nvme_fabrics: missing parameter 'nqn=%s' [ 536.834135][ T5964] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 536.900718][T11464] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1384'. [ 537.265844][ T7478] usb 6-1: Using ep0 maxpacket: 32 [ 537.279541][ T7478] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 537.289614][ T7478] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.297755][ T7478] usb 6-1: Product: syz [ 537.301930][ T7478] usb 6-1: Manufacturer: syz [ 537.307126][ T7478] usb 6-1: SerialNumber: syz [ 537.314882][ T7478] usb 6-1: config 0 descriptor?? [ 537.451537][T11451] syz.3.1381 (11451): drop_caches: 2 [ 537.492828][ T5964] usb 1-1: Using ep0 maxpacket: 8 [ 537.511897][ T5964] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 537.528172][ T5964] usb 1-1: config 0 has no interface number 0 [ 537.534414][ T5964] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 537.546668][ T5964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.559257][ T7478] snd-usb-6fire 6-1:0.0: unknown device firmware state received from device: [ 537.569230][ T7478] 00 00 00 00 00 00 00 00 [ 537.574680][ T5964] usb 1-1: config 0 descriptor?? [ 537.581932][ T7478] snd-usb-6fire 6-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 537.662800][ T31] INFO: task syz.2.814:9222 blocked for more than 143 seconds. [ 537.670585][ T31] Not tainted syzkaller #0 [ 537.676006][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 537.684856][ T976] usb 2-1: new low-speed USB device number 50 using dummy_hcd [ 537.685082][ T31] task:syz.2.814 state:D stack:26264 pid:9222 tgid:9215 ppid:5847 task_flags:0x400740 flags:0x00004006 [ 537.703080][ T5964] viperboard 1-1:0.143: version 0.00 found at bus 001 address 024 [ 537.705056][ T10] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 537.720428][ T5964] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 537.725202][ T31] Call Trace: [ 537.735442][ T31] [ 537.739137][ T31] __schedule+0x1190/0x5de0 [ 537.739878][ T5964] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 537.746082][ T31] ? sched_clock+0x38/0x60 [ 537.762703][ T5937] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 537.769286][ T31] ? __pfx___schedule+0x10/0x10 [ 537.778740][ T31] ? find_held_lock+0x2b/0x80 [ 537.784116][ T31] ? schedule+0x2d7/0x3a0 [ 537.788661][ T31] schedule+0xe7/0x3a0 [ 537.795976][ T31] schedule_timeout+0x257/0x290 [ 537.799200][ T5968] usb 6-1: USB disconnect, device number 15 [ 537.801021][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 537.822671][ T976] usb 2-1: device descriptor read/64, error -71 [ 537.829409][ T31] ? rcu_is_watching+0x12/0xc0 [ 537.834995][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 537.840299][ T31] __wait_for_common+0x2ff/0x4e0 [ 537.845742][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 537.851461][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 537.857432][ T31] wait_for_completion_state+0x1c/0x40 [ 537.865933][ T31] vfs_coredump+0x981/0x5670 [ 537.870695][ T31] ? lock_acquire+0x179/0x350 [ 537.875839][ T31] ? __pfx_vfs_coredump+0x10/0x10 [ 537.881026][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 537.886560][T11456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.887414][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 537.902644][ T31] ? lock_acquire+0x179/0x350 [ 537.907392][ T31] ? lock_acquire+0x179/0x350 [ 537.912158][ T31] ? find_held_lock+0x2b/0x80 [ 537.917442][ T31] ? is_bpf_text_address+0x8a/0x1a0 [ 537.923043][ T31] ? bpf_ksym_find+0x127/0x1c0 [ 537.927891][ T31] ? __kernel_text_address+0xd/0x40 [ 537.934637][ T5937] usb 4-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 537.937311][ T31] ? unwind_get_return_address+0x59/0xa0 [ 537.949940][T11456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.950928][ T31] ? arch_stack_walk+0xa6/0x100 [ 537.958532][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 537.966142][ T31] ? stack_trace_save+0x8e/0xc0 [ 537.969800][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.973079][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 537.991186][T11454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.999808][T11454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.010289][ T5964] usb 1-1: USB disconnect, device number 24 [ 538.020487][ T10] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 538.021283][ T31] ? stack_depot_save_flags+0x29/0x9c0 [ 538.029579][ T5937] usb 4-1: config 0 descriptor?? [ 538.037506][ T31] ? __lock_acquire+0xb97/0x1ce0 [ 538.046516][ T10] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 538.054406][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.056324][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 538.061811][ T31] ? proc_coredump_connector+0x2d1/0x4f0 [ 538.070582][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 538.085793][ T976] usb 2-1: new low-speed USB device number 51 using dummy_hcd [ 538.093709][ T31] ? __pfx_proc_coredump_connector+0x10/0x10 [ 538.099742][ T31] ? rcu_is_watching+0x12/0xc0 [ 538.104610][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 538.105488][ T31] get_signal+0x22e3/0x26d0 [ 538.114280][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 538.114323][ T10] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 538.114344][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.128943][ T10] usb 5-1: config 0 descriptor?? [ 538.134886][ T31] ? __pfx_get_signal+0x10/0x10 [ 538.159578][ T31] ? fpu__clear_user_states+0xf4/0x1d0 [ 538.165533][ T31] ? rcu_is_watching+0x12/0xc0 [ 538.170353][ T31] ? __local_bh_enable_ip+0xa4/0x120 [ 538.176135][ T31] arch_do_signal_or_restart+0x8f/0x7d0 [ 538.181714][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 538.188145][ T31] ? xfd_validate_state+0x61/0x180 [ 538.195417][ T31] exit_to_user_mode_loop+0x84/0x110 [ 538.200815][ T31] do_syscall_64+0x41c/0x4e0 [ 538.205591][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.211521][ T31] RIP: 0033:0x7fd1afc4f980 [ 538.216365][ T31] RSP: 002b:00007fd1b0b563f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 538.224968][ T976] usb 2-1: device descriptor read/64, error -71 [ 538.225071][ T31] RAX: 0000000000000000 RBX: 00007fd1affd6098 RCX: 00007fd1afd8ec29 [ 538.239477][ T31] RDX: 00007fd1b0b56400 RSI: 00007fd1b0b56530 RDI: 000000000000000b [ 538.248033][ T31] RBP: 00007fd1affd6090 R08: 00007fd1b0b79000 R09: 0000000000000000 [ 538.256116][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 538.264128][ T31] R13: 00007fd1affd6128 R14: 00007ffc10fd2430 R15: 00007ffc10fd2518 [ 538.272130][ T31] [ 538.275366][ T31] [ 538.275366][ T31] Showing all locks held in the system: [ 538.283129][ T31] 5 locks held by kworker/0:1/10: [ 538.288224][ T31] #0: ffff888143a87d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 538.299401][ T31] #1: ffffc900000f7d10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 538.319138][ T31] #2: ffff8881453a2198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0 [ 538.328818][ T31] #3: ffff888059e18198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 538.341005][ T976] usb usb2-port1: attempt power cycle [ 538.357167][ T31] #4: ffff88802a3ff160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 538.366802][ T31] 1 lock held by khungtaskd/31: [ 538.371733][ T31] #0: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 538.381939][ T31] 6 locks held by kworker/1:2/976: [ 538.388566][ T31] #0: ffff888143a87d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 538.399712][ T31] #1: ffffc9000394fd10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 538.411158][ T31] #2: ffff88814531a198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0 [ 538.420203][ T31] #3: ffff88814531d518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2981/0x4fe0 [ 538.430312][ T31] #4: ffff8881427d4768 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x29aa/0x4fe0 [ 538.440055][ T31] #5: ffffffff8f93b670 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x1a1/0x1cb0 [ 538.451216][ T31] 2 locks held by kworker/u8:9/5145: [ 538.456581][ T31] 2 locks held by getty/5607: [ 538.461311][ T31] #0: ffff88814d8db0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 538.490098][T11475] Bluetooth: hci6: Frame reassembly failed (-84) [ 538.520503][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 538.530826][ T31] 5 locks held by kworker/0:6/5937: [ 538.537548][ T5118] Bluetooth: hci6: Frame reassembly failed (-84) [ 538.541387][ T5937] glorious 0003:258A:0033.0013: hidraw0: USB HID v0.00 Device [Glorious Model D] on usb-dummy_hcd.3-1/input0 [ 538.555831][ T31] 7 locks held by kworker/1:5/5964: [ 538.555849][ T31] #0: ffff888143a87d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 538.555906][ T31] #1: ffffc9000463fd10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 538.555955][ T31] #2: ffff888029742198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0 [ 538.556007][ T31] #3: ffff888032fc5198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x9c0 [ 538.556058][ T31] #4: ffff888079271160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xa4/0x620 [ 538.556110][ T31] #5: ffff88807d01f0f8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xa4/0x620 [ 538.649118][ T31] #6: ffffffff8e5ccb38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 538.660604][ T31] 3 locks held by kworker/u9:3/9479: [ 538.666275][ T31] #0: ffff888058053948 ((wq_completion)hci6){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 538.678060][ T31] #1: ffffc9001c4bfd10 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 538.691833][ T31] #2: ffff888028f10dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_open+0x22/0x90 [ 538.701501][ T976] usb 2-1: new low-speed USB device number 52 using dummy_hcd [ 538.713490][ T31] 2 locks held by syz.4.1387/11474: [ 538.718750][ T31] 2 locks held by fido_id/11477: [ 538.726856][ T31] [ 538.730466][ T31] ============================================= [ 538.730466][ T31] [ 538.741750][ T976] usb 2-1: device descriptor read/8, error -71 [ 538.781036][ T31] NMI backtrace for cpu 1 [ 538.781053][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 538.781073][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 538.781083][ T31] Call Trace: [ 538.781089][ T31] [ 538.781096][ T31] dump_stack_lvl+0x116/0x1f0 [ 538.781123][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 538.781139][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 538.781161][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 538.781188][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 538.781208][ T31] watchdog+0xf0e/0x1260 [ 538.781233][ T31] ? __pfx_watchdog+0x10/0x10 [ 538.781250][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 538.781273][ T31] ? __kthread_parkme+0x19e/0x250 [ 538.781301][ T31] ? __pfx_watchdog+0x10/0x10 [ 538.781319][ T31] kthread+0x3c2/0x780 [ 538.781337][ T31] ? __pfx_kthread+0x10/0x10 [ 538.781355][ T31] ? rcu_is_watching+0x12/0xc0 [ 538.781375][ T31] ? __pfx_kthread+0x10/0x10 [ 538.781393][ T31] ret_from_fork+0x56a/0x730 [ 538.781409][ T31] ? __pfx_kthread+0x10/0x10 [ 538.781426][ T31] ret_from_fork_asm+0x1a/0x30 [ 538.781458][ T31] [ 538.781465][ T31] Sending NMI from CPU 1 to CPUs 0: [ 538.870608][T10589] usb 4-1: USB disconnect, device number 37 [ 538.872433][ C0] NMI backtrace for cpu 0 [ 538.872445][ C0] CPU: 0 UID: 0 PID: 10589 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) [ 538.872461][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 538.872470][ C0] Workqueue: usb_hub_wq hub_event [ 538.872492][ C0] RIP: 0010:lock_is_held_type+0x87/0x150 [ 538.872513][ C0] Code: f4 8d 4d 8d ac 24 f0 0a 00 00 45 31 ff e8 81 14 00 00 65 ff 05 52 62 42 08 41 8b 84 24 e8 0a 00 00 85 c0 7f 17 e9 92 00 00 00 <41> 83 c7 01 45 3b bc 24 e8 0a 00 00 0f 8d 80 00 00 00 49 63 c7 48 [ 538.872526][ C0] RSP: 0018:ffffc90000007bb0 EFLAGS: 00000046 [ 538.872536][ C0] RAX: 0000000000000000 RBX: ffff88807d4aaf80 RCX: 0000000000000001 [ 538.872545][ C0] RDX: 0000000000000000 RSI: ffffffff8e5c15a0 RDI: ffff88807d4aaf80 [ 538.872553][ C0] RBP: ffffffff8e5c15a0 R08: 0000000000000000 R09: ffffed10039d4fa9 [ 538.872561][ C0] R10: ffff88801cea7d4f R11: ffffffff818c1282 R12: ffff88807d4aa440 [ 538.872570][ C0] R13: ffff88807d4aaf30 R14: 00000000ffffffff R15: 0000000000000002 [ 538.872579][ C0] FS: 0000000000000000(0000) GS:ffff8881246b2000(0000) knlGS:0000000000000000 [ 538.872592][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 538.872601][ C0] CR2: 000000110c3a64ef CR3: 000000005eb1c000 CR4: 00000000003526f0 [ 538.872609][ C0] Call Trace: [ 538.872614][ C0] [ 538.872622][ C0] select_task_rq_fair+0x1f64/0x45e0 [ 538.872646][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 538.872660][ C0] ? __pfx_select_task_rq_fair+0x10/0x10 [ 538.872677][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 538.872690][ C0] ? debug_object_deactivate+0x1ec/0x3a0 [ 538.872705][ C0] try_to_wake_up+0x583/0x1870 [ 538.872721][ C0] ? __pfx_try_to_wake_up+0x10/0x10 [ 538.872739][ C0] ? find_held_lock+0x2b/0x80 [ 538.872754][ C0] ? __hrtimer_run_queues+0x529/0xad0 [ 538.872770][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 538.872783][ C0] hrtimer_wakeup+0x47/0x60 [ 538.872795][ C0] __hrtimer_run_queues+0x202/0xad0 [ 538.872812][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 538.872826][ C0] ? read_tsc+0x9/0x20 [ 538.872843][ C0] ? rcu_is_watching+0x12/0xc0 [ 538.872859][ C0] hrtimer_interrupt+0x397/0x8e0 [ 538.872878][ C0] __sysvec_apic_timer_interrupt+0x10b/0x3f0 [ 538.872892][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 538.872908][ C0] [ 538.872912][ C0] [ 538.872917][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 538.872931][ C0] RIP: 0010:vprintk_emit+0x567/0x6d0 [ 538.872947][ C0] Code: 00 4d 85 ed 0f 85 19 01 00 00 e8 74 bd 20 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 d2 b8 20 00 48 85 ed 0f 85 25 01 00 00 54 bd 20 00 45 31 c9 41 b8 01 00 00 00 31 c9 48 8d 05 00 00 00 [ 538.872958][ C0] RSP: 0018:ffffc9000fbcf678 EFLAGS: 00000283 [ 538.872967][ C0] RAX: 0000000000013aa7 RBX: 0000000000000029 RCX: ffffc90018f30000 [ 538.872975][ C0] RDX: 0000000000100000 RSI: ffffffff819ae146 RDI: 0000000000000007 [ 538.872983][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 538.872991][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92001f79ed1 [ 538.872998][ C0] R13: 0000000000000200 R14: ffff888021ac8000 R15: ffffc9000fbcf740 [ 538.873009][ C0] ? vprintk_emit+0x686/0x6d0 [ 538.873025][ C0] ? vprintk_emit+0x686/0x6d0 [ 538.873040][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 538.873057][ C0] dev_printk_emit+0xfa/0x140 [ 538.873072][ C0] ? __pfx_dev_printk_emit+0x10/0x10 [ 538.873086][ C0] ? lock_acquire+0x179/0x350 [ 538.873098][ C0] ? __virt_addr_valid+0x31c/0x610 [ 538.873118][ C0] __dev_printk+0xf5/0x270 [ 538.873132][ C0] _dev_info+0xe4/0x120 [ 538.873146][ C0] ? __pfx__dev_info+0x10/0x10 [ 538.873159][ C0] ? find_held_lock+0x2b/0x80 [ 538.873178][ C0] usb_disconnect+0xec/0x9c0 [ 538.873195][ C0] hub_event+0x1c81/0x4fe0 [ 538.873217][ C0] ? __lock_acquire+0xb97/0x1ce0 [ 538.873236][ C0] ? __pfx_hub_event+0x10/0x10 [ 538.873252][ C0] ? assoc_array_insert+0x1660/0x3970 [ 538.873274][ C0] ? rcu_is_watching+0x12/0xc0 [ 538.873289][ C0] process_one_work+0x9cc/0x1b70 [ 538.873307][ C0] ? __pfx_wg_packet_encrypt_worker+0x10/0x10 [ 538.873322][ C0] ? __pfx_process_one_work+0x10/0x10 [ 538.873337][ C0] ? assign_work+0x1a0/0x250 [ 538.873350][ C0] worker_thread+0x6c8/0xf10 [ 538.873366][ C0] ? __kthread_parkme+0x19e/0x250 [ 538.873384][ C0] ? __pfx_worker_thread+0x10/0x10 [ 538.873397][ C0] kthread+0x3c2/0x780 [ 538.873408][ C0] ? __pfx_kthread+0x10/0x10 [ 538.873421][ C0] ? rcu_is_watching+0x12/0xc0 [ 538.873436][ C0] ? __pfx_kthread+0x10/0x10 [ 538.873447][ C0] ret_from_fork+0x56a/0x730 [ 538.873459][ C0] ? __pfx_kthread+0x10/0x10 [ 538.873470][ C0] ret_from_fork_asm+0x1a/0x30 [ 538.873490][ C0] [ 539.370635][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 539.377491][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 539.386591][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 539.396628][ T31] Call Trace: [ 539.399887][ T31] [ 539.402798][ T31] dump_stack_lvl+0x3d/0x1f0 [ 539.407375][ T31] vpanic+0x6e8/0x7a0 [ 539.411343][ T31] ? __pfx_vpanic+0x10/0x10 [ 539.415843][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 539.421722][ T31] panic+0xca/0xd0 [ 539.425425][ T31] ? __pfx_panic+0x10/0x10 [ 539.429832][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 539.435190][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 539.441326][ T31] ? watchdog+0xd78/0x1260 [ 539.445724][ T31] ? watchdog+0xd6b/0x1260 [ 539.450125][ T31] watchdog+0xd89/0x1260 [ 539.454351][ T31] ? __pfx_watchdog+0x10/0x10 [ 539.459006][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 539.464188][ T31] ? __kthread_parkme+0x19e/0x250 [ 539.469197][ T31] ? __pfx_watchdog+0x10/0x10 [ 539.473854][ T31] kthread+0x3c2/0x780 [ 539.477903][ T31] ? __pfx_kthread+0x10/0x10 [ 539.482474][ T31] ? rcu_is_watching+0x12/0xc0 [ 539.487227][ T31] ? __pfx_kthread+0x10/0x10 [ 539.491806][ T31] ret_from_fork+0x56a/0x730 [ 539.496386][ T31] ? __pfx_kthread+0x10/0x10 [ 539.500957][ T31] ret_from_fork_asm+0x1a/0x30 [ 539.505718][ T31] [ 539.508921][ T31] Kernel Offset: disabled [ 539.513226][ T31] Rebooting in 86400 seconds..