last executing test programs: 2m40.496387871s ago: executing program 0 (id=814): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8180, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r3, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {}, {0xd, 0x19, {0x8, 0x1ff, 0xfffffff3, 0x1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40018}, 0x20004000) getpgid(r0) mount$fuseblk(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f0000000240), 0x1000000, &(0x7f00000005c0)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x5}}, {@allow_other}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x4}}, {@allow_other}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x5}}, {@blksize={'blksize', 0x3d, 0x400}}], [{@dont_appraise}]}}) setresgid(0x0, 0x0, 0xffffffffffffffff) io_setup(0xb, &(0x7f00000003c0)=0x0) r5 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_submit(r4, 0x1, &(0x7f0000001d00)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r5, &(0x7f0000000340)='p', 0x300}]) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) r7 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89b0, &(0x7f0000000180)={'vlan1\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x80, 0x0, [0x55]}}) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r8 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r8, 0xb, 0x0, 0x0) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40186f40, &(0x7f0000000440)=0x10) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r8, 0xc, 0x0, 0x0) 2m38.912273261s ago: executing program 0 (id=820): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) r1 = socket(0xa18e8e61885e843, 0x80805, 0x4000001) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) r3 = socket$kcm(0x11, 0x3, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f00000003c0)={0x0, 0x5, 0x3}) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f00000007c0)={r4, "eb92238387a9c730bfb7671ddb70b7be"}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643ded128b61e3c5f4ee01a2e7bb8bd0eb6e225728bb21e07335abeb5db61e6ff947a465a8", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000080)={0x50, 0x0, r7, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40}}, 0x50) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r6, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="b800000024000000f9ffffffffffffff03000000dcff80dc8a685cb3000000000600000000000000020000000000d716a7285d4c0000883c0000090000080500000000000000050000000000000005000000000000000600000000000000030000000000000000007803000000000700000007000000faffffff00c0", @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="cd1300000800000000000000fffbffffffdfffff01040000000000000b00000009000000262b252a21eb285e2d40000000000000752645b1f89e1f10e9ef9c95885ae0a76d75242e0faa19213ae096e78034d894fbf9fb4e6d3b59"], 0x0, 0x0, 0x0}) getdents64(r10, &(0x7f0000000100)=""/134, 0x86) socket$netlink(0x10, 0x3, 0x9) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e1e, @broadcast}, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1f7, 0x0, 0x0, 0x0, 0xfff9, 0x0, 0x4, 0x7, 0x7ff}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r11], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) 2m36.782402668s ago: executing program 0 (id=823): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000240)={0x18, r1, 0x800000000000008, 0xfffffffffffffffc}) 2m36.653985126s ago: executing program 0 (id=824): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setresgid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x3c}}, 0x0) 2m36.604455056s ago: executing program 0 (id=825): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180200009f42f28d00000000148f000085000000410000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') mkdirat(r1, &(0x7f0000000140)='./file1\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) prctl$PR_SCHED_CORE(0x4c, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x40, 0x1, 0xc1e, 0x3, {{0x17, 0x4, 0x2, 0x3, 0x5c, 0x67, 0x0, 0x4, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @multicast2, {[@noop, @cipso={0x86, 0x16, 0x3, [{0x2, 0xc, "81cbee03ccf8d208cc1e"}, {0x7, 0x4, "52de"}]}, @rr={0x7, 0x1b, 0xb7, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @rand_addr=0x64010101, @loopback, @empty, @rand_addr=0x64010100]}, @ra={0x94, 0x4}, @generic={0x94, 0xd, "8bd2386395329adbfa127b"}, @ra={0x94, 0x4}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000100)=@raw=[@map_fd={0x18, 0x5, 0x1, 0x0, r1}, @jmp={0x5, 0x0, 0x5, 0x8, 0x6, 0xfffffffffffffff4, 0xffffffffffffffff}], &(0x7f0000000180)='syzkaller\x00', 0xffffffff, 0x1d, &(0x7f00000001c0)=""/29, 0x41100, 0x52, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x68}, 0x94) 2m36.548783755s ago: executing program 0 (id=826): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffc, 0x8000, 0xffffffff}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f000000e2c0)={0x0, 0x0, &(0x7f000000e280)={&(0x7f0000000340)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x401, 0x4b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x50) sync() 2m21.383034443s ago: executing program 32 (id=826): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffc, 0x8000, 0xffffffff}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f000000e2c0)={0x0, 0x0, &(0x7f000000e280)={&(0x7f0000000340)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x401, 0x4b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x50) sync() 9.494173276s ago: executing program 5 (id=1428): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c643c, &(0x7f0000000300)) 9.405021294s ago: executing program 5 (id=1431): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) socket(0x200000000000011, 0x2, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x20200, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd26, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x17}, @in6=@mcast2, 0xffff, 0x0, 0x4e22, 0xfffd, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x3c}, @in6=@private0, {0x5a, 0xb403, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x9, 0x200000, 0x7, 0x1}, {0x40000, 0x0, 0x80}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f00000001c0)={0x1, 0x7e, 0x22, 0x0, 0x407}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0xe8902, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x800, 0x7ff, &(0x7f00000002c0)) r4 = syz_open_dev$loop(&(0x7f0000000540), 0x200000b1, 0x8a681) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001100)={r0, 0x0, {0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f045158d97405000000000000040000000100", [0xfffffffffeff7ffc]}}) 9.095734847s ago: executing program 2 (id=1432): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x129600, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455cb, 0x400000009) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x6, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x8ad00, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) ioctl$DMA_BUF_SET_NAME_A(r5, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000140)=0x2) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=""/4092, 0xffc}, {&(0x7f0000001c40)=""/253, 0xfd}, {&(0x7f0000001840)=""/164, 0xa4}, {&(0x7f0000001700)=""/166, 0xa6}, {&(0x7f0000001a40)=""/65, 0x41}], 0x5}, 0x5}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000003280)=[{&(0x7f0000001b80)=""/130, 0x82}, {&(0x7f0000003340)=""/4094, 0xffe}, {&(0x7f0000000040)=""/165, 0xa5}, {&(0x7f0000001600)=""/215, 0xd7}, {&(0x7f0000001d40)=""/273, 0x111}, {&(0x7f0000001500)=""/245, 0xf5}, {&(0x7f00000013c0)=""/246, 0xf6}], 0x7}, 0x81}], 0x4, 0x40012032, 0x0) 9.033550829s ago: executing program 2 (id=1433): openat$kvm(0xffffffffffffff9c, 0x0, 0x8180, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r4, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {}, {0xd, 0x19, {0x8, 0x1ff, 0xfffffff3, 0x1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40018}, 0x20004000) getpgid(r0) mount$fuseblk(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f0000000240), 0x1000000, &(0x7f00000005c0)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x5}}, {@allow_other}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x4}}, {@allow_other}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x5}}, {@blksize={'blksize', 0x3d, 0x400}}], [{@dont_appraise}]}}) setresgid(0x0, 0x0, 0xffffffffffffffff) io_setup(0xb, &(0x7f00000003c0)=0x0) r6 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_submit(r5, 0x1, &(0x7f0000001d00)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r6, &(0x7f0000000340)='p', 0x300}]) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) r8 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89b0, &(0x7f0000000180)={'vlan1\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x80, 0x0, [0x55]}}) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r9 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r9, 0xb, 0x0, 0x0) r10 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x40186f40, &(0x7f0000000440)=0x10) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r9, 0xc, 0x0, 0x0) 8.998879648s ago: executing program 5 (id=1434): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b40)=ANY=[@ANYBLOB="1201000000000010580413500000000000010902240001000050000904000081030000000921faff000122a00009058103"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x80000001}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x8000) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="4023a0"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3c, 0x6c, 0x8, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x2, 0x0, @broadcast=0x1000000, {0x14, 0x4, 0x0, 0x29, 0x0, 0x64, 0x0, 0x1, 0x11, 0x6, @local, @multicast1, {[@cipso={0x86, 0x6, 0x1}, @timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@multicast1, 0x10000}, {@empty, 0x400000}, {@multicast2, 0x200}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x800}, {@multicast2}, {@local}]}]}}}}}}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r2, 0x18000000000002a0, 0x10, 0x0, &(0x7f00000003c0)="0d0d1b46dd44fecd00b1afee3fd1537c", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_open_dev$evdev(&(0x7f0000000440), 0x4, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000040)=""/185) 8.978175763s ago: executing program 4 (id=1435): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$MRT_ASSERT(r1, 0x0, 0xcf, &(0x7f0000000180), 0x4) connect$can_bcm(r2, &(0x7f0000000000), 0x10) r3 = socket$can_j1939(0x1d, 0x2, 0x7) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x40000) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x1d, r5, 0x0, 0x4000}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4004851}, 0x4004001) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) sched_setscheduler(0xffffffffffffffff, 0x2, &(0x7f0000000140)=0x6) 8.81583785s ago: executing program 4 (id=1438): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000b5403340861a22753635010203010902120001000000000904"], 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000a40)="2e9b3d0007e03dd651930121c575963f88", 0x11}, {&(0x7f0000000140)="fb49b8a4b02d81", 0x7}], 0x2) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000f40)=ANY=[@ANYBLOB="401d02"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000000606030000000000000000000a000000050001"], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="050f04"], 0x7) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="02000000040000000400198d00000800000000000000b569c26ad644ca669c97e4fe7a446d79", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x10, r6}, 0x50) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_XSAVE2(r7, 0x9000aecf, &(0x7f0000ffb000/0x4000)=nil) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000000)=ANY=[@ANYBLOB="027a9077d3020100"], 0x8) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="03c800f18bfa923b7e7eb3c40553459d71143526a4982677867502badb0f5dc628e1e3d5cb48692affb37d3f6cb49e9b327d4d2278232d3fb8ffda48f3f1bf9ff7be8b64734044c42e62920ea4c2fd53b5660f4d453512d532297203d806c914dbac4deaf60aeaee765887b2063886e7650e933a3bf3a04f707c99536ccbe5b387332d819dfc04435d16a5a0f3f10e41d7577c17a46027472b4009a6dd92b873450f842a8e6ff6e71f3096dac2726611b6db5991dc03010de82fac03febcc92ce0f50b7a8d8eb938e40574f88f5d062e50574bd287573dbe615cbbec983880c5fe67f8018654732adfd5ffcc25c5660d7fd05a2c85"], 0xf5) recvmmsg(r5, &(0x7f0000002fc0)=[{{&(0x7f0000000180)=@sco={0x1f, @none}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000200)=""/27, 0x1b}, {&(0x7f0000000240)=""/117, 0x75}], 0x2, &(0x7f0000000580)=""/23, 0x17}, 0x80000000}, {{&(0x7f00000005c0)=@un=@abs, 0x80, &(0x7f0000000700)=[{&(0x7f0000000640)=""/164, 0xa4}], 0x1, &(0x7f0000000440)=""/194, 0xc2}, 0x8}, {{&(0x7f0000000840)=@phonet, 0x80, &(0x7f0000004200)=[{&(0x7f00000008c0)=""/41, 0x29}, {&(0x7f0000000900)=""/200, 0xc8}, {&(0x7f0000000a00)=""/112, 0x70}, {&(0x7f0000000a80)=""/147, 0x93}, {&(0x7f0000000b40)=""/67, 0x43}, {&(0x7f0000000bc0)=""/18, 0x12}, {&(0x7f0000000c00)=""/109, 0x6d}, {&(0x7f0000003200)=""/4085, 0xff5}], 0x8, &(0x7f0000000d00)=""/159, 0x9f}, 0xfff}, {{&(0x7f0000000dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/191, 0xbf}}, {{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001080)=""/215, 0xd7}, {&(0x7f0000000300)=""/35, 0x23}, {&(0x7f00000011c0)=""/123, 0x7b}], 0x3, &(0x7f0000001280)=""/156, 0x9c}, 0x7f}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001340)=""/40, 0x28}, {&(0x7f0000001380)=""/240, 0xf0}, {&(0x7f0000001480)=""/111, 0x6f}, {&(0x7f0000001500)=""/221, 0xdd}, {&(0x7f0000001600)=""/58, 0x3a}, {&(0x7f0000001640)=""/210, 0xd2}], 0x6, &(0x7f00000017c0)=""/171, 0xab}, 0xf}, {{&(0x7f0000001880)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000002bc0), 0x0, &(0x7f0000002c40)=""/21, 0x15}, 0xc30e}, {{&(0x7f0000002c80)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000002d00)=""/83, 0x53}, {&(0x7f0000000740)=""/240, 0xf0}], 0x2, &(0x7f0000002ec0)=""/211, 0xd3}, 0xd}], 0x8, 0x40000020, &(0x7f00000031c0)={0x77359400}) 7.571535117s ago: executing program 2 (id=1441): syz_emit_ethernet(0x66, &(0x7f00000008c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6000000800303afffe80000000000000000000000000003bff0200000000000000000000000000018700e68100000000fe8000000000000000000000000000aaff0200000000000000000000000000010101000400000000"], 0x0) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mlockall(0x7) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)=',8Zz', 0x4) accept4(r0, 0x0, 0x0, 0x800) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x2010, r0, 0xb1027000) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x6, 0x8, {0x0}, {}, 0x400, 0x8}) syz_extract_tcp_res(&(0x7f0000000080), 0x6, 0xffffffff) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x9) 7.188103743s ago: executing program 2 (id=1442): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0xf}}, './file0\x00'}) connect$rxrpc(r0, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6a}}, 0x24) r1 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="400104"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.053800691s ago: executing program 3 (id=1445): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x848000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000002c0)={{0x9, 0xb}, {0x8, 0x3}, 0xe, 0x1, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0xfffffffc}, 0x10}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x800, 0x101) mmap$snddsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x20010, r4, 0x3002) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c", 0x62}], 0x3}], 0x1, 0x40800) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYRESDEC=r4, @ANYRES16=r2, @ANYRESHEX=r2, @ANYRES32=r3, @ANYBLOB="d502000f0174ea20c5b1e6a3d649b7914f7e1f4a17d9b4a96f434ef51d4b42bf08660dd3263f91446e82398b29c43fc400a307a0c7dfac6f8429daed58241d4faf055e8a34a30ddf218830f119"], 0x6f4}}, 0x0) 5.387680298s ago: executing program 3 (id=1446): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r0, &(0x7f00000022c0)=""/4089, 0xff9, 0x10002, 0x0, 0x0) sendto(r0, &(0x7f00000007c0)='[', 0x1, 0x8001, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0xca352c92cb699c71, 0xffffffffffffffff, 0xc0a55000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@wr_drn={0x68, 0x20, {0x7, 0x2000}}], 0x20}) ioctl$KVM_SET_GUEST_DEBUG_x86(r5, 0x4048ae9b, &(0x7f0000000140)={0x3}) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x11, r5, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000880)={0x2020}, 0x2020) ioctl$DVB_DVR_DMX_EXPBUF(r6, 0xc00c6f3e, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)=')\x00', 0x2}], 0x1) 5.277247614s ago: executing program 1 (id=1447): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000ffffff80e500020000000000c500fcff000000"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e402010902"], 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000080)=0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4008014}, 0x40814) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) socket$nl_netfilter(0x10, 0x3, 0xc) 4.859937688s ago: executing program 3 (id=1448): openat$mice(0xffffff9c, &(0x7f00000013c0), 0x305000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = socket$inet(0x2, 0x3, 0x2) sendto$inet(r2, &(0x7f0000000600), 0x0, 0x810, &(0x7f00000021c0)={0x2, 0x4e24, @multicast1}, 0x10) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], 0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20000080) socket(0x10, 0x3, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000346000/0x2000)=nil, 0x2000, &(0x7f0000000240)='syz') request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', 0x0) socket$alg(0x26, 0x5, 0x0) accept4(r5, 0x0, 0x0, 0x80000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x14, 0x32, 0x6dd711a25f4cb68b}, 0x14}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) 4.339532165s ago: executing program 5 (id=1449): pwritev2(0xffffffffffffffff, &(0x7f0000002880)=[{&(0x7f0000000680)="68041e34312027c291cd902880a64a991697faf2673322080b619bba57f4773b1a84e7db2f63c19dec3134c43313d0cfdb", 0x31}], 0x1, 0x0, 0x5, 0x0) io_setup(0xc3d, &(0x7f0000000780)=0x0) r1 = eventfd2(0x5, 0x80001) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') preadv(r2, &(0x7f0000000600)=[{&(0x7f0000000280)=""/215, 0xd7}], 0x1, 0x1006c, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x140f, 0x200, 0x70bd28, 0x25dfdbff}, 0x10}}, 0x4020080) read$msr(r5, &(0x7f0000000040)=""/232, 0xe8) r6 = socket$kcm(0x29, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007a40), r7) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000007d00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r7, &(0x7f0000007e00)={0x0, 0x0, &(0x7f0000007dc0)={&(0x7f0000007d40)={0x1c, r8, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xfdb181a3cee659e2}, 0x880) r10 = eventfd(0x9) io_submit(r0, 0x4, &(0x7f0000001a00)=[&(0x7f0000000800)={0x0, 0x0, 0x0, 0x7, 0x9, 0xffffffffffffffff, &(0x7f00000007c0)="50845ccb711285f35a767f4a4ecd3576de9c1cf3f612c8bd0e9abe83664d1e26713cb4da7f3e0d702178f6", 0x2b, 0x200, 0x0, 0x1, r1}, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x5, 0x8, r2, &(0x7f0000000840)="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", 0x1000, 0x400, 0x0, 0x1}, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x6, 0xe5, r4, &(0x7f0000001880)="547813c857bb2efb65a028337bdc2786e5ee6b77173ab5549a020287ba5af9f80f7e4fdb1d8d07218d6dfa07f902c333c189d75eaaaed07be8f0a75df866480b37c0740bfa2b19fae7fb2518d5453d4b4275ffae8e94c768850443b3e3c62bc5cc9e0b3969fe97b67d005a25c46b62a248ba8d187eade9989b8cb9e0b3f612e2bc671eaf187d68a4c8b34183da58617e06f6472efc25af3f3d34e7880356e0bf9ade2bfbe013286068dfe2dc260eabc00c6322bc29f5a45976497fb28d", 0xbd, 0x77785434, 0x0, 0x3, r5}, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x1, 0x341c, r7, &(0x7f0000001980)="537f7541cdd05c9918d31e3dc251b04d3c112f6db1e894b71e6a9438b0a26cc0329aa917592d3af8fe34c12d894417", 0x2f, 0x3, 0x0, 0x2, r10}]) r11 = syz_usb_connect(0x5, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d1000905070000000000000905"], 0x0) syz_usb_control_io$printer(r11, 0x0, 0x0) openat$mice(0xffffff9c, &(0x7f0000000040), 0x1af281) syz_usb_connect$midi(0x5, 0x3e, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x499, 0x5005, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c, 0x1, 0x1, 0x5, 0x20, 0xc0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x1, [@midi_in_jack={0x6, 0x24, 0x2, 0x3, 0xff, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x8001, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x7, 0x6}, @ms_header={0x7, 0x24, 0x1, 0x8001, 0x7}]}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x6e, 0x4, 0x3, 0x10}, 0xca, &(0x7f00000000c0)={0x5, 0xf, 0xca, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x6, 0x7f, 0x8000}, @generic={0xbb, 0x10, 0x2, "ef75cc7b7c6ea0d610abec96ad953f7459ac8d2dd5d15058d9626277daeb52e92e02db283def1739fd890608acbf780287b6de1ae2791c80d25158ef937dc956efc23da543f6171feaf1170414e46c5b9eb9b5d052dd6eebc3edc089dd3f114a9c2c007d0c07bbfff93869689a648c6429fa692c3fe3ebf16460175132079831fd64e34459fb17c9fd011b797292aeb0f8b8df2ca685627cc15a112d09282ad5818f8544427cee2b5d06b2803e843a7e5f53bebab2c00cc0"}]}, 0xa, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1409}}, {0xa2, &(0x7f0000000200)=@string={0xa2, 0x3, "adc56212465a9c83785c1d6673155568bbbfb32e4bc0290a927ace508d0149659722be42b2c9b46d20569efa5a89c374895642e2807aae4734395fa1dfb531f421bc2df9daeeaf4712a8412d04a13de33214283b1b7ea018941a59f7a4174199b1908f38850ffcd41d2dc6b33cf4b16f0961dc56d84b174c735e75aaecf809c07161c200a8431f3ec97e177a305be593d01083776bcf443365819d702f64770f"}}, {0xf1, &(0x7f00000002c0)=@string={0xf1, 0x3, "04ac450e738d61c44fdd37ee2b22dd64c949ee156d9bb084f14c89d2fad0cb9780abe250ee6d84497e6d56c21504e086412430826dce890acdf747e2e3f627835ee85d01c39a59548e4792f9817621792c28787b7fa42ce2c0321a54fea657089a55e8c91a838f00d2acadc3d9628b212a4da07f5774a9e97df4a56a6cb84b1339cc128b4e24db050641151288c67bd253d06c1129edc6100e92515dbfda5afdafb7e3fc98f4c41ac0ece4c817efe5d3893616753a162154b1345272d0ff661fdf9eaca377a1337f24fd0abcfdc223ec1c743f0042b50b5c6b6caae25edc3e9035299f3d6aed6070f800a6b7b13594"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x812}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x418}}, {0xad, &(0x7f0000000440)=@string={0xad, 0x3, "5865f2c8a4f6f71dbd914ce0a3d38da6af7b8631605dbc649f771a26066420666ad1f6ae8d702366630c2f02ef7aa21cef703f5f1a445d468624b04cd934eed29d463914efc96c42c09d492551ceb91543e8c59d130d3785550b5399b580705ae294c2dc08e3ce264cec71fe3fef0ab71feb88f0624b80f4e41705a9dba3608c3ca3c0322d076d61c8aa9b2bcce97aa62467d53ab624a66b8a4a849200b3248284d40ff14ca74c1acfc944"}}, {0x3e, &(0x7f0000000500)=@string={0x3e, 0x3, "fe42629f5ad4ef392d489aaa2b293540700daf7292a18a36aa1af01226fe4b2648ea302672c72e34c98a942d7a3f74eca18995969f3d0f941fdff500"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x413}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x429}}, {0xb4, &(0x7f00000005c0)=@string={0xb4, 0x3, "6fb3d6bb9eb2afa82ee008762aac0212c370f90d229b9a0e5e5643dd6fdc599ca28499b3f71499b0150e817b035c3d6b7eb6445423385d1b6f237d90c5f023e53b2e39bd779475b82b1af4c1d050a0bd16d0acbab260f8d1bad0f0c5d8951bbec188f6392a74d287638cf97fbc92e439a3d1a93078b868bf73d5bf6bce0b878b63023c775ee695ff613ad91badbb29a1b16d262d00b7123a59108c7e21f46cd98e826999d50f7934b31c430509212d50aafd"}}]}) 4.155052546s ago: executing program 4 (id=1450): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f0000000040)="94", 0x1}, {0x0}], 0x2) ptrace$setopts(0xffffffffffffffff, 0xffffffffffffffff, 0xd, 0x20) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x3, 0x0, 0xf, 0x80000006, 0x3}, 0x0, 0x0) 3.955736387s ago: executing program 2 (id=1451): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x8d80, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, 0x0) syz_open_dev$admmidi(&(0x7f0000000240), 0x200, 0x200) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000010340)='pkcs7_test\x00', &(0x7f0000010300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) socket$netlink(0x10, 0x3, 0x0) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) readv(r6, &(0x7f0000000880)=[{&(0x7f0000000200)=""/111, 0x6f}], 0x1) sendmsg$NFT_BATCH(r0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r8, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) 3.859406162s ago: executing program 3 (id=1452): r0 = socket(0x18, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100000020008b}, 0x0) r1 = gettid() ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x22) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) clock_gettime(0x0, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x2a, 0xf, 0xb3, 0x20, 0x830, 0x80, 0xaee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x5, 0x20, 0xf2, "", [{{0x9, 0x4, 0x2c, 0x61, 0x0, 0x2a, 0xc6, 0x56, 0xff}}]}}]}}, 0x0) kcmp(r1, r1, 0x2, r0, r2) listen(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x100, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000000100000000000000000000850000004100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd4, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x62d81) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r6, 0xc08c5336, &(0x7f0000000000)={0x4, 0xffffffff, 0x0, 'queue0\x00', 0xd1b}) syz_emit_ethernet(0x4e, &(0x7f0000000300)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @void, {@ipv6={0x86dd, @tipc_packet={0xc, 0x6, "a32e48", 0x18, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x38}, @ipv4={'\x00', '\xff\xff', @empty}, {[], @payload_conn={{{0x18, 0x0, 0x0, 0x1, 0x1, 0x6, 0x3, 0x2, 0x8, 0x0, 0x0, 0x9, 0x2, 0x0, 0x7ff, 0xd, 0x5, 0x4e24, 0x4e24}}}}}}}}, 0x0) 3.505652406s ago: executing program 1 (id=1453): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0xf0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b1300000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000400a800010008001f"], 0x50}, 0x1, 0x0, 0x0, 0x4004004}, 0x8080) 3.40824228s ago: executing program 1 (id=1454): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff0000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f00000001c0)=0x800) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000010027bd7004fbdbdf2500000000", @ANYRES32=r3, @ANYBLOB="202a06006b80010024001280110001006272696467655f736c617665000000000c000580050028"], 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x8000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="40000000100003052abd70000007000000000000", @ANYRES32=0x0, @ANYBLOB="00000000163800001800128008000100677265000c00028008000100", @ANYRES32, @ANYBLOB=' @\n\x00', @ANYRES32, @ANYBLOB], 0x40}}, 0x440b0) 3.34004376s ago: executing program 1 (id=1455): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r4, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {}, {0xd, 0x19, {0x8, 0x1ff, 0xfffffff3, 0x1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40018}, 0x20004000) getpgid(r0) mount$fuseblk(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f0000000240), 0x1000000, &(0x7f00000005c0)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x5}}, {@allow_other}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x4}}, {@allow_other}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x5}}, {@blksize={'blksize', 0x3d, 0x400}}], [{@dont_appraise}]}}) setresgid(0x0, 0x0, 0xffffffffffffffff) io_setup(0xb, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000001d00)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000340)='p', 0x300}]) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) r7 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89b0, &(0x7f0000000180)={'vlan1\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x80, 0x0, [0x55]}}) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r8 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r8, 0xb, 0x0, 0x0) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40186f40, &(0x7f0000000440)=0x10) 3.221379067s ago: executing program 4 (id=1456): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc00c9207, &(0x7f0000000040)={&(0x7f0000000040), 0x0, 0x5}) syz_open_dev$sg(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80e40, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0xa) ioctl$PTP_SYS_OFFSET_PRECISE(r3, 0xc0403d08, &(0x7f0000000040)) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r4, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$UI_DEV_DESTROY(r4, 0x5502) socket$inet_smc(0x2b, 0x1, 0x0) r5 = fsopen(&(0x7f0000000080)='qnx6\x00', 0x1) setreuid(0x0, 0xee01) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 2.115219915s ago: executing program 3 (id=1457): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) socket(0x200000000000011, 0x2, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x20200, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd26, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x17}, @in6=@mcast2, 0xffff, 0x0, 0x4e22, 0xfffd, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x3c}, @in6=@private0, {0x5a, 0xb403, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x9, 0x200000, 0x7, 0x1}, {0x40000, 0x0, 0x80}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f00000001c0)={0x1, 0x7e, 0x22, 0x0, 0x407}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000500)=@generic={0x0}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x800, 0x7ff, &(0x7f00000002c0)) r4 = syz_open_dev$loop(&(0x7f0000000540), 0x200000b1, 0x8a681) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001100)={r0, 0x0, {0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f045158d97405000000000000040000000100", [0xfffffffffeff7ffc]}}) 1.831615796s ago: executing program 1 (id=1458): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) socket(0x200000000000011, 0x2, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x20200, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd26, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x17}, @in6=@mcast2, 0xffff, 0x0, 0x4e22, 0xfffd, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x3c}, @in6=@private0, {0x5a, 0xb403, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x9, 0x200000, 0x7, 0x1}, {0x40000, 0x0, 0x80}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f00000001c0)={0x1, 0x7e, 0x22, 0x0, 0x407}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0xe8902, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x800, 0x7ff, &(0x7f00000002c0)) r4 = syz_open_dev$loop(&(0x7f0000000540), 0x200000b1, 0x8a681) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001100)={r0, 0x0, {0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f045158d97405000000000000040000000100", [0xfffffffffeff7ffc]}}) 1.294180966s ago: executing program 5 (id=1459): syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e0c012f2008"], 0xf) socket(0x8000000010, 0x2, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0xfffffffffffefffb, 0x7, 0x4000000000000000, 0xfffffffffffffffd, 0x77, 0xfffffffffffffffc, 0x0, 0x8000000, 0x8, 0x248e, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x81, 0x6, 0x5, 0x7ff, 0xf439}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4204, r3, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r4) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) r6 = syz_io_uring_setup(0x227, &(0x7f0000000040)={0x0, 0xe7a0, 0x400, 0x2, 0x389}, &(0x7f00000000c0), &(0x7f0000000000), &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}}) 1.292939264s ago: executing program 2 (id=1460): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20004080) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x41, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0/file0'}, 0x3a}], [], 0x2f}) geteuid() r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r2, 0x0, 0x0) 396.861846ms ago: executing program 4 (id=1461): syz_emit_ethernet(0x33, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x11, 0x0, @opaque="000000000600000000"}}}}}, 0x0) 281.160741ms ago: executing program 3 (id=1462): syz_usb_connect$midi(0x5, 0x40, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x6) prctl$PR_SET_SECUREBITS(0x1c, 0x4) setresuid(0x0, 0xee00, 0xee01) r2 = creat(0x0, 0x70) fcntl$setlease(r2, 0x400, 0x1) acct(&(0x7f0000000040)='./file0\x00') fcntl$setlease(r2, 0x400, 0x2) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x4e24, @private=0xa010105}, {0x1, @broadcast}, 0xc, {0x2, 0x4e21, @broadcast}, 'bond_slave_0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000025300)=""/102392, 0x18ff8) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x40) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f0000000200)=""/115, 0x73}], 0x1, 0xfffffffe, 0x7fff) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x891b, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}}) 269.97458ms ago: executing program 1 (id=1463): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) (async) r0 = getpid() r1 = socket$inet(0x2, 0x80001, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x7, 0x0, 0x3}, 0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) (async) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000180)=0x9, 0x4) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) getpid() (async) recvmmsg(r3, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0xb}], 0x1, 0x2, 0x0) (async) r4 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x3, 0x8, 0x6, 0xc07}) mount(&(0x7f0000000080)=@md0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='virtiofs\x00', 0x5, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={r7, 0xffffffffffffffff}, 0x1) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x1d, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfffffffb}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1317}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) (async) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mq_getsetattr(r4, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) mq_timedreceive(r4, &(0x7f0000000100)=""/90, 0x5a, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x5, 0x0) 61.716336ms ago: executing program 5 (id=1464): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000ffffff80e500020000000000c500fcff000000"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e402010902"], 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000080)=0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4008014}, 0x40814) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) socket$nl_netfilter(0x10, 0x3, 0xc) 0s ago: executing program 4 (id=1465): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff0000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f00000001c0)=0x800) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000010027bd7004fbdbdf2500000000", @ANYRES32=r3, @ANYBLOB="202a06006b80010024001280110001006272696467655f736c617665000000000c000580050028"], 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x8000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="40000000100003052abd70000007000000000000", @ANYRES32=0x0, @ANYBLOB="00000000163800001800128008000100677265000c00028008000100", @ANYRES32, @ANYBLOB=' @\n\x00', @ANYRES32, @ANYBLOB], 0x40}}, 0x440b0) kernel console output (not intermixed with test programs): ng to 7 [ 402.837345][T10029] netlink: 'syz.3.1113': attribute type 10 has an invalid length. [ 402.881620][ T5737] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 403.077527][T10029] team0: Port device dummy0 added [ 403.090415][ T5737] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.112678][ T5737] usb 3-1: Product: syz [ 403.124568][ T5737] usb 3-1: Manufacturer: syz [ 403.146791][ T5737] usb 3-1: SerialNumber: syz [ 403.153603][ T5737] usb 3-1: config 0 descriptor?? [ 403.188823][ T5737] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 403.240936][ T5737] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 403.259487][T10041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.300126][T10031] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 403.306740][T10031] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 403.314333][T10031] vhci_hcd vhci_hcd.0: Device attached [ 403.330128][T10041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.355527][T10042] vhci_hcd: connection closed [ 403.355696][ T36] vhci_hcd vhci_hcd.4: stop threads [ 403.382959][ T36] vhci_hcd vhci_hcd.4: release socket [ 403.398971][ T36] vhci_hcd vhci_hcd.4: disconnect device [ 403.626648][T10045] lo speed is unknown, defaulting to 1000 [ 403.632888][T10045] lo speed is unknown, defaulting to 1000 [ 404.870899][ T5737] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 405.070145][ T30] audit: type=1400 audit(1781664099.584:880): avc: denied { ioctl } for pid=10053 comm="syz.5.1118" path="socket:[35959]" dev="sockfs" ino=35959 ioctlcmd=0x89e9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 405.118713][T10058] vlan2: entered promiscuous mode [ 405.123787][T10058] bridge0: entered promiscuous mode [ 405.263408][T10060] FAULT_INJECTION: forcing a failure. [ 405.263408][T10060] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 405.276541][T10060] CPU: 1 UID: 0 PID: 10060 Comm: syz.4.1120 Tainted: G L syzkaller #0 PREEMPT(full) [ 405.276571][T10060] Tainted: [L]=SOFTLOCKUP [ 405.276579][T10060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 405.276590][T10060] Call Trace: [ 405.276596][T10060] [ 405.276602][T10060] dump_stack_lvl+0x100/0x190 [ 405.276623][T10060] should_fail_ex.cold+0x5/0xa [ 405.276646][T10060] _copy_from_user+0x2e/0xd0 [ 405.276667][T10060] kstrtouint_from_user+0xd6/0x1d0 [ 405.276690][T10060] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 405.276714][T10060] ? cachefiles_lookup_cookie+0x780/0xcf0 [ 405.276736][T10060] ? rcu_is_watching+0x12/0xc0 [ 405.276757][T10060] proc_fail_nth_write+0x83/0x220 [ 405.276774][T10060] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 405.276793][T10060] ? __pfx___might_resched+0x10/0x10 [ 405.276822][T10060] vfs_write+0x2aa/0x1050 [ 405.276846][T10060] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 405.276863][T10060] ? __pfx_vfs_write+0x10/0x10 [ 405.276886][T10060] ? rcu_is_watching+0x12/0xc0 [ 405.276907][T10060] ? __fget_files+0x21f/0x3d0 [ 405.276928][T10060] ksys_write+0x12a/0x250 [ 405.276954][T10060] ? __pfx_ksys_write+0x10/0x10 [ 405.276978][T10060] ? rcu_is_watching+0x12/0xc0 [ 405.276999][T10060] do_syscall_64+0x115/0x870 [ 405.277018][T10060] ? clear_bhb_loop+0x40/0x90 [ 405.277036][T10060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.277053][T10060] RIP: 0033:0x7f0a9315d68e [ 405.277067][T10060] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 405.277086][T10060] RSP: 002b:00007f0a93f81fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 405.277103][T10060] RAX: ffffffffffffffda RBX: 00007f0a93f826c0 RCX: 00007f0a9315d68e [ 405.277115][T10060] RDX: 0000000000000001 RSI: 00007f0a93f820a0 RDI: 0000000000000004 [ 405.277127][T10060] RBP: 00007f0a93f82090 R08: 0000000000000000 R09: 0000000000000000 [ 405.277143][T10060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.277153][T10060] R13: 00007f0a93416038 R14: 00007f0a93415fa0 R15: 00007ffe835b83a8 [ 405.277171][T10060] [ 405.531165][T10063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.539770][T10063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.551515][ T5890] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 405.732246][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.743372][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.753271][ T5890] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 405.766272][ T5890] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 405.775634][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.785295][ T5890] usb 2-1: config 0 descriptor?? [ 405.964397][ T5737] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 405.972815][ T5737] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 405.982049][ T5737] em28xx 3-1:0.0: No AC97 audio processor [ 406.082154][ T5737] usb 3-1: USB disconnect, device number 67 [ 406.096984][ T5737] em28xx 3-1:0.0: Disconnecting em28xx [ 406.113906][ T5737] em28xx 3-1:0.0: Freeing device [ 406.282784][ T5890] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 406.446762][ T5737] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 406.526856][ T30] audit: type=1804 audit(1781664100.950:881): pid=10058 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1119" name="/newroot/269/file0" dev="tmpfs" ino=1453 res=1 errno=0 [ 406.551735][T10058] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: 0, delta: -1 [ 406.569092][T10058] ref_ctr decrement failed for inode: 0x5ad offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807b86bfc0 [ 406.591216][T10058] uprobe: syz.1.1119:10058 failed to unregister, leaking uprobe [ 406.602653][ T30] audit: type=1400 audit(1781664101.025:882): avc: denied { setopt } for pid=10057 comm="syz.1.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 406.609787][ T5737] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 406.625610][ T804] usb 2-1: USB disconnect, device number 57 [ 406.633390][ T5737] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.646097][ T5737] usb 3-1: Product: syz [ 406.651266][ T5737] usb 3-1: Manufacturer: syz [ 406.655880][ T5737] usb 3-1: SerialNumber: syz [ 406.713926][ T29] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 406.885404][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 407.204956][ T5737] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 68 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 407.209687][ T29] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 407.229215][ T29] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 407.241847][ T29] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 407.245940][ T5737] usb 3-1: USB disconnect, device number 68 [ 407.251918][ T29] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 407.336742][ T29] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 407.350272][ T29] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 407.359997][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.360995][ T5737] usblp0: removed [ 407.603559][ T29] usb 5-1: usb_control_msg returned -32 [ 407.614627][ T29] usbtmc 5-1:16.0: can't read capabilities [ 407.828355][T10092] tipc: Enabling of bearer rejected, failed to enable media [ 408.004112][ T30] audit: type=1400 audit(1781664102.326:883): avc: denied { nlmsg_read } for pid=10107 comm="syz.2.1133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 408.183217][T10113] vlan3: entered allmulticast mode [ 408.188417][T10113] bond0: entered allmulticast mode [ 408.193606][T10113] bond_slave_0: entered allmulticast mode [ 408.199426][T10113] bond_slave_1: entered allmulticast mode [ 408.258641][ T30] audit: type=1400 audit(1781664102.532:884): avc: denied { read } for pid=10107 comm="syz.2.1133" path="socket:[36146]" dev="sockfs" ino=36146 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 408.279903][T10109] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 408.648678][T10117] usbtmc 5-1:16.0: INITIATE_ABORT_BULK_OUT returned d8 [ 408.691690][ T30] audit: type=1400 audit(1781664102.560:885): avc: denied { remount } for pid=10107 comm="syz.2.1133" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 408.799356][ T1964] block nbd1: Possible stuck request ffff88802877e000: control (read@0,1024B). Runtime 270 seconds [ 408.810255][ T1964] block nbd1: Possible stuck request ffff88802877e1c0: control (read@1024,1024B). Runtime 270 seconds [ 408.821399][ T1964] block nbd1: Possible stuck request ffff88802877e380: control (read@2048,1024B). Runtime 270 seconds [ 408.832422][ T1964] block nbd1: Possible stuck request ffff88802877e540: control (read@3072,1024B). Runtime 270 seconds [ 408.884621][ T30] audit: type=1400 audit(1781664103.159:886): avc: denied { bind } for pid=10121 comm="syz.1.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 408.980179][T10124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.988667][T10124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.998140][ T30] audit: type=1400 audit(1781664103.196:887): avc: denied { map } for pid=10121 comm="syz.1.1137" path="socket:[36172]" dev="sockfs" ino=36172 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 409.026460][ T30] audit: type=1400 audit(1781664103.196:888): avc: denied { read accept } for pid=10121 comm="syz.1.1137" path="socket:[36172]" dev="sockfs" ino=36172 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 409.071748][T10126] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.122418][T10126] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.184329][T10126] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.259401][T10126] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.330194][ T48] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.341523][ T48] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.352656][ T48] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.363654][ T48] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.396100][ T804] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 409.482187][ T7075] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 409.559287][ T804] usb 2-1: config 0 has no interfaces? [ 409.570645][ T804] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 409.580002][ T804] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 409.588198][ T804] usb 2-1: Product: syz [ 409.592896][ T804] usb 2-1: Manufacturer: syz [ 409.597839][ T804] usb 2-1: SerialNumber: syz [ 409.604320][ T804] usb 2-1: config 0 descriptor?? [ 409.645656][ T7075] usb 6-1: config 1 interface 0 has no altsetting 0 [ 409.656144][ T7075] usb 6-1: string descriptor 0 read error: -22 [ 409.664914][ T7075] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.40 [ 409.678748][ T7075] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.691980][T10135] netlink: 480 bytes leftover after parsing attributes in process `syz.3.1143'. [ 409.753789][ T30] audit: type=1400 audit(1781664103.963:889): avc: denied { create } for pid=10138 comm="syz.3.1145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 409.934116][ T804] usb 2-1: USB disconnect, device number 58 [ 410.099219][ T5623] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 410.108820][ T5623] CPU: 0 UID: 0 PID: 5623 Comm: kworker/u9:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 410.108858][ T5623] Tainted: [L]=SOFTLOCKUP [ 410.108868][ T5623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 410.108888][ T5623] Workqueue: hci5 hci_rx_work [ 410.108916][ T5623] Call Trace: [ 410.108923][ T5623] [ 410.108932][ T5623] dump_stack_lvl+0x100/0x190 [ 410.108958][ T5623] sysfs_warn_dup.cold+0x1c/0x28 [ 410.108992][ T5623] sysfs_create_dir_ns+0x24b/0x2b0 [ 410.109018][ T5623] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 410.109042][ T5623] ? kobject_add_internal+0x25f/0x930 [ 410.109076][ T5623] ? lock_release+0x24d/0x310 [ 410.109098][ T5623] ? do_raw_spin_unlock+0x145/0x1e0 [ 410.109124][ T5623] kobject_add_internal+0x2c8/0x930 [ 410.109159][ T5623] kobject_add+0x16a/0x1e0 [ 410.109189][ T5623] ? __pfx_kobject_add+0x10/0x10 [ 410.109220][ T5623] ? kobject_put+0xb9/0x640 [ 410.109249][ T5623] ? _raw_spin_unlock+0x28/0x50 [ 410.109273][ T5623] device_add+0x294/0x1970 [ 410.109303][ T5623] ? __pfx_dev_set_name+0x10/0x10 [ 410.109338][ T5623] ? __pfx_device_add+0x10/0x10 [ 410.109368][ T5623] ? mgmt_send_event_skb+0x2fb/0x460 [ 410.109398][ T5623] hci_conn_add_sysfs+0x1a3/0x260 [ 410.109427][ T5623] le_conn_complete_evt+0x11eb/0x1f60 [ 410.109456][ T5623] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 410.109480][ T5623] ? rcu_is_watching+0x12/0xc0 [ 410.109508][ T5623] ? trace_irq_enable.constprop.0+0x122/0x160 [ 410.109536][ T5623] hci_le_conn_complete_evt+0x23c/0x3a0 [ 410.109563][ T5623] ? skb_pull_data+0x15f/0x1e0 [ 410.109589][ T5623] hci_le_meta_evt+0x34a/0x5f0 [ 410.109616][ T5623] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 410.109645][ T5623] hci_event_packet+0x51c/0xcd0 [ 410.109670][ T5623] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 410.109697][ T5623] ? __pfx_hci_event_packet+0x10/0x10 [ 410.109721][ T5623] ? finish_task_switch.isra.0+0x14c/0x1010 [ 410.109748][ T5623] ? trace_irq_enable.constprop.0+0x2f/0x160 [ 410.109772][ T5623] ? kcov_remote_start+0x374/0x660 [ 410.109813][ T5623] ? kcov_remote_start+0x384/0x660 [ 410.109850][ T5623] hci_rx_work+0x451/0xfc0 [ 410.109874][ T5623] process_one_work+0xa23/0x1940 [ 410.109910][ T5623] ? __pfx_process_one_work+0x10/0x10 [ 410.109946][ T5623] ? __pfx_hci_rx_work+0x10/0x10 [ 410.109972][ T5623] worker_thread+0x5ef/0xe50 [ 410.110008][ T5623] ? kthread+0x13a/0x450 [ 410.110037][ T5623] ? __pfx_worker_thread+0x10/0x10 [ 410.110067][ T5623] kthread+0x370/0x450 [ 410.110095][ T5623] ? __pfx_kthread+0x10/0x10 [ 410.110125][ T5623] ret_from_fork+0x72b/0xd50 [ 410.110151][ T5623] ? __pfx_ret_from_fork+0x10/0x10 [ 410.110177][ T5623] ? __switch_to+0x800/0x10f0 [ 410.110207][ T5623] ? __pfx_kthread+0x10/0x10 [ 410.110238][ T5623] ret_from_fork_asm+0x1a/0x30 [ 410.110274][ T5623] [ 410.110315][ T5623] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 410.407721][ T9] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 410.415827][ T5623] Bluetooth: hci5: failed to register connection device [ 410.466903][ T5798] usb 5-1: USB disconnect, device number 71 [ 410.696984][ T30] audit: type=1400 audit(1781664104.777:890): avc: denied { bind } for pid=10148 comm="syz.4.1148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 410.796843][ T9] usb 3-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 410.820619][ T9] usb 3-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.860111][ T9] usb 3-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 410.898934][ T7075] usbhid 6-1:1.0: can't add hid device: -71 [ 410.905209][ T7075] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 410.916124][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 410.928598][ T7075] usb 6-1: USB disconnect, device number 11 [ 410.934560][ T9] usb 3-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 410.949695][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.964879][ T9] usb 3-1: config 0 descriptor?? [ 411.149862][T10159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.159332][T10159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.262618][T10161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 411.285733][T10161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 411.544309][ T5798] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 411.695961][ T36] Bluetooth: hci6: Frame reassembly failed (-84) [ 411.726949][ T36] Bluetooth: hci6: Frame reassembly failed (-84) [ 411.779074][ T5798] usb 5-1: Using ep0 maxpacket: 32 [ 411.785467][ T5798] usb 5-1: config 4 has an invalid interface number: 44 but max is 0 [ 411.794026][ T5798] usb 5-1: config 4 has no interface number 0 [ 411.800115][ T5798] usb 5-1: config 4 interface 44 has no altsetting 0 [ 411.808477][ T5798] usb 5-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice= a.ee [ 411.817505][ T5798] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.825517][ T5798] usb 5-1: Product: syz [ 411.829762][ T5798] usb 5-1: Manufacturer: syz [ 411.834390][ T5798] usb 5-1: SerialNumber: syz [ 412.057946][T10153] netlink: 'syz.4.1149': attribute type 21 has an invalid length. [ 412.065784][T10153] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1149'. [ 412.074882][T10153] netlink: 'syz.4.1149': attribute type 4 has an invalid length. [ 412.082641][T10153] netlink: 'syz.4.1149': attribute type 5 has an invalid length. [ 412.090470][T10153] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1149'. [ 412.127071][ T5798] kl5kusb105 5-1:4.44: KL5KUSB105D / PalmConnect converter detected [ 412.143478][ T5798] usb 5-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 412.155767][ T5798] usb 5-1: USB disconnect, device number 72 [ 412.164959][ T5798] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 412.176220][ T5798] kl5kusb105 5-1:4.44: device disconnected [ 412.238263][T10165] netlink: 'syz.5.1152': attribute type 64 has an invalid length. [ 412.532625][T10169] SELinux: ebitmap: map size 1919247470 does not match my size 64 (high bit was 29542) [ 412.542812][T10169] SELinux: failed to load policy [ 412.557169][T10169] lo: entered allmulticast mode [ 412.563954][T10168] lo: left allmulticast mode [ 413.296528][ T5798] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 413.458515][ T5798] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 413.475818][ T5798] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 413.493866][ T5798] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 413.508475][ T5798] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 413.518529][ T5798] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 413.526671][ T5798] usb 5-1: Product: syz [ 413.539655][ T5798] usb 5-1: Manufacturer: syz [ 413.545134][ T5798] usb 5-1: SerialNumber: syz [ 413.800193][ T5798] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 73 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 413.842047][ T9721] Bluetooth: hci6: command 0x1003 tx timeout [ 413.848139][ T5623] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 414.231351][ T30] audit: type=1400 audit(1781664108.156:891): avc: denied { read write } for pid=10179 comm="syz.4.1158" name="lp0" dev="devtmpfs" ino=4048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 414.273086][ T5798] usb 5-1: USB disconnect, device number 73 [ 414.281345][ T30] audit: type=1400 audit(1781664108.184:892): avc: denied { open } for pid=10179 comm="syz.4.1158" path="/dev/usb/lp0" dev="devtmpfs" ino=4048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 414.313859][ T30] audit: type=1400 audit(1781664108.184:893): avc: denied { ioctl } for pid=10179 comm="syz.4.1158" path="/dev/usb/lp0" dev="devtmpfs" ino=4048 ioctlcmd=0x604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 414.345300][ T5798] usblp0: removed [ 414.370797][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 414.392863][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 414.418354][ T9] usb 3-1: USB disconnect, device number 69 [ 414.456012][T10194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.475780][T10194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.923011][T10208] lo speed is unknown, defaulting to 1000 [ 414.924917][T10208] lo speed is unknown, defaulting to 1000 [ 414.953818][ T1964] block nbd4: Possible stuck request ffff8880288b0000: control (read@0,1024B). Runtime 30 seconds [ 414.964685][ T1964] block nbd4: Possible stuck request ffff8880288b01c0: control (read@1024,1024B). Runtime 30 seconds [ 414.964715][ T1964] block nbd4: Possible stuck request ffff8880288b0380: control (read@2048,1024B). Runtime 30 seconds [ 414.964742][ T1964] block nbd4: Possible stuck request ffff8880288c5080: control (read@3072,1024B). Runtime 30 seconds [ 414.964930][ T30] audit: type=1400 audit(1781664108.839:894): avc: denied { create } for pid=10202 comm="syz.1.1165" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 415.034548][ T30] audit: type=1400 audit(1781664108.904:895): avc: denied { mounton } for pid=10202 comm="syz.1.1165" path="/280/file0" dev="tmpfs" ino=1509 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 415.034649][T10213] fuse: Bad value for 'user_id' [ 415.034659][T10213] fuse: Bad value for 'user_id' [ 415.325964][ T30] audit: type=1400 audit(1781664109.176:896): avc: denied { read write } for pid=10202 comm="syz.1.1165" name="file0" dev="tmpfs" ino=1509 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 415.326131][ T30] audit: type=1400 audit(1781664109.176:897): avc: denied { open } for pid=10202 comm="syz.1.1165" path="/280/file0" dev="tmpfs" ino=1509 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 415.840416][T10233] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1169'. [ 416.227350][T10250] netlink: 'syz.4.1174': attribute type 1 has an invalid length. [ 416.693808][T10260] ubi: mtd0 is already attached to ubi16 [ 417.367128][ T30] audit: type=1400 audit(1781664111.085:898): avc: denied { write } for pid=10271 comm="syz.4.1180" path="socket:[37273]" dev="sockfs" ino=37273 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 417.391148][T10273] bridge0: port 3(syz_tun) entered blocking state [ 417.397578][T10273] bridge0: port 3(syz_tun) entered disabled state [ 417.404079][T10273] syz_tun: entered allmulticast mode [ 417.409803][T10273] syz_tun: entered promiscuous mode [ 417.415395][T10273] bridge0: port 3(syz_tun) entered blocking state [ 417.421877][T10273] bridge0: port 3(syz_tun) entered forwarding state [ 417.432061][ T5623] Bluetooth: hci5: command 0x0406 tx timeout [ 417.970569][T10285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.981422][T10285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.159800][T10295] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 419.302774][T10305] tc_dump_action: action bad kind [ 419.317974][ T30] audit: type=1400 audit(1781664112.900:899): avc: denied { accept } for pid=10302 comm="syz.2.1188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 419.928525][T10310] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1189'. [ 420.046199][T10312] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.068668][ T30] audit: type=1400 audit(1781664113.621:900): avc: denied { append } for pid=10313 comm="syz.1.1191" name="sg0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 420.163719][T10312] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.245596][T10312] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.299686][T10312] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.368653][T10320] Device name cannot be null; rc = [-22] [ 420.386678][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.401215][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.413483][ T5798] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 420.414200][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.430165][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.607587][ T5798] usb 3-1: config 0 has no interfaces? [ 420.625307][ T5798] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 420.649894][ T5798] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 420.669091][ T5798] usb 3-1: Product: syz [ 420.677745][ T5798] usb 3-1: Manufacturer: syz [ 420.686969][ T5798] usb 3-1: SerialNumber: syz [ 420.698931][ T5798] usb 3-1: config 0 descriptor?? [ 421.140084][ T5737] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 421.154304][ T5960] usb 3-1: USB disconnect, device number 70 [ 421.234967][T10332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.245737][T10332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.379078][ T5737] usb 5-1: config 1 interface 0 has no altsetting 0 [ 421.388251][ T5737] usb 5-1: string descriptor 0 read error: -22 [ 421.394661][ T5737] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.40 [ 421.403956][ T5737] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.600128][ T30] audit: type=1400 audit(1781664115.062:901): avc: denied { setopt } for pid=10336 comm="syz.5.1198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 421.624156][ T30] audit: type=1400 audit(1781664115.081:902): avc: denied { create } for pid=10336 comm="syz.5.1198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 421.659737][ T30] audit: type=1400 audit(1781664115.099:903): avc: denied { listen } for pid=10336 comm="syz.5.1198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 422.631255][ T30] audit: type=1400 audit(1781664115.623:904): avc: denied { read } for pid=10342 comm="syz.2.1199" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 422.658879][ T30] audit: type=1400 audit(1781664115.623:905): avc: denied { open } for pid=10342 comm="syz.2.1199" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 422.688016][ T30] audit: type=1400 audit(1781664115.623:906): avc: denied { ioctl } for pid=10342 comm="syz.2.1199" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 423.219365][T10356] ubi: mtd0 is already attached to ubi16 [ 423.923983][T10366] ubi: mtd0 is already attached to ubi16 [ 424.382487][ T5737] usbhid 5-1:1.0: can't add hid device: -71 [ 424.390123][ T5737] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 424.400876][ T5737] usb 5-1: USB disconnect, device number 74 [ 424.462283][T10370] IPv6: NLM_F_CREATE should be specified when creating new route [ 424.484844][ T7075] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 424.646352][T10375] vlan2: entered promiscuous mode [ 424.665929][T10375] bridge0: entered promiscuous mode [ 424.671525][ T7075] usb 2-1: Using ep0 maxpacket: 32 [ 424.683166][ T7075] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 424.700272][ T7075] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 424.715825][ T7075] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 424.738027][ T7075] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 424.767657][ T7075] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 424.829932][ T7075] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 424.843243][ T7075] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 424.852516][ T7075] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.457467][ T7075] usb 2-1: config 0 descriptor?? [ 425.554559][T10385] xt_hashlimit: size too large, truncated to 1048576 [ 425.597286][T10387] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.688185][T10387] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.739469][T10392] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.761860][T10387] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.813930][T10394] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.843727][T10392] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.857716][ T30] audit: type=1400 audit(1781664119.039:907): avc: denied { read } for pid=10363 comm="syz.1.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 425.883308][T10387] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.895009][ T7075] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 59 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 425.906881][ T10] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 425.921255][ T7075] usb 2-1: USB disconnect, device number 59 [ 425.937724][ T7075] usblp0: removed [ 425.943060][T10396] veth0_macvtap: entered allmulticast mode [ 425.963922][T10396] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 425.982169][T10394] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.001496][T10392] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.026362][ T48] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.037398][T10394] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.050868][ T48] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.061922][ T48] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.072935][ T48] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.078235][ T10] usb 5-1: config 0 has no interfaces? [ 426.081215][ T5960] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 426.088702][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 426.103367][ T10] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 426.115407][ T10] usb 5-1: Product: syz [ 426.122597][T10392] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.124478][ T10] usb 5-1: Manufacturer: syz [ 426.152603][ T10] usb 5-1: SerialNumber: syz [ 426.158929][T10394] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.166262][ T10] usb 5-1: config 0 descriptor?? [ 426.218977][ T48] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.234594][T10400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.243448][T10400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.257038][T10400] netlink: 'syz.3.1214': attribute type 21 has an invalid length. [ 426.265096][T10400] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1214'. [ 426.277787][ T2993] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.287927][T10400] netlink: 'syz.3.1214': attribute type 4 has an invalid length. [ 426.295707][T10400] netlink: 'syz.3.1214': attribute type 5 has an invalid length. [ 426.303415][T10400] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1214'. [ 426.313807][ T5960] usb 3-1: config 0 has no interfaces? [ 426.320983][ T5960] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 426.323677][ T2993] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.330618][ T5960] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 426.339240][ T2993] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.366066][ T5960] usb 3-1: Product: syz [ 426.369480][ T2993] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.370242][ T5960] usb 3-1: Manufacturer: syz [ 426.379125][ T2993] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.398487][ T29] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 426.407079][ T2993] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.412989][ T5960] usb 3-1: SerialNumber: syz [ 426.426895][ T5960] usb 3-1: config 0 descriptor?? [ 426.431736][ T2993] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.487942][ T5960] usb 5-1: USB disconnect, device number 75 [ 426.547815][ T29] usb 2-1: device descriptor read/64, error -71 [ 426.979470][ T10] usb 3-1: USB disconnect, device number 71 [ 427.028111][ T29] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 427.177908][ T29] usb 2-1: device descriptor read/64, error -71 [ 427.266778][T10412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1218'. [ 427.295606][ T29] usb usb2-port1: attempt power cycle [ 427.306406][T10414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.314967][T10414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.383368][ T5960] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 427.566283][ T5960] usb 5-1: config 1 interface 0 has no altsetting 0 [ 427.581004][ T5960] usb 5-1: string descriptor 0 read error: -22 [ 427.587512][ T5960] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.40 [ 427.596849][ T5960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.688347][T10423] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 427.688347][T10423] The task syz.2.1222 (10423) triggered the difference, watch for misbehavior. [ 427.690674][ T29] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 427.735036][ T29] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 427.744322][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.756413][ T29] usb 2-1: config 0 descriptor?? [ 428.141097][ T29] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 428.184226][T10427] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1223'. [ 428.270232][T10427] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1223'. [ 429.605633][ T30] audit: type=1400 audit(1781664122.548:908): avc: denied { create } for pid=10438 comm="syz.3.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 429.710397][T10441] nbd0: detected capacity change from 0 to 63 [ 429.796868][T10446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.805351][T10446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.825110][T10446] netlink: 'syz.3.1228': attribute type 21 has an invalid length. [ 429.841676][T10447] lo speed is unknown, defaulting to 1000 [ 429.847909][T10447] lo speed is unknown, defaulting to 1000 [ 429.868931][T10446] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1228'. [ 429.877994][T10446] netlink: 'syz.3.1228': attribute type 4 has an invalid length. [ 429.885736][T10446] netlink: 'syz.3.1228': attribute type 5 has an invalid length. [ 429.894258][T10449] hfs: can't find a HFS filesystem on dev nullb0 [ 429.923912][T10446] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1228'. [ 430.335797][ T5960] usbhid 5-1:1.0: can't add hid device: -71 [ 430.353926][ T5960] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 430.378731][ T5960] usb 5-1: USB disconnect, device number 76 [ 430.437226][ T9721] block nbd0: Receive control failed (result -104) [ 430.480264][ T10] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 430.592203][T10456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1230'. [ 430.641339][ T10] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 430.650717][ T10] usb 3-1: config 0 has no interface number 0 [ 430.657695][ T10] usb 3-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid maxpacket 12592, setting to 64 [ 430.674244][ T10] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 430.684943][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.711651][ T10] usb 3-1: Product: syz [ 430.716221][ T10] usb 3-1: Manufacturer: syz [ 430.722540][ T10] usb 3-1: SerialNumber: syz [ 430.734853][ T10] usb 3-1: config 0 descriptor?? [ 430.741364][T10452] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 430.801623][ T5960] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 430.993847][ T5960] usb 5-1: Using ep0 maxpacket: 16 [ 431.017104][ T5960] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 431.063964][ T5960] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.106221][ T5960] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.145624][ T5960] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 431.189362][ T5960] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 431.211552][ T5960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.309631][ T29] [drm:udl_init] *ERROR* Selecting channel failed [ 431.315787][ T5890] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 431.325232][ T5960] usb 5-1: config 0 descriptor?? [ 431.340367][ T29] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 431.356090][ T29] [drm] Initialized udl on minor 2 [ 431.368903][ T29] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 431.395323][ T29] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 431.407355][ T804] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 431.432225][ T29] usb 2-1: USB disconnect, device number 62 [ 431.438238][ T804] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 431.541000][ T5890] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 431.596487][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.604906][ T5890] usb 6-1: Product: syz [ 431.610183][ T5890] usb 6-1: Manufacturer: syz [ 431.615220][ T5890] usb 6-1: SerialNumber: syz [ 431.621715][ T5890] usb 6-1: config 0 descriptor?? [ 431.631715][ T5890] ch341 6-1:0.0: ch341-uart converter detected [ 432.144894][ T5960] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0017/input/input36 [ 432.157990][T10454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.168411][T10454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.169146][ T5960] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0017/input/input37 [ 432.416188][ T5960] kye 0003:0458:5013.0017: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 432.448661][ T30] audit: type=1400 audit(1781664125.169:909): avc: denied { getopt } for pid=10453 comm="syz.4.1229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 432.719324][ T5960] usb 5-1: USB disconnect, device number 77 [ 433.100909][T10470] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1232'. [ 433.112664][ T9721] Bluetooth: hci5: ISO packet for unknown connection handle 1039 [ 433.115363][T10470] netlink: 'syz.5.1232': attribute type 10 has an invalid length. [ 433.166696][ T804] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 433.440246][ T804] usb 2-1: Using ep0 maxpacket: 32 [ 433.488293][ T804] usb 2-1: config 4 has an invalid interface number: 44 but max is 0 [ 433.555212][ T804] usb 2-1: config 4 has no interface number 0 [ 433.726664][ T804] usb 2-1: config 4 interface 44 has no altsetting 0 [ 433.792122][ T10] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 433.792707][ T804] usb 2-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice= a.ee [ 433.800967][ T10] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 433.817320][ T10] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 433.819840][T10477] fido_id[10477]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 433.825162][ T10] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 433.861077][ T10] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB1 [ 433.876133][ T804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.882285][ T10] usb 3-1: USB disconnect, device number 72 [ 433.900974][ T5890] usb 6-1: failed to send control message: -71 [ 433.910006][ T5890] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 433.923272][ T10] keyspan_1 ttyUSB1: Keyspan 1 port adapter converter now disconnected from ttyUSB1 [ 433.934401][ T5890] usb 6-1: USB disconnect, device number 12 [ 433.949092][ T5890] ch341 6-1:0.0: device disconnected [ 433.955428][ T10] keyspan 3-1:0.133: device disconnected [ 433.967356][ T804] usb 2-1: Product: syz [ 433.990093][ T804] usb 2-1: Manufacturer: syz [ 434.019127][ T804] usb 2-1: SerialNumber: syz [ 434.169429][T10486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.180496][T10486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.356367][T10475] netlink: 'syz.1.1236': attribute type 21 has an invalid length. [ 434.371698][T10475] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1236'. [ 434.381154][T10475] netlink: 'syz.1.1236': attribute type 4 has an invalid length. [ 434.388883][T10475] netlink: 'syz.1.1236': attribute type 5 has an invalid length. [ 434.396907][T10475] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1236'. [ 434.423872][ T804] kl5kusb105 2-1:4.44: KL5KUSB105D / PalmConnect converter detected [ 434.434383][ T804] usb 2-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 434.445233][ T804] usb 2-1: USB disconnect, device number 63 [ 434.457986][ T804] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 434.469507][ T804] kl5kusb105 2-1:4.44: device disconnected [ 434.530591][ T10] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 434.618286][ T5960] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 434.788627][ T5960] usb 5-1: Using ep0 maxpacket: 32 [ 434.797880][ T5960] usb 5-1: config 4 has an invalid interface number: 44 but max is 0 [ 434.806701][ T5960] usb 5-1: config 4 has no interface number 0 [ 434.815170][ T5960] usb 5-1: config 4 interface 44 has no altsetting 0 [ 434.826991][ T5960] usb 5-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice= a.ee [ 434.836563][ T5960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.845963][ T5960] usb 5-1: Product: syz [ 434.851063][ T5960] usb 5-1: Manufacturer: syz [ 434.855713][ T5960] usb 5-1: SerialNumber: syz [ 434.867254][ T10] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 435.332194][T10487] netlink: 'syz.4.1240': attribute type 21 has an invalid length. [ 435.340023][T10487] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1240'. [ 435.349073][T10487] netlink: 'syz.4.1240': attribute type 4 has an invalid length. [ 435.356790][T10487] netlink: 'syz.4.1240': attribute type 5 has an invalid length. [ 435.364500][T10487] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1240'. [ 435.555122][ T5960] kl5kusb105 5-1:4.44: KL5KUSB105D / PalmConnect converter detected [ 435.556029][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.584046][ T10] usb 3-1: config 0 descriptor?? [ 435.592115][ T5960] usb 5-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 435.616616][ T5960] usb 5-1: USB disconnect, device number 78 [ 435.634694][ T5960] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 435.647538][ T5960] kl5kusb105 5-1:4.44: device disconnected [ 435.666574][T10497] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 435.690545][ T30] audit: type=1400 audit(1781664128.238:910): avc: denied { read } for pid=10498 comm="syz.5.1245" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 435.817325][ T10] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 436.256499][T10505] lo speed is unknown, defaulting to 1000 [ 436.264762][T10505] lo speed is unknown, defaulting to 1000 [ 436.369737][T10506] hfs: can't find a HFS filesystem on dev nullb0 [ 436.721181][T10508] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1246'. [ 436.955467][ T804] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 437.126825][ T804] usb 2-1: Using ep0 maxpacket: 32 [ 437.144341][ T804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.157144][ T804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.167106][ T804] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 437.176992][ T804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.187642][ T804] usb 2-1: config 0 descriptor?? [ 437.269011][T10526] syzkaller0: entered promiscuous mode [ 437.274642][T10526] syzkaller0: entered allmulticast mode [ 437.332978][T10529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1252'. [ 437.533422][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 437.734369][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 437.812079][ T10] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 437.840025][ T10] [drm] Initialized udl on minor 2 [ 437.855361][T10534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1254'. [ 437.861245][ T804] usbhid 2-1:0.0: can't add hid device: -71 [ 437.867079][ T10] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 437.876874][ T804] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 437.904388][ T804] usb 2-1: USB disconnect, device number 64 [ 437.911294][ T10] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 437.938329][ T5890] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 437.953288][ T10] usb 3-1: USB disconnect, device number 73 [ 437.960575][ T5890] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 437.961752][ T30] audit: type=1400 audit(1781664130.372:911): avc: denied { create } for pid=10536 comm="syz.5.1255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 438.261743][ T30] audit: type=1400 audit(1781664130.652:912): avc: denied { accept } for pid=10533 comm="syz.2.1254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 439.249145][T10558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.272368][T10558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.282537][T10558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.293118][T10558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.357836][ T30] audit: type=1400 audit(1781664131.672:913): avc: denied { read } for pid=10562 comm="syz.2.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 439.851437][ T804] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 440.082780][ T804] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 440.126621][ T804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.262822][ T804] usb 3-1: config 0 descriptor?? [ 440.580914][ T804] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 441.024109][T10597] lo speed is unknown, defaulting to 1000 [ 441.034404][T10597] lo speed is unknown, defaulting to 1000 [ 441.200676][T10598] hfs: can't find a HFS filesystem on dev nullb0 [ 441.215699][ T1964] block nbd1: Possible stuck request ffff88802877e000: control (read@0,1024B). Runtime 300 seconds [ 441.226605][ T1964] block nbd1: Possible stuck request ffff88802877e1c0: control (read@1024,1024B). Runtime 300 seconds [ 441.237662][ T1964] block nbd1: Possible stuck request ffff88802877e380: control (read@2048,1024B). Runtime 300 seconds [ 441.248703][ T1964] block nbd1: Possible stuck request ffff88802877e540: control (read@3072,1024B). Runtime 300 seconds [ 441.423249][ T30] audit: type=1400 audit(1781664133.609:914): avc: denied { mount } for pid=10601 comm="syz.4.1272" name="/" dev="configfs" ino=1147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 441.450647][ T30] audit: type=1400 audit(1781664133.628:915): avc: denied { search } for pid=10601 comm="syz.4.1272" name="/" dev="configfs" ino=1147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 441.476472][ T30] audit: type=1400 audit(1781664133.656:916): avc: denied { search } for pid=10601 comm="syz.4.1272" name="/" dev="configfs" ino=1147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 441.498799][ T30] audit: type=1400 audit(1781664133.656:917): avc: denied { search } for pid=10601 comm="syz.4.1272" name="/" dev="configfs" ino=1147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 441.557743][ T30] audit: type=1400 audit(1781664133.694:918): avc: denied { search } for pid=10601 comm="syz.4.1272" name="/" dev="configfs" ino=1147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 441.615541][ T30] audit: type=1400 audit(1781664133.694:919): avc: denied { search } for pid=10601 comm="syz.4.1272" name="/" dev="configfs" ino=1147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 441.823633][ T30] audit: type=1400 audit(1781664133.974:920): avc: denied { map_create } for pid=10603 comm="syz.5.1273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 441.823729][T10604] lo speed is unknown, defaulting to 1000 [ 441.849475][T10604] lo speed is unknown, defaulting to 1000 [ 442.045347][T10606] (syz.5.1273,10606,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 442.054141][T10606] (syz.5.1273,10606,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 442.722272][ T804] [drm:udl_init] *ERROR* Selecting channel failed [ 442.737525][ T804] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 442.745124][ T804] [drm] Initialized udl on minor 2 [ 442.753577][ T804] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 442.761967][ T804] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 442.769356][ T5798] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 442.777482][ T5798] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 442.789320][T10611] No source specified [ 442.794852][ T804] usb 3-1: USB disconnect, device number 74 [ 443.160455][T10620] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1278'. [ 443.238840][ T804] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 443.426174][ T804] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 443.443544][ T804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.460099][ T804] usb 3-1: Product: syz [ 443.492937][ T804] usb 3-1: Manufacturer: syz [ 443.516011][ T804] usb 3-1: SerialNumber: syz [ 443.565427][T10626] kAFS: unable to lookup cell '' [ 443.567195][ T804] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 443.671714][ T5798] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 444.080374][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 444.080391][ T30] audit: type=1400 audit(1781664136.089:928): avc: denied { nlmsg_tty_audit } for pid=10627 comm="syz.4.1281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 444.115660][ T30] audit: type=1400 audit(1781664136.089:929): avc: denied { audit_write } for pid=10627 comm="syz.4.1281" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 444.139043][ T30] audit: type=1107 audit(1781664136.089:930): pid=10627 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 444.227487][T10631] lo speed is unknown, defaulting to 1000 [ 444.242902][T10631] lo speed is unknown, defaulting to 1000 [ 444.553384][T10640] loop9: detected capacity change from 0 to 524287936 [ 444.879933][ T5798] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 444.903700][ T5798] ath9k_htc: Failed to initialize the device [ 444.928243][ T5798] usb 3-1: ath9k_htc: USB layer deinitialized [ 445.152709][ T10] usb 3-1: USB disconnect, device number 75 [ 445.244394][T10647] IPVS: set_ctl: invalid protocol: 115 10.1.1.1:20264 [ 445.258649][ T24] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 445.273701][T10647] syzkaller0: entered promiscuous mode [ 445.279156][T10647] syzkaller0: entered allmulticast mode [ 445.289504][T10647] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1286'. [ 445.419985][ T24] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 445.429122][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.438145][ T24] usb 6-1: config 0 descriptor?? [ 445.652208][T10652] xt_connbytes: Forcing CT accounting to be enabled [ 445.659148][T10652] Cannot find set identified by id 0 to match [ 445.660352][ T24] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 446.014456][ T30] audit: type=1400 audit(1781664137.895:931): avc: denied { append } for pid=10651 comm="syz.3.1288" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 446.043492][T10655] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1288'. [ 446.060067][T10655] netlink: 'syz.3.1288': attribute type 2 has an invalid length. [ 446.233160][T10661] lo speed is unknown, defaulting to 1000 [ 446.239596][T10661] lo speed is unknown, defaulting to 1000 [ 446.297980][T10663] /dev/nullb0: Can't open blockdev [ 446.665325][T10665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1290'. [ 446.678087][T10667] FAULT_INJECTION: forcing a failure. [ 446.678087][T10667] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 446.710753][T10667] CPU: 0 UID: 0 PID: 10667 Comm: syz.1.1291 Tainted: G L syzkaller #0 PREEMPT(full) [ 446.710784][T10667] Tainted: [L]=SOFTLOCKUP [ 446.710792][T10667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 446.710805][T10667] Call Trace: [ 446.710811][T10667] [ 446.710819][T10667] dump_stack_lvl+0x100/0x190 [ 446.710844][T10667] should_fail_ex.cold+0x5/0xa [ 446.710879][T10667] _copy_to_user+0x32/0xd0 [ 446.710899][T10667] simple_read_from_buffer+0xcb/0x170 [ 446.710931][T10667] proc_fail_nth_read+0x1af/0x230 [ 446.710960][T10667] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 446.710989][T10667] ? security_file_permission+0x76/0x210 [ 446.711017][T10667] ? rw_verify_area+0xce/0x6d0 [ 446.711042][T10667] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 446.711071][T10667] vfs_read+0x1e4/0xb40 [ 446.711100][T10667] ? __pfx_vfs_read+0x10/0x10 [ 446.711127][T10667] ? rcu_is_watching+0x12/0xc0 [ 446.711154][T10667] ? __fget_files+0x21f/0x3d0 [ 446.711178][T10667] ksys_read+0x12a/0x250 [ 446.711201][T10667] ? __pfx_ksys_read+0x10/0x10 [ 446.711229][T10667] ? rcu_is_watching+0x12/0xc0 [ 446.711252][T10667] do_syscall_64+0x115/0x870 [ 446.711274][T10667] ? clear_bhb_loop+0x40/0x90 [ 446.711297][T10667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.711318][T10667] RIP: 0033:0x7f6867f5d68e [ 446.711334][T10667] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 446.711352][T10667] RSP: 002b:00007f6868f2afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 446.711372][T10667] RAX: ffffffffffffffda RBX: 00007f6868f2b6c0 RCX: 00007f6867f5d68e [ 446.711386][T10667] RDX: 000000000000000f RSI: 00007f6868f2b0a0 RDI: 000000000000000e [ 446.711398][T10667] RBP: 00007f6868f2b090 R08: 0000000000000000 R09: 0000000000000000 [ 446.711411][T10667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.711423][T10667] R13: 00007f6868216038 R14: 00007f6868215fa0 R15: 00007fffe7331658 [ 446.711443][T10667] [ 446.719891][T10670] tmpfs: Bad value for 'mpol' [ 446.987169][T10681] vlan0: entered promiscuous mode [ 446.992565][T10681] bridge0: entered promiscuous mode [ 447.122033][ T1964] block nbd4: Possible stuck request ffff8880288b0000: control (read@0,1024B). Runtime 60 seconds [ 447.132977][ T1964] block nbd4: Possible stuck request ffff8880288b01c0: control (read@1024,1024B). Runtime 60 seconds [ 447.143923][ T1964] block nbd4: Possible stuck request ffff8880288b0380: control (read@2048,1024B). Runtime 60 seconds [ 447.154891][ T1964] block nbd4: Possible stuck request ffff8880288c5080: control (read@3072,1024B). Runtime 60 seconds [ 447.278170][ T10] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 447.440926][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.452054][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.462064][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 447.474940][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 447.484145][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.507101][ T10] usb 3-1: config 0 descriptor?? [ 447.567390][ T5715] kernel read not supported for file /video9 (pid: 5715 comm: kworker/1:6) [ 447.588113][ T5798] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 447.683160][T10692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.693376][T10692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.769720][ T5798] usb 5-1: Using ep0 maxpacket: 32 [ 447.782194][ T5798] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 447.793568][ T5798] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 447.805370][ T5798] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 447.816790][ T5798] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 447.843787][ T5798] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 447.866172][ T5798] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.874268][ T5798] usb 5-1: Product: syz [ 447.878725][ T5798] usb 5-1: Manufacturer: syz [ 447.883554][ T5798] usb 5-1: SerialNumber: syz [ 447.893060][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 447.901919][ T5798] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input38 [ 447.962246][ T10] hid_parser_main: 84 callbacks suppressed [ 447.963463][ T10] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 447.977807][ T10] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 447.985277][ T10] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 447.992707][ T10] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 448.000398][ T10] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 448.007855][ T10] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 448.015949][ T10] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 448.023370][ T10] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 448.030830][ T10] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 448.038516][ T10] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 448.059193][ T10] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 448.133086][ T5798] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 448.141382][ T5798] (id 0x00) [ 448.184460][ T30] audit: type=1804 audit(1781664139.926:932): pid=10681 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1294" name="/newroot/244/file0" dev="tmpfs" ino=1325 res=1 errno=0 [ 448.207951][ T5798] rc_core: IR keymap rc-imon-pad not found [ 448.217160][ T5798] Registered IR keymap rc-empty [ 448.228988][T10681] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: 0, delta: -1 [ 448.229811][ T5798] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 448.238375][T10681] ref_ctr decrement failed for inode: 0x52d offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888035000000 [ 448.259122][ T24] [drm:udl_init] *ERROR* Selecting channel failed [ 448.272263][T10681] uprobe: syz.2.1294:10681 failed to unregister, leaking uprobe [ 448.297754][ T5798] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 448.342719][ T5737] usb 3-1: USB disconnect, device number 76 [ 448.344090][ T24] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 448.403694][ T5798] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 448.422266][ T24] [drm] Initialized udl on minor 2 [ 448.436348][ T5798] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input39 [ 448.457545][ T24] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 448.484770][ T5798] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:79> initialized [ 448.493427][ T24] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 448.502467][ T804] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 448.515931][ T804] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 448.529166][ T24] usb 6-1: USB disconnect, device number 13 [ 448.886709][ T5737] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 449.103076][T10685] imon:send_packet: task interrupted [ 449.175340][T10685] imon:send_packet: packet tx failed (-512) [ 449.289435][T10685] imon:vfd_write: send packet #0 failed [ 449.586415][ T804] usb 5-1: USB disconnect, device number 79 [ 449.625409][T10708] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 449.639362][T10708] xt_hashlimit: size too large, truncated to 1048576 [ 449.763134][ T5737] usb 3-1: config 1 interface 0 has no altsetting 0 [ 449.781915][ T30] audit: type=1400 audit(1781664141.423:933): avc: denied { create } for pid=10707 comm="syz.4.1302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 449.808793][ T5737] usb 3-1: string descriptor 0 read error: -22 [ 449.820272][ T5737] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.40 [ 449.842551][ T5737] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.174123][ T804] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 450.532860][ T804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.561121][ T804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.969668][ T804] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 451.004664][ T804] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 451.033770][ T804] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.059042][ T804] usb 6-1: config 0 descriptor?? [ 451.147771][ T30] audit: type=1400 audit(1781664142.705:934): avc: denied { read } for pid=10726 comm="syz.1.1306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 451.390568][T10731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.400403][T10731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.424492][ T10] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 451.497300][ T24] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 451.519569][ T804] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 451.676227][T10734] lo speed is unknown, defaulting to 1000 [ 451.684523][T10734] lo speed is unknown, defaulting to 1000 [ 451.789329][T10735] hfs: can't find a HFS filesystem on dev nullb0 [ 451.985455][ T5737] usbhid 3-1:1.0: can't add hid device: -71 [ 451.991571][ T5737] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 452.002720][ T5737] usb 3-1: USB disconnect, device number 77 [ 452.008665][ T30] audit: type=1804 audit(1781664143.510:935): pid=10717 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.1303" name="/newroot/87/file0" dev="tmpfs" ino=480 res=1 errno=0 [ 452.010743][T10717] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: 0, delta: -1 [ 452.051617][T10717] ref_ctr decrement failed for inode: 0x1e0 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888037249980 [ 452.058981][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 452.071766][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 452.071997][T10717] uprobe: syz.5.1303:10717 failed to unregister, leaking uprobe [ 452.083186][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 452.098607][ T24] usb 5-1: config 206 has an invalid interface number: 83 but max is 0 [ 452.098635][ T24] usb 5-1: config 206 has no interface number 0 [ 452.098666][ T24] usb 5-1: config 206 interface 83 has no altsetting 0 [ 452.103182][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a7.a6 [ 452.129715][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.130298][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 452.137789][ T24] usb 5-1: Product: syz [ 452.151174][ T24] usb 5-1: Manufacturer: syz [ 452.153441][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.159046][ T24] usb 5-1: SerialNumber: syz [ 452.165075][ T10] usb 2-1: Product: syz [ 452.173077][ T10] usb 2-1: Manufacturer: syz [ 452.177719][ T10] usb 2-1: SerialNumber: syz [ 452.184684][ T5798] usb 6-1: USB disconnect, device number 14 [ 452.189123][ T10] usb 2-1: 0:2 : does not exist [ 452.243654][T10741] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.314046][T10741] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.367302][T10741] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.408748][ T804] usb 2-1: USB disconnect, device number 65 [ 452.421841][T10741] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.471625][ T5737] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 452.519252][ T36] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.531617][ T36] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.543564][ T36] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.556248][ T36] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.641354][ T5737] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.652805][ T5737] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.664930][ T5737] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 452.679250][ T5737] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 452.689105][ T5737] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.704226][ T5737] usb 3-1: config 0 descriptor?? [ 452.984578][ T5798] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 452.993056][T10746] syz_tun: entered allmulticast mode [ 453.157383][T10747] syz_tun: left allmulticast mode [ 453.211349][ T5737] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 453.307422][ T5798] usb 6-1: config 0 has no interfaces? [ 453.316802][ T5798] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 453.326264][ T5798] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 453.334590][ T5798] usb 6-1: Product: syz [ 453.338931][ T5798] usb 6-1: Manufacturer: syz [ 453.343547][ T5798] usb 6-1: SerialNumber: syz [ 453.350399][ T5798] usb 6-1: config 0 descriptor?? [ 453.388161][ T30] audit: type=1804 audit(1781664144.802:936): pid=10739 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1309" name="/newroot/246/file0" dev="tmpfs" ino=1336 res=1 errno=0 [ 453.389134][T10739] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: 0, delta: -1 [ 453.419730][T10739] ref_ctr decrement failed for inode: 0x538 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807eb58000 [ 453.431365][T10739] uprobe: syz.2.1309:10739 failed to unregister, leaking uprobe [ 453.443994][ T5798] usb 3-1: USB disconnect, device number 78 [ 453.658226][ T5737] usb 6-1: USB disconnect, device number 15 [ 454.028651][T10754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1313'. [ 454.330980][ T5798] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 454.432097][ T24] xbox_remote_probe: Unexpected desc.bNumEndpoints: 2 [ 454.444312][ T24] usb 5-1: USB disconnect, device number 80 [ 454.555427][ T5798] usb 3-1: Using ep0 maxpacket: 32 [ 454.562138][ T5798] usb 3-1: config 4 has an invalid interface number: 44 but max is 0 [ 454.570380][ T5798] usb 3-1: config 4 has no interface number 0 [ 454.576649][ T5798] usb 3-1: config 4 interface 44 has no altsetting 0 [ 454.585094][ T5798] usb 3-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice= a.ee [ 454.606523][ T5798] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.614582][ T5798] usb 3-1: Product: syz [ 454.618745][ T5798] usb 3-1: Manufacturer: syz [ 454.623600][ T5798] usb 3-1: SerialNumber: syz [ 455.044941][ T5798] kl5kusb105 3-1:4.44: KL5KUSB105D / PalmConnect converter detected [ 455.725088][ T5798] usb 3-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 455.740751][ T5798] usb 3-1: USB disconnect, device number 79 [ 455.758225][ T5798] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 455.768436][ T5798] kl5kusb105 3-1:4.44: device disconnected [ 456.019780][ T5715] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 456.301090][ T5715] usb 6-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 456.316455][ T5715] usb 6-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.327432][ T5715] usb 6-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 456.346997][ T5715] usb 6-1: config 0 interface 0 has no altsetting 0 [ 456.358072][ T5715] usb 6-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 456.367784][ T5715] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.383283][ T5715] usb 6-1: config 0 descriptor?? [ 456.516873][T10789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1324'. [ 456.719369][ T24] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 457.736909][ T24] usb 2-1: config 1 interface 0 has no altsetting 0 [ 458.077102][ T24] usb 2-1: string descriptor 0 read error: -22 [ 458.158989][ T24] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.40 [ 458.219062][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.271418][ T5715] usbhid 6-1:0.0: can't add hid device: -71 [ 458.279185][ T5715] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 458.302375][ T5715] usb 6-1: USB disconnect, device number 16 [ 458.338759][ T5737] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 458.590493][T10803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.599922][T10803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.601009][T10802] lo speed is unknown, defaulting to 1000 [ 458.651136][ T5737] usb 5-1: Using ep0 maxpacket: 16 [ 458.658564][ T5737] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 458.745535][T10802] lo speed is unknown, defaulting to 1000 [ 458.763332][ T5737] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.933896][ T5737] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.956241][ T5737] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 458.982291][ T5737] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 459.005603][ T5737] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.025648][ T5737] usb 5-1: config 0 descriptor?? [ 459.232959][ T30] audit: type=1400 audit(1781664150.267:937): avc: denied { ioctl } for pid=10810 comm="syz.5.1330" path="socket:[39702]" dev="sockfs" ino=39702 ioctlcmd=0x586e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 459.502027][ T5737] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.001B/input/input41 [ 459.608898][ T5737] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.001B/input/input42 [ 459.672454][ T5737] kye 0003:0458:5013.001B: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 459.705431][T10796] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 460.245382][T10823] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 460.684375][ T5960] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 460.771980][ T24] usbhid 2-1:1.0: can't add hid device: -71 [ 460.792652][ T24] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 460.816574][ T24] usb 2-1: USB disconnect, device number 66 [ 460.849573][ T10] usb 5-1: reset high-speed USB device number 81 using dummy_hcd [ 460.884967][T10826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1335'. [ 460.902676][ T5960] usb 6-1: config index 0 descriptor too short (expected 28277, got 36) [ 460.920456][ T5960] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 460.952217][ T5960] usb 6-1: config 0 has no interfaces? [ 460.963934][ T5960] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 460.995179][ T5960] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.005479][ T10] usb 5-1: device descriptor read/64, error -32 [ 461.027181][ T5960] usb 6-1: config 0 descriptor?? [ 461.136600][T10832] FAULT_INJECTION: forcing a failure. [ 461.136600][T10832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 461.177464][T10832] CPU: 0 UID: 0 PID: 10832 Comm: syz.1.1337 Tainted: G L syzkaller #0 PREEMPT(full) [ 461.177499][T10832] Tainted: [L]=SOFTLOCKUP [ 461.177508][T10832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 461.177520][T10832] Call Trace: [ 461.177527][T10832] [ 461.177535][T10832] dump_stack_lvl+0x100/0x190 [ 461.177562][T10832] should_fail_ex.cold+0x5/0xa [ 461.177588][T10832] _copy_from_iter+0x1f4/0x1690 [ 461.177614][T10832] ? __asan_memset+0x23/0x50 [ 461.177638][T10832] ? __pfx__copy_from_iter+0x10/0x10 [ 461.177661][T10832] ? __pfx___alloc_skb+0x10/0x10 [ 461.177688][T10832] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 461.177720][T10832] netlink_sendmsg+0x808/0xda0 [ 461.177745][T10832] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.177774][T10832] ____sys_sendmsg+0x9e1/0xb70 [ 461.177794][T10832] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.177818][T10832] ? __pfx_____sys_sendmsg+0x10/0x10 [ 461.177849][T10832] ? kstrtouint_from_user+0x13c/0x1d0 [ 461.177879][T10832] ___sys_sendmsg+0x190/0x1e0 [ 461.177902][T10832] ? __pfx____sys_sendmsg+0x10/0x10 [ 461.177925][T10832] ? get_pid_task+0x106/0x250 [ 461.177954][T10832] ? rcu_is_watching+0x12/0xc0 [ 461.177988][T10832] __sys_sendmsg+0x160/0x210 [ 461.178017][T10832] ? __pfx___sys_sendmsg+0x10/0x10 [ 461.178051][T10832] ? rcu_is_watching+0x12/0xc0 [ 461.178076][T10832] do_syscall_64+0x115/0x870 [ 461.178098][T10832] ? clear_bhb_loop+0x40/0x90 [ 461.178121][T10832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.178142][T10832] RIP: 0033:0x7f6867f9ce59 [ 461.178159][T10832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.178178][T10832] RSP: 002b:00007f6868f2b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 461.178199][T10832] RAX: ffffffffffffffda RBX: 00007f6868215fa0 RCX: 00007f6867f9ce59 [ 461.178213][T10832] RDX: 0000000004041080 RSI: 0000200000006040 RDI: 0000000000000004 [ 461.178226][T10832] RBP: 00007f6868f2b090 R08: 0000000000000000 R09: 0000000000000000 [ 461.178239][T10832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.178251][T10832] R13: 00007f6868216038 R14: 00007f6868215fa0 R15: 00007fffe7331658 [ 461.178272][T10832] [ 461.442743][T10815] batadv_slave_0: entered promiscuous mode [ 461.473673][T10814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.482427][T10814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.593046][T10834] No such timeout policy "syz0" [ 461.611400][ T30] audit: type=1400 audit(1781664152.494:938): avc: denied { write } for pid=10833 comm="syz.2.1334" name="file2" dev="tmpfs" ino=1378 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 461.634100][ T30] audit: type=1400 audit(1781664152.494:939): avc: denied { open } for pid=10833 comm="syz.2.1334" path="/254/file2" dev="tmpfs" ino=1378 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 461.672324][ T30] audit: type=1400 audit(1781664152.494:940): avc: denied { ioctl } for pid=10833 comm="syz.2.1334" path="/254/file2" dev="tmpfs" ino=1378 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 461.702693][ T30] audit: type=1326 audit(1781664152.559:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10816 comm="syz.3.1332" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d619ce59 code=0x7ffc0000 [ 461.791957][ T30] audit: type=1326 audit(1781664152.559:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10816 comm="syz.3.1332" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d619ce59 code=0x7ffc0000 [ 461.863554][T10841] xt_hashlimit: size too large, truncated to 1048576 [ 461.875466][ T30] audit: type=1326 audit(1781664152.559:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10816 comm="syz.3.1332" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d619ce59 code=0x7ffc0000 [ 461.930339][T10844] Invalid option length (1047714) for dns_resolver key [ 461.940025][ T30] audit: type=1326 audit(1781664152.559:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10816 comm="syz.3.1332" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f48d619ce59 code=0x7ffc0000 [ 461.990598][ T30] audit: type=1326 audit(1781664152.559:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10816 comm="syz.3.1332" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d619ce59 code=0x7ffc0000 [ 462.067586][ T30] audit: type=1326 audit(1781664152.559:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10816 comm="syz.3.1332" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d619ce59 code=0x7ffc0000 [ 462.139547][T10849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.147933][ T4987] block nbd0: Possible stuck request ffff888028725080: control (read@0,1024B). Runtime 30 seconds [ 462.147967][ T4987] block nbd0: Possible stuck request ffff888028725240: control (read@1024,1024B). Runtime 30 seconds [ 462.147991][ T4987] block nbd0: Possible stuck request ffff888028725400: control (read@2048,1024B). Runtime 30 seconds [ 462.148016][ T4987] block nbd0: Possible stuck request ffff8880287255c0: control (read@3072,1024B). Runtime 30 seconds [ 462.218224][T10849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.473757][ T10] usb 5-1: reset high-speed USB device number 81 using dummy_hcd [ 462.481978][ T10] usb 5-1: device reset changed ep0 maxpacket size! [ 462.492544][ T5737] usb 5-1: USB disconnect, device number 81 [ 462.761944][T10857] loop9: detected capacity change from 0 to 524287936 [ 462.858556][ T5737] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 462.918039][T10861] lo speed is unknown, defaulting to 1000 [ 462.927127][T10861] lo speed is unknown, defaulting to 1000 [ 462.985236][T10815] batadv_slave_0: left promiscuous mode [ 462.996142][ T24] usb 6-1: USB disconnect, device number 17 [ 463.018711][ T5737] usb 5-1: Using ep0 maxpacket: 32 [ 463.025096][ T5737] usb 5-1: config 4 has an invalid interface number: 44 but max is 0 [ 463.038411][ T5737] usb 5-1: config 4 has no interface number 0 [ 463.050996][ T5737] usb 5-1: config 4 interface 44 has no altsetting 0 [ 463.062806][ T5737] usb 5-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice= a.ee [ 463.073237][ T5737] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.085621][ T5737] usb 5-1: Product: syz [ 463.090936][ T5737] usb 5-1: Manufacturer: syz [ 463.095922][ T5737] usb 5-1: SerialNumber: syz [ 463.212354][T10871] lo speed is unknown, defaulting to 1000 [ 463.225854][T10871] lo speed is unknown, defaulting to 1000 [ 463.327401][T10846] netlink: 'syz.4.1339': attribute type 21 has an invalid length. [ 463.342158][T10846] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1339'. [ 463.370140][T10846] netlink: 'syz.4.1339': attribute type 4 has an invalid length. [ 463.382471][T10846] netlink: 'syz.4.1339': attribute type 5 has an invalid length. [ 463.404134][T10846] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1339'. [ 463.444976][ T5737] kl5kusb105 5-1:4.44: KL5KUSB105D / PalmConnect converter detected [ 463.475944][ T5737] usb 5-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 463.500740][T10866] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 463.514665][ T5737] usb 5-1: USB disconnect, device number 82 [ 463.528340][T10866] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 463.538427][ T5737] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 463.560183][T10866] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 463.566707][ T5737] kl5kusb105 5-1:4.44: device disconnected [ 463.581966][T10866] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 463.707233][T10877] netlink: 'syz.5.1347': attribute type 10 has an invalid length. [ 463.715095][T10877] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1347'. [ 463.782658][T10879] lo speed is unknown, defaulting to 1000 [ 463.799721][T10879] lo speed is unknown, defaulting to 1000 [ 464.018932][T10887] overlayfs: failed to resolve './file0': -2 [ 464.234445][T10890] loop9: detected capacity change from 0 to 524287936 [ 464.573647][T10901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.589968][ T5798] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 464.591562][T10901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.611184][T10903] vlan2: entered promiscuous mode [ 464.616803][T10903] bridge0: entered promiscuous mode [ 464.760626][ T5798] usb 6-1: Using ep0 maxpacket: 32 [ 464.771735][ T5798] usb 6-1: config 4 has an invalid interface number: 44 but max is 0 [ 464.779875][ T5798] usb 6-1: config 4 has no interface number 0 [ 464.786339][ T5798] usb 6-1: config 4 interface 44 has no altsetting 0 [ 464.802419][ T5798] usb 6-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice= a.ee [ 464.813011][ T5798] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.824581][ T5798] usb 6-1: Product: syz [ 464.824681][ T10] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 464.828850][ T5798] usb 6-1: Manufacturer: syz [ 464.843284][ T5798] usb 6-1: SerialNumber: syz [ 464.879949][ T5715] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 465.060865][ T5715] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.070453][ T10] usb 2-1: device descriptor read/64, error -71 [ 465.072419][ T5715] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.087938][ T5715] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 465.100865][ T5715] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 465.110332][ T5715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.125059][ T5715] usb 5-1: config 0 descriptor?? [ 465.136979][ T5798] kl5kusb105 6-1:4.44: KL5KUSB105D / PalmConnect converter detected [ 465.151575][ T5798] usb 6-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 465.165203][ T5798] usb 6-1: USB disconnect, device number 18 [ 465.173788][ T5798] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 465.185530][ T5798] kl5kusb105 6-1:4.44: device disconnected [ 465.220375][ T9721] Bluetooth: hci5: command 0x0406 tx timeout [ 465.241420][ T5737] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 465.326926][ T10] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 465.403761][ T5737] usb 3-1: config 1 interface 0 has no altsetting 0 [ 465.412791][ T5737] usb 3-1: string descriptor 0 read error: -22 [ 465.419054][ T5737] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.40 [ 465.428252][ T5737] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.465875][ T10] usb 2-1: device descriptor read/64, error -71 [ 465.569871][ T5715] hid_parser_main: 104 callbacks suppressed [ 465.569885][ T5715] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 465.583705][ T10] usb usb2-port1: attempt power cycle [ 465.598765][ T5715] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 465.606387][ T5715] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 465.613825][ T5715] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 465.614821][T10909] tipc: Enabling of bearer rejected, failed to enable media [ 465.631002][ T5715] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 465.636202][T10909] input: syz1 as /devices/virtual/input/input43 [ 465.639137][ T5715] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 465.668055][ T5715] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 465.676516][ T5715] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 465.685020][ T5715] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 465.693242][ T5715] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 465.719507][ T5715] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 465.958458][T10903] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: 0, delta: -1 [ 465.967101][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 465.967117][ T30] audit: type=1804 audit(1781664156.555:960): pid=10903 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.1357" name="/newroot/241/file0" dev="tmpfs" ino=1273 res=1 errno=0 [ 465.995856][T10903] ref_ctr decrement failed for inode: 0x4f9 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807eb59980 [ 466.006871][ T10] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 466.020927][T10903] uprobe: syz.4.1357:10903 failed to unregister, leaking uprobe [ 466.057717][ T10] usb 2-1: device descriptor read/8, error -71 [ 466.159778][ T30] audit: type=1400 audit(1781664156.752:961): avc: denied { bind } for pid=10915 comm="syz.5.1360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 466.165187][T10916] vlan2: entered promiscuous mode [ 466.323529][T10920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.363776][ T10] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 466.399559][ T9] usb 5-1: USB disconnect, device number 83 [ 466.410360][T10920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.440349][ T10] usb 2-1: device descriptor read/8, error -71 [ 466.475903][ T30] audit: type=1804 audit(1781664157.051:962): pid=10916 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1361" name="/newroot/275/file0" dev="tmpfs" ino=1475 res=1 errno=0 [ 466.478351][T10916] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: 0, delta: -1 [ 466.507136][T10916] ref_ctr decrement failed for inode: 0x5c3 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802c14a640 [ 466.518756][T10916] uprobe: syz.3.1361:10916 failed to unregister, leaking uprobe [ 466.556232][ T10] usb usb2-port1: unable to enumerate USB device [ 466.599289][T10927] netlink: 332 bytes leftover after parsing attributes in process `syz.5.1363'. [ 466.865722][ T9] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 467.026103][ T9] usb 6-1: device descriptor read/64, error -71 [ 467.171381][T10931] can0: slcan on ttyS3. [ 467.293270][ T9] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 467.316788][ T30] audit: type=1400 audit(1781664157.837:963): avc: denied { write } for pid=10933 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 467.399655][ T30] audit: type=1400 audit(1781664157.912:964): avc: denied { write } for pid=10946 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 467.434980][ T9] usb 6-1: device descriptor read/64, error -71 [ 467.445077][ T9721] Bluetooth: hci5: command 0x0406 tx timeout [ 467.470972][T10951] fuse: Unknown parameter 'groµðGƒq00000000000000000000' [ 467.475845][T10937] can0 (unregistered): slcan off ttyS3. [ 467.562470][ T9] usb usb6-port1: attempt power cycle [ 467.593660][T10957] lo speed is unknown, defaulting to 1000 [ 467.600601][T10957] lo speed is unknown, defaulting to 1000 [ 467.647063][ T30] audit: type=1400 audit(1781664158.146:965): avc: denied { bind } for pid=10954 comm="syz.3.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 467.706715][ T30] audit: type=1400 audit(1781664158.202:966): avc: denied { write } for pid=10952 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 467.793576][ T30] audit: type=1400 audit(1781664158.277:967): avc: denied { write } for pid=10972 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 467.899757][T10978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.926176][T10978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.934775][ T9] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 467.950219][ T30] audit: type=1400 audit(1781664158.427:968): avc: denied { create } for pid=10960 comm="syz.4.1369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 467.989220][ T9] usb 6-1: device descriptor read/8, error -71 [ 468.205218][ T5737] usbhid 3-1:1.0: can't add hid device: -71 [ 468.211196][ T5737] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 468.244969][ T10] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 468.256424][ T5737] usb 3-1: USB disconnect, device number 80 [ 468.260600][T10982] xt_connbytes: Forcing CT accounting to be enabled [ 468.266825][ T9] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 468.281765][T10982] Cannot find set identified by id 0 to match [ 468.309033][ T9] usb 6-1: device descriptor read/8, error -71 [ 468.416296][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 468.427310][ T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 468.438550][ T9] usb usb6-port1: unable to enumerate USB device [ 468.445556][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.458013][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.471490][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 468.484772][ T10] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 468.497146][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.515989][ T10] usb 2-1: config 0 descriptor?? [ 468.725099][ T5737] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 468.803082][T10990] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.857470][T10991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.867183][T10991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.875798][ T4423] usb 5-1: new full-speed USB device number 84 using dummy_hcd [ 468.890779][T10990] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.902210][ T5737] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 468.915739][ T5737] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 468.926162][ T5737] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 468.935644][ T5737] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 468.945154][ T5737] usb 3-1: SerialNumber: syz [ 468.982206][ T10] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5013.001D/input/input44 [ 469.005215][T10990] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.047831][ T4423] usb 5-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 469.059095][ T4423] usb 5-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.070670][ T4423] usb 5-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 469.084432][ T4423] usb 5-1: config 0 interface 0 has no altsetting 0 [ 469.094203][T10990] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.105636][ T10] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5013.001D/input/input45 [ 469.126823][ T4423] usb 5-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 469.139897][ T4423] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.149995][ T4423] usb 5-1: config 0 descriptor?? [ 469.162966][ T10] kye 0003:0458:5013.001D: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.1-1/input0 [ 469.185600][T10986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.218895][T10986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.247927][ T76] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.271161][ T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.301862][ T36] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.314245][ T10] usb 2-1: USB disconnect, device number 71 [ 469.334011][ T5737] usb 3-1: 0:2 : does not exist [ 469.350049][ T76] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.354221][ T5737] usb 3-1: unit 10 not found! [ 469.364918][ T5737] usb 3-1: unit 14 not found! [ 469.635201][ T5737] usb 3-1: USB disconnect, device number 81 [ 469.665545][ T9721] Bluetooth: hci5: command 0x0406 tx timeout [ 469.737495][ T4423] usbhid 5-1:0.0: can't add hid device: -71 [ 469.749430][ T4423] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 469.772723][ T4423] usb 5-1: USB disconnect, device number 84 [ 470.634400][ T5798] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 471.452487][ T5798] usb 2-1: Using ep0 maxpacket: 16 [ 471.765326][ T5798] usb 2-1: config 0 has no interfaces? [ 471.772707][ T5798] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 471.782095][ T5798] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.790281][ T5798] usb 2-1: Product: syz [ 471.794735][ T5798] usb 2-1: Manufacturer: syz [ 471.799794][ T5798] usb 2-1: SerialNumber: syz [ 471.880557][ T5798] usb 2-1: config 0 descriptor?? [ 471.890074][ T9721] Bluetooth: hci5: command 0x0406 tx timeout [ 471.993301][T11021] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1382'. [ 472.775886][ T9721] Bluetooth: hci5: unexpected event for opcode 0x202f [ 473.163243][T11037] netlink: 'syz.5.1385': attribute type 12 has an invalid length. [ 473.463171][ T24] usb 2-1: USB disconnect, device number 72 [ 473.575412][T11049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.585684][T11049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.598025][ T5798] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 473.770783][ T1964] block nbd1: Possible stuck request ffff88802877e000: control (read@0,1024B). Runtime 330 seconds [ 473.781900][ T1964] block nbd1: Possible stuck request ffff88802877e1c0: control (read@1024,1024B). Runtime 330 seconds [ 473.801599][ T1964] block nbd1: Possible stuck request ffff88802877e380: control (read@2048,1024B). Runtime 330 seconds [ 473.805321][T11055] loop9: detected capacity change from 0 to 524287936 [ 473.812696][ T1964] block nbd1: Possible stuck request ffff88802877e540: control (read@3072,1024B). Runtime 330 seconds [ 473.875931][ T24] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 473.884150][ T5798] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 473.896110][ T5798] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 473.909927][ T5798] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 473.926501][ T5798] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 473.936413][ T5798] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.945301][ T5798] usb 5-1: Product: syz [ 473.949714][ T5798] usb 5-1: Manufacturer: syz [ 473.954508][ T5798] usb 5-1: SerialNumber: syz [ 473.970471][ T5798] usb 5-1: config 0 descriptor?? [ 473.978761][T11041] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 474.118204][T11041] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 474.138585][ T5798] usb 5-1: ucan: probing device on interface #0 [ 474.147725][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 474.164310][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 474.175005][ T24] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 474.200857][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 474.213472][ T24] usb 2-1: SerialNumber: syz [ 474.464329][T11047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.769933][ T30] audit: type=1400 audit(1781664164.809:969): avc: denied { ioctl } for pid=11058 comm="syz.3.1394" path="socket:[41326]" dev="sockfs" ino=41326 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 474.806093][T11047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.886608][ T24] usb 2-1: 0:2 : does not exist [ 474.898100][ T24] usb 2-1: unit 10 not found! [ 474.904214][ T24] usb 2-1: unit 14 not found! [ 474.934642][ T24] usb 2-1: USB disconnect, device number 73 [ 474.969882][ T5798] ucan 5-1:0.0: probe with driver ucan failed with error -71 [ 474.988469][ T5798] usb 5-1: USB disconnect, device number 85 [ 475.544605][ T30] audit: type=1400 audit(1781664165.539:970): avc: denied { ioctl } for pid=11076 comm="syz.5.1398" path="/dev/input/mice" dev="devtmpfs" ino=917 ioctlcmd=0x7441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 476.301125][T11092] xt_connbytes: Forcing CT accounting to be enabled [ 476.337454][T11092] set match dimension is over the limit! [ 476.348113][T11094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.359721][T11094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.825001][T11102] netlink: 'syz.5.1406': attribute type 4 has an invalid length. [ 476.857840][T11102] netlink: 'syz.5.1406': attribute type 4 has an invalid length. [ 477.221146][T11109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1408'. [ 477.526450][ T30] audit: type=1400 audit(1781664167.392:971): avc: denied { shutdown } for pid=11111 comm="syz.4.1409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 477.892681][T11119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.950462][T11119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.218817][ T30] audit: type=1804 audit(1781664168.037:972): pid=11119 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1412" name="/newroot/285/file0" dev="tmpfs" ino=1529 res=1 errno=0 [ 478.320421][T11127] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: 0, delta: -1 [ 478.400709][T11127] ref_ctr decrement failed for inode: 0x5f9 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807eb5b300 [ 478.565232][T11127] uprobe: syz.3.1412:11127 failed to unregister, leaking uprobe [ 479.143263][T11145] xt_connbytes: Forcing CT accounting to be enabled [ 479.149906][T11145] set match dimension is over the limit! [ 479.165649][ T7075] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 479.191161][T11145] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1420'. [ 479.200545][T11145] netlink: 'syz.1.1420': attribute type 2 has an invalid length. [ 479.250855][ T10] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 479.300760][ T1964] block nbd4: Possible stuck request ffff8880288b0000: control (read@0,1024B). Runtime 90 seconds [ 479.312275][ T1964] block nbd4: Possible stuck request ffff8880288b01c0: control (read@1024,1024B). Runtime 90 seconds [ 479.323381][ T1964] block nbd4: Possible stuck request ffff8880288b0380: control (read@2048,1024B). Runtime 90 seconds [ 479.334458][ T1964] block nbd4: Possible stuck request ffff8880288c5080: control (read@3072,1024B). Runtime 90 seconds [ 479.336715][ T7075] usb 3-1: Using ep0 maxpacket: 32 [ 479.352570][ T7075] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 479.360678][ T24] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 479.477227][T11151] ubi: mtd0 is already attached to ubi16 [ 480.359204][ T7075] usb 3-1: config 0 has no interface number 0 [ 480.365517][ T7075] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 480.375451][ T7075] usb 3-1: config 0 interface 89 has no altsetting 0 [ 480.386845][ T7075] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 480.403483][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.416859][ T7075] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.425711][T11153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.435794][ T10] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 480.446034][ T7075] usb 3-1: Product: syz [ 480.487516][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.490821][T11153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.495743][ T7075] usb 3-1: Manufacturer: syz [ 480.508726][ T7075] usb 3-1: SerialNumber: syz [ 480.511990][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 480.513967][ T10] usb 5-1: config 0 descriptor?? [ 480.525763][ T7075] usb 3-1: config 0 descriptor?? [ 480.538148][ T7075] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 480.539292][ T24] usb 6-1: config 4 has an invalid interface number: 44 but max is 0 [ 480.548117][ T7075] em28xx 3-1:0.89: Video interface 89 found: [ 480.575938][ T24] usb 6-1: config 4 has no interface number 0 [ 480.586701][ T24] usb 6-1: config 4 interface 44 has no altsetting 0 [ 480.600643][ T24] usb 6-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice= a.ee [ 480.610299][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.618889][ T24] usb 6-1: Product: syz [ 480.623643][ T24] usb 6-1: Manufacturer: syz [ 480.628348][ T24] usb 6-1: SerialNumber: syz [ 480.742247][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 480.748296][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 480.759512][ T10] usb 5-1: USB disconnect, device number 86 [ 481.075764][ T24] kl5kusb105 6-1:4.44: KL5KUSB105D / PalmConnect converter detected [ 481.085655][ T24] usb 6-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 481.096815][ T24] usb 6-1: USB disconnect, device number 23 [ 481.104774][ T24] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 481.115220][ T24] kl5kusb105 6-1:4.44: device disconnected [ 481.210011][ T7075] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 481.247232][T11160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.256415][T11160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.264904][ T10] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 481.281866][ T30] audit: type=1804 audit(1781664170.910:973): pid=11160 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1424" name="/newroot/287/file0" dev="tmpfs" ino=1540 res=1 errno=0 [ 481.308676][T11160] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: 0, delta: -1 [ 481.318475][T11160] ref_ctr decrement failed for inode: 0x604 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888038616600 [ 481.329509][T11160] uprobe: syz.3.1424:11160 failed to unregister, leaking uprobe [ 481.441491][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 481.447969][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.459335][ T10] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 481.470463][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.480246][ T10] usb 5-1: config 0 descriptor?? [ 481.488042][ T10] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 481.505900][ T10] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 481.520410][T11162] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.551132][T11162] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.614894][T11162] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.672005][T11162] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.693129][T11165] lo speed is unknown, defaulting to 1000 [ 481.699633][T11165] lo speed is unknown, defaulting to 1000 [ 481.740630][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.755035][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.769037][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.782473][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.826217][ T10] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 481.865149][ T7075] em28xx 3-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=64) [ 481.874890][ T7075] em28xx 3-1:0.89: board has no eeprom [ 481.989715][ T24] usb 5-1: USB disconnect, device number 87 [ 482.001780][ T24] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 482.020877][ T10] usb 2-1: config 0 has no interfaces? [ 482.031352][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 482.049479][ T10] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 482.057780][ T10] usb 2-1: Product: syz [ 482.062012][ T10] usb 2-1: Manufacturer: syz [ 482.071213][ T10] usb 2-1: SerialNumber: syz [ 482.080473][ T10] usb 2-1: config 0 descriptor?? [ 482.320007][ T7075] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 482.462612][ T7075] em28xx 3-1:0.89: analog set to bulk mode. [ 482.468616][ T10] em28xx 3-1:0.89: Registering V4L2 extension [ 482.484785][ T7075] usb 3-1: USB disconnect, device number 82 [ 482.503195][ T7075] em28xx 3-1:0.89: Disconnecting em28xx [ 482.536905][ T10] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 482.553371][ T10] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 482.566437][ T10] em28xx 3-1:0.89: No AC97 audio processor [ 482.583094][ T10] usb 3-1: Decoder not found [ 482.592079][ T10] em28xx 3-1:0.89: failed to create media graph [ 482.606530][ T10] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 482.628738][ T10] em28xx 3-1:0.89: Registering snapshot button... [ 482.629195][ T5715] usb 2-1: USB disconnect, device number 74 [ 482.665625][ T10] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input47 [ 482.703858][ T10] em28xx 3-1:0.89: Remote control support is not available for this card. [ 482.712448][ T7075] em28xx 3-1:0.89: Closing input extension [ 482.720290][T11176] loop9: detected capacity change from 0 to 2640 [ 482.723789][ T7075] em28xx 3-1:0.89: Deregistering snapshot button [ 482.732889][T11176] Buffer I/O error on dev loop9, logical block 0, async page read [ 482.757554][T11176] Buffer I/O error on dev loop9, logical block 0, async page read [ 482.766046][T11176] Buffer I/O error on dev loop9, logical block 0, async page read [ 482.788682][ T7075] em28xx 3-1:0.89: Freeing device [ 482.983005][T11176] Buffer I/O error on dev loop9, logical block 1, async page read [ 483.019581][T11176] Dev loop9: unable to read RDB block 8 [ 483.019728][T11181] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 483.054106][T11176] Buffer I/O error on dev loop9, logical block 3, async page read [ 483.077191][T11176] loop9: unable to read partition table [ 483.096894][T11176] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 483.107639][ T6017] Buffer I/O error on dev loop9, logical block 3, async page read [ 483.197062][ T30] audit: type=1400 audit(1781664172.698:974): avc: denied { mounton } for pid=11192 comm="syz.4.1435" path="/258/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 483.221054][ T7075] kernel write not supported for file /sg0 (pid: 7075 comm: kworker/0:9) [ 483.506483][T11209] ubi: mtd0 is already attached to ubi16 [ 484.158426][T11198] team0: Port device dummy0 removed [ 484.328817][ T30] audit: type=1400 audit(1781664173.755:975): avc: denied { name_bind 0x1000000 } for pid=11214 comm="syz.3.1439" path="socket:[41860]" dev="sockfs" ino=41860 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 484.370984][T11215] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1439'. [ 484.468960][ T4423] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 484.479955][ T7075] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 484.717832][T11218] lo speed is unknown, defaulting to 1000 [ 484.744933][T11218] lo speed is unknown, defaulting to 1000 [ 484.800089][ T4423] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 484.810370][ T4423] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.819220][ T4423] usb 5-1: Product: syz [ 484.824597][ T4423] usb 5-1: Manufacturer: syz [ 484.830083][ T4423] usb 5-1: SerialNumber: syz [ 484.840118][ T4423] usb 5-1: config 0 descriptor?? [ 484.846762][ T30] audit: type=1400 audit(1781664174.242:976): avc: denied { map } for pid=11219 comm="syz.2.1441" path="socket:[41882]" dev="sockfs" ino=41882 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 484.870142][ T7075] usb 6-1: Using ep0 maxpacket: 16 [ 484.875886][ T4423] ch341 5-1:0.0: ch341-uart converter detected [ 484.891043][ T7075] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 484.902625][ T7075] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.915439][ T7075] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.926250][ T7075] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 484.940170][ T7075] usb 6-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 484.949585][ T7075] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.970862][ T7075] usb 6-1: config 0 descriptor?? [ 485.071120][T11226] loop9: detected capacity change from 0 to 2640 [ 485.094832][T11226] Buffer I/O error on dev loop9, logical block 0, async page read [ 485.131101][T11226] Buffer I/O error on dev loop9, logical block 0, async page read [ 485.166031][ T30] audit: type=1400 audit(1781664174.523:977): avc: denied { read } for pid=11200 comm="syz.4.1438" dev="nsfs" ino=4026533206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 485.211486][T11227] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 485.256433][ T10] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 485.263558][T11226] Dev loop9: unable to read RDB block 8 [ 485.287683][ T30] audit: type=1400 audit(1781664174.523:978): avc: denied { open } for pid=11200 comm="syz.4.1438" path="net:[4026533206]" dev="nsfs" ino=4026533206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 485.378593][T11226] loop9: unable to read partition table [ 485.444900][T11226] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 485.986242][T11228] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1438'. [ 486.460644][ T4975] ldm_validate_partition_table(): Disk read failed. [ 486.494865][ T4975] Dev loop9: unable to read RDB block 0 [ 486.532268][ T4975] loop9: unable to read partition table [ 486.748206][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 486.764358][ T4423] usb 5-1: failed to send control message: -110 [ 486.770672][ T4423] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 486.804514][ T7075] input: HID 0458:5013 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5013.001E/input/input48 [ 486.818597][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 486.854051][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 486.870438][ T10] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 486.880714][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.889016][ T10] usb 3-1: Product: syz [ 486.894549][ T7075] input: HID 0458:5013 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5013.001E/input/input49 [ 486.907170][ T10] usb 3-1: Manufacturer: syz [ 486.912555][ T10] usb 3-1: SerialNumber: syz [ 486.921794][ T7075] kye 0003:0458:5013.001E: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.5-1/input0 [ 486.936451][ T10] usb 3-1: config 0 descriptor?? [ 486.941892][T11224] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 486.950673][T11224] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 486.967008][ T10] usb 3-1: ucan: probing device on interface #0 [ 486.990236][ T7075] usb 6-1: USB disconnect, device number 24 [ 487.029628][T11244] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.113656][T11246] fido_id[11246]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 487.134820][T11244] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.181264][ T10] usb 3-1: ucan: device protocol version 0 is not supported [ 487.184954][ T5960] usb 5-1: USB disconnect, device number 88 [ 487.198823][ T5960] ch341 5-1:0.0: device disconnected [ 487.204795][ T10] usb 3-1: ucan: probe failed; try to update the device firmware [ 487.236583][T11244] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.299670][T11244] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.370684][ T5798] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 487.397873][ T7075] usb 3-1: USB disconnect, device number 83 [ 487.505389][T11252] tc_dump_action: action bad kind [ 487.743097][ T5798] usb 2-1: config 0 has no interfaces? [ 487.761477][ T5798] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 487.778842][ T5798] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 487.787056][ T5798] usb 2-1: Product: syz [ 487.792381][ T5798] usb 2-1: Manufacturer: syz [ 487.798482][ T5798] usb 2-1: SerialNumber: syz [ 487.806790][ T5798] usb 2-1: config 0 descriptor?? [ 487.830539][ T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.841989][ T36] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.853657][ T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.864989][ T36] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.053508][ T24] usb 2-1: USB disconnect, device number 75 [ 488.066919][ T5798] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 488.265122][ T30] audit: type=1400 audit(1781664177.386:979): avc: denied { allowed } for pid=11257 comm="syz.2.1451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 488.288212][ T5798] usb 6-1: Using ep0 maxpacket: 16 [ 488.307069][ T5798] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 488.319992][ T5798] usb 6-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xCF, changing to 0x8F [ 488.331837][ T5798] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 488.345300][ T5798] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 488.356088][ T5798] usb 6-1: config 0 interface 0 has no altsetting 0 [ 488.364500][ T5798] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 488.374397][T11261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.383436][ T5798] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.391941][ T5798] usb 6-1: Product: syz [ 488.398960][T11261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.406699][ T5798] usb 6-1: Manufacturer: syz [ 488.411453][ T5798] usb 6-1: SerialNumber: syz [ 488.417523][ T5798] usb 6-1: config 0 descriptor?? [ 488.431597][T11261] netlink: 'syz.3.1452': attribute type 21 has an invalid length. [ 488.440096][T11261] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1452'. [ 488.450344][T11261] netlink: 'syz.3.1452': attribute type 4 has an invalid length. [ 488.458846][T11261] netlink: 'syz.3.1452': attribute type 5 has an invalid length. [ 488.467178][T11261] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1452'. [ 488.654651][ T5798] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input50 [ 488.675216][ T4960] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 488.695743][ T4960] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 488.722126][ T4960] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 488.738050][ T4960] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 488.747219][ T4960] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 488.756360][ T6017] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 488.770490][T11265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1454'. [ 488.781257][ T4960] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 488.948702][T11254] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 488.961210][T11254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.008199][T11254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.133067][T11272] ubi: mtd0 is already attached to ubi16 [ 490.068027][ T4423] usb 6-1: USB disconnect, device number 25 [ 491.137763][ T9721] Bluetooth: hci5: unexpected event for opcode 0x202f [ 491.281671][ T30] audit: type=1400 audit(1781664180.259:980): avc: denied { mounton } for pid=11281 comm="syz.2.1460" path="/278/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 491.307558][T11286] overlayfs: failed to resolve './file0/file0': -2 [ 491.314871][T11274] loop9: detected capacity change from 0 to 524287936 [ 492.133609][T11298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1465'. [ 492.267526][T11301] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.304146][ T31] INFO: task syz.0.826:8981 blocked for more than 143 seconds. [ 492.411415][ T31] Tainted: G L syzkaller #0 [ 492.419890][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 492.430451][ T31] task:syz.0.826 state:D stack:27456 pid:8981 tgid:8980 ppid:5608 task_flags:0x400140 flags:0x00080002 [ 492.444609][ T31] Call Trace: [ 492.485383][ T31] [ 492.488765][ T31] __schedule+0x125c/0x6730 [ 492.493716][ T31] ? do_raw_spin_lock+0x128/0x260 [ 492.498763][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 492.504251][ T31] ? debug_mutex_add_waiter+0x122/0x200 [ 492.509814][ T31] ? rcu_is_watching+0x12/0xc0 [ 492.514652][ T31] ? __pfx___schedule+0x10/0x10 [ 492.519512][ T31] ? rcu_is_watching+0x12/0xc0 [ 492.524304][ T31] ? schedule+0x2bf/0x390 [ 492.528629][ T31] ? lock_release+0x24d/0x310 [ 492.533297][ T31] schedule+0xdd/0x390 [ 492.537443][ T31] schedule_preempt_disabled+0x13/0x30 [ 492.542922][ T31] __mutex_lock+0xccc/0x1bd0 [ 492.547704][ T31] ? sync_bdevs+0x153/0x480 [ 492.552222][ T31] ? rcu_is_watching+0x12/0xc0 [ 492.557042][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 492.562083][ T31] ? __mutex_unlock_slowpath+0x350/0x910 [ 492.568014][ T31] ? iput.part.0+0x1a0/0x1050 [ 492.572697][ T31] ? sync_bdevs+0x53/0x480 [ 492.577183][ T31] ? lock_release+0x211/0x310 [ 492.581865][ T31] ? sync_bdevs+0x153/0x480 [ 492.586348][ T31] sync_bdevs+0x153/0x480 [ 492.590681][ T31] ksys_sync+0xb0/0xf0 [ 492.594758][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 492.599572][ T31] ? rcu_is_watching+0x12/0xc0 [ 492.604341][ T31] ? trace_irq_enable.constprop.0+0x122/0x160 [ 492.610435][ T31] __do_sys_sync+0xe/0x20 [ 492.614782][ T31] do_syscall_64+0x115/0x870 [ 492.619607][ T31] ? clear_bhb_loop+0x40/0x90 [ 492.624316][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.630231][ T31] RIP: 0033:0x7f327e59ce59 [ 492.634657][ T31] RSP: 002b:00007f327f394028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 492.643380][ T31] RAX: ffffffffffffffda RBX: 00007f327e815fa0 RCX: 00007f327e59ce59 [ 492.651370][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 492.659468][ T31] RBP: 00007f327e815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 492.667518][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 492.675508][ T31] R13: 00007f327e816038 R14: 00007f327e815fa0 R15: 00007ffd766d6178 [ 492.683544][ T31] [ 492.686603][ T31] INFO: lockdep is turned off. [ 492.691359][ T31] NMI backtrace for cpu 0 [ 492.691375][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 492.691402][ T31] Tainted: [L]=SOFTLOCKUP [ 492.691409][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 492.691421][ T31] Call Trace: [ 492.691427][ T31] [ 492.691434][ T31] dump_stack_lvl+0x100/0x190 [ 492.691456][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 492.691476][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 492.691489][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 492.691507][ T31] sys_info+0x141/0x190 [ 492.691522][ T31] watchdog+0xcb1/0x1030 [ 492.691540][ T31] ? trace_irq_enable.constprop.0+0x122/0x160 [ 492.691551][ T31] ? __pfx_watchdog+0x10/0x10 [ 492.691567][ T31] ? __kthread_parkme+0x18c/0x230 [ 492.691581][ T31] ? kthread+0x13a/0x450 [ 492.691600][ T31] ? __pfx_watchdog+0x10/0x10 [ 492.691615][ T31] kthread+0x370/0x450 [ 492.691629][ T31] ? __pfx_kthread+0x10/0x10 [ 492.691643][ T31] ret_from_fork+0x72b/0xd50 [ 492.691656][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 492.691668][ T31] ? __switch_to+0x800/0x10f0 [ 492.691683][ T31] ? __pfx_kthread+0x10/0x10 [ 492.691698][ T31] ret_from_fork_asm+0x1a/0x30 [ 492.691715][ T31] [ 492.691727][ T31] Sending NMI from CPU 0 to CPUs 1: [ 492.822381][ C1] NMI backtrace for cpu 1 [ 492.822398][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 492.822424][ C1] Tainted: [L]=SOFTLOCKUP [ 492.822431][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 492.822443][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 492.822468][ C1] Code: c6 90 02 e9 c3 48 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 e6 1e 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 492.822486][ C1] RSP: 0018:ffffc90000197e00 EFLAGS: 00000246 [ 492.822501][ C1] RAX: 0000000003e5198c RBX: ffff88801e2ba540 RCX: ffffffff8b8cb2b5 [ 492.822514][ C1] RDX: 0000000000000001 RSI: ffffffff8c1ce980 RDI: ffffffff81de1ea7 [ 492.822526][ C1] RBP: ffffed1003c574a8 R08: 0000000000000000 R09: ffffed10170a678d [ 492.822538][ C1] R10: ffff8880b8533c6b R11: ffffffff81d4f52c R12: 0000000000000000 [ 492.822550][ C1] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 [ 492.822563][ C1] FS: 0000000000000000(0000) GS:ffff88812445f000(0000) knlGS:0000000000000000 [ 492.822580][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 492.822592][ C1] CR2: 00007fffd7b8ed20 CR3: 000000007ec60000 CR4: 00000000003526f0 [ 492.822604][ C1] Call Trace: [ 492.822610][ C1] [ 492.822616][ C1] default_idle+0x9/0x10 [ 492.822638][ C1] default_idle_call+0x6c/0xb0 [ 492.822659][ C1] do_idle+0x3a7/0x5b0 [ 492.822680][ C1] ? __pfx_do_idle+0x10/0x10 [ 492.822703][ C1] cpu_startup_entry+0x4f/0x60 [ 492.822723][ C1] start_secondary+0x21d/0x2d0 [ 492.822742][ C1] ? __pfx_start_secondary+0x10/0x10 [ 492.822762][ C1] common_startup_64+0x13e/0x158 [ 492.822791][ C1] [ 492.993681][ T5737] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 493.002228][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 493.009073][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 493.019714][ T31] Tainted: [L]=SOFTLOCKUP [ 493.024005][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 493.034027][ T31] Call Trace: [ 493.037281][ T31] [ 493.040184][ T31] dump_stack_lvl+0x100/0x190 [ 493.044833][ T31] vpanic+0x552/0x970 [ 493.048783][ T31] ? __pfx_vpanic+0x10/0x10 [ 493.053257][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 493.059386][ T31] panic+0xd1/0xe0 [ 493.063077][ T31] ? __pfx_panic+0x10/0x10 [ 493.067461][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 493.073589][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 493.079716][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 493.085843][ T31] ? watchdog.cold+0x1ec/0x234 [ 493.090576][ T31] ? watchdog+0xcc1/0x1030 [ 493.094967][ T31] watchdog.cold+0x1fd/0x234 [ 493.099532][ T31] ? trace_irq_enable.constprop.0+0x122/0x160 [ 493.105571][ T31] ? __pfx_watchdog+0x10/0x10 [ 493.110223][ T31] ? __kthread_parkme+0x18c/0x230 [ 493.115221][ T31] ? kthread+0x13a/0x450 [ 493.119435][ T31] ? __pfx_watchdog+0x10/0x10 [ 493.124086][ T31] kthread+0x370/0x450 [ 493.128128][ T31] ? __pfx_kthread+0x10/0x10 [ 493.132690][ T31] ret_from_fork+0x72b/0xd50 [ 493.137251][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 493.142332][ T31] ? __switch_to+0x800/0x10f0 [ 493.146983][ T31] ? __pfx_kthread+0x10/0x10 [ 493.151549][ T31] ret_from_fork_asm+0x1a/0x30 [ 493.156286][ T31] [ 493.159516][ T31] Kernel Offset: disabled [ 493.163829][ T31] Rebooting in 86400 seconds..