last executing test programs: 7m44.651694884s ago: executing program 3 (id=99): prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r3 = fsopen(&(0x7f0000000040)='exfat\x00', 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@link_local, @random="2059249b3790", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "108114", 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0003"], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r8 = getpid() r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c8fe3ce", @ANYRES16=r10, @ANYBLOB="010027bd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r8, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) socket$l2tp(0x2, 0x2, 0x73) 7m43.003966878s ago: executing program 3 (id=105): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r0, 0x406, r1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000140)={0x40000012}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) setns(r2, 0x8000000) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x10, 0x17, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7f80000}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa11c}}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x5}, @map_fd={0x18, 0x2, 0x1, 0x0, r4}, @ldst={0x2, 0x3, 0x2, 0xe, 0x3, 0x137, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @call={0x85, 0x0, 0x0, 0xa8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5}, 0x94) 7m42.790989536s ago: executing program 3 (id=107): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3f, 0x3}) 7m40.148003259s ago: executing program 3 (id=112): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) open(0x0, 0x0, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x1}, 0x94) socket$packet(0x11, 0x3, 0x300) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$audio1(0xffffffffffffff9c, 0x0, 0x4141, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r3, 0x8008f513, &(0x7f0000000400)) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4, 0x0, 0xd}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r5 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r5, 0xffffffff80000601, 0xee01, &(0x7f0000000300)={0xffffffffffff8001, 0x7, 0x0, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000700)='./file1\x00', 0x2000775) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 7m37.821431444s ago: executing program 3 (id=118): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000000)='GPL\x00', 0x54be, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000802000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000c00000000000000f00000000000000000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xd, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) iopl(0x40) socket$isdn_base(0x22, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x840000000002, 0x3, 0xff) 7m36.717982233s ago: executing program 3 (id=122): bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x1b, 0xc, &(0x7f0000000040)=ANY=[], 0x0, 0x400, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000100)={0x0, 0x207a120, 0x100, {0x763039aa, 0x116}, 0x50, 0x1}) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r5, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, 0x35, 0x88) r6 = io_uring_setup(0x68ac, &(0x7f0000000480)={0x0, 0x10000000, 0x1880, 0x2}) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) close_range(r6, r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000"], 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x2c, 0x40, 0x107, 0x70bd27, 0x25dfdbfe, {0x3, 0x7c}, [@typed={0xc, 0xec, 0x0, 0x0, @u64=0x6}, @nested={0x4, 0x1}, @typed={0x8, 0x8, 0x0, 0x0, @u32=0xfffffff8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040090}, 0xc000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) 7m35.712271036s ago: executing program 32 (id=122): bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x1b, 0xc, &(0x7f0000000040)=ANY=[], 0x0, 0x400, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000100)={0x0, 0x207a120, 0x100, {0x763039aa, 0x116}, 0x50, 0x1}) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r5, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, 0x35, 0x88) r6 = io_uring_setup(0x68ac, &(0x7f0000000480)={0x0, 0x10000000, 0x1880, 0x2}) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) close_range(r6, r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000"], 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x2c, 0x40, 0x107, 0x70bd27, 0x25dfdbfe, {0x3, 0x7c}, [@typed={0xc, 0xec, 0x0, 0x0, @u64=0x6}, @nested={0x4, 0x1}, @typed={0x8, 0x8, 0x0, 0x0, @u32=0xfffffff8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040090}, 0xc000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) 3m59.902485919s ago: executing program 4 (id=789): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, &(0x7f0000000040), r1, 0x0, 0x6, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000001140)=""/4151, 0x1037}], 0x1, 0x8b3, 0x1) 3m59.717041506s ago: executing program 4 (id=791): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1) sched_setscheduler(r1, 0x6, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r5, &(0x7f0000000980)={0x2020}, 0x2020) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'veth1_to_hsr\x00'}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e0044000280060002000100000008000100010000000800030003000000080007000500000008000100100000000600020001000000100005800a000400aaaaaaaa", @ANYBLOB], 0x84}}, 0x20008040) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="48000000000101040000d976f7b55be39528fa460000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000000800074000000001080031070000000372ca304e40707738603bb56a192863465a9dc6411d1024aff1ec5e"], 0x48}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_LABELS={0x4}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820) 3m57.45751825s ago: executing program 4 (id=798): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xa9}}, &(0x7f0000000480)='GPL\x00'}, 0x90) r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) finit_module(r0, &(0x7f0000000040)='{@\\/\\#--.\x92#-,\x00', 0x3) 3m57.328834087s ago: executing program 4 (id=799): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) (async) setns(0xffffffffffffffff, 0x2000000) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x1f00, 0x12) (async, rerun: 32) renameat2(r2, &(0x7f0000000080)='\x00', r1, &(0x7f0000000140)='./file0\x00', 0x4) (rerun: 32) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'veth0_to_hsr\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, &(0x7f0000000280)={r2, r1, 0x3}) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) (async, rerun: 64) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000619b3b4063070120af9c0000000109021b0002000000000904b60000ff81ca000904"], 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) (async) socket$netlink(0x10, 0x3, 0x0) (async) getpgrp(r3) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @remote}}, 0x0, 0x4bdd, 0x8, 0xfffffffc, 0x1}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x16, 0x0, 0x8a}, 0x9c) 3m57.150264508s ago: executing program 4 (id=800): sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x80000003}, &(0x7f0000000040)={&(0x7f0000000040)}) r0 = gettid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8}]}, 0x24}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x49, &(0x7f00000002c0)=0x40000006, 0x4) rt_sigqueueinfo(r0, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x66000080) r6 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYRESHEX=r5, @ANYRES64=r0, @ANYRES16=r0, @ANYRES16=r0, @ANYRES32=r5, @ANYRES32=r5], 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'veth1_vlan\x00', 0x0}) r8 = gettid() sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x3f, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100000000000000007fffffff00", @ANYRES32=r7, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r8], 0x28}}, 0x0) 3m56.921979348s ago: executing program 4 (id=801): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000240)={0x2, &(0x7f0000000140)=[{0x48, 0x0, 0x0, 0x6}, {0x6, 0x1, 0xfb, 0x2}]}) write(r1, &(0x7f0000000280)="1a2fdc", 0x3) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000380)=0xc) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r5}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r5, &(0x7f0000000780)}, 0x20) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) 3m55.021611336s ago: executing program 33 (id=801): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000240)={0x2, &(0x7f0000000140)=[{0x48, 0x0, 0x0, 0x6}, {0x6, 0x1, 0xfb, 0x2}]}) write(r1, &(0x7f0000000280)="1a2fdc", 0x3) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000380)=0xc) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r5}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r5, &(0x7f0000000780)}, 0x20) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) 13.395959894s ago: executing program 2 (id=1589): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000180)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2c, 0x3, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001180)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r5, {}, {0x0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xfffffc00}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x310) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) dup(r6) syz_usb_connect(0x3, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x310, 0x4d, 0x5b, 0xaf, 0x10, 0x6e0, 0x319, 0x1f59, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xff, 0x0, 0x80, 0x40, [{{0x9, 0x4, 0x7, 0x4e, 0x2, 0xa9, 0x21, 0xb2, 0x7, [], [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x6, 0x7f, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x60, 0xd, 0x9}}]}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000840)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth0_to_team\x00', 0x7133}) r7 = socket(0x2, 0x80805, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r7, 0x890d, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 10.747851524s ago: executing program 5 (id=1593): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x10c5408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xc, 0x0, r3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000001800000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x1f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r5, 0x0, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) 10.242482075s ago: executing program 6 (id=1594): r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="09020000000000000000667001000000000000000006000414000700ff000000000000000096450000000000000000000000d17c33164d24b74125bf1d9cb6870ab751"], 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x10) 9.916966861s ago: executing program 6 (id=1596): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0xa7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180), &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_open_dev$tty1(0xc, 0x4, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$TIOCL_BLANKSCREEN(r8, 0x4b67, &(0x7f0000000180)) io_uring_enter(r6, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) shutdown(r7, 0x1) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x437, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r1, 0x5394b, 0x601}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r1}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1ff}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @multicast1}}}], 0x20}}], 0x1, 0x8000004) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @multicast1}}}], 0x20}}], 0x1, 0x8000004) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl1\x00', r1, 0x29, 0x3, 0xed, 0x3, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}, @private2, 0x20, 0x0, 0xffff5b75, 0x4a9422b7}}) 9.826463157s ago: executing program 0 (id=1597): r0 = syz_open_procfs(0x0, &(0x7f0000002480)='net/raw6\x00') read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) r1 = socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) syz_emit_ethernet(0x0, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f00000005c0)) fsmount(0xffffffffffffffff, 0x0, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x3, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000024c0), 0xffffffffffffa19a, 0x0) read$FUSE(r0, &(0x7f0000002800)={0x2020}, 0x2020) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000027c0)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x4041030}, 0xc, &(0x7f0000002780)={&(0x7f0000002540)={0x220, 0x1, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xa2, 0x6, "79ab5a38da457c202bf4bb783af1e9be484650c525ec70099878ef8c265a79b3c477c5f382be550f558358812dc228587ef98e25f12833aa972266fa3a434f423f2b0dcd032ccc539bbea2570dd884f24378ddbd625e8acfdd7887a313a03cec35bd5d400282ef1d96d34a14a72963b358333454147709eeebc1d9aadf600cd5f32fc29cf092d72c9461fe7038dd25f6c24fb2f6b9270061a672da9ad07b"}, @NFTA_TABLE_USERDATA={0x71, 0x6, "8fdac659be83088f082907143ce433395896deb3e728a4887a17d78ee5e8615eef9d4f183f5876606d38efda852197530bb462b2cb68b306316e1543317dccc34f2e9eff6cad53133730d161e8f45811924dc6ac2b9629d8cd5412e481e6d3275304ac52c7733586d22f39cdc8"}, @NFTA_TABLE_USERDATA={0xdd, 0x6, "13ab9b0f44c281245fd5df32fe5e6f50fddb8de5fc1863f690be35b620539ec4de38c7aeb683fd38980d7ace190c8ee195832ef417cdb0abf503da23aae1ce6ac8a43daab74f5c76965a46da9710ae65d400aab7ea1ce607b5c2e07f4e9a913eb4be04eef0f870f6a48e4bc9cd64ecd0a9c820e6e18c2567f4c0881326a0e5f4257920df59b31900f951bfd8fb6908e794955033df8a5e89d97ddce5000c93a711ef379f43b01eadf320d1ca998ff9c172a96fa223d49582809e9173f963aeb32f0d7fc5d0a017d887f617001325278210ed7003c878d72338"}]}, 0x220}, 0x1, 0x0, 0x0, 0x20000080}, 0x4091) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x8, &(0x7f0000000040), &(0x7f0000000000)=0x30) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb250400000008000400020000000c0005"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) r5 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_REAPURB(r5, 0x4004550c, &(0x7f0000000380)) 9.815806587s ago: executing program 5 (id=1598): r0 = socket$inet(0xa, 0x801, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000300)=0x0) prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x100020008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000985a968715695e39216b301b0000000000000000000006000079f82013000000000000"], 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x1e, &(0x7f00000003c0)=ANY=[@ANYBLOB="18080000e000000000000000ffffffff18110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b509020000000000dbaaf8ff50000000bf8200000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f1ff7600000018200008", @ANYRES32, @ANYBLOB="0000000009000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x6c}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0xffffffffffffffaf, &(0x7f0000000580)={0x0, 0x54}}, 0x80) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) listen(r0, 0x6) r8 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) close(r8) r9 = socket$nl_generic(0x10, 0x3, 0x10) accept4(r9, &(0x7f0000000000)=@x25, &(0x7f00000000c0)=0x80, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) 8.775486296s ago: executing program 6 (id=1599): r0 = syz_open_procfs(0x0, &(0x7f0000002480)='net/raw6\x00') read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) syz_emit_ethernet(0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)}]) fsmount(0xffffffffffffffff, 0x0, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x3, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000024c0), 0xffffffffffffa19a, 0x0) read$FUSE(r0, &(0x7f0000002800)={0x2020}, 0x2020) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000027c0)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x4041030}, 0xc, &(0x7f0000002780)={&(0x7f0000002540)={0x1f8, 0x1, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x7b, 0x6, "79ab5a38da457c202bf4bb783af1e9be484650c525ec70099878ef8c265a79b3c477c5f382be550f558358812dc228587ef98e25f12833aa972266fa3a434f423f2b0dcd032ccc539bbea2570dd884f24378ddbd625e8acfdd7887a313a03cec35bd5d400282ef1d96d34a14a72963b358333454147709"}, @NFTA_TABLE_USERDATA={0x71, 0x6, "8fdac659be83088f082907143ce433395896deb3e728a4887a17d78ee5e8615eef9d4f183f5876606d38efda852197530bb462b2cb68b306316e1543317dccc34f2e9eff6cad53133730d161e8f45811924dc6ac2b9629d8cd5412e481e6d3275304ac52c7733586d22f39cdc8"}, @NFTA_TABLE_USERDATA={0xdd, 0x6, "13ab9b0f44c281245fd5df32fe5e6f50fddb8de5fc1863f690be35b620539ec4de38c7aeb683fd38980d7ace190c8ee195832ef417cdb0abf503da23aae1ce6ac8a43daab74f5c76965a46da9710ae65d400aab7ea1ce607b5c2e07f4e9a913eb4be04eef0f870f6a48e4bc9cd64ecd0a9c820e6e18c2567f4c0881326a0e5f4257920df59b31900f951bfd8fb6908e794955033df8a5e89d97ddce5000c93a711ef379f43b01eadf320d1ca998ff9c172a96fa223d49582809e9173f963aeb32f0d7fc5d0a017d887f617001325278210ed7003c878d72338"}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x20000080}, 0x4091) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x8, &(0x7f0000000040), &(0x7f0000000000)=0x30) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000000c0)={'broute\x00', 0x0, 0x4, 0x36, [0x7, 0x2, 0x0, 0x2, 0x80000000, 0xfffffffffffffffb], 0x3, &(0x7f0000000000)=[{}, {}, {}], &(0x7f0000000080)=""/54}, &(0x7f0000000140)=0x78) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb250400000008000400020000000c0005"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) r6 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0x10017, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r6, 0x4004550c, &(0x7f0000000380)) 8.486354283s ago: executing program 5 (id=1600): r0 = syz_open_procfs(0x0, &(0x7f0000002480)='net/raw6\x00') read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) syz_emit_ethernet(0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)}]) fsmount(0xffffffffffffffff, 0x0, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x3, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000024c0), 0xffffffffffffa19a, 0x0) read$FUSE(r0, &(0x7f0000002800)={0x2020}, 0x2020) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000027c0)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x4041030}, 0xc, &(0x7f0000002780)={&(0x7f0000002540)={0x1d0, 0x1, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x53, 0x6, "79ab5a38da457c202bf4bb783af1e9be484650c525ec70099878ef8c265a79b3c477c5f382be550f558358812dc228587ef98e25f12833aa972266fa3a434f423f2b0dcd032ccc539bbea2570dd884"}, @NFTA_TABLE_USERDATA={0x71, 0x6, "8fdac659be83088f082907143ce433395896deb3e728a4887a17d78ee5e8615eef9d4f183f5876606d38efda852197530bb462b2cb68b306316e1543317dccc34f2e9eff6cad53133730d161e8f45811924dc6ac2b9629d8cd5412e481e6d3275304ac52c7733586d22f39cdc8"}, @NFTA_TABLE_USERDATA={0xdd, 0x6, "13ab9b0f44c281245fd5df32fe5e6f50fddb8de5fc1863f690be35b620539ec4de38c7aeb683fd38980d7ace190c8ee195832ef417cdb0abf503da23aae1ce6ac8a43daab74f5c76965a46da9710ae65d400aab7ea1ce607b5c2e07f4e9a913eb4be04eef0f870f6a48e4bc9cd64ecd0a9c820e6e18c2567f4c0881326a0e5f4257920df59b31900f951bfd8fb6908e794955033df8a5e89d97ddce5000c93a711ef379f43b01eadf320d1ca998ff9c172a96fa223d49582809e9173f963aeb32f0d7fc5d0a017d887f617001325278210ed7003c878d72338"}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x20000080}, 0x4091) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x8, &(0x7f0000000040), &(0x7f0000000000)=0x30) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000000c0)={'broute\x00', 0x0, 0x4, 0x36, [0x7, 0x2, 0x0, 0x2, 0x80000000, 0xfffffffffffffffb], 0x3, &(0x7f0000000000)=[{}, {}, {}], &(0x7f0000000080)=""/54}, &(0x7f0000000140)=0x78) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb250400000008000400020000000c0005"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) r6 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0x10017, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r6, 0x4004550c, &(0x7f0000000380)) 8.400628616s ago: executing program 0 (id=1601): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000200)={0x84, @private=0xa010100, 0x4e21, 0x3, 'sh\x00', 0x1, 0x4, 0x17}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xc5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 7.669522096s ago: executing program 2 (id=1603): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x1, 0x100000005, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 7.660152103s ago: executing program 6 (id=1604): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="010000000200"/21], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x8042) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r3}, 0x18) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140e00000020c00148008000140fffffffffc73b9981f1e6610bc0c566a3147b8c73b0e6c5d478b4ee691c323f843cc3c8c0e7726833993574ad9383ae814a743e22ae3b091f6e05ba894e3fe18a46ba97af91083fe145d8e0854a4f02864a3ef45859d90e60f0c24ed60b0f12a5ab7c9b823586c6afdcf6850d77722e2803d724ff9"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) getrlimit(0x0, &(0x7f0000000080)) 7.020252001s ago: executing program 5 (id=1605): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="010000000200"/21], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r3}, 0x18) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140e00000020c00148008000140fffffffffc73b9981f1e6610bc0c566a3147b8c73b0e6c5d478b4ee691c323f843cc3c8c0e7726833993574ad9383ae814a743e22ae3b091f6e05ba894e3fe18a46ba97af91083fe145d8e0854a4f02864a3ef45859d90e60f0c24ed60b0f12a5ab7c9b823586c6afdcf6850d77722e2803d724ff9"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) getrlimit(0x0, &(0x7f0000000080)) 7.013507461s ago: executing program 2 (id=1606): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000200)={0x84, @private=0xa010100, 0x4e21, 0x3, 'sh\x00', 0x1, 0x4, 0x17}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xc5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 6.372776472s ago: executing program 0 (id=1607): sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x1) r0 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_setup(0x29fe, &(0x7f0000000140)={0x0, 0x1007079, 0x4000, 0x0, 0x400002d7}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757857c0c9d317d55f60f7bd8114fa5f6a5375b6876a577d5bbc510a2015331d520a14557bcc451c9749724f7abd22132450eac94c51e17a61eae71a39a5858620741026d54ac0382e23dca4f0c32207a3ec5df14569f07debd3ff8feccec7e36a62947bb5eab16f76"], 0x77) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) preadv(r6, &(0x7f0000003540)=[{&(0x7f0000000180)=""/76, 0x4c}], 0x1, 0xfffffffe, 0x80) r7 = socket(0x200000000000011, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSMAXCID(r10, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r10, 0x40047459, &(0x7f0000000080)=0x6100204) pwritev(r10, &(0x7f0000000040)=[{&(0x7f0000000240)="00214717a7070075200003060000000000000000d35f", 0x16}], 0x1, 0x73a, 0x1) write$cgroup_int(r9, &(0x7f0000000040)=0xfe8e, 0x12) ioctl$VIDIOC_G_PARM(r9, 0xc0cc5615, &(0x7f0000000340)={0x1, @capture={0x0, 0x0, {0xff, 0x5}, 0xec, 0x400}}) bind$packet(r7, &(0x7f0000000080)={0x11, 0xd, r8, 0x1, 0x0, 0x6, @remote}, 0x14) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x6009, @fd=r7, 0x0, 0x0}) 5.760782037s ago: executing program 2 (id=1608): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x10c5408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xc, 0x0, r3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000001800000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r5, 0x0, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) 4.709706866s ago: executing program 2 (id=1609): socket$inet(0x2, 0x1, 0x100) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20400008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 4.626446177s ago: executing program 1 (id=1610): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000280), &(0x7f0000001840)=@udp6}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x5) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) r2 = syz_open_dev$video4linux(&(0x7f0000001040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000200)=@ethtool_dump={0x3f, 0x6, 0x2, 0x39, "9d4cc188cd9ef3fceb1a4f1d3e8f1df16d1f7125f83a26e7c2ad465c7db4c07e4b6dadb42e427883b8f88d4b85985e9cfce0f5ce06a2e124c6"}}) ioctl(r3, 0x8b1a, &(0x7f0000000040)) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000080)={0x0, 0x0, {0x3, 0x0, 0x200a, 0x7, 0x9, 0x7, 0x1}}) r4 = syz_create_resource$binfmt(0x0) openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xc000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x2005083c) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000fc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r6, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001000)=ANY=[@ANYBLOB="4400fb5d", @ANYRES16=r7, @ANYBLOB="010029bd7000fedbdf255200000008000300", @ANYRES32=r8, @ANYBLOB="060048004700000004002a0005008900050000000a000600ffffffffffff0000050088000a000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0) 4.557048412s ago: executing program 0 (id=1611): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) r0 = gettid() prlimit64(0x0, 0x8, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x100010, 0xffffffffffffffff, 0x1000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3fc}, 0x1, 0x0, 0x0, 0x40}, 0x0) migrate_pages(0x0, 0xfc, &(0x7f0000000200)=0x8000000000000001, &(0x7f0000000240)=0x1) mount$cgroup(0x0, 0x0, &(0x7f00000001c0), 0x2010042, 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, 0x0, 0x0) io_setup(0x8, 0x0) eventfd2(0x8001, 0x0) io_submit(0x0, 0x1, &(0x7f0000000300)=[0x0]) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x18000, 0x0) socket$kcm(0x2, 0x2, 0x0) rseq(&(0x7f0000000100)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) userfaultfd(0x80801) 3.633020403s ago: executing program 2 (id=1612): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r0, &(0x7f0000003400)=[{&(0x7f0000000440)=""/107, 0x6b}, {&(0x7f0000004c00)=""/4096, 0x1000}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, 0x2e, 0x9, 0x70bd25, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x10000}, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000100)='.\x00', &(0x7f0000002280)='v7\x00', 0x1000080, 0x0) getpeername$unix(r0, &(0x7f0000000080)=@abs, &(0x7f0000000140)=0x6e) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_open_dev$sndmidi(0x0, 0x8, 0x80800) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) sendfile(r3, r2, &(0x7f0000002080)=0x3a, 0x23b) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) readv(r0, &(0x7f0000003400)=[{&(0x7f0000000440)=""/107, 0x6b}, {&(0x7f0000004c00)=""/4096, 0x1000}], 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, 0x2e, 0x9, 0x70bd25, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x10000}, 0x0) (async) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000100)='.\x00', &(0x7f0000002280)='v7\x00', 0x1000080, 0x0) (async) getpeername$unix(r0, &(0x7f0000000080)=@abs, &(0x7f0000000140)=0x6e) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) (async) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) (async) gettid() (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async) syz_open_dev$sndmidi(0x0, 0x8, 0x80800) (async) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) (async) sendfile(r3, r2, &(0x7f0000002080)=0x3a, 0x23b) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) (async) 3.14268246s ago: executing program 1 (id=1613): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000020000000400000003"], 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000005ec1aca615e3ef31994c3ccd4dfac5513154b2c30968a1f0a34c9cbcd731054f8fa84e4c9965e78f86241a02ae0a8f8bf962e8de206f9df861f171c35223cbc5478e6d2aaa7846"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x14, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3c, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x9, 0x7, 0x3, 0x3, 0x5, 0x2, 0x4e, 0x3, 0xf9, 0x3, 0x80, 0x9, 0xa333}, {0xfffffffb, 0x6, 0x8, 0xc4, 0x2, 0x17, 0xa, 0xf1, 0x10, 0xff, 0x41, 0x7d, 0x4}, {0xe2a5, 0x4, 0x1, 0x5, 0x2, 0x4, 0x7, 0x81, 0xff, 0x6, 0x3, 0x3}], 0x401}) (async) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0xa) (async) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r5}, 0xfffffffffffffcaa) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0xc, 0x0, 0x0, 0x4000002, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x9b}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5}, 0x94) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) 3.106061702s ago: executing program 6 (id=1614): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = shmget$private(0x0, 0x3000, 0x40, &(0x7f0000003000/0x3000)=nil) shmctl$IPC_INFO(r1, 0x3, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2b2c20379d4d77f7) r3 = getegid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000280)={{0x3, r2, r3, r4, r5, 0x4, 0x8}, 0x5, 0x8, 0x7, 0x3, r0, r0, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) openat$hwrng(0xffffffffffffff9c, 0x0, 0x2a800, 0x0) setresuid(0x0, 0x0, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r6, 0x0, 0x3, 0x0, &(0x7f0000000340)) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="20004a00010000000000000000000a005c458d51bb60040001800000ddff"], 0x20}}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r8 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x48, 0x0, 0x0, 0xffefffff}, {0x16, 0x0, 0x4}]}, 0x10) sendto$inet6(r8, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r11) ptrace$pokeuser(0x6, r11, 0x388, 0x41d9fda7) 2.941307077s ago: executing program 1 (id=1615): r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r3, 0x0) (async) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)={0x1, r0}) (rerun: 64) r4 = socket$kcm(0x10, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000300), &(0x7f0000000340)=0x4) (async, rerun: 64) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) (async, rerun: 64) r5 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x140, 0x23, 0x90, 0x36, 0x20, 0x586, 0x3427, 0x2f20, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x28, 0xe, 0x0, 0xa, [{{0x9, 0x4, 0x67, 0xe0, 0x0, 0xa8, 0x7b, 0x29, 0xd}}]}}]}}, 0x0) (async, rerun: 64) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') fchdir(r6) (async) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r5, &(0x7f0000000440)='pagemap\x00') setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x2, [@var={0x9, 0x0, 0x0, 0xe, 0x3, 0x1}, @ptr={0xa, 0x0, 0x0, 0x2, 0x3}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x6, 0x1}, {}, {}, {0x9}, {0x1, 0x5}, {0x10}]}]}}, 0x0, 0x72, 0x0, 0x0, 0x7fffffff}, 0x28) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r7) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) ioctl$SIOCSIFHWADDR(r7, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) (async, rerun: 32) r8 = socket(0x1d, 0x2, 0x6) (rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x5, 0xa000, 0x1000, &(0x7f0000008000/0x1000)=nil}) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r8, 0x6a, 0x2, 0x0, &(0x7f00000000c0)=0xfffffffffffffd27) 2.940233799s ago: executing program 5 (id=1616): mlock(&(0x7f0000143000/0x2000)=nil, 0x2000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) syz_open_pts(r0, 0x101) syz_clone(0x401e2480, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @random="c59a1b746cda", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x10, 0x2c, 0xff, @remote, @local, {[@dstopts={0x88, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x80}]}]}}}}}, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000580)='1\x00', 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x20, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r2, 0x8b1a, &(0x7f0000000040)) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406a0563000000000000010902"], 0x0) write$sysctl(r1, &(0x7f00000000c0)='2\x00', 0x2) 2.092164828s ago: executing program 6 (id=1617): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000280)={0x0, 0x5, 0xcc, {0xcc, 0x24, "ed7cb326a4d7ad294ae4616b33eac7dae557ce1a9d3dee44e3a3385436bed164585677c26fc84ffb296515cd9755fc4df7322b2f7ff51d93512946309ee7bcb06ac4686af15368cade2d5addbfaa07379678bc61d8a28fc10115f2308e0d039c22f6802d29be3c9dc2f263cde74b37e5c4271914c526cba02f7b1b235165ee5262738fb970190dbcc812a5c71a90afb8229c113adbf891b8ddeb3c881f5976e49f2b9df383e154106416319761572f06cb5736b57802b759fb74026b1dab83cdf62236032a0b9dc15303"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x5e295c6933a24c49}}, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0, 0x0}, &(0x7f0000000bc0)={0x84, 0x0, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x5}, 0x0, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x400, 0x10}}, &(0x7f0000000900)={0x40, 0x7, 0x2, 0x7f}, 0x0, &(0x7f0000000980)={0x40, 0xb, 0x2, "9dcb"}, &(0x7f00000009c0)={0x40, 0xf, 0x2, 0xfffc}, &(0x7f0000000a00)={0x40, 0x13, 0x6, @local}, &(0x7f0000000a40)={0x40, 0x17, 0x6, @local}, &(0x7f0000000a80)={0x40, 0x19, 0x2, "c2e6"}, 0x0, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000b80)={0x40, 0x21, 0x1}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc048aeca, &(0x7f0000000440)={0x1, 0x0, [{0xa93, 0x0, 0x6}]}) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map, 0xffffffffffffffff, 0x5}, 0x10) unshare(0x4020400) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000000200)=""/73, 0x49) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x1380, &(0x7f0000000100)=ANY=[]) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='@]#&\x00'}, 0x30) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r7, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) 2.00157934s ago: executing program 1 (id=1618): r0 = fsopen(&(0x7f0000000380)='gadgetfs\x00', 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x5e25, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000000c0)={0x8, 0x0, [{0x17b, 0x0, 0x5}]}) sendto$inet6(r1, 0x0, 0x0, 0x400ad10, &(0x7f0000000080)={0xa, 0x4e20, 0x78a2, @loopback}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f000001b000)=""/102388, 0x18ff4) r6 = syz_open_procfs(0x0, 0x0) sendmsg$key(r6, 0x0, 0x40004) r7 = socket(0x10, 0x803, 0x0) r8 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) close(r8) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="b088fa1e5a88f8f0032e9000c14e76dafd1f3044bff622c73d73", @ANYRES16=r9, @ANYBLOB="010029bd7000ffdbdf25140000000c0007800800020004000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) sendmsg$nl_route_sched(r7, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x400c0) read$char_usb(r6, &(0x7f0000000600)=""/166, 0xa6) getsockname$packet(r7, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000104348700"/20, @ANYRES32=r10, @ANYRES64=r5], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r0, @ANYRES32=r10, @ANYBLOB="0025000000000000780012800b000100697036746e6c00006800028006000f0003"], 0x98}, 0x1, 0x0, 0x0, 0x40001}, 0x20044000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x31c07, 0x2, 0x3, 0x6, 0x0, 0x1, 0x0, 0x2, 0x2}) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x6, @loopback, 0x2}}}, 0x30) 1.702284361s ago: executing program 1 (id=1619): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000200)={0x84, @private=0xa010100, 0x4e21, 0x3, 'sh\x00', 0x1, 0x4, 0x17}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xc5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.038198705s ago: executing program 0 (id=1620): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x10c5408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xc, 0x0, r3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000001800000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r5, 0x0, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) 347.412262ms ago: executing program 1 (id=1621): munmap(&(0x7f000051f000/0x7000)=nil, 0x7000) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0xc00, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0xffffe002) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x13, 0xffffffffffffffff, 0x65a10000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x9, &(0x7f00000004c0)=@raw=[@jmp={0x5, 0x0, 0xd, 0xb, 0x1, 0xfffffffffffffffe, 0x10}, @map_fd, @call={0x85, 0x0, 0x0, 0x52}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xff}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @ldst={0x2, 0x0, 0x1, 0x9, 0x7, 0xfffffffffffffff0, 0x8}], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000063c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4008891, 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r4, 0x9208, 0x1000000000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x200048c0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000380)='source', &(0x7f0000000440)='0:,:\x00', 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[], 0xb8}}, 0x4000000) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x40404f23, 0x5, 0x1, 0x401, 0x0, 0x9, 0x1003, 0x1c82, 0x5, 0x3bb, 0x9, 0x1600, 0x5, 0x24000001, 0x2, 0xe1cb, 0x13352f60, 0x0, 0x400, 0x8, 0x6, 0x5, 0xb, 0x402, 0x9, 0x3, 0x41, 0x5, 0x6, 0x8000003, 0xdffffffa, 0x8000000]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400102, 0x0) r7 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x2}, &(0x7f0000000080)) read$FUSE(r7, &(0x7f0000000940)={0x2020}, 0xfc9f) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 1.669049ms ago: executing program 5 (id=1622): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x40, 0x0) r5 = ioctl$TIOCGPTPEER(r2, 0x5441, 0xafd) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r7, r7, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440), 0x1000) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000540)=@bridge_getvlan={0x20, 0x72, 0x301, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x12}]}, 0x20}, 0x1, 0xf00}, 0x0) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f00000000c0)=0x4) sched_setscheduler(r10, 0x1, &(0x7f0000000180)=0x3) r11 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r11, &(0x7f0000009780)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r11, &(0x7f0000000400)=ANY=[@ANYBLOB="b000000000000000", @ANYRES64=0x3, @ANYBLOB="0000000000000000020000000000000006000000000000000000000000e0ea09ffff0000ff0100000500000000000000010000000000000006bc2e9f9289f77524c264d88d3b00000000000000000000000000000007000000000000000700000000000000fdffffff010000", @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="050000000200000000000000010000000000000000000000000000000600000003000000736f757263650000"], 0xb0) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) r17 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xa) setresuid(0x0, r19, 0x0) r21 = geteuid() setresuid(r19, r21, 0x0) getgroups(0x1, &(0x7f0000001c40)=[r8]) r22 = socket$nl_sock_diag(0x10, 0x3, 0x4) r23 = syz_open_dev$dmmidi(&(0x7f0000001c80), 0x7ff, 0x100) sendmmsg$unix(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="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", 0xfc}, {&(0x7f0000000240)="b24e565e9969f6602bdf552edf7eb095705df22e91a76727c9d0c35f5c2d060b503ce04d9ec5d97ce9416e130d54e5b0f7653f2a457833bc58cc813ac34b9040b34b219c3e9af1629b1cd46a8e5b49c6e35be32118a1c5edbc045cba6ee5ee45ee08c1e842dc6f1711a69ce4c5b83f276a3f855df404691f29cfcab6f96a5b4b83a4925e3d4576ab893baf72ace234c8946890a30e8f7ffcd5fe54a20ff984bd6713f86d58992095382b060bb9387569be6a370f9061cb0e0d95ced05e7893bed061ac77dff64851607bc7db1a5b5447c4af238facd07c2d3068a7733a0d42a0f75b0ac882b2fa5f", 0xe8}, {&(0x7f0000000040)="171d583f8279aed41c1d7f4988ed70069d9f9ad719e9fa3152d20f84cb3eb6453a462a33eca6e184e4da8312bb", 0x2d}], 0x3, &(0x7f0000001f00)=[@rights={{0x34, 0x1, 0x1, [r5, r1, r1, r4, r2, r3, r1, r0, r2]}}, @cred={{0x1c, 0x1, 0x2, {r6, r21, r20}}}, @cred={{0x1c, 0x1, 0x2, {r14, r19}}}, @cred={{0x1c, 0x1, 0x2, {r10, r12, r16}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0xb0, 0x880}}, {{&(0x7f0000000640)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f00000006c0)="aa28e5b23253cf456af43b0d3793382f0901bf92afdafe5029d444cf384f28aca743a132c54303ade869d71640f6169787a4acaca36bc3601a7dedbdd200ab18e20a3a6cea80eb3dfd9e0b30f7256d48c700e487517036ac43c74e1968c00652cb7c002f719d1497", 0x68}], 0x1, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {r14, r21, r8}}}, @rights={{0x18, 0x1, 0x1, [r4, 0xffffffffffffffff]}}], 0x38, 0x4000000}}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f00000007c0)="d3582705074d33a8d882a036fcb1531d8d0b56f315f08c00b96c1ca862b62c16fa8295e728aeff147417722179562bcc262da4419bcc4e1b92d2290a6e4ff6dc3142fe4dfadd9b7c2fed5fb3f10ee6a249207c68b91384e3", 0x58}, {&(0x7f0000000840)="c500cb6da3ebafb8a0d9fbe0d0606ff246b0ba11cc18d584f4993aec50e07a835161d7f769fd24f317daa9d59cfde2d7a46b9675c86226403c03f3af2c4c40f33e7cb50b555fbff51d166099c2eb68934fe7", 0x52}, {&(0x7f0000000a40)="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", 0x1000}, {&(0x7f00000008c0)="66ba6b3e2b241e9fea00bd19f73268bdd0d1e7e436e551882ecc015a7179b19d8106df", 0x23}, {&(0x7f0000001fc0)="d911605f086314a918da93ba53fa66a6b6ad9f9d39448e171974e251ff27fedeba2b73ea00e02263e4ca8cec3562c188070ad6859ae2db783de494fec76002aaa2084c335d2e01bbc3002906269f930d1319cc714aa4252a97c6752bd7ab2e1ed8b3bb9b1bf7ccbdf9ac6da161c46d8ff9161719603d1885b8b9c9dde598feda693f3ba9818a5d10e3a7d4d5ffb78fa7acc0492ac9cb4ee03c3d5f52a3150e7057e0ac98379a2b88e1c3115e45cbb6343c132bedf62d6c89ecc5217999a6948c5db9845d68802fd1dc4833bdfa0fbbdb", 0xd0}, {&(0x7f0000000580)="46dae5bc619bc291a2a97b33e15b4534805f8a238a674d560983aabe70f4297a6786738e4a31a7be81759a61ef80aeee1ab509428243e25f3d7f2c53b30ad36d2b9be8a2de311b7bbaa6c13f9d0f936e04bf2d4805341f32aeddbbf3727bf1b7b1a178af809767313399", 0x6a}, {&(0x7f0000001ac0)="767918c3e3aad926a8f9ee425c862aebbc1eab11e56a44f0a4bb20b7b62025", 0x1f}, {&(0x7f0000001b00)="922b7f3753cab77611e7ad58c23a9b1990c70a3bef504a5d3999d8909cdb976ff3a3ec7ace90adcc77bdfdfd1346ddc1fd478acb7cb9dcedfcdbe5206c1537f8db1859adf9e6d83da843dc738848da83ae3555733d370f8ac09a2729885094f77bab8f1a325bfc5aa27d410e25f5f03e57d356f39fc6af1249e0f0c32f7f97dba21b84f25f6837e521858635d9c7a9ddb79c83dcc548c144dd1b41", 0x9b}], 0x8, &(0x7f0000000900)=[@cred={{0x1c, 0x1, 0x2, {r18, r15}}}, @rights={{0x2c, 0x1, 0x1, [r22, r1, r23, 0xffffffffffffffff, r9, r3, r0]}}, @cred={{0x1c, 0x1, 0x2, {r14}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r19, r20}}}, @rights={{0x24, 0x1, 0x1, [r17, 0xffffffffffffffff, r9, r9, r2]}}], 0xb8, 0x48804}}], 0x3, 0x0) 0s ago: executing program 0 (id=1623): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) socket(0xa, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) r6 = syz_usb_connect(0x3, 0x24, &(0x7f0000001640)=ANY=[@ANYBLOB="12010000e1476040d61000220200000003010902"], 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000001c0)={0xd350, r2, 0x2}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0xe32}}, './file0\x00'}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x8d8, 0x5, 0x36315247, 0x6, 0x8000002, 0xb, 0x0, 0xffffffff, 0x0, 0x6, 0x0, 0x4}}) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x4e21, 0x3, 'lc\x00', 0x1, 0x4, 0x4f}, 0x2c) syz_usb_ep_read(r6, 0x4, 0x15, &(0x7f00000002c0)=""/21) socket$kcm(0xa, 0x2, 0x0) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)={0x30, r9, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}]}, 0x30}}, 0x0) r10 = syz_open_dev$video(&(0x7f0000000080), 0x9, 0x0) ioctl$VIDIOC_S_FMT(r10, 0xc0d05605, &(0x7f0000000180)={0xd, @pix_mp={0xd965, 0x3, 0x55595659, 0x7, 0x7, [{0x80000001, 0x2}, {0x3, 0xe}, {0x9, 0x2}, {0x7, 0x6}, {0x8, 0x2}, {0x1, 0x3ffc00}, {0x68f9, 0x5}, {0x2679, 0x4}], 0x3, 0xf, 0x6, 0x1, 0x2}}) kernel console output (not intermixed with test programs): valid length. [ 408.662030][ T5941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.678164][T10730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.691927][T10730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.700358][ T5941] usb 1-1: Product: syz [ 408.704562][ T5941] usb 1-1: Manufacturer: syz [ 408.709154][ T5941] usb 1-1: SerialNumber: syz [ 408.714505][T10730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.736064][T10746] bond1: entered promiscuous mode [ 408.764238][T10746] 8021q: adding VLAN 0 to HW filter on device bond1 [ 408.778720][ T1207] usb 2-1: USB disconnect, device number 34 [ 408.837165][T10748] 8021q: adding VLAN 0 to HW filter on device bond1 [ 408.844215][T10748] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 408.854929][T10748] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 408.869220][T10744] fuseblk: Bad value for 'user_id' [ 408.872387][T10748] bond1: (slave wireguard0): making interface the new active one [ 408.875163][T10744] fuseblk: Bad value for 'user_id' [ 408.899892][T10748] wireguard0: entered promiscuous mode [ 408.908475][T10748] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 409.077069][T10759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.085688][T10759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.398513][ T30] audit: type=1804 audit(1766530264.223:741): pid=10762 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1108" name="/newroot/221/file0" dev="tmpfs" ino=1224 res=1 errno=0 [ 409.442799][ T30] audit: type=1400 audit(1766530264.263:742): avc: denied { setopt } for pid=10761 comm="syz.1.1108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 409.597151][T10767] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 410.341484][T10764] delete_channel: no stack [ 410.398596][T10771] xt_TPROXY: Can be used only with -p tcp or -p udp [ 410.783502][ T1207] usb 3-1: USB disconnect, device number 37 [ 410.907853][ T48] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 411.518089][ T5941] usb 1-1: 0:2 : does not exist [ 411.549008][ T48] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 411.561329][ T5941] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 411.572745][ T48] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 411.691428][ T48] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 411.756965][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.789851][ T5941] usb 1-1: USB disconnect, device number 30 [ 412.034055][ T48] usb 2-1: GET_CAPABILITIES returned 0 [ 412.060475][ T48] usbtmc 2-1:16.0: can't read capabilities [ 412.240261][ T30] audit: type=1400 audit(1766530267.023:743): avc: denied { create } for pid=10789 comm="syz.2.1115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 412.273299][T10776] netlink: 'syz.1.1111': attribute type 1 has an invalid length. [ 412.400366][ T30] audit: type=1400 audit(1766530267.143:744): avc: denied { write } for pid=10789 comm="syz.2.1115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 412.720274][ T5941] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 413.141636][ T30] audit: type=1400 audit(1766530267.973:745): avc: denied { setattr } for pid=10797 comm="syz.6.1118" name="ttyS3" dev="devtmpfs" ino=619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 413.241653][ T5941] usb 3-1: too many configurations: 87, using maximum allowed: 8 [ 413.263257][ T5812] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 413.282535][ T5941] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 413.294710][ T5941] usb 3-1: can't read configurations, error -61 [ 413.431731][ T5941] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 413.835617][ T1207] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 413.843153][ T5812] usb 6-1: Using ep0 maxpacket: 32 [ 413.849650][ T5812] usb 6-1: too many configurations: 122, using maximum allowed: 8 [ 413.862966][ T5812] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 413.880880][ T5812] usb 6-1: can't read configurations, error -61 [ 413.892929][ T7700] usb 2-1: USB disconnect, device number 35 [ 413.944000][ T5941] usb 3-1: too many configurations: 87, using maximum allowed: 8 [ 413.960338][ T5941] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 413.973234][ T5941] usb 3-1: can't read configurations, error -61 [ 413.984626][ T5941] usb usb3-port1: attempt power cycle [ 413.992087][ T1207] usb 7-1: config 0 has an invalid interface number: 228 but max is 0 [ 414.001068][ T1207] usb 7-1: config 0 has no interface number 0 [ 414.013245][ T1207] usb 7-1: config 0 interface 228 has no altsetting 0 [ 414.020246][ T5812] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 414.030830][ T1207] usb 7-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=41.25 [ 414.042571][ T1207] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.058610][ T1207] usb 7-1: Product: syz [ 414.063549][ T1207] usb 7-1: Manufacturer: syz [ 414.068166][ T1207] usb 7-1: SerialNumber: syz [ 414.085019][ T1207] usb 7-1: config 0 descriptor?? [ 414.094907][ T1207] ttusbir 7-1:0.228: cannot find expected altsetting [ 414.170252][ T5812] usb 6-1: Using ep0 maxpacket: 32 [ 414.177033][ T5812] usb 6-1: too many configurations: 122, using maximum allowed: 8 [ 414.186113][ T5812] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 414.193830][ T5812] usb 6-1: can't read configurations, error -61 [ 414.200706][ T5812] usb usb6-port1: attempt power cycle [ 414.330277][ T7700] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 414.360277][ T5941] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 414.381204][ T5941] usb 3-1: too many configurations: 87, using maximum allowed: 8 [ 414.390216][ T5941] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 414.397891][ T5941] usb 3-1: can't read configurations, error -61 [ 414.481775][ T7700] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 414.492021][ T7700] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 414.502211][ T7700] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 414.517146][ T7700] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 414.526614][ T7700] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 414.534737][ T7700] usb 2-1: Product: syz [ 414.538893][ T7700] usb 2-1: Manufacturer: syz [ 414.543647][ T5812] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 414.550239][ T5941] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 414.551637][ T7700] usb 2-1: SerialNumber: syz [ 414.571086][ T5941] usb 3-1: too many configurations: 87, using maximum allowed: 8 [ 414.580084][ T5941] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 414.580715][ T5812] usb 6-1: Using ep0 maxpacket: 32 [ 414.587809][ T5941] usb 3-1: can't read configurations, error -61 [ 414.593584][ T5812] usb 6-1: too many configurations: 122, using maximum allowed: 8 [ 414.599356][ T5941] usb usb3-port1: unable to enumerate USB device [ 414.608784][ T5812] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 414.621347][ T5812] usb 6-1: can't read configurations, error -61 [ 414.750281][ T5812] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 414.770917][ T5812] usb 6-1: Using ep0 maxpacket: 32 [ 414.776741][ T5812] usb 6-1: too many configurations: 122, using maximum allowed: 8 [ 414.786206][ T5812] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 414.794023][ T5812] usb 6-1: can't read configurations, error -61 [ 414.800709][ T5812] usb usb6-port1: unable to enumerate USB device [ 414.957600][ T7700] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 36 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 416.158176][ T9] usb 7-1: USB disconnect, device number 9 [ 417.457155][T10825] xt_TPROXY: Can be used only with -p tcp or -p udp [ 417.619550][ T5941] usb 2-1: USB disconnect, device number 36 [ 417.639326][ T5941] usblp0: removed [ 421.456004][T10860] hub 1-0:1.0: USB hub found [ 421.462904][T10860] hub 1-0:1.0: 1 port detected [ 421.965549][T10863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.747168][T10873] kvm: pic: non byte write [ 422.793142][ T30] audit: type=1400 audit(1766530277.583:746): avc: denied { execute_no_trans } for pid=10862 comm="syz.2.1136" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="hugetlbfs" ino=28536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 423.251614][T10878] dvmrp0: entered allmulticast mode [ 423.263930][ T7700] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 423.487593][ T7700] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.513120][ T7700] usb 2-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 423.596546][ T7700] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.629821][ T7700] usb 2-1: config 0 descriptor?? [ 423.718644][ T30] audit: type=1400 audit(1766530278.543:747): avc: denied { read write } for pid=10881 comm="syz.2.1141" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 424.346078][ T30] audit: type=1400 audit(1766530278.543:748): avc: denied { open } for pid=10881 comm="syz.2.1141" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 424.481338][ T30] audit: type=1400 audit(1766530278.723:749): avc: denied { ioctl } for pid=10880 comm="syz.5.1140" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 424.750536][ T7700] usb 2-1: USB disconnect, device number 37 [ 424.782678][ T30] audit: type=1400 audit(1766530278.793:750): avc: denied { listen } for pid=10881 comm="syz.2.1141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 425.547903][ T30] audit: type=1400 audit(1766530280.063:751): avc: denied { shutdown } for pid=10898 comm="syz.2.1144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 425.986383][ T1207] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 426.042730][ T30] audit: type=1400 audit(1766530280.873:752): avc: denied { getopt } for pid=10906 comm="syz.2.1146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 426.090488][ T30] audit: type=1400 audit(1766530280.873:753): avc: denied { setopt } for pid=10906 comm="syz.2.1146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 426.160211][ T1207] usb 6-1: Using ep0 maxpacket: 32 [ 426.168485][ T1207] usb 6-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= d.65 [ 426.177999][ T1207] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.187284][ T1207] usb 6-1: Product: syz [ 426.191599][ T1207] usb 6-1: Manufacturer: syz [ 426.196342][ T1207] usb 6-1: SerialNumber: syz [ 426.269044][ T1207] usb 6-1: config 0 descriptor?? [ 426.301572][ T1207] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 426.490241][ T5941] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 426.581033][ T30] audit: type=1400 audit(1766530281.403:754): avc: denied { setattr } for pid=10893 comm="syz.5.1143" name="radio2" dev="devtmpfs" ino=968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 426.616427][T10919] team0: No ports can be present during mode change [ 426.764324][ T30] audit: type=1326 audit(1766530281.433:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10918 comm="syz.6.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f538f749 code=0x7ffc0000 [ 426.788195][ T5941] usb 3-1: Using ep0 maxpacket: 16 [ 426.795316][ T5941] usb 3-1: config index 0 descriptor too short (expected 2066, got 18) [ 426.805524][ T5941] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 426.814859][ T1207] gspca_vc032x: reg_w err -110 [ 426.819649][ T1207] gspca_vc032x: I2c Bus Busy Wait 00 [ 426.825390][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=253, SerialNumber=2 [ 426.833630][ T1207] gspca_vc032x: I2c Bus Busy Wait 00 [ 426.838913][ T1207] gspca_vc032x: I2c Bus Busy Wait 00 [ 427.324168][ T5941] usb 3-1: Product: syz [ 427.328362][ T5941] usb 3-1: Manufacturer: syz [ 427.333040][ T1207] gspca_vc032x: I2c Bus Busy Wait 00 [ 427.338333][ T1207] gspca_vc032x: I2c Bus Busy Wait 00 [ 427.343669][ T5941] usb 3-1: SerialNumber: syz [ 427.349538][ T1207] gspca_vc032x: I2c Bus Busy Wait 00 [ 427.356059][ T5941] usb 3-1: config 0 descriptor?? [ 427.361208][ T1207] gspca_vc032x: I2c Bus Busy Wait 00 [ 427.366593][ T1207] gspca_vc032x: I2c Bus Busy Wait 00 [ 427.379183][ T1207] gspca_vc032x: I2c Bus Busy Wait 00 [ 427.385321][ T1207] gspca_vc032x: I2c Bus Busy Wait 00 [ 427.393213][ T1207] gspca_vc032x: I2c Bus Busy Wait 00 [ 427.475174][ T1207] gspca_vc032x: I2c Bus Busy Wait 00 [ 427.480678][ T1207] gspca_vc032x: I2c Bus Busy Wait 00 [ 427.486012][ T1207] gspca_vc032x: I2c Bus Busy Wait 00 [ 427.491719][ T1207] gspca_vc032x: I2c Bus Busy Wait 00 [ 427.497094][ T1207] gspca_vc032x: I2c Bus Busy Wait 00 [ 427.502852][ T1207] gspca_vc032x: I2c Bus Busy Wait 00 [ 427.508137][ T1207] gspca_vc032x: I2c Bus Busy Wait 00 [ 427.513458][ T1207] gspca_vc032x: I2c Bus Busy Wait 00 [ 427.518788][ T1207] gspca_vc032x: Unknown sensor... [ 427.523884][ T1207] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 427.583091][ T5812] usb 3-1: USB disconnect, device number 42 [ 427.786555][ T5812] usb 6-1: USB disconnect, device number 28 [ 427.850552][ T7700] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 428.283954][ T7700] usb 2-1: config 2 has an invalid interface number: 219 but max is 0 [ 428.300205][ T7700] usb 2-1: config 2 has no interface number 0 [ 428.306325][ T7700] usb 2-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice=b3.76 [ 428.330289][ T7700] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.373826][ T7700] gspca_main: pac7311-2.14.0 probing 093a:2601 [ 428.409168][T10943] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 428.770398][T10941] mmap: syz.5.1156 (10941): VmData 25841664 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 428.830990][ T7700] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 428.838998][ T7700] pac7311 2-1:2.219: probe with driver pac7311 failed with error -71 [ 428.858833][T10957] xt_TPROXY: Can be used only with -p tcp or -p udp [ 428.864320][ T7700] usb 2-1: USB disconnect, device number 38 [ 428.932863][T10960] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 429.200621][T10964] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1162'. [ 429.550294][ T7700] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 429.730383][ T7700] usb 6-1: Using ep0 maxpacket: 32 [ 429.984763][ T7700] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.006333][ T7700] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.016465][ T7700] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 430.025700][ T7700] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.045440][ T7700] usb 6-1: config 0 descriptor?? [ 430.240279][ T5955] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 430.402319][ T5955] usb 2-1: config 0 has an invalid interface number: 122 but max is 0 [ 430.420643][ T5955] usb 2-1: config 0 has no interface number 0 [ 430.432559][ T5955] usb 2-1: config 0 interface 122 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 511 [ 430.462252][ T5955] usb 2-1: New USB device found, idVendor=093b, idProduct=a005, bcdDevice=ff.88 [ 430.474890][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.483129][ T5955] usb 2-1: Product: syz [ 430.487335][ T5955] usb 2-1: Manufacturer: syz [ 430.519895][ T5955] usb 2-1: SerialNumber: syz [ 430.552368][ T7700] usbhid 6-1:0.0: can't add hid device: -71 [ 430.563011][ T5955] usb 2-1: config 0 descriptor?? [ 430.571078][ T7700] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 430.579431][T10976] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 430.588645][ T7700] usb 6-1: USB disconnect, device number 29 [ 430.596254][ T5955] em28xx 2-1:0.122: New device syz syz @ 480 Mbps (093b:a005, interface 122, class 122) [ 430.609752][ T5955] em28xx 2-1:0.122: Video interface 122 found: bulk [ 430.861913][ T5955] em28xx 2-1:0.122: unknown em28xx chip ID (0) [ 430.966354][ T5955] em28xx 2-1:0.122: reading from i2c device at 0xa0 failed (error=-5) [ 430.975514][ T5955] em28xx 2-1:0.122: board has no eeprom [ 431.257564][T10991] netlink: 'syz.0.1170': attribute type 4 has an invalid length. [ 431.566652][ T5955] em28xx 2-1:0.122: Identified as Plextor ConvertX PX-TV100U (card=40) [ 431.575083][ T5955] em28xx 2-1:0.122: analog set to bulk mode. [ 431.593262][ T5812] em28xx 2-1:0.122: Registering V4L2 extension [ 431.606179][ T5955] usb 2-1: USB disconnect, device number 39 [ 431.633810][ T5955] em28xx 2-1:0.122: Disconnecting em28xx [ 431.818756][ T5812] em28xx 2-1:0.122: Config register raw data: 0xffffffed [ 431.900249][ T5812] em28xx 2-1:0.122: AC97 chip type couldn't be determined [ 431.907391][ T5812] em28xx 2-1:0.122: No AC97 audio processor [ 431.920037][ T5812] em28xx 2-1:0.122: em28xx_v4l2_init: Error while setting audio - error [-19]! [ 431.929218][ T5812] em28xx 2-1:0.122: Remote control support is not available for this card. [ 431.940227][ T5955] em28xx 2-1:0.122: Closing input extension [ 431.964912][ T5955] em28xx 2-1:0.122: Freeing device [ 432.089663][ T1207] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 432.610682][ T5812] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 432.752671][ T1207] usb 6-1: Using ep0 maxpacket: 8 [ 432.843944][ T1207] usb 6-1: config 0 has an invalid interface number: 22 but max is 0 [ 432.862106][ T1207] usb 6-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 432.864955][ T5812] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.872580][ T1207] usb 6-1: config 0 has no interface number 0 [ 433.010757][ T1207] usb 6-1: New USB device found, idVendor=257a, idProduct=160c, bcdDevice=15.fc [ 433.010796][ T5812] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.025307][ T1207] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.037841][ T1207] usb 6-1: Product: syz [ 433.042351][ T5812] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 433.103430][ T5812] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 433.110210][ T1207] usb 6-1: Manufacturer: syz [ 433.116891][ T5812] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.118754][ T1207] usb 6-1: SerialNumber: syz [ 433.136026][ T5812] usb 1-1: config 0 descriptor?? [ 433.167606][ T1207] usb 6-1: config 0 descriptor?? [ 433.191886][ T1207] option 6-1:0.22: GSM modem (1-port) converter detected [ 433.340277][ T5955] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 433.882156][ T5812] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 433.905071][ T1207] usb 6-1: USB disconnect, device number 30 [ 433.918395][ T1207] option 6-1:0.22: device disconnected [ 433.946382][ T5955] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 433.970345][ T5955] usb 2-1: config 0 has no interface number 0 [ 433.978618][ T5955] usb 2-1: config 0 interface 128 altsetting 6 endpoint 0x5 has invalid maxpacket 1024, setting to 1023 [ 433.996736][ T5812] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 434.050387][ T5812] hid-generic 0000:0000:0000.000C: hidraw1: HID v0.00 Device [syz1] on syz0 [ 434.072787][ T5955] usb 2-1: config 0 interface 128 has no altsetting 0 [ 434.164671][ T5955] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91 [ 434.181827][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.189833][ T5955] usb 2-1: Product: syz [ 434.204318][ T5955] usb 2-1: Manufacturer: syz [ 434.215249][ T5955] usb 2-1: SerialNumber: syz [ 434.329473][ T5955] usb 2-1: config 0 descriptor?? [ 434.349927][ T5955] radio-si470x 2-1:0.128: could not find interrupt in endpoint [ 434.369280][ T5955] radio-si470x 2-1:0.128: probe with driver radio-si470x failed with error -5 [ 434.378580][ T5955] usbhid 2-1:0.128: couldn't find an input interrupt endpoint [ 434.848597][ T5955] usb 2-1: USB disconnect, device number 40 [ 435.202754][ T5941] usb 1-1: USB disconnect, device number 31 [ 435.388817][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 435.388827][ T30] audit: type=1400 audit(1766530290.213:786): avc: denied { connect } for pid=11033 comm="syz.0.1182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 435.641440][ T30] audit: type=1400 audit(1766530290.423:787): avc: denied { listen } for pid=11031 comm="syz.1.1181" lport=50726 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 435.836054][T11041] vlan2: entered allmulticast mode [ 435.924815][T11041] vlan2: entered allmulticast mode [ 436.630253][ T5941] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 436.798226][T10939] Set syz1 is full, maxelem 65536 reached [ 436.813966][ T5941] usb 2-1: config 0 has no interfaces? [ 436.827477][ T5941] usb 2-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 436.926604][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 437.105015][ T5941] usb 2-1: SerialNumber: syz [ 437.112231][ T5941] usb 2-1: config 0 descriptor?? [ 437.223821][T11065] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 438.100253][T11059] Set syz1 is full, maxelem 65536 reached [ 438.120363][ T5941] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 438.314000][ T30] audit: type=1400 audit(1766530293.013:788): avc: denied { read } for pid=11077 comm="syz.0.1193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 438.591584][ T5941] usb 6-1: config 2 interface 0 has no altsetting 0 [ 438.602069][ T5941] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 438.618740][ T5941] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.634454][ T5941] usb 6-1: Product: syz [ 438.642421][ T5941] usb 6-1: Manufacturer: syz [ 438.653666][ T5941] usb 6-1: SerialNumber: syz [ 438.900219][ T1207] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 438.988511][ T5941] ims_pcu 6-1:2.0: Zero length descriptor [ 438.995694][ T5941] ims_pcu 6-1:2.0: probe with driver ims_pcu failed with error -22 [ 439.006088][ T5941] usb 6-1: USB disconnect, device number 31 [ 439.110277][ T1207] usb 1-1: device descriptor read/64, error -71 [ 439.154060][ T30] audit: type=1326 audit(1766530293.983:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11094 comm="syz.6.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f538f749 code=0x7fc00000 [ 439.207638][ T30] audit: type=1326 audit(1766530293.983:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11094 comm="syz.6.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fe9f539169a code=0x7fc00000 [ 439.294104][ T30] audit: type=1326 audit(1766530293.983:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11094 comm="syz.6.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f538f749 code=0x7fc00000 [ 439.355388][ T5941] usb 2-1: USB disconnect, device number 41 [ 439.402662][ T30] audit: type=1326 audit(1766530293.983:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11094 comm="syz.6.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f538f749 code=0x7fc00000 [ 439.433745][ T30] audit: type=1326 audit(1766530293.983:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11094 comm="syz.6.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f538f749 code=0x7fc00000 [ 439.461801][ T1207] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 439.478129][ T30] audit: type=1326 audit(1766530293.983:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11094 comm="syz.6.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe9f538f749 code=0x7fc00000 [ 439.516798][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.530683][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.539275][ T30] audit: type=1326 audit(1766530293.983:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11094 comm="syz.6.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f538f749 code=0x7fc00000 [ 439.629788][ T1207] usb 1-1: device descriptor read/64, error -71 [ 439.810739][ T1207] usb usb1-port1: attempt power cycle [ 440.170390][ T1207] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 440.190679][ T1207] usb 1-1: device descriptor read/8, error -71 [ 440.469852][ T1207] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 440.507978][ T30] kauditd_printk_skb: 1449 callbacks suppressed [ 440.507994][ T30] audit: type=1326 audit(1766530295.333:2245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11094 comm="syz.6.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f538f749 code=0x7fc00000 [ 440.551032][ T1207] usb 1-1: device descriptor read/8, error -71 [ 440.563741][ T30] audit: type=1326 audit(1766530295.383:2246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11094 comm="syz.6.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f538f749 code=0x7fc00000 [ 440.587827][ T30] audit: type=1326 audit(1766530295.383:2247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11094 comm="syz.6.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f538f749 code=0x7fc00000 [ 440.612901][ T30] audit: type=1326 audit(1766530295.383:2248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11094 comm="syz.6.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f538f749 code=0x7fc00000 [ 440.638542][ T30] audit: type=1326 audit(1766530295.383:2249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11094 comm="syz.6.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f538f749 code=0x7fc00000 [ 440.670919][ T1207] usb usb1-port1: unable to enumerate USB device [ 440.676641][ T30] audit: type=1326 audit(1766530295.383:2250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11094 comm="syz.6.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f538f749 code=0x7fc00000 [ 440.710624][ T30] audit: type=1326 audit(1766530295.383:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11094 comm="syz.6.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f538f749 code=0x7fc00000 [ 440.745020][ T30] audit: type=1326 audit(1766530295.383:2252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11094 comm="syz.6.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f538f749 code=0x7fc00000 [ 440.885156][ T30] audit: type=1326 audit(1766530295.383:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11094 comm="syz.6.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f538f749 code=0x7fc00000 [ 441.002131][T11122] Mount JFS Failure: -5 [ 441.006370][T11122] jfs_mount failed w/return code = -5 [ 441.367683][ T30] audit: type=1326 audit(1766530295.383:2254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11094 comm="syz.6.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f538f749 code=0x7fc00000 [ 441.840575][T11129] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1206'. [ 441.996698][T11130] FAULT_INJECTION: forcing a failure. [ 441.996698][T11130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 442.097256][T11130] CPU: 0 UID: 0 PID: 11130 Comm: syz.6.1205 Tainted: G L syzkaller #0 PREEMPT(full) [ 442.097283][T11130] Tainted: [L]=SOFTLOCKUP [ 442.097287][T11130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 442.097293][T11130] Call Trace: [ 442.097298][T11130] [ 442.097302][T11130] dump_stack_lvl+0x16c/0x1f0 [ 442.097321][T11130] should_fail_ex+0x512/0x640 [ 442.097340][T11130] _copy_from_user+0x2e/0xd0 [ 442.097358][T11130] copy_clone_args_from_user+0x150/0x7e0 [ 442.097375][T11130] ? irqentry_exit+0x1dd/0x8c0 [ 442.097389][T11130] ? lockdep_hardirqs_on+0x7c/0x110 [ 442.097403][T11130] ? irqentry_exit+0x1dd/0x8c0 [ 442.097415][T11130] ? rcu_is_watching+0x12/0xc0 [ 442.097426][T11130] ? __pfx_copy_clone_args_from_user+0x10/0x10 [ 442.097449][T11130] __do_sys_clone3+0xbd/0x290 [ 442.097460][T11130] ? __pfx___do_sys_clone3+0x10/0x10 [ 442.097487][T11130] do_syscall_64+0xcd/0xf80 [ 442.097502][T11130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.097513][T11130] RIP: 0033:0x7fe9f538f749 [ 442.097522][T11130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.097533][T11130] RSP: 002b:00007fe9f62d7f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 442.097544][T11130] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe9f538f749 [ 442.097550][T11130] RDX: 00007fe9f62d7f20 RSI: 0000000000000058 RDI: 00007fe9f62d7f20 [ 442.097557][T11130] RBP: 00007fe9f62d8090 R08: 0000000000000000 R09: 0000000000000058 [ 442.097563][T11130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.097569][T11130] R13: 00007fe9f55e6038 R14: 00007fe9f55e5fa0 R15: 00007fff1d9af238 [ 442.097583][T11130] [ 442.494173][T11136] tipc: Started in network mode [ 442.499054][T11136] tipc: Node identity ba74387e2406, cluster identity 4711 [ 442.533227][T11136] tipc: Enabled bearer , priority 0 [ 442.555542][T11136] syzkaller0: entered promiscuous mode [ 442.575456][T11136] syzkaller0: entered allmulticast mode [ 442.696866][T11136] tipc: Resetting bearer [ 443.180126][ T5955] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 443.273076][T11151] sp0: Synchronizing with TNC [ 443.294559][T11150] [U] è [ 443.320270][ T48] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 443.432994][ T5955] usb 1-1: config 0 has no interfaces? [ 443.441214][ T5955] usb 1-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 443.450433][ T5955] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 443.458507][ T5955] usb 1-1: SerialNumber: syz [ 443.561443][ T5941] tipc: Node number set to 2658285694 [ 443.585671][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 443.616009][T11156] fuse: Unknown parameter '0x0000000000000006' [ 443.641788][ T48] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 443.702955][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.858482][ T5955] usb 1-1: config 0 descriptor?? [ 443.863240][ T48] usb 3-1: config 0 descriptor?? [ 443.877345][T11136] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 444.406747][ T48] elan 0003:04F3:0755.000D: unknown main item tag 0x0 [ 444.480281][ T48] elan 0003:04F3:0755.000D: unknown main item tag 0x0 [ 444.487188][ T48] elan 0003:04F3:0755.000D: unknown main item tag 0x0 [ 444.494077][ T48] elan 0003:04F3:0755.000D: unknown main item tag 0x0 [ 444.500953][ T48] elan 0003:04F3:0755.000D: unknown main item tag 0x0 [ 444.512606][ T48] elan 0003:04F3:0755.000D: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 444.543975][ T48] usb 3-1: USB disconnect, device number 43 [ 444.563001][T11135] tipc: Resetting bearer [ 444.583667][T11135] tipc: Disabling bearer [ 444.732568][T11177] FAULT_INJECTION: forcing a failure. [ 444.732568][T11177] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 444.774313][T11177] CPU: 1 UID: 0 PID: 11177 Comm: syz.6.1220 Tainted: G L syzkaller #0 PREEMPT(full) [ 444.774333][T11177] Tainted: [L]=SOFTLOCKUP [ 444.774337][T11177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 444.774344][T11177] Call Trace: [ 444.774348][T11177] [ 444.774353][T11177] dump_stack_lvl+0x16c/0x1f0 [ 444.774372][T11177] should_fail_ex+0x512/0x640 [ 444.774391][T11177] _copy_from_user+0x2e/0xd0 [ 444.774408][T11177] copy_clone_args_from_user+0x488/0x7e0 [ 444.774426][T11177] ? get_pid_task+0xfc/0x250 [ 444.774439][T11177] ? __pfx_copy_clone_args_from_user+0x10/0x10 [ 444.774462][T11177] __do_sys_clone3+0xbd/0x290 [ 444.774473][T11177] ? __pfx___do_sys_clone3+0x10/0x10 [ 444.774489][T11177] ? __fget_files+0x20e/0x3c0 [ 444.774514][T11177] do_syscall_64+0xcd/0xf80 [ 444.774530][T11177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.774541][T11177] RIP: 0033:0x7fe9f538f749 [ 444.774551][T11177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 444.774562][T11177] RSP: 002b:00007fe9f62d7f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 444.774576][T11177] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe9f538f749 [ 444.774584][T11177] RDX: 00007fe9f62d7f20 RSI: 0000000000000058 RDI: 00007fe9f62d7f20 [ 444.774591][T11177] RBP: 00007fe9f62d8090 R08: 0000000000000000 R09: 0000000000000058 [ 444.774597][T11177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.774603][T11177] R13: 00007fe9f55e6038 R14: 00007fe9f55e5fa0 R15: 00007fff1d9af238 [ 444.774617][T11177] [ 445.320314][T11183] xt_TCPMSS: Only works on TCP SYN packets [ 445.477597][ T7700] usb 1-1: USB disconnect, device number 36 [ 446.567828][T11201] netlink: 'syz.0.1226': attribute type 4 has an invalid length. [ 446.587794][T11202] overlayfs: missing 'lowerdir' [ 446.826835][T11199] openvswitch: netlink: IP tunnel dst address not specified [ 446.845095][T11199] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=11199 comm=syz.2.1227 [ 446.971183][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 446.971196][ T30] audit: type=1400 audit(1766530301.803:2312): avc: denied { ioctl } for pid=11206 comm="syz.1.1223" path="socket:[30131]" dev="sockfs" ino=30131 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 447.093177][T11213] Mount JFS Failure: -5 [ 447.097407][T11213] jfs_mount failed w/return code = -5 [ 447.479297][T11199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1227'. [ 447.628529][T11218] futex_wake_op: syz.1.1230 tries to shift op by -1; fix this program [ 447.800407][T11218] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1230'. [ 447.956234][T11226] FAULT_INJECTION: forcing a failure. [ 447.956234][T11226] name failslab, interval 1, probability 0, space 0, times 0 [ 448.029295][T11226] CPU: 1 UID: 0 PID: 11226 Comm: syz.6.1231 Tainted: G L syzkaller #0 PREEMPT(full) [ 448.029327][T11226] Tainted: [L]=SOFTLOCKUP [ 448.029333][T11226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 448.029344][T11226] Call Trace: [ 448.029350][T11226] [ 448.029357][T11226] dump_stack_lvl+0x16c/0x1f0 [ 448.029385][T11226] should_fail_ex+0x512/0x640 [ 448.029412][T11226] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 448.029435][T11226] should_failslab+0xc2/0x120 [ 448.029459][T11226] kmem_cache_alloc_node_noprof+0x86/0x800 [ 448.029477][T11226] ? copy_process+0x4b5/0x7430 [ 448.029512][T11226] ? copy_process+0x4b5/0x7430 [ 448.029544][T11226] copy_process+0x4b5/0x7430 [ 448.029582][T11226] ? __pfx_copy_process+0x10/0x10 [ 448.029616][T11226] ? _copy_from_user+0x59/0xd0 [ 448.029643][T11226] kernel_clone+0xfc/0x910 [ 448.029655][T11226] ? get_pid_task+0xfc/0x250 [ 448.029671][T11226] ? __pfx_kernel_clone+0x10/0x10 [ 448.029695][T11226] __do_sys_clone3+0x212/0x290 [ 448.029708][T11226] ? __pfx___do_sys_clone3+0x10/0x10 [ 448.029731][T11226] ? __fget_files+0x20e/0x3c0 [ 448.029765][T11226] do_syscall_64+0xcd/0xf80 [ 448.029786][T11226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.029801][T11226] RIP: 0033:0x7fe9f538f749 [ 448.029813][T11226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.029827][T11226] RSP: 002b:00007fe9f62d7f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 448.029842][T11226] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe9f538f749 [ 448.029851][T11226] RDX: 00007fe9f62d7f20 RSI: 0000000000000058 RDI: 00007fe9f62d7f20 [ 448.029860][T11226] RBP: 00007fe9f62d8090 R08: 0000000000000000 R09: 0000000000000058 [ 448.029868][T11226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.029876][T11226] R13: 00007fe9f55e6038 R14: 00007fe9f55e5fa0 R15: 00007fff1d9af238 [ 448.029896][T11226] [ 448.755831][ T30] audit: type=1400 audit(1766530303.583:2313): avc: denied { read } for pid=11245 comm="syz.6.1238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 449.078514][ T7700] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 449.200347][ T5812] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 449.373383][ T30] audit: type=1326 audit(1766530304.193:2314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11253 comm="syz.2.1241" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f601b58f749 code=0x0 [ 449.461724][ T5812] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 449.470085][ T5812] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 449.479817][ T5812] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 449.548554][ T7700] usb 2-1: config 0 has no interfaces? [ 449.563635][ T7700] usb 2-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 449.580299][ T7700] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 449.592689][ T5812] usb 6-1: config 220 has no interface number 2 [ 449.612936][ T7700] usb 2-1: SerialNumber: syz [ 449.618703][ T5812] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 449.641284][ T7700] usb 2-1: config 0 descriptor?? [ 449.675064][ T5812] usb 6-1: config 220 interface 0 has no altsetting 0 [ 449.684241][ T5812] usb 6-1: config 220 interface 76 has no altsetting 0 [ 449.789633][T11269] 9pnet_virtio: no channels available for device syz [ 450.486687][ T5812] usb 6-1: config 220 interface 1 has no altsetting 0 [ 450.499450][ T5812] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 450.510421][ T5812] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.518523][ T5812] usb 6-1: Product: syz [ 450.522832][ T5812] usb 6-1: Manufacturer: syz [ 450.534118][ T5812] usb 6-1: SerialNumber: syz [ 450.644210][ T30] audit: type=1400 audit(1766530305.473:2315): avc: denied { ioctl } for pid=11273 comm="syz.2.1244" path="socket:[30214]" dev="sockfs" ino=30214 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 450.826914][T11276] netlink: 'syz.0.1245': attribute type 4 has an invalid length. [ 451.076312][T11282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1247'. [ 451.112113][T11282] 9p: Bad value for 'wfdno' [ 451.471776][ T5883] usb 2-1: USB disconnect, device number 42 [ 451.717386][ T30] audit: type=1400 audit(1766530306.533:2316): avc: denied { read write } for pid=11288 comm="syz.2.1250" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 451.936646][ T30] audit: type=1400 audit(1766530306.573:2317): avc: denied { open } for pid=11288 comm="syz.2.1250" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 452.008786][T11248] ALSA: mixer_oss: invalid OSS volume '' [ 452.024992][ T30] audit: type=1400 audit(1766530306.733:2318): avc: denied { ioctl } for pid=11288 comm="syz.2.1250" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 452.032558][ T5812] usb 6-1: selecting invalid altsetting 0 [ 452.099895][ T5812] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 452.126813][T11300] netlink: 'syz.0.1252': attribute type 13 has an invalid length. [ 452.141215][T11300] gretap0: refused to change device tx_queue_len [ 452.148289][T11300] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 452.163911][ T7700] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 452.184332][ T5812] uvcvideo 6-1:220.0: No valid video chain found. [ 452.195531][ T5812] usb 6-1: selecting invalid altsetting 0 [ 452.203218][ T5812] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 452.225412][ T5812] usb 6-1: USB disconnect, device number 32 [ 452.340382][ T7700] usb 3-1: Using ep0 maxpacket: 32 [ 452.346303][ T7700] usb 3-1: too many configurations: 206, using maximum allowed: 8 [ 452.357719][ T7700] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 452.365771][ T7700] usb 3-1: can't read configurations, error -61 [ 452.420244][ T5955] usb 2-1: new low-speed USB device number 43 using dummy_hcd [ 452.500242][ T7700] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 452.530289][ T5812] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 452.573163][ T5955] usb 2-1: No LPM exit latency info found, disabling LPM. [ 452.582758][ T5955] usb 2-1: config 5 has an invalid interface number: 161 but max is 1 [ 452.608760][ T5955] usb 2-1: config 5 has an invalid interface number: 187 but max is 1 [ 452.623237][ T5955] usb 2-1: config 5 has no interface number 0 [ 452.634068][ T5955] usb 2-1: config 5 has no interface number 1 [ 452.647468][ T5955] usb 2-1: config 5 interface 161 altsetting 132 endpoint 0xE has invalid maxpacket 16, setting to 0 [ 452.662828][ T7700] usb 3-1: Using ep0 maxpacket: 32 [ 452.672866][ T7700] usb 3-1: too many configurations: 206, using maximum allowed: 8 [ 452.680984][ T5812] usb 6-1: Using ep0 maxpacket: 32 [ 452.688666][ T5955] usb 2-1: config 5 interface 187 altsetting 7 endpoint 0x5 has invalid maxpacket 32, setting to 8 [ 452.707629][ T7700] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 452.715335][ T5955] usb 2-1: config 5 interface 187 altsetting 7 endpoint 0x6 has invalid maxpacket 16, setting to 8 [ 452.726086][ T5812] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 175, using maximum allowed: 30 [ 452.739661][ T7700] usb 3-1: can't read configurations, error -61 [ 452.746209][ T5955] usb 2-1: config 5 interface 187 altsetting 7 endpoint 0xF has invalid maxpacket 64, setting to 8 [ 452.755181][T11292] overlayfs: statfs failed on './file0' [ 452.757184][ T7700] usb usb3-port1: attempt power cycle [ 452.767818][ T5812] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 175 [ 452.784375][ T5955] usb 2-1: config 5 interface 187 altsetting 7 has a duplicate endpoint with address 0xE, skipping [ 452.804804][ T5812] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 452.816185][ T5955] usb 2-1: config 5 interface 187 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 452.828571][ T5812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.839954][ T5812] usb 6-1: config 0 descriptor?? [ 452.844999][ T5955] usb 2-1: config 5 interface 187 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 452.856537][ T5955] usb 2-1: config 5 interface 187 altsetting 7 endpoint 0x1 has invalid maxpacket 32, setting to 8 [ 452.877379][ T5955] usb 2-1: config 5 interface 187 altsetting 7 endpoint 0x8A has invalid maxpacket 16, setting to 8 [ 452.888211][ T5955] usb 2-1: config 5 interface 187 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 452.970265][ T5955] usb 2-1: config 5 interface 161 has no altsetting 0 [ 452.978055][ T5955] usb 2-1: config 5 interface 187 has no altsetting 0 [ 452.988364][ T5955] usb 2-1: New USB device found, idVendor=1b3d, idProduct=931e, bcdDevice=1c.a2 [ 452.997582][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.010216][ T5955] usb 2-1: Product: ﹈ﰄ⼞孛﷭왿èžìŸ¾ç¯ì¾ë¥ƒîµšì½šî˜’æ©©ì‰ã³¯è²¸ì‡šà»¬æƒã³±î¢æ€•è¤§éŸ†í‘쬌é‰Å튈ҽ᥮ᛛ㳾뛸杻銉汱씽‹ᧂ똄ﶀ㭽磿۞î¯å¿†ì˜½Ø¡è»â°€ë·”癧ꆈ钽깩踊夠䠦ꡲ恵쬪嫎ë—颕洕騹㽀᯲厀≖梳ゑ暱ã…鱯ᵮﮆ莒儴ꂰæ·éº‚âŸå¦ëª„飅ꃕë»ç†¨çƒ‘俔䩕ᬥç‘仙肰é³ì£»ä·†ìº‰ãœ¿î½Žäˆ’챵쇜㒡□餡 [ 453.058026][ T5955] usb 2-1: Manufacturer: у [ 453.066034][ T5955] usb 2-1: SerialNumber: щ [ 453.091817][ T5812] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 453.102740][ T5812] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 453.120687][ T5812] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 453.127852][ T5812] usb 6-1: media controller created [ 453.134934][ T30] audit: type=1400 audit(1766530307.963:2319): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 453.140480][ T7700] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 453.165380][ T5812] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 453.190794][ T7700] usb 3-1: Using ep0 maxpacket: 32 [ 453.200755][ T7700] usb 3-1: too many configurations: 206, using maximum allowed: 8 [ 453.229072][ T7700] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 453.238114][ T7700] usb 3-1: can't read configurations, error -61 [ 453.412248][ T5955] ftdi_sio 2-1:5.161: FTDI USB Serial Device converter detected [ 453.470458][ T5883] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 454.428205][ T7700] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 454.439077][ T5955] ftdi_sio ttyUSB0: unknown device type: 0x1ca2 [ 454.449162][ T5955] ftdi_sio 2-1:5.187: FTDI USB Serial Device converter detected [ 454.457544][ T5955] ftdi_sio ttyUSB1: unknown device type: 0x1ca2 [ 454.465164][ T7700] usb 3-1: Using ep0 maxpacket: 32 [ 454.474394][ T5955] usb 2-1: USB disconnect, device number 43 [ 454.480539][ T7700] usb 3-1: too many configurations: 206, using maximum allowed: 8 [ 454.489563][ T5955] ftdi_sio 2-1:5.161: device disconnected [ 454.496175][ T7700] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 454.505911][ T5955] ftdi_sio 2-1:5.187: device disconnected [ 454.511689][ T7700] usb 3-1: can't read configurations, error -61 [ 454.518900][ T7700] usb usb3-port1: unable to enumerate USB device [ 454.600240][ T5883] usb 7-1: Using ep0 maxpacket: 8 [ 454.614174][ T5883] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 454.623369][ T5883] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.637978][ T5883] usb 7-1: Product: syz [ 454.649956][ T5883] usb 7-1: Manufacturer: syz [ 454.655337][ T5883] usb 7-1: SerialNumber: syz [ 454.707836][T11320] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1258'. [ 454.738378][ T5883] usb 7-1: config 0 descriptor?? [ 454.756109][ T5883] gspca_main: se401-2.14.0 probing 047d:5003 [ 454.894036][ T30] audit: type=1400 audit(1766530309.723:2320): avc: denied { write } for pid=11325 comm="syz.1.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 455.001660][ T7700] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 455.014801][ T5812] az6027: usb out operation failed. (-71) [ 455.022973][ T5812] az6027: usb out operation failed. (-71) [ 455.028722][ T5812] stb0899_attach: Driver disabled by Kconfig [ 455.036938][ T5812] az6027: no front-end attached [ 455.036938][ T5812] [ 455.044416][ T5812] az6027: usb out operation failed. (-71) [ 455.050223][ T5812] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 455.058851][ T5812] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input35 [ 455.086057][ T5955] libceph: connect (1)[c::]:6789 error -101 [ 455.094072][ T5955] libceph: mon0 (1)[c::]:6789 connect error [ 455.103174][ T5812] dvb-usb: schedule remote query interval to 400 msecs. [ 455.119091][ T5812] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 455.146807][ T5812] usb 6-1: USB disconnect, device number 33 [ 455.153005][ T7700] usb 3-1: device descriptor read/64, error -71 [ 455.211249][ T5812] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 455.390006][ T5955] libceph: connect (1)[c::]:6789 error -101 [ 455.396901][ T5955] libceph: mon0 (1)[c::]:6789 connect error [ 455.520252][ T7700] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 455.670290][ T7700] usb 3-1: device descriptor read/64, error -71 [ 455.781587][ T7700] usb usb3-port1: attempt power cycle [ 455.892218][T11337] netlink: 'syz.5.1262': attribute type 4 has an invalid length. [ 455.918138][ T5955] libceph: connect (1)[c::]:6789 error -101 [ 455.926009][ T5955] libceph: mon0 (1)[c::]:6789 connect error [ 455.971893][ T5883] usb 7-1: reset high-speed USB device number 10 using dummy_hcd [ 456.030199][T11306] ceph: No mds server is up or the cluster is laggy [ 456.130500][ T5883] usb 7-1: device descriptor read/64, error -32 [ 456.292682][ T7700] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 456.321644][ T7700] usb 3-1: device descriptor read/8, error -71 [ 456.357085][T11345] 9pnet_virtio: no channels available for device syz [ 457.000307][ T7700] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 457.031163][ T7700] usb 3-1: device descriptor read/8, error -71 [ 457.196227][ T7700] usb usb3-port1: unable to enumerate USB device [ 457.482171][ T7700] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 457.574000][ T30] audit: type=1400 audit(1766530312.403:2321): avc: denied { kexec_image_load } for pid=11353 comm="syz.6.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 457.652329][ T7700] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 457.663602][ T7700] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 457.680183][ T7700] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.830184][ T7700] usb 2-1: config 0 descriptor?? [ 457.862418][T11349] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 457.935292][ T5883] gspca_se401: read req failed req 0x06 error -19 [ 458.080802][ T5883] usb 7-1: USB disconnect, device number 10 [ 458.309523][ T7700] elan 0003:04F3:0755.000E: unknown main item tag 0x0 [ 458.330315][ T7700] elan 0003:04F3:0755.000E: unknown main item tag 0x0 [ 458.337199][ T7700] elan 0003:04F3:0755.000E: unknown main item tag 0x0 [ 458.353202][ T7700] elan 0003:04F3:0755.000E: unknown main item tag 0x0 [ 458.360637][ T7700] elan 0003:04F3:0755.000E: unknown main item tag 0x0 [ 458.400371][ T5812] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 458.810326][ T7700] elan 0003:04F3:0755.000E: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 458.855741][ T7700] usb 2-1: USB disconnect, device number 44 [ 458.898744][T11357] kexec: Could not allocate control_code_buffer [ 458.972888][ T5812] usb 6-1: Using ep0 maxpacket: 32 [ 458.984951][ T5812] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 175, using maximum allowed: 30 [ 459.006516][ T5812] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 175 [ 459.116953][ T5812] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 459.132038][ T5812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.149350][ T5812] usb 6-1: config 0 descriptor?? [ 459.768190][T11381] input: syz0 as /devices/virtual/input/input36 [ 460.651247][ T5812] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 461.752817][ T5812] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 461.763428][ T5812] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 461.770656][ T5812] usb 6-1: media controller created [ 461.983010][ T5812] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 462.362735][T11393] 9pnet_virtio: no channels available for device syz [ 462.721431][ T5812] az6027: usb out operation failed. (-71) [ 462.741872][ T5812] az6027: usb out operation failed. (-71) [ 462.760333][ T5812] stb0899_attach: Driver disabled by Kconfig [ 462.770241][ T5812] az6027: no front-end attached [ 462.770241][ T5812] [ 462.787796][ T5812] az6027: usb out operation failed. (-71) [ 462.791651][T11395] netlink: 'syz.6.1280': attribute type 1 has an invalid length. [ 462.797579][ T5812] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 462.810877][ T5812] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input37 [ 462.833993][ T5812] dvb-usb: schedule remote query interval to 400 msecs. [ 462.850271][ T5812] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 462.891874][T11395] 8021q: adding VLAN 0 to HW filter on device bond2 [ 462.909948][ T5812] usb 6-1: USB disconnect, device number 34 [ 462.951327][T11397] bond2: (slave geneve2): making interface the new active one [ 462.981075][T11402] netlink: 'syz.2.1282': attribute type 10 has an invalid length. [ 462.997404][T11397] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 463.000194][T11402] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1282'. [ 463.056814][T11402] veth0_vlan: left promiscuous mode [ 463.080369][T11402] veth0_vlan: entered promiscuous mode [ 463.081245][ T5812] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 463.121998][T11402] veth0_vlan: entered allmulticast mode [ 463.156593][T11402] bridge0: port 3(veth0_vlan) entered blocking state [ 463.180185][T11402] bridge0: port 3(veth0_vlan) entered disabled state [ 463.218809][T11402] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 465.121207][ T5812] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 465.171136][T11428] kvm: pic: non byte read [ 465.297404][ T5955] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 465.321905][ T5812] usb 2-1: config 0 has no interfaces? [ 465.330013][ T5812] usb 2-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 465.339855][ T5812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 465.348309][ T5812] usb 2-1: SerialNumber: syz [ 465.356874][ T5812] usb 2-1: config 0 descriptor?? [ 465.440310][ T5941] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 465.870323][ T5955] usb 7-1: Using ep0 maxpacket: 32 [ 465.877556][ T5955] usb 7-1: config 2 has an invalid interface number: 194 but max is 0 [ 465.886628][ T5955] usb 7-1: config 2 has no interface number 0 [ 465.892959][ T5955] usb 7-1: config 2 interface 194 altsetting 0 endpoint 0xA has invalid maxpacket 1584, setting to 1024 [ 465.904664][ T5955] usb 7-1: config 2 interface 194 altsetting 0 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 465.915874][ T5955] usb 7-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=9c.f6 [ 465.925117][ T5955] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.930192][ T5883] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 465.943606][T11432] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 465.962059][ T5941] usb 6-1: config 0 has an invalid interface number: 249 but max is 0 [ 465.971735][ T5941] usb 6-1: config 0 has no interface number 0 [ 465.978004][ T5941] usb 6-1: config 0 interface 249 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 465.990088][ T5941] usb 6-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 466.024868][ T5941] usb 6-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 466.033983][ T5941] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.644230][ T5941] usb 6-1: config 0 descriptor?? [ 466.652159][ T5883] usb 1-1: Using ep0 maxpacket: 32 [ 466.798402][ T5883] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 175, using maximum allowed: 30 [ 466.814273][ T5941] port100 6-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 466.822745][ T5883] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 175 [ 466.921479][T11454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.931253][T11454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.994773][T11455] input: syz1 as /devices/virtual/input/input38 [ 467.225249][ T5883] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 467.235126][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.267022][ T5883] usb 1-1: config 0 descriptor?? [ 467.448209][ T7700] usb 6-1: USB disconnect, device number 35 [ 467.477228][ T5883] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 467.485615][ T5883] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 467.495647][ T5883] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 467.502947][ T5883] usb 1-1: media controller created [ 467.516736][ T5883] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 467.693492][ T5941] usb 2-1: USB disconnect, device number 45 [ 468.690269][ T5955] usb 7-1: string descriptor 0 read error: -71 [ 468.724505][ T5955] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 468.999833][T11471] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 469.366326][T11476] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 469.555075][ T5955] usb 7-1: USB disconnect, device number 11 [ 469.720942][ T5883] az6027: usb out operation failed. (-71) [ 470.110255][ T5883] az6027: usb out operation failed. (-71) [ 470.116013][ T5883] stb0899_attach: Driver disabled by Kconfig [ 470.130362][ T5883] az6027: no front-end attached [ 470.130362][ T5883] [ 470.160349][T11486] netlink: 'syz.5.1300': attribute type 4 has an invalid length. [ 470.180504][ T5883] az6027: usb out operation failed. (-71) [ 470.186228][ T5883] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 470.211643][ T5883] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input39 [ 470.271118][ T5883] dvb-usb: schedule remote query interval to 400 msecs. [ 470.278181][ T5883] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 470.369482][ T5883] usb 1-1: USB disconnect, device number 37 [ 472.081455][ T5883] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 472.320092][T11507] : entered promiscuous mode [ 472.341592][T11508] 9pnet_virtio: no channels available for device syz [ 473.690273][ T5883] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 473.845265][ T5883] usb 2-1: device descriptor read/64, error -71 [ 474.100565][ T7700] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 474.110290][ T5883] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 474.250206][ T7700] usb 1-1: Using ep0 maxpacket: 8 [ 474.256617][ T7700] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 474.267714][ T7700] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 474.270846][ T5883] usb 2-1: device descriptor read/64, error -71 [ 474.276865][ T7700] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.292501][ T7700] usb 1-1: config 0 descriptor?? [ 474.391245][ T5883] usb usb2-port1: attempt power cycle [ 474.730294][ T5883] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 474.851927][ T5883] usb 2-1: device descriptor read/8, error -71 [ 475.120380][ T5883] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 475.203560][ T5883] usb 2-1: device descriptor read/8, error -71 [ 475.346061][ T7700] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 475.365135][ T5883] usb usb2-port1: unable to enumerate USB device [ 475.490310][T11557] --map-set only usable from mangle table [ 475.605826][T11555] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1316'. [ 475.650558][ T5883] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 475.827692][ T5883] usb 6-1: config 0 has an invalid interface number: 249 but max is 0 [ 476.742556][ T5883] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.762527][ T5883] usb 6-1: config 0 has no interface number 0 [ 476.768921][ T5883] usb 6-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 476.781346][ T5883] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.801127][ T5883] usb 6-1: config 0 descriptor?? [ 476.807760][ T5883] port100 6-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 477.009300][ T5941] usb 6-1: USB disconnect, device number 36 [ 477.040375][ T5883] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 478.397490][ T48] usb 1-1: USB disconnect, device number 38 [ 478.420465][ T5883] usb 7-1: Using ep0 maxpacket: 32 [ 478.427182][ T5883] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 478.453574][ T5883] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.470225][ T1207] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 478.511615][ T5883] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 478.624515][ T1207] usb 3-1: config 127 has an invalid interface number: 124 but max is 0 [ 478.657208][ T1207] usb 3-1: config 127 has no interface number 0 [ 478.736725][ T1207] usb 3-1: config 127 interface 124 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 478.878222][ T6236] Bluetooth: hci5: Frame reassembly failed (-84) [ 478.939006][T11563] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1319'. [ 478.951998][ T1207] usb 3-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=1d.4f [ 478.962195][ T6236] Bluetooth: hci5: Frame reassembly failed (-84) [ 478.976043][ T1207] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.061780][T11563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.092739][T11563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.140806][ T5883] gspca_nw80x: reg_r err -71 [ 479.145593][ T5883] nw80x 7-1:3.0: probe with driver nw80x failed with error -71 [ 479.164103][ T5883] usb 7-1: USB disconnect, device number 12 [ 479.318368][ T30] audit: type=1400 audit(1766530334.143:2322): avc: denied { execute } for pid=11587 comm="syz.1.1322" path="/dev/sequencer" dev="devtmpfs" ino=1286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 479.618654][T11602] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1327'. [ 479.658077][ T30] audit: type=1400 audit(1766530334.483:2323): avc: denied { write } for pid=11603 comm="syz.0.1328" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 479.658161][T11604] random: crng reseeded on system resumption [ 479.911820][ T30] audit: type=1400 audit(1766530334.663:2324): avc: denied { setcheckreqprot } for pid=11598 comm="syz.1.1326" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 480.261736][ T1207] peak_usb 3-1:127.124 can0: unable to request usb[type=0 value=1] err=-71 [ 480.281726][ T1207] peak_usb 3-1:127.124: unable to read PCAN-Chip USB firmware info (err -71) [ 480.295141][T11608] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=11608 comm=syz.0.1328 [ 480.441942][ T1207] peak_usb 3-1:127.124: probe with driver peak_usb failed with error -71 [ 480.471874][ T1207] usb 3-1: USB disconnect, device number 52 [ 480.550074][ T30] audit: type=1400 audit(1766530335.333:2325): avc: denied { write } for pid=11603 comm="syz.0.1328" name="file0" dev="tmpfs" ino=1624 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 480.584887][ T30] audit: type=1400 audit(1766530335.333:2326): avc: denied { open } for pid=11603 comm="syz.0.1328" path="/287/file0" dev="tmpfs" ino=1624 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 480.660943][ T30] audit: type=1400 audit(1766530335.343:2327): avc: denied { ioctl } for pid=11603 comm="syz.0.1328" path="/287/file0" dev="tmpfs" ino=1624 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 480.870262][ T5138] Bluetooth: hci5: command 0x1003 tx timeout [ 480.877896][ T5816] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 480.936613][ T1207] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 481.150218][ T1207] usb 3-1: Using ep0 maxpacket: 16 [ 481.160697][ T30] audit: type=1400 audit(1766530335.993:2328): avc: denied { mounton } for pid=11620 comm="syz.6.1332" path="/103/file0" dev="tmpfs" ino=590 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 481.161737][ T1207] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 481.259064][ T1207] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 481.280202][ T1207] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 481.301001][ T1207] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 481.310060][ T1207] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 481.323638][ T1207] usb 3-1: SerialNumber: syz [ 481.331799][T11612] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 481.341042][ T1207] cdc_acm 3-1:1.0: skipping garbage [ 481.351941][ T1207] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -12 [ 481.500235][ T48] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 481.646888][ T30] audit: type=1400 audit(1766530336.333:2329): avc: denied { create } for pid=11636 comm="syz.1.1336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 481.720453][ T48] usb 1-1: Using ep0 maxpacket: 16 [ 481.741949][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.773394][ T48] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 481.807456][ T48] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 481.831647][ T48] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.861947][ T48] usb 1-1: config 0 descriptor?? [ 482.260474][ T7700] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 482.420197][ T7700] usb 6-1: Using ep0 maxpacket: 8 [ 482.431787][ T7700] usb 6-1: unable to get BOS descriptor or descriptor too short [ 482.460941][ T7700] usb 6-1: config 2 has an invalid interface number: 33 but max is 0 [ 482.469037][ T7700] usb 6-1: config 2 has no interface number 0 [ 482.485470][ T7700] usb 6-1: config 2 interface 33 has no altsetting 0 [ 482.504693][ T7700] usb 6-1: string descriptor 0 read error: -22 [ 482.520631][ T7700] usb 6-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=83.d4 [ 482.539901][ T7700] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.564614][ T7700] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. [ 482.584855][ T7700] dvb-usb: bulk message failed: -22 (2/0) [ 482.602239][ T7700] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 482.622552][ T7700] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353)) [ 482.642930][ T7700] usb 6-1: media controller created [ 482.649752][ T7700] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 482.693868][ T7700] usb 6-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 482.718807][ T7700] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 482.719154][T11648] vivid-000: ================= START STATUS ================= [ 482.777975][T11648] vivid-000: Enable Output Cropping: true grabbed [ 482.834505][T11648] vivid-000: Enable Output Composing: true grabbed [ 482.841464][T11648] vivid-000: Enable Output Scaler: true grabbed [ 482.847994][T11648] vivid-000: Tx RGB Quantization Range: Automatic grabbed [ 482.856090][T11648] vivid-000: Transmit Mode: HDMI grabbed [ 482.862273][T11648] vivid-000: Hotplug Present: 0x00000000 [ 482.941941][T11648] vivid-000: RxSense Present: 0x00000000 [ 482.952837][T11648] vivid-000: EDID Present: 0x00000000 [ 482.958662][T11648] vivid-000: ================== END STATUS ================== [ 483.241690][ T7700] rc_core: IR keymap rc-dtt200u not found [ 483.274815][ T7700] Registered IR keymap rc-empty [ 483.291181][ T7700] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 483.325148][ T7700] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input41 [ 483.356858][ T5940] usb 3-1: USB disconnect, device number 53 [ 483.508303][T11660] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1340'. [ 483.774960][ T7700] dvb-usb: schedule remote query interval to 300 msecs. [ 483.817143][ T7700] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected. [ 484.123682][ T7700] dvb-usb: bulk message failed: -22 (1/0) [ 484.133455][ T7700] dvb-usb: error -22 while querying for an remote control event. [ 484.453537][ T48] usbhid 1-1:0.0: can't add hid device: -71 [ 484.460214][ T7700] dvb-usb: bulk message failed: -22 (1/0) [ 484.466028][ T7700] dvb-usb: error -22 while querying for an remote control event. [ 484.471891][ T48] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 484.508777][ T48] usb 1-1: USB disconnect, device number 39 [ 484.800222][ T5812] dvb-usb: bulk message failed: -22 (1/0) [ 484.805972][ T5812] dvb-usb: error -22 while querying for an remote control event. [ 484.980343][ T7700] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 485.161542][ T7700] usb 7-1: device descriptor read/64, error -71 [ 485.205107][ T48] usb 6-1: USB disconnect, device number 37 [ 485.777821][ T7700] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 485.801762][ T48] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected. [ 485.930412][ T7700] usb 7-1: device descriptor read/64, error -71 [ 486.144859][ T7700] usb usb7-port1: attempt power cycle [ 486.783209][ T30] audit: type=1400 audit(1766530341.603:2330): avc: denied { name_bind } for pid=11702 comm="syz.5.1351" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 487.030301][ T7700] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 487.060642][ T7700] usb 7-1: device descriptor read/8, error -71 [ 487.101856][T11733] erspan0: entered promiscuous mode [ 487.211740][ T5812] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 487.327426][ T7700] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 487.387761][ T7700] usb 7-1: device descriptor read/8, error -71 [ 487.445531][ T5812] usb 1-1: Using ep0 maxpacket: 16 [ 487.526139][ T5812] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.537436][ T7700] usb usb7-port1: unable to enumerate USB device [ 487.545224][ T5812] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.571802][ T5812] usb 1-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 487.581037][ T5812] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.592917][ T5812] usb 1-1: config 0 descriptor?? [ 487.710275][ T7700] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 487.780503][ T5940] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 487.944045][ T5940] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 487.952867][ T5940] usb 6-1: config 1 has no interface number 0 [ 487.959046][ T5940] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0xF has invalid maxpacket 1056, setting to 1024 [ 487.999996][ T48] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 488.009658][ T5940] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 488.025534][ T5940] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0xC has invalid maxpacket 80 [ 488.040580][ T5940] usb 6-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 488.060888][ T5940] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 488.070920][ T5940] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.078999][ T5940] usb 6-1: Product: syz [ 488.083673][ T5940] usb 6-1: Manufacturer: syz [ 488.088327][ T5940] usb 6-1: SerialNumber: syz [ 488.108524][T11743] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 488.119571][T11743] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 488.135464][ T5940] usb 6-1: Expected 3 endpoints, found: 2 [ 488.184687][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 488.195375][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 488.206930][ T48] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 488.216309][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.225940][ T48] usb 3-1: Product: syz [ 488.230296][ T48] usb 3-1: Manufacturer: syz [ 488.234894][ T48] usb 3-1: SerialNumber: syz [ 488.241158][ T48] usb 3-1: config 0 descriptor?? [ 488.248543][ T48] iguanair 3-1:0.0: probe with driver iguanair failed with error -12 [ 488.258837][ T5812] usbhid 1-1:0.0: can't add hid device: -71 [ 488.264993][ T5812] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 488.274873][ T5812] usb 1-1: USB disconnect, device number 40 [ 488.329848][T11751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.339290][T11751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.348318][ T5955] usb 6-1: USB disconnect, device number 38 [ 488.750696][ T30] audit: type=1400 audit(1766530343.583:2331): avc: denied { append } for pid=11757 comm="syz.1.1365" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 488.782175][T11758] netlink: 'syz.1.1365': attribute type 5 has an invalid length. [ 488.894293][ T30] audit: type=1400 audit(1766530343.723:2332): avc: denied { write } for pid=11759 comm="syz.6.1366" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 489.790382][ T5940] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 490.055499][ T30] audit: type=1400 audit(1766530344.883:2333): avc: denied { bind } for pid=11770 comm="syz.6.1369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 490.124886][ T30] audit: type=1400 audit(1766530344.953:2334): avc: denied { accept } for pid=11770 comm="syz.6.1369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 490.171595][ T5940] usb 1-1: Using ep0 maxpacket: 32 [ 490.187464][ T5940] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 490.197613][ T5940] usb 1-1: config 0 has no interface number 0 [ 490.223427][ T5940] usb 1-1: config 0 interface 184 has no altsetting 0 [ 490.312335][ T5940] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 490.327710][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.349614][ T5940] usb 1-1: Product: syz [ 490.353896][ T5940] usb 1-1: Manufacturer: syz [ 490.358678][ T5940] usb 1-1: SerialNumber: syz [ 490.377977][ T5940] usb 1-1: config 0 descriptor?? [ 490.389724][ T30] audit: type=1400 audit(1766530345.213:2335): avc: denied { create } for pid=11777 comm="syz.5.1371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 490.424289][ T5940] smsc75xx v1.0.0 [ 490.486318][ T5812] usb 3-1: USB disconnect, device number 54 [ 490.502809][ T30] audit: type=1400 audit(1766530345.333:2336): avc: denied { map } for pid=11777 comm="syz.5.1371" path="/proc/836/numa_maps" dev="proc" ino=32343 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 490.540263][ T5955] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 490.558080][ T30] audit: type=1400 audit(1766530345.363:2337): avc: denied { execute } for pid=11777 comm="syz.5.1371" path="/proc/836/numa_maps" dev="proc" ino=32343 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 490.605996][T11768] input: syz0 as /devices/virtual/input/input43 [ 490.700315][ T5955] usb 7-1: Using ep0 maxpacket: 8 [ 490.775443][ T5955] usb 7-1: config 0 has an invalid interface number: 96 but max is 0 [ 490.784900][ T5955] usb 7-1: config 0 has no interface number 0 [ 490.791521][ T5955] usb 7-1: config 0 interface 96 altsetting 3 endpoint 0x88 has an invalid bInterval 254, changing to 11 [ 490.803239][ T5955] usb 7-1: config 0 interface 96 has no altsetting 0 [ 490.812249][ T5955] usb 7-1: New USB device found, idVendor=0b57, idProduct=2a8d, bcdDevice=33.74 [ 490.822013][ T5955] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.830009][ T5955] usb 7-1: Product: syz [ 490.834928][ T5955] usb 7-1: Manufacturer: syz [ 490.839642][ T5955] usb 7-1: SerialNumber: syz [ 490.862398][ T5955] usb 7-1: config 0 descriptor?? [ 490.890230][ T5812] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 490.895623][T11787] netlink: 'syz.5.1373': attribute type 4 has an invalid length. [ 491.022885][ T5940] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 491.040195][ T5812] usb 2-1: Using ep0 maxpacket: 32 [ 491.047217][ T5812] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 491.048158][ T5940] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 491.056590][ T5812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.120563][ T5955] usb 7-1: USB disconnect, device number 18 [ 491.140994][ T5812] usb 2-1: config 0 descriptor?? [ 491.359150][ T5812] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 491.387293][ T5812] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 491.426272][ T5812] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 491.449242][ T5812] usb 2-1: media controller created [ 491.488073][ T5812] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 491.791464][T11793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.800023][T11793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.115070][T11796] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 492.342795][ T5940] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 492.540611][ T5876] usb 7-1: new low-speed USB device number 19 using dummy_hcd [ 492.550065][ T5940] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 492.570309][ T5940] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 492.600780][ T5940] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 492.662195][ T5812] az6027: usb out operation failed. (-71) [ 492.678358][ T5812] az6027: usb out operation failed. (-71) [ 492.687201][ T5812] stb0899_attach: Driver disabled by Kconfig [ 492.692099][ T5940] usb 1-1: USB disconnect, device number 41 [ 492.720355][ T5876] usb 7-1: device descriptor read/64, error -71 [ 492.810394][ T5812] az6027: no front-end attached [ 492.810394][ T5812] [ 493.295598][ T5812] az6027: usb out operation failed. (-71) [ 493.301517][ T5812] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 493.312803][ T5812] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input45 [ 493.326581][ T5812] dvb-usb: schedule remote query interval to 400 msecs. [ 493.338731][ T5812] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 493.373280][ T5812] usb 2-1: USB disconnect, device number 50 [ 493.413976][ T5812] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 493.430598][ T5876] usb 7-1: new low-speed USB device number 20 using dummy_hcd [ 493.640262][ T5876] usb 7-1: device descriptor read/64, error -71 [ 493.873414][ T5876] usb usb7-port1: attempt power cycle [ 494.300289][ T5876] usb 7-1: new low-speed USB device number 21 using dummy_hcd [ 494.333666][ T5876] usb 7-1: device descriptor read/8, error -71 [ 494.590486][ T5876] usb 7-1: new low-speed USB device number 22 using dummy_hcd [ 494.629228][ T5876] usb 7-1: device descriptor read/8, error -71 [ 494.660248][ T1207] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 494.740641][ T5876] usb usb7-port1: unable to enumerate USB device [ 494.830205][ T1207] usb 2-1: Using ep0 maxpacket: 16 [ 494.847159][ T1207] usb 2-1: config 0 has an invalid interface number: 57 but max is 0 [ 494.883772][ T1207] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 494.992007][ T1207] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 495.050434][ T1207] usb 2-1: config 0 has no interface number 0 [ 495.056639][ T1207] usb 2-1: config 0 interface 57 altsetting 0 endpoint 0x9 has an invalid bInterval 230, changing to 11 [ 495.470380][ T1207] usb 2-1: config 0 interface 57 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 495.481854][ T1207] usb 2-1: config 0 interface 57 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 495.564445][ T1207] usb 2-1: config 0 interface 57 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 495.599826][ T1207] usb 2-1: config 0 interface 57 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 495.690387][ T1207] usb 2-1: config 0 interface 57 altsetting 0 has 8 endpoint descriptors, different from the interface descriptor's value: 9 [ 495.752692][ T1207] usb 2-1: New USB device found, idVendor=14aa, idProduct=0001, bcdDevice=f0.0b [ 495.756654][ T30] audit: type=1326 audit(1766530350.583:2338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11841 comm="syz.0.1385" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f41c698f749 code=0x0 [ 495.801669][ T1207] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.810188][ T1207] usb 2-1: Product: syz [ 495.814330][ T1207] usb 2-1: Manufacturer: syz [ 495.818896][ T1207] usb 2-1: SerialNumber: syz [ 495.858608][ T1207] usb 2-1: config 0 descriptor?? [ 495.887997][ T1207] dvb-usb: found a 'AVerMedia AverTV DVBT USB1.1' in cold state, will try to load a firmware [ 495.931443][ T1207] usb 2-1: Direct firmware load for dvb-usb-dibusb-5.0.0.11.fw failed with error -2 [ 495.969892][ T30] audit: type=1400 audit(1766530350.793:2339): avc: denied { firmware_load } for pid=1207 comm="kworker/1:2" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 495.969903][ T1207] usb 2-1: Falling back to sysfs fallback for: dvb-usb-dibusb-5.0.0.11.fw [ 496.080208][ T5876] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 496.230498][ T5876] usb 1-1: Using ep0 maxpacket: 32 [ 496.242834][ T5876] usb 1-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 496.260375][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.272253][ T5876] usb 1-1: config 0 descriptor?? [ 496.292402][ T5876] usb 1-1: selecting invalid altsetting 3 [ 496.298399][ T5876] comedi comedi5: could not set alternate setting 3 in high speed [ 496.306640][ T5876] usbduxsigma 1-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 496.319618][ T5876] usbduxsigma 1-1:0.0: probe with driver usbduxsigma failed with error -22 [ 496.599362][T11854] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.606917][T11854] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.823940][T11848] netlink: 'syz.5.1387': attribute type 6 has an invalid length. [ 497.632644][T11858] netlink: 'syz.2.1386': attribute type 4 has an invalid length. [ 498.387666][T11866] erspan0: entered promiscuous mode [ 498.686926][T11870] befs: (nullb0): No write support. Marking filesystem read-only [ 498.717217][T11870] befs: (nullb0): invalid magic header [ 498.796892][ T5876] usb 1-1: USB disconnect, device number 42 [ 499.581312][T11885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1395'. [ 499.614200][T11885] vlan2: entered allmulticast mode [ 500.423232][T11897] netlink: 'syz.0.1398': attribute type 1 has an invalid length. [ 500.872072][T11897] 8021q: adding VLAN 0 to HW filter on device bond3 [ 500.883606][T11898] bond3: (slave geneve2): making interface the new active one [ 500.892097][T11898] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 500.952922][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.962303][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.145738][T11910] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 501.464254][ T30] audit: type=1400 audit(1766530356.293:2340): avc: denied { listen } for pid=11914 comm="syz.1.1403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 501.729459][T11922] erspan0: entered promiscuous mode [ 501.895749][T11925] loop2: detected capacity change from 0 to 7 [ 501.911305][T11925] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 501.925476][T11925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 501.932639][ T30] audit: type=1326 audit(1766530356.763:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11923 comm="syz.5.1406" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0494d8f749 code=0x0 [ 501.957536][T11925] Dev loop2: unable to read RDB block 7 [ 501.968014][T11925] loop2: unable to read partition table [ 501.974063][T11925] loop2: partition table beyond EOD, truncated [ 501.987395][T11925] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 502.085691][T11932] geneve2: entered promiscuous mode [ 502.091418][T11932] geneve2: entered allmulticast mode [ 502.136954][ T6063] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 502.151835][ T6063] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 502.177928][ T6063] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 502.200311][ T6063] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 502.946785][T11947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.961121][T11947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.980477][T11947] xt_policy: output policy not valid in PREROUTING and INPUT [ 502.999030][T11949] xt_policy: output policy not valid in PREROUTING and INPUT [ 503.021235][ T5812] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 503.140309][ T5955] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 503.172397][ T5812] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 503.182769][ T5812] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 503.199853][ T5883] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 503.205332][ T5812] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 503.223153][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.231599][ T5812] usb 3-1: Product: syz [ 503.235976][ T5812] usb 3-1: Manufacturer: syz [ 503.240681][ T5812] usb 3-1: SerialNumber: syz [ 503.280249][ T5955] usb 6-1: device descriptor read/64, error -71 [ 503.388902][ T5883] usb 7-1: unable to get BOS descriptor or descriptor too short [ 503.411041][ T5883] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 503.421208][ T5883] usb 7-1: config 0 has no interfaces? [ 503.428444][ T5883] usb 7-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 503.438153][ T5883] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.446206][ T5883] usb 7-1: Product: syz [ 503.450612][ T5883] usb 7-1: Manufacturer: syz [ 503.455576][ T5883] usb 7-1: SerialNumber: syz [ 503.475184][ T5883] usb 7-1: config 0 descriptor?? [ 503.530721][ T5955] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 503.792278][ T5883] usb 7-1: USB disconnect, device number 23 [ 503.823326][ T5812] usb 3-1: skipping empty audio interface (v1) [ 503.840431][ T5955] usb 6-1: device descriptor read/64, error -71 [ 503.854787][ T5812] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 503.866084][ T5812] usb 3-1: USB disconnect, device number 55 [ 503.960488][ T5955] usb usb6-port1: attempt power cycle [ 504.103432][T11970] SELinux: Context system_u: is not valid (left unmapped). [ 504.128598][ T30] audit: type=1400 audit(1766530358.953:2342): avc: denied { relabelto } for pid=11968 comm="syz.0.1418" name="memfd:" dev="hugetlbfs" ino=33349 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:" [ 504.162406][ T30] audit: type=1400 audit(1766530358.963:2343): avc: denied { associate } for pid=11968 comm="syz.0.1418" name="memfd:" dev="hugetlbfs" ino=33349 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 srawcon="system_u:" [ 504.281811][T11974] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 504.301158][ T5955] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 504.309337][T11974] kvm: apic: phys broadcast and lowest prio [ 504.321106][ T5955] usb 6-1: device descriptor read/8, error -71 [ 505.090224][ T5955] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 505.206542][ T5955] usb 6-1: device descriptor read/8, error -71 [ 505.497559][ T5955] usb usb6-port1: unable to enumerate USB device [ 505.524297][T11996] IPVS: stopping backup sync thread 7329 ... [ 505.545574][ T5955] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 505.553105][ T5955] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 505.560773][ T5955] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 505.568184][ T5955] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 505.575664][ T5955] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 505.583314][ T5955] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 505.590881][ T5955] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 505.598309][ T5955] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 505.608774][ T5955] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 505.617357][ T5955] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 505.628115][ T5955] hid-generic 0003:0004:0000.000F: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 505.678555][T12000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1428'. [ 507.099985][T12018] loop7: detected capacity change from 0 to 16384 [ 507.241396][T12018] loop7: detected capacity change from 16384 to 16383 [ 507.564276][ T30] audit: type=1400 audit(1766530362.393:2344): avc: denied { getopt } for pid=12041 comm="syz.0.1437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 508.524109][T12051] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1439'. [ 510.772999][ T48] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 510.830215][ T5955] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 510.948189][ T48] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 510.957929][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.970412][ T48] usb 3-1: Product: syz [ 510.987763][ T48] usb 3-1: Manufacturer: syz [ 511.003309][ T48] usb 3-1: SerialNumber: syz [ 511.006289][ T5955] usb 6-1: unable to get BOS descriptor or descriptor too short [ 511.018910][ T5955] usb 6-1: not running at top speed; connect to a high speed hub [ 511.038016][ T48] usb 3-1: config 0 descriptor?? [ 511.043980][ T5955] usb 6-1: config 5 has an invalid interface number: 246 but max is 0 [ 511.052334][ T5955] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 511.069308][ T5955] usb 6-1: config 5 has no interface number 0 [ 511.094450][ T5955] usb 6-1: config 5 interface 246 altsetting 4 endpoint 0x1 has invalid wMaxPacketSize 0 [ 511.107036][ T5955] usb 6-1: config 5 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 511.227442][ T5955] usb 6-1: config 5 interface 246 has no altsetting 0 [ 511.273778][T12077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.274083][T12077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.726460][ T5955] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 512.037298][ T5955] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.049737][ T48] usb-storage 3-1:0.0: USB Mass Storage device detected [ 512.070148][ T5955] usb 6-1: Product: syz [ 512.074419][ T5955] usb 6-1: Manufacturer: syz [ 512.078990][ T5955] usb 6-1: SerialNumber: syz [ 512.989745][ T48] usb 3-1: USB disconnect, device number 56 [ 513.816253][ T30] audit: type=1326 audit(1766530368.633:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12117 comm="syz.6.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f538f749 code=0x7ffc0000 [ 513.854402][ T48] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 514.150209][ T48] usb 3-1: Using ep0 maxpacket: 8 [ 514.170654][ T30] audit: type=1326 audit(1766530368.633:2346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12117 comm="syz.6.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f538f749 code=0x7ffc0000 [ 514.202645][ T48] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 514.213257][ T48] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 514.223494][ T48] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 514.233743][ T30] audit: type=1326 audit(1766530368.633:2347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12117 comm="syz.6.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fe9f538f749 code=0x7ffc0000 [ 514.259024][ T48] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 514.273114][ T48] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 514.281974][ T30] audit: type=1326 audit(1766530368.633:2348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12117 comm="syz.6.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f538f749 code=0x7ffc0000 [ 514.282370][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.444531][ T996] usb 6-1: Failed to submit usb control message: -71 [ 514.461202][ T5955] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 514.488007][ T996] usb 6-1: unable to send the bmi data to the device: -71 [ 514.507958][ T5955] usb 6-1: USB disconnect, device number 43 [ 514.516805][ T30] audit: type=1326 audit(1766530368.633:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12117 comm="syz.6.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f538f749 code=0x7ffc0000 [ 514.549133][ T996] usb 6-1: unable to get target info from device [ 514.619870][T12132] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1457'. [ 514.890241][ T30] audit: type=1326 audit(1766530368.633:2350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12117 comm="syz.6.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fe9f538f749 code=0x7ffc0000 [ 514.890648][ T996] usb 6-1: could not get target info (-71) [ 514.920261][ T48] usb 3-1: GET_CAPABILITIES returned 0 [ 514.925744][ T48] usbtmc 3-1:16.0: can't read capabilities [ 514.937782][ T30] audit: type=1326 audit(1766530368.633:2351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12117 comm="syz.6.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f538f749 code=0x7ffc0000 [ 515.079791][ T996] usb 6-1: could not probe fw (-71) [ 515.160212][ T30] audit: type=1326 audit(1766530368.633:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12117 comm="syz.6.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f538f749 code=0x7ffc0000 [ 515.197995][T12136] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1458'. [ 515.239542][ T48] usb 3-1: USB disconnect, device number 57 [ 515.280046][ T30] audit: type=1326 audit(1766530368.633:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12117 comm="syz.6.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe9f538f749 code=0x7ffc0000 [ 515.308783][ T30] audit: type=1326 audit(1766530368.633:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12117 comm="syz.6.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f538f749 code=0x7ffc0000 [ 515.641046][T12152] Device name cannot be null; rc = [-22] [ 516.370949][ T5955] usb 7-1: new low-speed USB device number 24 using dummy_hcd [ 516.539051][T12163] bond1: entered promiscuous mode [ 516.544291][T12163] bond1: entered allmulticast mode [ 516.549949][T12163] 8021q: adding VLAN 0 to HW filter on device bond1 [ 516.633932][ T5955] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.644106][ T5955] usb 7-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 516.915202][ T5955] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.414720][ T5955] usb 7-1: config 0 descriptor?? [ 517.795607][T12182] sctp: [Deprecated]: syz.5.1470 (pid 12182) Use of int in maxseg socket option. [ 517.795607][T12182] Use struct sctp_assoc_value instead [ 517.922364][ T5955] prodikeys 0003:041E:2801.0010: item fetching failed at offset 0/5 [ 517.931058][ T5955] prodikeys 0003:041E:2801.0010: hid parse failed [ 517.937586][ T5955] prodikeys 0003:041E:2801.0010: probe with driver prodikeys failed with error -22 [ 518.611328][T12147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.633105][T12147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.650281][ T5940] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 518.660993][ T5812] usb 7-1: USB disconnect, device number 24 [ 519.334654][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 519.334666][ T30] audit: type=1400 audit(1766530374.163:2380): avc: denied { write } for pid=12191 comm="syz.0.1473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 519.770216][ T5940] usb 3-1: Using ep0 maxpacket: 8 [ 520.230378][ T5883] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 520.302863][T12211] erspan0: entered promiscuous mode [ 520.396811][ T5883] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 520.417291][ T5883] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 520.434518][ T5883] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 520.462325][ T5883] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.475665][ T5883] usb 7-1: Product: syz [ 520.479940][ T5883] usb 7-1: Manufacturer: syz [ 520.619894][ T5883] usb 7-1: SerialNumber: syz [ 521.081389][ T5940] usb 3-1: device descriptor read/all, error -71 [ 521.410403][ T5883] usb 7-1: 0:2 : does not exist [ 521.475961][ T30] audit: type=1400 audit(1766530376.303:2381): avc: denied { watch watch_reads } for pid=12225 comm="syz.2.1483" path="/304/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 521.549969][ T5883] usb 7-1: USB disconnect, device number 25 [ 521.687678][ T30] audit: type=1400 audit(1766530376.513:2382): avc: denied { create } for pid=12229 comm="syz.2.1485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 521.709047][T12232] netlink: 'syz.2.1485': attribute type 10 has an invalid length. [ 521.720059][T12232] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.730001][T12232] bond0: (slave team0): Enslaving as an active interface with an up link [ 521.790288][ T48] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 522.327714][T12234] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1486'. [ 522.346989][ T48] usb 1-1: Using ep0 maxpacket: 8 [ 522.479948][ T48] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 522.496209][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.540501][ T48] usb 1-1: Product: syz [ 522.544688][ T48] usb 1-1: Manufacturer: syz [ 522.560351][ T48] usb 1-1: SerialNumber: syz [ 522.571842][ T48] usb 1-1: config 0 descriptor?? [ 522.802764][T12241] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 523.037341][T12228] input: syz1 as /devices/virtual/input/input48 [ 523.128188][ T48] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 524.055176][T12257] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1493'. [ 524.099771][T12257] 8021q: adding VLAN 0 to HW filter on device bond3 [ 524.125933][T12259] 8021q: adding VLAN 0 to HW filter on device bond3 [ 524.133361][T12259] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 524.149409][T12259] bond3: (slave vti0): Error -95 calling set_mac_address [ 524.873466][ T48] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 524.956803][ T5812] usb 1-1: USB disconnect, device number 43 [ 525.667474][T12283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1499'. [ 525.752894][T12285] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1499'. [ 526.735840][T12302] omfs: Invalid superblock (0) [ 527.327553][ T30] audit: type=1400 audit(1766530382.153:2383): avc: denied { ioctl } for pid=12311 comm="syz.2.1506" path="socket:[34334]" dev="sockfs" ino=34334 ioctlcmd=0x6611 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 528.002002][T12309] loop6: detected capacity change from 0 to 524287487 [ 528.016875][T12309] buffer_io_error: 11 callbacks suppressed [ 528.016896][T12309] Buffer I/O error on dev loop6, logical block 0, async page read [ 528.031426][T12309] Buffer I/O error on dev loop6, logical block 0, async page read [ 528.040639][T12309] Buffer I/O error on dev loop6, logical block 0, async page read [ 528.048848][T12309] Buffer I/O error on dev loop6, logical block 0, async page read [ 528.057068][T12309] Buffer I/O error on dev loop6, logical block 0, async page read [ 528.065332][T12309] Buffer I/O error on dev loop6, logical block 0, async page read [ 528.073571][T12309] Buffer I/O error on dev loop6, logical block 0, async page read [ 528.081803][T12309] Buffer I/O error on dev loop6, logical block 0, async page read [ 528.089977][T12309] ldm_validate_partition_table(): Disk read failed. [ 528.096874][T12309] Buffer I/O error on dev loop6, logical block 0, async page read [ 528.110198][T12309] Buffer I/O error on dev loop6, logical block 0, async page read [ 528.122526][T12309] Dev loop6: unable to read RDB block 0 [ 528.128514][T12309] loop6: unable to read partition table [ 528.134584][T12309] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜C) failed (rc=-5) [ 528.714857][T12322] netlink: 'syz.0.1508': attribute type 5 has an invalid length. [ 528.739144][T12335] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 529.597537][T12340] lo speed is unknown, defaulting to 1000 [ 529.605962][T12340] lo speed is unknown, defaulting to 1000 [ 529.612013][T12340] lo speed is unknown, defaulting to 1000 [ 529.622015][T12340] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 529.637380][T12340] lo speed is unknown, defaulting to 1000 [ 529.643801][T12340] lo speed is unknown, defaulting to 1000 [ 529.650545][T12340] lo speed is unknown, defaulting to 1000 [ 529.657025][T12340] lo speed is unknown, defaulting to 1000 [ 529.663862][T12340] lo speed is unknown, defaulting to 1000 [ 531.053254][T12373] comedi comedi0: dmm32at: I/O port conflict (0x3,16) [ 531.291167][ T5955] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 531.320300][ T7700] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 531.451523][ T5955] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 531.465784][ T5955] usb 6-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 531.474995][ T5955] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.483897][ T7700] usb 1-1: Using ep0 maxpacket: 16 [ 531.490997][ T7700] usb 1-1: config 1 has an invalid interface number: 229 but max is 0 [ 531.500437][ T5955] usb 6-1: config 0 descriptor?? [ 531.505575][ T7700] usb 1-1: config 1 has no interface number 0 [ 531.511886][ T7700] usb 1-1: config 1 interface 229 altsetting 129 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 531.523392][ T7700] usb 1-1: config 1 interface 229 altsetting 129 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 531.536424][ T7700] usb 1-1: config 1 interface 229 has no altsetting 0 [ 531.545715][ T7700] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= e.64 [ 531.554975][ T7700] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.563037][ T7700] usb 1-1: Product: syz [ 531.567221][ T7700] usb 1-1: Manufacturer: syz [ 531.571927][ T7700] usb 1-1: SerialNumber: syz [ 531.828219][ T7700] usb 1-1: USB disconnect, device number 44 [ 532.826947][ T5955] nintendo 0003:057E:200E.0011: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.5-1/input0 [ 532.892299][ T5955] nintendo 0003:057E:200E.0011: Failed charging grip handshake [ 532.901632][ T5955] nintendo 0003:057E:200E.0011: Failed to initialize controller; ret=-110 [ 532.914231][ T5955] nintendo 0003:057E:200E.0011: probe - fail = -110 [ 532.922156][ T5955] nintendo 0003:057E:200E.0011: probe with driver nintendo failed with error -110 [ 533.900231][ T48] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 534.066680][ T48] usb 1-1: Using ep0 maxpacket: 8 [ 534.076065][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 534.100180][ T48] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 534.109238][ T48] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.135863][ T48] usb 1-1: config 0 descriptor?? [ 534.306647][ T5940] usb 6-1: USB disconnect, device number 44 [ 534.381617][ T48] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 535.950911][T12425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1535'. [ 536.444850][T12425] geneve3: entered promiscuous mode [ 536.450809][T12425] geneve3: entered allmulticast mode [ 536.463827][T12429] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1535'. [ 536.499096][ T1153] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 536.525638][ T1153] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 536.557046][ T1153] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 536.587771][ T1153] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 536.949317][ T5940] usb 1-1: USB disconnect, device number 45 [ 537.060995][ T5812] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 537.592084][ T5812] usb 3-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 537.607279][ T5812] usb 3-1: config 0 interface 0 has no altsetting 0 [ 537.622664][ T5812] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 537.640724][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 537.661340][ T5812] usb 3-1: Product: syz [ 537.669275][ T5812] usb 3-1: Manufacturer: syz [ 537.679401][ T5812] usb 3-1: SerialNumber: syz [ 537.692097][ T5812] usb 3-1: config 0 descriptor?? [ 537.722161][ T5812] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 537.922637][T12450] tmpfs: User quota block hardlimit too large. [ 538.051095][ T5940] usb 3-1: USB disconnect, device number 60 [ 539.006888][ T30] audit: type=1400 audit(1766530393.833:2384): avc: denied { read } for pid=12456 comm="syz.5.1543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 539.109151][ T5812] libceph: connect (1)[c::]:6789 error -101 [ 539.117100][ T5812] libceph: mon0 (1)[c::]:6789 connect error [ 539.163434][T12468] overlayfs: failed lookup in lower (newroot/333, name='bus', err=-40): overlapping layers [ 539.239651][T12464] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 539.396376][ T30] audit: type=1400 audit(1766530394.223:2385): avc: denied { mounton } for pid=12475 comm="syz.2.1547" path="/bus" dev="ramfs" ino=35522 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 539.421505][ T5812] libceph: connect (1)[c::]:6789 error -101 [ 539.430243][ T5812] libceph: mon0 (1)[c::]:6789 connect error [ 539.944056][ T7700] libceph: connect (1)[c::]:6789 error -101 [ 540.025585][ T7700] libceph: mon0 (1)[c::]:6789 connect error [ 540.061964][T12478] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 540.079979][T12485] tmpfs: Unknown parameter 'usSquota_inode_hardlimit' [ 540.082840][T12478] overlayfs: failed to set xattr on upper [ 540.101947][T12478] overlayfs: ...falling back to redirect_dir=nofollow. [ 540.140810][T12462] ceph: No mds server is up or the cluster is laggy [ 540.149274][T12478] overlayfs: ...falling back to uuid=null. [ 540.704636][T12496] misc userio: No port type given on /dev/userio [ 541.677989][T12504] tmpfs: Bad value for 'mpol' [ 543.530395][T12537] pimreg: entered allmulticast mode [ 545.380800][T12558] xt_TPROXY: Can be used only with -p tcp or -p udp [ 545.489292][ T5955] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 545.540274][ T7700] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 545.702885][ T5955] usb 3-1: config 0 has no interfaces? [ 545.850396][ T7700] usb 7-1: Using ep0 maxpacket: 8 [ 545.870279][ T5138] Bluetooth: hci4: command 0x0c1a tx timeout [ 545.905146][ T5955] usb 3-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 545.923056][ T7700] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 545.945917][ T5955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 545.959380][ T7700] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 545.995543][ T5955] usb 3-1: SerialNumber: syz [ 546.001273][ T7700] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.009705][ T5955] usb 3-1: config 0 descriptor?? [ 546.059683][ T7700] usb 7-1: config 0 descriptor?? [ 546.819208][ T7700] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 548.093442][ T5883] usb 3-1: USB disconnect, device number 61 [ 548.149081][T12581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1572'. [ 548.178474][T12581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1572'. [ 548.980206][ T5883] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 549.139290][ T5883] usb 3-1: device descriptor read/64, error -71 [ 549.520276][ T5883] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 549.730178][ T5883] usb 3-1: device descriptor read/64, error -71 [ 549.755920][T12601] openvswitch: netlink: Actions may not be safe on all matching packets [ 549.765062][T12604] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 549.771815][T12604] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 549.792000][T12604] vhci_hcd vhci_hcd.0: Device attached [ 549.805919][ T5812] usb 7-1: USB disconnect, device number 26 [ 549.835975][T12605] vhci_hcd: connection closed [ 549.841005][ T1105] vhci_hcd vhci_hcd.5: stop threads [ 549.851543][ T5883] usb usb3-port1: attempt power cycle [ 549.881298][ T1105] vhci_hcd vhci_hcd.5: release socket [ 549.886693][ T1105] vhci_hcd vhci_hcd.5: disconnect device [ 550.300372][ T5812] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 550.564948][ T5883] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 550.603352][ T5883] usb 3-1: device descriptor read/8, error -71 [ 550.740731][ T5812] usb 7-1: Using ep0 maxpacket: 8 [ 550.853955][ T5812] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 550.941638][ T5883] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 551.001081][ T5812] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 551.001407][ T5883] usb 3-1: device descriptor read/8, error -71 [ 551.010238][ T5812] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.116635][ T5812] usb 7-1: config 0 descriptor?? [ 551.243699][T12624] fuse: Unknown parameter 'D-Ž' [ 551.252594][ T5883] usb usb3-port1: unable to enumerate USB device [ 551.265155][T12624] netlink: 'syz.2.1584': attribute type 10 has an invalid length. [ 551.273140][T12624] bridge0: port 3(netdevsim0) entered blocking state [ 551.279889][T12624] bridge0: port 3(netdevsim0) entered disabled state [ 551.287045][T12624] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 551.297809][T12624] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 552.294935][ T5955] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 552.317818][ T5812] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 552.486459][ T5955] usb 6-1: config 0 has no interfaces? [ 552.494016][ T5955] usb 6-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 552.533845][ T5955] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 552.560202][ T5955] usb 6-1: SerialNumber: syz [ 552.572273][ T5955] usb 6-1: config 0 descriptor?? [ 553.145778][ T30] audit: type=1326 audit(1766530407.963:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12640 comm="syz.2.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f601b58f749 code=0x7ffc0000 [ 553.222104][ T30] audit: type=1326 audit(1766530407.963:2387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12640 comm="syz.2.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f601b58f749 code=0x7ffc0000 [ 553.292183][ T30] audit: type=1326 audit(1766530407.963:2388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12640 comm="syz.2.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f601b58f749 code=0x7ffc0000 [ 553.380259][ T48] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 553.402704][ T30] audit: type=1326 audit(1766530407.963:2389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12640 comm="syz.2.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f601b58f749 code=0x7ffc0000 [ 553.500343][ T30] audit: type=1326 audit(1766530407.963:2390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12640 comm="syz.2.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f601b58f749 code=0x7ffc0000 [ 553.620285][ T48] usb 3-1: Using ep0 maxpacket: 16 [ 553.631009][ T30] audit: type=1326 audit(1766530407.963:2391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12640 comm="syz.2.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f601b58f749 code=0x7ffc0000 [ 553.681312][ T48] usb 3-1: unable to get BOS descriptor or descriptor too short [ 553.692988][ T48] usb 3-1: config 255 has an invalid interface number: 7 but max is 0 [ 553.701790][ T48] usb 3-1: config 255 has no interface number 0 [ 553.708234][ T48] usb 3-1: config 255 interface 7 altsetting 78 bulk endpoint 0x3 has invalid maxpacket 1024 [ 553.718797][ T48] usb 3-1: config 255 interface 7 has no altsetting 0 [ 553.730485][ T30] audit: type=1326 audit(1766530407.963:2392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12640 comm="syz.2.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f601b58f749 code=0x7ffc0000 [ 553.741237][ T48] usb 3-1: New USB device found, idVendor=06e0, idProduct=0319, bcdDevice=1f.59 [ 553.965241][ T30] audit: type=1326 audit(1766530407.963:2393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12640 comm="syz.2.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f601b58f749 code=0x7ffc0000 [ 554.010496][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.454928][ T30] audit: type=1326 audit(1766530407.963:2394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12640 comm="syz.2.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f601b58f749 code=0x7ffc0000 [ 554.500315][ T48] usb 3-1: Product: syz [ 554.504533][ T48] usb 3-1: Manufacturer: syz [ 554.509123][ T48] usb 3-1: SerialNumber: syz [ 554.525691][T12643] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 554.627647][ T30] audit: type=1326 audit(1766530407.963:2395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12640 comm="syz.2.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f601b58f749 code=0x7ffc0000 [ 554.871297][ T5812] usb 7-1: USB disconnect, device number 27 [ 555.127699][ T5940] usb 6-1: USB disconnect, device number 45 [ 557.893397][ T1207] dvb-usb: did not find the firmware file 'dvb-usb-dibusb-5.0.0.11.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 557.971847][ T1207] dvb_usb_dibusb_mb 2-1:0.57: probe with driver dvb_usb_dibusb_mb failed with error -22 [ 558.044193][ T1207] usb 2-1: USB disconnect, device number 51 [ 558.677849][ T48] ti_usb_3410_5052 3-1:255.7: TI USB 3410 1 port adapter converter detected [ 558.812376][ T48] ti_usb_3410_5052 3-1:255.7: missing endpoints [ 558.822741][ T48] usb 3-1: USB disconnect, device number 66 [ 559.620385][ T1207] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 560.448239][ T1207] usb 2-1: Using ep0 maxpacket: 16 [ 560.470173][ T1207] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.618534][ T1207] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.633665][ T1207] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 560.647375][ T1207] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 560.656538][ T1207] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.814330][T12720] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 561.622214][ T1207] usb 2-1: config 0 descriptor?? [ 561.741074][ T1207] usbhid 2-1:0.0: can't add hid device: -71 [ 561.747194][ T1207] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 561.766253][ T1207] usb 2-1: USB disconnect, device number 52 [ 562.422287][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.423693][T12732] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 562.440625][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.834722][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 562.834739][ T30] audit: type=1400 audit(1766530417.663:2461): avc: denied { ioctl } for pid=12725 comm="syz.1.1610" path="socket:[36365]" dev="sockfs" ino=36365 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 563.134655][T12704] Set syz1 is full, maxelem 65536 reached [ 563.340611][T12712] Set syz1 is full, maxelem 65536 reached [ 563.401703][ T30] audit: type=1400 audit(1766530418.233:2462): avc: denied { getopt } for pid=12747 comm="syz.6.1614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 564.120165][ T1207] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 564.299890][T12758] lo speed is unknown, defaulting to 1000 [ 564.351535][ T1207] usb 6-1: config index 0 descriptor too short (expected 28277, got 36) [ 564.401707][ T1207] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 564.450415][ T1207] usb 6-1: config 0 has no interfaces? [ 564.479266][ T1207] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 564.520011][ T1207] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.638954][ T1207] usb 6-1: config 0 descriptor?? [ 564.791017][ T5883] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 565.361075][ T5883] usb 7-1: Using ep0 maxpacket: 8 [ 565.373970][ T5883] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 565.404248][ T5883] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 565.438640][ T5883] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.462767][ T5883] usb 7-1: config 0 descriptor?? [ 566.207856][ T5883] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 566.301620][T12785] comedi comedi3: comedi_config --init_data is deprecated [ 567.000329][ T7700] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 567.352539][ T7700] usb 1-1: config 0 has no interfaces? [ 568.332837][ T7700] usb 1-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 569.335850][ T7700] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 569.382909][ T7700] usb 1-1: SerialNumber: syz [ 623.835735][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.842085][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 673.370065][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 673.377028][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P12788/1:b..l [ 673.385948][ C1] rcu: (detected by 1, t=10502 jiffies, g=50541, q=623 ncpus=2) [ 673.393658][ C1] task:syz.5.1622 state:R running task stack:26376 pid:12788 tgid:12787 ppid:6420 task_flags:0x400040 flags:0x00080000 [ 673.407941][ C1] Call Trace: [ 673.411206][ C1] [ 673.414114][ C1] ? __schedule+0x10b9/0x6150 [ 673.418771][ C1] __schedule+0x1139/0x6150 [ 673.423270][ C1] ? __pfx___schedule+0x10/0x10 [ 673.428093][ C1] ? mark_held_locks+0x49/0x80 [ 673.432832][ C1] preempt_schedule_irq+0x51/0x90 [ 673.437840][ C1] irqentry_exit+0x1d8/0x8c0 [ 673.442406][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 673.448355][ C1] RIP: 0010:lock_acquire+0x62/0x330 [ 673.453526][ C1] Code: b4 18 12 83 f8 07 0f 87 a2 02 00 00 89 c0 48 0f a3 05 72 b9 ee 0e 0f 82 74 02 00 00 8b 35 0a ea ee 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 89 b4 18 12 0f 85 ad 02 00 00 48 83 c4 [ 673.473104][ C1] RSP: 0018:ffffc9000dfe6c80 EFLAGS: 00000206 [ 673.479150][ C1] RAX: 0000000000000046 RBX: ffffffff8e3c96a0 RCX: 0000000013d622c6 [ 673.487089][ C1] RDX: 0000000000000000 RSI: ffffffff8daa7ea1 RDI: ffffffff8bf2b400 [ 673.495032][ C1] RBP: 0000000000000002 R08: 00000000accd7842 R09: 000000002accd784 [ 673.502973][ C1] R10: 0000000000000002 R11: ffff88802fb02ff0 R12: 0000000000000000 [ 673.510914][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 673.518865][ C1] ? unwind_next_frame+0x3f4/0x20b0 [ 673.524041][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 673.530185][ C1] unwind_next_frame+0xd1/0x20b0 [ 673.535096][ C1] ? unwind_next_frame+0xbd/0x20b0 [ 673.540182][ C1] ? shmem_fault+0x1fe/0xa00 [ 673.544768][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 673.550895][ C1] arch_stack_walk+0x94/0x100 [ 673.555552][ C1] ? shmem_fault+0x1fe/0xa00 [ 673.560119][ C1] stack_trace_save+0x8e/0xc0 [ 673.564773][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 673.570123][ C1] ? __lock_acquire+0x436/0x2890 [ 673.575049][ C1] save_stack+0x160/0x1f0 [ 673.579356][ C1] ? __pfx_save_stack+0x10/0x10 [ 673.584176][ C1] ? post_alloc_hook+0x1af/0x220 [ 673.589097][ C1] ? get_page_from_freelist+0xd0b/0x31a0 [ 673.594704][ C1] ? __alloc_frozen_pages_noprof+0x25f/0x2430 [ 673.600747][ C1] ? alloc_pages_mpol+0x1fb/0x550 [ 673.605742][ C1] ? folio_alloc_mpol_noprof+0x36/0x2f0 [ 673.611264][ C1] ? shmem_alloc_folio+0x135/0x160 [ 673.616345][ C1] ? shmem_alloc_and_add_folio+0x494/0xc20 [ 673.622121][ C1] ? shmem_get_folio_gfp+0x67f/0x1610 [ 673.627467][ C1] ? shmem_fault+0x1fe/0xa00 [ 673.632036][ C1] ? __lock_acquire+0x436/0x2890 [ 673.636944][ C1] __set_page_owner+0x91/0x560 [ 673.641679][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 673.647023][ C1] ? bad_range+0x261/0x4c0 [ 673.651422][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 673.656594][ C1] post_alloc_hook+0x1af/0x220 [ 673.661336][ C1] get_page_from_freelist+0xd0b/0x31a0 [ 673.666775][ C1] ? __pfx___might_resched+0x10/0x10 [ 673.672033][ C1] ? should_fail_alloc_page+0xee/0x130 [ 673.677467][ C1] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 673.683336][ C1] ? __lock_acquire+0x436/0x2890 [ 673.688771][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 673.695067][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 673.700077][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 673.705426][ C1] ? find_held_lock+0x2b/0x80 [ 673.710093][ C1] ? __lock_acquire+0x436/0x2890 [ 673.715005][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 673.720872][ C1] ? policy_nodemask+0xea/0x4e0 [ 673.725712][ C1] alloc_pages_mpol+0x1fb/0x550 [ 673.730540][ C1] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 673.735890][ C1] folio_alloc_mpol_noprof+0x36/0x2f0 [ 673.741243][ C1] shmem_alloc_folio+0x135/0x160 [ 673.746159][ C1] shmem_alloc_and_add_folio+0x494/0xc20 [ 673.751769][ C1] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 673.757916][ C1] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 673.763786][ C1] shmem_get_folio_gfp+0x67f/0x1610 [ 673.768962][ C1] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 673.774570][ C1] ? filemap_map_pages+0x12dd/0x1e00 [ 673.779830][ C1] shmem_fault+0x1fe/0xa00 [ 673.784223][ C1] ? __pfx_shmem_fault+0x10/0x10 [ 673.789138][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 673.794569][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 673.800088][ C1] __do_fault+0x10d/0x490 [ 673.804390][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 673.809815][ C1] do_fault+0xae4/0x1ad0 [ 673.814035][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 673.819465][ C1] __handle_mm_fault+0x1919/0x2bb0 [ 673.824555][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 673.829990][ C1] ? __pte_offset_map_lock+0x174/0x310 [ 673.835428][ C1] ? find_held_lock+0x2b/0x80 [ 673.840089][ C1] ? follow_page_pte+0x5cf/0x1390 [ 673.845091][ C1] handle_mm_fault+0x3fe/0xad0 [ 673.849831][ C1] __get_user_pages+0x54e/0x3590 [ 673.854747][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 673.860097][ C1] populate_vma_page_range+0x267/0x3f0 [ 673.865542][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 673.871504][ C1] ? __pfx_find_vma_intersection+0x10/0x10 [ 673.877283][ C1] ? do_mmap+0x69c/0x1210 [ 673.881585][ C1] __mm_populate+0x1d8/0x380 [ 673.886161][ C1] ? __pfx___mm_populate+0x10/0x10 [ 673.891246][ C1] ? up_write+0x282/0x4e0 [ 673.895553][ C1] vm_mmap_pgoff+0x37f/0x470 [ 673.900117][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 673.905201][ C1] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 673.911585][ C1] ? count_memcg_events+0x122/0x290 [ 673.916768][ C1] ? find_held_lock+0x2b/0x80 [ 673.921420][ C1] ksys_mmap_pgoff+0x7d/0x5c0 [ 673.926079][ C1] __x64_sys_mmap+0x125/0x190 [ 673.930760][ C1] do_syscall_64+0xcd/0xf80 [ 673.935250][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.941126][ C1] RIP: 0033:0x7f0494d8f749 [ 673.945528][ C1] RSP: 002b:00007f0495cbc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 673.953940][ C1] RAX: ffffffffffffffda RBX: 00007f0494fe5fa0 RCX: 00007f0494d8f749 [ 673.961900][ C1] RDX: b635773f06ebbeef RSI: 0000000000b36000 RDI: 0000200000000000 [ 673.969850][ C1] RBP: 00007f0494e13f91 R08: ffffffffffffffff R09: 0000000000000000 [ 673.977796][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 673.985741][ C1] R13: 00007f0494fe6038 R14: 00007f0494fe5fa0 R15: 00007ffc871241d8 [ 673.993704][ C1] [ 673.996698][ C1] rcu: rcu_preempt kthread starved for 9045 jiffies! g50541 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 674.007771][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 674.017708][ C1] rcu: RCU grace-period kthread stack dump: [ 674.023566][ C1] task:rcu_preempt state:R running task stack:28840 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 674.037094][ C1] Call Trace: [ 674.040363][ C1] [ 674.043272][ C1] ? __schedule+0x10b9/0x6150 [ 674.047924][ C1] __schedule+0x1139/0x6150 [ 674.052408][ C1] ? __pfx___schedule+0x10/0x10 [ 674.057230][ C1] ? find_held_lock+0x2b/0x80 [ 674.061884][ C1] ? schedule+0x2d7/0x3a0 [ 674.066213][ C1] schedule+0xe7/0x3a0 [ 674.070257][ C1] schedule_timeout+0x123/0x290 [ 674.075079][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 674.080421][ C1] ? __pfx_process_timeout+0x10/0x10 [ 674.085687][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 674.091466][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 674.096911][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 674.101651][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 674.106910][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 674.112082][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 674.116991][ C1] ? rcu_gp_cleanup+0x7c1/0xe90 [ 674.121817][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 674.127597][ C1] rcu_gp_kthread+0x26d/0x380 [ 674.132259][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 674.137438][ C1] ? rcu_is_watching+0x12/0xc0 [ 674.142174][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 674.147348][ C1] ? __kthread_parkme+0x19e/0x250 [ 674.152357][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 674.157541][ C1] kthread+0x3c5/0x780 [ 674.161585][ C1] ? __pfx_kthread+0x10/0x10 [ 674.166149][ C1] ? rcu_is_watching+0x12/0xc0 [ 674.170896][ C1] ? __pfx_kthread+0x10/0x10 [ 674.175456][ C1] ret_from_fork+0x983/0xb10 [ 674.180020][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 674.185102][ C1] ? __switch_to+0x7af/0x10d0 [ 674.189752][ C1] ? __pfx_kthread+0x10/0x10 [ 674.194313][ C1] ret_from_fork_asm+0x1a/0x30 [ 674.199057][ C1] [ 674.202049][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 674.208340][ C1] Sending NMI from CPU 1 to CPUs 0: [ 674.213521][ C0] NMI backtrace for cpu 0 [ 674.213534][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 674.213554][ C0] Tainted: [L]=SOFTLOCKUP [ 674.213559][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 674.213566][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 674.213584][ C0] Code: c6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 49 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 674.213598][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 674.213610][ C0] RAX: 000000000293211d RBX: 0000000000000000 RCX: ffffffff8b7816d9 [ 674.213620][ C0] RDX: 0000000000000000 RSI: ffffffff8dacdf23 RDI: ffffffff8bf2b400 [ 674.213629][ C0] RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d [ 674.213639][ C0] R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000 [ 674.213648][ C0] R13: ffffffff8e097b40 R14: ffffffff9088b4d0 R15: 0000000000000000 [ 674.213657][ C0] FS: 0000000000000000(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 674.213672][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 674.213682][ C0] CR2: 00007f6d6900ec3b CR3: 0000000074426000 CR4: 00000000003526f0 [ 674.213691][ C0] Call Trace: [ 674.213695][ C0] [ 674.213700][ C0] default_idle+0x13/0x20 [ 674.213718][ C0] default_idle_call+0x6c/0xb0 [ 674.213737][ C0] do_idle+0x38d/0x510 [ 674.213758][ C0] ? __pfx_do_idle+0x10/0x10 [ 674.213780][ C0] cpu_startup_entry+0x4f/0x60 [ 674.213800][ C0] rest_init+0x16b/0x2b0 [ 674.213811][ C0] ? acpi_subsystem_init+0x133/0x180 [ 674.213826][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 674.213841][ C0] start_kernel+0x3ef/0x4d0 [ 674.213863][ C0] x86_64_start_reservations+0x18/0x30 [ 674.213883][ C0] x86_64_start_kernel+0x130/0x190 [ 674.213904][ C0] common_startup_64+0x13e/0x148 [ 674.213926][ C0]