last executing test programs: 5m22.193178162s ago: executing program 0 (id=1159): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYRES16], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 5m22.141359531s ago: executing program 0 (id=1160): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x800, 0x70bd2c, 0x0, {0x0, 0x0, 0x74, 0x0, 0x40624, 0x10243}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0xff}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc800}, 0x0) 5m22.080017638s ago: executing program 0 (id=1161): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00b0ff00bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xa}, 0x94) 5m22.078971197s ago: executing program 0 (id=1162): bpf$OBJ_GET_MAP(0x7, &(0x7f0000002300)=@o_path={0x0, 0x0, 0x4000}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_open_dev$video(0x0, 0x7, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) lseek(r1, 0xfffffffffffffff5, 0x1) mount$fuse(0x0, 0x0, 0x0, 0xa0001c, &(0x7f0000002640)=ANY=[]) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002004000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000030180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 5m21.7864752s ago: executing program 0 (id=1165): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x401, 0x0, 0x6000, {0x1}}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x20004000}, 0x8004) 5m21.571999689s ago: executing program 0 (id=1169): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'}) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000007c0), r2) sendmsg$NFC_CMD_LLC_GET_PARAMS(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44084}, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r5 = socket(0x1d, 0x2, 0x6) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0xff) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xb3) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x7) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a017f7f00000000000000050000000900010073797a30000000000900030073797a300000000008000a400000000328000480080002400000001208000140000000000d0003"], 0xac}, 0x1, 0x0, 0x0, 0xc0c1}, 0x0) 5m6.504134927s ago: executing program 32 (id=1169): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'}) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000007c0), r2) sendmsg$NFC_CMD_LLC_GET_PARAMS(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44084}, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r5 = socket(0x1d, 0x2, 0x6) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0xff) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xb3) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x7) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a017f7f00000000000000050000000900010073797a30000000000900030073797a300000000008000a400000000328000480080002400000001208000140000000000d0003"], 0xac}, 0x1, 0x0, 0x0, 0xc0c1}, 0x0) 2m41.056282031s ago: executing program 3 (id=2202): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000001800)={'#! ', './file1/../file0', [{0x20, '\x86\xd7\xb5r\x03z\xf5\xe42\xad\xed\x122\x9db}\xd1\xff\xff\xff\x812\xd4\xef\xcd.\x8b\xf4\xa71iQA\x8d5\x8d\xaf\xe1\xd8\xae-\n\x95\x98\x96\xe8\x0e^\x80S\x9a\xca\xbf\x0e4C\'~_\xd0X\xb9\x94[\xf5,\xe0\xcd\x89\x1c\t\xd0\xf2\xfb\xf8\xfbe\xb2\r\xeeI\x86\xca\xd0k\xb0\x1b\xe96\xedpm\xcc\xdc\x91\xb9\xbft\xfb\x98\xe2\x02!\xfeq\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x009\xf7\x81\xf4\xa9j\xc9\xbb\xf8\xf2K\"\x86\xf5h\xf5;\xd2\xaf\x9b\xea\xef-\xd7\xd6\xfa\x97-*\\\x98bE\r\xdc\x89\xd8&\x91\x1c+\x15\x89\xd7\xa7ceT\xea`5\xf9\x88\n \xdcA\xa6\x10\x93\"\xa4Y\x84\xee\xb2\xf9\xa9\x80uf\xab\xb3\xd1\x10i\x94x\x0f\xee\x94j2\xf9\x9ah\xf3b\x19P4\\\xad\xbaX]\xbc\xbbTA\x17d\a\x8fa\xe0\xc3K\x959'}], 0xa, "0002783348b29e7bcaf3e29c2593b929f38db16e33ea96f57d49c226f35df5a073e47a165b0074fbf80de701b0728381f07c35183b8242af6ed8d42a819bf58c54c07408000c6cfa4ae3c32d5bf33639adc46109626b2ed71cd479ebddcbfda19e0e6ca9eb13d38b47"}, 0x160) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000000041a9e50b00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) 2m40.91516142s ago: executing program 3 (id=2204): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x2) listen(r0, 0x81) ppoll(&(0x7f0000000440)=[{r0, 0x4b92}], 0x1, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2402c3, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="0000995700451300050065100009069078ac000001ffffffff4e204e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="d1800007907800091e59063bcc55e2fb4b662a463b24b28a4fafb428a89d60f9547d33690c48bf9581455479f14cea31faf5212327c508ed14d3cc9f1b20adaecc3b4c664e61295f92adc7b03928e6f24a8ee8e299effe97537d57096d808d21b4fe04f98900000013d3b3875dfd9a3f6328f33f09ceec09986b30406704e2560f04592cb4869c77658fcb3eca004c77b183c5840dbb0fd30bcd067737d3f07dff1755aac0e628d921d141b089c15306c066b177aab800b1"], 0xe6) 2m40.914894271s ago: executing program 3 (id=2205): r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) mount$fuse(0x0, 0x0, 0x0, 0xa02002, &(0x7f00000004c0)=ANY=[@ANYBLOB="66643dc6953bd340e3272b71d8f75d2e259bf1b1641dbb07e599bb12e499abcbe83cb20c3beb0dfa38c10e940b6828039ec26a486cc445322e0a22037201a9aafdefaad479199cd361137641824dfeb422ab103c6a236f4c9ae516aaf718425b7cbf0a21a98a672989ebb66211460e26e8d8f0a8338d62ea54b8dbc1492deefab8989d8802bb1b8c5d61349a79922cad342e87ed63595e043a81fa36feb0f49bca508854", @ANYRESDEC, @ANYBLOB="40ef35a971d35097635122028eb919802534a9e95b3ca94bf84415370e72798ba993e10be6a82eee4caa011b2c213a3a032f32435692c0ba1dc1f06b1de6bc83e6d684a1f35cf6c3d5", @ANYRESOCT]) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000040)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac000000000000000000000300", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 2m40.808009222s ago: executing program 3 (id=2206): r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) mount$fuse(0x0, 0x0, 0x0, 0xa02002, &(0x7f00000004c0)=ANY=[@ANYBLOB="66643dc6953bd340e3272b71d8f75d2e259bf1b1641dbb07e599bb12e499abcbe83cb20c3beb0dfa38c10e940b6828039ec26a486cc445322e0a22037201a9aafdefaad479199cd361137641824dfeb422ab103c6a236f4c9ae516aaf718425b7cbf0a21a98a672989ebb66211460e26e8d8f0a8338d62ea54b8dbc1492deefab8989d8802bb1b8c5d61349a79922cad342e87ed63595e043a81fa36feb0f49bca508854", @ANYRESDEC, @ANYBLOB="40ef35a971d35097635122028eb919802534a9e95b3ca94bf84415370e72798ba993e10be6a82eee4caa011b2c213a3a032f32435692c0ba1dc1f06b1de6bc83e6d684a1f35cf6c3d5", @ANYRESOCT]) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000040)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac000000000000000000000700", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 2m40.492138422s ago: executing program 3 (id=2211): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000006007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c900000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xa}, 0x94) 2m40.235411646s ago: executing program 3 (id=2213): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) write$cgroup_int(r2, &(0x7f0000000000)=0x2b00, 0x12) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x4004800) mmap$IORING_OFF_SQES(&(0x7f0000928000/0x2000)=nil, 0x2000, 0x2000003, 0x2110, 0xffffffffffffffff, 0x10000000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c833, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x12, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000cc0), 0x8a140, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r4, 0xc0403d08, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') lseek(r5, 0x4, 0x2) getdents(r5, 0x0, 0x48) 2m25.023856977s ago: executing program 33 (id=2213): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) write$cgroup_int(r2, &(0x7f0000000000)=0x2b00, 0x12) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x4004800) mmap$IORING_OFF_SQES(&(0x7f0000928000/0x2000)=nil, 0x2000, 0x2000003, 0x2110, 0xffffffffffffffff, 0x10000000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c833, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x12, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000cc0), 0x8a140, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r4, 0xc0403d08, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') lseek(r5, 0x4, 0x2) getdents(r5, 0x0, 0x48) 6.865948387s ago: executing program 4 (id=3099): r0 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xf97f, 0x400, 0x1, 0x40024e}, &(0x7f0000000340), 0x0) unshare(0x22020600) r1 = eventfd2(0xff, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000300)=r1, 0x1) 6.768046044s ago: executing program 4 (id=3100): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0xffffffffffffff87) lsm_get_self_attr(0x69, 0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) lsm_set_self_attr(0x64, &(0x7f0000000580)=ANY=[@ANYBLOB="64000000000000000700000000000000c100000000000000a10000000000000900000000000000fc3a8a4fc6c4e35b8d853e02ebd4d42d983bd7f53cff797e980a489485a7a78bc9b05b200d1639f45aacd9f72287001e699927c5ea586e3bdfb3668a7dd3562f0292f425165eb405bf8b4dcacd16a2d5e290f6893579912b1b29eb5a8bfee34475d8d571f3614b5271481d92bd617a60eaa9f6171c729cf3f1641cd0c01782c0ced192b518a13794a6d91c31ae0d7aa21a978e8e78448b4e950558cd825b9213fb1ff3f0bd8cde7b85c2e1cc1d3703153142c23434"], 0xc1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) write$cgroup_int(r0, &(0x7f0000000000)=0xfe8e, 0x12) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000140)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r5}}, 0x18) syz_init_net_socket$netrom(0x6, 0x5, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r4, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x4, {0xa, 0x4e21, 0xa8f, @mcast1, 0x2}, r5}}, 0x38) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r4, &(0x7f0000000400)={0x10, 0x30, 0xfa00, {&(0x7f0000000280)={0xffffffffffffffff}, 0x4, {0xa, 0x4e22, 0x3389, @private0, 0x54}, r5}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r4, &(0x7f0000000180)={0x11, 0x10, 0xfa00, {&(0x7f0000000440), r6}}, 0xfffffffffffffdf6) r7 = userfaultfd(0x1) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) socket$pppl2tp(0x18, 0x1, 0x1) 5.909161845s ago: executing program 4 (id=3109): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @dev={0xac, 0x14, 0x14, 0x41}}}, 0x24) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x4000000000001c6, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) write$nbd(r6, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0], 0x10) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xb8140, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_SET_IRQCHIP(r8, 0xae64, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000380)="66baf80cb89c1b7f89ef66bafc0cb810000000ef64670f21a40f1c8e1d0a0000640f01c4c4e261b7320f01c50faeaeaf0000000f011866b84b008ee0b8010000000f01d9", 0x44}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 5.853587909s ago: executing program 5 (id=3111): r0 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xf97f, 0x400, 0x1, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040)) unshare(0x22020600) eventfd2(0xff, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) 5.853086602s ago: executing program 5 (id=3112): syz_usb_connect(0x5, 0x24, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x32, 0xf4, 0x49, 0x10, 0x9c0, 0x201, 0xaa4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe5, 0xa5, 0xc8}}]}}]}}, 0x0) syz_io_uring_setup(0x9ee, &(0x7f0000000180)={0x0, 0xa5e9, 0x100, 0x3, 0xfffffffe}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x28) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x2, 0x4, 0x4, 0x2007, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x1}, 0x50) 5.29259829s ago: executing program 5 (id=3114): r0 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff000900000009050a"], 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write$vhost_msg(r1, &(0x7f0000000480)={0x1, {&(0x7f0000001800)=""/4114, 0xfffffffffffffff3, 0x0, 0x2, 0x2}}, 0x48) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x48) r4 = socket$pppoe(0x18, 0x1, 0x0) r5 = socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x5}}}]}, 0x38}}, 0x0) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000280)=r6, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(r4, &(0x7f0000000dc0)=[{{&(0x7f0000000380)=@can, 0x80, &(0x7f0000000000)=[{&(0x7f0000000500)="1552e7e2864bc92ff0982cb6ea47dfc129533f162ca8d1a2fd863eafac327544bea4776e362218ef0e3e5f9fb84be3db3a04443ba81de174a1e830d69d7dec584b185f1be9efab26c3ca913bdda02ba5bc4da35e39ce715ff133fc377f755aabaa0b020128668deeae4da464c1fb1ecdd8e5c2551876086d57c7b7862ac0fa26b3ca0c91a16dac86af2746377dcf2e17d37ab9fd9519bbef98e8a61772a0d118d4a1eeedd352046c1d180b1d80eecfb40730e9854266bb7c3a", 0xb9}, {&(0x7f00000005c0)="df132071f06c47ceacff3ca92918cad6945ee1955d33ffc071fc6d5918bc00521d81f6c2fd3bb15bda8a6eddd9946b949c021072aa7c70ac33e51871dc1f010dacfc4780906a89a3d45250861d9ba9dae0f1d117c253e4611ec081c98c1d95137d5a7471b934a03a8734fb23e702cce47641a775f79306a69676b4d0a71427c1bf64cc8980f70d1850bc1fd4657b7c6286da1b5de86a62fa945f6bd6062747107716be5013d87f224f3877d38900ff38bdcb472eb4c1b36a65277302e6fd30651fb675ed0d6465cf3b62095789b6e0ce0cc8807b0b85119f8774def105", 0xdd}, {&(0x7f00000007c0)="4202ace10cf6ce4c4c2678d6eecf120b1edd84e6f1d25369710df132b64689bd0f12be3f9ef6b1538f76abe98e307c11c044f69c82c52440e70aac17bc4b6085939194bcc6858f69fe2e6b83fcdd8f022d927b36c3b0cc2ab4f93211ded85ac648c58e6a5c143332b9e7ac448db7744af8da937377b73270f37ff9a59fb84b406b866c0bb09390cdacb2e885e9d5ada012681ab571381f9c6b947eafecf0ab9b639c615177b7947c8059ff73a4eda2df6710f5cb353e007ef938766ab3f256ed6a319430b0d04ce8465d", 0xca}, {&(0x7f00000006c0)="32dd315857d7e7a352eeabca20db755ac8afac6a321005d22c2fea8d7d178141459ce8b10291b0f151a00eec1cd7ab3fb98d7d4bf920cc946ba1fb8e329aa1bb97f0d66a6da7692fb054081abd856a0aeb07928179892ff1f4d37bd0fffc9f7f5bab4bb92de09625614bc9c997e3", 0x6e}], 0x4}}, {{&(0x7f00000008c0)=@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0202}}}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000200)="0382de55c2a8673780822582b91e046ca3f502a2ffab4fd8b19da07db8654f2ae9f6dbb51879959b469976987464e7075b94535e184b84e0be85df6f302923", 0x3f}, {&(0x7f0000000940)="e09f4c1cca3eaf5402ca190b0142ea28cb22092b18f12294f927da7158445785479e730e0ccee763c86299cbdb92a6fa4fdbaf918635bee1d5d14abf93065ccc36de3b48568494326ba9c8261a7903465a8bcdc9911b448d75e0c644c27726ac26ed12a80799d9d3c660414ebe9568075b4d7e8c11a7ff6af0ca0cf13c26bc1b145867560836f665365af908a1c8", 0x8e}, {&(0x7f0000000a00)="ec29beba41aed2a34092910f6b0a23c45ec8a73ef0a45f38a34301e29dafc1ca012f1aedfb8b30862cd3ee6cba9114c46f5237762f792edd398b86961037cdc5e001a4b45d06ccce4bfb8f0cd37eaf14e026e59d212b1b0fae6eeb1c95b3a705ee7457188b4c9929", 0x68}, {&(0x7f0000000b00)="f217836c559854b5cd4904ff6dea1b47e66e1eee22713309e24fce185230369d08dfd2ec555d9d40eec8be4d48f359eb4f309f1ece0c2cdd6b2002191caf0fdd599207f0f3296e22093d682ed554cbf05e4b529d38bc4b47f8ea1562de1d", 0x5e}, {&(0x7f00000002c0)="f027a359c3a6833ac93be1f80a5e7531", 0x10}, {&(0x7f0000000b80)="10c24f6420bf2d5653205fb4f2ac38476f6c434ac150a87e63294176a52f7ca98645ed9707d983dfac93e85576d3a534ffbfc410620d2f599dc41b07ebd71bb68ef76ece7a6a208fecb6bac54328399873cc92df0c3f9c991da3037e2e26470f60bd8f1ecce1d074bc0fd32d422d010e3833886ad365b20ee68cd1669af7db11308d6955d691f5a6ec0fab0e6b7741ff6033ce0a7c79d61563c0d0470f38cf2a3d1103fe1c5ca0c9ac027b7686e9f1fd44e41a9b4062d1f49b0c4e3a09acd4d48e54", 0xc2}], 0x6, &(0x7f0000000ec0)=ANY=[@ANYBLOB="380094ecdec745fbb6500000060000007ad4e686c178b1ba78b29014f6e5b4265b4e0b75f202c8c3489e057eeeaec7da323d85d91586a7007800000000000000070100000d000000eebe745d5e3409d37bb7ba88386b6083d05b330722f5b9eceb3b4798a788221efdc97f7f327d4faee8d57c02fcb388c18e441c9c0bef8974ba03cf7a1a00bfcc89552ca69aa5396309de7f128341a4a1a07667533de7ef2e04795bab3095e5f159a4000000000000462fa03f979c5b0e885be9b5b53aa60e44bb750d39ed753ecae02c68483d9e4dc54be465f7ef060e69207cf3a2c142"], 0xb0}}], 0x2, 0x24001) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000480)='name', &(0x7f0000000ac0)='\xf0\xdd\x0e\xbd\x00', 0x0) 5.232167261s ago: executing program 1 (id=3115): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000013000000010000000900010073797a30000000000900030073797a320000000090000000060a010400000000000000000100000008000b400000000068000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000300001800c000100626974776973650020000280080003400000000208000140000000140800024000000012040004800900010073797a30"], 0x104}}, 0x0) 5.18723223s ago: executing program 1 (id=3117): semget$private(0x0, 0x6, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000002200), 0x80002, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f00000002c0), 0x4) r3 = signalfd4(r0, &(0x7f0000000080)={[0xc658]}, 0x8, 0x800) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x2b}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) writev(r4, 0x0, 0x0) io_setup(0x30, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f00000000c0), 0x4000) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r5, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f00000000c0)="01", 0x24}]) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r8, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) 4.367321055s ago: executing program 6 (id=3119): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf810000000000000708fff3f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c900000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xa}, 0x94) 4.058588028s ago: executing program 6 (id=3120): r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) mount$fuse(0x0, 0x0, 0x0, 0xa02002, &(0x7f00000004c0)=ANY=[@ANYBLOB="66643dc6953bd340e3272b71d8f75d2e259bf1b1641dbb07e599bb12e499abcbe83cb20c3beb0dfa38c10e940b6828039ec26a486cc445322e0a22037201a9aafdefaad479199cd361137641824dfeb422ab103c6a236f4c9ae516aaf718425b7cbf0a21a98a672989ebb66211460e26e8d8f0a8338d62ea54b8dbc1492deefab8989d8802bb1b8c5d61349a79922cad342e87ed63595e043a81fa36feb0f49bca508854", @ANYRESDEC, @ANYBLOB="40ef35a971d35097635122028eb919802534a9e95b3ca94bf84415370e72798ba993e10be6a82eee4caa011b2c213a3a032f32435692c0ba1dc1f06b1de6bc83e6d684a1f35cf6c3d5", @ANYRESOCT]) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000041a9e50b00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 4.058170308s ago: executing program 5 (id=3121): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.numa_stat\x00', 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r1, 0xff01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe825, 0x3400, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000001a40)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x48, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x5, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "277382", 0x0, 0x2c, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [@hopopts={0x2f, 0x1, '\x00', [@calipso={0x7, 0x8, {0x22ebffff, 0x0, 0x7}}]}]}}}}}}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x4}, 0x38) ioctl$KVM_RUN(r8, 0xae80, 0x0) 3.792206531s ago: executing program 6 (id=3122): socket$packet(0x11, 0x2, 0x300) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010067656e657665000020000280140007000000060000000000000000000000000105000c000100000008000a00", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.636949703s ago: executing program 5 (id=3123): socket$packet(0x11, 0x2, 0x300) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010067656e6576650000200002801400073f0000000000000000000000000000000105000c000100000008000a00", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.505941485s ago: executing program 1 (id=3124): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket(0x2, 0x805, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect(r4, 0x0, 0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x24040000) unshare(0x2c020400) listen(r6, 0x0) connect$unix(r5, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r6, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000032680)=""/102392, 0x18ff8) getpgrp(0x0) fstat(0xffffffffffffffff, &(0x7f0000006b40)) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) r8 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet(r8, &(0x7f00000014c0)=[{{&(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000340)="bd", 0x1}], 0x1}}], 0x1, 0x46054) 3.43824837s ago: executing program 5 (id=3125): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8000) sched_setattr(0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r3, 0x4, 0x42800) close(0x3) syz_emit_ethernet(0x22, &(0x7f0000000440)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x1, 0x14, 0x64, 0x0, 0x4, 0x89, 0x0, @rand_addr=0x64010102, @multicast1}}}}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000002300)="8332dc80f0d9e1551a26bddb19fafb8b59c1c47a41aaca2c34765a0f4c00c2ca59f37acb52d527f6e8ec616edb24c090a772e78e5d82994bee32c4da07a75bcd44fbfb9a34db358def5dd0b6aaa0bf6e13dc2190871cb8db948f1fbe55289560247c5dc4a45d63a06d90bdfcec9ed20e4f977d9f452153c842e9330c799c3bb623ffeb21116a62f527f36c4ccb34d8b71a6a2be00131deb6fcec097b8098cdf4767a39feddf014c223464e98a22b2275c2b7356853d7ae171e29ff77d3ec5641bca482d2e8191cfaa55c54839a833822e77c44d3bd3dd5a9d5dd3c71c21b1bb449a4bec50fb0c68f227257caaa7eb894a669e3942e345e204daa13aed5cfaede408bce81a192a1c7331aa9b651f127856677d69d326f2b0aee016dde112ee0ce55d0e4e6a37cb0e5ef8005476a977b7a2bacd9ac844f10d1518e6c2cdb4f4a60f59131f6dc200c7acfb031e578e25ccdba4280911faf559ed337605079f68cb7ad450f1a8965493103a0d5921e18c1ae0b6caf99f4e4672c5464f3e28dfc0b3392b4e062594c9a21866f85f18634f5d89a037703ac337156cb98eae7fac8e22e118b8c2b6470a0b4cba046cac7b0a794c96a38f83fbe1230535433a225a9326cfaf398a7a453feed4cc88b6fd9b8287b3dbf742f0c1c672e07be41185a791e3400b6c09ba8b1ba249f07f726496f48f9fef2df32a9051bf1693b59f3268e7496905a5df6bc2314d10c73ee2d283ca795b4d6b6da4839ab18bf5540031316d2bd6f41e51d32b1bc2ca0e9688ee45cc4f217dadb07f9508ee0a3bf16db4e453b9394cb9f8f04f1ab8653b87193157f06f698f0774bf3b992d904235a4fe9d72ddfff96c3706b01046fc490137a4b7482e57871c051c554927ea75eaf2292e0e31ba28638016f1bda4f18b5d2ce074e8db2a679433de4f39789534a4a8c99e10139d4959eabdee2c061b49b4e9487ba36f50b321b13481d4c3444ea5e9cf25d11cc11272edd56a25e7fc011502040f7b881037793ddc9f71b40d780d4050c146e4b7b29e085996e128f21730a0c4d3330399f2b97c1cd8668b611a88377bf1664be7438f0bc22bec73e37b8d3fc1f4804364dc6c2b0cd6b3b32fb0bebc21a7e7d633a36a89ef46433507513d8da864c38b93ab415a25b075a9109dc5b2aaaff100d97d5a0ebb7bfdfb152fb8ac05907dae1fc785fcdc46212f83066664663c45e4682667118dd9480c6f4add9ab40105c9357d533f5df960cf370326f25a82c43d7b65d5863cd763a81feada619b90e5b0ec77b32bd517fed2cde85e2ad1e51af8244d8701f5ef06d67398530c26ff6aebb7c5426be5a3380939915ecc88b1472e33b1a4da579924f4fd4197c7db5b40c1c38c0c123c1bdcfb3e3b3f3de1d4b2a4a36e3daec2a6319a2b05d725a3901ed084ff22c8db80bc4dd270c5a05d52f6141c42b56fc326d3b335757724b2866ab2e29ad312f7a34ee1b926b5af8a651b4fe2ae66d6704cb5887fb867bc47a42f9ba23ae66b4ba5c933b0fb62c3253a5813870fa4fbd54152cf9990103a49af2f90fff760749f1d2b049ecaceeb04fce9d6a3c596e1cf0d8341e6c1f948f830a59121c3841b95289ad401b35b0edc212ceccd53cf366a69cc2adddd8c053826c1e5ab1926451b45b56de411589f55ef4a1f0d9670b36aefd0640e54f18f82c24484773bb2363d9f0ca728a93d4199a9dd6ae523fc492c05fa24524ad8f383d0df9ea55fb6c13fa0b10f6ae833c0f5d98cfaea271c2303f9c0de869b582fa2caafed0c47921bedfc1ed6cedfaea0c3c3b3bc19eee9e0a6f796d787976a0e2bf0b246c74e03e9f197ea27f1eb6f465a93a32bc56588a87d2d9b3af2ce38b9bf05fd3b876bdc4375e200c3008cf8b88d9e98e74e30434ff22cdebb5af19c3796584de206407bc1c44bccc3ea21d79c2bbfeb16e48f0322907b911e802bfa90df95305eb31ff0a3c872c0b2f2a57e1ae0e006e9448c4d6361e85da2253f3103739fbcc0980eade4e6e012ecc8a39026a53927ab630517d1c10940da9dacbd5e3fc39d69e683934d099c1f536a74c967bbc8a6acaaee4d401f759b6bf1f643f152af6312d848535a429cd53137794d2386580e5b048ad5f3989348d0fa4559df61eb9a6972ad52e14b02cc9eb6d4c63a14cdc2d43a834997faf4d2826f11dbd5a02ebf7b816c5acf93eef0d068e663e2cf631ef6087c185b83168ce76999b33a919b5566b7d177c4c45a18d97631fc2a9e71aaa099b50aaef9a77c2bc8e7a2ac589c7f2de671091ec0be7ab13c10a1e98a8c7c5a34bbb03ee8a80f024961568a228662ddb1b791fad5ef6d4a4535db8505fae512fd29f660e08e0b406b6a61c5cf008ba9243ae799192b1c1e9d8802663ddbb343c04d0a832649afbc8ce8ddd9d5d4da27a2c379b6feec1ddf956c87b24b29aa413f7d75625a9cddf61553bdb1986169d8702f09e268aa499d1f4d0510228f9c2066977ebdc41eb7a31eb38e754a584db9642acff1395e013ce242e4afceabfaa80fe360cdd11b66dae3b854490c59523a0ffcc98726f7ac0b3bac63757f7d89949f7db576d58e13531b41d9f7b3af01c455cf3d580c3415f7dfad5aa9141e864f9dc3f48bbe8528af64de51aef54e5eb6e83bc0f8ab087e4afb778866601c48890cc051b00667960248962ecdea4cd3339838a5a1c6d2c000eda8a7a11dc5b238333a501f18612a50088dff8a8af3366c8ed96d6c42e1510bcd6412ef5457f7c9e9677ae9c5e7d6670039cf98ce7bbdb9843c0ecedef31d99de5474f999b0ebbea6a5f61a32800a9dfb9ffd67477b785d5120214dd51b4fd0ab937e9e919f5aae54cd926bcac65c7edc504088bfdf40243f148c65ade6fb8046aeea23be71f3a0be8c0c810a7a289ed9afa124735c15e12ba3206a59e07ec15fad101011b305fd285d3cd8fcc263ae017f9dc614e28051ecf2d7f803aacf4adc6865504fc1fa064f3bc2c5fb5505003d297cbc94ae87f8fce0b54f8e8b13ef742b08767cb812994a31c3bbfd7d9aed6cc75d28951f87c9f5579fe59f0737fee8bc88ee310932dbafb09438b853ba299aa0d3394c733c6a09bb0f2469314a908204a88e0c3593c01189885703cf1d29f370007b7bc385de4af2863ba840990277a2134a153ad5f275347af766edf556fb24dea7800c9e9d7648a0cc099fda4fc3d71503623c9e7577478101dbe05bbb3b0d593daf1d487ee94c56bb86e6e4e9f6deb68e546313006139a7a2bf4d9378691488bff8889996643842fb7d1859bdfb6161ec4e1d9d455ea1057b0737e694250d6eb8717b8b762c224fa583466f72eb068fb045a112f6f96bb09c06cb4dde0e5addbfb88d7b6e311f2d0c13fc81f75321c93b688f5687ec5dbe865ae56607a7d87414cfcee2228613b8fab39978c689d03cdca61eb42747aade6573a26a5340c2a44c9d32cd88aadd08906cde4b89d6f559f757c2c2ca3e0e36bda991d0af6ee3b39dcc6afc8c0be282236f820a08a17be67087c45c82aeaca29c933e42e198a6700d86e86e6e2b2ae641da36eee30fa2d5fc6d3234c1d7d657c93d23efe2ddc351a00698992d5ee4a3d3f32cec291f5dfcad9596e731e654361ca36d5de513b677850a122c974c70088695cce771ccee0e1270e447404c6a42857b87a6555df8c8a967b66afe758feeda9647088227a3abf057cc29e033be8e1a7bdfb53bd33b8f4f8f95d5420b75c15e83024b847cf87e9c21ac2e39fa3da027864c9b5b96f4463c978e60723b0cc80866d9b6b5a4b7e885c7c5bc1a7fc2ecb5bd17477a36279651cf2670911a2f92d20032fd36bba622f40e97491cc46da303e571de88b353b1eea5dfcbbfbae34db548cd7144da675a2055eef446bddfae7fa0fa7f76dffea47b901f9e41ea3e923193db3d3bae2194a106c9c41e1ecf539e9584608983e2ec127f99ac3e7cd6fab0fa77b471e786515dd5aa68baa6d74bb7a30046ef992fc978711b7532246c9fde6d3c6fd59737008cbfd004a1dbc7677f649b13d296ab859e1f0f81bd88ed264c1555d77a2c62fc3ae6062be235f681babaf202439f70e14b1d903b032c9a7a14f150b9bc1a89b9e3b2a2a6368bb32870ac167ab4a8f5b87714cb4292623d392d4fd00a86bcf8d0845a34d3cf133087cf404d6debc3037059f1434be83ccf686ffc1c9a2280c5d7ec02d21d79fccacba99d4e10fb819965db7189f58a2be169c700777931aa8c9f2a7dfc67b80d6979a8aabed5191d4e7c19ff48017a5a76ca621919c0f9471cdb5a9a4436e5ecb89405e3fe2e7dfe426e21e3d4526efb276fc06cd11e377eddda33e53263da3cb394a442db272355ab241dc8d22664ad28fabb39bd18e86b7fa0514ccdae13ded6f9331ca02e087c174497652e4e3fdcb20931a6437e13857c97e2c043d15983d0a663700538a54d8e12f2c37f238ac6e9da84d7a71b21918c2e86e204d2215752b71d724f45dd72821ec3f5df49f2a69439ce3d83884792b718295b5c0b8efca4c2b4a4f635587f85a2484ab523495f021b2e1658df958f6f03c8162b337f96cad9e44fb1586d5e10056771d82428efce294ebbe8d29de400258777afb3efc7dc18e0039bc30025e0b926b8ee7e92b4d571d072617479d105c443efbb52813d372c777950940710ed6e9a710ae541058f8aa448d124da2421467cb93ce116dc9e3b45424b59c19b30cc7013b0e22ecd8a78ed71c42ff18abfdb7a0cbd18e4344ba89ba5a923e8e70ffb4070db1f884261089d0e49ebcc2a00b84b51394c5cff30509ec606cd0206618f078c7c825e307e91a0eb3487102b9eebf89d2c29da5212917d852e86b4516b04af925737068df7311449d214ed14731ece93fa8115ba1e03ae5951662ef328452738dd09947c22f0e80a7c7051cb7bb0884e7697694fe0bcd610289c7f0670aa2168512e500a10dfdb44f97d72f717f3b80a180ebfec184ec555369d8b939c773a52ca42162cf0f958c01e2280090675036b8cbd81c34ca4c22dd04d378d415fb5973b938f40a5a72894138324dcf8c9717c9e84e21bc13927e269dcb66389fcc7f6beb71d0846653bbcbb8d044e2a6b3a6c8b68ff88372313ac46ed4d3006c9cab20e27735afeadb1b576a27b05c25a8594a7c10c30e676fc8b2cc7ea1e9822ac2fb3a837845ef0cd7fe44e4bdfd0a57449e056cf01d512e47c0257dccb4faca4cac390c7035ccddb3aae16f22401cc416d406b05dd872a4dc477ea90f4591a73fce22a5dd7c35fb9e1c774eb9b9b1b157b1a369d65229670fd3321bdefde7e840771f16e532a65947d3b4a3dfb34f78c263a7285b2b12e421a8ad6eff505ebe997540ab54425d68c58ed7e3032abc5d2966e494ecaffa5ae5ef566a205bb4ebfc88ed60c93e", 0xef1) fanotify_init(0x200, 0x0) r5 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) dup(r5) r6 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r6, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='yeah\x00', 0x5) unshare(0x68040200) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$uac1(0x6, 0x71, 0x0, 0x0) 3.371961s ago: executing program 6 (id=3126): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @dev={0xac, 0x14, 0x14, 0x41}}}, 0x24) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x4000000000001c6, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) write$nbd(r6, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0], 0x10) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xb8140, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_SET_IRQCHIP(r8, 0xae64, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000380)="66baf80cb89c1b7f89ef66bafc0cb810000000ef64670f21a40f1c8e1d0a0000640f01c4c4e261b7320f01c50faeaeaf0000000f011866b84b008ee0b8010000000f01d9", 0x44}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) recvmmsg(r3, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f0000000300)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r11, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800) 2.538749433s ago: executing program 1 (id=3128): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000000)={0x25}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000380)={0x34, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x80c1}, 0x0) 2.472051212s ago: executing program 2 (id=3129): bpf$OBJ_GET_MAP(0x7, &(0x7f0000002300)=@o_path={0x0, 0x0, 0x4000}, 0x18) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002340), 0x208400, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_open_dev$video(0x0, 0x7, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002004000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000400000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 2.459737518s ago: executing program 2 (id=3130): r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) mount$fuse(0x0, 0x0, 0x0, 0xa02002, &(0x7f00000004c0)=ANY=[@ANYBLOB="66643dc6953bd340e3272b71d8f75d2e259bf1b1641dbb07e599bb12e499abcbe83cb20c3beb0dfa38c10e940b6828039ec26a486cc445322e0a22037201a9aafdefaad479199cd361137641824dfeb422ab103c6a236f4c9ae516aaf718425b7cbf0a21a98a672989ebb66211460e26e8d8f0a8338d62ea54b8dbc1492deefab8989d8802bb1b8c5d61349a79922cad342e87ed63595e043a81fa36feb0f49bca508854", @ANYRESDEC, @ANYBLOB="40ef35a971d35097635122028eb919802534a9e95b3ca94bf84415370e72798ba993e10be6a82eee4caa011b2c213a3a032f32435692c0ba1dc1f06b1de6bc83e6d684a1f35cf6c3d5", @ANYRESOCT]) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000040)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac000000000000000000000000000100", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 2.406954849s ago: executing program 1 (id=3131): r0 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff000900000009050a"], 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write$vhost_msg(r1, &(0x7f0000000480)={0x1, {&(0x7f0000001800)=""/4114, 0xfffffffffffffff3, 0x0, 0x2, 0x2}}, 0x48) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x48) r4 = socket$pppoe(0x18, 0x1, 0x0) r5 = socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x5}}}]}, 0x38}}, 0x0) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000280)=r6, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(r4, &(0x7f0000000dc0)=[{{&(0x7f0000000380)=@can, 0x80, &(0x7f0000000000)=[{&(0x7f0000000500)="1552e7e2864bc92ff0982cb6ea47dfc129533f162ca8d1a2fd863eafac327544bea4776e362218ef0e3e5f9fb84be3db3a04443ba81de174a1e830d69d7dec584b185f1be9efab26c3ca913bdda02ba5bc4da35e39ce715ff133fc377f755aabaa0b020128668deeae4da464c1fb1ecdd8e5c2551876086d57c7b7862ac0fa26b3ca0c91a16dac86af2746377dcf2e17d37ab9fd9519bbef98e8a61772a0d118d4a1eeedd352046c1d180b1d80eecfb40730e9854266bb7c3a", 0xb9}, {&(0x7f00000005c0)="df132071f06c47ceacff3ca92918cad6945ee1955d33ffc071fc6d5918bc00521d81f6c2fd3bb15bda8a6eddd9946b949c021072aa7c70ac33e51871dc1f010dacfc4780906a89a3d45250861d9ba9dae0f1d117c253e4611ec081c98c1d95137d5a7471b934a03a8734fb23e702cce47641a775f79306a69676b4d0a71427c1bf64cc8980f70d1850bc1fd4657b7c6286da1b5de86a62fa945f6bd6062747107716be5013d87f224f3877d38900ff38bdcb472eb4c1b36a65277302e6fd30651fb675ed0d6465cf3b62095789b6e0ce0cc8807b0b85119f8774def105", 0xdd}, {&(0x7f00000007c0)="4202ace10cf6ce4c4c2678d6eecf120b1edd84e6f1d25369710df132b64689bd0f12be3f9ef6b1538f76abe98e307c11c044f69c82c52440e70aac17bc4b6085939194bcc6858f69fe2e6b83fcdd8f022d927b36c3b0cc2ab4f93211ded85ac648c58e6a5c143332b9e7ac448db7744af8da937377b73270f37ff9a59fb84b406b866c0bb09390cdacb2e885e9d5ada012681ab571381f9c6b947eafecf0ab9b639c615177b7947c8059ff73a4eda2df6710f5cb353e007ef938766ab3f256ed6a319430b0d04ce8465d", 0xca}, {&(0x7f00000006c0)="32dd315857d7e7a352eeabca20db755ac8afac6a321005d22c2fea8d7d178141459ce8b10291b0f151a00eec1cd7ab3fb98d7d4bf920cc946ba1fb8e329aa1bb97f0d66a6da7692fb054081abd856a0aeb07928179892ff1f4d37bd0fffc9f7f5bab4bb92de09625614bc9c997e3", 0x6e}], 0x4}}, {{&(0x7f00000008c0)=@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0202}}}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000200)="0382de55c2a8673780822582b91e046ca3f502a2ffab4fd8b19da07db8654f2ae9f6dbb51879959b469976987464e7075b94535e184b84e0be85df6f302923", 0x3f}, {&(0x7f0000000940)="e09f4c1cca3eaf5402ca190b0142ea28cb22092b18f12294f927da7158445785479e730e0ccee763c86299cbdb92a6fa4fdbaf918635bee1d5d14abf93065ccc36de3b48568494326ba9c8261a7903465a8bcdc9911b448d75e0c644c27726ac26ed12a80799d9d3c660414ebe9568075b4d7e8c11a7ff6af0ca0cf13c26bc1b145867560836f665365af908a1c8", 0x8e}, {&(0x7f0000000a00)="ec29beba41aed2a34092910f6b0a23c45ec8a73ef0a45f38a34301e29dafc1ca012f1aedfb8b30862cd3ee6cba9114c46f5237762f792edd398b86961037cdc5e001a4b45d06ccce4bfb8f0cd37eaf14e026e59d212b1b0fae6eeb1c95b3a705ee7457188b4c9929", 0x68}, {&(0x7f0000000b00)="f217836c559854b5cd4904ff6dea1b47e66e1eee22713309e24fce185230369d08dfd2ec555d9d40eec8be4d48f359eb4f309f1ece0c2cdd6b2002191caf0fdd599207f0f3296e22093d682ed554cbf05e4b529d38bc4b47f8ea1562de1d", 0x5e}, {&(0x7f00000002c0)="f027a359c3a6833ac93be1f80a5e7531", 0x10}, {&(0x7f0000000b80)="10c24f6420bf2d5653205fb4f2ac38476f6c434ac150a87e63294176a52f7ca98645ed9707d983dfac93e85576d3a534ffbfc410620d2f599dc41b07ebd71bb68ef76ece7a6a208fecb6bac54328399873cc92df0c3f9c991da3037e2e26470f60bd8f1ecce1d074bc0fd32d422d010e3833886ad365b20ee68cd1669af7db11308d6955d691f5a6ec0fab0e6b7741ff6033ce0a7c79d61563c0d0470f38cf2a3d1103fe1c5ca0c9ac027b7686e9f1fd44e41a9b4062d1f49b0c4e3a09acd4d48e54", 0xc2}], 0x6, &(0x7f0000000ec0)=ANY=[@ANYBLOB="380094ecdec745fbb6500000060000007ad4e686c178b1ba78b29014f6e5b4265b4e0b75f202c8c3489e057eeeaec7da323d85d91586a7007800000000000000070100000d000000eebe745d5e3409d37bb7ba88386b6083d05b330722f5b9eceb3b4798a788221efdc97f7f327d4faee8d57c02fcb388c18e441c9c0bef8974ba03cf7a1a00bfcc89552ca69aa5396309de7f128341a4a1a07667533de7ef2e04795bab3095e5f159a4000000000000462fa03f979c5b0e885be9b5b53aa60e44bb750d39ed753ecae02c68483d9e4dc54be465f7ef060e69207cf3a2c142"], 0xb0}}], 0x2, 0x24001) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000480)='name', &(0x7f0000000ac0)='\xf0\xdd\x0e\xbd\x00', 0x0) 2.368049187s ago: executing program 4 (id=3132): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf810000b0ffffff07080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xa}, 0x94) 2.300042211s ago: executing program 2 (id=3133): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0xc02, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs2/custom0\x00', 0x2, 0x0) syz_io_uring_setup(0x1714, 0x0, 0x0, &(0x7f00000002c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x801) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000a00)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x42, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r6 = memfd_create(&(0x7f0000000440)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xa6l\a\xb0\xf5\xa9^a\xf0h\x16\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xb4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\x00\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1UAA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97cy\xef\xbc\x1a\xbf\xc4\xdd\xe2\x9eBk\x1d\x8eg>\x87\x0e:\x9f\x88\xc0\x9ay\xffQ\xd6\xaf\xf5\xc1\xf3{\x91\xfc\x02t\'H \x97', 0x2) fcntl$addseals(r6, 0x409, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) r7 = syz_open_dev$vbi(&(0x7f00000000c0), 0x3, 0x2) ioctl$VIDIOC_S_PARM(r7, 0xc0cc5616, &(0x7f0000000900)={0xb, @capture={0x0, 0x1, {0x0, 0xd}, 0x3, 0x4}}) 2.250974517s ago: executing program 4 (id=3134): semget$private(0x0, 0x6, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000002200), 0x80002, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f00000002c0), 0x4) r3 = signalfd4(r0, &(0x7f0000000080)={[0xc658]}, 0x8, 0x800) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x2b}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) writev(r4, 0x0, 0x0) io_setup(0x30, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f00000000c0), 0x4000) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r5, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f00000000c0)="01", 0x24}]) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r8, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) 947.836302ms ago: executing program 4 (id=3135): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}}, 0x40010) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b0001000010000904330001"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 839.967145ms ago: executing program 2 (id=3136): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=@bridge_dellink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r0, 0x2004}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x5, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x2}, {0x8, 0x1}]}}]}]}, 0x3c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp1\x00'}]}]}]}], {0x14, 0x10}}, 0xd0}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) 839.688708ms ago: executing program 2 (id=3137): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0900000004000000dd0000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000001f80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100172020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000073000000850000005000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 838.69942ms ago: executing program 2 (id=3138): r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001528e966a2b8906a45774018b401e450740185d000000010902f00101040000030904e3920b5c0d4f8f3d15337f"], 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) r2 = accept(r1, 0x0, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)=ANY=[], 0x64}}, 0x80) r3 = socket(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0xe64, 0x3, @empty, 0x6}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e01400004fcff", 0x58}], 0x1) recvmmsg$unix(r2, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/17, 0x11}], 0x1}}], 0x1, 0x20c0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0}) 708.263991ms ago: executing program 1 (id=3139): semget$private(0x0, 0x6, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000002200), 0x80002, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f00000002c0), 0x4) r3 = signalfd4(r0, &(0x7f0000000080)={[0xc658]}, 0x8, 0x800) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x2b}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) r4 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r4, &(0x7f0000000100)=[{&(0x7f00000002c0)="8c", 0x1}], 0x1) io_setup(0x30, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f00000000c0), 0x4000) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r5, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f00000000c0)="01", 0x24}]) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r8, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) 184.170259ms ago: executing program 6 (id=3140): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001814010000000000fddbdf2508000300010000f3070001"], 0x20}, 0x1, 0x0, 0x0, 0x4000804}, 0x44810) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r2) 0s ago: executing program 6 (id=3141): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @dev={0xac, 0x14, 0x14, 0x41}}}, 0x24) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x4000000000001c6, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) write$nbd(r6, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0], 0x10) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xb8140, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_SET_IRQCHIP(r8, 0xae64, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000380)="66baf80cb89c1b7f89ef66bafc0cb810000000ef64670f21a40f1c8e1d0a0000640f01c4c4e261b7320f01c50faeaeaf0000000f011866b84b008ee0b8010000000f01d9", 0x44}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) recvmmsg(r3, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r11, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800) kernel console output (not intermixed with test programs): '. [ 418.145427][T14013] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2522'. [ 418.941744][ T5904] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 418.983109][ T5904] usb 7-1: device descriptor read/8, error -71 [ 419.080568][T14028] fuse: Invalid rootmode [ 419.372037][ T5904] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 419.481977][ T5952] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 419.491987][T14032] loop8: detected capacity change from 0 to 8 [ 419.503768][T14032] Dev loop8: unable to read RDB block 8 [ 419.509348][T14032] loop8: unable to read partition table [ 419.517187][T14032] loop8: partition table beyond EOD, truncated [ 419.530191][T14032] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 419.581758][ T5904] usb 7-1: device not accepting address 8, error -71 [ 419.588691][ T5904] usb usb7-port1: unable to enumerate USB device [ 419.661740][ T5952] usb 5-1: Using ep0 maxpacket: 32 [ 419.668726][ T5952] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 419.683724][ T5952] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 419.709019][ T5952] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 419.862928][ T5952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.877366][ T5952] usb 5-1: config 0 descriptor?? [ 421.941820][ T5844] Bluetooth: hci4: unexpected event 0x09 length: 6 > 3 [ 422.022108][ T5844] Bluetooth: hci6: unexpected event 0x09 length: 6 > 3 [ 422.094315][ T30] audit: type=1400 audit(1755780327.997:808): avc: denied { setopt } for pid=14068 comm="syz.6.2540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 422.196096][ T974] usb 5-1: USB disconnect, device number 58 [ 422.268016][T14083] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2544'. [ 422.281836][T14083] netem: invalid attributes len -4 [ 422.288185][T14083] netem: change failed [ 422.366909][T14087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2547'. [ 422.381920][ T5926] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 422.386295][T14087] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2547'. [ 422.401818][ T94] block nbd0: Possible stuck request ffff8880269c5080: control (read@0,1024B). Runtime 210 seconds [ 422.412672][ T94] block nbd0: Possible stuck request ffff8880269c5240: control (read@1024,1024B). Runtime 210 seconds [ 422.423774][ T94] block nbd0: Possible stuck request ffff8880269c5400: control (read@2048,1024B). Runtime 210 seconds [ 422.434919][ T94] block nbd0: Possible stuck request ffff8880269c55c0: control (read@3072,1024B). Runtime 210 seconds [ 422.463558][ T5904] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 422.496723][T14091] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2544'. [ 422.512479][T14093] netlink: 'syz.2.2548': attribute type 1 has an invalid length. [ 422.531747][ T5926] usb 2-1: Using ep0 maxpacket: 16 [ 422.538147][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.549393][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.559738][ T5926] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 422.568812][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.604221][T14091] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 422.614980][ T5926] usb 2-1: config 0 descriptor?? [ 422.631977][ T5904] usb 7-1: Using ep0 maxpacket: 8 [ 422.637079][ T5904] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 422.637105][ T5904] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.637123][ T5904] usb 7-1: Product: syz [ 422.686681][ T5904] usb 7-1: Manufacturer: syz [ 422.691803][ T5904] usb 7-1: SerialNumber: syz [ 422.693551][T14091] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 422.719265][ T5904] usb 7-1: config 0 descriptor?? [ 422.748410][T14091] bond0 (unregistering): Released all slaves [ 422.885559][T14093] 8021q: adding VLAN 0 to HW filter on device bond3 [ 423.503854][ T5926] letsketch 0003:6161:4D15.0047: Device info: ⷷ [ 423.711010][ T5926] letsketch 0003:6161:4D15.0047: Device info: ᣍ [ 423.912080][ T5926] letsketch 0003:6161:4D15.0047: Device info: ఁ [ 424.031442][ T5904] dvb_usb_rtl28xxu 7-1:0.0: chip type detection failed -110 [ 424.038964][ T5904] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 424.119574][T14073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.152027][T14073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.392842][ T5926] usb 2-1: Max retries (5) exceeded reading string descriptor 2 [ 424.400574][ T5926] letsketch 0003:6161:4D15.0047: probe with driver letsketch failed with error -71 [ 424.440731][ T5926] usb 2-1: USB disconnect, device number 57 [ 424.671811][ T5904] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 424.735594][T14141] loop2: detected capacity change from 0 to 7 [ 424.745906][ T6112] Dev loop2: unable to read RDB block 7 [ 424.752437][ T6112] loop2: AHDI p2 [ 424.756202][ T6112] loop2: partition table partially beyond EOD, truncated [ 424.769434][T14141] Dev loop2: unable to read RDB block 7 [ 424.784901][T14141] loop2: AHDI p2 [ 424.794051][T14141] loop2: partition table partially beyond EOD, truncated [ 424.831797][ T5904] usb 5-1: Using ep0 maxpacket: 8 [ 424.845790][ T5904] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 424.854829][ T5904] usb 5-1: config 179 has no interface number 0 [ 424.861894][ T5904] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 424.893368][ T5904] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 424.925322][ T5904] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 424.951070][ T5904] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 424.961577][ T5904] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 424.982859][ T5904] usb 5-1: config 179 interface 65 has no altsetting 0 [ 424.989903][ T5904] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 425.000322][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.023144][ T5904] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input37 [ 425.307970][ T5904] usb 7-1: USB disconnect, device number 9 [ 425.386825][ T5911] usb 5-1: USB disconnect, device number 59 [ 425.392883][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 425.651751][ T43] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 425.681735][ T5904] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 425.801827][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 425.808008][ T43] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 425.816565][ T43] usb 3-1: config 0 has no interface number 0 [ 425.824269][ T43] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 425.833369][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.841360][ T43] usb 3-1: Product: syz [ 425.851800][ T5904] usb 7-1: Using ep0 maxpacket: 32 [ 425.857027][ T43] usb 3-1: Manufacturer: syz [ 425.862035][ T43] usb 3-1: SerialNumber: syz [ 425.868500][ T5904] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 425.878587][ T43] usb 3-1: config 0 descriptor?? [ 425.885344][ T5904] usb 7-1: config 0 has no interface number 0 [ 425.893550][ T43] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 425.903823][ T5904] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 425.913244][ T5904] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.921566][ T5904] usb 7-1: Product: syz [ 425.936880][ T5904] usb 7-1: Manufacturer: syz [ 425.941529][ T5904] usb 7-1: SerialNumber: syz [ 425.961433][ T5904] usb 7-1: config 0 descriptor?? [ 425.972523][ T5904] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 426.007716][ T30] audit: type=1400 audit(1755780331.907:809): avc: denied { write } for pid=14183 comm="syz.4.2564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 426.100117][ T43] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 426.114375][ T43] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 426.179713][ T5904] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2 [ 426.235734][ T5904] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB3 [ 426.529147][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 426.530543][ T5926] usb 3-1: USB disconnect, device number 58 [ 426.569458][ T5926] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 426.603618][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 426.603848][ T5952] usb 7-1: USB disconnect, device number 10 [ 426.638623][ T5926] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 426.658701][ T5952] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2 [ 426.683365][ T5926] quatech2 3-1:0.51: device disconnected [ 426.696012][ T5952] quatech-serial ttyUSB3: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB3 [ 426.720325][ T5952] quatech2 7-1:0.51: device disconnected [ 426.872030][ T5926] TC_ACT_REPEAT abuse ? [ 426.882100][ T36] TC_ACT_REPEAT abuse ? [ 426.886817][ T9] TC_ACT_REPEAT abuse ? [ 426.891451][ T5926] TC_ACT_REPEAT abuse ? [ 427.131387][ T30] audit: type=1400 audit(1755780333.027:810): avc: denied { accept } for pid=14226 comm="syz.4.2573" path="socket:[42737]" dev="sockfs" ino=42737 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 427.338544][T14245] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2580'. [ 427.403535][T14252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2585'. [ 427.447728][T14252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2585'. [ 427.795631][ T30] audit: type=1400 audit(1755780333.687:811): avc: denied { write } for pid=14266 comm="syz.1.2588" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 428.001866][ T30] audit: type=1400 audit(1755780333.727:812): avc: denied { kexec_image_load } for pid=14266 comm="syz.1.2588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 428.626114][ T30] audit: type=1400 audit(1755780334.517:813): avc: denied { unmount } for pid=5847 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 429.172621][T14300] SELinux: failed to load policy [ 429.269348][ T30] audit: type=1400 audit(1755780335.157:814): avc: denied { ioctl } for pid=14295 comm="syz.1.2599" path="socket:[43244]" dev="sockfs" ino=43244 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 429.631189][T14312] loop2: detected capacity change from 0 to 7 [ 429.641264][ T6112] Dev loop2: unable to read RDB block 7 [ 429.649531][ T6112] loop2: AHDI p2 [ 429.658184][ T6112] loop2: partition table partially beyond EOD, truncated [ 429.675146][T14312] Dev loop2: unable to read RDB block 7 [ 429.686428][T14312] loop2: AHDI p2 [ 429.691723][T14312] loop2: partition table partially beyond EOD, truncated [ 429.731726][ T43] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 430.380711][ T43] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 430.401202][ T43] usb 7-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 430.410678][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.423981][ T43] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 430.582687][T14334] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2612'. [ 430.654289][ T30] audit: type=1400 audit(1755780336.557:815): avc: denied { read } for pid=14336 comm="syz.2.2614" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 430.693196][ T30] audit: type=1400 audit(1755780336.557:816): avc: denied { open } for pid=14336 comm="syz.2.2614" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 430.698361][T14337] netlink: 'syz.2.2614': attribute type 1 has an invalid length. [ 430.944551][T14337] 8021q: adding VLAN 0 to HW filter on device bond4 [ 431.306513][ T974] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 431.391173][T14355] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 431.400803][T14355] bridge2: entered allmulticast mode [ 431.451307][ T43] stv0680 7-1:4.0: STV(e): camera ping failed!! [ 431.457694][ T974] usb 3-1: device descriptor read/64, error -71 [ 431.543411][ T30] audit: type=1400 audit(1755780337.447:817): avc: denied { setattr } for pid=14350 comm="syz.5.2619" name="NETLINK" dev="sockfs" ino=42988 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 431.612018][ T30] audit: type=1400 audit(1755780337.477:818): avc: denied { ioctl } for pid=14363 comm="syz.4.2624" path="socket:[43426]" dev="sockfs" ino=43426 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 431.682977][ T43] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 431.701925][ T43] stv0680 7-1:4.0: last error: 59, command = 0x9a [ 431.709724][ T43] usb 7-1: USB disconnect, device number 11 [ 431.731764][ T974] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 431.871979][ T974] usb 3-1: device descriptor read/64, error -71 [ 431.967700][T14377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2630'. [ 431.968200][T14379] hfs: can't find a HFS filesystem on dev nullb0 [ 431.983213][ T974] usb usb3-port1: attempt power cycle [ 432.351986][ T974] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 432.369912][ T5952] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 432.392195][ T974] usb 3-1: device descriptor read/8, error -71 [ 432.508083][ T30] audit: type=1400 audit(1755780338.397:819): avc: denied { write } for pid=14393 comm="syz.6.2634" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 432.564815][ T30] audit: type=1400 audit(1755780338.397:820): avc: denied { open } for pid=14393 comm="syz.6.2634" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 432.588314][ C0] vkms_vblank_simulate: vblank timer overrun [ 432.624130][ T5952] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 432.641113][ T2908] TC_ACT_REPEAT abuse ? [ 432.646954][ T5904] TC_ACT_REPEAT abuse ? [ 432.648220][ T5952] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 432.651474][ T974] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 432.660367][ T9] TC_ACT_REPEAT abuse ? [ 432.723369][ T5952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.723400][ T974] usb 3-1: device descriptor read/8, error -71 [ 432.767025][ T5952] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 432.779790][T14401] netlink: 'syz.6.2636': attribute type 10 has an invalid length. [ 432.791808][T14401] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2636'. [ 432.852851][ T974] usb usb3-port1: unable to enumerate USB device [ 432.869527][T14403] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 432.877404][T14403] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 432.886014][T14403] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 433.006579][T14403] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 433.238023][ T9] IPVS: starting estimator thread 0... [ 433.279366][T14403] bridge0: entered promiscuous mode [ 433.285622][T14403] macsec1: entered promiscuous mode [ 433.297723][T14403] bridge0: port 4(macsec1) entered blocking state [ 433.314156][T14403] bridge0: port 4(macsec1) entered disabled state [ 433.342354][T14403] macsec1: entered allmulticast mode [ 433.348036][T14403] bridge0: entered allmulticast mode [ 433.348296][T14409] IPVS: using max 119 ests per chain, 285600 per kthread [ 433.375632][T14403] macsec1: left allmulticast mode [ 433.380716][T14403] bridge0: left allmulticast mode [ 433.445827][T14403] bridge0: left promiscuous mode [ 434.001016][ T5952] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 434.009300][ T5952] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 434.016279][ T5952] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 434.067634][ T5952] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 434.107894][ T5952] usb 5-1: USB disconnect, device number 60 [ 434.113979][ T30] audit: type=1400 audit(1755780340.007:821): avc: denied { setcheckreqprot } for pid=14418 comm="syz.2.2641" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 434.134594][ C0] vkms_vblank_simulate: vblank timer overrun [ 434.335620][T14425] lo speed is unknown, defaulting to 1000 [ 434.502596][T14425] wg1 speed is unknown, defaulting to 1000 [ 434.988160][T14441] netlink: 'syz.4.2647': attribute type 21 has an invalid length. [ 434.996236][T14441] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2647'. [ 435.001716][ T974] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 435.735415][ T974] usb 2-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 435.931649][ T974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.070466][ T974] usb 2-1: config 0 descriptor?? [ 436.082894][ T974] pwc: Samsung MPC-C10 USB webcam detected. [ 436.193002][ T30] audit: type=1400 audit(1755780342.087:822): avc: denied { getopt } for pid=14443 comm="syz.6.2649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 436.588237][ T974] pwc: send_video_command error -71 [ 436.597803][ T974] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 436.638140][T14459] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2654'. [ 436.680037][ T974] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 436.693658][T14459] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2654'. [ 436.720379][T14459] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2654'. [ 436.720485][ T974] usb 2-1: USB disconnect, device number 58 [ 436.941745][ T5952] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 437.131837][ T974] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 437.305449][ T974] usb 2-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 437.486846][ T974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.524393][ T974] usb 2-1: config 0 descriptor?? [ 437.536536][ T974] pwc: Samsung MPC-C10 USB webcam detected. [ 437.553110][ T5952] usb 7-1: Using ep0 maxpacket: 8 [ 437.563385][ T5952] usb 7-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 437.578533][ T5952] usb 7-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 437.601919][ T5952] usb 7-1: Product: syz [ 437.606111][ T5952] usb 7-1: Manufacturer: syz [ 437.619463][ T5952] usb 7-1: SerialNumber: syz [ 437.649831][ T5952] usb 7-1: config 0 descriptor?? [ 437.670740][ T5952] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 437.879043][T14476] loop8: detected capacity change from 0 to 8 [ 437.905715][T14476] Dev loop8: unable to read RDB block 8 [ 437.914984][T14461] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 437.931364][T14476] loop8: unable to read partition table [ 437.939091][T14476] loop8: partition table beyond EOD, truncated [ 437.947295][T14476] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 438.019544][ T974] pwc: recv_control_msg error -71 req 02 val 2b00 [ 438.029734][ T974] pwc: recv_control_msg error -71 req 02 val 2700 [ 438.055863][ T974] pwc: recv_control_msg error -71 req 04 val 1700 [ 438.066839][ T974] pwc: recv_control_msg error -71 req 02 val 2c00 [ 438.119903][ T974] pwc: recv_control_msg error -71 req 04 val 1000 [ 438.136569][ T43] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 438.195876][ T974] pwc: recv_control_msg error -71 req 04 val 1300 [ 438.213272][ T5952] gspca_zc3xx: reg_w_i err -110 [ 438.218802][ T974] pwc: recv_control_msg error -71 req 04 val 1400 [ 438.229513][ T5952] gspca_zc3xx 7-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 438.238535][ T974] pwc: recv_control_msg error -71 req 02 val 2000 [ 438.253894][ T974] pwc: recv_control_msg error -71 req 02 val 2100 [ 438.299135][ T974] pwc: recv_control_msg error -71 req 02 val 2200 [ 438.314929][ T43] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 438.398962][T13538] TC_ACT_REPEAT abuse ? [ 438.403926][ T9] TC_ACT_REPEAT abuse ? [ 438.406202][ T974] pwc: recv_control_msg error -71 req 06 val 0600 [ 438.408512][ T5926] TC_ACT_REPEAT abuse ? [ 438.414845][ T43] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 438.442539][ T974] pwc: recv_control_msg error -71 req 04 val 1500 [ 438.451802][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.471221][ T974] pwc: recv_control_msg error -71 req 02 val 2500 [ 438.492020][ T974] pwc: recv_control_msg error -71 req 02 val 2400 [ 438.505138][ T43] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 438.551924][ T974] pwc: recv_control_msg error -71 req 02 val 2600 [ 438.653502][ T974] pwc: recv_control_msg error -71 req 02 val 2900 [ 438.692755][ T974] pwc: recv_control_msg error -71 req 02 val 2800 [ 438.700638][ T974] pwc: recv_control_msg error -71 req 04 val 1100 [ 438.718369][ T974] pwc: recv_control_msg error -71 req 04 val 1200 [ 438.749660][ T974] pwc: Registered as video103. [ 438.756733][ T974] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input38 [ 439.113951][ T974] usb 2-1: USB disconnect, device number 59 [ 439.373306][T14507] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2669'. [ 439.394510][T14507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2669'. [ 439.405867][T14507] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2669'. [ 439.512379][ T43] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 439.530421][ T43] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 439.545079][ T43] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 439.561096][ T43] stv0680 3-1:4.0: last error: 0, command = 0x0 [ 439.582769][ T43] usb 3-1: USB disconnect, device number 63 [ 439.598854][ T974] usb 7-1: USB disconnect, device number 12 [ 439.671218][T14516] tipc: Enabling of bearer rejected, failed to enable media [ 439.687580][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.694222][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.055037][ T5952] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 440.222136][ T5952] usb 7-1: Using ep0 maxpacket: 32 [ 440.228448][ T5952] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 440.236954][ T5952] usb 7-1: config 0 has no interface number 0 [ 440.244848][ T5952] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 440.256884][ T5952] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.266733][ T5952] usb 7-1: Product: syz [ 440.270970][ T5952] usb 7-1: Manufacturer: syz [ 440.360153][ T5952] usb 7-1: SerialNumber: syz [ 440.432650][ T5952] usb 7-1: config 0 descriptor?? [ 440.480441][ T5952] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 440.580729][T14537] loop8: detected capacity change from 0 to 8 [ 440.591012][T14537] Dev loop8: unable to read RDB block 8 [ 440.600321][T14537] loop8: unable to read partition table [ 440.610888][T14537] loop8: partition table beyond EOD, truncated [ 440.627766][T14537] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 440.654006][ T5952] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 440.685830][ T5952] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 440.711839][ T974] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 440.952658][ T974] usb 2-1: Using ep0 maxpacket: 32 [ 440.985155][ T974] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 441.455982][ T1206] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 441.465328][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 441.480991][ T974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.490028][ T5842] usb 7-1: USB disconnect, device number 13 [ 441.526957][ T5842] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 441.563598][ T974] usb 2-1: Product: syz [ 441.571873][ T974] usb 2-1: Manufacturer: syz [ 441.580131][ T5842] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 441.591947][ T5952] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 441.605219][ T974] usb 2-1: SerialNumber: syz [ 441.612996][ T1206] usb 5-1: Using ep0 maxpacket: 8 [ 441.617481][ T5842] quatech2 7-1:0.51: device disconnected [ 441.623414][ T1206] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 441.629002][ T974] usb 2-1: config 0 descriptor?? [ 441.690298][T14553] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2685'. [ 441.707984][T14553] gtp0: entered promiscuous mode [ 441.714875][T14553] gtp0: entered allmulticast mode [ 441.719994][ T1206] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 441.724028][ T30] audit: type=1326 audit(1755780347.617:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14552 comm="syz.5.2685" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd97538ebe9 code=0x380000 [ 441.766739][ T1206] usb 5-1: Product: syz [ 441.801507][ T5952] usb 3-1: Using ep0 maxpacket: 16 [ 441.821762][ T1206] usb 5-1: Manufacturer: syz [ 441.826385][ T1206] usb 5-1: SerialNumber: syz [ 441.837258][ T5952] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 441.846477][ T5952] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 441.855710][ T5952] usb 3-1: Product: syz [ 441.859928][ T5952] usb 3-1: Manufacturer: syz [ 441.864556][ T5952] usb 3-1: SerialNumber: syz [ 441.870777][ T5952] usb 3-1: config 0 descriptor?? [ 441.878062][T14531] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2677'. [ 441.888064][T14531] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2677'. [ 441.906042][ T1206] usb 5-1: config 0 descriptor?? [ 441.914767][ T1206] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 441.998437][T14531] trusted_key: encrypted_key: master key parameter '' is invalid [ 442.006504][T14555] trusted_key: encrypted_key: master key parameter '' is invalid [ 442.096994][T14550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2683'. [ 442.107701][T14550] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2683'. [ 442.149232][ T974] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 442.165116][ T974] gspca_stk1135: reg_w 0x2 err -71 [ 442.172285][ T974] gspca_stk1135: serial bus timeout: status=0x00 [ 442.179277][ T974] gspca_stk1135: Sensor write failed [ 442.188269][ T974] gspca_stk1135: serial bus timeout: status=0x00 [ 442.240416][T14561] FAULT_INJECTION: forcing a failure. [ 442.240416][T14561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 442.246005][ T974] gspca_stk1135: Sensor write failed [ 442.285417][T14561] CPU: 0 UID: 0 PID: 14561 Comm: syz.6.2687 Not tainted syzkaller #0 PREEMPT(full) [ 442.285445][T14561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 442.285455][T14561] Call Trace: [ 442.285461][T14561] [ 442.285469][T14561] dump_stack_lvl+0x16c/0x1f0 [ 442.285493][T14561] should_fail_ex+0x512/0x640 [ 442.285519][T14561] _copy_from_user+0x2e/0xd0 [ 442.285542][T14561] nr_setsockopt+0x2d6/0x470 [ 442.285563][T14561] ? __pfx_nr_setsockopt+0x10/0x10 [ 442.285582][T14561] ? __fget_files+0x204/0x3c0 [ 442.285603][T14561] ? rcu_is_watching+0x12/0xc0 [ 442.285627][T14561] ? selinux_socket_setsockopt+0x6a/0x80 [ 442.285651][T14561] ? __pfx_nr_setsockopt+0x10/0x10 [ 442.285672][T14561] do_sock_setsockopt+0xf3/0x1d0 [ 442.285696][T14561] __sys_setsockopt+0x1a0/0x230 [ 442.285721][T14561] __x64_sys_setsockopt+0xbd/0x160 [ 442.285738][T14561] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 442.285760][T14561] do_syscall_64+0xcd/0x4c0 [ 442.285780][T14561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.285800][T14561] RIP: 0033:0x7fcc6e38ebe9 [ 442.285814][T14561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.285832][T14561] RSP: 002b:00007fcc6f18e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 442.285851][T14561] RAX: ffffffffffffffda RBX: 00007fcc6e5b5fa0 RCX: 00007fcc6e38ebe9 [ 442.285863][T14561] RDX: 0000000000000006 RSI: 0000000000000103 RDI: 0000000000000004 [ 442.285874][T14561] RBP: 00007fcc6f18e090 R08: 0000000000000004 R09: 0000000000000000 [ 442.285885][T14561] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 442.285896][T14561] R13: 00007fcc6e5b6038 R14: 00007fcc6e5b5fa0 R15: 00007ffcfa247778 [ 442.285912][T14561] [ 442.467965][ T974] gspca_stk1135: serial bus timeout: status=0x00 [ 442.474397][ T974] gspca_stk1135: Sensor read failed [ 442.479607][ T974] gspca_stk1135: serial bus timeout: status=0x00 [ 442.485945][ T974] gspca_stk1135: Sensor read failed [ 442.491136][ T974] gspca_stk1135: Detected sensor type unknown (0x0) [ 442.497945][ T974] gspca_stk1135: serial bus timeout: status=0x00 [ 442.504435][ T974] gspca_stk1135: Sensor read failed [ 442.505271][ T1206] gspca_zc3xx: reg_w_i err -110 [ 442.510140][ T974] gspca_stk1135: serial bus timeout: status=0x00 [ 442.515055][ T1206] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 442.530224][ T974] gspca_stk1135: Sensor read failed [ 442.536559][ T974] gspca_stk1135: serial bus timeout: status=0x00 [ 442.542914][ T974] gspca_stk1135: Sensor write failed [ 442.553890][ T974] gspca_stk1135: serial bus timeout: status=0x00 [ 442.560248][ T974] gspca_stk1135: Sensor write failed [ 442.573484][ T974] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 442.587648][ T974] usb 2-1: USB disconnect, device number 60 [ 442.628898][T14565] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 442.639027][T14565] bridge1: entered allmulticast mode [ 443.736473][T14590] SELinux: failed to load policy [ 443.815308][ T974] usb 5-1: USB disconnect, device number 61 [ 444.016722][ T5952] usb 3-1: USB disconnect, device number 64 [ 444.192634][ T8505] TC_ACT_REPEAT abuse ? [ 444.197606][ T974] TC_ACT_REPEAT abuse ? [ 444.202791][ T1206] TC_ACT_REPEAT abuse ? [ 444.422058][ T9] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 444.591741][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 444.612542][ T9] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 444.621742][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.635595][ T9] usb 5-1: config 0 descriptor?? [ 444.649916][ T9] gspca_main: sq930x-2.14.0 probing 041e:403c [ 444.671770][ T974] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 444.801774][ T974] usb 3-1: device descriptor read/64, error -71 [ 445.041775][ T974] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 445.121844][ T5842] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 445.371977][ T9] gspca_sq930x: ucbus_write failed -110 [ 445.377639][ T9] sq930x 5-1:0.0: probe with driver sq930x failed with error -110 [ 445.487744][ T5844] Bluetooth: hci6: unexpected event 0x09 length: 6 > 3 [ 445.511870][ T974] usb 3-1: device descriptor read/64, error -71 [ 445.544131][ T5842] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.555373][ T5842] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.567091][ T5842] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 445.576554][ T5842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.592601][ T5842] usb 2-1: config 0 descriptor?? [ 445.632466][ T974] usb usb3-port1: attempt power cycle [ 445.971937][ T974] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 446.017493][ T974] usb 3-1: device descriptor read/8, error -71 [ 446.097506][ T5842] hid_parser_main: 6 callbacks suppressed [ 446.097557][ T5842] cp2112 0003:10C4:EA90.0048: unknown main item tag 0x0 [ 446.167262][ T5842] cp2112 0003:10C4:EA90.0048: unknown main item tag 0x0 [ 446.190556][ T5842] cp2112 0003:10C4:EA90.0048: unknown main item tag 0x0 [ 446.201122][ T5842] cp2112 0003:10C4:EA90.0048: unknown main item tag 0x0 [ 446.218872][ T5842] cp2112 0003:10C4:EA90.0048: unknown main item tag 0x0 [ 446.241226][ T5842] cp2112 0003:10C4:EA90.0048: unknown main item tag 0x0 [ 446.257939][ T5842] cp2112 0003:10C4:EA90.0048: unknown main item tag 0x0 [ 446.271945][ T974] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 446.314262][ T5842] cp2112 0003:10C4:EA90.0048: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 446.348409][ T974] usb 3-1: device descriptor read/8, error -71 [ 446.413308][ T5842] cp2112 0003:10C4:EA90.0048: Part Number: 0x00 Device Version: 0x00 [ 446.461937][ T974] usb usb3-port1: unable to enumerate USB device [ 446.473917][T14628] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2708'. [ 447.341264][T14633] loop2: detected capacity change from 0 to 7 [ 447.348121][T14633] Dev loop2: unable to read RDB block 7 [ 447.354003][T14633] loop2: AHDI p2 [ 447.357708][T14633] loop2: partition table partially beyond EOD, truncated [ 447.427567][ T43] usb 5-1: USB disconnect, device number 62 [ 447.525697][T14644] FAULT_INJECTION: forcing a failure. [ 447.525697][T14644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 447.551886][T14644] CPU: 0 UID: 0 PID: 14644 Comm: syz.6.2710 Not tainted syzkaller #0 PREEMPT(full) [ 447.551912][T14644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 447.551923][T14644] Call Trace: [ 447.551929][T14644] [ 447.551935][T14644] dump_stack_lvl+0x16c/0x1f0 [ 447.551964][T14644] should_fail_ex+0x512/0x640 [ 447.551985][T14644] _copy_from_user+0x2e/0xd0 [ 447.552007][T14644] io_submit_one+0xbb/0x1df0 [ 447.552029][T14644] ? do_user_addr_fault+0x843/0x1370 [ 447.552048][T14644] ? ksys_write+0x12a/0x250 [ 447.552067][T14644] ? __pfx_io_submit_one+0x10/0x10 [ 447.552086][T14644] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 447.552111][T14644] ? rcu_is_watching+0x12/0xc0 [ 447.552133][T14644] ? __might_fault+0xe3/0x190 [ 447.552148][T14644] ? lock_release+0x201/0x2f0 [ 447.552175][T14644] ? __x64_sys_io_submit+0x1a9/0x350 [ 447.552197][T14644] __x64_sys_io_submit+0x1a9/0x350 [ 447.552219][T14644] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 447.552245][T14644] do_syscall_64+0xcd/0x4c0 [ 447.552265][T14644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.552283][T14644] RIP: 0033:0x7fcc6e38ebe9 [ 447.552296][T14644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.552313][T14644] RSP: 002b:00007fcc6f18e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 447.552330][T14644] RAX: ffffffffffffffda RBX: 00007fcc6e5b5fa0 RCX: 00007fcc6e38ebe9 [ 447.552341][T14644] RDX: 0000200000000180 RSI: 0000000000000001 RDI: 00007fcc6f16d000 [ 447.552352][T14644] RBP: 00007fcc6f18e090 R08: 0000000000000000 R09: 0000000000000000 [ 447.552362][T14644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.552372][T14644] R13: 00007fcc6e5b6038 R14: 00007fcc6e5b5fa0 R15: 00007ffcfa247778 [ 447.552388][T14644] [ 447.561445][T14645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.632555][T14650] SELinux: failed to load policy [ 447.762929][T14645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.795606][T14645] SELinux: failed to load policy [ 447.942820][T14654] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2715'. [ 448.057050][T14654] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2715'. [ 448.070444][T14654] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2715'. [ 448.156020][T14654] sit1: entered allmulticast mode [ 448.248431][T14655] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.345641][T14655] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.406765][T14655] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.497491][T14655] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.571232][T14661] batadv_slave_0: entered promiscuous mode [ 448.655605][ T49] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.686008][ T49] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.744784][ T49] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.773669][ T49] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.914010][T14665] lo speed is unknown, defaulting to 1000 [ 449.051433][T14665] wg1 speed is unknown, defaulting to 1000 [ 449.141575][T14669] netlink: 'syz.2.2719': attribute type 1 has an invalid length. [ 449.182021][ T5842] cp2112 0003:10C4:EA90.0048: error setting SMBus config [ 449.230105][ T5842] cp2112 0003:10C4:EA90.0048: probe with driver cp2112 failed with error -71 [ 449.241330][ T5842] usb 2-1: USB disconnect, device number 61 [ 449.475855][T14669] 8021q: adding VLAN 0 to HW filter on device bond5 [ 449.913093][ T49] TC_ACT_REPEAT abuse ? [ 449.917848][ T5952] TC_ACT_REPEAT abuse ? [ 449.922458][ T9] TC_ACT_REPEAT abuse ? [ 450.283228][T14696] veth0_to_bond: entered allmulticast mode [ 450.934286][T14706] SELinux: failed to load policy [ 451.614750][T14709] SELinux: failed to load policy [ 452.314845][T14718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.488996][ T94] block nbd0: Possible stuck request ffff8880269c5080: control (read@0,1024B). Runtime 240 seconds [ 452.500557][ T94] block nbd0: Possible stuck request ffff8880269c5240: control (read@1024,1024B). Runtime 240 seconds [ 452.513171][ T94] block nbd0: Possible stuck request ffff8880269c5400: control (read@2048,1024B). Runtime 240 seconds [ 452.524515][ T94] block nbd0: Possible stuck request ffff8880269c55c0: control (read@3072,1024B). Runtime 240 seconds [ 452.830955][T14736] Invalid ELF header magic: != ELF [ 453.766703][T14743] loop6: detected capacity change from 0 to 7 [ 453.897446][T14743] Dev loop6: unable to read RDB block 7 [ 453.911834][T14743] loop6: AHDI p1 p2 [ 453.915763][T14743] loop6: partition table partially beyond EOD, truncated [ 453.941064][T14743] loop6: p1 start 926365495 is beyond EOD, truncated [ 454.084115][ T6112] udevd[6112]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 454.423828][T14757] netlink: 'syz.1.2747': attribute type 1 has an invalid length. [ 454.441917][ T9] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 454.484780][T14763] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2747'. [ 454.586925][T14757] 8021q: adding VLAN 0 to HW filter on device bond2 [ 454.596075][ T9] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 454.615641][ T9] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 454.625722][ T5952] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 454.643598][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 454.646874][T14763] bond2: (slave geneve3): making interface the new active one [ 454.683416][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 454.692707][ T9] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 454.700857][ T9] usb 3-1: Product: syz [ 454.807728][T14763] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 454.839175][ T9] usb 3-1: Manufacturer: syz [ 454.853997][ T9] usb 3-1: SerialNumber: syz [ 454.902431][ T9] usb 3-1: config 0 descriptor?? [ 454.916577][ T9] hub 3-1:0.0: bad descriptor, ignoring hub [ 454.930810][ T9] hub 3-1:0.0: probe with driver hub failed with error -5 [ 454.938643][ T5926] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 454.946425][ T30] audit: type=1326 audit(1755780360.817:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14750 comm="syz.4.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b518ebe9 code=0x7ffc0000 [ 454.990569][ T9] usb 3-1: selecting invalid altsetting 0 [ 455.006187][ T30] audit: type=1326 audit(1755780360.817:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14750 comm="syz.4.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b518ebe9 code=0x7ffc0000 [ 455.029905][ T30] audit: type=1326 audit(1755780360.817:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14750 comm="syz.4.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f14b518ebe9 code=0x7ffc0000 [ 455.055456][ T30] audit: type=1326 audit(1755780360.817:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14750 comm="syz.4.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b518ebe9 code=0x7ffc0000 [ 455.079115][ T30] audit: type=1326 audit(1755780360.817:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14750 comm="syz.4.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b518ebe9 code=0x7ffc0000 [ 455.122468][ T30] audit: type=1326 audit(1755780360.817:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14750 comm="syz.4.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f14b518ebe9 code=0x7ffc0000 [ 455.131817][ T5926] usb 7-1: Using ep0 maxpacket: 32 [ 455.153277][ T5926] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 455.162591][ T5926] usb 7-1: config 0 has no interface number 0 [ 455.164278][ T30] audit: type=1326 audit(1755780360.817:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14750 comm="syz.4.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b518ebe9 code=0x7ffc0000 [ 455.176900][ T5926] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 455.203414][ T30] audit: type=1326 audit(1755780360.817:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14750 comm="syz.4.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b518ebe9 code=0x7ffc0000 [ 455.203870][ T5926] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.226940][ C0] vkms_vblank_simulate: vblank timer overrun [ 455.227769][ T30] audit: type=1326 audit(1755780360.817:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14750 comm="syz.4.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f14b518ebe9 code=0x7ffc0000 [ 455.235339][ T5926] usb 7-1: Product: syz [ 455.264493][ C0] vkms_vblank_simulate: vblank timer overrun [ 455.279346][ T1206] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 455.296725][ T30] audit: type=1326 audit(1755780360.817:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14750 comm="syz.4.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b518ebe9 code=0x7ffc0000 [ 455.388776][ T5926] usb 7-1: Manufacturer: syz [ 455.406607][ T5926] usb 7-1: SerialNumber: syz [ 455.413443][ T5926] usb 7-1: config 0 descriptor?? [ 455.431314][ T5926] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 455.461737][ T1206] usb 2-1: Using ep0 maxpacket: 32 [ 455.468766][ T1206] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 455.477326][ T1206] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 455.485956][ T1206] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 455.496175][ T1206] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 455.505404][ T1206] usb 2-1: config 1 has no interface number 0 [ 455.511977][ T1206] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 455.521074][ T1206] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.537639][ T1206] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 455.650140][ T5926] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 455.672945][ T5926] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 455.774842][ T1206] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values [ 455.790585][ T1206] snd_usb_pod 2-1:1.1: invalid control EP [ 455.820072][ T1206] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 455.848674][ T1206] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 455.867388][ T1206] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 455.970427][T14768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.979128][T14768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.981853][ T43] usb 3-1: USB disconnect, device number 69 [ 455.988658][ T1206] usb 2-1: USB disconnect, device number 62 [ 456.060179][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 456.060381][ T43] usb 7-1: USB disconnect, device number 14 [ 456.083869][ T43] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 456.101052][ T43] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 456.127012][ T43] quatech2 7-1:0.51: device disconnected [ 456.801750][ T43] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 456.842073][ T5904] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 456.942105][ T43] usb 3-1: device descriptor read/64, error -71 [ 456.992879][ T5904] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 457.003215][ T5904] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 457.012283][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.026546][ T5904] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 457.183925][ T43] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 457.245435][ T5952] usb 5-1: unable to get BOS descriptor or descriptor too short [ 457.257866][ T5952] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 457.277768][ T5952] usb 5-1: can't read configurations, error -71 [ 457.332990][ T43] usb 3-1: device descriptor read/64, error -71 [ 457.421510][T14816] SELinux: failed to load policy [ 457.442458][ T43] usb usb3-port1: attempt power cycle [ 457.632049][ T5842] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 457.845158][ T43] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 457.852855][ T5842] usb 7-1: Using ep0 maxpacket: 16 [ 457.862621][ T5842] usb 7-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 457.919643][ T5842] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.927959][ T5842] usb 7-1: Product: syz [ 457.934256][ T43] usb 3-1: device descriptor read/8, error -71 [ 457.940523][ T5842] usb 7-1: Manufacturer: syz [ 457.984537][ T5842] usb 7-1: SerialNumber: syz [ 458.033154][ T5842] usb 7-1: config 0 descriptor?? [ 458.039538][ T5842] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 458.076595][ T5904] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 458.095341][ T5904] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 458.110136][ T5904] stv0680 2-1:4.0: last error: 0, command = 0x0 [ 458.192199][ T43] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 458.212481][ T43] usb 3-1: device descriptor read/8, error -71 [ 458.259435][ T5842] gp8psk: usb in 128 operation failed. [ 458.265742][ T5842] gp8psk: usb in 137 operation failed. [ 458.273015][ T5842] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 458.290570][ T5842] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 458.302257][ T5842] usb 7-1: media controller created [ 458.317284][ T5952] usb 2-1: USB disconnect, device number 63 [ 458.332800][ T43] usb usb3-port1: unable to enumerate USB device [ 458.359799][ T5842] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 458.390551][ T5842] gp8psk_fe: Frontend revision 1 attached [ 458.399905][ T5842] usb 7-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 458.411717][ T5842] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 458.435794][ T5842] gp8psk: usb in 138 operation failed. [ 458.453180][ T5842] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 458.508191][ T5842] gp8psk: found Genpix USB device pID = 201 (hex) [ 458.651355][ T5842] usb 7-1: USB disconnect, device number 15 [ 458.720876][ T5842] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 459.512266][ T5952] TC_ACT_REPEAT abuse ? [ 460.014915][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 460.014928][ T30] audit: type=1400 audit(5267341089.473:843): avc: denied { create } for pid=14870 comm="syz.1.2782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 460.209275][ T30] audit: type=1400 audit(5267341089.553:844): avc: denied { create } for pid=14862 comm="syz.6.2778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 460.310384][ T30] audit: type=1400 audit(5267341089.553:845): avc: denied { bind } for pid=14862 comm="syz.6.2778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 460.361826][ T5844] Bluetooth: hci2: unexpected event 0x09 length: 6 > 3 [ 460.454145][T14879] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 460.499024][T14880] loop6: detected capacity change from 0 to 7 [ 460.508818][T14880] Dev loop6: unable to read RDB block 7 [ 460.515403][T14880] loop6: AHDI p1 p2 [ 460.519380][T14880] loop6: partition table partially beyond EOD, truncated [ 460.528364][T14880] loop6: p1 start 926365495 is beyond EOD, truncated [ 460.567822][ T6112] udevd[6112]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 460.668024][ T30] audit: type=1326 audit(5267341090.113:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14887 comm="syz.2.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1203b8ebe9 code=0x7ffc0000 [ 460.781353][ T5952] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 460.802210][ T30] audit: type=1326 audit(5267341090.113:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14887 comm="syz.2.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1203b8ebe9 code=0x7ffc0000 [ 460.826088][ T30] audit: type=1326 audit(5267341090.113:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14887 comm="syz.2.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1203b8ebe9 code=0x7ffc0000 [ 460.900322][ T30] audit: type=1326 audit(5267341090.113:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14887 comm="syz.2.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1203b8ebe9 code=0x7ffc0000 [ 460.967623][ T5952] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 460.987345][ T5952] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 461.031542][ T5952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.039974][ T30] audit: type=1326 audit(5267341090.113:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14887 comm="syz.2.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1203b8ebe9 code=0x7ffc0000 [ 461.150736][ T5952] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 461.378064][ T30] audit: type=1326 audit(5267341090.113:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14887 comm="syz.2.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1203b8ebe9 code=0x7ffc0000 [ 461.559236][ T30] audit: type=1326 audit(5267341090.113:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14887 comm="syz.2.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1203b8ebe9 code=0x7ffc0000 [ 461.968911][T14931] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2794'. [ 462.111726][ T43] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 462.148856][T14937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 462.232609][ T1206] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 462.262405][ T5952] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 462.270772][ T5952] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 462.278284][ T5952] stv0680 2-1:4.0: last error: 0, command = 0x0 [ 462.285679][ T43] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 462.294070][ T43] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 462.401718][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 462.402688][ T1206] usb 3-1: device descriptor read/64, error -71 [ 462.410729][ T43] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 462.424375][ T43] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 462.432722][ T43] usb 5-1: Product: syz [ 462.437048][ T43] usb 5-1: Manufacturer: syz [ 462.444609][ T43] usb 5-1: SerialNumber: syz [ 462.459556][ T43] usb 5-1: config 0 descriptor?? [ 462.467721][ T43] hub 5-1:0.0: bad descriptor, ignoring hub [ 462.475528][ T43] hub 5-1:0.0: probe with driver hub failed with error -5 [ 462.488873][ T5842] usb 2-1: USB disconnect, device number 64 [ 462.504809][ T43] usb 5-1: selecting invalid altsetting 0 [ 462.682372][ T1206] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 462.903976][T14922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 462.921849][ T1206] usb 3-1: device descriptor read/64, error -71 [ 463.032198][ T1206] usb usb3-port1: attempt power cycle [ 463.382076][ T43] usb 5-1: USB disconnect, device number 65 [ 463.421767][ T1206] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 463.569120][ T1206] usb 3-1: device descriptor read/8, error -71 [ 463.823672][ T1206] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 463.842199][ T1206] usb 3-1: device descriptor read/8, error -71 [ 463.891410][T14997] loop8: detected capacity change from 0 to 8 [ 463.900969][ T6112] Dev loop8: unable to read RDB block 8 [ 463.908440][ T6112] loop8: unable to read partition table [ 463.914847][ T6112] loop8: partition table beyond EOD, truncated [ 463.923983][T14997] Dev loop8: unable to read RDB block 8 [ 463.933323][T14997] loop8: unable to read partition table [ 463.939120][T14997] loop8: partition table beyond EOD, truncated [ 463.948166][T14997] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 463.957992][ T1206] usb usb3-port1: unable to enumerate USB device [ 465.020446][T15015] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2806'. [ 465.167401][T15017] trusted_key: encrypted_key: master key parameter 'use:s' is invalid [ 465.285626][T15017] trusted_key: encrypted_key: master key parameter 'use:s' is invalid [ 465.737588][T15023] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 465.744133][T15023] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 466.185956][T15023] vhci_hcd vhci_hcd.0: Device attached [ 466.278843][T15024] vhci_hcd: connection closed [ 466.279107][ T36] vhci_hcd: stop threads [ 466.302129][ T36] vhci_hcd: release socket [ 466.314465][ T36] vhci_hcd: disconnect device [ 466.361811][ T5926] vhci_hcd: vhci_device speed not set [ 466.391841][ T1206] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 466.621851][ T1206] usb 7-1: Using ep0 maxpacket: 16 [ 466.630965][ T1206] usb 7-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 466.681249][ T1206] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.695669][ T1206] usb 7-1: Product: syz [ 466.723630][ T1206] usb 7-1: Manufacturer: syz [ 466.738039][ T1206] usb 7-1: SerialNumber: syz [ 466.751495][ T1206] usb 7-1: config 0 descriptor?? [ 466.764368][ T1206] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 466.970351][ T1206] gp8psk: usb in 128 operation failed. [ 466.979503][ T1206] gp8psk: usb in 137 operation failed. [ 466.985764][ T1206] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 467.028279][ T1206] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 467.051773][ T1206] usb 7-1: media controller created [ 467.066940][ T1206] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 467.079811][ T1206] gp8psk_fe: Frontend revision 1 attached [ 467.085686][ T5952] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 467.095615][ T1206] usb 7-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 467.103892][ T1206] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 467.143348][ T1206] gp8psk: usb in 138 operation failed. [ 467.169159][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 467.169769][ T30] audit: type=1400 audit(5267341096.623:867): avc: denied { name_connect } for pid=15063 comm="syz.2.2817" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 467.199846][ T1206] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 467.219081][ T1206] gp8psk: found Genpix USB device pID = 201 (hex) [ 467.241709][ T5952] usb 5-1: Using ep0 maxpacket: 8 [ 467.252902][ T5952] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 467.269644][ T1206] usb 7-1: USB disconnect, device number 16 [ 467.290903][ T5952] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 467.305759][ T5952] usb 5-1: Product: syz [ 467.311703][ T5952] usb 5-1: Manufacturer: syz [ 467.321880][ T5952] usb 5-1: SerialNumber: syz [ 467.334406][ T5952] usb 5-1: config 0 descriptor?? [ 467.351291][ T5952] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 467.365437][ T1206] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 467.546086][T15065] fuse: Unknown parameter 'rP{o[0000800400d' [ 467.822760][T15081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.831371][T15081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.061911][ T5952] gspca_zc3xx: reg_r err -71 [ 468.068803][ T5952] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 468.093207][ T5952] usb 5-1: USB disconnect, device number 66 [ 468.161780][ T5926] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 468.224643][T15089] loop8: detected capacity change from 0 to 8 [ 468.232048][ T6112] Dev loop8: unable to read RDB block 8 [ 468.238033][ T6112] loop8: unable to read partition table [ 468.246713][ T6112] loop8: partition table beyond EOD, truncated [ 468.254275][T15089] Dev loop8: unable to read RDB block 8 [ 468.262152][T15089] loop8: unable to read partition table [ 468.268932][T15089] loop8: partition table beyond EOD, truncated [ 468.308478][T15089] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 468.343779][ T5926] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 468.351985][ T5926] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 468.378395][ T5926] usb 2-1: config 0 interface 0 has no altsetting 0 [ 468.397021][ T5926] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 468.427896][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 468.452013][ T5926] usb 2-1: Product: syz [ 468.456545][ T5926] usb 2-1: Manufacturer: syz [ 468.471379][ T30] audit: type=1400 audit(5267341097.923:868): avc: denied { append } for pid=15090 comm="syz.2.2824" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 468.630276][ T5926] usb 2-1: SerialNumber: syz [ 468.638124][ T5926] usb 2-1: config 0 descriptor?? [ 468.657828][ T5926] hub 2-1:0.0: bad descriptor, ignoring hub [ 468.666260][ T5926] hub 2-1:0.0: probe with driver hub failed with error -5 [ 468.679984][ T5926] usb 2-1: selecting invalid altsetting 0 [ 468.881775][ T5952] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 469.142312][ T5926] TC_ACT_REPEAT abuse ? [ 469.202107][ T5952] usb 5-1: Using ep0 maxpacket: 32 [ 469.208640][ T5952] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 469.216842][ T5952] usb 5-1: config 0 has no interface number 0 [ 469.225095][ T5952] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 469.234466][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.242639][ T5952] usb 5-1: Product: syz [ 469.246929][ T5952] usb 5-1: Manufacturer: syz [ 469.251539][ T5952] usb 5-1: SerialNumber: syz [ 469.257547][ T5952] usb 5-1: config 0 descriptor?? [ 469.264471][ T5952] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 469.519730][ T5952] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 469.572510][ T5952] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 469.943624][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 469.943764][ T974] usb 5-1: USB disconnect, device number 67 [ 470.053770][ T974] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 470.128069][ T974] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 470.160180][ T974] quatech2 5-1:0.51: device disconnected [ 470.301932][ T5952] usb 2-1: USB disconnect, device number 65 [ 470.324245][T15130] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15130 comm=syz.2.2836 [ 470.841786][ T5952] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 471.073058][ T5952] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 471.081484][ T5952] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 471.163926][ T5952] usb 3-1: config 0 interface 0 has no altsetting 0 [ 471.228664][ T5952] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 471.248074][ T5952] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 471.651741][ T5952] usb 3-1: Product: syz [ 471.656046][ T5952] usb 3-1: Manufacturer: syz [ 471.660671][ T5952] usb 3-1: SerialNumber: syz [ 471.681997][ T5952] usb 3-1: config 0 descriptor?? [ 471.946417][ T5952] hub 3-1:0.0: bad descriptor, ignoring hub [ 471.952440][ T5952] hub 3-1:0.0: probe with driver hub failed with error -5 [ 471.961108][ T5952] usb 3-1: selecting invalid altsetting 0 [ 472.461859][ T5926] usb 3-1: USB disconnect, device number 78 [ 472.605874][ T30] audit: type=1400 audit(5267341102.053:869): avc: denied { write } for pid=15168 comm="syz.4.2846" name="mouse0" dev="devtmpfs" ino=1026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 472.655598][ T30] audit: type=1400 audit(5267341102.053:870): avc: denied { ioctl } for pid=15168 comm="syz.4.2846" path="/dev/input/mouse0" dev="devtmpfs" ino=1026 ioctlcmd=0x5627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 473.041791][ T5844] Bluetooth: hci6: unexpected event 0x09 length: 6 > 3 [ 473.611797][ T43] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 473.641744][ T5844] Bluetooth: hci4: unexpected event 0x09 length: 6 > 3 [ 473.822856][ T43] usb 7-1: config 4 has an invalid interface number: 6 but max is 0 [ 473.840532][T15198] SELinux: failed to load policy [ 474.317496][ T43] usb 7-1: config 4 has no interface number 0 [ 474.327587][ T43] usb 7-1: config 4 interface 6 has no altsetting 0 [ 474.343456][ T43] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice=f5.98 [ 474.352609][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.368128][ T43] usb 7-1: Product: syz [ 474.389395][ T43] usb 7-1: Manufacturer: syz [ 474.413123][ T43] usb 7-1: SerialNumber: syz [ 474.620892][T15206] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2858'. [ 474.716318][ T43] usb 7-1: USB disconnect, device number 17 [ 474.736257][T15209] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2857'. [ 474.783297][ T30] audit: type=1400 audit(5267341104.183:871): avc: denied { map } for pid=15201 comm="syz.5.2857" path="socket:[46785]" dev="sockfs" ino=46785 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 474.922757][T15214] loop6: detected capacity change from 0 to 7 [ 474.934082][T15214] Dev loop6: unable to read RDB block 7 [ 474.939776][T15214] loop6: AHDI p1 p2 [ 474.940155][T15215] loop8: detected capacity change from 0 to 8 [ 475.086547][T15214] loop6: partition table partially beyond EOD, truncated [ 475.093872][T15215] Dev loop8: unable to read RDB block 8 [ 475.099505][T15215] loop8: unable to read partition table [ 475.101491][T15214] loop6: p1 start 926365495 is beyond EOD, truncated [ 475.106543][T15215] loop8: partition table beyond EOD, truncated [ 475.126848][T15215] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 475.240035][ T6112] udevd[6112]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 476.341441][ T5853] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 476.352945][ T5853] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 476.360138][ T5853] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 476.372564][ T5853] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 476.385500][ T5853] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 476.409218][T15237] lo speed is unknown, defaulting to 1000 [ 476.477447][ T1151] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.487983][ T1151] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.500866][T15237] wg1 speed is unknown, defaulting to 1000 [ 476.522500][ T43] usb 7-1: new low-speed USB device number 18 using dummy_hcd [ 476.548093][ T1151] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.561295][ T1151] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.640899][ T1151] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.651404][ T1151] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.670609][T15237] chnl_net:caif_netlink_parms(): no params data found [ 476.684408][ T43] usb 7-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 476.703123][ T43] usb 7-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 476.718308][ T43] usb 7-1: config 1 interface 0 has no altsetting 0 [ 476.762747][T15237] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.770029][T15237] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.780413][T15237] bridge_slave_0: entered allmulticast mode [ 476.787323][T15237] bridge_slave_0: entered promiscuous mode [ 476.803786][T15237] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.812536][T15237] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.821904][T15237] bridge_slave_1: entered allmulticast mode [ 476.828772][T15237] bridge_slave_1: entered promiscuous mode [ 476.848424][ T1151] macvlan2: left allmulticast mode [ 476.854718][ T1151] veth0: left allmulticast mode [ 476.859743][ T1151] macvlan2: left promiscuous mode [ 476.865831][ T1151] bridge0: port 3(macvlan2) entered disabled state [ 476.894822][ T1151] bridge_slave_1: left allmulticast mode [ 476.905750][ T1151] bridge_slave_1: left promiscuous mode [ 476.915022][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.925313][ T1151] bridge_slave_0: left allmulticast mode [ 476.941366][ T1151] bridge_slave_0: left promiscuous mode [ 476.954440][ T1151] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.001509][T15264] netlink: 'syz.5.2874': attribute type 1 has an invalid length. [ 477.015828][T15266] netlink: 'syz.2.2875': attribute type 1 has an invalid length. [ 477.189199][ T1151] bond2 (unregistering): (slave geneve3): Releasing active interface [ 477.200188][ T1151] bond1 (unregistering): (slave geneve2): Releasing active interface [ 477.316282][ T1151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 477.326802][ T1151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 477.337239][ T1151] bond0 (unregistering): Released all slaves [ 477.347221][ T1151] bond1 (unregistering): Released all slaves [ 477.357072][ T1151] bond2 (unregistering): Released all slaves [ 477.378655][T15264] 8021q: adding VLAN 0 to HW filter on device bond3 [ 477.392334][T15267] bond3: (slave geneve3): making interface the new active one [ 477.400618][T15267] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 477.438053][T15237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.447614][T13538] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.458388][T13538] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.474704][ T1151] tipc: Disabling bearer [ 477.486874][T15237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.492166][ T1151] tipc: Left network mode [ 477.502572][T13538] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.525619][T15273] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2877'. [ 477.528239][T13538] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.550331][T15237] team0: Port device team_slave_0 added [ 477.572565][T15237] team0: Port device team_slave_1 added [ 477.687048][T15237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.704975][T15237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.754636][T15237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.784932][T15237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.792746][T15237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.856459][T15237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.015740][T15237] hsr_slave_0: entered promiscuous mode [ 478.030109][T15237] hsr_slave_1: entered promiscuous mode [ 478.067576][T15237] debugfs: 'hsr0' already exists in 'hsr' [ 478.075933][T15306] netlink: 'syz.2.2887': attribute type 1 has an invalid length. [ 478.081627][T15237] Cannot create hsr debugfs directory [ 478.099455][T15300] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2886'. [ 478.139422][T15306] 8021q: adding VLAN 0 to HW filter on device bond6 [ 478.143381][T15310] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2888'. [ 478.163371][ T1151] hsr_slave_0: left promiscuous mode [ 478.178673][ T1151] hsr_slave_1: left promiscuous mode [ 478.187699][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 478.195589][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.204057][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 478.211597][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.224463][ T1151] veth0: left promiscuous mode [ 478.229433][ T1151] veth1_macvtap: left promiscuous mode [ 478.235334][ T1151] veth0_macvtap: left promiscuous mode [ 478.240986][ T1151] veth1_vlan: left promiscuous mode [ 478.246320][ T1151] veth0_vlan: left promiscuous mode [ 478.396193][ T1151] team0 (unregistering): Port device team_slave_1 removed [ 478.407750][ T1151] team0 (unregistering): Port device team_slave_0 removed [ 478.471893][ T5853] Bluetooth: hci7: command tx timeout [ 478.493650][T15306] bond6: (slave geneve3): making interface the new active one [ 478.511233][T15306] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 478.653293][ T30] audit: type=1400 audit(5267341108.103:872): avc: denied { ioctl } for pid=15328 comm="syz.4.2896" path="socket:[46994]" dev="sockfs" ino=46994 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 478.838910][ T5952] TC_ACT_REPEAT abuse ? [ 479.347511][ T43] usb 7-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.40 [ 479.441411][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.455912][T15354] netlink: 'syz.2.2899': attribute type 10 has an invalid length. [ 479.552459][ T43] usb 7-1: Product: 倥႕㦏쨫晑勨의跐⻄㘝璚焞聵퍚ꛍ釂鎀龀цꞱ橴뾂磙」ڙ눠⹺㴈庸潛•欯ᵱ瀖嬊廢헞뵢뿜쀢軱ó⧋⮸묚ݺ芸쎤䄖঱樸匚销曢쯵癪퇫乩⼥훕泶頀⑶ⲣ然懩窳ꏒ챇夜闯ꫵ巻䫬᫑욷债㿓ﱿ᱕摙 [ 479.644513][T15365] loop2: detected capacity change from 0 to 7 [ 479.659964][T15362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2899'. [ 479.660754][T15354] batman_adv: batadv0: Adding interface: team0 [ 479.687319][T15354] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.722654][ T43] usb 7-1: Manufacturer: 岼猀鞠⸟ⅱꑖႷ굵ω琐㴁뱙螅똗㍶蕘쫇␍ἂ茻셲歂됈퇼彰ⵅ쌌퉘歍燘濙譵쎘ｖ᫼ு蕤⽉䊦闼璐ࡴี⨺텬캠綢縛꿳ɀښ䥳䫟좞ꄳ稔뤮⩶ć껟쌔쨒㹟ﱿ뺜㎍峫谚軴玣鯔洷鏍‏巍 [ 479.758779][T15365] Dev loop2: unable to read RDB block 7 [ 479.788301][T15354] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 479.800335][T15365] loop2: AHDI p2 [ 479.823816][ T43] usb 7-1: can't set config #1, error -71 [ 479.832790][T15365] loop2: partition table partially beyond EOD, truncated [ 479.839467][ T1151] IPVS: stop unused estimator thread 0... [ 479.869591][T15373] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 479.902269][ T43] usb 7-1: USB disconnect, device number 18 [ 479.908559][T15373] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 479.920696][T15373] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 479.953468][T15373] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 479.967500][T15373] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 480.052775][T15373] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 480.083467][ T9] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 480.157164][T15237] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 480.202247][T15373] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 480.242294][T15237] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 480.253025][T15373] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 480.276724][T15373] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 480.297111][T15237] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 480.312120][T15373] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 480.323535][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 480.333717][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 480.401471][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 480.423008][T15237] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 480.434683][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 480.453122][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.470238][ T9] usb 5-1: Product: syz [ 480.490070][ T9] usb 5-1: Manufacturer: syz [ 480.495222][ T9] usb 5-1: SerialNumber: syz [ 480.504521][ T9] hub 5-1:1.0: bad descriptor, ignoring hub [ 480.515497][ T9] hub 5-1:1.0: probe with driver hub failed with error -5 [ 480.554034][ T5853] Bluetooth: hci7: command tx timeout [ 480.721538][ T9] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 68 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 480.861357][T15237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.917586][T15237] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.037664][ T30] audit: type=1400 audit(5267341110.493:873): avc: denied { read write } for pid=15369 comm="syz.4.2906" name="lp0" dev="devtmpfs" ino=4263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 481.064090][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.071190][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.130623][T13538] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.137727][T13538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.221789][ T30] audit: type=1400 audit(5267341110.493:874): avc: denied { open } for pid=15369 comm="syz.4.2906" path="/dev/usb/lp0" dev="devtmpfs" ino=4263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 481.302731][ T5853] Bluetooth: hci5: unexpected event 0x09 length: 6 > 3 [ 481.380194][T15413] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2912'. [ 481.443767][T15371] usb 5-1: reset high-speed USB device number 68 using dummy_hcd [ 481.545840][T15237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.580131][T15237] veth0_vlan: entered promiscuous mode [ 481.594159][T15237] veth1_vlan: entered promiscuous mode [ 481.611800][T15237] veth0_macvtap: entered promiscuous mode [ 481.620559][T15237] veth1_macvtap: entered promiscuous mode [ 481.645293][T15237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.668819][T15237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.680810][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.698084][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.749793][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.830464][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.917575][T10412] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.946219][T10412] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.013600][ T8505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.024785][ T8505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.224392][T15444] loop6: detected capacity change from 0 to 7 [ 482.233111][ T6112] Dev loop6: unable to read RDB block 7 [ 482.244009][ T6112] loop6: AHDI p1 p2 [ 482.250857][ T6112] loop6: partition table partially beyond EOD, truncated [ 482.262043][ T6112] loop6: p1 start 926365495 is beyond EOD, truncated [ 482.276431][T15444] Dev loop6: unable to read RDB block 7 [ 482.282498][T15444] loop6: AHDI p1 p2 [ 482.286545][T15444] loop6: partition table partially beyond EOD, truncated [ 482.294113][T15444] loop6: p1 start 926365495 is beyond EOD, truncated [ 482.413545][T15450] loop8: detected capacity change from 0 to 8 [ 482.420102][T15450] Dev loop8: unable to read RDB block 8 [ 482.427301][T15450] loop8: unable to read partition table [ 482.445780][T15450] loop8: partition table beyond EOD, truncated [ 482.452418][T15450] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 482.534273][T15452] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 482.561500][ T94] block nbd0: Possible stuck request ffff8880269c5080: control (read@0,1024B). Runtime 270 seconds [ 482.572841][ T94] block nbd0: Possible stuck request ffff8880269c5240: control (read@1024,1024B). Runtime 270 seconds [ 482.583972][ T94] block nbd0: Possible stuck request ffff8880269c5400: control (read@2048,1024B). Runtime 270 seconds [ 482.595066][ T94] block nbd0: Possible stuck request ffff8880269c55c0: control (read@3072,1024B). Runtime 270 seconds [ 482.638119][ T5853] Bluetooth: hci7: command tx timeout [ 482.708402][T15464] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2923'. [ 483.001797][ T5904] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 483.151821][ T5904] usb 7-1: Using ep0 maxpacket: 16 [ 483.159840][ T5904] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 483.239976][ T5904] usb 7-1: New USB device found, idVendor=5fc9, idProduct=0061, bcdDevice=16.64 [ 483.253201][ T5904] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.261536][ T5904] usb 7-1: Product: syz [ 483.276746][ T5904] usb 7-1: Manufacturer: syz [ 483.281449][ T5904] usb 7-1: SerialNumber: syz [ 483.302115][ T974] usb 5-1: USB disconnect, device number 68 [ 483.309497][ T974] usblp0: removed [ 483.407168][T15478] loop6: detected capacity change from 0 to 7 [ 483.414586][T15478] Dev loop6: unable to read RDB block 7 [ 483.427973][T15478] loop6: AHDI p1 p2 [ 483.433344][ T30] audit: type=1400 audit(5267341112.893:875): avc: denied { module_load } for pid=15470 comm="syz.5.2926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 483.447299][T15478] loop6: partition table partially beyond EOD, [ 483.453253][T15472] Invalid ELF header magic: != ELF [ 483.516825][ T5904] usb 7-1: USB disconnect, device number 19 [ 483.526066][T15478] truncated [ 483.547527][T15478] loop6: p1 start 926365495 is beyond EOD, truncated [ 483.936522][T15492] bridge0: port 3(team0) entered blocking state [ 483.943041][T15492] bridge0: port 3(team0) entered disabled state [ 483.949834][T15492] team0: entered allmulticast mode [ 483.955094][T15492] team_slave_0: entered allmulticast mode [ 483.960825][T15492] team_slave_1: entered allmulticast mode [ 483.971836][T15492] team0: entered promiscuous mode [ 483.977019][T15492] team_slave_0: entered promiscuous mode [ 483.983766][T15492] team_slave_1: entered promiscuous mode [ 483.991149][T15492] bridge0: port 3(team0) entered blocking state [ 483.997465][T15492] bridge0: port 3(team0) entered forwarding state [ 485.082334][ T5853] Bluetooth: hci7: command tx timeout [ 485.461608][ T5952] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 485.574927][T15523] loop6: detected capacity change from 0 to 7 [ 485.604667][T15523] Dev loop6: unable to read RDB block 7 [ 485.610392][T15523] loop6: AHDI p1 p2 [ 485.619246][ T5952] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 485.637133][T15523] loop6: partition table partially beyond EOD, truncated [ 485.781822][ T5952] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 486.006901][T15523] loop6: p1 start 926365495 is beyond EOD, truncated [ 486.017058][ T5952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.045384][ T5952] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 486.226958][T15533] lo speed is unknown, defaulting to 1000 [ 486.271731][ T30] audit: type=1400 audit(5267341115.693:876): avc: denied { setopt } for pid=15537 comm="syz.1.2943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 486.399491][T15533] wg1 speed is unknown, defaulting to 1000 [ 486.477099][T15547] netlink: 'syz.6.2944': attribute type 1 has an invalid length. [ 486.529510][T15547] 8021q: adding VLAN 0 to HW filter on device bond1 [ 486.763441][T15555] lo speed is unknown, defaulting to 1000 [ 486.856288][T15555] wg1 speed is unknown, defaulting to 1000 [ 486.895711][T15563] netlink: 'syz.5.2948': attribute type 1 has an invalid length. [ 486.930965][T15563] 8021q: adding VLAN 0 to HW filter on device bond4 [ 487.038324][T15566] bond4: (slave geneve4): making interface the new active one [ 487.056456][T15566] bond4: (slave geneve4): Enslaving as an active interface with an up link [ 487.065237][ T5904] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 487.112869][ T5952] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 487.131249][ T5952] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 487.138024][ T5952] stv0680 5-1:4.0: last error: 167, command = 0xd1 [ 487.238056][ T5904] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 487.246403][ T5904] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 487.258501][ T5904] usb 2-1: config 0 interface 0 has no altsetting 0 [ 487.286797][ T5904] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 487.303239][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 487.321117][ T5904] usb 2-1: Product: syz [ 487.329466][ T5904] usb 2-1: Manufacturer: syz [ 487.336892][ T5904] usb 2-1: SerialNumber: syz [ 487.346230][ T5904] usb 2-1: config 0 descriptor?? [ 487.361137][ T5904] hub 2-1:0.0: bad descriptor, ignoring hub [ 487.367399][ T5904] hub 2-1:0.0: probe with driver hub failed with error -5 [ 487.383736][ T5904] usb 2-1: selecting invalid altsetting 0 [ 487.584306][T15587] netlink: 'syz.6.2955': attribute type 1 has an invalid length. [ 487.983615][T15597] netlink: 'syz.6.2959': attribute type 1 has an invalid length. [ 488.013735][T15597] bond2: entered promiscuous mode [ 488.025449][T15597] 8021q: adding VLAN 0 to HW filter on device bond2 [ 488.081390][T15602] 8021q: adding VLAN 0 to HW filter on device bond2 [ 488.096036][T15602] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 488.114108][T15602] bond2: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 488.129566][T15602] bond2: (slave vcan1): making interface the new active one [ 488.137283][T15602] vcan1: entered promiscuous mode [ 488.233241][T15602] bond2: (slave vcan1): Enslaving as an active interface with an up link [ 488.278388][T15607] overlayfs: missing 'lowerdir' [ 488.332948][ T5926] TC_ACT_REPEAT abuse ? [ 488.666102][ T5842] usb 5-1: USB disconnect, device number 69 [ 488.915212][ T30] audit: type=1400 audit(5267341118.373:877): avc: denied { remount } for pid=15620 comm="syz.2.2966" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 489.152898][T15625] netlink: 'syz.2.2968': attribute type 1 has an invalid length. [ 489.378442][T15630] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2971'. [ 490.146575][T15648] loop8: detected capacity change from 0 to 8 [ 490.156550][T15648] Dev loop8: unable to read RDB block 8 [ 490.222383][T15655] SELinux: failed to load policy [ 490.263261][ T5926] usb 2-1: USB disconnect, device number 66 [ 490.321769][T15648] loop8: unable to read partition table [ 490.327691][T15648] loop8: partition table beyond EOD, truncated [ 490.336342][T15648] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 490.599284][T15663] loop2: detected capacity change from 0 to 7 [ 490.617672][T15663] Dev loop2: unable to read RDB block 7 [ 490.625526][T15663] loop2: AHDI p2 [ 490.637791][T15663] loop2: partition table partially beyond EOD, truncated [ 490.645117][ T5853] Bluetooth: hci7: unexpected event 0x09 length: 6 > 3 [ 490.899736][T15671] loop6: detected capacity change from 0 to 7 [ 490.915517][T15671] Dev loop6: unable to read RDB block 7 [ 490.921214][T15671] loop6: AHDI p1 p2 [ 490.981007][T15671] loop6: partition table partially beyond EOD, truncated [ 490.995885][T15671] loop6: p1 start 926365495 is beyond EOD, truncated [ 491.016247][ T30] audit: type=1400 audit(5267341120.473:878): avc: denied { getopt } for pid=15672 comm="syz.6.2986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 491.021898][ T5904] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 491.204023][ T5904] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 491.216026][ T5904] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 491.234324][ T5904] usb 5-1: config 0 interface 0 has no altsetting 0 [ 491.245856][ T5904] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 491.255697][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 491.285916][ T5904] usb 5-1: Product: syz [ 491.291721][ T9] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 491.292732][ T5904] usb 5-1: Manufacturer: syz [ 491.308218][ T5904] usb 5-1: SerialNumber: syz [ 491.316684][ T5904] usb 5-1: config 0 descriptor?? [ 491.320646][T15685] loop8: detected capacity change from 0 to 8 [ 491.325107][ T5904] hub 5-1:0.0: bad descriptor, ignoring hub [ 491.328402][T15685] Dev loop8: unable to read RDB block 8 [ 491.334100][ T5904] hub 5-1:0.0: probe with driver hub failed with error -5 [ 491.339579][T15685] loop8: unable to read partition table [ 491.349369][ T5904] usb 5-1: selecting invalid altsetting 0 [ 491.354315][T15685] loop8: partition table beyond EOD, truncated [ 491.365130][T15685] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 491.445273][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 491.454017][ T9] usb 7-1: config 63 has an invalid interface number: 66 but max is 0 [ 491.462324][ T9] usb 7-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 491.472648][ T9] usb 7-1: config 63 has no interface number 0 [ 491.478812][ T9] usb 7-1: config 63 interface 66 has no altsetting 0 [ 491.486860][ T9] usb 7-1: language id specifier not provided by device, defaulting to English [ 491.501479][ T9] usb 7-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4 [ 491.510710][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.518886][ T9] usb 7-1: SerialNumber: ₯⬒᥋녲썶ᇎ귀금괢Г瞣ㄭ [ 491.850743][T15705] ptrace attach of "./syz-executor exec"[5840] was attempted by "./syz-executor exec"[15705] [ 493.005089][T15721] netlink: 'syz.2.3002': attribute type 32 has an invalid length. [ 493.013953][T15721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3002'. [ 493.014972][T15723] loop2: detected capacity change from 0 to 7 [ 493.024842][T15721] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 493.037928][T15723] Dev loop2: unable to read RDB block 7 [ 493.117660][T15723] loop2: AHDI p2 [ 493.129126][T15723] loop2: partition table partially beyond EOD, truncated [ 493.595323][T15740] lo speed is unknown, defaulting to 1000 [ 493.888041][T15740] wg1 speed is unknown, defaulting to 1000 [ 494.094750][ T9] uvcvideo 7-1:63.66: probe with driver uvcvideo failed with error -22 [ 494.143376][ T9] usb 7-1: USB disconnect, device number 20 [ 494.675223][T15753] team0: Device gtp0 is of different type [ 495.341901][ T5952] usb 5-1: USB disconnect, device number 70 [ 495.561808][ T5842] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 495.603619][T15768] lo speed is unknown, defaulting to 1000 [ 495.641705][ T5952] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 495.683194][T15768] wg1 speed is unknown, defaulting to 1000 [ 495.712806][ T5842] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 495.722115][ T5842] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 495.739455][ T5842] usb 3-1: config 0 interface 0 has no altsetting 0 [ 495.748837][ T5842] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 495.759595][ T5842] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 495.767815][ T5842] usb 3-1: Product: syz [ 495.773267][ T5842] usb 3-1: Manufacturer: syz [ 495.778935][ T5842] usb 3-1: SerialNumber: syz [ 495.784945][ T5842] usb 3-1: config 0 descriptor?? [ 495.793530][ T5842] hub 3-1:0.0: bad descriptor, ignoring hub [ 495.793556][ T5952] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 495.808382][ T5842] hub 3-1:0.0: probe with driver hub failed with error -5 [ 495.815629][ T5952] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 495.831787][ T5952] usb 5-1: config 0 interface 0 has no altsetting 0 [ 495.834406][ T5842] usb 3-1: selecting invalid altsetting 0 [ 495.845546][ T5952] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 495.857257][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 495.873250][ T5952] usb 5-1: Product: syz [ 495.877625][ T5952] usb 5-1: Manufacturer: syz [ 495.882228][ T5952] usb 5-1: SerialNumber: syz [ 495.898662][ T5952] usb 5-1: config 0 descriptor?? [ 495.908732][ T5952] hub 5-1:0.0: bad descriptor, ignoring hub [ 495.915565][ T5952] hub 5-1:0.0: probe with driver hub failed with error -5 [ 495.925093][ T5952] usb 5-1: selecting invalid altsetting 0 [ 496.994056][ T5844] Bluetooth: hci7: unexpected event 0x09 length: 6 > 3 [ 497.352575][ T5904] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 497.501741][ T5904] usb 2-1: device descriptor read/64, error -71 [ 497.811712][ T5904] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 497.911911][ T5952] TC_ACT_REPEAT abuse ? [ 497.941829][ T5904] usb 2-1: device descriptor read/64, error -71 [ 498.051808][ T5904] usb usb2-port1: attempt power cycle [ 498.071826][ T5844] Bluetooth: hci6: command 0x0406 tx timeout [ 498.343789][T15804] SELinux: failed to load policy [ 498.405392][ T5904] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 498.575019][ T5904] usb 2-1: device descriptor read/8, error -71 [ 498.668548][T15809] loop6: detected capacity change from 0 to 7 [ 498.707557][T15809] Dev loop6: unable to read RDB block 7 [ 498.721296][T15809] loop6: AHDI p1 p2 [ 498.731404][T15809] loop6: partition table partially beyond EOD, truncated [ 498.739693][T15809] loop6: p1 start 926365495 is beyond EOD, truncated [ 498.744260][ T9] usb 5-1: USB disconnect, device number 71 [ 498.831992][ T5904] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 498.874124][ T5904] usb 2-1: device descriptor read/8, error -71 [ 498.982085][ T5904] usb usb2-port1: unable to enumerate USB device [ 499.022841][ T5926] usb 3-1: USB disconnect, device number 79 [ 499.042559][ T30] audit: type=1400 audit(5267341128.503:879): avc: denied { ioctl } for pid=15815 comm="syz.4.3028" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x5879 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 499.352161][ T5926] usb 3-1: new full-speed USB device number 80 using dummy_hcd [ 499.481708][ T1206] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 499.503808][ T5926] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 499.517819][ T5926] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 499.529084][ T5926] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 65535, setting to 64 [ 499.533969][T15820] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3030'. [ 499.551018][ T5926] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 499.564531][ T5926] usb 3-1: config 0 interface 0 has no altsetting 0 [ 499.574570][ T5926] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 499.583687][ T5926] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 499.592292][ T5926] usb 3-1: Product: syz [ 499.596466][ T5926] usb 3-1: Manufacturer: syz [ 499.601059][ T5926] usb 3-1: SerialNumber: syz [ 499.606910][ T5926] usb 3-1: config 0 descriptor?? [ 499.612471][T15813] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 499.620397][ T5926] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 499.630335][ T5926] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 499.644063][ T1206] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 499.652543][ T1206] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 499.662376][ T1206] usb 7-1: config 0 interface 0 has no altsetting 0 [ 499.670509][ T1206] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 499.679553][ T1206] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 499.687771][ T1206] usb 7-1: Product: syz [ 499.691963][ T1206] usb 7-1: Manufacturer: syz [ 499.696555][ T1206] usb 7-1: SerialNumber: syz [ 499.701967][ T1206] usb 7-1: config 0 descriptor?? [ 499.707626][ T1206] hub 7-1:0.0: bad descriptor, ignoring hub [ 499.713541][ T1206] hub 7-1:0.0: probe with driver hub failed with error -5 [ 499.721697][ T1206] usb 7-1: selecting invalid altsetting 0 [ 499.825468][T15813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.834627][T15813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.852553][ T5904] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 500.373933][ T5904] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 500.382383][ T5904] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 500.400856][ T5904] usb 5-1: config 0 interface 0 has no altsetting 0 [ 500.434679][ T5904] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 500.444057][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 500.452280][ T5904] usb 5-1: Product: syz [ 500.456500][ T5904] usb 5-1: Manufacturer: syz [ 500.461270][ T5904] usb 5-1: SerialNumber: syz [ 500.467949][ T5904] usb 5-1: config 0 descriptor?? [ 500.475481][ T5904] hub 5-1:0.0: bad descriptor, ignoring hub [ 500.481447][ T5904] hub 5-1:0.0: probe with driver hub failed with error -5 [ 500.495958][ T5904] usb 5-1: selecting invalid altsetting 0 [ 501.114542][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.120882][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.662783][ T24] usb 7-1: USB disconnect, device number 21 [ 501.713682][ T24] usb 3-1: USB disconnect, device number 80 [ 501.721037][ T24] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 501.841741][ T5904] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 502.399051][ T30] audit: type=1400 audit(5267341131.523:880): avc: denied { bind } for pid=15870 comm="syz.2.3042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 502.431792][ T5904] usb 2-1: Using ep0 maxpacket: 16 [ 502.441467][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.453909][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 502.464318][ T5904] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 502.477926][ T5904] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 502.487068][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.496301][ T5904] usb 2-1: config 0 descriptor?? [ 502.791890][ T9] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 502.873568][ T5842] usb 5-1: USB disconnect, device number 72 [ 502.895361][T15890] loop2: detected capacity change from 0 to 7 [ 502.903395][T15890] Dev loop2: unable to read RDB block 7 [ 502.909173][T15890] loop2: AHDI p2 [ 502.913079][T15890] loop2: partition table partially beyond EOD, truncated [ 502.932404][ T24] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 502.983685][ T9] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 503.000070][ T9] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 503.017756][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 503.028448][ T9] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 503.037757][ T9] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 503.046038][ T9] usb 7-1: Product: syz [ 503.050205][ T9] usb 7-1: Manufacturer: syz [ 503.055081][ T9] usb 7-1: SerialNumber: syz [ 503.062007][ T9] usb 7-1: config 0 descriptor?? [ 503.068545][ T9] hub 7-1:0.0: bad descriptor, ignoring hub [ 503.074577][ T9] hub 7-1:0.0: probe with driver hub failed with error -5 [ 503.084784][ T9] usb 7-1: selecting invalid altsetting 0 [ 503.093317][ T24] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 503.112356][ T24] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 503.123851][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 503.144138][ T24] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 503.154259][ T24] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 503.162561][ T24] usb 3-1: Product: syz [ 503.168183][ T24] usb 3-1: Manufacturer: syz [ 503.179124][ T24] usb 3-1: SerialNumber: syz [ 503.221376][ T24] usb 3-1: config 0 descriptor?? [ 503.234027][ T24] hub 3-1:0.0: bad descriptor, ignoring hub [ 503.240759][ T24] hub 3-1:0.0: probe with driver hub failed with error -5 [ 503.253735][ T24] usb 3-1: selecting invalid altsetting 0 [ 503.271736][ T9] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 503.345127][ T5904] usbhid 2-1:0.0: can't add hid device: -71 [ 503.352641][ T5904] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 503.362614][ T5904] usb 2-1: USB disconnect, device number 71 [ 503.432800][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 503.489369][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.580571][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.590525][ T9] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 503.633395][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.672549][ T9] usb 5-1: config 0 descriptor?? [ 503.971982][ T5904] usb 7-1: USB disconnect, device number 22 [ 504.104700][ T9] hid (null): global environment stack underflow [ 504.201954][ T5926] usb 3-1: USB disconnect, device number 81 [ 504.201952][ T5842] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 504.353747][ T5842] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 504.381761][ T5842] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 504.412013][ T5842] usb 2-1: config 0 interface 0 has no altsetting 0 [ 504.428018][ T5842] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 504.437852][ T5842] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 504.446212][ T5842] usb 2-1: Product: syz [ 504.450513][ T5842] usb 2-1: Manufacturer: syz [ 504.457410][ T5842] usb 2-1: SerialNumber: syz [ 504.465921][ T5842] usb 2-1: config 0 descriptor?? [ 504.474029][ T5842] hub 2-1:0.0: bad descriptor, ignoring hub [ 504.480072][ T5842] hub 2-1:0.0: probe with driver hub failed with error -5 [ 504.497566][ T9] usb 5-1: string descriptor 0 read error: -71 [ 504.498928][ T5842] usb 2-1: selecting invalid altsetting 0 [ 504.536665][ T9] usb 5-1: Max retries (5) exceeded reading string descriptor 200 [ 504.545534][ T9] letsketch 0003:6161:4D15.0049: probe with driver letsketch failed with error -32 [ 504.559040][ T9] usb 5-1: USB disconnect, device number 73 [ 504.851701][ T5842] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 504.901688][ T5904] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 505.012341][ T5842] usb 3-1: Using ep0 maxpacket: 16 [ 505.027372][ T5842] usb 3-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 505.029046][T15926] netlink: 'syz.4.3060': attribute type 1 has an invalid length. [ 505.053199][ T5842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.068520][T15926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.077706][ T5842] usb 3-1: Product: syz [ 505.087515][ T5904] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 505.098716][ T5842] usb 3-1: Manufacturer: syz [ 505.107318][ T5904] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 505.117467][ T5842] usb 3-1: SerialNumber: syz [ 505.140191][ T5904] usb 7-1: config 0 interface 0 has no altsetting 0 [ 505.148913][ T5842] usb 3-1: config 0 descriptor?? [ 505.156405][ T5842] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 505.159728][ T30] audit: type=1326 audit(5267341134.613:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15929 comm="syz.4.3061" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f14b518ebe9 code=0x0 [ 505.166384][ T5904] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 505.200124][ T5904] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 505.208668][ T5904] usb 7-1: Product: syz [ 505.213072][ T5904] usb 7-1: Manufacturer: syz [ 505.217705][ T5904] usb 7-1: SerialNumber: syz [ 505.223286][ T5904] usb 7-1: config 0 descriptor?? [ 505.229091][ T5904] hub 7-1:0.0: bad descriptor, ignoring hub [ 505.235761][ T5904] hub 7-1:0.0: probe with driver hub failed with error -5 [ 505.244144][ T5904] usb 7-1: selecting invalid altsetting 0 [ 505.365698][ T5842] gp8psk: usb in 128 operation failed. [ 505.371392][ T5842] gp8psk: usb in 137 operation failed. [ 505.377018][ T5842] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 505.387155][ T5842] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 505.396585][ T5842] usb 3-1: media controller created [ 505.407620][ T5842] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 505.419464][ T5842] gp8psk_fe: Frontend revision 1 attached [ 505.425640][ T5842] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 505.433890][ T5842] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 505.459068][ T5842] gp8psk: usb in 138 operation failed. [ 505.464748][ T5842] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 505.475161][ T5842] gp8psk: found Genpix USB device pID = 201 (hex) [ 505.491575][ T5842] usb 3-1: USB disconnect, device number 82 [ 505.594538][ T5842] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 506.100508][T15937] lo speed is unknown, defaulting to 1000 [ 506.217577][T15937] wg1 speed is unknown, defaulting to 1000 [ 506.421699][ T24] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 506.571974][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 506.579449][ T24] usb 3-1: config 162 has an invalid interface number: 97 but max is 0 [ 506.587786][ T24] usb 3-1: config 162 has no interface number 0 [ 506.594104][ T24] usb 3-1: config 162 interface 97 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 506.605447][ T24] usb 3-1: config 162 interface 97 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 506.615775][ T24] usb 3-1: config 162 interface 97 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 506.628838][ T24] usb 3-1: config 162 interface 97 has no altsetting 0 [ 506.637503][ T24] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=e1.3b [ 506.642016][ T5926] usb 7-1: USB disconnect, device number 23 [ 506.646760][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.660548][ T24] usb 3-1: Product: syz [ 506.664747][ T24] usb 3-1: Manufacturer: syz [ 506.675867][ T24] usb 3-1: SerialNumber: syz [ 506.937134][ T24] metro_usb 3-1:162.97: interrupt-out endpoint missing [ 506.963866][ T24] usb 3-1: USB disconnect, device number 83 [ 506.990412][T15950] dummy0: left allmulticast mode [ 506.997438][T15950] bridge0: port 3(dummy0) entered disabled state [ 507.009873][T15950] bridge_slave_0: left allmulticast mode [ 507.017453][T15950] bridge_slave_0: left promiscuous mode [ 507.024223][T15950] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.132358][T15950] bridge_slave_1: left allmulticast mode [ 507.143252][T15950] bridge_slave_1: left promiscuous mode [ 507.156760][T15950] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.176214][T15950] bond0: (slave bond_slave_0): Releasing backup interface [ 507.226604][T15950] bond0: (slave bond_slave_1): Releasing backup interface [ 507.261515][T15950] team0: Port device team_slave_0 removed [ 507.277665][T15950] team0: Port device team_slave_1 removed [ 507.293910][T15950] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 507.327078][T15950] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 507.382747][T15950] team0: Port device geneve0 removed [ 507.459357][T15950] bond0: (slave wlan1): Releasing backup interface [ 507.535281][ T5926] TC_ACT_REPEAT abuse ? [ 507.607935][T15950] bond1: (slave geneve2): Releasing active interface [ 507.740980][T15950] bond2: (slave veth3): Releasing active interface [ 507.752756][T15950] bond3: (slave geneve3): Releasing active interface [ 507.764250][T15950] bond4: (slave geneve4): Releasing active interface [ 507.824447][ T36] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.834900][ T36] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.879103][ T36] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.907399][ T36] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.074802][ T9] usb 2-1: USB disconnect, device number 72 [ 508.149855][T15974] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3073'. [ 508.271710][ T5926] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 508.445147][ T5926] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 508.455414][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.467877][ T5926] usb 3-1: Product: syz [ 508.479851][ T5926] usb 3-1: Manufacturer: syz [ 508.567048][ T5926] usb 3-1: SerialNumber: syz [ 508.615182][ T5926] usb 3-1: config 0 descriptor?? [ 508.626618][T15993] lo speed is unknown, defaulting to 1000 [ 508.685148][T15993] wg1 speed is unknown, defaulting to 1000 [ 508.894967][ T5842] usb 3-1: USB disconnect, device number 84 [ 509.303442][T16007] netlink: 'syz.6.3080': attribute type 1 has an invalid length. [ 509.327155][T16007] 8021q: adding VLAN 0 to HW filter on device bond3 [ 509.601465][T16017] loop2: detected capacity change from 0 to 7 [ 509.608802][T16017] Dev loop2: unable to read RDB block 7 [ 509.618582][T16017] loop2: AHDI p2 [ 509.624383][T16017] loop2: partition table partially beyond EOD, truncated [ 509.751021][T16021] netlink: 'syz.6.3084': attribute type 1 has an invalid length. [ 509.801318][T16021] 8021q: adding VLAN 0 to HW filter on device bond4 [ 509.815124][T16023] bond4: (slave geneve3): making interface the new active one [ 509.823683][T16023] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 510.192576][ T5842] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 510.200894][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 510.332199][ T5842] usb 7-1: device descriptor read/64, error -32 [ 510.741711][ T5926] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 510.857421][ T5842] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 511.111913][ T5842] usb 7-1: Using ep0 maxpacket: 16 [ 511.119894][ T5842] usb 7-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 511.129112][ T5842] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.138125][ T5842] usb 7-1: Product: syz [ 511.142438][ T5842] usb 7-1: Manufacturer: syz [ 511.147185][ T5842] usb 7-1: SerialNumber: syz [ 511.155474][ T5842] usb 7-1: config 0 descriptor?? [ 511.162270][ T5842] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 511.162815][ T5926] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 511.189282][ T5926] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 511.225747][ T5926] usb 3-1: config 0 interface 0 has no altsetting 0 [ 511.244549][ T5926] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 511.255293][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 511.271811][ T5926] usb 3-1: Product: syz [ 511.276044][ T5926] usb 3-1: Manufacturer: syz [ 511.283413][ T5926] usb 3-1: SerialNumber: syz [ 511.292482][ T5926] usb 3-1: config 0 descriptor?? [ 511.300880][ T5926] hub 3-1:0.0: bad descriptor, ignoring hub [ 511.307725][ T5926] hub 3-1:0.0: probe with driver hub failed with error -5 [ 511.316943][ T5926] usb 3-1: selecting invalid altsetting 0 [ 511.352694][ T1206] TC_ACT_REPEAT abuse ? [ 511.400180][ T5842] gp8psk: usb in 128 operation failed. [ 511.418226][ T5842] gp8psk: usb in 137 operation failed. [ 511.432767][ T5842] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 511.448079][ T5842] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 511.467479][ T5842] usb 7-1: media controller created [ 511.481855][ T5842] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 511.491887][ T9] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 511.500493][ T5842] gp8psk_fe: Frontend revision 1 attached [ 511.506338][ T5842] usb 7-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 511.515402][ T5842] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 511.575334][ T5842] gp8psk: usb in 138 operation failed. [ 511.580823][ T5842] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 511.608511][ T5842] gp8psk: found Genpix USB device pID = 201 (hex) [ 511.620056][ T5842] usb 7-1: USB disconnect, device number 25 [ 511.821723][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 511.838876][ T9] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 511.847253][ T9] usb 2-1: config 0 has no interface number 0 [ 511.855633][ T9] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 511.871608][ T9] usb 2-1: config 0 interface 196 has no altsetting 0 [ 511.884846][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 512.108547][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.130571][ T9] usb 2-1: Product: syz [ 512.378893][ T9] usb 2-1: Manufacturer: syz [ 512.491818][ T9] usb 2-1: SerialNumber: syz [ 512.504197][ T9] usb 2-1: config 0 descriptor?? [ 512.507988][ T5842] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 512.539755][T16054] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 512.632059][ T94] block nbd0: Possible stuck request ffff8880269c5080: control (read@0,1024B). Runtime 300 seconds [ 512.642891][ T94] block nbd0: Possible stuck request ffff8880269c5240: control (read@1024,1024B). Runtime 300 seconds [ 512.654018][ T94] block nbd0: Possible stuck request ffff8880269c5400: control (read@2048,1024B). Runtime 300 seconds [ 512.665063][ T94] block nbd0: Possible stuck request ffff8880269c55c0: control (read@3072,1024B). Runtime 300 seconds [ 512.965983][ T9] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 4 bytes [ 512.975287][ T9] ipheth 2-1:0.196: probe with driver ipheth failed with error -22 [ 513.802283][ T1206] usb 3-1: USB disconnect, device number 85 [ 513.901767][ T5904] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 514.053164][ T5904] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 514.061322][ T5904] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 514.071248][ T5904] usb 5-1: config 0 interface 0 has no altsetting 0 [ 514.085473][ T5904] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 514.094692][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 514.102950][ T5904] usb 5-1: Product: syz [ 514.108336][ T5904] usb 5-1: Manufacturer: syz [ 514.163698][ T5904] usb 5-1: SerialNumber: syz [ 514.172658][ T5904] usb 5-1: config 0 descriptor?? [ 514.181942][ T5904] hub 5-1:0.0: bad descriptor, ignoring hub [ 514.193084][ T5904] hub 5-1:0.0: probe with driver hub failed with error -5 [ 514.227471][T16109] loop2: detected capacity change from 0 to 7 [ 514.235802][T16109] Dev loop2: unable to read RDB block 7 [ 514.241444][T16109] loop2: AHDI p2 [ 514.245274][T16109] loop2: partition table partially beyond EOD, truncated [ 514.246616][ T5904] usb 5-1: selecting invalid altsetting 0 [ 514.277202][ T1206] usb 2-1: USB disconnect, device number 73 [ 514.338562][T16116] QAT: failed to copy from user. [ 515.668926][T16137] loop6: detected capacity change from 0 to 7 [ 515.677089][T16137] Dev loop6: unable to read RDB block 7 [ 515.687089][T16137] loop6: AHDI p1 p2 [ 515.691003][T16137] loop6: partition table partially beyond EOD, truncated [ 515.701944][T16137] loop6: p1 start 926365495 is beyond EOD, truncated [ 515.844011][T16141] netlink: 'syz.6.3122': attribute type 1 has an invalid length. [ 515.883060][T16141] 8021q: adding VLAN 0 to HW filter on device bond5 [ 515.948531][T16145] netlink: 'syz.5.3123': attribute type 1 has an invalid length. [ 515.960968][T16141] bond5: (slave geneve4): making interface the new active one [ 516.006420][T16141] bond5: (slave geneve4): Enslaving as an active interface with an up link [ 516.062415][T16145] 8021q: adding VLAN 0 to HW filter on device bond5 [ 516.323248][ T5904] usb 5-1: USB disconnect, device number 74 [ 516.579073][T16160] lo speed is unknown, defaulting to 1000 [ 516.584921][ T5926] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 516.853668][T16160] wg1 speed is unknown, defaulting to 1000 [ 517.109751][T16171] loop6: detected capacity change from 0 to 7 [ 517.116858][T16171] Dev loop6: unable to read RDB block 7 [ 517.123261][T16171] loop6: AHDI p1 p2 [ 517.127415][T16171] loop6: partition table partially beyond EOD, truncated [ 517.135472][T16171] loop6: p1 start 926365495 is beyond EOD, truncated [ 517.166367][ T5926] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 517.191000][ T5926] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 517.205858][ T5926] usb 7-1: config 0 interface 0 has no altsetting 0 [ 517.220564][ T5926] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 517.231557][ T5926] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 517.239851][ T5926] usb 7-1: Product: syz [ 517.245406][ T30] audit: type=1400 audit(5267341146.703:882): avc: denied { append } for pid=16180 comm="syz.2.3133" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 517.269454][ T5926] usb 7-1: Manufacturer: syz [ 517.274358][ T5926] usb 7-1: SerialNumber: syz [ 517.284205][ T5926] usb 7-1: config 0 descriptor?? [ 517.294006][ T5926] hub 7-1:0.0: bad descriptor, ignoring hub [ 517.299938][ T5926] hub 7-1:0.0: probe with driver hub failed with error -5 [ 517.310570][ T5926] usb 7-1: selecting invalid altsetting 0 [ 517.571818][ T5904] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 517.843635][ T5904] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 517.856311][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 517.932011][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 517.949253][ T5904] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 517.958887][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.979036][ T5904] usb 2-1: Product: syz [ 518.085820][ T5904] usb 2-1: Manufacturer: syz [ 518.094744][ T5904] usb 2-1: SerialNumber: syz [ 518.107447][ T5904] usb 2-1: config 0 descriptor?? [ 518.119611][ T5904] iguanair 2-1:0.0: probe with driver iguanair failed with error -12 [ 518.324721][ T5904] usb 2-1: USB disconnect, device number 74 [ 518.861820][ T5904] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 518.921821][ T5842] usb 7-1: USB disconnect, device number 26 [ 519.012429][ T5904] usb 5-1: Using ep0 maxpacket: 32 [ 519.017589][ T24] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 519.030277][ T5904] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 519.039431][ T5904] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.051993][ T5904] usb 5-1: config 0 has no interface number 0 [ 519.125790][ T5904] usb 5-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 519.140509][ T5904] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 519.153801][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.167583][ T5904] usb 5-1: Product: syz [ 519.171814][ T5904] usb 5-1: Manufacturer: syz [ 519.176800][ T5904] usb 5-1: SerialNumber: syz [ 519.181705][ T24] usb 3-1: device descriptor read/64, error -71 [ 519.191134][ T5904] usb 5-1: config 0 descriptor?? [ 519.198633][ T5904] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 519.409661][ T5904] usb 5-1: qt2_setup_urbs - submit read urb failed -8 [ 519.418058][T16208] netlink: 'syz.6.3140': attribute type 1 has an invalid length. [ 519.426874][ T5904] quatech2 5-1:0.51: probe with driver quatech2 failed with error -8 [ 519.451760][ T24] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 519.581770][ T24] usb 3-1: device descriptor read/64, error -71 [ 519.621355][ T5904] usb 5-1: USB disconnect, device number 75 [ 519.672050][ T31] INFO: task syz.3.2213:12927 blocked for more than 143 seconds. [ 519.679821][ T31] Not tainted syzkaller #0 [ 519.684909][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 519.691818][ T24] usb usb3-port1: attempt power cycle [ 519.698951][ T31] task:syz.3.2213 state:D stack:28648 pid:12927 tgid:12921 ppid:5841 task_flags:0x400040 flags:0x00004004 [ 519.716641][ T31] Call Trace: [ 519.721260][ T31] [ 519.726648][ T31] __schedule+0x1190/0x5de0 [ 519.733384][ T31] ? __kasan_slab_alloc+0x89/0x90 [ 519.739734][ T31] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 519.751471][ T31] ? security_file_alloc+0x34/0x2b0 [ 519.756982][ T31] ? __mutex_trylock_common+0x20/0x250 [ 519.762499][ T5926] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 519.770282][ T31] ? __pfx___schedule+0x10/0x10 [ 519.777874][ T31] ? rcu_is_watching+0x12/0xc0 [ 519.785996][ T31] ? schedule+0x2d7/0x3a0 [ 519.791678][ T31] ? rcu_is_watching+0x12/0xc0 [ 519.798692][ T31] ? lock_release+0x201/0x2f0 [ 519.805636][ T31] ? bdev_open+0xa2/0xe40 [ 519.811842][ T31] schedule+0xe7/0x3a0 [ 519.818631][ T31] schedule_preempt_disabled+0x13/0x30 [ 519.824487][ T31] __mutex_lock+0x81b/0x1060 [ 519.829133][ T31] ? bdev_open+0xa2/0xe40 [ 519.833922][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 519.839008][ T31] ? __pfx_bd_prepare_to_claim+0x10/0x10 [ 519.844717][ T31] ? bdev_open+0xa2/0xe40 [ 519.849781][ T31] bdev_open+0xa2/0xe40 [ 519.854053][ T31] bdev_file_open_by_dev+0x182/0x210 [ 519.859378][ T31] swsusp_check+0x72/0x440 [ 519.863864][ T31] software_resume+0x6f/0x4e0 [ 519.868578][ T31] resume_store+0x247/0x460 [ 519.873168][ T31] ? __pfx_resume_store+0x10/0x10 [ 519.878229][ T31] ? _copy_from_iter+0x15d/0x16f0 [ 519.883319][ T31] ? rcu_is_watching+0x12/0xc0 [ 519.888120][ T31] ? rcu_is_watching+0x12/0xc0 [ 519.893315][ T31] ? sysfs_file_kobj+0xe4/0x290 [ 519.898290][ T31] ? rcu_is_watching+0x12/0xc0 [ 519.903110][ T31] ? __pfx_resume_store+0x10/0x10 [ 519.909209][ T31] kobj_attr_store+0x55/0x80 [ 519.913871][ T31] ? __pfx_kobj_attr_store+0x10/0x10 [ 519.919447][ T31] sysfs_kf_write+0xef/0x150 [ 519.924106][ T31] kernfs_fop_write_iter+0x351/0x510 [ 519.929512][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 519.929891][ T5926] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 519.936101][ T31] vfs_write+0x7d3/0x11d0 [ 519.942933][ T5926] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 519.942958][ T5926] usb 7-1: config 0 interface 0 has no altsetting 0 [ 519.944675][ T5926] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 519.964920][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 519.972862][ T5926] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 519.986930][ T5926] usb 7-1: Product: syz [ 519.986922][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 519.986949][ T31] ? __pfx_vfs_write+0x10/0x10 [ 519.991073][ T5926] usb 7-1: Manufacturer: syz [ 519.991087][ T5926] usb 7-1: SerialNumber: syz [ 519.992107][ T5926] usb 7-1: config 0 descriptor?? [ 519.997506][ T31] ksys_write+0x12a/0x250 [ 520.002069][ T5926] hub 7-1:0.0: bad descriptor, ignoring hub [ 520.006087][ T31] ? __pfx_ksys_write+0x10/0x10 [ 520.010097][ T5926] hub 7-1:0.0: probe with driver hub failed with error -5 [ 520.011486][ T5926] usb 7-1: selecting invalid altsetting 0 [ 520.016809][ T31] do_syscall_64+0xcd/0x4c0 [ 520.047983][ T24] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 520.047988][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.048016][ T31] RIP: 0033:0x7f534438ebe9 [ 520.066112][ T31] RSP: 002b:00007f5342189038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 520.074576][ T31] RAX: ffffffffffffffda RBX: 00007f53445b6270 RCX: 00007f534438ebe9 [ 520.082585][ T31] RDX: 0000000000000012 RSI: 0000200000000000 RDI: 0000000000000007 [ 520.084321][ T24] usb 3-1: device descriptor read/8, error -71 [ 520.090563][ T31] RBP: 00007f5344411e19 R08: 0000000000000000 R09: 0000000000000000 [ 520.090580][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 520.090591][ T31] R13: 00007f53445b6308 R14: 00007f53445b6270 R15: 00007ffd3e1bd4f8 [ 520.090610][ T31] [ 520.090653][ T31] INFO: lockdep is turned off. [ 520.128873][ T31] NMI backtrace for cpu 0 [ 520.128891][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 520.128912][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 520.128922][ T31] Call Trace: [ 520.128928][ T31] [ 520.128936][ T31] dump_stack_lvl+0x116/0x1f0 [ 520.128959][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 520.128981][ T31] ? watchdog+0xd17/0x1260 [ 520.128996][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 520.129015][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 520.129032][ T31] watchdog+0xf0e/0x1260 [ 520.129045][ T31] ? __pfx_watchdog+0x10/0x10 [ 520.129057][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 520.129069][ T31] ? __kthread_parkme+0x19e/0x250 [ 520.129085][ T31] ? __pfx_watchdog+0x10/0x10 [ 520.129097][ T31] kthread+0x3c2/0x780 [ 520.129109][ T31] ? __pfx_kthread+0x10/0x10 [ 520.129120][ T31] ? rcu_is_watching+0x12/0xc0 [ 520.129135][ T31] ? __pfx_kthread+0x10/0x10 [ 520.129146][ T31] ret_from_fork+0x5d7/0x6f0 [ 520.129156][ T31] ? __pfx_kthread+0x10/0x10 [ 520.129166][ T31] ret_from_fork_asm+0x1a/0x30 [ 520.129184][ T31] [ 520.129188][ T31] Sending NMI from CPU 0 to CPUs 1: [ 520.249033][ C1] NMI backtrace for cpu 1 [ 520.249048][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 520.249064][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 520.249072][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 520.249091][ C1] Code: 5c 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 72 16 00 fb f4 4c 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 520.249104][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2 [ 520.249115][ C1] RAX: 00000000023b050c RBX: 0000000000000001 RCX: ffffffff8b939c29 [ 520.249124][ C1] RDX: ffffed10170a6656 RSI: ffffffff8c162880 RDI: ffffffff81913321 [ 520.249133][ C1] RBP: ffffed1003c56488 R08: 0000000000000000 R09: ffffed10170a6655 [ 520.249141][ C1] R10: ffff8880b85332ab R11: 0000000000000001 R12: 0000000000000001 [ 520.249149][ C1] R13: ffff88801e2b2440 R14: ffffffff90ab4090 R15: 0000000000000000 [ 520.249158][ C1] FS: 0000000000000000(0000) GS:ffff8881247bc000(0000) knlGS:0000000000000000 [ 520.249172][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 520.249180][ C1] CR2: 000000110c29f2de CR3: 000000006cde3000 CR4: 00000000003526f0 [ 520.249189][ C1] Call Trace: [ 520.249193][ C1] [ 520.249198][ C1] default_idle+0x13/0x20 [ 520.249213][ C1] default_idle_call+0x6d/0xb0 [ 520.249227][ C1] do_idle+0x391/0x510 [ 520.249246][ C1] ? __pfx_do_idle+0x10/0x10 [ 520.249262][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 520.249278][ C1] cpu_startup_entry+0x4f/0x60 [ 520.249293][ C1] start_secondary+0x21d/0x2b0 [ 520.249312][ C1] ? __pfx_start_secondary+0x10/0x10 [ 520.249331][ C1] common_startup_64+0x13e/0x148 [ 520.249350][ C1] [ 520.481899][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 520.488765][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 520.497846][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 520.507874][ T31] Call Trace: [ 520.511125][ T31] [ 520.514034][ T31] dump_stack_lvl+0x3d/0x1f0 [ 520.518609][ T31] vpanic+0x6e8/0x7a0 [ 520.522579][ T31] ? __pfx_vpanic+0x10/0x10 [ 520.527065][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 520.532932][ T31] panic+0xca/0xd0 [ 520.536641][ T31] ? __pfx_panic+0x10/0x10 [ 520.541041][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 520.546389][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 520.552521][ T31] ? watchdog+0xd78/0x1260 [ 520.556909][ T31] ? watchdog+0xd6b/0x1260 [ 520.561305][ T31] watchdog+0xd89/0x1260 [ 520.565528][ T31] ? __pfx_watchdog+0x10/0x10 [ 520.570182][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 520.575361][ T31] ? __kthread_parkme+0x19e/0x250 [ 520.580360][ T31] ? __pfx_watchdog+0x10/0x10 [ 520.585019][ T31] kthread+0x3c2/0x780 [ 520.589059][ T31] ? __pfx_kthread+0x10/0x10 [ 520.593617][ T31] ? rcu_is_watching+0x12/0xc0 [ 520.598355][ T31] ? __pfx_kthread+0x10/0x10 [ 520.602915][ T31] ret_from_fork+0x5d7/0x6f0 [ 520.607475][ T31] ? __pfx_kthread+0x10/0x10 [ 520.612034][ T31] ret_from_fork_asm+0x1a/0x30 [ 520.616783][ T31] [ 520.619978][ T31] Kernel Offset: disabled [ 520.624278][ T31] Rebooting in 86400 seconds..